ause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.208' (ECDSA) to the list of known hosts. 2019/04/07 15:49:20 fuzzer started 2019/04/07 15:49:22 dialing manager at 10.128.0.26:34543 2019/04/07 15:49:23 syscalls: 2408 2019/04/07 15:49:23 code coverage: enabled 2019/04/07 15:49:23 comparison tracing: enabled 2019/04/07 15:49:23 extra coverage: extra coverage is not supported by the kernel 2019/04/07 15:49:23 setuid sandbox: enabled 2019/04/07 15:49:23 namespace sandbox: enabled 2019/04/07 15:49:23 Android sandbox: /sys/fs/selinux/policy does not exist 2019/04/07 15:49:23 fault injection: enabled 2019/04/07 15:49:23 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/04/07 15:49:23 net packet injection: enabled 2019/04/07 15:49:23 net device setup: enabled 15:51:30 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet(0x2, 0x0, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10) syzkaller login: [ 176.674683][ T7773] IPVS: ftp: loaded support on port[0] = 21 15:51:30 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x15, &(0x7f0000d84ffc), 0x4) [ 176.796124][ T7773] chnl_net:caif_netlink_parms(): no params data found [ 176.852000][ T7773] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.860221][ T7773] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.869564][ T7773] device bridge_slave_0 entered promiscuous mode [ 176.878851][ T7773] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.885994][ T7773] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.909186][ T7773] device bridge_slave_1 entered promiscuous mode [ 176.939843][ T7773] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 176.955741][ T7776] IPVS: ftp: loaded support on port[0] = 21 [ 176.965776][ T7773] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 176.996397][ T7773] team0: Port device team_slave_0 added [ 177.006792][ T7773] team0: Port device team_slave_1 added 15:51:30 executing program 2: rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000380)='vfat\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 177.100231][ T7773] device hsr_slave_0 entered promiscuous mode [ 177.138751][ T7773] device hsr_slave_1 entered promiscuous mode [ 177.241931][ T7776] chnl_net:caif_netlink_parms(): no params data found [ 177.265548][ T7773] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.272819][ T7773] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.280595][ T7773] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.287791][ T7773] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.312614][ T7779] IPVS: ftp: loaded support on port[0] = 21 [ 177.337111][ T7776] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.344707][ T7776] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.352790][ T7776] device bridge_slave_0 entered promiscuous mode [ 177.372166][ T7776] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.380666][ T7776] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.389782][ T7776] device bridge_slave_1 entered promiscuous mode [ 177.423042][ T7776] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 177.453192][ T7776] bond0: Enslaving bond_slave_1 as an active interface with an up link 15:51:31 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x5, 0x5, 0x1000000000000914, 0x4000000005}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xd, 0x81, 0x4, 0x4, 0x0, r0}, 0x2c) [ 177.486456][ T7776] team0: Port device team_slave_0 added [ 177.494777][ T7776] team0: Port device team_slave_1 added [ 177.557830][ T7773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.680058][ T7776] device hsr_slave_0 entered promiscuous mode 15:51:31 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000140)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = dup2(r1, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x131f64) syz_execute_func(&(0x7f00000000c0)="410f01f9c4e1f573d50664ff0941c3c4e2c99758423e46d87312660fd2323e0f1110d4b842419dcccc") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f00000003c0), 0x4) dup2(r0, r2) ioctl$EVIOCGVERSION(r2, 0x80044501, 0x0) [ 177.737640][ T7776] device hsr_slave_1 entered promiscuous mode [ 177.796753][ T7776] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.803892][ T7776] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.811289][ T7776] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.818400][ T7776] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.870708][ T3000] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 177.900430][ T3000] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.909058][ T3000] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.927691][ T3000] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 177.938405][ T3000] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.945959][ T3000] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.971085][ T7773] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.974273][ T7785] IPVS: ftp: loaded support on port[0] = 21 [ 177.981184][ T7782] IPVS: ftp: loaded support on port[0] = 21 [ 177.990152][ T7779] chnl_net:caif_netlink_parms(): no params data found 15:51:31 executing program 5: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x8}}}}}, 0x0) [ 178.031163][ T3000] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 178.041948][ T3000] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 178.055955][ T3000] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.063119][ T3000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.076466][ T3000] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 178.085324][ T3000] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 178.098298][ T3000] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.105359][ T3000] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.114034][ T3000] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 178.156943][ T7786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 178.170864][ T7789] IPVS: ftp: loaded support on port[0] = 21 [ 178.191556][ T7786] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 178.202818][ T7786] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 178.212500][ T177] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 178.269724][ T7779] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.276814][ T7779] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.285090][ T7779] device bridge_slave_0 entered promiscuous mode [ 178.300429][ T7776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.316203][ T7779] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.323387][ T7779] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.331528][ T7779] device bridge_slave_1 entered promiscuous mode [ 178.338769][ T177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 178.347230][ T177] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 178.366039][ T7773] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 178.377171][ T7773] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 178.402404][ T7776] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.415810][ T177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 178.425141][ T177] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 178.434542][ T177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 178.443013][ T177] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 178.451404][ T177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 178.459265][ T177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 178.466823][ T177] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 178.490706][ T7779] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 178.513728][ T7779] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 178.540537][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 178.549239][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 178.557669][ T3759] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.564711][ T3759] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.572348][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 178.581126][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 178.589531][ T3759] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.596572][ T3759] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.604191][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 178.658687][ T7779] team0: Port device team_slave_0 added [ 178.668936][ T7773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.678136][ T7784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 178.690928][ T7785] chnl_net:caif_netlink_parms(): no params data found [ 178.700782][ T7779] team0: Port device team_slave_1 added [ 178.729356][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 178.743160][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 178.752392][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 178.761452][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 178.770335][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 178.812641][ T7782] chnl_net:caif_netlink_parms(): no params data found 15:51:32 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x80402) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000280)="d1", 0x1}], 0x1) [ 178.872808][ T177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 178.882104][ T177] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready 15:51:32 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) chmod(&(0x7f00000005c0)='./bus\x00', 0x7) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) writev(r2, &(0x7f0000000540)=[{&(0x7f0000000500)="0e1ed0731368e35749c0aaaba299ec7cba65d086", 0x14}], 0x1) [ 178.940152][ T7779] device hsr_slave_0 entered promiscuous mode [ 178.957930][ T7779] device hsr_slave_1 entered promiscuous mode [ 179.034975][ T7785] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.043450][ T7785] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.053280][ T7785] device bridge_slave_0 entered promiscuous mode [ 179.064100][ T7785] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.072229][ T7785] bridge0: port 2(bridge_slave_1) entered disabled state 15:51:32 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_bridge\x00', 0x0}) sendmmsg(r0, &(0x7f0000006ec0)=[{{&(0x7f0000000600)=@can={0x1d, r1}, 0x80, 0x0}}], 0x1, 0x40000) [ 179.081347][ T7785] device bridge_slave_1 entered promiscuous mode 15:51:33 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x4c) [ 179.145420][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 179.164705][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready 15:51:33 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) writev(r2, &(0x7f0000000540)=[{&(0x7f0000000740)="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", 0xec7}], 0x1) [ 179.189306][ T7776] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 179.208244][ T7782] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.215335][ T7782] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.223705][ T7782] device bridge_slave_0 entered promiscuous mode [ 179.233431][ T7785] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 179.276179][ T7779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.283515][ T7782] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.292055][ T7782] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.300148][ T7782] device bridge_slave_1 entered promiscuous mode [ 179.308625][ T7785] bond0: Enslaving bond_slave_1 as an active interface with an up link 15:51:33 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000004c0)='cgroup.procs\x00', 0x2, 0x0) preadv(r1, &(0x7f0000000940)=[{&(0x7f0000001a00)=""/179, 0xb3}], 0x1, 0x0) close(r1) [ 179.363985][ T7776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.388331][ T7789] chnl_net:caif_netlink_parms(): no params data found [ 179.413575][ T7785] team0: Port device team_slave_0 added [ 179.430018][ T177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 179.440527][ T177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 179.450163][ T7782] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 179.467024][ T7779] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.491992][ T7785] team0: Port device team_slave_1 added [ 179.504043][ T7782] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 179.521241][ T177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 179.530244][ T177] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 179.539639][ T177] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.546706][ T177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.554699][ T177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 179.563610][ T177] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 179.572331][ T177] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.579816][ T177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.587663][ T177] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 179.605537][ T177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready 15:51:33 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) capget(0x0, 0x0) r1 = gettid() rt_sigqueueinfo(0x0, 0x0, 0x0) r2 = dup(r0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) dup2(r0, r0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000044000)) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) tkill(r1, 0x1000000000015) [ 179.669891][ T7782] team0: Port device team_slave_0 added 15:51:33 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='numa_maps\x00\xb5\xc6.\x9e\x8d\xe9\xf2Cd\n\xdf\x800x0, 0x10, &(0x7f0000f3eff0)=[@in={0x2, 0x0, @local={0xac, 0x2c0, 0xffffffffffffffff}}]}, &(0x7f00000001c0)=0x10) shutdown(r0, 0x2000040000000002) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080)={r1}, 0x8) [ 181.206737][ T7786] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 181.220065][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 181.258937][ T7786] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 181.271930][ T7786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 181.294869][ T7786] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 181.304158][ T7786] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 181.312739][ T7786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 181.321861][ T7786] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 181.331871][ T7786] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 181.359502][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 181.368202][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 181.376512][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 181.397790][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 181.413899][ T7785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.423991][ T7789] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 181.465105][ T7789] 8021q: adding VLAN 0 to HW filter on device batadv0 15:51:35 executing program 4: r0 = socket$inet(0x10, 0x2, 0x0) ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422) close(r0) socket$unix(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) lsetxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, {0xa, 0x0, 0x0, @local}}, 0x5c) 15:51:35 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='cpuset\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, 0x0) 15:51:35 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r0, 0xc028ae92, &(0x7f0000000040)={0xffff, 0x15}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) add_key(0x0, 0x0, &(0x7f0000000540), 0x0, 0xfffffffffffffffb) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000600)) syz_open_pts(0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0xfffffffffffffff1, &(0x7f00000001c0)=0xd) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) perf_event_open(&(0x7f0000001440)={0x1, 0x70, 0x3, 0x3, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, 0x0, 0x0, 0x6, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x9, 0x40, 0x2, 0x0, 0x0, 0x0, 0xa7f8, 0x6, 0x80000000, 0x10000, 0x2, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0x10001, 0x6, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x200, 0x0, 0x0, 0xe}, 0x0, 0x0, r1, 0x8) accept$alg(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000001300)={[0xf000, 0x14004], 0x7, 0x22, 0x7fc}) getdents(r2, &(0x7f0000000240)=""/4096, 0xfcb8) 15:51:35 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_wait(r1, &(0x7f0000000000)=[{}], 0x1, 0x0) 15:51:35 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='wchan\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000237, 0x0) 15:51:35 executing program 5: sync() add_key$user(0x0, &(0x7f0000000040)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) [ 181.711161][ C0] hrtimer: interrupt took 35668 ns 15:51:35 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000f2cff4)={0x80002003}) epoll_wait(r1, &(0x7f0000000000)=[{}], 0x1, 0x0) 15:51:35 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_wait(r1, &(0x7f0000000000)=[{}], 0x1, 0x0) 15:51:35 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0}) 15:51:35 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) close(0xffffffffffffffff) syz_open_dev$loop(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x2004e20}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f000031aff8)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f00000003c0)={0xffffffffffffffff}) sendmsg$rds(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1, &(0x7f0000001b40)}, 0x0) 15:51:35 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_wait(r1, &(0x7f0000000000)=[{}], 0x1, 0x0) 15:51:35 executing program 3: pipe(&(0x7f0000002480)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4) bind$inet(r3, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000280)="9d", 0x1}], 0x1, 0x0) write$binfmt_misc(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="ac151d04dff964a6237c65c5305376ac87299c47b3b4b61a26cea13455eaa86e2b9da914d07b6ba3f6373d6ff7550a31351bffc659bc660a42d7cfc8ae97e24344b24f6dfecbe433fc38a4936612f48b7ae3f0ae75dd8a5e045f23c40b6942f8a0c57eaf6f721aceedcd870b5ca6836ee634ee81970e64cf0474b915a7ab550ae9c9f342e0a3d5cf3efb12c9f985dcb6b30a643be399cb593bf43625a3be8f0e3d5ff1077871293321269cc6f212d4142a1a3ea71e1420033b2b2edfd67b471e655ece8034582dfd"], 0xc8) splice(r0, 0x0, r2, 0x0, 0x180000010005, 0x0) 15:51:35 executing program 4: r0 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="0559b7d7005e59ce2a671896a1612f0500000075c5418889206e112d5cb2fba56ecef1d9d38a05edb1623bad9136a3d0bb4496db906ed4032f"], 0x39) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r1, 0x0, 0x0) 15:51:35 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r0, 0xc028ae92, &(0x7f0000000040)={0xffff, 0x15}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) add_key(0x0, 0x0, &(0x7f0000000540), 0x0, 0xfffffffffffffffb) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000600)) syz_open_pts(0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0xfffffffffffffff1, &(0x7f00000001c0)=0xd) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) perf_event_open(&(0x7f0000001440)={0x1, 0x70, 0x3, 0x3, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, 0x0, 0x0, 0x6, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x9, 0x40, 0x2, 0x0, 0x0, 0x0, 0xa7f8, 0x6, 0x80000000, 0x10000, 0x2, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0x10001, 0x6, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x200, 0x0, 0x0, 0xe}, 0x0, 0x0, r1, 0x8) accept$alg(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000001300)={[0xf000, 0x14004], 0x7, 0x22, 0x7fc}) getdents(r2, &(0x7f0000000240)=""/4096, 0xfcb8) [ 182.058898][ T7910] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 15:51:36 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) 15:51:36 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0}) 15:51:36 executing program 4: r0 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="0559b7d7005e59ce2a671896a1612f0500000075c5418889206e112d5cb2fba56ecef1d9d38a05edb1623bad9136a3d0bb4496db906ed4032f"], 0x39) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r1, 0x0, 0x0) 15:51:36 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x653}) 15:51:36 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) 15:51:36 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) close(0xffffffffffffffff) syz_open_dev$loop(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x2004e20}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f000031aff8)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f00000003c0)={0xffffffffffffffff}) sendmsg$rds(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1, &(0x7f0000001b40)}, 0x0) 15:51:36 executing program 1: syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r0) r1 = memfd_create(&(0x7f00000000c0), 0x0) write(r1, &(0x7f00000001c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x447d, 0x0) [ 182.394624][ T7945] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. 15:51:36 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0}) 15:51:36 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) 15:51:36 executing program 1: syz_execute_func(&(0x7f0000000040)="410f01f9c4e1f573d50664ff0941c3c4e2c99758423e46d8731266420fe2e33e0f1110d4b842419dcccc") clone(0x2102009ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000480)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x129f0817) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendto$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 15:51:36 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000040)) 15:51:36 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) 15:51:36 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0}) 15:51:36 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) add_key$keyring(0x0, &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) flock(0xffffffffffffffff, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0xff4a) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) [ 183.820575][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 183.820591][ T26] audit: type=1804 audit(1554652297.690:31): pid=7990 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir774559944/syzkaller.chcD6Z/6/memory.events" dev="sda1" ino=16546 res=1 [ 183.852060][ T26] audit: type=1800 audit(1554652297.690:32): pid=7990 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=16546 res=0 [ 183.881279][ T26] audit: type=1804 audit(1554652297.690:33): pid=7995 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir774559944/syzkaller.chcD6Z/6/memory.events" dev="sda1" ino=16546 res=1 [ 183.911238][ T26] audit: type=1800 audit(1554652297.690:34): pid=7995 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=16546 res=0 15:51:39 executing program 4: r0 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="0559b7d7005e59ce2a671896a1612f0500000075c5418889206e112d5cb2fba56ecef1d9d38a05edb1623bad9136a3d0bb4496db906ed4032f"], 0x39) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r1, 0x0, 0x0) 15:51:39 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) 15:51:39 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x20000200080003, 0x3) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000280)=0x40, 0x4) recvmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000001700)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000001680)}}], 0x40000000000028c, 0x22, 0x0) 15:51:39 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, &(0x7f0000000100)={0x63}, 0x8) 15:51:39 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0}) 15:51:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}) 15:51:39 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0}) 15:51:39 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) 15:51:39 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xf7d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x9) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000200)='9', 0x1}], 0x1) 15:51:39 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000200)) 15:51:39 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) 15:51:39 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0}) 15:51:42 executing program 3: 15:51:42 executing program 4: r0 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="0559b7d7005e59ce2a671896a1612f0500000075c5418889206e112d5cb2fba56ecef1d9d38a05edb1623bad9136a3d0bb4496db906ed4032f"], 0x39) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r1, 0x0, 0x0) 15:51:42 executing program 5: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000634000/0x4000)=nil, 0x4000}}) r0 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x0, 0x0) ioctl$EVIOCGKEY(r0, 0xc0487c04, &(0x7f0000000000)=""/226) 15:51:42 executing program 2: r0 = epoll_create1(0x0) close(r0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000c85000)) 15:51:42 executing program 1: 15:51:42 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhost-vsock\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0}) 15:51:42 executing program 3: 15:51:42 executing program 1: 15:51:42 executing program 3: 15:51:42 executing program 5: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000634000/0x4000)=nil, 0x4000}}) r0 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x0, 0x0) ioctl$EVIOCGKEY(r0, 0xc0487c04, &(0x7f0000000000)=""/226) 15:51:42 executing program 2: r0 = epoll_create1(0x0) close(r0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000c85000)) 15:51:42 executing program 1: 15:51:42 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhost-vsock\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0}) 15:51:45 executing program 4: r0 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="0559b7d7005e59ce2a671896a1612f0500000075c5418889206e112d5cb2fba56ecef1d9d38a05edb1623bad9136a3d0bb4496db906ed4032f"], 0x39) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) 15:51:45 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x3, 0x400, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 15:51:45 executing program 5: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000634000/0x4000)=nil, 0x4000}}) r0 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x0, 0x0) ioctl$EVIOCGKEY(r0, 0xc0487c04, &(0x7f0000000000)=""/226) 15:51:45 executing program 2: r0 = epoll_create1(0x0) close(r0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000c85000)) 15:51:45 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) semop(0x0, &(0x7f0000000140)=[{0x0, 0x3}], 0x1) semop(0x0, &(0x7f0000000080)=[{}], 0x1) semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0x0, 0x1800}], 0x1, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) 15:51:45 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhost-vsock\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0}) 15:51:45 executing program 2: r0 = epoll_create1(0x0) close(0xffffffffffffffff) openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000c85000)) 15:51:45 executing program 5: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000634000/0x4000)=nil, 0x4000}}) r0 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x0, 0x0) ioctl$EVIOCGKEY(r0, 0xc0487c04, &(0x7f0000000000)=""/226) 15:51:45 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) semop(0x0, &(0x7f0000000140)=[{0x0, 0x3}], 0x1) semop(0x0, &(0x7f0000000080)=[{}], 0x1) semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0x0, 0x1800}], 0x1, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) 15:51:45 executing program 0: ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0}) 15:51:45 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x72}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000002fe0)={{&(0x7f0000909000/0x4000)=nil, 0x4000}, 0x1}) mremap(&(0x7f000090a000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) clone(0x0, 0x0, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000180)=""/100, 0x77) 15:51:45 executing program 5: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000634000/0x4000)=nil, 0x4000}}) ioctl$EVIOCGKEY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000000)=""/226) 15:51:48 executing program 4: r0 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="0559b7d7005e59ce2a671896a1612f0500000075c5418889206e112d5cb2fba56ecef1d9d38a05edb1623bad9136a3d0bb4496db906ed4032f"], 0x39) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) 15:51:48 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 15:51:48 executing program 0: ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0}) 15:51:48 executing program 2: r0 = epoll_create1(0x0) close(0xffffffffffffffff) openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000c85000)) 15:51:48 executing program 1: lchown(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) 15:51:48 executing program 5: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000634000/0x4000)=nil, 0x4000}}) ioctl$EVIOCGKEY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000000)=""/226) 15:51:48 executing program 3: r0 = semget$private(0x0, 0x207, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0x2}, {}], 0x2) semctl$GETALL(r0, 0x0, 0xd, &(0x7f00000000c0)=""/210) 15:51:48 executing program 1: r0 = msgget$private(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) msgsnd(r0, &(0x7f0000000040)=ANY=[@ANYBLOB=' '], 0x1, 0x0) msgctl$IPC_RMID(r0, 0x0) 15:51:48 executing program 5: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000634000/0x4000)=nil, 0x4000}}) ioctl$EVIOCGKEY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000000)=""/226) 15:51:48 executing program 2: r0 = epoll_create1(0x0) close(0xffffffffffffffff) openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000c85000)) 15:51:48 executing program 0: ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0}) 15:51:48 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x89a0, &(0x7f0000000180)=@get={0xf, &(0x7f0000000000)=""/100, 0x3f}) 15:51:51 executing program 4: r0 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="0559b7d7005e59ce2a671896a1612f0500000075c5418889206e112d5cb2fba56ecef1d9d38a05edb1623bad9136a3d0bb4496db906ed4032f"], 0x39) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$cont(0x7, r1, 0x0, 0x0) 15:51:51 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(0xffffffffffffffff) openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) 15:51:51 executing program 5: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x0, 0x0) ioctl$EVIOCGKEY(r0, 0xc0487c04, &(0x7f0000000000)=""/226) 15:51:51 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) read$eventfd(r0, 0x0, 0x0) 15:51:51 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0}) 15:51:51 executing program 3: r0 = semget$private(0x0, 0x207, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0x2}, {}], 0x2) semctl$GETALL(r0, 0x0, 0xd, &(0x7f00000000c0)=""/210) 15:51:51 executing program 5: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x0, 0x0) ioctl$EVIOCGKEY(r0, 0xc0487c04, &(0x7f0000000000)=""/226) 15:51:51 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(0xffffffffffffffff) openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) 15:51:51 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0}) 15:51:51 executing program 5: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x0, 0x0) ioctl$EVIOCGKEY(r0, 0xc0487c04, &(0x7f0000000000)=""/226) 15:51:51 executing program 1: r0 = socket$inet_tcp(0x2, 0x3, 0x6) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) sendmsg(r0, &(0x7f0000000500)={&(0x7f0000000080)=@in={0x2, 0x0, @multicast1}, 0x80, 0x0}, 0x8000) write$binfmt_misc(r0, &(0x7f0000000100)={'z0z0'}, 0xffeb) 15:51:51 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(0xffffffffffffffff) openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) [ 197.704888][ T8192] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.1/8192 [ 197.714520][ T8192] caller is sk_mc_loop+0x1d/0x210 [ 197.719708][ T8192] CPU: 1 PID: 8192 Comm: syz-executor.1 Not tainted 5.1.0-rc3-next-20190405 #19 [ 197.719729][ T8192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 197.719735][ T8192] Call Trace: [ 197.719757][ T8192] dump_stack+0x172/0x1f0 [ 197.719783][ T8192] __this_cpu_preempt_check+0x246/0x270 [ 197.719806][ T8192] sk_mc_loop+0x1d/0x210 [ 197.719825][ T8192] ip_mc_output+0x2ef/0xf70 [ 197.739154][ T8192] ? __ip_queue_xmit+0x1bf0/0x1bf0 [ 197.739171][ T8192] ? __ip_make_skb+0xf15/0x1820 [ 197.739189][ T8192] ? ip_append_data.part.0+0x170/0x170 [ 197.739203][ T8192] ? dst_release+0x62/0xb0 [ 197.739219][ T8192] ? __ip_make_skb+0xf93/0x1820 [ 197.739235][ T8192] ip_local_out+0xc4/0x1b0 [ 197.739251][ T8192] ip_send_skb+0x42/0xf0 [ 197.739266][ T8192] ip_push_pending_frames+0x64/0x80 [ 197.739291][ T8192] raw_sendmsg+0x1e6d/0x2f20 [ 197.794480][ T8192] ? compat_raw_getsockopt+0x100/0x100 [ 197.809690][ T8192] ? __switch_to_asm+0x40/0x70 [ 197.809713][ T8192] ? __schedule+0x81f/0x1cc0 [ 197.809741][ T8192] ? ___might_sleep+0x163/0x280 [ 197.809763][ T8192] ? ___might_sleep+0x163/0x280 [ 197.809778][ T8192] ? __might_sleep+0x95/0x190 [ 197.809796][ T8192] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 197.809810][ T8192] ? aa_sk_perm+0x288/0x880 [ 197.809833][ T8192] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 197.809853][ T8192] inet_sendmsg+0x147/0x5e0 15:51:51 executing program 4: r0 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="0559b7d7005e59ce2a671896a1612f0500000075c5418889206e112d5cb2fba56ecef1d9d38a05edb1623bad9136a3d0bb4496db906ed4032f"], 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r1, 0x0, 0x0) 15:51:51 executing program 5: ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000634000/0x4000)=nil, 0x4000}}) r0 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x0, 0x0) ioctl$EVIOCGKEY(r0, 0xc0487c04, &(0x7f0000000000)=""/226) 15:51:51 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) [ 197.833647][ T8192] ? compat_raw_getsockopt+0x100/0x100 [ 197.833661][ T8192] ? inet_sendmsg+0x147/0x5e0 [ 197.833677][ T8192] ? ipip_gro_receive+0x100/0x100 [ 197.833696][ T8192] sock_sendmsg+0xdd/0x130 [ 197.833714][ T8192] sock_write_iter+0x27c/0x3e0 [ 197.833737][ T8192] ? sock_sendmsg+0x130/0x130 [ 197.869041][ T8192] ? aa_path_link+0x460/0x460 [ 197.869065][ T8192] ? find_held_lock+0x35/0x130 [ 197.869081][ T8192] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 197.869102][ T8192] ? iov_iter_init+0xee/0x220 [ 197.903253][ T8192] new_sync_write+0x4c7/0x760 [ 197.907945][ T8192] ? default_llseek+0x2e0/0x2e0 [ 197.907970][ T8192] ? common_file_perm+0x238/0x720 [ 197.907986][ T8192] ? __fget+0x381/0x550 [ 197.908007][ T8192] ? apparmor_file_permission+0x25/0x30 [ 197.908024][ T8192] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 197.908041][ T8192] ? security_file_permission+0x94/0x380 [ 197.908068][ T8192] __vfs_write+0xe4/0x110 [ 197.908090][ T8192] vfs_write+0x20c/0x580 [ 197.927634][ T8192] ksys_write+0xea/0x1f0 15:51:51 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) 15:51:51 executing program 5: ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000634000/0x4000)=nil, 0x4000}}) r0 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x0, 0x0) ioctl$EVIOCGKEY(r0, 0xc0487c04, &(0x7f0000000000)=""/226) [ 197.927654][ T8192] ? __ia32_sys_read+0xb0/0xb0 [ 197.927671][ T8192] ? do_syscall_64+0x26/0x610 [ 197.927686][ T8192] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 197.927699][ T8192] ? do_syscall_64+0x26/0x610 [ 197.927721][ T8192] __x64_sys_write+0x73/0xb0 [ 197.927739][ T8192] do_syscall_64+0x103/0x610 [ 197.927757][ T8192] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 197.927768][ T8192] RIP: 0033:0x4582b9 [ 197.927790][ T8192] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 198.011498][ T8192] RSP: 002b:00007f07fae7bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 198.019921][ T8192] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000004582b9 [ 198.027912][ T8192] RDX: 000000000000ffeb RSI: 0000000020000100 RDI: 0000000000000003 [ 198.035899][ T8192] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 198.043890][ T8192] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f07fae7c6d4 [ 198.051874][ T8192] R13: 00000000004c7a29 R14: 00000000004ddad8 R15: 00000000ffffffff 15:51:52 executing program 3: r0 = semget$private(0x0, 0x207, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0x2}, {}], 0x2) semctl$GETALL(r0, 0x0, 0xd, &(0x7f00000000c0)=""/210) 15:51:52 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) 15:51:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x1df, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x16}]}, 0x30}}, 0x0) 15:51:52 executing program 5: ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000634000/0x4000)=nil, 0x4000}}) r0 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x0, 0x0) ioctl$EVIOCGKEY(r0, 0xc0487c04, &(0x7f0000000000)=""/226) 15:51:52 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0}) 15:51:52 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000634000/0x4000)=nil, 0x4000}}) r0 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x0, 0x0) ioctl$EVIOCGKEY(r0, 0xc0487c04, &(0x7f0000000000)=""/226) 15:51:52 executing program 2: r0 = epoll_create1(0x0) epoll_create1(0x0) close(r0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000c85000)) [ 198.473174][ T8225] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 15:51:54 executing program 4: r0 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="0559b7d7005e59ce2a671896a1612f0500000075c5418889206e112d5cb2fba56ecef1d9d38a05edb1623bad9136a3d0bb4496db906ed4032f"], 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r1, 0x0, 0x0) 15:51:54 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0}) 15:51:54 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000634000/0x4000)=nil, 0x4000}}) r0 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x0, 0x0) ioctl$EVIOCGKEY(r0, 0xc0487c04, &(0x7f0000000000)=""/226) 15:51:54 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x8000001000008912, &(0x7f0000000380)="0adc1f123c12a41d88b070") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet_sctp(r1, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000640), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000084000000050000001000000000000000"], 0x18}, 0x0) 15:51:54 executing program 2: r0 = epoll_create1(0x0) epoll_create1(0x0) close(r0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000c85000)) 15:51:54 executing program 3: r0 = semget$private(0x0, 0x207, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0x2}, {}], 0x2) semctl$GETALL(r0, 0x0, 0xd, &(0x7f00000000c0)=""/210) 15:51:54 executing program 1: 15:51:54 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000634000/0x4000)=nil, 0x4000}}) r0 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x0, 0x0) ioctl$EVIOCGKEY(r0, 0xc0487c04, &(0x7f0000000000)=""/226) 15:51:54 executing program 2: r0 = epoll_create1(0x0) epoll_create1(0x0) close(r0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000c85000)) 15:51:54 executing program 4: r0 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="0559b7d7005e59ce2a671896a1612f0500000075c5418889206e112d5cb2fba56ecef1d9d38a05edb1623bad9136a3d0bb4496db906ed4032f"], 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r1, 0x0, 0x0) 15:51:54 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x400000000000002e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x104) 15:51:54 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0}) 15:51:55 executing program 5: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000634000/0x4000)=nil, 0x4000}}) r0 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x0, 0x0) ioctl$EVIOCGKEY(r0, 0xc0487c04, &(0x7f0000000000)=""/226) 15:51:55 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000c85000)) 15:51:55 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0}) 15:51:55 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x11b) recvmsg(r0, &(0x7f00000007c0)={&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, 0x0}, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000200)) 15:51:55 executing program 5: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000634000/0x4000)=nil, 0x4000}}) r0 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x0, 0x0) ioctl$EVIOCGKEY(r0, 0xc0487c04, &(0x7f0000000000)=""/226) 15:51:55 executing program 3: r0 = semget$private(0x0, 0x207, 0x0) semctl$GETALL(r0, 0x0, 0xd, &(0x7f00000000c0)=""/210) 15:51:55 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000c85000)) 15:51:55 executing program 5: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000634000/0x4000)=nil, 0x4000}}) r0 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x0, 0x0) ioctl$EVIOCGKEY(r0, 0xc0487c04, &(0x7f0000000000)=""/226) 15:51:55 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0}) 15:51:58 executing program 4: r0 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r1, 0x0, 0x0) 15:51:58 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000c85000)) 15:51:58 executing program 3: r0 = semget$private(0x0, 0x207, 0x0) semctl$GETALL(r0, 0x0, 0xd, &(0x7f00000000c0)=""/210) 15:51:58 executing program 5: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r0 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x0, 0x0) ioctl$EVIOCGKEY(r0, 0xc0487c04, &(0x7f0000000000)=""/226) 15:51:58 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0}) 15:51:58 executing program 1: getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffff9c, 0x84, 0x7b, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, 0x0) r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x24, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0xc, 0x5, [@IFLA_BRPORT_GUARD={0x8}]}}}]}, 0x44}}, 0x0) 15:51:58 executing program 3: r0 = semget$private(0x0, 0x207, 0x0) semctl$GETALL(r0, 0x0, 0xd, &(0x7f00000000c0)=""/210) 15:51:58 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) 15:51:58 executing program 5: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r0 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x0, 0x0) ioctl$EVIOCGKEY(r0, 0xc0487c04, &(0x7f0000000000)=""/226) 15:51:58 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0}) [ 204.241316][ T8319] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 15:51:58 executing program 3: semop(0x0, &(0x7f0000000080)=[{0x0, 0x2}, {}], 0x2) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f00000000c0)=""/210) [ 204.311464][ T8333] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 15:51:58 executing program 1: getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffff9c, 0x84, 0x7b, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, 0x0) r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x24, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0xc, 0x5, [@IFLA_BRPORT_GUARD={0x8}]}}}]}, 0x44}}, 0x0) [ 204.500138][ T8347] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 15:52:01 executing program 4: r0 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r1, 0x0, 0x0) 15:52:01 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) 15:52:01 executing program 5: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r0 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x0, 0x0) ioctl$EVIOCGKEY(r0, 0xc0487c04, &(0x7f0000000000)=""/226) 15:52:01 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0}) 15:52:01 executing program 1: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000500)={0x0, 0xffffffffffffff9c, 0x0, 0x5, &(0x7f0000000480)='eth0\x00'}, 0x30) fcntl$getownex(0xffffffffffffff9c, 0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f00000001c0)=[{0x3, 0x8}, {0x0, 0x3f}, {0x0, 0x1ff, 0x1000}, {0x2}], 0x4) r0 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x80201) ioctl$NBD_DO_IT(r0, 0xab03) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) getsockopt$sock_timeval(r1, 0x1, 0x0, &(0x7f0000000380), &(0x7f00000003c0)=0x10) ioctl$SNDRV_TIMER_IOCTL_STATUS(r1, 0x80605414, &(0x7f0000000700)=""/61) openat$uhid(0xffffffffffffff9c, &(0x7f0000000340)='/dev/uhid\x00', 0x2, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x100, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/snapshot\x00', 0x80001, 0x0) 15:52:01 executing program 3: semop(0x0, 0x0, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f00000000c0)=""/210) 15:52:01 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) 15:52:01 executing program 3: semop(0x0, 0x0, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f00000000c0)=""/210) 15:52:01 executing program 5: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000634000/0x4000)=nil, 0x4000}}) r0 = syz_open_dev$media(0x0, 0x0, 0x0) ioctl$EVIOCGKEY(r0, 0xc0487c04, &(0x7f0000000000)=""/226) 15:52:01 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0}) 15:52:01 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) msgctl$IPC_SET(0x0, 0x1, &(0x7f000079df88)) msgsnd(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="20678dd949dea409"], 0x1, 0x0) msgctl$IPC_RMID(0x0, 0x0) 15:52:01 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0})