[ 39.782873][ T26] audit: type=1800 audit(1554684889.865:25): pid=7856 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 39.816970][ T26] audit: type=1800 audit(1554684889.865:26): pid=7856 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 39.844156][ T26] audit: type=1800 audit(1554684889.865:27): pid=7856 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [....] startpar: service(s) returned failure: ssh ...[?25l[?1c7[FAIL8[?25h[?0c failed! Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.51' (ECDSA) to the list of known hosts. 2019/04/08 00:55:00 fuzzer started 2019/04/08 00:55:03 dialing manager at 10.128.0.26:34543 2019/04/08 00:55:03 syscalls: 2408 2019/04/08 00:55:03 code coverage: enabled 2019/04/08 00:55:03 comparison tracing: enabled 2019/04/08 00:55:03 extra coverage: extra coverage is not supported by the kernel 2019/04/08 00:55:03 setuid sandbox: enabled 2019/04/08 00:55:03 namespace sandbox: enabled 2019/04/08 00:55:03 Android sandbox: /sys/fs/selinux/policy does not exist 2019/04/08 00:55:03 fault injection: enabled 2019/04/08 00:55:03 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/04/08 00:55:03 net packet injection: enabled 2019/04/08 00:55:03 net device setup: enabled 00:57:26 executing program 0: socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(r1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, &(0x7f0000000540)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) add_key(&(0x7f0000000600)='syzkaller\x00', &(0x7f0000000640)={'syz', 0x3}, &(0x7f0000000780)="a43774df3a40cd99ed2e95e32b0bc88fdc73cf21de9a71d493c0b6749546981ab463fe7231b45f3ed06b62a8c65c3b871038624e60a6728496b05f74bb5bc85ceefb9d955e22e53b33b9eaf0022f95c3c60b4341a0345ba237d00999b79d6d80364ed1c84d5f8e59c2a5538b4ae996152cf6811f287678dac51797d3bfff9316", 0x80, 0xfffffffffffffff8) request_key(&(0x7f0000000000)='logon\x00', &(0x7f00000001c0)={'syz', 0x3}, &(0x7f00000002c0)='/\x00', 0x0) readahead(0xffffffffffffffff, 0x5, 0xf83) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') getsockname$packet(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10811, r0, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000300)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) syzkaller login: [ 196.547299][ T8045] IPVS: ftp: loaded support on port[0] = 21 00:57:26 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000300)) r1 = socket$inet6(0xa, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x9) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='net/netlink\x00m\x10\x1bDv\xe5j@\xca\x98\"X\xc7k\xb9u\x17w\xed*\xb23\xa9#\xcb\x12\x97\xe9U\x18\xd4\x8d\b\xfc\x845j\x18z\r\xd6\xea\xacE\xd3G\xa9Ki(\xf3\xa3\xfa\xf1\x11(b\am\xd21\x91Q\xbe}\xa3\x8b\r\xc2TR\xa9\tm\x1f\x12hf\xc6\xfa!\x8eK\xd9\x90K\xfa\xc1\x1d\xa9i\x17\a\xdb+\x95Z /\xc9\xafk\xb3!\x05\x17\xcb\x05\tX\x9c~\x85O\x97\x8f\xcc\xcc\xe4\xcb=\xdb\xdf\x1a\x81N\x01>\xdb7\xe3\xe3\xae;3\x8fF\x18\xa4Y `nu\xab!\x9dG\xea\x06\xa7\x83\t\x9b<\x10\xad\a\xb5Ia\xb4f\x97\xb7a4!\xe5h\xabk\x7f\xc4\x9d8\xdb>') preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000500)=""/112, 0x70}], 0x1, 0x4c000000) fsetxattr$security_selinux(r1, &(0x7f0000000280)='security.selinux\x00', &(0x7f0000000380)='system_u:object_r:man_t:s0\x00', 0x1b, 0x0) ioctl$KVM_S390_UCAS_UNMAP(r2, 0x4018ae51, &(0x7f00000001c0)={0x5, 0xaca}) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0xffffffff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xd8e}, 0x1c) open_by_handle_at(r2, &(0x7f0000000400)={0x18, 0x30, "9314180e045a3ca51d7bf2b4f5424be6"}, 0x40080) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000240)={0x1, 0x8, [@local, @empty, @dev={[], 0x26}, @dev={[], 0x19}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @empty, @dev, @broadcast]}) read$FUSE(0xffffffffffffffff, 0x0, 0xffffff7a) r3 = socket$inet6(0xa, 0x3, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x1}, 0x20) r4 = fcntl$getown(0xffffffffffffffff, 0x9) ioctl$BLKFRASET(r2, 0x1264, &(0x7f00000003c0)=0x3) sched_setparam(r4, &(0x7f0000000200)=0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) [ 196.684143][ T8045] chnl_net:caif_netlink_parms(): no params data found [ 196.758933][ T8045] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.766135][ T8045] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.775103][ T8045] device bridge_slave_0 entered promiscuous mode [ 196.799399][ T8045] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.807646][ T8045] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.815733][ T8045] device bridge_slave_1 entered promiscuous mode [ 196.841950][ T8045] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 196.852896][ T8045] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 196.868371][ T8048] IPVS: ftp: loaded support on port[0] = 21 [ 196.888304][ T8045] team0: Port device team_slave_0 added [ 196.895811][ T8045] team0: Port device team_slave_1 added 00:57:27 executing program 2: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$9p_tcp(&(0x7f0000000040)='-27.0.0.1\x00', &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=tcp']) [ 196.980961][ T8045] device hsr_slave_0 entered promiscuous mode [ 197.038255][ T8045] device hsr_slave_1 entered promiscuous mode [ 197.096595][ T8050] IPVS: ftp: loaded support on port[0] = 21 00:57:27 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept$alg(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001280)=[{{0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x1}}], 0x1, 0x0, 0x0) [ 197.137501][ T8045] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.145022][ T8045] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.153514][ T8045] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.160684][ T8045] bridge0: port 1(bridge_slave_0) entered forwarding state 00:57:27 executing program 4: r0 = socket$inet6(0xa, 0x4000000000000003, 0x2) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c) [ 197.433850][ T8054] IPVS: ftp: loaded support on port[0] = 21 [ 197.446212][ T8048] chnl_net:caif_netlink_parms(): no params data found [ 197.515993][ T8045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.565891][ T8050] chnl_net:caif_netlink_parms(): no params data found [ 197.625337][ T2997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 197.640704][ T2997] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.667189][ T2997] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.680208][ T2997] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 197.704016][ T8045] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.734500][ T8048] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.742784][ T8048] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.751149][ T8048] device bridge_slave_0 entered promiscuous mode [ 197.771891][ T8058] IPVS: ftp: loaded support on port[0] = 21 00:57:27 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3380b070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)={0x2, 0x400000000000003, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6}, @sadb_x_nat_t_port={0x1, 0x15}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0x78}}, 0x0) [ 197.800542][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 197.810464][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 197.823786][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.830960][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.842543][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 197.851720][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 197.863894][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.871089][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.882054][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 197.894211][ T8048] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.901946][ T8048] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.910173][ T8048] device bridge_slave_1 entered promiscuous mode [ 197.958846][ T8048] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 197.974222][ T8050] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.983859][ T8050] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.991916][ T8050] device bridge_slave_0 entered promiscuous mode [ 198.000680][ T93] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 198.022254][ T8048] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 198.032123][ T93] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 198.040892][ T93] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 198.050956][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 198.060402][ T8050] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.068379][ T8050] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.076069][ T8050] device bridge_slave_1 entered promiscuous mode [ 198.113948][ T8060] IPVS: ftp: loaded support on port[0] = 21 [ 198.122061][ T8048] team0: Port device team_slave_0 added [ 198.142843][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 198.152078][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 198.161125][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 198.169716][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 198.182869][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 198.191903][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 198.201599][ T8050] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 198.214929][ T8050] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 198.226300][ T8048] team0: Port device team_slave_1 added [ 198.234997][ T8045] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 198.362039][ T8048] device hsr_slave_0 entered promiscuous mode [ 198.427436][ T8048] device hsr_slave_1 entered promiscuous mode [ 198.493789][ T8050] team0: Port device team_slave_0 added [ 198.503661][ T8050] team0: Port device team_slave_1 added [ 198.639924][ T8050] device hsr_slave_0 entered promiscuous mode [ 198.677399][ T8050] device hsr_slave_1 entered promiscuous mode [ 198.719815][ T8054] chnl_net:caif_netlink_parms(): no params data found [ 198.762205][ T8054] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.769548][ T8054] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.778022][ T8054] device bridge_slave_0 entered promiscuous mode [ 198.786391][ T8054] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.793610][ T8054] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.801990][ T8054] device bridge_slave_1 entered promiscuous mode [ 198.822622][ T8045] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.851501][ T8054] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 198.912625][ T8054] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 199.001719][ T8060] chnl_net:caif_netlink_parms(): no params data found [ 199.026518][ T8058] chnl_net:caif_netlink_parms(): no params data found [ 199.072199][ T8054] team0: Port device team_slave_0 added [ 199.080187][ T8054] team0: Port device team_slave_1 added [ 199.146351][ T8060] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.153668][ T8060] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.162279][ T8060] device bridge_slave_0 entered promiscuous mode [ 199.201307][ T8060] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.210480][ T8060] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.219679][ T8060] device bridge_slave_1 entered promiscuous mode [ 199.255362][ C0] hrtimer: interrupt took 34606 ns 00:57:29 executing program 0: 00:57:29 executing program 0: creat(&(0x7f0000002580)='./file0\x00', 0x20000000) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000600)='cgroup\x00', 0x0, &(0x7f000000a000)) [ 199.289771][ T8054] device hsr_slave_0 entered promiscuous mode [ 199.327437][ T8054] device hsr_slave_1 entered promiscuous mode [ 199.351797][ T8075] e cgroup1: Unknown subsys name '' 00:57:29 executing program 0: syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001700)={[{@iocharset={'iocharset', 0x3d, 'maccenteuro'}}]}) [ 199.375126][ T8058] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.382872][ T8058] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.391991][ T8058] device bridge_slave_0 entered promiscuous mode [ 199.422197][ T8050] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.434501][ T8079] hfs: can't find a HFS filesystem on dev loop0 [ 199.447984][ T8058] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.455948][ T8058] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.464238][ T8058] device bridge_slave_1 entered promiscuous mode [ 199.482544][ T8060] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 199.503605][ T8048] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.530223][ T8058] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 199.541556][ T8060] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 199.542598][ T8079] hfs: can't find a HFS filesystem on dev loop0 [ 199.558849][ T8050] 8021q: adding VLAN 0 to HW filter on device team0 00:57:29 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000000)='cp\xfePcc4.Stat\x00', 0x26e1, 0x0) [ 199.584018][ T8048] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.594517][ T8058] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 199.609024][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 199.621869][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 199.630406][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 199.638902][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 199.683330][ T8058] team0: Port device team_slave_0 added [ 199.693970][ T8056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 199.703307][ T8056] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 199.712405][ T8056] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.719560][ T8056] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.757362][ T8058] team0: Port device team_slave_1 added [ 199.769704][ T8060] team0: Port device team_slave_0 added [ 199.779528][ T8056] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 199.789146][ T8056] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 199.799529][ T8056] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 199.808638][ T8056] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.815779][ T8056] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.824506][ T8056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 199.834461][ T8056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready 00:57:29 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000240)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00000000c0)="0204", 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='team_slave_0\x00', 0x10) sendto$inet(r0, &(0x7f0000000300)="f2940100341edb075184c59989000900000000000000a7d300"/39, 0x27, 0x1, 0x0, 0x0) [ 199.853799][ T8056] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 199.866038][ T8056] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.873231][ T8056] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.932395][ T8060] team0: Port device team_slave_1 added [ 199.942614][ T8056] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 199.951142][ T8056] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 199.959974][ T8056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 199.968795][ T8056] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 199.977963][ T8056] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 199.986512][ T8056] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 199.995857][ T8056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 200.004639][ T8056] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 200.014104][ T8056] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 200.023358][ T8056] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready 00:57:30 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) sysinfo(0x0) syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x802c550a, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) [ 200.032209][ T8056] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 200.043667][ T8056] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 200.053122][ T8056] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.060677][ T8056] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.078117][ T8054] 8021q: adding VLAN 0 to HW filter on device bond0 00:57:30 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000540)=""/11, 0x485) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_execute_func(&(0x7f0000000040)="410f01f964ff0941c3c4e2c99758423e46d8731266420fe2e33e0f1110c442019dcc6f") clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000280)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f00000002c0), 0xfd65) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) ioctl$TIOCLINUX5(r0, 0x541c, 0x0) [ 200.163118][ T8058] device hsr_slave_0 entered promiscuous mode [ 200.197378][ T8058] device hsr_slave_1 entered promiscuous mode [ 200.243717][ T8056] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 200.253038][ T8056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 200.262017][ T8056] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 200.270954][ T8056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 200.280003][ T8056] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 200.290339][ T8050] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 200.312782][ T8054] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.333192][ T8056] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 200.342427][ T8056] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 200.356390][ T8056] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 200.366281][ T8056] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 200.377795][ T8056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 200.440205][ T8060] device hsr_slave_0 entered promiscuous mode [ 200.477802][ T8060] device hsr_slave_1 entered promiscuous mode [ 200.517444][ T8056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 200.529116][ T8056] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 200.556903][ T8050] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.569339][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 200.578829][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 200.587829][ T3483] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.594890][ T3483] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.603231][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 200.612336][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 200.621422][ T3483] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.628636][ T3483] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.636488][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 200.645245][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 200.656501][ T8048] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 200.695025][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 200.703195][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 200.715346][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 200.724370][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 200.734141][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 200.742776][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 200.751370][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 200.760103][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 200.768708][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 200.777898][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 200.825118][ T8054] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 200.860708][ T8054] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 200.865687][ T8117] 9pnet: p9_fd_create_tcp (8117): problem connecting socket to -27.0.0.1 [ 200.880641][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 200.893470][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 200.916358][ T8048] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.975590][ T8060] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.993525][ T8054] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.029918][ T8058] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.087508][ T8060] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.099033][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 201.108322][ T3483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 201.126368][ T8058] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.139115][ T93] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 201.154218][ T93] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 201.212789][ T8056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 201.234687][ T8056] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 201.243916][ T8056] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.251074][ T8056] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.277327][ T8056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 201.286095][ T8056] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 201.327447][ T8056] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.334541][ T8056] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.342603][ T8056] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 201.351542][ T8056] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 201.360093][ T8056] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.367246][ T8056] bridge0: port 2(bridge_slave_1) entered forwarding state 00:57:31 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000300)) r1 = socket$inet6(0xa, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x9) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='net/netlink\x00m\x10\x1bDv\xe5j@\xca\x98\"X\xc7k\xb9u\x17w\xed*\xb23\xa9#\xcb\x12\x97\xe9U\x18\xd4\x8d\b\xfc\x845j\x18z\r\xd6\xea\xacE\xd3G\xa9Ki(\xf3\xa3\xfa\xf1\x11(b\am\xd21\x91Q\xbe}\xa3\x8b\r\xc2TR\xa9\tm\x1f\x12hf\xc6\xfa!\x8eK\xd9\x90K\xfa\xc1\x1d\xa9i\x17\a\xdb+\x95Z /\xc9\xafk\xb3!\x05\x17\xcb\x05\tX\x9c~\x85O\x97\x8f\xcc\xcc\xe4\xcb=\xdb\xdf\x1a\x81N\x01>\xdb7\xe3\xe3\xae;3\x8fF\x18\xa4Y `nu\xab!\x9dG\xea\x06\xa7\x83\t\x9b<\x10\xad\a\xb5Ia\xb4f\x97\xb7a4!\xe5h\xabk\x7f\xc4\x9d8\xdb>') preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000500)=""/112, 0x70}], 0x1, 0x4c000000) fsetxattr$security_selinux(r1, &(0x7f0000000280)='security.selinux\x00', &(0x7f0000000380)='system_u:object_r:man_t:s0\x00', 0x1b, 0x0) ioctl$KVM_S390_UCAS_UNMAP(r2, 0x4018ae51, &(0x7f00000001c0)={0x5, 0xaca}) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0xffffffff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xd8e}, 0x1c) open_by_handle_at(r2, &(0x7f0000000400)={0x18, 0x30, "9314180e045a3ca51d7bf2b4f5424be6"}, 0x40080) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000240)={0x1, 0x8, [@local, @empty, @dev={[], 0x26}, @dev={[], 0x19}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @empty, @dev, @broadcast]}) read$FUSE(0xffffffffffffffff, 0x0, 0xffffff7a) r3 = socket$inet6(0xa, 0x3, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x1}, 0x20) r4 = fcntl$getown(0xffffffffffffffff, 0x9) ioctl$BLKFRASET(r2, 0x1264, &(0x7f00000003c0)=0x3) sched_setparam(r4, &(0x7f0000000200)=0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) 00:57:31 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000340)='/dev/vcs#\x00', 0x1, 0x18200) ioctl$KVM_DEASSIGN_DEV_IRQ(r0, 0x4040ae75, &(0x7f0000000380)={0x6, 0xffffffffffffff00, 0x40}) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000009c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) memfd_create(&(0x7f0000000400)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7f}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c0045005, &(0x7f00000004c0)=0x100040000) rt_sigpending(&(0x7f0000000300), 0x8) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb), &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@mcast2, @in6=@loopback}}, {{@in=@multicast1}, 0x0, @in6=@mcast1}}, &(0x7f0000000040)=0xe8) getresgid(&(0x7f00000000c0), &(0x7f0000000280), &(0x7f00000002c0)) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f0000000000)) 00:57:31 executing program 2: open(&(0x7f00000000c0)='./file0\x00', 0x41, 0x0) [ 201.386674][ T8056] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 201.403763][ T8056] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 201.420018][ T8056] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.427209][ T8056] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.449288][ T8056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 201.467911][ T8056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 201.493501][ T2997] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 201.526668][ T2997] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 201.536578][ T2997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 201.588854][ T2997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 201.612241][ T2997] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 201.621363][ T2997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 201.630357][ T2997] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 201.639585][ T2997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 201.649238][ T2997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 201.664917][ T2997] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 201.674441][ T2997] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 201.689612][ T2997] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 201.705739][ T8058] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 201.723362][ T8058] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 201.741814][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 201.755250][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 201.778517][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 201.787602][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 201.796523][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 201.805460][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 201.814875][ T2997] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 201.835092][ T8056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 201.844466][ T8056] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 201.858181][ T8056] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 201.867096][ T8056] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 201.879480][ T8060] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 201.905779][ T8060] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.919724][ T8058] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.031294][ T8156] check_preemption_disabled: 3 callbacks suppressed [ 202.031328][ T8156] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.4/8156 [ 202.048146][ T8156] caller is ip6_finish_output+0x335/0xdc0 [ 202.053981][ T8156] CPU: 0 PID: 8156 Comm: syz-executor.4 Not tainted 5.1.0-rc3-next-20190405 #19 [ 202.063021][ T8156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 202.073186][ T8156] Call Trace: [ 202.076523][ T8156] dump_stack+0x172/0x1f0 [ 202.080893][ T8156] __this_cpu_preempt_check+0x246/0x270 [ 202.086475][ T8156] ip6_finish_output+0x335/0xdc0 [ 202.091541][ T8156] ip6_output+0x235/0x7f0 [ 202.095890][ T8156] ? ip6_finish_output+0xdc0/0xdc0 [ 202.101022][ T8156] ? ip6_fragment+0x3980/0x3980 [ 202.105902][ T8156] ? ip6_autoflowlabel.part.0+0x70/0x70 [ 202.111476][ T8156] ip6_local_out+0xc4/0x1b0 [ 202.116017][ T8156] ip6_send_skb+0xbb/0x350 [ 202.120461][ T8156] ip6_push_pending_frames+0xc8/0xf0 [ 202.125896][ T8156] rawv6_sendmsg+0x299c/0x35e0 [ 202.130688][ T8156] ? rawv6_getsockopt+0x150/0x150 [ 202.135720][ T8156] ? aa_profile_af_perm+0x320/0x320 [ 202.140917][ T8156] ? tomoyo_check_inet_address+0x321/0x700 [ 202.146849][ T8156] ? tomoyo_unix_entry+0x5d0/0x5d0 [ 202.152243][ T8156] ? ___might_sleep+0x163/0x280 [ 202.164715][ T8156] ? __might_sleep+0x95/0x190 [ 202.169402][ T8156] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 202.174976][ T8156] inet_sendmsg+0x147/0x5e0 [ 202.179566][ T8156] ? rawv6_getsockopt+0x150/0x150 [ 202.184608][ T8156] ? inet_sendmsg+0x147/0x5e0 [ 202.189296][ T8156] ? ipip_gro_receive+0x100/0x100 [ 202.194361][ T8156] sock_sendmsg+0xdd/0x130 [ 202.198885][ T8156] __sys_sendto+0x262/0x380 [ 202.203505][ T8156] ? __ia32_sys_getpeername+0xb0/0xb0 [ 202.208892][ T8156] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 202.215250][ T8156] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 202.220858][ T8156] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 202.226440][ T8156] ? do_syscall_64+0x26/0x610 [ 202.231135][ T8156] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 202.237433][ T8156] __x64_sys_sendto+0xe1/0x1a0 [ 202.242225][ T8156] do_syscall_64+0x103/0x610 [ 202.246863][ T8156] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 202.252894][ T8156] RIP: 0033:0x4582b9 [ 202.256875][ T8156] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00:57:32 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000340)='/dev/vcs#\x00', 0x1, 0x18200) ioctl$KVM_DEASSIGN_DEV_IRQ(r0, 0x4040ae75, &(0x7f0000000380)={0x6, 0xffffffffffffff00, 0x40}) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000009c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) memfd_create(&(0x7f0000000400)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7f}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c0045005, &(0x7f00000004c0)=0x100040000) rt_sigpending(&(0x7f0000000300), 0x8) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb), &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@mcast2, @in6=@loopback}}, {{@in=@multicast1}, 0x0, @in6=@mcast1}}, &(0x7f0000000040)=0xe8) getresgid(&(0x7f00000000c0), &(0x7f0000000280), &(0x7f00000002c0)) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f0000000000)) [ 202.276726][ T8156] RSP: 002b:00007f968c6d1c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 202.285165][ T8156] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000004582b9 [ 202.293152][ T8156] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 202.301145][ T8156] RBP: 000000000073bf00 R08: 0000000020000180 R09: 000000000000001c [ 202.309136][ T8156] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f968c6d26d4 [ 202.317114][ T8156] R13: 00000000004c59b6 R14: 00000000004d9d10 R15: 00000000ffffffff 00:57:32 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xb, 0x6, 0x200209e1c, 0x108000000001, 0x1}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r0, 0x28, &(0x7f0000000000)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={r1, 0x0, 0x8}, 0xc) 00:57:32 executing program 3: prctl$PR_SET_NAME(0x34, &(0x7f0000000640)='-nodev!\\selinuxwlan0vmnet1\x00') 00:57:32 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) fgetxattr(r0, &(0x7f0000000000)=@known='trusted.overlay.opaque\x00', &(0x7f0000000040)=""/1, 0x3cc) 00:57:32 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/xfrm_stat\x00') 00:57:32 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000340)='/dev/vcs#\x00', 0x1, 0x18200) ioctl$KVM_DEASSIGN_DEV_IRQ(r0, 0x4040ae75, &(0x7f0000000380)={0x6, 0xffffffffffffff00, 0x40}) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000009c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) memfd_create(&(0x7f0000000400)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7f}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c0045005, &(0x7f00000004c0)=0x100040000) rt_sigpending(&(0x7f0000000300), 0x8) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb), &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@mcast2, @in6=@loopback}}, {{@in=@multicast1}, 0x0, @in6=@mcast1}}, &(0x7f0000000040)=0xe8) getresgid(&(0x7f00000000c0), &(0x7f0000000280), &(0x7f00000002c0)) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f0000000000)) 00:57:32 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000040)=@secondary='builtin_and_secondary_trusted\x00') 00:57:32 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000000)={0xffffffff, 0x0, 0x1}) 00:57:32 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) 00:57:32 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0f85403, &(0x7f0000000080)={0x1}) 00:57:32 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f00000002c0)='wlan1\x00d5sum\x00', 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, "b92481f2b6049517f74de08916cf213343b15d035fc2fe51426f3c9125e1da89cad2929cd06aca1bd4b0a988279268e61234ff8a41cd19abd481eb55130d64ca", "a3510a8deb27705deb2fac58f4f379ddd8e50e8d868ee0425ecfc1c6f4a716df3e4be867d973bcc3e056a1a04eafdeacbd0e434a62db69a6bd53316c42f16b21", "f0642b0793a51cd04ad5c00d6cf24b506d17a8df96c5968a4226e09f847e4b08"}) 00:57:32 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) 00:57:32 executing program 0: creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x0) 00:57:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'veth0\x00', &(0x7f0000002840)=ANY=[@ANYBLOB="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"]}) r1 = syz_open_dev$evdev(&(0x7f00000003c0)='/dev/input/event#\x00', 0x0, 0x28021) write$evdev(r1, &(0x7f0000000040)=[{}, {{0x0, 0x7530}}], 0xff3e) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f00000000c0)=""/147) 00:57:32 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x4000, 0x0) 00:57:32 executing program 5: r0 = socket$inet(0x2, 0x3, 0x1c) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc5f123c123f319bd070") pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000040)=0x72, 0x4) bind$inet(r4, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x2f, &(0x7f0000000100)=0x100000001, 0x4) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r1, 0x0, r3, 0x0, 0x8001, 0x0) 00:57:32 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000000)="02005500000001000000ff070000ffffffffffffff", 0x15, 0x1c0}]) 00:57:33 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x1806, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000ac0)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) readv(r0, &(0x7f0000000540)=[{&(0x7f0000000f40)=""/4096, 0x1000}], 0x1) 00:57:33 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = userfaultfd(0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r1, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x730000}, 0x200000}) 00:57:33 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000001d40)='/dev/dsp#\x00', 0x1, 0x8042) write$tun(r0, &(0x7f00000001c0)={@val, @val, @ipv4={{0x5, 0x4, 0x0, 0x0, 0xff2, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @loopback}, @gre={{}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "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"}, {}, {}, {0x8, 0x6558, 0x0, "9edcb578dcbbf3f56577b21241b185b726b64a818d9fd15187f0b77741069affe905376873028bdcadfdb2903c4d3cf266833c63f4de17997d71ae80f73a4d764cebee7df586d40e5c5d97c195aa07d019a87a6d1bad4298cdafe4ee5b10abab6bb500a86e6bbf871da7d0fbc6b3ce5b84c5a8e5dc55bbcd31b5420d1fdc57b1ea159f091b872e27aff4c7389fd9792623af6bad5a251c81234b130be959b775af0f0a4657f5b163ea1e070ec585"}}}}, 0x1000) ioctl$int_in(r0, 0x800000c0045002, &(0x7f00000000c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") [ 203.029650][ T8219] Dev loop4: unable to read RDB block 1 [ 203.042186][ T8225] input: syz1 as /devices/virtual/input/input5 [ 203.047426][ T8219] loop4: unable to read partition table [ 203.054853][ T8219] loop4: partition table beyond EOD, truncated [ 203.102644][ T8219] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) 00:57:33 executing program 2: r0 = socket(0x40000000002, 0x3, 0x80000000002) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='bridge_slave_0\x00', 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f3188b070") sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) [ 203.159548][ T8228] input: syz1 as /devices/virtual/input/input6 [ 203.264116][ T8219] Dev loop4: unable to read RDB block 1 [ 203.279455][ T8219] loop4: unable to read partition table 00:57:33 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000040)={0x0, @multicast2, 0x0, 0x0, 'none\x00'}, 0x2c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="600000002100000127bd7000ffdbdf2502341408030000000f0000000800012008000f000000000008000200e00000010835e4a8041414aa"], 0x1}}, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x60, &(0x7f0000000000)={0x0, @empty, 0x0, 0x0, 'dh\x00', 0x0, 0x0, 0x400}, 0x2c) 00:57:33 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r1 = dup2(r0, r0) ioctl$KDSIGACCEPT(r1, 0x5393, 0x4008000824ffea) [ 203.315276][ T8244] raw_sendmsg: syz-executor.2 forgot to set AF_INET. Fix it! [ 203.320769][ T8219] loop4: partition table beyond EOD, truncated [ 203.347064][ T8244] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.2/8244 [ 203.357048][ T8244] caller is sk_mc_loop+0x1d/0x210 [ 203.362109][ T8244] CPU: 0 PID: 8244 Comm: syz-executor.2 Not tainted 5.1.0-rc3-next-20190405 #19 [ 203.371145][ T8244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 203.381275][ T8244] Call Trace: [ 203.384635][ T8244] dump_stack+0x172/0x1f0 [ 203.389020][ T8244] __this_cpu_preempt_check+0x246/0x270 [ 203.394635][ T8244] sk_mc_loop+0x1d/0x210 [ 203.399174][ T8244] ip_mc_output+0x2ef/0xf70 [ 203.403704][ T8244] ? __ip_queue_xmit+0x1bf0/0x1bf0 [ 203.406952][ T8219] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) [ 203.408846][ T8244] ? __ip_make_skb+0xf15/0x1820 [ 203.421702][ T8244] ? ip_append_data.part.0+0x170/0x170 [ 203.427308][ T8244] ? dst_release+0x62/0xb0 [ 203.432123][ T8244] ? __ip_make_skb+0xf93/0x1820 [ 203.436999][ T8244] ip_local_out+0xc4/0x1b0 [ 203.441451][ T8244] ip_send_skb+0x42/0xf0 [ 203.445750][ T8244] ip_push_pending_frames+0x64/0x80 [ 203.450982][ T8244] raw_sendmsg+0x1e6d/0x2f20 [ 203.455620][ T8244] ? compat_raw_getsockopt+0x100/0x100 [ 203.461097][ T8244] ? tomoyo_check_inet_address+0x321/0x700 [ 203.467012][ T8244] ? __fget+0x35a/0x550 [ 203.471194][ T8244] ? ___might_sleep+0x163/0x280 [ 203.476062][ T8244] ? __might_sleep+0x95/0x190 [ 203.480756][ T8244] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 203.486504][ T8244] ? aa_sk_perm+0x288/0x880 [ 203.491022][ T8244] ? lock_downgrade+0x880/0x880 [ 203.495902][ T8244] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 203.501469][ T8244] inet_sendmsg+0x147/0x5e0 [ 203.505994][ T8244] ? compat_raw_getsockopt+0x100/0x100 [ 203.511474][ T8244] ? inet_sendmsg+0x147/0x5e0 [ 203.516168][ T8244] ? ipip_gro_receive+0x100/0x100 [ 203.521216][ T8244] sock_sendmsg+0xdd/0x130 [ 203.525675][ T8244] __sys_sendto+0x262/0x380 [ 203.530195][ T8244] ? __ia32_sys_getpeername+0xb0/0xb0 [ 203.535612][ T8244] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 203.541889][ T8244] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 203.547368][ T8244] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 203.552852][ T8244] ? do_syscall_64+0x26/0x610 [ 203.557632][ T8244] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 203.563845][ T8244] __x64_sys_sendto+0xe1/0x1a0 [ 203.568634][ T8244] do_syscall_64+0x103/0x610 [ 203.573249][ T8244] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 203.579157][ T8244] RIP: 0033:0x4582b9 [ 203.583146][ T8244] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 203.602869][ T8244] RSP: 002b:00007f0d341a7c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c 00:57:33 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r1 = dup2(r0, r0) ioctl$KDSIGACCEPT(r1, 0x5393, 0x4008000824ffe7) [ 203.611503][ T8244] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000004582b9 [ 203.619491][ T8244] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 203.627481][ T8244] RBP: 000000000073bf00 R08: 0000000020000180 R09: 000000000000006e [ 203.635475][ T8244] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0d341a86d4 [ 203.643484][ T8244] R13: 00000000004c5a1a R14: 00000000004d9dd0 R15: 00000000ffffffff [ 203.722650][ T8252] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.2/8252 [ 203.732339][ T8252] caller is sk_mc_loop+0x1d/0x210 [ 203.737533][ T8252] CPU: 0 PID: 8252 Comm: syz-executor.2 Not tainted 5.1.0-rc3-next-20190405 #19 [ 203.746568][ T8252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 203.756641][ T8252] Call Trace: [ 203.759965][ T8252] dump_stack+0x172/0x1f0 [ 203.764379][ T8252] __this_cpu_preempt_check+0x246/0x270 00:57:33 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000040)={0x0, @multicast2, 0x0, 0x0, 'none\x00'}, 0x2c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="600000002100000127bd7000ffdbdf2502341408030000000f0000000800012008000f000000000008000200e000000108000200a91414aa"], 0x1}}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002e80)={0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f00000014c0)=ANY=[@ANYBLOB="c40f0000000000000000000000000000b40f00b715d24c8b50c4320ef3b64471ff00b9009c05bfdf91a5c2c439ed8b110207a2e52ac611123e03c6"], 0x1}], 0x1}, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x60, &(0x7f0000000000)={0x0, @empty, 0x0, 0x0, 'dh\x00', 0x0, 0x0, 0x400}, 0x2c) 00:57:33 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f00000002c0)='wlan1\x00d5sum\x00', 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, "b92481f2b6049517f74de08916cf213343b15d035fc2fe51426f3c9125e1da89cad2929cd06aca1bd4b0a988279268e61234ff8a41cd19abd481eb55130d64ca", "a3510a8deb27705deb2fac58f4f379ddd8e50e8d868ee0425ecfc1c6f4a716df3e4be867d973bcc3e056a1a04eafdeacbd0e434a62db69a6bd53316c42f16b21", "f0642b0793a51cd04ad5c00d6cf24b506d17a8df96c5968a4226e09f847e4b08"}) 00:57:33 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000540)=""/11, 0x485) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_execute_func(&(0x7f0000000040)="410f01f964ff0941c3c4e2c99758423e46d8731266420fe2e33e0f1110c442019dcc6f") clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000280)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f00000002c0), 0xfd65) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x0) 00:57:33 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)={[{@usrquota='usrquota'}, {@resize_auto='resize=auto'}]}) [ 203.771211][ T8252] sk_mc_loop+0x1d/0x210 [ 203.775477][ T8252] ip_mc_output+0x2ef/0xf70 [ 203.780005][ T8252] ? __ip_queue_xmit+0x1bf0/0x1bf0 [ 203.785171][ T8252] ? __ip_make_skb+0xf15/0x1820 [ 203.790048][ T8252] ? ip_append_data.part.0+0x170/0x170 [ 203.795534][ T8252] ? dst_release+0x62/0xb0 [ 203.799961][ T8252] ? __ip_make_skb+0xf93/0x1820 [ 203.804838][ T8252] ip_local_out+0xc4/0x1b0 [ 203.809264][ T8252] ip_send_skb+0x42/0xf0 [ 203.813517][ T8252] ip_push_pending_frames+0x64/0x80 [ 203.818718][ T8252] raw_sendmsg+0x1e6d/0x2f20 [ 203.823363][ T8252] ? compat_raw_getsockopt+0x100/0x100 [ 203.828853][ T8252] ? tomoyo_check_inet_address+0x321/0x700 [ 203.834805][ T8252] ? __fget+0x35a/0x550 [ 203.838966][ T8252] ? ___might_sleep+0x163/0x280 [ 203.843835][ T8252] ? __might_sleep+0x95/0x190 [ 203.848530][ T8252] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 203.854241][ T8252] ? aa_sk_perm+0x288/0x880 [ 203.858747][ T8252] ? lock_downgrade+0x880/0x880 [ 203.863616][ T8252] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 203.869152][ T8252] inet_sendmsg+0x147/0x5e0 [ 203.873637][ T8252] ? compat_raw_getsockopt+0x100/0x100 [ 203.879105][ T8252] ? inet_sendmsg+0x147/0x5e0 [ 203.883793][ T8252] ? ipip_gro_receive+0x100/0x100 [ 203.888817][ T8252] sock_sendmsg+0xdd/0x130 [ 203.893239][ T8252] __sys_sendto+0x262/0x380 [ 203.897737][ T8252] ? __ia32_sys_getpeername+0xb0/0xb0 [ 203.903106][ T8252] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 203.909342][ T8252] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 203.914818][ T8252] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 203.920468][ T8252] ? do_syscall_64+0x26/0x610 [ 203.925170][ T8252] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 203.931253][ T8252] __x64_sys_sendto+0xe1/0x1a0 [ 203.936023][ T8252] do_syscall_64+0x103/0x610 [ 203.940610][ T8252] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 203.946494][ T8252] RIP: 0033:0x4582b9 [ 203.950384][ T8252] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00:57:34 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000100)={0xffffffffffffffff}) [ 203.970566][ T8252] RSP: 002b:00007f0d34186c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 203.978975][ T8252] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000004582b9 [ 203.986967][ T8252] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 203.994941][ T8252] RBP: 000000000073bfa0 R08: 0000000020000180 R09: 000000000000006e [ 204.002913][ T8252] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0d341876d4 [ 204.010897][ T8252] R13: 00000000004c5a1a R14: 00000000004d9dd0 R15: 00000000ffffffff 00:57:34 executing program 0: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000640)='-nodev!\\selinuxwlan0vmnet1\x00') 00:57:34 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000000)='cp\xfePcc4.stat\x00', 0x26e1, 0x0) 00:57:34 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f00000004c0)) 00:57:34 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000100)={0xffffffffffffffff}) 00:57:34 executing program 4: syz_mount_image$ext4(&(0x7f00000003c0)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000000100)="803f8e15d67d000013000300e60100006cff99000000003c2300000001fffffff44000000040000080000000000000006d5ebe5a0000ffff53efe1a679248449492fd8fe6d771c3f387d85cc6057e58731c205cb50a449657c82fde786", 0x5d, 0x400}], 0x0, 0x0) [ 204.453977][ T8275] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 204.503308][ T8302] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem 00:57:34 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002b80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newsa={0x138, 0x1a, 0x713, 0x0, 0x0, {{@in6=@local={0xfe, 0x80, [], 0xffffffffffffffff}, @in6=@ipv4={[], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6=@local={0xfe, 0x80, [], 0xffffffffffffffff}, 0x0, 0x33}, @in6=@loopback, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'rmd160\x00'}}}]}, 0x138}}, 0x0) 00:57:34 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x701b, 0x8000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 00:57:34 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000100)={0xffffffffffffffff}) [ 204.545946][ T8302] EXT4-fs (loop4): Invalid log block size: 35 [ 204.697546][ T8313] REISERFS warning (device loop5): reiserfs_fill_super: Cannot allocate commit workqueue [ 204.707394][ T8302] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem 00:57:34 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000100)={0xffffffffffffffff}) 00:57:34 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(0x0, 0x100000000) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, "b92481f2b6049517f74de08916cf213343b15d035fc2fe51426f3c9125e1da89cad2929cd06aca1bd4b0a988279268e61234ff8a41cd19abd481eb55130d64ca", "a3510a8deb27705deb2fac58f4f379ddd8e50e8d868ee0425ecfc1c6f4a716df3e4be867d973bcc3e056a1a04eafdeacbd0e434a62db69a6bd53316c42f16b21", "f0642b0793a51cd04ad5c00d6cf24b506d17a8df96c5968a4226e09f847e4b08", [0x100]}) 00:57:34 executing program 1: [ 204.774118][ T8302] EXT4-fs (loop4): Invalid log block size: 35 00:57:34 executing program 5: 00:57:34 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r0) 00:57:34 executing program 2: ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000100)={0xffffffffffffffff}) 00:57:35 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x28, r1, 0x101, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}]}]}, 0x28}}, 0x0) 00:57:35 executing program 2: ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000100)={0xffffffffffffffff}) 00:57:35 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000000180)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 00:57:35 executing program 0: openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) socket$key(0xf, 0x3, 0x2) socket$kcm(0x2, 0x1, 0x84) socket$kcm(0x10, 0x3, 0x4) socket$kcm(0x10, 0x800000000002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f00000001c0)='veth0\x00') 00:57:35 executing program 3: 00:57:35 executing program 5: 00:57:35 executing program 2: ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000100)={0xffffffffffffffff}) [ 205.213686][ T8358] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 00:57:35 executing program 4: [ 205.276419][ T8366] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 00:57:35 executing program 5: 00:57:35 executing program 3: 00:57:35 executing program 4: 00:57:35 executing program 0: 00:57:35 executing program 1: 00:57:35 executing program 5: 00:57:35 executing program 2: r0 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000100)={0xffffffffffffffff}) 00:57:35 executing program 3: 00:57:35 executing program 4: 00:57:35 executing program 0: 00:57:35 executing program 1: 00:57:35 executing program 5: 00:57:35 executing program 3: 00:57:35 executing program 4: 00:57:35 executing program 2: r0 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000100)={0xffffffffffffffff}) 00:57:35 executing program 0: 00:57:35 executing program 5: 00:57:35 executing program 1: 00:57:35 executing program 4: 00:57:35 executing program 0: 00:57:36 executing program 3: 00:57:36 executing program 2: r0 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000100)={0xffffffffffffffff}) 00:57:36 executing program 5: 00:57:36 executing program 1: 00:57:36 executing program 4: 00:57:36 executing program 0: 00:57:36 executing program 3: 00:57:36 executing program 4: 00:57:36 executing program 0: 00:57:36 executing program 1: 00:57:36 executing program 5: 00:57:36 executing program 2: syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000100)={0xffffffffffffffff}) 00:57:36 executing program 4: 00:57:36 executing program 3: 00:57:36 executing program 0: 00:57:36 executing program 1: 00:57:36 executing program 5: 00:57:36 executing program 3: 00:57:36 executing program 4: 00:57:36 executing program 2: syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000100)={0xffffffffffffffff}) 00:57:36 executing program 0: 00:57:36 executing program 5: 00:57:36 executing program 1: 00:57:36 executing program 3: 00:57:36 executing program 4: 00:57:36 executing program 0: 00:57:36 executing program 5: 00:57:36 executing program 4: 00:57:36 executing program 3: 00:57:36 executing program 2: syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000100)={0xffffffffffffffff}) 00:57:36 executing program 1: 00:57:36 executing program 0: 00:57:37 executing program 5: 00:57:37 executing program 3: 00:57:37 executing program 4: 00:57:37 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) 00:57:37 executing program 0: 00:57:37 executing program 1: 00:57:37 executing program 4: 00:57:37 executing program 3: 00:57:37 executing program 5: 00:57:37 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) 00:57:37 executing program 4: 00:57:37 executing program 0: 00:57:37 executing program 1: 00:57:37 executing program 3: 00:57:37 executing program 5: 00:57:37 executing program 4: 00:57:37 executing program 0: 00:57:37 executing program 1: 00:57:37 executing program 5: 00:57:37 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) 00:57:37 executing program 3: 00:57:37 executing program 4: 00:57:37 executing program 1: 00:57:37 executing program 5: 00:57:37 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000100)) 00:57:37 executing program 0: 00:57:37 executing program 3: 00:57:37 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:57:37 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:57:37 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000280)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000180)={{0x80}, 'port0\x00', 0xfffffffffffffffe}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000040)={{0x0, 0x1}, {0x80}, 0x0, 0x0, 0x0, [], [0x0, 0x8000000]}) 00:57:37 executing program 0: write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="f41338abc8"], 0x5) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x246) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0xfffd}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:57:37 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000100)) [ 207.773106][ T8540] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. 00:57:37 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r0, r1, &(0x7f0000000040)=0x40000000, 0x10000000000443) 00:57:38 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000a80)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc0105303, &(0x7f00000008c0)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf000000]}) 00:57:38 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000100)) 00:57:38 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000240)={0x0, 0x0, 0xfffffffffffffff8}, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@link_local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x2000, 0x0, 0x0, 0x0, @rand_addr, @broadcast}, @igmp={0x0, 0x0, 0x0, @multicast1}}}}}, 0x0) 00:57:38 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) fcntl$setstatus(r0, 0x4, 0x42800) read$FUSE(r0, 0x0, 0x0) [ 208.071424][ T8562] kvm: emulating exchange as write 00:57:38 executing program 4: r0 = socket(0xa, 0x3, 0x6) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'bridge0\x00\x00\x06\x01k\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) 00:57:38 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="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", 0xcfa}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000003dc0)={0x0, 0x0, 0x0}, 0x0) [ 208.257708][ T8574] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.265489][ T8574] bridge0: port 1(bridge_slave_0) entered disabled state 00:57:38 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)="2e0000001e008109e00f80ecdb4cb92e0a4824181e0cd30be8bd6efb080003000e00140013000000060005001200", 0x2e}], 0x1}, 0x0) recvmsg(r0, &(0x7f00000019c0)={&(0x7f0000000800)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000880)=""/137, 0x89}, {&(0x7f0000000940)=""/116, 0x74}, {&(0x7f00000009c0)=""/4096, 0x1000}], 0x3}, 0x40000100) 00:57:38 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x18, 0x65}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="008dada50cfc76354b0235ebe2aa", 0x0}, 0x28) 00:57:38 executing program 0: write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="f41338abc8"], 0x5) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x246) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0xfffd}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:57:38 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000200)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'yam0\x00\x01\x17\x8b\x00', 0x8001}) ptrace$setregset(0x4209, r1, 0x20000004, &(0x7f0000000040)={0x0}) [ 208.706148][ T8585] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.713472][ T8585] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.721050][ T8585] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.728284][ T8585] bridge0: port 1(bridge_slave_0) entered forwarding state 00:57:38 executing program 3: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) r0 = gettid() clone(0x3000000a0160100, 0x0, 0x0, 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x280000, 0x0) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000100)={0x9dd, 0x7}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x27) write$UHID_INPUT(r1, &(0x7f00000001c0)={0x8, "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", 0x1000}, 0x1006) wait4(r0, 0x0, 0x0, 0x0) getpriority(0x0, r0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f0000000140)={0x0, {0x2, 0x4e22, @empty}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e23, @broadcast}, 0x10, 0x0, 0x0, 0x0, 0x1ff, &(0x7f0000000040)='caif0\x00', 0x4, 0x4, 0x5}) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f0000001240)=""/79) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000001200)=@req3={0x5, 0x2, 0x1, 0x8, 0x80000001, 0x7ff, 0xfffffffffffffffd}, 0x1c) [ 208.832953][ T8585] device bridge0 entered promiscuous mode 00:57:39 executing program 0: write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="f41338abc8"], 0x5) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x246) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0xfffd}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:57:39 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0xc362e63b3f31ba5f}, 0x20}}, 0x0) 00:57:39 executing program 1: perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x3, &(0x7f00000000c0)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x11, 0x6c}}, &(0x7f00000002c0)='syzkaller\x00', 0x9, 0x4ae, &(0x7f0000000340)=""/207}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0xffffffffa0008000, 0xe, 0x0, &(0x7f0000000040)="2504f2ff1f002c6176c5f3343dbe", 0x0, 0xf0ffff00000855}, 0x28) 00:57:39 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) clone(0x2302001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() fcntl$getownex(r0, 0x10, &(0x7f0000000000)) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1000000018) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x8, 0x20000000, 0xca}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r1, 0x0, 0x0) [ 209.292212][ T8574] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.299664][ T8574] bridge0: port 1(bridge_slave_0) entered disabled state 00:57:39 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x5) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="12ce21a37b3194cfa40c0d7ac660abe2c476cbfe298c65f46bbbc72cb009fefffe6f3d9b15080000000700e371598c4bcdefc7730e33c0c224"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x0, 0x0, 0x0) ptrace$cont(0x7, r0, 0x0, 0x0) [ 209.437736][ T8574] device bridge0 left promiscuous mode [ 209.715190][ T8585] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.722522][ T8585] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.730662][ T8585] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.737930][ T8585] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.751077][ T8585] device bridge0 entered promiscuous mode 00:57:39 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='stack\x00') ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000180)={'veth1_to_team\x00', 0x2c}) socket$inet(0x2, 0x0, 0x6aa) connect(r0, &(0x7f00000001c0)=@ipx={0x4, 0xffff, 0x3, "58b580b541fc", 0x8747}, 0x80) r1 = socket(0x10, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='wchan\x00') splice(r2, &(0x7f0000000240), r2, &(0x7f0000000280), 0x3, 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={'team_slave_0\x00', {0x2, 0x4e20, @remote}}) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)) sendfile(r1, r2, 0x0, 0x80000002) socket$unix(0x1, 0x3, 0x0) 00:57:39 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000200)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'yam0\x00\x01\x17\x8b\x00', 0x8001}) ptrace$setregset(0x4209, r1, 0x20000004, &(0x7f0000000040)={0x0}) 00:57:39 executing program 3: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000004fe8)=[{0x8000000010006, 0x0, 0x0, 0x50000}]}) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) 00:57:39 executing program 1: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000002d40), 0x8, 0x0) read(r0, &(0x7f0000000000)=""/128, 0xfd8a) signalfd4(r0, &(0x7f0000a71ff8), 0x8, 0x0) 00:57:39 executing program 0: write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="f41338abc8"], 0x5) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x246) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0xfffd}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 209.759982][ T8056] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 00:57:40 executing program 2: perf_event_open(&(0x7f0000000380)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x5) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="0002"], 0x2) close(r0) execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 00:57:40 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f00001da000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000049b000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 00:57:40 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, 0x0, 0x0) 00:57:40 executing program 0: write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="f41338abc8"], 0x5) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x246) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0xfffd}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:57:40 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00') pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) close(r0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) ptrace$poke(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x0, 0x0, 0x0) 00:57:40 executing program 4: r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) mkdir(&(0x7f0000508ff6)='./control\x00', 0x0) read(r0, &(0x7f0000e6d000)=""/384, 0x180) r1 = inotify_init1(0x0) fcntl$setstatus(r1, 0x4, 0x72109c5fef5d34d3) r2 = gettid() fcntl$setown(r1, 0x8, r2) rt_sigprocmask(0x0, &(0x7f00009fd000)={0xbffffffffffffffe}, 0x0, 0x8) syz_genetlink_get_family_id$team(&(0x7f00000001c0)='team\x00') fcntl$setsig(r1, 0xa, 0x20) inotify_add_watch(r1, &(0x7f00007a7000)='./control\x00', 0xa4000960) open(&(0x7f00003f5000)='./control\x00', 0x0, 0x0) 00:57:40 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f0000000280)=""/190, 0xbe}], 0x100000000000021c}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/fib_trie\x00') preadv(r0, &(0x7f00000017c0), 0x1d0, 0x0) 00:57:40 executing program 2: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r0, &(0x7f0000000480)=ANY=[@ANYBLOB='\x00'], 0x1) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f3188b070") 00:57:40 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x246) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000100)={0x0, 0xfffd}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) ioctl$KVM_TRANSLATE(r3, 0xc018ae85, &(0x7f0000000000)={0x6000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:57:40 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x2a}}}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet6_buf(r1, 0x29, 0x6, 0x0, 0x101e2) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x1000000003d) fcntl$setstatus(r1, 0x4, 0x42803) 00:57:40 executing program 0: write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="f41338abc8"], 0x5) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x246) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0xfffd}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:57:40 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) dup3(r0, r1, 0x0) 00:57:41 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.cpus\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f00000003c0)='cpuset.memory_pressure\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x1b) 00:57:41 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x246) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000100)={0x0, 0xfffd}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) fcntl$F_GET_RW_HINT(r3, 0x40b, &(0x7f0000000000)) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:57:41 executing program 0: write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="f41338abc8"], 0x5) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x246) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0xfffd}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:57:41 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="0c11ff00f6b49f01c2"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x256, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:57:41 executing program 0: write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="f41338abc8"], 0x5) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x246) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0xfffd}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:57:41 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c11ff1500f4"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:57:41 executing program 2: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r0, &(0x7f0000000480)=ANY=[@ANYBLOB='\x00'], 0x1) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f3188b070") 00:57:41 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0ff1ff512515cc990ef35baad1373b5617b1d7e2a4"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:57:42 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000040)={0x0, 0x0, [], @raw_data=[0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x8001, 0xfffffffffffffff7]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0)