[ 60.247073] audit: type=1800 audit(1539235316.281:27): pid=6157 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 61.824888] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 64.088543] random: sshd: uninitialized urandom read (32 bytes read) [ 64.600672] random: sshd: uninitialized urandom read (32 bytes read) [ 66.331416] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.0' (ECDSA) to the list of known hosts. [ 72.088289] random: sshd: uninitialized urandom read (32 bytes read) 2018/10/11 05:22:10 fuzzer started [ 76.822849] random: cc1: uninitialized urandom read (8 bytes read) 2018/10/11 05:22:15 dialing manager at 10.128.0.26:39089 2018/10/11 05:22:15 syscalls: 1 2018/10/11 05:22:15 code coverage: enabled 2018/10/11 05:22:15 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/10/11 05:22:15 setuid sandbox: enabled 2018/10/11 05:22:15 namespace sandbox: enabled 2018/10/11 05:22:15 Android sandbox: /sys/fs/selinux/policy does not exist 2018/10/11 05:22:15 fault injection: enabled 2018/10/11 05:22:15 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/10/11 05:22:15 net packed injection: /dev/net/tun can't be opened (open /dev/net/tun: cannot allocate memory) 2018/10/11 05:22:15 net device setup: enabled [ 83.756182] random: crng init done 05:24:16 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x6, 0x4, 0x8, 0x101}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000240)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000080)='GPL\x00', 0x800, 0x2ed, &(0x7f0000000280)=""/176}, 0x48) [ 201.384642] IPVS: ftp: loaded support on port[0] = 21 [ 202.839032] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.845644] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.854571] device bridge_slave_0 entered promiscuous mode [ 203.005089] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.011623] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.020561] device bridge_slave_1 entered promiscuous mode [ 203.169712] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 203.318392] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 203.785246] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 203.940491] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 204.236015] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 204.243262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 05:24:20 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x800000000000004) ioctl(r0, 0x8912, &(0x7f00000005c0)="153f6234488dd25d5c6070") bind(0xffffffffffffffff, &(0x7f0000000080)=@in, 0x7c) r1 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x6, 0x0, 0x70e000}}) [ 204.753849] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 204.762477] team0: Port device team_slave_0 added [ 204.968434] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 204.977148] team0: Port device team_slave_1 added [ 205.125403] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 205.279086] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 205.286305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 205.295914] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 205.535877] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 205.543632] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 205.552979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 205.674908] IPVS: ftp: loaded support on port[0] = 21 [ 205.836868] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 205.844800] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 205.854107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 207.638075] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.644710] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.653956] device bridge_slave_0 entered promiscuous mode [ 207.957256] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.963913] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.973527] device bridge_slave_1 entered promiscuous mode [ 208.266010] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 208.447923] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 208.576687] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.583318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.590337] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.596953] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.606411] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 208.663170] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 209.214011] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 209.477621] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 209.663692] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 209.692663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 209.895714] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 209.902972] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 210.613151] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 210.621350] team0: Port device team_slave_0 added 05:24:26 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000000022, &(0x7f0000000480)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000640)=0x1, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg(r0, &(0x7f0000006e40)=[{{&(0x7f0000000080)=@nfc, 0x80, &(0x7f0000000000)=[{&(0x7f0000000100)='-', 0x1}], 0x1, &(0x7f0000000400)}}, {{&(0x7f0000004bc0)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000000340)}}], 0x2, 0x40) [ 210.959323] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 210.967978] team0: Port device team_slave_1 added [ 211.288889] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 211.296441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 211.305675] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 211.628830] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 211.635990] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 211.645257] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 211.919563] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 211.927412] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 211.936850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 212.033639] IPVS: ftp: loaded support on port[0] = 21 [ 212.256741] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 212.264857] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 212.274200] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 214.871397] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.878031] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.886795] device bridge_slave_0 entered promiscuous mode [ 215.190301] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.197048] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.205894] device bridge_slave_1 entered promiscuous mode [ 215.412638] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 215.745457] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 215.909429] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.916032] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.923194] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.929713] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.938912] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 216.472299] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 216.628426] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 216.901429] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 217.177587] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 217.184855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 217.462816] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 217.470240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 218.272052] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 218.280318] team0: Port device team_slave_0 added [ 218.555974] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 218.564274] team0: Port device team_slave_1 added [ 218.781717] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 218.789137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 218.798171] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 05:24:35 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x100, 0x18c) close(r0) r1 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f00000001c0)="657468312e706f7369785f61636c5f6163636573733a73656c66c373656c696e75782100", 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x9a10207d6d278a64) sendfile(r1, r2, &(0x7f0000000040), 0x10001) [ 219.095990] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 219.103236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 219.112242] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 219.453911] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 219.461540] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 219.471127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 219.823814] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 219.831474] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 219.840935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 220.674840] IPVS: ftp: loaded support on port[0] = 21 [ 221.880355] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.451899] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 223.647972] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.654586] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.661559] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.668213] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.677271] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 224.345231] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 224.432262] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.438765] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.447523] device bridge_slave_0 entered promiscuous mode [ 224.784316] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.790801] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.799606] device bridge_slave_1 entered promiscuous mode [ 224.911672] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 224.918393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 224.926630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 225.234413] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 225.604597] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 226.325509] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.359389] ip (6771) used greatest stack depth: 53056 bytes left [ 226.656554] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 226.930941] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 227.281475] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 227.288650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 227.724290] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 227.731392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 228.946619] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 228.955037] team0: Port device team_slave_0 added [ 229.326694] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 229.335038] team0: Port device team_slave_1 added [ 229.699155] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 229.706465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 229.715701] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 230.096179] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 230.103502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 230.112712] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready 05:24:46 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000180), 0x0, 0x2000c000, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) splice(r1, 0x0, r0, 0x0, 0x3cceb664, 0x0) [ 230.617989] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 230.625785] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 230.635162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 231.010838] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 231.018718] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 231.028082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 231.684064] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.111794] IPVS: ftp: loaded support on port[0] = 21 [ 233.530360] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 235.218589] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 235.225544] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 235.233820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 236.016290] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.022872] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.029839] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.036477] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.045228] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 236.184932] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 05:24:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000001d00fd4e0000000000000000110000000c0003002300000000000000b1e2f50f7f44ceeb924f8159d225f694e45acc2e3ec17dce5449a390893367e3a514b68493beb6f225d2dbe816f33e4da1acd497621863cd5fea785a9e326b0f7c0ac604d3cd793026cf5560cef8330ca1cbc803e3dbb1c7c543543fa24aced0c9fb9297bd6c3f28f65175a71963f4953a03c3475dfa009dec045ac6cea648f542800cf957955ad686b8196bccd437930bde8b5ff9a2cefcd62c5a735e7f8dc3df5c022740603bc3b407"], 0x1}}, 0x0) [ 236.704324] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.710899] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.719699] device bridge_slave_0 entered promiscuous mode [ 236.961807] 8021q: adding VLAN 0 to HW filter on device team0 05:24:53 executing program 0: r0 = socket$inet(0x2, 0x80006, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x31, 0x4) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}, [0xe00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x10) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYBLOB="2cc37b857742bcfe894056f54903e5b68e929326ca134c5ff131e97cbc8a8df80119dbd4767407fd2b85e54d61d82502c2483342eb00933afed9ab6b31b42164d79673a7817d1615d91b8d04053790c94503e91758d8fe4fc6a553a62b4ce8fb4df356e08fb4197386c86705a309ded2dda98f0681651b274d40875a1f470faa4038e5dcccd9370f5c09c3aa7376aadafdc3afc87100069f56a1028395b5eb0eac379a4551d623220f7b89ff451dd933b5abf843150d61c671f3e45550f5fee273295bcf3db0a3e9645546b550110849755af3107575a533ff1b3008000000855db926f9154ebe0693e172e59ecd214b4d60b4"], &(0x7f0000000080)=0xe) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000000c0)={r1, 0x40}, 0x8) listen(r0, 0x0) [ 237.189013] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.195694] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.204540] device bridge_slave_1 entered promiscuous mode 05:24:53 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f0000000240)=ANY=[@ANYBLOB="09a7cad2c6e5618654dd9fd587a1e95eb9b929dcefdc6d3eeec7ef0dc505333425ac4bc639c99cd9f333cf5995aab4afd1e52b0014aca39da9b791c96f2a880ed5f133935c333eaa32d76ef3d6623df53a46ae4b27fb1669f56000fb7d744e956443ed78723e9d0a7bc74842c43b6ee07ccca3d212ade3ce761c8b6839d52f5d515042a5898a74d178d29fbb9480a9e2785118005459188811d21e1dc52211723d90cb9f15318122ccbd80081076ca6d76e0"], &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='f2fs\x00', 0x0, &(0x7f0000000200)='ramfs\x00') [ 237.685090] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready 05:24:53 executing program 0: r0 = socket$inet6(0xa, 0x807, 0x5) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000000)={0xffffffffffffff9c}) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000080)=0xfffffffffffffffc, 0x4) recvfrom$inet(r1, &(0x7f0000000140)=""/30, 0x1e, 0x2, 0x0, 0x0) clock_nanosleep(0x9de93d86b628720a, 0x0, &(0x7f0000000280), &(0x7f0000000040)) [ 238.218157] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready 05:24:54 executing program 0: ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000080)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000040)='cmdline\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mlock(&(0x7f0000584000/0x2000)=nil, 0x2000) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x8) sendfile(r1, r1, &(0x7f0000000140)=0x8004, 0x1fc) 05:24:55 executing program 0: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x8600, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000200)={{0x3, 0x2, 0x6, 0x3, 0x4b6}, 0x101, 0x80000000, 'id0\x00', 'timer1\x00', 0x0, 0x7fff, 0x9, 0x8}) r1 = dup(0xffffffffffffffff) accept$packet(r1, 0x0, &(0x7f0000000140)=0x1003d1d8) add_key(&(0x7f0000000080)="819ba98164d214e7a5f17daad3670300000000000000a7222049fd5f96de1b69736cf7eeefa3e339b74748936947ae2262a53df99cd12fb9d973209c69c2c84ab7fae99f5920cf465400000000", &(0x7f00000001c0)={'syz'}, &(0x7f0000000000), 0xffffffffffffff68, 0xfffffffffffffffe) [ 239.353199] QAT: Invalid ioctl [ 239.374885] QAT: Invalid ioctl [ 239.626539] bond0: Enslaving bond_slave_0 as an active interface with an up link 05:24:55 executing program 0: mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x40000000001, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000003c0)) socketpair(0x10, 0x3, 0x100000001, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000280)={0x0, @in6={{0xa, 0x0, 0x0, @loopback}}}, &(0x7f0000000340)=0x98) close(r1) r4 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x5, 0x8000) close(r4) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000040)={0x100000001, 0x1, 0x1, 0x7, 0x2, 0x2, 0x10001, 0x9, r3}, &(0x7f0000000080)=0x20) [ 240.044533] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 240.426020] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 240.433316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 240.863620] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 240.870767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 05:24:57 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0x800000000000009) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000040807031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x80000, 0x0) [ 241.338512] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.364194] netlink: 'syz-executor0': attribute type 2 has an invalid length. [ 241.371694] netlink: 20 bytes leftover after parsing attributes in process `syz-executor0'. [ 241.523452] netlink: 'syz-executor0': attribute type 2 has an invalid length. [ 241.530879] netlink: 20 bytes leftover after parsing attributes in process `syz-executor0'. [ 242.154616] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 242.163209] team0: Port device team_slave_0 added [ 242.572793] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 242.581171] team0: Port device team_slave_1 added [ 242.827880] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 243.002638] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 243.009747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 243.018832] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 243.387307] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 243.394611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 243.404258] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 243.810841] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 243.818618] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 243.827815] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 244.079142] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 244.089182] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 244.098331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 244.331753] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 244.338486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 244.346830] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 245.589967] 8021q: adding VLAN 0 to HW filter on device team0 05:25:02 executing program 1: [ 247.521610] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.528180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.535319] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.541798] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.550509] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 247.557287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 250.450917] 8021q: adding VLAN 0 to HW filter on device bond0 05:25:07 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000000022, &(0x7f0000000480)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000640)=0x1, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg(r0, &(0x7f0000006e40)=[{{&(0x7f0000000080)=@nfc, 0x80, &(0x7f0000000000)=[{&(0x7f0000000100)='-', 0x1}], 0x1, &(0x7f0000000400)}}, {{&(0x7f0000004bc0)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000000340)}}], 0x2, 0x40) [ 251.392539] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 251.950436] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 251.957063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 251.965156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 252.530073] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.250730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.832579] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready 05:25:12 executing program 3: [ 256.373513] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 256.379914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 256.387878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 256.807118] 8021q: adding VLAN 0 to HW filter on device team0 05:25:14 executing program 4: 05:25:14 executing program 0: r0 = socket$inet6(0xa, 0x1200000000000002, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x1, 0x1) getsockname$packet(r1, &(0x7f00000000c0), &(0x7f0000000100)=0x14) sendmsg(r0, &(0x7f0000000500)={&(0x7f0000000000)=@in6={0x2, 0x4e24, 0x0, @dev}, 0x80, &(0x7f0000000480), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000000000001100000067000000bbde"], 0x12}, 0x0) 05:25:14 executing program 5: fstat(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl(0x8, &(0x7f0000000000)='./file0\x00', r0, &(0x7f00000000c0)="d9057a8c6ef167b64765c9f2") r1 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x225, 0x200) write$P9_RWRITE(r1, &(0x7f0000000140)={0xb, 0x77, 0x2, 0x8}, 0xb) ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, &(0x7f0000000180)=0x5) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r1) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f00000001c0)=[{0x0, 0x20}, {0x3, 0x3399}], 0x2) ioctl$int_in(r1, 0x5473, &(0x7f0000000200)) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000280)={0x2, &(0x7f0000000240)=[{}, {0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f00000002c0)={r2, 0x3}) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000300)) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000340)=0xe711) fsync(r1) ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f0000000380)={0x7, 0x78}) r3 = pkey_alloc(0x0, 0x1) pkey_free(r3) ioctl$void(r1, 0xc0045c79) r4 = accept(r1, &(0x7f00000003c0)=@in={0x2, 0x0, @dev}, &(0x7f0000000440)=0x80) r5 = shmget$private(0x0, 0x8000, 0x400, &(0x7f0000ff8000/0x8000)=nil) shmctl$SHM_LOCK(r5, 0xb) setfsuid(r0) splice(r1, &(0x7f0000000480)=0x41, r1, &(0x7f00000004c0), 0x9, 0xd) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000540)={&(0x7f0000000500)='./file0\x00', 0x0, 0x10}, 0x10) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000580)=0x7f, 0x4) r6 = syz_open_dev$dri(&(0x7f00000005c0)='/dev/dri/card#\x00', 0x401, 0x40000) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000600), 0x4) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000640)={[{0xfffffffffffffffe, 0x80, 0xffffffffffffffff, 0x401, 0x1ff, 0x7, 0x6, 0x6, 0x4, 0x5, 0x4a7488a1}, {0x7fff, 0x10000, 0x100000000, 0xac8, 0x2, 0x0, 0x7, 0x5, 0xd40, 0x7fffffff, 0x5, 0x0, 0x7fffffff}, {0x5, 0xff, 0xc000000000000, 0x80000001, 0x8, 0x8, 0x8, 0x154, 0x2, 0x3, 0x8, 0x4, 0xfffffffffffffffc}], 0xb2}) r7 = add_key$keyring(&(0x7f00000006c0)='keyring\x00', &(0x7f0000000700)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r7) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000740)=0x7) 05:25:14 executing program 1: 05:25:14 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000000022, &(0x7f0000000480)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000640)=0x1, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg(r0, &(0x7f0000006e40)=[{{&(0x7f0000000080)=@nfc, 0x80, &(0x7f0000000000)=[{&(0x7f0000000100)='-', 0x1}], 0x1, &(0x7f0000000400)}}, {{&(0x7f0000004bc0)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000000340)}}], 0x2, 0x40) 05:25:14 executing program 3: 05:25:15 executing program 3: 05:25:15 executing program 0: 05:25:15 executing program 1: 05:25:15 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x200000, 0x0) fcntl$getflags(r0, 0x40b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @remote}}) 05:25:15 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000000022, &(0x7f0000000480)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000640)=0x1, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg(r0, &(0x7f0000006e40)=[{{&(0x7f0000000080)=@nfc, 0x80, &(0x7f0000000000)=[{&(0x7f0000000100)='-', 0x1}], 0x1, &(0x7f0000000400)}}, {{&(0x7f0000004bc0)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000000340)}}], 0x2, 0x40) 05:25:15 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)="2f02726f75702e7374617000", 0x2761, 0x0) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000000)={@dev, @remote}, &(0x7f00000000c0)=0xc) write(r1, &(0x7f0000000380)="76fbf326faf4c5a032122f50465c0df727cfcd90bea39e389b86cbc42efcf142df38cda9ad77581a1ff9a5fa4188ad350850a6a36520fb29d3d1047d39a1c2619ac09338066aeca14a116634fdefd32c03a3eb5741e1b12b68c2c8ece00667b35fa85debb27b0050918e8f64f2b8066d9bf0e0b17e91caea4248fe8f8e61e969086162293ce8bab8508b489a95c3c13406434d48635c159385b740ca576f0d24210376fe02f72c51d947c066f43deffde579ddb806eec71ac710404185f9c7b107b5d8db", 0xc4) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000580)=0x7c9) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000480)={0x0, 0x5}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000500)=@assoc_value={r2, 0x80}, &(0x7f0000000540)=0x8) sendfile(r1, r1, &(0x7f0000002580), 0x7fffffff) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000100)=ANY=[@ANYBLOB="000003000000000000002e0fd47685b6a49b64ead69bd4faffc71310e0d86575d112d9cdc6fa01f55852086443a6d01631"], 0x1) sendfile(r1, r1, &(0x7f0000000240), 0x8000) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/161, 0xa1}], 0x1, &(0x7f0000001380)=""/127, 0x7f, 0x10001}, 0x2002) 05:25:15 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r0) getsockopt$inet_tcp_int(r0, 0x6, 0x6, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 05:25:15 executing program 0: io_setup(0x899, &(0x7f00000003c0)) io_setup(0x40000000003ff, &(0x7f0000000180)) io_setup(0x20, &(0x7f00000001c0)) io_setup(0x100000001, &(0x7f0000000280)) io_setup(0x6, &(0x7f00000002c0)) [ 260.667149] IPVS: ftp: loaded support on port[0] = 21 [ 261.449602] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.456129] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.464749] device bridge_slave_0 entered promiscuous mode [ 261.548504] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.555920] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.564179] device bridge_slave_1 entered promiscuous mode [ 261.645040] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 261.723126] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 261.960426] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 262.054913] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 262.139785] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 262.146921] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 262.227751] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 262.234872] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 262.476220] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 262.484038] team0: Port device team_slave_0 added [ 262.560414] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 262.568105] team0: Port device team_slave_1 added [ 262.647879] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 262.730609] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 262.809140] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 262.816847] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 262.826572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 262.907882] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 262.915257] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 262.924551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 263.847983] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.854502] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.861280] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.867871] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.875993] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 264.123343] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 267.120634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.421454] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 267.723146] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 267.729406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 267.737713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 268.038478] 8021q: adding VLAN 0 to HW filter on device team0 05:25:26 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000040)=0x7) r1 = dup(r0) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x7fff) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) 05:25:26 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x0, 0x0, @dev, 0x40000000000000f}, 0x1c) r1 = socket$inet6(0xa, 0x81000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto$inet6(r0, &(0x7f0000000300), 0xfdb8, 0x4008080, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 05:25:26 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000000022, &(0x7f0000000480)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000640)=0x1, 0x4) sendmmsg(r0, &(0x7f0000006e40)=[{{&(0x7f0000000080)=@nfc, 0x80, &(0x7f0000000000)=[{&(0x7f0000000100)='-', 0x1}], 0x1, &(0x7f0000000400)}}, {{&(0x7f0000004bc0)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000000340)}}], 0x2, 0x40) 05:25:26 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000000040)) tkill(r1, 0x401004000000016) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f00000000c0)=""/91) 05:25:26 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000300)="153f6234488dd25d766070") r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f00000000c0)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, 0x10) 05:25:26 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)="2f02726f75702e7374617000", 0x2761, 0x0) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000000)={@dev, @remote}, &(0x7f00000000c0)=0xc) write(r1, &(0x7f0000000380)="76fbf326faf4c5a032122f50465c0df727cfcd90bea39e389b86cbc42efcf142df38cda9ad77581a1ff9a5fa4188ad350850a6a36520fb29d3d1047d39a1c2619ac09338066aeca14a116634fdefd32c03a3eb5741e1b12b68c2c8ece00667b35fa85debb27b0050918e8f64f2b8066d9bf0e0b17e91caea4248fe8f8e61e969086162293ce8bab8508b489a95c3c13406434d48635c159385b740ca576f0d24210376fe02f72c51d947c066f43deffde579ddb806eec71ac710404185f9c7b107b5d8db", 0xc4) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000580)=0x7c9) write$cgroup_int(r1, &(0x7f00000002c0), 0x12) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000480)={0x0, 0x5}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000500)=@assoc_value={r2, 0x80}, &(0x7f0000000540)=0x8) sendfile(r1, r1, &(0x7f0000002580), 0x7fffffff) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000100)=ANY=[@ANYBLOB="000003000000000000002e0fd47685b6a49b64ead69bd4faffc71310e0d86575d112d9cdc6fa01f55852086443a6d01631"], 0x1) sendfile(r1, r1, &(0x7f0000000240), 0x8000) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/161, 0xa1}], 0x1, &(0x7f0000001380)=""/127, 0x7f, 0x10001}, 0x2002) 05:25:26 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x7e, 0x1, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r0, &(0x7f00000008c0), &(0x7f0000000840)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f0000000000), &(0x7f0000000540)}, 0x20) 05:25:26 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000000022, &(0x7f0000000480)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000640)=0x1, 0x4) sendmmsg(r0, &(0x7f0000006e40)=[{{&(0x7f0000000080)=@nfc, 0x80, &(0x7f0000000000)=[{&(0x7f0000000100)='-', 0x1}], 0x1, &(0x7f0000000400)}}, {{&(0x7f0000004bc0)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000000340)}}], 0x2, 0x40) 05:25:26 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000f36000)={&(0x7f0000333f88)=ANY=[@ANYBLOB="020300090c000000ffffffffffffffff02001300020000000000fcffffff0000030006000000000002004e20e0000001000000000000002402000100f8ffffff0000000200000000030005000000000002004e20e00000a0ea863accd2ce5ea2"], 0x60}}, 0x0) [ 271.359448] hrtimer: interrupt took 238484 ns [ 273.979141] clocksource: timekeeping watchdog on CPU0: Marking clocksource 'tsc' as unstable because the skew is too large: [ 273.990548] clocksource: 'acpi_pm' wd_now: 671e8d wd_last: 8e710f mask: ffffff [ 274.000004] clocksource: 'tsc' cs_now: 9845e03164 cs_last: 962607a3c4 mask: ffffffffffffffff [ 274.010622] tsc: Marking TSC unstable due to clocksource watchdog 05:25:27 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000680), 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x14, 0x20000018, 0x100000401, 0x0, 0x0, {0x10000000000000a}}, 0x14}}, 0x0) 05:25:27 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000000022, &(0x7f0000000480)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000640)=0x1, 0x4) sendmmsg(r0, &(0x7f0000006e40)=[{{&(0x7f0000000080)=@nfc, 0x80, &(0x7f0000000000)=[{&(0x7f0000000100)='-', 0x1}], 0x1, &(0x7f0000000400)}}, {{&(0x7f0000004bc0)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000000340)}}], 0x2, 0x40) 05:25:28 executing program 1: 05:25:28 executing program 3: 05:25:28 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x0, 0x0, @dev, 0x40000000000000f}, 0x1c) r1 = socket$inet6(0xa, 0x81000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto$inet6(r0, &(0x7f0000000300), 0xfdb8, 0x4008080, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 05:25:28 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000000022, &(0x7f0000000480)=0x1, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg(r0, &(0x7f0000006e40)=[{{&(0x7f0000000080)=@nfc, 0x80, &(0x7f0000000000)=[{&(0x7f0000000100)='-', 0x1}], 0x1, &(0x7f0000000400)}}, {{&(0x7f0000004bc0)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000000340)}}], 0x2, 0x40) [ 274.022646] TSC found unstable after boot, most likely due to broken BIOS. Use 'tsc=unstable'. [ 274.031667] sched_clock: Marking unstable (274080726197, -58097485)<-(274141644131, -119014900) [ 274.043226] clocksource: Switched to clocksource acpi_pm 05:25:30 executing program 0: 05:25:30 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000000022, &(0x7f0000000480)=0x1, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg(r0, &(0x7f0000006e40)=[{{&(0x7f0000000080)=@nfc, 0x80, &(0x7f0000000000)=[{&(0x7f0000000100)='-', 0x1}], 0x1, &(0x7f0000000400)}}, {{&(0x7f0000004bc0)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000000340)}}], 0x2, 0x40) 05:25:30 executing program 4: 05:25:30 executing program 5: 05:25:30 executing program 3: 05:25:30 executing program 1: 05:25:30 executing program 1: 05:25:30 executing program 0: 05:25:30 executing program 3: 05:25:30 executing program 5: 05:25:30 executing program 4: 05:25:30 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000000022, &(0x7f0000000480)=0x1, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg(r0, &(0x7f0000006e40)=[{{&(0x7f0000000080)=@nfc, 0x80, &(0x7f0000000000)=[{&(0x7f0000000100)='-', 0x1}], 0x1, &(0x7f0000000400)}}, {{&(0x7f0000004bc0)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000000340)}}], 0x2, 0x40) 05:25:31 executing program 0: 05:25:31 executing program 5: 05:25:31 executing program 1: 05:25:31 executing program 4: 05:25:31 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000640)=0x1, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg(r0, &(0x7f0000006e40)=[{{&(0x7f0000000080)=@nfc, 0x80, &(0x7f0000000000)=[{&(0x7f0000000100)='-', 0x1}], 0x1, &(0x7f0000000400)}}, {{&(0x7f0000004bc0)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000000340)}}], 0x2, 0x40) 05:25:31 executing program 3: 05:25:31 executing program 5: 05:25:31 executing program 0: 05:25:31 executing program 3: 05:25:31 executing program 4: 05:25:31 executing program 1: 05:25:31 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000640)=0x1, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg(r0, &(0x7f0000006e40)=[{{&(0x7f0000000080)=@nfc, 0x80, &(0x7f0000000000)=[{&(0x7f0000000100)='-', 0x1}], 0x1, &(0x7f0000000400)}}, {{&(0x7f0000004bc0)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000000340)}}], 0x2, 0x40) 05:25:32 executing program 5: 05:25:32 executing program 3: 05:25:32 executing program 4: 05:25:32 executing program 0: 05:25:32 executing program 1: 05:25:32 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000640)=0x1, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg(r0, &(0x7f0000006e40)=[{{&(0x7f0000000080)=@nfc, 0x80, &(0x7f0000000000)=[{&(0x7f0000000100)='-', 0x1}], 0x1, &(0x7f0000000400)}}, {{&(0x7f0000004bc0)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000000340)}}], 0x2, 0x40) 05:25:32 executing program 5: 05:25:32 executing program 3: 05:25:32 executing program 0: 05:25:32 executing program 4: 05:25:32 executing program 2: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000000022, &(0x7f0000000480)=0x1, 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000640)=0x1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000006e40)=[{{&(0x7f0000000080)=@nfc, 0x80, &(0x7f0000000000)=[{&(0x7f0000000100)='-', 0x1}], 0x1, &(0x7f0000000400)}}, {{&(0x7f0000004bc0)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000000340)}}], 0x2, 0x40) 05:25:33 executing program 5: 05:25:33 executing program 1: 05:25:33 executing program 3: 05:25:33 executing program 0: 05:25:33 executing program 4: 05:25:33 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000000022, &(0x7f0000000480)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000640)=0x1, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg(r0, &(0x7f0000006e40)=[{{&(0x7f0000000080)=@nfc, 0x80, &(0x7f0000000000)=[{&(0x7f0000000100)='-', 0x1}], 0x1, &(0x7f0000000400)}}, {{&(0x7f0000004bc0)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000000340)}}], 0x2, 0x40) 05:25:33 executing program 1: 05:25:33 executing program 5: 05:25:33 executing program 3: 05:25:33 executing program 4: 05:25:33 executing program 0: 05:25:34 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000000022, &(0x7f0000000480)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000640)=0x1, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg(r0, &(0x7f0000006e40)=[{{&(0x7f0000000080)=@nfc, 0x80, &(0x7f0000000000)=[{&(0x7f0000000100)='-', 0x1}], 0x1, &(0x7f0000000400)}}, {{&(0x7f0000004bc0)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000000340)}}], 0x2, 0x40) 05:25:34 executing program 1: 05:25:34 executing program 3: 05:25:34 executing program 5: 05:25:34 executing program 4: 05:25:34 executing program 1: 05:25:34 executing program 0: 05:25:34 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000000022, &(0x7f0000000480)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000640)=0x1, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg(r0, &(0x7f0000006e40)=[{{&(0x7f0000000080)=@nfc, 0x80, &(0x7f0000000000)=[{&(0x7f0000000100)='-', 0x1}], 0x1, &(0x7f0000000400)}}, {{&(0x7f0000004bc0)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000000340)}}], 0x2, 0x40) 05:25:34 executing program 3: 05:25:34 executing program 4: 05:25:34 executing program 1: 05:25:34 executing program 5: 05:25:35 executing program 3: 05:25:35 executing program 0: 05:25:35 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000480)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000640)=0x1, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg(r0, &(0x7f0000006e40)=[{{&(0x7f0000000080)=@nfc, 0x80, &(0x7f0000000000)=[{&(0x7f0000000100)='-', 0x1}], 0x1, &(0x7f0000000400)}}, {{&(0x7f0000004bc0)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000000340)}}], 0x2, 0x40) 05:25:35 executing program 3: 05:25:35 executing program 4: 05:25:35 executing program 1: 05:25:35 executing program 5: 05:25:35 executing program 0: 05:25:35 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000480)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000640)=0x1, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg(r0, &(0x7f0000006e40)=[{{&(0x7f0000000080)=@nfc, 0x80, &(0x7f0000000000)=[{&(0x7f0000000100)='-', 0x1}], 0x1, &(0x7f0000000400)}}, {{&(0x7f0000004bc0)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000000340)}}], 0x2, 0x40) 05:25:35 executing program 3: 05:25:35 executing program 1: 05:25:36 executing program 5: 05:25:36 executing program 0: 05:25:36 executing program 4: 05:25:36 executing program 1: 05:25:36 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000480)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000640)=0x1, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg(r0, &(0x7f0000006e40)=[{{&(0x7f0000000080)=@nfc, 0x80, &(0x7f0000000000)=[{&(0x7f0000000100)='-', 0x1}], 0x1, &(0x7f0000000400)}}, {{&(0x7f0000004bc0)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000000340)}}], 0x2, 0x40) 05:25:36 executing program 3: 05:25:36 executing program 5: 05:25:36 executing program 0: 05:25:36 executing program 1: 05:25:36 executing program 4: 05:25:36 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000000022, &(0x7f0000000480), 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000640)=0x1, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg(r0, &(0x7f0000006e40)=[{{&(0x7f0000000080)=@nfc, 0x80, &(0x7f0000000000)=[{&(0x7f0000000100)='-', 0x1}], 0x1, &(0x7f0000000400)}}, {{&(0x7f0000004bc0)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000000340)}}], 0x2, 0x40) 05:25:37 executing program 3: 05:25:37 executing program 0: 05:25:37 executing program 5: 05:25:37 executing program 1: 05:25:37 executing program 3: 05:25:37 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000000022, &(0x7f0000000480), 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000640)=0x1, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg(r0, &(0x7f0000006e40)=[{{&(0x7f0000000080)=@nfc, 0x80, &(0x7f0000000000)=[{&(0x7f0000000100)='-', 0x1}], 0x1, &(0x7f0000000400)}}, {{&(0x7f0000004bc0)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000000340)}}], 0x2, 0x40) 05:25:37 executing program 4: 05:25:37 executing program 0: 05:25:37 executing program 5: 05:25:37 executing program 1: 05:25:37 executing program 3: 05:25:37 executing program 0: 05:25:38 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000000022, &(0x7f0000000480), 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000640)=0x1, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg(r0, &(0x7f0000006e40)=[{{&(0x7f0000000080)=@nfc, 0x80, &(0x7f0000000000)=[{&(0x7f0000000100)='-', 0x1}], 0x1, &(0x7f0000000400)}}, {{&(0x7f0000004bc0)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000000340)}}], 0x2, 0x40) 05:25:38 executing program 4: 05:25:38 executing program 5: 05:25:38 executing program 3: 05:25:38 executing program 1: 05:25:38 executing program 0: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x85a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000040)="6c6f67696e75696400030c9a061cd9959c6bd51e89628c7aafc2f8") write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000000)={0x30}, 0x30) 05:25:38 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/pid\x00') r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x80000001, 0x549080) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000400)=0x1) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='sit0\x00', 0x10) perf_event_open$cgroup(&(0x7f00000005c0)={0x3, 0x70, 0x10001, 0x1, 0x0, 0x0, 0x0, 0x8, 0x14004, 0x9, 0x9, 0x7, 0x7, 0x0, 0x0, 0x3, 0x0, 0x9, 0x80000000, 0x8, 0x1f, 0x200, 0xd5, 0x0, 0x5, 0x5, 0x5, 0x0, 0x4, 0x5, 0x9, 0x47, 0x1, 0x8, 0x8001, 0xa, 0xffffffff80000000, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0xff, 0x5}, 0x2a160, 0xfffffffffffffff9}, r1, 0x1, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x105082) prctl$setfpexc(0xc, 0x0) r4 = getpgrp(0xffffffffffffffff) r5 = add_key(&(0x7f0000000440)='pkcs7_test\x00', &(0x7f0000000480)={'syz', 0x3}, &(0x7f00000004c0)="3fa27b1f6d63d0255df67f19ce1f1e4341882c52b599b5e0ee56", 0x1a, 0xfffffffffffffffb) keyctl$setperm(0x5, r5, 0x20210000) ioprio_set$pid(0x0, r4, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000780)=0x0) tgkill(r4, r6, 0x0) r7 = memfd_create(&(0x7f00000000c0)="000000008c00000000000000000000", 0x0) pwritev(r7, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r7) sendfile(r1, r3, &(0x7f00000ddff8), 0x102000002) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xcd, &(0x7f00000007c0)=""/4096, &(0x7f0000000200)=0x1000) ioctl$KVM_GET_PIT2(0xffffffffffffffff, 0x8070ae9f, &(0x7f0000000540)) 05:25:38 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000000022, &(0x7f0000000480)=0x1, 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000640)=0x1, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg(r0, &(0x7f0000006e40)=[{{&(0x7f0000000080)=@nfc, 0x80, &(0x7f0000000000)=[{&(0x7f0000000100)='-', 0x1}], 0x1, &(0x7f0000000400)}}, {{&(0x7f0000004bc0)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000000340)}}], 0x2, 0x40) 05:25:38 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0) ioctl$VHOST_GET_FEATURES(r0, 0x80044dff, &(0x7f0000000000)) 05:25:38 executing program 3: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x85a, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(r0, &(0x7f0000000040)="6c6f67696e75696400030c9a061cd9959c6bd51e89628c7aafc2f8") write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000000)={0x30}, 0x30) 05:25:38 executing program 4: 05:25:39 executing program 4: 05:25:39 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2]}, 0x10) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000140)={{{@in6=@remote, @in=@multicast1}}, {{@in6=@mcast1}, 0x0, @in6=@loopback}}, &(0x7f0000000240)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in6=@mcast1}}, {{@in6=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000000440)=0xe8) lstat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)) getuid() getgroups(0x1, &(0x7f0000000a80)=[0x0]) getresgid(&(0x7f0000000b80), &(0x7f0000000bc0), &(0x7f0000000c00)) getgid() fstat(r1, &(0x7f00000000c0)) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0xffffff24, 0x122, 0x0, 0x4f) read(r0, &(0x7f0000000380)=""/172, 0xffffff88) 05:25:39 executing program 0: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x85a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x801, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000240)=ANY=[@ANYRES64], 0x8) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x8, 0x0) 05:25:39 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000000022, &(0x7f0000000480)=0x1, 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000640)=0x1, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg(r0, &(0x7f0000006e40)=[{{&(0x7f0000000080)=@nfc, 0x80, &(0x7f0000000000)=[{&(0x7f0000000100)='-', 0x1}], 0x1, &(0x7f0000000400)}}, {{&(0x7f0000004bc0)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000000340)}}], 0x2, 0x40) 05:25:39 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000100)={[], 0x7a, 0x5531fee, 0x0, 0x0, 0x0, 0xf000, 0x1d000, [], 0x5}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000980)='/dev/null\x00', 0x400, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000b00)={'filter\x00', 0x0, 0x4, 0xfb, [], 0x1, &(0x7f00000009c0)=[{}], &(0x7f0000000a00)=""/251}, &(0x7f0000000b80)=0x78) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00', r0}, 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000bc0)={{{@in6=@dev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}}}, &(0x7f0000000940)=0xe8) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000d80)={0x0, @broadcast, @remote}, &(0x7f0000000dc0)=0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000021c0)={'vlan0\x00'}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000023c0)={0x0, @broadcast, @local}, &(0x7f0000002400)=0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000002740)={&(0x7f0000000380), 0xc, &(0x7f0000002700)={&(0x7f0000002440)={0x6c, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {}, [{{0x8, 0x1, r1}, {0x44, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}]}}, {{0x8, 0x1, r2}, {0x4}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x4008091) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$RNDCLEARPOOL(r0, 0x5206, &(0x7f0000000000)=0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text16={0x10, &(0x7f0000000400)="66b8010000000f01c1baf80c66b8f8a2e28366efbafc0c66b8dd52aa7966ef6436f2a40f30dbd07c800f2169650f019d64d90f214d0f01df", 0x38}], 0x1, 0x0, &(0x7f0000000200), 0x10000000000000e2) ioctl$KVM_GET_SREGS(r5, 0x8138ae83, &(0x7f0000000500)) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000080)={0x0, 0x10000}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x13, 0xc2, &(0x7f00000002c0)="fe86caffa9b5d77499ac68e1fa0c67cab9bc77", &(0x7f0000000800)=""/194, 0x9}, 0x28) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000300), 0x4) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f00000007c0), &(0x7f0000000640)=0x40) ioctl$KVM_RUN(r5, 0xae80, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000200), 0x10) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x2000000001, &(0x7f00000000c0), 0x1, 0x0) ioctl$KVM_SET_CPUID(r0, 0x4008ae8a, &(0x7f0000000480)=ANY=[@ANYBLOB="03000000000000000f000080ff0000000300000008000000faff6015000000000000008000001008010000800400000001010000000000000f0000001f00000008000000020000000600000000000000"]) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000006ffc)=0x1, 0x1f5) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="048300000309c14609005375c52cf7c21975e697b02f5c56", 0x18, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x5}, 0x1c) [ 283.565184] syz-executor5 (8155) used greatest stack depth: 49312 bytes left [ 283.593314] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 05:25:39 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/pid\x00') r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x80000001, 0x549080) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000400)=0x1) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='sit0\x00', 0x10) perf_event_open$cgroup(&(0x7f00000005c0)={0x3, 0x70, 0x10001, 0x1, 0x0, 0x0, 0x0, 0x8, 0x14004, 0x9, 0x9, 0x7, 0x7, 0x0, 0x0, 0x3, 0x0, 0x9, 0x80000000, 0x8, 0x1f, 0x200, 0xd5, 0x0, 0x5, 0x5, 0x5, 0xd6, 0x4, 0x5, 0x9, 0x47, 0x1, 0x8, 0x8001, 0x0, 0xffffffff80000000, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0xff, 0x5}, 0x2a160, 0x0, 0x0, 0x5}, r1, 0x1, r0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x105082) prctl$setfpexc(0xc, 0x0) r4 = getpgrp(0xffffffffffffffff) r5 = add_key(&(0x7f0000000440)='pkcs7_test\x00', &(0x7f0000000480)={'syz', 0x3}, &(0x7f00000004c0)="3fa27b1f6d63d0255df67f19ce1f1e4341882c52b599b5e0ee5673fd927c2b390c4d2061b93203e8415af00ae621a69541fa4e62b41ee5bdf45a", 0x3a, 0xfffffffffffffffb) keyctl$setperm(0x5, r5, 0x20210000) ioprio_set$pid(0x1, r4, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000740)={0x2, 0x0, @remote}, 0x10) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000780)=0x0) tgkill(r4, r6, 0x0) r7 = memfd_create(&(0x7f00000000c0)="000000008c00000000000000000000", 0x0) pwritev(r7, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r7) sendfile(r1, r3, &(0x7f00000ddff8), 0x102000002) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xcd, &(0x7f00000007c0)=""/4096, &(0x7f0000000200)=0x1000) ioctl$KVM_GET_PIT2(0xffffffffffffffff, 0x8070ae9f, &(0x7f0000000540)) [ 283.801856] mmap: syz-executor3 (8184) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. 05:25:40 executing program 0: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x85a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x801, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000240)=ANY=[@ANYRES64], 0x8) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x8, 0x0) 05:25:40 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/pid\x00') r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x80000001, 0x549080) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000400)=0x1) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='sit0\x00', 0x10) perf_event_open$cgroup(&(0x7f00000005c0)={0x3, 0x70, 0x10001, 0x1, 0x0, 0x0, 0x0, 0x8, 0x14004, 0x9, 0x9, 0x7, 0x7, 0x0, 0x0, 0x3, 0x0, 0x9, 0x80000000, 0x8, 0x1f, 0x200, 0xd5, 0x0, 0x5, 0x5, 0x5, 0x0, 0x4, 0x5, 0x9, 0x47, 0x1, 0x8, 0x8001, 0xa, 0xffffffff80000000, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0xff, 0x5}, 0x2a160, 0xfffffffffffffff9}, r1, 0x1, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x105082) prctl$setfpexc(0xc, 0x0) r4 = getpgrp(0xffffffffffffffff) r5 = add_key(&(0x7f0000000440)='pkcs7_test\x00', &(0x7f0000000480)={'syz', 0x3}, &(0x7f00000004c0)="3fa27b1f6d63d0255df67f19ce1f1e4341882c52b599b5e0ee56", 0x1a, 0xfffffffffffffffb) keyctl$setperm(0x5, r5, 0x20210000) ioprio_set$pid(0x0, r4, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000780)=0x0) tgkill(r4, r6, 0x0) r7 = memfd_create(&(0x7f00000000c0)="000000008c00000000000000000000", 0x0) pwritev(r7, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r7) sendfile(r1, r3, &(0x7f00000ddff8), 0x102000002) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xcd, &(0x7f00000007c0)=""/4096, &(0x7f0000000200)=0x1000) ioctl$KVM_GET_PIT2(0xffffffffffffffff, 0x8070ae9f, &(0x7f0000000540)) 05:25:40 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000000022, &(0x7f0000000480)=0x1, 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000640)=0x1, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg(r0, &(0x7f0000006e40)=[{{&(0x7f0000000080)=@nfc, 0x80, &(0x7f0000000000)=[{&(0x7f0000000100)='-', 0x1}], 0x1, &(0x7f0000000400)}}, {{&(0x7f0000004bc0)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000000340)}}], 0x2, 0x40) 05:25:40 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000000022, &(0x7f0000000480)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000640)=0x1, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg(r0, &(0x7f0000006e40)=[{{&(0x7f0000000080)=@nfc, 0x80, &(0x7f0000000000)=[{&(0x7f0000000100)='-', 0x1}], 0x1, &(0x7f0000000400)}}, {{&(0x7f0000004bc0)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000000340)}}], 0x2, 0x40) 05:25:40 executing program 0: socket$inet_tcp(0x2, 0x1, 0x0) io_setup(0x9, &(0x7f0000000000)=0x0) io_submit(r0, 0x1, &(0x7f0000000780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)}]) 05:25:40 executing program 4: r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r0, 0x4000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000000)="06", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) r2 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f00000000c0)={0x0, {0x2, 0x0, @broadcast}, {}, {0x2, 0x0, @dev}, 0x0, 0x8, 0x0, 0x0, 0x0, &(0x7f0000000080)='veth1_to_bond\x00'}) 05:25:41 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2]}, 0x10) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000140)={{{@in6=@remote, @in=@multicast1}}, {{@in6=@mcast1}, 0x0, @in6=@loopback}}, &(0x7f0000000240)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in6=@mcast1}}, {{@in6=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000000440)=0xe8) lstat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)) getuid() getgroups(0x1, &(0x7f0000000a80)=[0x0]) getresgid(&(0x7f0000000b80), &(0x7f0000000bc0), &(0x7f0000000c00)) getgid() fstat(r1, &(0x7f00000000c0)) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0xffffff24, 0x122, 0x0, 0x4f) read(r0, &(0x7f0000000380)=""/172, 0xffffff88) 05:25:41 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/pid\x00') r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x80000001, 0x549080) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000400)=0x1) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='sit0\x00', 0x10) perf_event_open$cgroup(&(0x7f00000005c0)={0x3, 0x70, 0x10001, 0x1, 0x0, 0x0, 0x0, 0x8, 0x14004, 0x9, 0x9, 0x7, 0x7, 0x0, 0x0, 0x3, 0x0, 0x9, 0x80000000, 0x8, 0x1f, 0x200, 0xd5, 0x0, 0x5, 0x5, 0x5, 0x0, 0x4, 0x5, 0x9, 0x47, 0x1, 0x8, 0x8001, 0xa, 0xffffffff80000000, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0xff, 0x5}, 0x2a160, 0xfffffffffffffff9}, r1, 0x1, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x105082) prctl$setfpexc(0xc, 0x0) r4 = getpgrp(0xffffffffffffffff) r5 = add_key(&(0x7f0000000440)='pkcs7_test\x00', &(0x7f0000000480)={'syz', 0x3}, &(0x7f00000004c0)="3fa27b1f6d63d0255df67f19ce1f1e4341882c52b599b5e0ee56", 0x1a, 0xfffffffffffffffb) keyctl$setperm(0x5, r5, 0x20210000) ioprio_set$pid(0x0, r4, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000780)=0x0) tgkill(r4, r6, 0x0) r7 = memfd_create(&(0x7f00000000c0)="000000008c00000000000000000000", 0x0) pwritev(r7, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r7) sendfile(r1, r3, &(0x7f00000ddff8), 0x102000002) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xcd, &(0x7f00000007c0)=""/4096, &(0x7f0000000200)=0x1000) ioctl$KVM_GET_PIT2(0xffffffffffffffff, 0x8070ae9f, &(0x7f0000000540)) 05:25:41 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000000022, &(0x7f0000000480)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000640)=0x1, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg(r0, &(0x7f0000006e40)=[{{&(0x7f0000000080)=@nfc, 0x80, &(0x7f0000000000)=[{&(0x7f0000000100)='-', 0x1}], 0x1, &(0x7f0000000400)}}, {{&(0x7f0000004bc0)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000000340)}}], 0x2, 0x40) [ 285.229523] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. 05:25:41 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2]}, 0x10) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000140)={{{@in6=@remote, @in=@multicast1}}, {{@in6=@mcast1}, 0x0, @in6=@loopback}}, &(0x7f0000000240)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in6=@mcast1}}, {{@in6=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000000440)=0xe8) lstat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)) getuid() getgroups(0x1, &(0x7f0000000a80)=[0x0]) getresgid(&(0x7f0000000b80), &(0x7f0000000bc0), &(0x7f0000000c00)) getgid() fstat(r1, &(0x7f00000000c0)) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0xffffff24, 0x122, 0x0, 0x4f) read(r0, &(0x7f0000000380)=""/172, 0xffffff88) [ 285.580292] ================================================================== [ 285.582029] BUG: KMSAN: uninit-value in vmx_set_constant_host_state+0x1778/0x1830 [ 285.582029] CPU: 1 PID: 8233 Comm: syz-executor3 Not tainted 4.19.0-rc4+ #66 [ 285.582029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 285.582029] Call Trace: [ 285.582029] dump_stack+0x306/0x460 [ 285.582029] ? vmx_set_constant_host_state+0x1778/0x1830 [ 285.582029] kmsan_report+0x1a2/0x2e0 [ 285.582029] __msan_warning+0x7c/0xe0 [ 285.582029] vmx_set_constant_host_state+0x1778/0x1830 [ 285.636130] vmx_create_vcpu+0x3e6f/0x7870 [ 285.636130] ? vmx_vm_init+0x340/0x340 [ 285.636130] kvm_arch_vcpu_create+0x25d/0x2f0 [ 285.636130] kvm_vm_ioctl+0x13fd/0x33d0 [ 285.636130] ? __msan_poison_alloca+0x17a/0x210 [ 285.636130] ? do_vfs_ioctl+0x18a/0x2810 [ 285.636130] ? __se_sys_ioctl+0x1da/0x270 [ 285.636130] ? vcpu_stat_clear_per_vm+0x420/0x420 [ 285.636130] ? vcpu_stat_clear_per_vm+0x420/0x420 [ 285.636130] do_vfs_ioctl+0xcf3/0x2810 [ 285.636130] ? security_file_ioctl+0x92/0x200 [ 285.636130] __se_sys_ioctl+0x1da/0x270 [ 285.636130] __x64_sys_ioctl+0x4a/0x70 [ 285.636130] do_syscall_64+0xbe/0x100 [ 285.636130] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 285.636130] RIP: 0033:0x457519 [ 285.636130] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 285.636130] RSP: 002b:00007f87e5968c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 285.636130] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457519 [ 285.636130] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000006 [ 285.636130] RBP: 000000000072c0e0 R08: 0000000000000000 R09: 0000000000000000 [ 285.636130] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f87e59696d4 [ 285.636130] R13: 00000000004bfbb7 R14: 00000000004cfc40 R15: 00000000ffffffff [ 285.636130] [ 285.636130] Local variable description: ----dt@vmx_set_constant_host_state [ 285.636130] Variable was created at: [ 285.636130] vmx_set_constant_host_state+0x2b0/0x1830 [ 285.636130] vmx_create_vcpu+0x3e6f/0x7870 [ 285.636130] ================================================================== [ 285.636130] Disabling lock debugging due to kernel taint [ 285.636130] Kernel panic - not syncing: panic_on_warn set ... [ 285.636130] [ 285.636130] CPU: 1 PID: 8233 Comm: syz-executor3 Tainted: G B 4.19.0-rc4+ #66 [ 285.636130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 285.636130] Call Trace: [ 285.636130] dump_stack+0x306/0x460 [ 285.636130] panic+0x54c/0xafa [ 285.636130] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 285.636130] kmsan_report+0x2d3/0x2e0 [ 285.636130] __msan_warning+0x7c/0xe0 [ 285.636130] vmx_set_constant_host_state+0x1778/0x1830 [ 285.636130] vmx_create_vcpu+0x3e6f/0x7870 [ 285.636130] ? vmx_vm_init+0x340/0x340 [ 285.636130] kvm_arch_vcpu_create+0x25d/0x2f0 [ 285.636130] kvm_vm_ioctl+0x13fd/0x33d0 [ 285.636130] ? __msan_poison_alloca+0x17a/0x210 [ 285.636130] ? do_vfs_ioctl+0x18a/0x2810 [ 285.636130] ? __se_sys_ioctl+0x1da/0x270 [ 285.636130] ? vcpu_stat_clear_per_vm+0x420/0x420 [ 285.636130] ? vcpu_stat_clear_per_vm+0x420/0x420 [ 285.636130] do_vfs_ioctl+0xcf3/0x2810 [ 285.636130] ? security_file_ioctl+0x92/0x200 [ 285.636130] __se_sys_ioctl+0x1da/0x270 [ 285.636130] __x64_sys_ioctl+0x4a/0x70 [ 285.636130] do_syscall_64+0xbe/0x100 [ 285.636130] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 285.636130] RIP: 0033:0x457519 [ 285.636130] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 285.636130] RSP: 002b:00007f87e5968c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 285.952047] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457519 [ 285.952047] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000006 [ 285.968908] RBP: 000000000072c0e0 R08: 0000000000000000 R09: 0000000000000000 [ 285.972395] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f87e59696d4 [ 285.972395] R13: 00000000004bfbb7 R14: 00000000004cfc40 R15: 00000000ffffffff [ 285.972395] Kernel Offset: disabled [ 285.972395] Rebooting in 86400 seconds..