[ 56.311968] audit: type=1800 audit(1539102139.341:27): pid=6059 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 57.895381] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok [ 58.170847] random: sshd: uninitialized urandom read (32 bytes read) 8[?25h[?0c. [ 58.886805] random: sshd: uninitialized urandom read (32 bytes read) Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 61.159607] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.81' (ECDSA) to the list of known hosts. [ 66.978088] random: sshd: uninitialized urandom read (32 bytes read) 2018/10/09 16:22:31 fuzzer started [ 71.425258] random: cc1: uninitialized urandom read (8 bytes read) 2018/10/09 16:22:36 dialing manager at 10.128.0.26:44001 2018/10/09 16:22:36 syscalls: 1 2018/10/09 16:22:36 code coverage: enabled 2018/10/09 16:22:36 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/10/09 16:22:36 setuid sandbox: enabled 2018/10/09 16:22:36 namespace sandbox: enabled 2018/10/09 16:22:36 Android sandbox: /sys/fs/selinux/policy does not exist 2018/10/09 16:22:36 fault injection: enabled 2018/10/09 16:22:36 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/10/09 16:22:36 net packed injection: enabled 2018/10/09 16:22:36 net device setup: enabled [ 76.039984] random: crng init done 16:24:25 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620c, &(0x7f0000000180)={0x0, 0x6800000000000000}) semget$private(0x0, 0x0, 0x0) stat(&(0x7f0000000580)='./file0/file0\x00', &(0x7f0000000340)) getegid() [ 183.204253] IPVS: ftp: loaded support on port[0] = 21 [ 185.617600] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.624210] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.632815] device bridge_slave_0 entered promiscuous mode [ 185.787520] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.794117] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.802484] device bridge_slave_1 entered promiscuous mode [ 185.940668] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 186.078858] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 186.503774] bond0: Enslaving bond_slave_0 as an active interface with an up link 16:24:29 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000140)) [ 186.652439] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 187.045528] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 187.052611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 187.345906] IPVS: ftp: loaded support on port[0] = 21 [ 187.660823] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 187.669085] team0: Port device team_slave_0 added [ 187.919328] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 187.927584] team0: Port device team_slave_1 added [ 188.225636] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 188.232678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 188.241808] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 188.478844] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 188.486115] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 188.495346] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 188.640464] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 188.648278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 188.657536] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 188.812454] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 188.820101] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 188.829323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 191.061879] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.068664] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.077215] device bridge_slave_0 entered promiscuous mode [ 191.330436] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.337119] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.345631] device bridge_slave_1 entered promiscuous mode [ 191.375205] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.381694] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.388945] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.395491] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.404455] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 191.537644] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 191.677410] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 192.104219] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 192.247440] bond0: Enslaving bond_slave_0 as an active interface with an up link 16:24:35 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00007e5000)={0xffffffffffffffff}) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x101200) write$P9_RREAD(r2, &(0x7f0000000e80)={0x6f7, 0x75, 0x0, {0x6ec, "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"}}, 0x6f7) connect$unix(r1, &(0x7f00000bc000)=@abs, 0x6e) fcntl$setstatus(r0, 0x4, 0x6000) [ 192.543495] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 192.850718] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 192.858025] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 193.257216] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 193.264447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 193.330516] IPVS: ftp: loaded support on port[0] = 21 [ 194.084952] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 194.092979] team0: Port device team_slave_0 added [ 194.360699] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 194.368783] team0: Port device team_slave_1 added [ 194.689192] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 194.696399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 194.705408] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 195.003014] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 195.010360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 195.019435] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 195.315752] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 195.323306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 195.332475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 195.638954] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 195.646705] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 195.655591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 198.122533] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.129222] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.137785] device bridge_slave_0 entered promiscuous mode [ 198.455737] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.462211] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.470704] device bridge_slave_1 entered promiscuous mode [ 198.776541] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 198.788942] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.795563] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.802519] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.809207] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.818119] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 198.977276] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 199.784093] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 199.811640] bond0: Enslaving bond_slave_0 as an active interface with an up link 16:24:43 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4000004e20, @loopback}, 0x10) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x3, &(0x7f00000011c0)=ANY=[@ANYBLOB="180000000300000000000000000000009500000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x5, 0x0) recvmmsg(r2, &(0x7f0000003c80)=[{{&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000740), 0x0, &(0x7f0000000080)=""/31, 0x1f}}], 0x33c48, 0x0, &(0x7f0000003e40)={0x77359400}) write$binfmt_aout(r2, &(0x7f0000000180)=ANY=[@ANYRESHEX], 0x3b8) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000000c0)={r0, r1}) [ 200.010154] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 200.333370] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 200.340626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 200.637693] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 200.644889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 201.245334] IPVS: ftp: loaded support on port[0] = 21 [ 201.709255] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 201.717502] team0: Port device team_slave_0 added [ 202.068613] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 202.076751] team0: Port device team_slave_1 added [ 202.318483] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 202.325699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 202.334664] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 202.698474] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 202.705638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 202.714533] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 203.128397] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 203.136093] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 203.145218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 203.536225] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 203.544093] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 203.553157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 204.441854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.695236] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 207.012586] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 207.019185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 207.027514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 207.135889] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.142372] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.151220] device bridge_slave_0 entered promiscuous mode [ 207.400321] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.406890] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.413805] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.420383] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.429238] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 207.487669] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.494386] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.502850] device bridge_slave_1 entered promiscuous mode [ 207.827054] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 208.173649] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 208.291112] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.430534] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 209.281011] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 209.634778] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 209.987235] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 209.994485] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready 16:24:53 executing program 4: r0 = socket$inet6(0xa, 0x1000000000001, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clock_adjtime(0x0, &(0x7f0000000000)={0x53, 0x0, 0xffffffffffffffff}) [ 210.405241] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 210.412300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 211.599895] IPVS: ftp: loaded support on port[0] = 21 [ 211.738612] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 211.746743] team0: Port device team_slave_0 added [ 212.179422] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 212.187619] team0: Port device team_slave_1 added [ 212.652826] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 212.660067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 212.669036] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 213.060653] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 213.068287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 213.077134] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 213.435780] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 213.443346] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 213.452971] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 213.805399] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 213.813065] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 213.822213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 213.922299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.496933] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 216.999829] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 217.006404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 217.014544] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 217.775567] binder: 6951:6952 ioctl c018620c 20000180 returned -22 [ 217.818926] binder: 6951:6958 ioctl c018620c 20000180 returned -22 16:25:01 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) fcntl$lock(r0, 0x5, &(0x7f00000004c0)={0x0, 0x2}) 16:25:01 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f4634418dd25d766070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) renameat2(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x1db680ac78e5d31) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000240)={0xffffffffffffffff, 0x40, 0x18}, 0xc) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vga_arbiter\x00', 0x2040, 0x0) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000540)=0xff) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000400)={@loopback, 0x0}, &(0x7f0000000440)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x8, &(0x7f00000002c0)=@raw=[@exit, @alu={0x7, 0xffff, 0xf, 0x3, 0x7, 0x0, 0xfffffffffffffffc}, @map={0x18, 0x4, 0x1, 0x0, r1}, @alu={0x7, 0x8, 0x0, 0x7, 0x7, 0xfffffffffffffffc, 0x10}], &(0x7f0000000300)='GPL\x00', 0x0, 0x86, &(0x7f0000000340)=""/134, 0x0, 0x1, [], r3, 0x7}, 0x48) r4 = syz_open_dev$dri(&(0x7f0000000200)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(r4, 0xc0186419, &(0x7f00000001c0)={0x0, &(0x7f0000000000)=""/249, &(0x7f00000002c0)}) [ 218.594130] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.622021] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.628554] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.635571] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.642019] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.651037] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 218.741423] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.748302] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.756897] device bridge_slave_0 entered promiscuous mode 16:25:02 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f4634418dd25d766070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) renameat2(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x1db680ac78e5d31) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000240)={0xffffffffffffffff, 0x40, 0x18}, 0xc) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vga_arbiter\x00', 0x2040, 0x0) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000540)=0xff) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000400)={@loopback, 0x0}, &(0x7f0000000440)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x8, &(0x7f00000002c0)=@raw=[@exit, @alu={0x7, 0xffff, 0xf, 0x3, 0x7, 0x0, 0xfffffffffffffffc}, @map={0x18, 0x4, 0x1, 0x0, r1}, @alu={0x7, 0x8, 0x0, 0x7, 0x7, 0xfffffffffffffffc, 0x10}], &(0x7f0000000300)='GPL\x00', 0x0, 0x86, &(0x7f0000000340)=""/134, 0x0, 0x1, [], r3, 0x7}, 0x48) r4 = syz_open_dev$dri(&(0x7f0000000200)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(r4, 0xc0186419, &(0x7f00000001c0)={0x0, &(0x7f0000000000)=""/249, &(0x7f00000002c0)}) [ 219.336491] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.342957] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.351489] device bridge_slave_1 entered promiscuous mode 16:25:02 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f4634418dd25d766070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) renameat2(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x1db680ac78e5d31) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000240)={0xffffffffffffffff, 0x40, 0x18}, 0xc) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vga_arbiter\x00', 0x2040, 0x0) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000540)=0xff) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000400)={@loopback, 0x0}, &(0x7f0000000440)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x8, &(0x7f00000002c0)=@raw=[@exit, @alu={0x7, 0xffff, 0xf, 0x3, 0x7, 0x0, 0xfffffffffffffffc}, @map={0x18, 0x4, 0x1, 0x0, r1}, @alu={0x7, 0x8, 0x0, 0x7, 0x7, 0xfffffffffffffffc, 0x10}], &(0x7f0000000300)='GPL\x00', 0x0, 0x86, &(0x7f0000000340)=""/134, 0x0, 0x1, [], r3, 0x7}, 0x48) r4 = syz_open_dev$dri(&(0x7f0000000200)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(r4, 0xc0186419, &(0x7f00000001c0)={0x0, &(0x7f0000000000)=""/249, &(0x7f00000002c0)}) [ 219.631766] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 219.790620] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready 16:25:03 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f4634418dd25d766070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) renameat2(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x1db680ac78e5d31) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000240)={0xffffffffffffffff, 0x40, 0x18}, 0xc) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vga_arbiter\x00', 0x2040, 0x0) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000540)=0xff) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000400)={@loopback, 0x0}, &(0x7f0000000440)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x8, &(0x7f00000002c0)=@raw=[@exit, @alu={0x7, 0xffff, 0xf, 0x3, 0x7, 0x0, 0xfffffffffffffffc}, @map={0x18, 0x4, 0x1, 0x0, r1}, @alu={0x7, 0x8, 0x0, 0x7, 0x7, 0xfffffffffffffffc, 0x10}], &(0x7f0000000300)='GPL\x00', 0x0, 0x86, &(0x7f0000000340)=""/134, 0x0, 0x1, [], r3, 0x7}, 0x48) r4 = syz_open_dev$dri(&(0x7f0000000200)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(r4, 0xc0186419, &(0x7f00000001c0)={0x0, &(0x7f0000000000)=""/249, &(0x7f00000002c0)}) [ 220.277195] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready 16:25:03 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f4634418dd25d766070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) renameat2(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x1db680ac78e5d31) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000240)={0xffffffffffffffff, 0x40, 0x18}, 0xc) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vga_arbiter\x00', 0x2040, 0x0) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000540)=0xff) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000400)={@loopback, 0x0}, &(0x7f0000000440)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x8, &(0x7f00000002c0)=@raw=[@exit, @alu={0x7, 0xffff, 0xf, 0x3, 0x7, 0x0, 0xfffffffffffffffc}, @map={0x18, 0x4, 0x1, 0x0, r1}, @alu={0x7, 0x8, 0x0, 0x7, 0x7, 0xfffffffffffffffc, 0x10}], &(0x7f0000000300)='GPL\x00', 0x0, 0x86, &(0x7f0000000340)=""/134, 0x0, 0x1, [], r3, 0x7}, 0x48) ioctl$DRM_IOCTL_MAP_BUFS(0xffffffffffffffff, 0xc0186419, &(0x7f00000001c0)={0x0, &(0x7f0000000000)=""/249, &(0x7f00000002c0)}) 16:25:04 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f4634418dd25d766070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) renameat2(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x1db680ac78e5d31) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000240)={0xffffffffffffffff, 0x40, 0x18}, 0xc) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vga_arbiter\x00', 0x2040, 0x0) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000540)=0xff) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000400)={@loopback, 0x0}, &(0x7f0000000440)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x8, &(0x7f00000002c0)=@raw=[@exit, @alu={0x7, 0xffff, 0xf, 0x3, 0x7, 0x0, 0xfffffffffffffffc}, @map={0x18, 0x4, 0x1, 0x0, r1}, @alu={0x7, 0x8, 0x0, 0x7, 0x7, 0xfffffffffffffffc, 0x10}], &(0x7f0000000300)='GPL\x00', 0x0, 0x86, &(0x7f0000000340)=""/134, 0x0, 0x1, [], r3, 0x7}, 0x48) ioctl$DRM_IOCTL_MAP_BUFS(0xffffffffffffffff, 0xc0186419, &(0x7f00000001c0)={0x0, &(0x7f0000000000)=""/249, &(0x7f00000002c0)}) [ 221.528390] bond0: Enslaving bond_slave_0 as an active interface with an up link 16:25:04 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f4634418dd25d766070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) renameat2(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x1db680ac78e5d31) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000240)={0xffffffffffffffff, 0x40, 0x18}, 0xc) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vga_arbiter\x00', 0x2040, 0x0) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000540)=0xff) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000400)={@loopback, 0x0}, &(0x7f0000000440)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x8, &(0x7f00000002c0)=@raw=[@exit, @alu={0x7, 0xffff, 0xf, 0x3, 0x7, 0x0, 0xfffffffffffffffc}, @map={0x18, 0x4, 0x1, 0x0, r1}, @alu={0x7, 0x8, 0x0, 0x7, 0x7, 0xfffffffffffffffc, 0x10}], &(0x7f0000000300)='GPL\x00', 0x0, 0x86, &(0x7f0000000340)=""/134, 0x0, 0x1, [], r3, 0x7}, 0x48) ioctl$DRM_IOCTL_MAP_BUFS(0xffffffffffffffff, 0xc0186419, &(0x7f00000001c0)={0x0, &(0x7f0000000000)=""/249, &(0x7f00000002c0)}) [ 221.889037] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 222.225379] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 222.232444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 222.560265] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 222.567547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 223.419662] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 223.427961] team0: Port device team_slave_0 added [ 223.748551] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 223.756699] team0: Port device team_slave_1 added [ 224.022908] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 224.031968] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 224.040756] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 224.053781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.255047] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 224.262308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 224.271102] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 224.522761] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 224.530441] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 224.539353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 224.814467] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 224.822027] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 224.830931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 225.239717] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 226.366290] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 226.372636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 226.380456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 226.901705] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. 16:25:10 executing program 1: creat(&(0x7f0000000080)='./file0\x00', 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x0, "ac3c2024bfbf99ec50d31d9c7ee754aeb2440318837e4f76c50ef886f1433f0bbc0bc81634a3ee5d9ac38627d70118205d1dad05781e68ac8411859d5c0cb6e50bb5b89b3ee8356fa5015ef3e9615edd"}, 0xd8) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f00008deff8), &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) userfaultfd(0x0) [ 227.560710] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.048209] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.054810] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.061825] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.068405] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.077106] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 228.083741] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 230.791022] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.674538] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 232.334854] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 232.341285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 232.349355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 232.577707] hrtimer: interrupt took 41176 ns 16:25:15 executing program 2: r0 = semget$private(0x0, 0x201, 0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x85a, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000100)) [ 233.092221] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.746216] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.289275] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 236.420481] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 16:25:19 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4000004e20, @loopback}, 0x10) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x3, &(0x7f00000011c0)=ANY=[@ANYBLOB="180000000300000000000000000000009500000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x5, 0x0) recvmmsg(r2, &(0x7f0000003c80)=[{{&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000740), 0x0, &(0x7f0000000080)=""/31, 0x1f}}], 0x33c48, 0x0, &(0x7f0000003e40)={0x77359400}) write$binfmt_aout(r2, &(0x7f0000000180)=ANY=[@ANYRESHEX], 0x3b8) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000000c0)={r0, r1}) [ 236.817574] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 236.824190] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 236.831966] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 237.166975] 8021q: adding VLAN 0 to HW filter on device team0 16:25:22 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 16:25:22 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f4634418dd25d766070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) renameat2(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x1db680ac78e5d31) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000240)={0xffffffffffffffff, 0x40, 0x18}, 0xc) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vga_arbiter\x00', 0x2040, 0x0) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000540)=0xff) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000400)={@loopback}, &(0x7f0000000440)=0x14) r2 = syz_open_dev$dri(&(0x7f0000000200)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(r2, 0xc0186419, &(0x7f00000001c0)={0x0, &(0x7f0000000000)=""/249, &(0x7f00000002c0)}) 16:25:22 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x7fff) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000080)=""/219) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000180), &(0x7f00000001c0)=0x4) fchdir(r0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r0, 0x8008ae9d, &(0x7f0000000200)=""/153) syncfs(r0) syncfs(r0) io_setup(0x9, &(0x7f00000002c0)=0x0) io_submit(r1, 0x5, &(0x7f0000001780)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x7, 0x6806, r0, &(0x7f0000000300), 0x0, 0x2}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffffff, &(0x7f0000000380)="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", 0xff, 0x8, 0x0, 0x3, r0}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x3, 0x0, r0, &(0x7f00000004c0)="745719df48008e3032077c50610795b12abe9311cdcd16c30b8ac77fbff388bdc1bd188606736c9d55346ebdc393359dfa239d3f921df6785b0a58080297f625e0a013581a67d809f9daf621d8dc923c9ef9755817d02af452517304bd6d4ad6240e8505c47ddf80bc0c5f47e29d7f08b3105e34e4d73444b2a938a99358e4df9e1e37d7bf2b536d2ce6de33800373aaafced9a538e0a08ea011acb32db5912aa3ff6140a97bbcb59216c16476d4c74331033d7e87df8676dfd4ada149bbf355f7964ddac92a4c172b8dc4e2b5e229d02d1620ce0b60ded9", 0xd8, 0x9, 0x0, 0x2, r0}, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffa, r0, &(0x7f0000000600)="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", 0x1000, 0x9, 0x0, 0x0, r0}, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x7, 0x3f, r0, &(0x7f0000001640)="a9ca48f0d43092f20955e162b9a01a08ddc3316b4de04e2a61c28c29f23dfc52cdd9a58f56118957c64545a07d3bbc25c6246c9f5a8ce85a88512b6a7b31b21a70f0ebc79d1b6608cc4bec81bb2cbb50e5d260dce3e798bbd5b8ca78cc2c1d1fc0d9c278c45930eb9e7ca0219e8fa6816f137d2418d2f3c32c7465f39c33e9972008a393d484d0ddb4ad8d180dfd1cddc01f05218f9b2ce2e64044d086ca5039a3047e9270f5a4eb7117407453eb796e0ab184b69c247c846286d954263cf528181e0019af0960fb0cf6a4f67fe720e301840e61e904788c9beb15ea47a6fc31235e7c895430d5", 0xe7, 0x2, 0x0, 0x0, r0}]) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000017c0)=0x0) ptrace$setregs(0xf, r2, 0x20000000400000, &(0x7f0000001800)="05283549630e9a6f099712a2759ef1398f12094546008d498e6adc73754de709a473d21bf515e1b58304fa1f2cee05579b5fdaa1c9479d9eff25eabd089631105cec58d1d4010077942df97e29221fd0ad105ba7165d2122469c5b70177a241f7924a2eed372ffed46fd9b39816a405671c42448b802c5c89130da9c803a97e43a69a715e9719f2b79cbc0b03c758fc200") read(r0, &(0x7f00000018c0)=""/228, 0xe4) flock(r0, 0x1) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f00000019c0)={0x40000002}) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000001a40)={0x6, &(0x7f0000001a00)=[{}, {}, {}, {}, {}, {}]}) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000001a80)="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") ioctl$TIOCLINUX3(r0, 0x541c, &(0x7f0000001b80)) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000001bc0)={{{@in, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@rand_addr}}, &(0x7f0000001cc0)=0xe8) r4 = getgid() fchown(r0, r3, r4) write$P9_RGETLOCK(r0, &(0x7f0000001d00)={0x44, 0x37, 0x2, {0x1, 0x1, 0x100000000, r2, 0x26, '/proc/sys/net/ipv4/vs/lblc_expiration\x00'}}, 0x44) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000001d80)={0x81, 0x9, 0x20, 0x7fff, 0x0, 0x7}) fremovexattr(r0, &(0x7f0000001dc0)=@random={'btrfs.', '/proc/sys/net/ipv4/vs/lblc_expiration\x00'}) lseek(r0, 0x0, 0x3) userfaultfd(0x80000) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000001e00)={0x7fffffff, 0x7fffffff, 0x3, 0x101, 0x6, 0x6, 0x0, 0x1ff, 0x8}) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001e80)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001f00)={&(0x7f0000001ec0)={0x1c, r5, 0x204, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x999a}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4005) 16:25:22 executing program 1: creat(&(0x7f0000000080)='./file0\x00', 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x0, "ac3c2024bfbf99ec50d31d9c7ee754aeb2440318837e4f76c50ef886f1433f0bbc0bc81634a3ee5d9ac38627d70118205d1dad05781e68ac8411859d5c0cb6e50bb5b89b3ee8356fa5015ef3e9615edd"}, 0xd8) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f00008deff8), &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) userfaultfd(0x0) 16:25:22 executing program 2: r0 = semget$private(0x0, 0x201, 0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x85a, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000100)) 16:25:22 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000200), &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='proc\x00', 0x0, &(0x7f0000000240)) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xffffffffffffffff, 0x800000018032, 0xffffffffffffffff, 0x0) fstat(r1, &(0x7f0000000500)) [ 239.219850] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. 16:25:22 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x1, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000180)="d6f2acb15ddb70189f83c4480e96e1f10c04c4ea645a977b9d2381207838d32aa6807a29b6e77e10306eb0d7e3ee9b95710fcacee4f4926ecbf4787be8", 0x3d}], 0x1) 16:25:22 executing program 1: creat(&(0x7f0000000080)='./file0\x00', 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x0, "ac3c2024bfbf99ec50d31d9c7ee754aeb2440318837e4f76c50ef886f1433f0bbc0bc81634a3ee5d9ac38627d70118205d1dad05781e68ac8411859d5c0cb6e50bb5b89b3ee8356fa5015ef3e9615edd"}, 0xd8) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f00008deff8), &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) userfaultfd(0x0) 16:25:22 executing program 3: r0 = socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x85a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000000)="240000005a001f00ff03f4f9002324000a04f51108000100020100020800028001b4d950", 0x24) 16:25:22 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f4634418dd25d766070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) renameat2(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x1db680ac78e5d31) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000240)={0xffffffffffffffff, 0x40, 0x18}, 0xc) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vga_arbiter\x00', 0x2040, 0x0) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000540)=0xff) r2 = syz_open_dev$dri(&(0x7f0000000200)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(r2, 0xc0186419, &(0x7f00000001c0)={0x0, &(0x7f0000000000)=""/249, &(0x7f00000002c0)}) 16:25:22 executing program 1: creat(&(0x7f0000000080)='./file0\x00', 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x0, "ac3c2024bfbf99ec50d31d9c7ee754aeb2440318837e4f76c50ef886f1433f0bbc0bc81634a3ee5d9ac38627d70118205d1dad05781e68ac8411859d5c0cb6e50bb5b89b3ee8356fa5015ef3e9615edd"}, 0xd8) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f00008deff8), &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) userfaultfd(0x0) 16:25:22 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @loopback, @dev}, 0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='rdma.current\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000080)={"6c6f0000000004000000000600", 0xfd}) 16:25:22 executing program 2: 16:25:23 executing program 1: creat(&(0x7f0000000080)='./file0\x00', 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x0, "ac3c2024bfbf99ec50d31d9c7ee754aeb2440318837e4f76c50ef886f1433f0bbc0bc81634a3ee5d9ac38627d70118205d1dad05781e68ac8411859d5c0cb6e50bb5b89b3ee8356fa5015ef3e9615edd"}, 0xd8) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f00008deff8), &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) [ 240.481457] IPVS: ftp: loaded support on port[0] = 21 [ 242.051196] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.057969] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.066436] device bridge_slave_0 entered promiscuous mode [ 242.148554] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.155214] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.162775] device bridge_slave_1 entered promiscuous mode [ 242.238828] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 242.314942] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 242.562517] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 242.641865] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 242.790879] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 242.797939] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 243.031585] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 243.039323] team0: Port device team_slave_0 added [ 243.115506] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 243.123198] team0: Port device team_slave_1 added [ 243.199791] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 243.279226] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 243.358428] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 243.365777] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 243.374694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 243.450126] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 243.457467] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 243.466957] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 244.313052] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.319547] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.326508] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.332905] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.341411] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 244.734366] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 247.450807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.739269] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 248.020330] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 248.026663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 248.034504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 248.318297] 8021q: adding VLAN 0 to HW filter on device team0 16:25:33 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @loopback, @dev}, 0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='rdma.current\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000080)={"6c6f0000000004000000000600", 0xfd}) 16:25:33 executing program 3: 16:25:33 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f4634418dd25d766070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) renameat2(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x1db680ac78e5d31) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000240)={0xffffffffffffffff, 0x40, 0x18}, 0xc) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vga_arbiter\x00', 0x2040, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000200)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(r1, 0xc0186419, &(0x7f00000001c0)={0x0, &(0x7f0000000000)=""/249, &(0x7f00000002c0)}) 16:25:33 executing program 1: creat(&(0x7f0000000080)='./file0\x00', 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x0, "ac3c2024bfbf99ec50d31d9c7ee754aeb2440318837e4f76c50ef886f1433f0bbc0bc81634a3ee5d9ac38627d70118205d1dad05781e68ac8411859d5c0cb6e50bb5b89b3ee8356fa5015ef3e9615edd"}, 0xd8) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f00008deff8), &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 16:25:33 executing program 2: 16:25:33 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @loopback, @dev}, 0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='rdma.current\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000080)={"6c6f0000000004000000000600", 0xfd}) 16:25:33 executing program 1: creat(&(0x7f0000000080)='./file0\x00', 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x0, "ac3c2024bfbf99ec50d31d9c7ee754aeb2440318837e4f76c50ef886f1433f0bbc0bc81634a3ee5d9ac38627d70118205d1dad05781e68ac8411859d5c0cb6e50bb5b89b3ee8356fa5015ef3e9615edd"}, 0xd8) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) mount(&(0x7f00008deff8), &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) userfaultfd(0x0) 16:25:33 executing program 3: 16:25:33 executing program 2: 16:25:33 executing program 1: creat(&(0x7f0000000080)='./file0\x00', 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x0, "ac3c2024bfbf99ec50d31d9c7ee754aeb2440318837e4f76c50ef886f1433f0bbc0bc81634a3ee5d9ac38627d70118205d1dad05781e68ac8411859d5c0cb6e50bb5b89b3ee8356fa5015ef3e9615edd"}, 0xd8) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) mount(&(0x7f00008deff8), &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) userfaultfd(0x0) 16:25:33 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f4634418dd25d766070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) renameat2(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x1db680ac78e5d31) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000240)={0xffffffffffffffff, 0x40, 0x18}, 0xc) r1 = syz_open_dev$dri(&(0x7f0000000200)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(r1, 0xc0186419, &(0x7f00000001c0)={0x0, &(0x7f0000000000)=""/249, &(0x7f00000002c0)}) 16:25:33 executing program 3: 16:25:34 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @loopback, @dev}, 0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='rdma.current\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000080)={"6c6f0000000004000000000600", 0xfd}) 16:25:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x2f, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, &(0x7f0000000f4d)}) 16:25:34 executing program 3: pkey_free(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sequencer2\x00', 0x141003, 0x0) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000006c0)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x7ffff, 0x0) r3 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000500)={{0x0, 0x1, 0x20, 0x46, '\x00', 0x1}, 0x0, 0x20000160, 0x9, r3, 0x8, 0x2, 'syz1\x00', &(0x7f0000000440)=['/proc/sys/net/ipv4/vs/snat_reroute\x00', ']\x00', '^lowlan0vboxnet0\x00', 'selinux@\x00', 'bdev\x00', '\x00', 'ip6gre0\x00', ')procproc/[\x00'], 0x59, [], [0x3, 0x0, 0x530, 0x101]}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000840)={{{@in=@remote, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000940)=0xffffffffffffffc9) bind$inet(0xffffffffffffffff, &(0x7f0000b9bff0)={0x2, 0x2004e21}, 0x10) r4 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="00bc065bca180a6e50cec91df0a42f7a085d878df3f85a01209908eb2bb1000acd"]}) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x100000000000000, &(0x7f00000004c0)={@remote, 0x0}, &(0x7f0000000200)=0x14) r6 = dup2(r1, r1) setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000400)={r5, @loopback, @rand_addr=0x1cb}, 0xfffffffffffffdd1) syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') connect$inet6(r6, &(0x7f0000000640)={0xa, 0x4e24, 0x595e, @empty, 0x2d1}, 0x1c) fcntl$notify(r4, 0x402, 0x4) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000000c0), &(0x7f00000001c0)=0x4) exit(0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x200000, 0x0) close(r4) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000009c0)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e20, 0x1ff, @local, 0x1}}, 0x9, 0xa, 0x100000000000008, 0x5, 0x4}, &(0x7f0000000100)=0x98) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000140)={r8, 0x4693af02}, 0xffffffffffffff15) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x9, 0x20}, &(0x7f00000000c0)=0xc) sendto$inet(r1, &(0x7f0000fa0fff), 0x0, 0x20020006, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r6, 0x891c, &(0x7f0000000000)={'lo\x00', {0x2, 0x0, @broadcast}}) 16:25:34 executing program 1: creat(&(0x7f0000000080)='./file0\x00', 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x0, "ac3c2024bfbf99ec50d31d9c7ee754aeb2440318837e4f76c50ef886f1433f0bbc0bc81634a3ee5d9ac38627d70118205d1dad05781e68ac8411859d5c0cb6e50bb5b89b3ee8356fa5015ef3e9615edd"}, 0xd8) perf_event_open(&(0x7f0000000000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f00008deff8), &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) userfaultfd(0x0) 16:25:34 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @loopback, @dev}, 0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='rdma.current\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000080)={"6c6f0000000004000000000600", 0xfd}) 16:25:34 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f4634418dd25d766070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) renameat2(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x1db680ac78e5d31) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000240)={0xffffffffffffffff, 0x40, 0x18}, 0xc) r1 = syz_open_dev$dri(&(0x7f0000000200)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(r1, 0xc0186419, &(0x7f00000001c0)={0x0, &(0x7f0000000000)=""/249, &(0x7f00000002c0)}) [ 251.841668] binder: 7921:7923 Acquire 1 refcount change on invalid ref 0 ret -22 [ 251.873625] binder: 7921:7923 Release 1 refcount change on invalid ref 0 ret -22 [ 251.881564] binder: 7921:7923 unknown command 0 [ 251.886502] binder: 7921:7923 ioctl c0306201 20008fd0 returned -22 [ 251.987142] binder: 7921:7923 Acquire 1 refcount change on invalid ref 0 ret -22 [ 252.006283] binder: 7921:7933 Release 1 refcount change on invalid ref 0 ret -22 [ 252.014197] binder: 7921:7933 unknown command 0 [ 252.018921] binder: 7921:7933 ioctl c0306201 20008fd0 returned -22 16:25:35 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)="0000004000dda83ebc89012834bd6678b674512d6eded020ba2e51669745a985ba88344c18f4a1ea6f16ae85517829152512a9eb") r1 = openat$cgroup_ro(r0, &(0x7f0000000140)="6d656d0001792f060000000000000016d442abe3fa72656e7400", 0x0, 0x0) preadv(r1, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x32a5449}], 0x340, 0x2000107c) mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x8001, &(0x7f0000000080)=0x9, 0x4, 0x0) 16:25:35 executing program 1: creat(&(0x7f0000000080)='./file0\x00', 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f00008deff8), &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) userfaultfd(0x0) 16:25:35 executing program 1: creat(&(0x7f0000000080)='./file0\x00', 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f00008deff8), &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) userfaultfd(0x0) 16:25:35 executing program 1: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f00008deff8), &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) userfaultfd(0x0) 16:25:35 executing program 1: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f00008deff8), &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) userfaultfd(0x0) 16:25:36 executing program 1: creat(&(0x7f0000000080)='./file0\x00', 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f00008deff8), &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) userfaultfd(0x0) 16:25:36 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @loopback, @dev}, 0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='rdma.current\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000080)={"6c6f0000000004000000000600", 0xfd}) 16:25:36 executing program 2: syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x1, 0xfdfdffff, &(0x7f0000000480)="f2"}) 16:25:36 executing program 3: pkey_free(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sequencer2\x00', 0x141003, 0x0) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000006c0)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x7ffff, 0x0) r3 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000500)={{0x0, 0x1, 0x20, 0x46, '\x00', 0x1}, 0x0, 0x20000160, 0x9, r3, 0x8, 0x2, 'syz1\x00', &(0x7f0000000440)=['/proc/sys/net/ipv4/vs/snat_reroute\x00', ']\x00', '^lowlan0vboxnet0\x00', 'selinux@\x00', 'bdev\x00', '\x00', 'ip6gre0\x00', ')procproc/[\x00'], 0x59, [], [0x3, 0x0, 0x530, 0x101]}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000840)={{{@in=@remote, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000940)=0xffffffffffffffc9) bind$inet(0xffffffffffffffff, &(0x7f0000b9bff0)={0x2, 0x2004e21}, 0x10) r4 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="00bc065bca180a6e50cec91df0a42f7a085d878df3f85a01209908eb2bb1000acd"]}) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x100000000000000, &(0x7f00000004c0)={@remote, 0x0}, &(0x7f0000000200)=0x14) r6 = dup2(r1, r1) setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000400)={r5, @loopback, @rand_addr=0x1cb}, 0xfffffffffffffdd1) syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') connect$inet6(r6, &(0x7f0000000640)={0xa, 0x4e24, 0x595e, @empty, 0x2d1}, 0x1c) fcntl$notify(r4, 0x402, 0x4) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000000c0), &(0x7f00000001c0)=0x4) exit(0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x200000, 0x0) close(r4) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000009c0)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e20, 0x1ff, @local, 0x1}}, 0x9, 0xa, 0x100000000000008, 0x5, 0x4}, &(0x7f0000000100)=0x98) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000140)={r8, 0x4693af02}, 0xffffffffffffff15) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x9, 0x20}, &(0x7f00000000c0)=0xc) sendto$inet(r1, &(0x7f0000fa0fff), 0x0, 0x20020006, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r6, 0x891c, &(0x7f0000000000)={'lo\x00', {0x2, 0x0, @broadcast}}) 16:25:36 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f4634418dd25d766070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) renameat2(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x1db680ac78e5d31) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000240)={0xffffffffffffffff, 0x40, 0x18}, 0xc) r1 = syz_open_dev$dri(&(0x7f0000000200)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(r1, 0xc0186419, &(0x7f00000001c0)={0x0, &(0x7f0000000000)=""/249, &(0x7f00000002c0)}) 16:25:36 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @loopback, @dev}, 0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='rdma.current\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000080)={"6c6f0000000004000000000600", 0xfd}) [ 253.783773] binder: 7975 RLIMIT_NICE not set 16:25:36 executing program 1: creat(&(0x7f0000000080)='./file0\x00', 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f00008deff8), &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) userfaultfd(0x0) 16:25:37 executing program 1: creat(&(0x7f0000000080)='./file0\x00', 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f00008deff8), &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) userfaultfd(0x0) 16:25:37 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f4634418dd25d766070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) renameat2(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x1db680ac78e5d31) r1 = syz_open_dev$dri(&(0x7f0000000200)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(r1, 0xc0186419, &(0x7f00000001c0)={0x0, &(0x7f0000000000)=""/249, &(0x7f00000002c0)}) 16:25:37 executing program 1: creat(&(0x7f0000000080)='./file0\x00', 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f00008deff8), &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) userfaultfd(0x0) [ 254.485383] binder_alloc: binder_alloc_mmap_handler: 7974 20001000-20004000 already mapped failed -16 [ 254.539639] binder: BINDER_SET_CONTEXT_MGR already set [ 254.545362] binder: 7974:7999 ioctl 40046207 0 returned -16 [ 254.595188] binder: 8005 RLIMIT_NICE not set 16:25:37 executing program 2: r0 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x80000) r1 = syz_open_dev$admmidi(&(0x7f00000002c0)='/dev/admmidi#\x00', 0x0, 0x80) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000400)=""/251) fremovexattr(r0, &(0x7f0000000240)=@random={'os2.', '*eth1\x00'}) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000140)) setgroups(0x0, &(0x7f0000000500)=[0x0, 0x0]) getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff59, 0x2) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000300)={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x21}}, {0x0, @local}, 0x0, {0x2, 0x4e20, @multicast1}, 'syz_tun\x00'}) sync() fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) close(0xffffffffffffffff) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r2) 16:25:38 executing program 1: creat(&(0x7f0000000080)='./file0\x00', 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f00008deff8), &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) userfaultfd(0x0) 16:25:38 executing program 1: r0 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x80000) syz_open_dev$admmidi(&(0x7f00000002c0)='/dev/admmidi#\x00', 0x0, 0x80) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000400)=""/251) fremovexattr(r0, &(0x7f0000000240)=@random={'os2.', '*eth1\x00'}) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000140)={0x8000}) setgroups(0x0, &(0x7f0000000500)=[0x0, 0x0]) getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff59, 0x2) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000300)={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x21}}, {0x0, @local}, 0x0, {0x2, 0x4e20, @multicast1}, 'syz_tun\x00'}) sync() fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) close(0xffffffffffffffff) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r1) 16:25:38 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @loopback, @dev}, 0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='rdma.current\x00', 0x0, 0x0) 16:25:38 executing program 2: r0 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x80000) r1 = syz_open_dev$admmidi(&(0x7f00000002c0)='/dev/admmidi#\x00', 0x0, 0x80) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000400)=""/251) fremovexattr(r0, &(0x7f0000000240)=@random={'os2.', '*eth1\x00'}) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000140)) setgroups(0x0, &(0x7f0000000500)=[0x0, 0x0]) getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff59, 0x2) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000300)={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x21}}, {0x0, @local}, 0x0, {0x2, 0x4e20, @multicast1}, 'syz_tun\x00'}) sync() fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) close(0xffffffffffffffff) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r2) 16:25:38 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000580)={&(0x7f0000000000), 0xc, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x1}}, 0x0) 16:25:38 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x40, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0xae78, &(0x7f0000000000)) 16:25:38 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f4634418dd25d766070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) renameat2(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x1db680ac78e5d31) r1 = syz_open_dev$dri(&(0x7f0000000200)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(r1, 0xc0186419, &(0x7f00000001c0)={0x0, &(0x7f0000000000)=""/249, &(0x7f00000002c0)}) 16:25:39 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1d}, 0xe) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000000100)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffff87}, [@ldst={0x7}]}, &(0x7f0000003ff6)='syzkaller\x00', 0x5, 0x450, &(0x7f000000cf3d)=""/195}, 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) accept4(r1, &(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000000200)=0x80, 0x800) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000240)={0x0, 0x1, 0x2, [0xff, 0x7]}, &(0x7f0000000280)=0xc) [ 256.256167] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. 16:25:39 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffefffefffffff82) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000000)="f8", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x1fef0) r2 = accept4(r0, &(0x7f0000000040)=@ipx, &(0x7f00000000c0)=0x80, 0x0) dup3(r0, r1, 0x0) write(r2, &(0x7f0000000280)="ea", 0x1) 16:25:39 executing program 2: openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x480000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xcf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp6\x00') r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$VT_GETMODE(0xffffffffffffffff, 0x5601, &(0x7f0000000400)) bind$netlink(r0, &(0x7f0000000000), 0xc) 16:25:40 executing program 2: r0 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x80000) r1 = syz_open_dev$admmidi(&(0x7f00000002c0)='/dev/admmidi#\x00', 0x80000000, 0x80) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000400)=""/251) fremovexattr(r0, &(0x7f0000000240)=@random={'os2.', '*eth1\x00'}) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x0, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000140)={0x8000}) setgroups(0x1, &(0x7f0000000500)=[0x0]) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f00000000c0)=0x8) getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff59, 0x2) mmap$binder(&(0x7f000003e000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000300)={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x21}}, {0x0, @local}, 0x0, {0x2, 0x4e20, @multicast1}, 'syz_tun\x00'}) sync() ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000280)=0x1f) close(0xffffffffffffffff) dup(0xffffffffffffffff) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r3) [ 257.184523] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. 16:25:40 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f4634418dd25d766070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) renameat2(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x1db680ac78e5d31) r1 = syz_open_dev$dri(&(0x7f0000000200)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(r1, 0xc0186419, &(0x7f00000001c0)={0x0, &(0x7f0000000000)=""/249, &(0x7f00000002c0)}) 16:25:40 executing program 3: accept4$unix(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x80000) r0 = syz_open_dev$admmidi(&(0x7f00000002c0)='/dev/admmidi#\x00', 0x80000000, 0x80) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f0000000400)=""/251) fremovexattr(0xffffffffffffffff, &(0x7f0000000240)=@random={'os2.', '*eth1\x00'}) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000140)={0x8000}) setgroups(0x0, &(0x7f0000000500)=[0x0, 0x0]) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f00000000c0)=0x8) getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff59, 0x2) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000300)={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x21}}, {0x0, @local}, 0x0, {0x2, 0x4e20, @multicast1}, 'syz_tun\x00'}) sync() fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) close(0xffffffffffffffff) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r1) 16:25:40 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x666, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x359, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x1500, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x7, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400}) 16:25:40 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @loopback, @dev}, 0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000080)={"6c6f0000000004000000000600", 0xfd}) 16:25:40 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = add_key$user(&(0x7f00000004c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f00000002c0)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r1, &(0x7f0000000740)='s', 0x1) 16:25:40 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f4634418dd25d766070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000200)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(r1, 0xc0186419, &(0x7f00000001c0)={0x0, &(0x7f0000000000)=""/249, &(0x7f00000002c0)}) 16:25:40 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @loopback, @dev}, 0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000080)={"6c6f0000000004000000000600", 0xfd}) 16:25:41 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = fanotify_init(0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000140)="0f017862660f383119680070baf80c66b8a292d98966efbafc0ced0fe975a40f00d10f01df0fc79efeff0f20d86635200000000f22d83e360f01cb", 0x3b}], 0x1, 0x0, &(0x7f0000000280), 0x0) 16:25:41 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x359, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x1500, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x7, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400}) 16:25:41 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f4634418dd25d766070") r1 = syz_open_dev$dri(&(0x7f0000000200)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(r1, 0xc0186419, &(0x7f00000001c0)={0x0, &(0x7f0000000000)=""/249, &(0x7f00000002c0)}) [ 258.337833] ================================================================== [ 258.345266] BUG: KMSAN: uninit-value in vmx_set_constant_host_state+0x1778/0x1830 [ 258.352912] CPU: 0 PID: 8110 Comm: syz-executor1 Not tainted 4.19.0-rc4+ #65 [ 258.360120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 258.369501] Call Trace: [ 258.372129] dump_stack+0x306/0x460 [ 258.375809] ? vmx_set_constant_host_state+0x1778/0x1830 [ 258.381311] kmsan_report+0x1a2/0x2e0 [ 258.385171] __msan_warning+0x7c/0xe0 [ 258.389033] vmx_set_constant_host_state+0x1778/0x1830 [ 258.394360] vmx_create_vcpu+0x3e6f/0x7870 [ 258.398626] ? kmsan_set_origin_inline+0x6b/0x120 [ 258.403508] ? __msan_poison_alloca+0x17a/0x210 [ 258.408236] ? vmx_vm_init+0x340/0x340 [ 258.412204] kvm_arch_vcpu_create+0x25d/0x2f0 [ 258.416748] kvm_vm_ioctl+0x13fd/0x33d0 [ 258.420773] ? __msan_poison_alloca+0x17a/0x210 [ 258.425488] ? do_vfs_ioctl+0x18a/0x2810 [ 258.429592] ? __se_sys_ioctl+0x1da/0x270 [ 258.433776] ? vcpu_stat_clear_per_vm+0x420/0x420 [ 258.438653] ? vcpu_stat_clear_per_vm+0x420/0x420 [ 258.443525] do_vfs_ioctl+0xcf3/0x2810 [ 258.447456] ? security_file_ioctl+0x92/0x200 [ 258.451998] __se_sys_ioctl+0x1da/0x270 [ 258.456023] __x64_sys_ioctl+0x4a/0x70 [ 258.459948] do_syscall_64+0xbe/0x100 [ 258.463791] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 258.469001] RIP: 0033:0x457579 [ 258.472224] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 258.491158] RSP: 002b:00007fe17a48bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 258.498899] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457579 [ 258.506198] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 258.513494] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 258.520779] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe17a48c6d4 [ 258.528075] R13: 00000000004bfc18 R14: 00000000004cfca0 R15: 00000000ffffffff [ 258.535385] [ 258.537064] Local variable description: ----dt@vmx_set_constant_host_state [ 258.544085] Variable was created at: [ 258.547827] vmx_set_constant_host_state+0x2b0/0x1830 [ 258.553036] vmx_create_vcpu+0x3e6f/0x7870 [ 258.557283] ================================================================== [ 258.564648] Disabling lock debugging due to kernel taint [ 258.570115] Kernel panic - not syncing: panic_on_warn set ... [ 258.570115] [ 258.577521] CPU: 0 PID: 8110 Comm: syz-executor1 Tainted: G B 4.19.0-rc4+ #65 [ 258.586115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 258.595492] Call Trace: [ 258.598112] dump_stack+0x306/0x460 [ 258.601793] panic+0x54c/0xafa [ 258.605055] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 258.610538] kmsan_report+0x2d3/0x2e0 [ 258.614382] __msan_warning+0x7c/0xe0 [ 258.618227] vmx_set_constant_host_state+0x1778/0x1830 [ 258.623553] vmx_create_vcpu+0x3e6f/0x7870 [ 258.627827] ? kmsan_set_origin_inline+0x6b/0x120 [ 258.632704] ? __msan_poison_alloca+0x17a/0x210 [ 258.637419] ? vmx_vm_init+0x340/0x340 [ 258.641352] kvm_arch_vcpu_create+0x25d/0x2f0 [ 258.645891] kvm_vm_ioctl+0x13fd/0x33d0 [ 258.649908] ? __msan_poison_alloca+0x17a/0x210 [ 258.654614] ? do_vfs_ioctl+0x18a/0x2810 [ 258.658703] ? __se_sys_ioctl+0x1da/0x270 [ 258.662878] ? vcpu_stat_clear_per_vm+0x420/0x420 [ 258.667755] ? vcpu_stat_clear_per_vm+0x420/0x420 [ 258.672627] do_vfs_ioctl+0xcf3/0x2810 [ 258.676562] ? security_file_ioctl+0x92/0x200 [ 258.681098] __se_sys_ioctl+0x1da/0x270 [ 258.685128] __x64_sys_ioctl+0x4a/0x70 [ 258.689066] do_syscall_64+0xbe/0x100 [ 258.692894] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 258.698105] RIP: 0033:0x457579 [ 258.701332] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 258.720255] RSP: 002b:00007fe17a48bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 258.727994] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457579 [ 258.735281] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 258.742570] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 258.749857] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe17a48c6d4 [ 258.757155] R13: 00000000004bfc18 R14: 00000000004cfca0 R15: 00000000ffffffff [ 258.765424] Kernel Offset: disabled [ 258.769063] Rebooting in 86400 seconds..