[....] Starting OpenBSD Secure Shell server: sshd[ 53.535535] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. [ 53.897603] audit: type=1800 audit(1539239501.951:29): pid=6002 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 53.917235] audit: type=1800 audit(1539239501.951:30): pid=6002 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 [ 54.421087] random: sshd: uninitialized urandom read (32 bytes read) [ 54.879481] random: sshd: uninitialized urandom read (32 bytes read) Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 56.876009] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.20' (ECDSA) to the list of known hosts. [ 62.826879] random: sshd: uninitialized urandom read (32 bytes read) 2018/10/11 06:31:52 fuzzer started [ 67.165102] random: cc1: uninitialized urandom read (8 bytes read) 2018/10/11 06:31:57 dialing manager at 10.128.0.26:39089 2018/10/11 06:31:57 syscalls: 1 2018/10/11 06:31:57 code coverage: enabled 2018/10/11 06:31:57 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/10/11 06:31:57 setuid sandbox: enabled 2018/10/11 06:31:57 namespace sandbox: enabled 2018/10/11 06:31:57 Android sandbox: /sys/fs/selinux/policy does not exist 2018/10/11 06:31:57 fault injection: enabled 2018/10/11 06:31:57 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/10/11 06:31:57 net packed injection: /dev/net/tun can't be opened (open /dev/net/tun: cannot allocate memory) 2018/10/11 06:31:57 net device setup: enabled [ 72.030962] random: crng init done 06:33:35 executing program 0: [ 168.652167] IPVS: ftp: loaded support on port[0] = 21 [ 169.878698] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.885393] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.894919] device bridge_slave_0 entered promiscuous mode [ 170.040388] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.047000] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.055394] device bridge_slave_1 entered promiscuous mode [ 170.184477] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 170.313374] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 170.705835] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 170.838187] bond0: Enslaving bond_slave_1 as an active interface with an up link 06:33:39 executing program 1: [ 171.486931] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 171.495032] team0: Port device team_slave_0 added [ 171.706986] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 171.715075] team0: Port device team_slave_1 added [ 171.891693] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 171.903937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 171.912912] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 172.079535] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 172.325576] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 172.333211] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 172.342024] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 172.454416] IPVS: ftp: loaded support on port[0] = 21 [ 172.586918] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 172.594638] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 172.603807] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 174.187108] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.193667] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.202254] device bridge_slave_0 entered promiscuous mode [ 174.446037] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.452971] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.461337] device bridge_slave_1 entered promiscuous mode [ 174.631250] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 174.861470] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 175.058366] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.064927] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.071971] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.078431] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.087111] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 175.422248] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 175.501332] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 175.715345] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 175.966703] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 175.973872] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 176.163857] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 176.170951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 06:33:44 executing program 2: [ 176.885901] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 176.894198] team0: Port device team_slave_0 added [ 177.070442] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 177.078421] team0: Port device team_slave_1 added [ 177.305974] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 177.332566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 177.341359] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 177.629916] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 177.637251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 177.646084] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 177.838821] IPVS: ftp: loaded support on port[0] = 21 [ 177.984782] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 177.992498] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 178.001359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 178.246955] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 178.255013] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 178.263867] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 180.292556] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.299013] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.307651] device bridge_slave_0 entered promiscuous mode [ 180.584368] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.590821] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.599362] device bridge_slave_1 entered promiscuous mode [ 180.901472] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 181.136510] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 181.231964] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.238434] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.245497] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.252040] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.260555] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 181.945601] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 182.195681] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 182.254361] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 182.425204] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 182.432471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 182.642195] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 182.649296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 183.306119] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 183.314203] team0: Port device team_slave_0 added [ 183.499620] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 183.507898] team0: Port device team_slave_1 added [ 183.799095] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 183.806433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 183.815290] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 06:33:52 executing program 3: [ 184.070107] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 184.077361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 184.086399] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 184.429897] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 184.437572] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 184.446559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 184.806174] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 184.814076] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 184.822781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 185.561378] IPVS: ftp: loaded support on port[0] = 21 [ 185.783060] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.957385] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 188.241991] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 188.248422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 188.256498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 188.403781] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.410251] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.418765] device bridge_slave_0 entered promiscuous mode [ 188.632621] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.639111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.646141] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.652675] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.661198] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 188.781351] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.787947] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.796468] device bridge_slave_1 entered promiscuous mode [ 188.850502] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 189.141863] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 189.392395] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 189.526321] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.370043] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 190.693160] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 190.982360] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 190.989485] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 191.334534] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 191.341942] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 192.346011] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 192.354155] team0: Port device team_slave_0 added [ 192.679995] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 192.688111] team0: Port device team_slave_1 added [ 192.965854] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 192.974550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 192.983404] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 193.386255] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 193.393536] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 193.402524] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready 06:34:01 executing program 4: [ 193.694361] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 193.702187] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 193.711045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 194.073333] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 194.080938] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 194.090025] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 194.310247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.331440] IPVS: ftp: loaded support on port[0] = 21 [ 195.885193] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 197.300270] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 197.306914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 197.315149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 198.319158] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.325732] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.332864] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.339318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.347813] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready 06:34:06 executing program 0: [ 198.793692] 8021q: adding VLAN 0 to HW filter on device team0 06:34:07 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2000004, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x9, 0x402800) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000040)={0x8001, {{0x2, 0x4e23}}}, 0x88) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000180), 0x4) [ 199.214409] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 199.296840] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.303486] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.311938] device bridge_slave_0 entered promiscuous mode 06:34:07 executing program 0: r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x101801) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RLERROR(r0, &(0x7f0000000180)={0x31, 0x7, 0x1, {0x28, ')\\*{\'keyringposix_acl_access\\eth0selinux'}}, 0x31) nanosleep(&(0x7f0000000000), &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) write$sndseq(r3, &(0x7f0000000080)=[{0x0, 0x1, 0x0, 0x0, @time={0x77359400}, {}, {}, @connect}], 0x55d) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000100)={0xa7, @time}) [ 199.748920] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.755627] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.764045] device bridge_slave_1 entered promiscuous mode 06:34:08 executing program 0: r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x101801) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RLERROR(r0, &(0x7f0000000180)={0x31, 0x7, 0x1, {0x28, ')\\*{\'keyringposix_acl_access\\eth0selinux'}}, 0x31) nanosleep(&(0x7f0000000000), &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) write$sndseq(r3, &(0x7f0000000080)=[{0x0, 0x1, 0x0, 0x0, @time={0x77359400}, {}, {}, @connect}], 0x55d) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000100)={0xa7, @time}) [ 200.178229] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready 06:34:08 executing program 0: r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x101801) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RLERROR(r0, &(0x7f0000000180)={0x31, 0x7, 0x1, {0x28, ')\\*{\'keyringposix_acl_access\\eth0selinux'}}, 0x31) nanosleep(&(0x7f0000000000), &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) write$sndseq(r3, &(0x7f0000000080)=[{0x0, 0x1, 0x0, 0x0, @time={0x77359400}, {}, {}, @connect}], 0x55d) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000100)={0xa7, @time}) [ 200.579775] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready 06:34:08 executing program 0: r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x101801) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RLERROR(r0, &(0x7f0000000180)={0x31, 0x7, 0x1, {0x28, ')\\*{\'keyringposix_acl_access\\eth0selinux'}}, 0x31) nanosleep(&(0x7f0000000000), &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) write$sndseq(r3, &(0x7f0000000080)=[{0x0, 0x1, 0x0, 0x0, @time={0x77359400}, {}, {}, @connect}], 0x55d) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000100)={0xa7, @time}) 06:34:09 executing program 0: r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x101801) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RLERROR(r0, &(0x7f0000000180)={0x31, 0x7, 0x1, {0x28, ')\\*{\'keyringposix_acl_access\\eth0selinux'}}, 0x31) nanosleep(&(0x7f0000000000), &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000100)={0xa7, @time}) 06:34:09 executing program 0: r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x101801) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RLERROR(r0, &(0x7f0000000180)={0x31, 0x7, 0x1, {0x28, ')\\*{\'keyringposix_acl_access\\eth0selinux'}}, 0x31) nanosleep(&(0x7f0000000000), &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000100)={0xa7, @time}) [ 201.757511] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 202.139117] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 202.453095] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 202.460179] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 202.748351] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 202.757488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 203.711987] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.745617] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 203.754084] team0: Port device team_slave_0 added [ 204.110863] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 204.119151] team0: Port device team_slave_1 added [ 204.468060] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 204.475300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 204.484140] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 204.720268] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 204.728178] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 204.736892] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 204.934030] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 204.968673] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 204.977008] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 204.985957] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 205.230758] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 205.238594] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 205.247436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 205.981848] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 205.988276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 205.996257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 06:34:14 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000000040)) tkill(r1, 0x401004000000016) ioctl$TIOCSCTTY(r2, 0x540e, 0x0) [ 207.096308] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.046369] clocksource: timekeeping watchdog on CPU1: Marking clocksource 'tsc' as unstable because the skew is too large: [ 210.057822] clocksource: 'acpi_pm' wd_now: 1cb37b wd_last: 5ba41a mask: ffffff [ 210.067466] clocksource: 'tsc' cs_now: 763240de59 cs_last: 744dbb31f4 mask: ffffffffffffffff [ 210.078126] tsc: Marking TSC unstable due to clocksource watchdog [ 210.096396] TSC found unstable after boot, most likely due to broken BIOS. Use 'tsc=unstable'. [ 210.105344] sched_clock: Marking unstable (210164831269, -68454583)<-(210214580250, -118202729) [ 210.106376] clocksource: Switched to clocksource acpi_pm [ 210.182426] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.188878] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.196000] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.202562] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.210965] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 210.217746] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 211.828347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.587361] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 213.360566] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 213.367274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 213.375291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 06:34:21 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/65, 0x41}], 0x1, 0x0) [ 214.045608] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.028289] 8021q: adding VLAN 0 to HW filter on device bond0 06:34:25 executing program 3: perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000000)=0x4) [ 217.507505] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 217.803397] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 217.810000] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 217.817985] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 218.114557] 8021q: adding VLAN 0 to HW filter on device team0 06:34:28 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x2000000802, 0x0) connect$inet6(r2, &(0x7f000000cfe4), 0x1c) sendmmsg(r2, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000000c0)}}], 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 06:34:28 executing program 0: r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x101801) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RLERROR(r0, &(0x7f0000000180)={0x31, 0x7, 0x1, {0x28, ')\\*{\'keyringposix_acl_access\\eth0selinux'}}, 0x31) nanosleep(&(0x7f0000000000), &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000100)={0xa7, @time}) 06:34:28 executing program 5: lsetxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.nlink\x00', &(0x7f0000000080)={'L+', 0x9}, 0x28, 0x1) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)) r0 = dup(0xffffffffffffff9c) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e24, 0x8, @mcast2, 0x4}}}, &(0x7f0000000300)=0x84) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000340)={r1, 0x4e4d, 0x30}, 0xc) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000380), &(0x7f00000003c0)=0x4) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000400)=""/4096) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000001400)={r1, @in={{0x2, 0x4e21}}, [0x8000, 0x3f, 0x3, 0x6, 0x1, 0x1, 0x20, 0x9, 0x4, 0x5, 0xffffffff, 0x7, 0x1, 0x58, 0xb882]}, &(0x7f0000001500)=0x100) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000001540)=0x1000000000) r3 = openat(0xffffffffffffffff, &(0x7f0000001580)='./file0\x00', 0x1d1000, 0x4) ioctl$KVM_S390_VCPU_FAULT(r3, 0x4008ae52, &(0x7f00000015c0)=0x3) keyctl$session_to_parent(0x12) r4 = accept4$vsock_stream(r0, &(0x7f0000001600)={0x28, 0x0, 0x0, @reserved}, 0x10, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000001640)={r2, 0x2}, &(0x7f0000001680)=0x8) setsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f00000016c0)=0x1b91, 0x4) ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x40044900, 0x3) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000001700)={r1, @in={{0x2, 0x4e23}}}, &(0x7f00000017c0)=0x84) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000001800)={0xffffffffffffffff}) r6 = syz_open_dev$vcsn(&(0x7f0000001840)='/dev/vcs#\x00', 0x20, 0x4000) getsockopt$EBT_SO_GET_ENTRIES(r6, 0x0, 0x81, &(0x7f0000001980)={'nat\x00', 0x0, 0x3, 0x85, [], 0x2, &(0x7f0000001880)=[{}, {}], &(0x7f00000018c0)=""/133}, &(0x7f0000001a00)=0x78) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000001a40)=0x7fff) ioctl$TIOCNXCL(r0, 0x540d) syz_genetlink_get_family_id$nbd(&(0x7f0000001a80)='nbd\x00') r7 = dup3(r3, r4, 0x80000) write$binfmt_elf32(r5, &(0x7f0000001ac0)={{0x7f, 0x45, 0x4c, 0x46, 0x7180, 0x0, 0x5, 0x1, 0x6, 0x2, 0x6, 0x4, 0xe1, 0x38, 0x25, 0x0, 0xfffffffffffffff8, 0x20, 0x1, 0x40c, 0x3, 0xaca3}, [{0x6, 0x2a, 0x8001, 0x55fc, 0x6, 0x3, 0x0, 0x8}, {0x70000000, 0x0, 0x9e45, 0x1f, 0x6, 0x1, 0x9}], "a7e42456ea2c1a5221c5baa80fab5caca066ac970cb4d3f2165185fffeb84f054fc4d27c998ab451665d0712eba6c2ed7f60ceae98fb9b6ddfe15399ad87bdfea27431eba61918e43a07f443cb4345053645a67b08ca60640ea35b42756921d948c67e5ec2377886b1e69f20fbf797a1213ea12eaaf2c7ec2230bf9698cce0224ca826459b05b6dcce05526e23a5fca3a6c737cb09889576cb6d401404a265aee329ba2961b8446677b0494270a7c7a337ab6573eaad1d85a5536b534b4d7faa37266517589be69a37dd90499f1ab15f195adbbe4d36dd23f1645bb9a688e2779527f7bf4245029277df8aa6db34498c", [[]]}, 0x268) socket$pptp(0x18, 0x1, 0x2) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r7, 0x40045532, &(0x7f0000001d40)=0x1) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000001d80)={0xffffffffffffffff}) bind$inet(r8, &(0x7f0000001dc0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) 06:34:28 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x0, 0x0) socket$unix(0x1, 0x4000000001, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@abs, 0x6e) connect(0xffffffffffffffff, &(0x7f0000931ff4)=@un=@file={0x0, "e91f7189591e9233614b00"}, 0xc) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)="4c0000001400197f09004b0101048c590188ffffcf3d34740600d4ff5bffff00e7e5ed7d00000000c8550000000000002758d60034650c0326356cdb47f6aaaa956086cbfe0db35200af4486", 0x4c}], 0x1) select(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000200)={0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000680)) perf_event_open(&(0x7f000025c000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x0, 0x0) 06:34:28 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000000040)) tkill(r1, 0x401004000000016) ioctl$TIOCSCTTY(r2, 0x540e, 0x0) 06:34:28 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) unshare(0x400) ioctl(r0, 0x4148, &(0x7f0000000140)) 06:34:28 executing program 0: r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x101801) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RLERROR(r0, &(0x7f0000000180)={0x31, 0x7, 0x1, {0x28, ')\\*{\'keyringposix_acl_access\\eth0selinux'}}, 0x31) nanosleep(&(0x7f0000000000), &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup2(r1, r0) write$sndseq(r3, &(0x7f0000000080)=[{0x0, 0x1, 0x0, 0x0, @time={0x77359400}, {}, {}, @connect}], 0x55d) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000100)={0xa7, @time}) [ 220.661614] hrtimer: interrupt took 238298 ns 06:34:28 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x1e, 0x0, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f0000000500)) syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x6, 0x0) socket$unix(0x1, 0x4000000001, 0x0) listen(0xffffffffffffffff, 0x1) r0 = socket$unix(0x1, 0x1, 0x0) connect(r0, &(0x7f0000931ff4)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)="4c0000001400197f09004b0101048c590188ffffcf3d34740600d4ff5bffff00e7e5ed7d00000000c8550000000000002758d60034650c0326356cdb47f6aaaa956086cbfe0db35200af4486", 0x4c}], 0x1) select(0x40, &(0x7f00000001c0)={0x200, 0x0, 0x4, 0x10001, 0x6, 0x0, 0x7, 0x8}, &(0x7f0000000200)={0x200, 0x0, 0x7, 0x0, 0x7, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 06:34:29 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={&(0x7f0000c78ff4), 0x114, &(0x7f0000df6000)={&(0x7f0000b04cf4)={0x14, 0xa, 0xa, 0xfffffffffffffffd}, 0x14}}, 0x0) 06:34:29 executing program 0: r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x101801) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RLERROR(r0, &(0x7f0000000180)={0x31, 0x7, 0x1, {0x28, ')\\*{\'keyringposix_acl_access\\eth0selinux'}}, 0x31) nanosleep(&(0x7f0000000000), &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup2(r1, r0) write$sndseq(r3, &(0x7f0000000080)=[{0x0, 0x1, 0x0, 0x0, @time={0x77359400}, {}, {}, @connect}], 0x55d) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000100)={0xa7, @time}) 06:34:29 executing program 0: r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x101801) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RLERROR(r0, &(0x7f0000000180)={0x31, 0x7, 0x1, {0x28, ')\\*{\'keyringposix_acl_access\\eth0selinux'}}, 0x31) nanosleep(&(0x7f0000000000), &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup2(r1, r0) write$sndseq(r3, &(0x7f0000000080)=[{0x0, 0x1, 0x0, 0x0, @time={0x77359400}, {}, {}, @connect}], 0x55d) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000100)={0xa7, @time}) 06:34:30 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={"626f6e643000000324feffff00"}) 06:34:30 executing program 0: r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x101801) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RLERROR(r0, &(0x7f0000000180)={0x31, 0x7, 0x1, {0x28, ')\\*{\'keyringposix_acl_access\\eth0selinux'}}, 0x31) nanosleep(&(0x7f0000000000), &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) write$sndseq(0xffffffffffffffff, &(0x7f0000000080)=[{0x0, 0x1, 0x0, 0x0, @time={0x77359400}, {}, {}, @connect}], 0x55d) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000100)={0xa7, @time}) [ 223.247718] IPVS: ftp: loaded support on port[0] = 21 06:34:31 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 225.325549] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.332112] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.339787] device bridge_slave_0 entered promiscuous mode [ 225.418216] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.424818] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.432984] device bridge_slave_1 entered promiscuous mode [ 225.510883] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 225.587330] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 225.827147] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 225.908383] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 226.061364] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 226.068482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 226.308245] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 226.316043] team0: Port device team_slave_0 added [ 226.395243] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 226.403069] team0: Port device team_slave_1 added [ 226.481250] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 226.562822] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 226.646943] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 226.654535] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 226.663459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 226.742332] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 226.749605] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 226.758565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 227.626762] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.633237] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.639960] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.646575] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.654363] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 228.005475] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 230.838303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.140355] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 231.432387] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 231.438681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 231.446661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 231.736714] 8021q: adding VLAN 0 to HW filter on device team0 06:34:41 executing program 5: sched_setattr(0x0, &(0x7f0000000080), 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) pread64(r0, &(0x7f0000000340)=""/25, 0x19, 0x0) 06:34:41 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000000040)) tkill(r1, 0x401004000000016) ioctl$TIOCSCTTY(r2, 0x540e, 0x0) 06:34:41 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x0, 0x0) socket$unix(0x1, 0x4000000001, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@abs, 0x6e) connect(0xffffffffffffffff, &(0x7f0000931ff4)=@un=@file={0x0, "e91f7189591e9233614b00"}, 0xc) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)="4c0000001400197f09004b0101048c590188ffffcf3d34740600d4ff5bffff00e7e5ed7d00000000c8550000000000002758d60034650c0326356cdb47f6aaaa956086cbfe0db35200af4486", 0x4c}], 0x1) select(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000200)={0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}, &(0x7f0000000280)={0x77359400}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000680)) perf_event_open(&(0x7f000025c000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x0, 0x0) 06:34:41 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}], 0x18) clone(0x6102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f00000002c0)=""/126) write(r0, &(0x7f0000000080)="e45a0150253b414b9d2e3d3920c7118b5c827ea5a84ef4ae0a4d997cf7d6344dcb08d3f0c4cae937762899114dc14a68159901e4c1ddda69cb646e9d15e3057d0679927afb6bda3d57fd250400f95d35e0bb36e12524c51149e0b8a3050ead8f7049526079772952651f6a64fdfb563422087a9ba45607f194ee897e318a13b1ed40f8118656ffaae188eccd342f9a1b0adc210f4f7ce8dce2d6161a4c7e33467c70170c2047a9d670628bc0cbfd760ddea38cd01525eb916243ccb839574dfe56ecce6f82b365542b15e931504c42fa85d779d954fb0a8f87c712e5ed95ace9f92f9e6486f02d606b2d8f", 0xeb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 06:34:41 executing program 0: r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x101801) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RLERROR(r0, &(0x7f0000000180)={0x31, 0x7, 0x1, {0x28, ')\\*{\'keyringposix_acl_access\\eth0selinux'}}, 0x31) nanosleep(&(0x7f0000000000), &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) write$sndseq(0xffffffffffffffff, &(0x7f0000000080)=[{0x0, 0x1, 0x0, 0x0, @time={0x77359400}, {}, {}, @connect}], 0x55d) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000100)={0xa7, @time}) 06:34:41 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000180)="0f00db670f01df66b8000000000f23d80f21f86635400000f00f23f80f09b800008ee00f009a00000f212b0f01c30f21b00f1af9", 0x34}], 0x1, 0x5d, &(0x7f0000000080), 0x0) mlockall(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) mbind(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x45, 0x2) write$binfmt_misc(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="160000000041"], 0x6) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000340), &(0x7f0000000380)=0x30) [ 233.971007] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. 06:34:42 executing program 5: 06:34:42 executing program 5: 06:34:43 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) unshare(0x400) ioctl(r0, 0x4161, &(0x7f0000000140)) 06:34:43 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[], 0xffffffffffffff35}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020f0000100000000000000000000000080012000000010008000000000000000600000000000000000000000000020000b5400100da201392000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000c7"], 0x80}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmmsg(r1, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 06:34:43 executing program 0: r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x101801) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RLERROR(r0, &(0x7f0000000180)={0x31, 0x7, 0x1, {0x28, ')\\*{\'keyringposix_acl_access\\eth0selinux'}}, 0x31) nanosleep(&(0x7f0000000000), &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) write$sndseq(0xffffffffffffffff, &(0x7f0000000080)=[{0x0, 0x1, 0x0, 0x0, @time={0x77359400}, {}, {}, @connect}], 0x55d) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000100)={0xa7, @time}) 06:34:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000180)="0f00db670f01df66b8000000000f23d80f21f86635400000f00f23f80f09b800008ee00f009a00000f212b0f01c30f21b00f1af9", 0x34}], 0x1, 0x5d, &(0x7f0000000080), 0x0) mlockall(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) mbind(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x45, 0x2) write$binfmt_misc(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="160000000041"], 0x6) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000340), &(0x7f0000000380)=0x30) 06:34:44 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000180)="0f00db670f01df66b8000000000f23d80f21f86635400000f00f23f80f09b800008ee00f009a00000f212b0f01c30f21b00f1af9", 0x34}], 0x1, 0x5d, &(0x7f0000000080), 0x0) mlockall(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) mbind(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x45, 0x2) write$binfmt_misc(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="160000000041"], 0x6) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000340), &(0x7f0000000380)=0x30) 06:34:45 executing program 1: 06:34:45 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488db85d766070") ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f00000001c0)=@generic={0x1, 0x70e000, 0x3}) 06:34:45 executing program 0: r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x101801) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) write$P9_RLERROR(r0, &(0x7f0000000180)={0x31, 0x7, 0x1, {0x28, ')\\*{\'keyringposix_acl_access\\eth0selinux'}}, 0x31) nanosleep(&(0x7f0000000000), &(0x7f00000000c0)) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) write$sndseq(r2, &(0x7f0000000080)=[{0x0, 0x1, 0x0, 0x0, @time={0x77359400}, {}, {}, @connect}], 0x55d) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000100)={0xa7, @time}) 06:34:45 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x400}, &(0x7f0000000200)={0x0, r2+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 06:34:45 executing program 4: 06:34:45 executing program 2: 06:34:45 executing program 2: 06:34:45 executing program 0: r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x101801) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) write$P9_RLERROR(r0, &(0x7f0000000180)={0x31, 0x7, 0x1, {0x28, ')\\*{\'keyringposix_acl_access\\eth0selinux'}}, 0x31) nanosleep(&(0x7f0000000000), &(0x7f00000000c0)) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) write$sndseq(r2, &(0x7f0000000080)=[{0x0, 0x1, 0x0, 0x0, @time={0x77359400}, {}, {}, @connect}], 0x55d) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000100)={0xa7, @time}) 06:34:45 executing program 4: 06:34:45 executing program 1: 06:34:45 executing program 3: 06:34:45 executing program 2: 06:34:46 executing program 4: 06:34:46 executing program 0: r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x101801) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) write$P9_RLERROR(r0, &(0x7f0000000180)={0x31, 0x7, 0x1, {0x28, ')\\*{\'keyringposix_acl_access\\eth0selinux'}}, 0x31) nanosleep(&(0x7f0000000000), &(0x7f00000000c0)) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) write$sndseq(r2, &(0x7f0000000080)=[{0x0, 0x1, 0x0, 0x0, @time={0x77359400}, {}, {}, @connect}], 0x55d) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000100)={0xa7, @time}) 06:34:46 executing program 1: 06:34:46 executing program 5: 06:34:46 executing program 2: 06:34:46 executing program 3: 06:34:46 executing program 4: 06:34:46 executing program 1: 06:34:46 executing program 0: r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x101801) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RLERROR(r0, &(0x7f0000000180)={0x31, 0x7, 0x1, {0x28, ')\\*{\'keyringposix_acl_access\\eth0selinux'}}, 0x31) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) write$sndseq(r3, &(0x7f0000000080)=[{0x0, 0x1, 0x0, 0x0, @time={0x77359400}, {}, {}, @connect}], 0x55d) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000100)={0xa7, @time}) 06:34:46 executing program 2: 06:34:46 executing program 1: 06:34:47 executing program 3: 06:34:47 executing program 4: 06:34:47 executing program 5: 06:34:47 executing program 2: 06:34:47 executing program 3: 06:34:47 executing program 1: 06:34:47 executing program 4: 06:34:47 executing program 0: r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x101801) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) write$sndseq(r3, &(0x7f0000000080)=[{0x0, 0x1, 0x0, 0x0, @time={0x77359400}, {}, {}, @connect}], 0x55d) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000100)={0xa7, @time}) 06:34:47 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x277]}) 06:34:47 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f00000039c0), 0x0) write(r3, &(0x7f0000000340), 0x10000014c) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r1, r0, 0x80000) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100)={0x20}, &(0x7f0000000140)={0x8}, &(0x7f0000000200)={0x0, r4+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000001c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 06:34:47 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r1 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000240)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f00000000c0)={0x80000004}) 06:34:47 executing program 1: ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300)=[0x0], 0x0, 0x1, 0x0, &(0x7f0000000340)=[0x0], &(0x7f0000000380)}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_NMI(r2, 0xae9a) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000080)="440fb6d0c74424009edd0000c744240200680000c7442406000000000f011c246564460f01cbb93c0a0000b848f00000ba000000000f300f01bf060000000f300f350f01f8c4c17016e866b84a008ee0", 0x50}], 0x1, 0x0, &(0x7f00000001c0), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:34:47 executing program 4: 06:34:47 executing program 0: r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x101801) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) write$sndseq(r3, &(0x7f0000000080)=[{0x0, 0x1, 0x0, 0x0, @time={0x77359400}, {}, {}, @connect}], 0x55d) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000100)={0xa7, @time}) [ 240.017921] ================================================================== [ 240.021610] BUG: KMSAN: uninit-value in vmx_set_constant_host_state+0x1778/0x1830 [ 240.021610] CPU: 0 PID: 7871 Comm: syz-executor1 Not tainted 4.19.0-rc4+ #66 [ 240.021610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 240.044825] Call Trace: [ 240.044825] dump_stack+0x306/0x460 [ 240.044825] ? vmx_set_constant_host_state+0x1778/0x1830 [ 240.044825] kmsan_report+0x1a2/0x2e0 [ 240.044825] __msan_warning+0x7c/0xe0 [ 240.044825] vmx_set_constant_host_state+0x1778/0x1830 [ 240.044825] vmx_create_vcpu+0x3e6f/0x7870 [ 240.044825] ? vmx_vm_init+0x340/0x340 [ 240.044825] kvm_arch_vcpu_create+0x25d/0x2f0 [ 240.044825] kvm_vm_ioctl+0x13fd/0x33d0 [ 240.044825] ? __msan_poison_alloca+0x17a/0x210 [ 240.044825] ? do_vfs_ioctl+0x18a/0x2810 [ 240.044825] ? __se_sys_ioctl+0x1da/0x270 [ 240.044825] ? vcpu_stat_clear_per_vm+0x420/0x420 [ 240.044825] ? vcpu_stat_clear_per_vm+0x420/0x420 [ 240.044825] do_vfs_ioctl+0xcf3/0x2810 06:34:48 executing program 3: [ 240.044825] ? security_file_ioctl+0x92/0x200 [ 240.044825] __se_sys_ioctl+0x1da/0x270 [ 240.044825] __x64_sys_ioctl+0x4a/0x70 [ 240.044825] do_syscall_64+0xbe/0x100 [ 240.131816] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 240.136239] RIP: 0033:0x457519 [ 240.141140] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 240.141140] RSP: 002b:00007f80f86f0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 240.141140] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457519 [ 240.141140] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 240.141140] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 240.141140] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f80f86f16d4 [ 240.141140] R13: 00000000004bfbb7 R14: 00000000004cfc40 R15: 00000000ffffffff [ 240.201819] [ 240.201819] Local variable description: ----dt@vmx_set_constant_host_state [ 240.207730] Variable was created at: [ 240.207730] vmx_set_constant_host_state+0x2b0/0x1830 [ 240.207730] vmx_create_vcpu+0x3e6f/0x7870 [ 240.226125] ================================================================== [ 240.226125] Disabling lock debugging due to kernel taint [ 240.226125] Kernel panic - not syncing: panic_on_warn set ... [ 240.226125] [ 240.226125] CPU: 0 PID: 7871 Comm: syz-executor1 Tainted: G B 4.19.0-rc4+ #66 [ 240.226125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 240.226125] Call Trace: 06:34:48 executing program 4: perf_event_open(&(0x7f0000940000)={0x2, 0x5e, 0xee6a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0xa, 0x0) getsockname$unix(r0, &(0x7f0000000040), &(0x7f00000000c0)=0x6e) [ 240.226125] dump_stack+0x306/0x460 [ 240.226125] panic+0x54c/0xafa [ 240.226125] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 240.226125] kmsan_report+0x2d3/0x2e0 [ 240.226125] __msan_warning+0x7c/0xe0 [ 240.226125] vmx_set_constant_host_state+0x1778/0x1830 [ 240.226125] vmx_create_vcpu+0x3e6f/0x7870 [ 240.226125] ? vmx_vm_init+0x340/0x340 [ 240.226125] kvm_arch_vcpu_create+0x25d/0x2f0 [ 240.226125] kvm_vm_ioctl+0x13fd/0x33d0 [ 240.226125] ? __msan_poison_alloca+0x17a/0x210 [ 240.226125] ? do_vfs_ioctl+0x18a/0x2810 [ 240.319170] ? __se_sys_ioctl+0x1da/0x270 [ 240.319170] ? vcpu_stat_clear_per_vm+0x420/0x420 [ 240.319170] ? vcpu_stat_clear_per_vm+0x420/0x420 [ 240.319170] do_vfs_ioctl+0xcf3/0x2810 [ 240.319170] ? security_file_ioctl+0x92/0x200 [ 240.319170] __se_sys_ioctl+0x1da/0x270 [ 240.319170] __x64_sys_ioctl+0x4a/0x70 [ 240.319170] do_syscall_64+0xbe/0x100 [ 240.319170] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 240.319170] RIP: 0033:0x457519 [ 240.319170] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 240.319170] RSP: 002b:00007f80f86f0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 240.319170] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457519 [ 240.319170] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 240.403590] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 240.403590] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f80f86f16d4 [ 240.403590] R13: 00000000004bfbb7 R14: 00000000004cfc40 R15: 00000000ffffffff [ 240.403590] Kernel Offset: disabled [ 240.403590] Rebooting in 86400 seconds..