[ 38.229437] audit: type=1800 audit(1548302029.692:27): pid=7628 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [ 38.260721] audit: type=1800 audit(1548302029.692:28): pid=7628 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 38.921575] audit: type=1800 audit(1548302030.422:29): pid=7628 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 38.940395] audit: type=1800 audit(1548302030.422:30): pid=7628 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.98' (ECDSA) to the list of known hosts. 2019/01/24 03:54:01 fuzzer started 2019/01/24 03:54:03 dialing manager at 10.128.0.26:43845 2019/01/24 03:54:03 syscalls: 1 2019/01/24 03:54:03 code coverage: enabled 2019/01/24 03:54:03 comparison tracing: enabled 2019/01/24 03:54:03 extra coverage: extra coverage is not supported by the kernel 2019/01/24 03:54:03 setuid sandbox: enabled 2019/01/24 03:54:03 namespace sandbox: enabled 2019/01/24 03:54:03 Android sandbox: /sys/fs/selinux/policy does not exist 2019/01/24 03:54:03 fault injection: enabled 2019/01/24 03:54:03 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/01/24 03:54:03 net packet injection: enabled 2019/01/24 03:54:03 net device setup: enabled 03:57:04 executing program 0: syzkaller login: [ 233.528717] IPVS: ftp: loaded support on port[0] = 21 03:57:05 executing program 1: [ 233.669092] chnl_net:caif_netlink_parms(): no params data found [ 233.766113] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.774474] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.782275] device bridge_slave_0 entered promiscuous mode [ 233.791845] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.798237] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.806167] device bridge_slave_1 entered promiscuous mode [ 233.831990] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 233.832973] IPVS: ftp: loaded support on port[0] = 21 [ 233.845167] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 233.868527] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready 03:57:05 executing program 2: [ 233.878610] team0: Port device team_slave_0 added [ 233.897097] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 233.905536] team0: Port device team_slave_1 added [ 233.921805] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 233.929297] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready 03:57:05 executing program 3: [ 234.102368] device hsr_slave_0 entered promiscuous mode [ 234.139713] device hsr_slave_1 entered promiscuous mode [ 234.189899] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 234.200014] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 234.211399] IPVS: ftp: loaded support on port[0] = 21 [ 234.280061] chnl_net:caif_netlink_parms(): no params data found [ 234.284420] IPVS: ftp: loaded support on port[0] = 21 03:57:05 executing program 4: [ 234.330893] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.337383] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.344266] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.350646] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.482242] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.488607] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.496441] device bridge_slave_0 entered promiscuous mode [ 234.510706] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.529479] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.537503] device bridge_slave_1 entered promiscuous mode [ 234.607844] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 234.615061] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.628538] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 234.645454] IPVS: ftp: loaded support on port[0] = 21 [ 234.652109] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready 03:57:06 executing program 5: [ 234.716773] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 234.733503] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 234.742693] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.767534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 234.788778] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.796411] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.804253] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 234.834680] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 234.842193] team0: Port device team_slave_0 added [ 234.864907] chnl_net:caif_netlink_parms(): no params data found [ 234.873354] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 234.881351] team0: Port device team_slave_1 added [ 234.887401] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 234.899450] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 234.906490] chnl_net:caif_netlink_parms(): no params data found [ 234.923971] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 234.931613] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 234.939220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 234.947310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 234.955185] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.961562] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.968312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 234.976644] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 234.984278] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.990629] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.012523] IPVS: ftp: loaded support on port[0] = 21 [ 235.053523] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 235.121949] device hsr_slave_0 entered promiscuous mode [ 235.159725] device hsr_slave_1 entered promiscuous mode [ 235.231438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 235.245983] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 235.255855] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 235.277319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 235.290738] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 235.297470] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.303972] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.312707] device bridge_slave_0 entered promiscuous mode [ 235.333609] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 235.341436] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.347923] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.355234] device bridge_slave_1 entered promiscuous mode [ 235.361450] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.367782] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.375711] device bridge_slave_0 entered promiscuous mode [ 235.382720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 235.390802] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 235.398325] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 235.428844] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.436806] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.443891] device bridge_slave_1 entered promiscuous mode [ 235.453110] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 235.464478] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 235.502119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 235.510493] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 235.518143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 235.525772] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 235.539955] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 235.548001] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 235.558655] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 235.565209] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 235.578746] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 235.594039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 235.601954] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 235.611365] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 235.626033] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 235.649286] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 235.657287] chnl_net:caif_netlink_parms(): no params data found [ 235.674633] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 235.684711] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 235.692081] team0: Port device team_slave_0 added [ 235.698475] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 235.728651] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 235.736893] team0: Port device team_slave_1 added [ 235.754970] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 235.763257] team0: Port device team_slave_0 added [ 235.783431] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 235.793388] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 235.801232] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 235.808456] team0: Port device team_slave_1 added [ 235.816888] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 235.825707] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 235.883726] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 235.952215] device hsr_slave_0 entered promiscuous mode [ 235.989881] device hsr_slave_1 entered promiscuous mode [ 236.030095] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.036447] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.044232] device bridge_slave_0 entered promiscuous mode [ 236.056173] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.063462] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.070682] device bridge_slave_1 entered promiscuous mode 03:57:07 executing program 0: unshare(0x24000900) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) readv(r0, 0x0, 0x0) [ 236.087718] chnl_net:caif_netlink_parms(): no params data found [ 236.097090] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 236.116583] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready 03:57:07 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video1\x00', 0x2, 0x0) r3 = syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0x0, 0x20000) r4 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x80800) r5 = creat(&(0x7f0000000140)='./file0\x00', 0x24) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000180)='bond0\x00', 0xffffffffffffffff}, 0x30) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = accept$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x0, 0x0, @local}, &(0x7f0000000300)=0x1c) r9 = syz_open_dev$vcsn(&(0x7f0000000340)='/dev/vcs#\x00', 0x1, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000380)={0x4374, 0x0, 0x9, 0x0, 0x0, [{r1}, {r2, 0x0, 0x9}, {r3}, {r4, 0x0, 0x75}, {r5, 0x0, 0x1}, {r6, 0x0, 0x5}, {r7, 0x0, 0x2}, {r8, 0x0, 0xb1}, {r9, 0x0, 0x3}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_ADDRESS={0xc, 0x1, @empty=[0x0, 0x0, 0x0, 0xf0ffffffffffff]}]}, 0x40}}, 0x0) [ 236.183501] device hsr_slave_0 entered promiscuous mode [ 236.209828] device hsr_slave_1 entered promiscuous mode [ 236.270327] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 236.278501] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 236.304626] hrtimer: interrupt took 57456 ns [ 236.320996] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 236.336582] bond0: Enslaving bond_slave_1 as an active interface with an up link 03:57:07 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x9, 0x5, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f00000000c0)}, 0x20) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={r1, 0x6, 0x1, 0x4, &(0x7f0000000040)=[0x0], 0x1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000100), &(0x7f00000000c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r0, &(0x7f0000000180), &(0x7f0000000300)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r0, &(0x7f0000000180)}, 0x10) [ 236.371776] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 236.391265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.403673] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 236.412144] team0: Port device team_slave_0 added [ 236.417659] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.444588] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.453410] device bridge_slave_0 entered promiscuous mode [ 236.460511] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.466860] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.474152] device bridge_slave_1 entered promiscuous mode [ 236.486366] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 236.496667] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 236.503387] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 236.512050] team0: Port device team_slave_1 added [ 236.531801] bond0: Enslaving bond_slave_0 as an active interface with an up link 03:57:08 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r2 = creat(&(0x7f0000000140)='./file0\x00', 0x1b) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={0x0, r2, 0x2, 0x1}, 0x14) r3 = gettid() timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$EVIOCGBITSW(r4, 0x80404525, &(0x7f0000000080)=""/59) write$evdev(r1, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r3, 0x401004000000016) bind$bt_sco(r4, &(0x7f0000000100)={0x1f, {0x80, 0xfffffffffffffff7, 0x28c5, 0x8, 0x7, 0x3ff}}, 0x8) [ 236.542281] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 236.554695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 236.561772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 236.578983] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 236.585588] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.601437] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 236.623027] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 236.631041] team0: Port device team_slave_0 added [ 236.638231] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 236.648439] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 236.663412] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 236.686064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 236.694307] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 236.702230] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.708563] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.716103] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 236.723507] team0: Port device team_slave_1 added [ 236.730768] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 236.740994] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 236.768081] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 236.775696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 236.784324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 236.792217] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.798584] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.806540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 236.815138] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 236.849323] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 236.867234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 236.942450] device hsr_slave_0 entered promiscuous mode [ 236.979591] device hsr_slave_1 entered promiscuous mode [ 237.050077] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 237.056996] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 237.070510] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 237.098586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.107208] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 237.168952] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 237.185304] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 237.197321] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 237.209695] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 237.218784] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 237.240129] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.248781] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 237.265042] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 237.312453] device hsr_slave_0 entered promiscuous mode [ 237.369777] device hsr_slave_1 entered promiscuous mode [ 237.409597] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 237.416762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 237.431945] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 237.445748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 237.454988] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 237.469788] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 237.478773] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 237.486141] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.501224] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 237.518375] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 237.526525] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 237.540134] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 237.547258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 237.555277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 237.563560] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 237.571292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 237.578227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 237.587624] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 237.596485] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 237.608148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 237.628489] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 237.635234] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.648232] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 237.655874] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 237.663785] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 237.671971] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.678305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.688172] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 237.712326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 237.720439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 237.728338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 237.736886] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.743270] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.761030] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 237.772382] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 237.796307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 237.804396] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 237.812439] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.818803] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.827796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 237.836743] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 237.847137] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 237.853946] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 237.863563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 237.875573] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 237.885778] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.892411] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.912809] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 237.932628] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 237.956231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 237.987981] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready 03:57:09 executing program 1: clone(0x80000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_GET_DUMPABLE(0x3) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x400002, 0x0) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000100)={0xa, 0x80000000, 0x2}) rt_sigtimedwait(&(0x7f00000000c0), 0x0, 0x0, 0x8) r1 = getpid() pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) ioctl$UI_END_FF_ERASE(r2, 0x400c55cb, &(0x7f0000000000)={0x5, 0xb19, 0x1}) ptrace(0x4206, r1) tkill(r1, 0x20000000009) ptrace(0x4207, r1) [ 238.011486] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 238.029069] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 238.041287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.054119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 238.082838] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 238.107885] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 238.131895] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 238.141155] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 238.148247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 238.165689] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 238.174268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 238.189531] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 238.201814] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 238.216100] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 238.228696] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready 03:57:09 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x2, 0x600000) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)) socket$alg(0x26, 0x5, 0x0) close(r0) [ 238.253818] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 238.268611] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 238.298853] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 238.317125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 238.324803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 238.339812] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 238.350088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 238.362278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 238.377235] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 238.383955] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.392502] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 238.402446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 238.411532] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 238.435324] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 238.468998] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 238.487536] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 238.503381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready 03:57:10 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000040), &(0x7f00000000c0)=0xc) mount$overlay(0x400000, 0x0, 0x0, 0x0, &(0x7f0000001340)=ANY=[]) r1 = open(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000580)={0x0, 0xa458, 0x0, 0x4, 0x200}, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r2, 0x40000000af01, &(0x7f0000000380)) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r1, 0x40045731, &(0x7f00000001c0)) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000000)={0x6, 0x3631564e, 0x5, 0x2, 0x1, @stepwise={{0x5, 0xfffffffffffffffe}, {0x7}}}) preadv(r2, &(0x7f00000003c0)=[{&(0x7f00000006c0)=""/4096, 0x1000}], 0x1, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, 0x0) close(r3) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000180)={0x0, r3}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) rename(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000380)='./file2\x00') [ 238.515777] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 238.526348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 238.553344] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 238.564898] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.571302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.584746] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 238.593451] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 238.608901] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 238.616549] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 238.636123] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 238.652233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.665978] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 238.673531] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 238.687501] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 238.695706] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.702126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.739792] protocol 88fb is buggy, dev hsr_slave_0 [ 238.740232] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 238.744938] protocol 88fb is buggy, dev hsr_slave_1 [ 238.781055] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 238.801373] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 238.817752] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 238.827183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 238.841007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 238.852359] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 238.859498] protocol 88fb is buggy, dev hsr_slave_0 [ 238.864574] protocol 88fb is buggy, dev hsr_slave_1 [ 238.874613] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 238.887429] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 238.897492] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 238.910005] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 238.916647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 238.927203] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 238.949923] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 238.961986] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 238.982054] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready 03:57:10 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000040), &(0x7f00000000c0)=0xc) mount$overlay(0x400000, 0x0, 0x0, 0x0, &(0x7f0000001340)=ANY=[]) r1 = open(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000580)={0x0, 0xa458, 0x0, 0x4, 0x200}, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r2, 0x40000000af01, &(0x7f0000000380)) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r1, 0x40045731, &(0x7f00000001c0)) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000000)={0x6, 0x3631564e, 0x5, 0x2, 0x1, @stepwise={{0x5, 0xfffffffffffffffe}, {0x7}}}) preadv(r2, &(0x7f00000003c0)=[{&(0x7f00000006c0)=""/4096, 0x1000}], 0x1, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, 0x0) close(r3) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000180)={0x0, r3}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) rename(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000380)='./file2\x00') [ 238.995325] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 239.008470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 239.034875] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 239.054338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 239.078921] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 239.094242] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 239.108564] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 239.123322] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.134146] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 239.145507] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 239.156563] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 239.168009] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 239.190157] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 239.201031] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 239.221127] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready 03:57:10 executing program 2: restart_syscall() r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000100), 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @link_local, 'bond0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0xea05000000000000}}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000000100)}}], 0x3b2, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, 0x0) r2 = dup3(r0, r0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4e20}}}, 0x0) select(0x82, &(0x7f0000000180)={0x9, 0x3, 0x2, 0xffff, 0x0, 0x100000100000001, 0x812e, 0x5}, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f00000004c0)=@int=0x4, 0xffffffbd) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000040)={0x2, [0x0, 0x0]}, &(0x7f0000000140)=0xc) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, 0x0, &(0x7f0000000340)) syz_open_dev$mice(&(0x7f00000005c0)='/dev/input/mice\x00', 0x0, 0x1004002) 03:57:10 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000000c00000025000000e8ffffff950000fddfffffff"], &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x3, 0x354, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x2a3, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000100)={0x1, 0x0, [0x0]}) [ 239.304329] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 239.333097] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 239.367620] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 239.386516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 239.404874] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 239.416495] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.422924] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.430884] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 239.438807] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 239.447040] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.453465] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.463465] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 239.481414] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 239.497355] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 239.507823] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 239.552780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 239.591867] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 239.599162] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 239.617112] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 239.625219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 239.634386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 239.642751] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 239.657622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 239.681596] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 239.689000] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 239.720002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 239.727725] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 239.738119] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 239.753754] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 239.766080] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 239.777658] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 239.793251] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 239.811726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 239.819275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 239.839972] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 239.847568] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 239.865304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 239.905047] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready 03:57:11 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000600)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x8000, 0x0) ioctl$sock_x25_SIOCDELRT(r2, 0x890c, &(0x7f0000000040)={@null=' \x00', 0xc, 'veth0_to_team\x00'}) r3 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r4 = dup2(r3, r1) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r4, 0xae04) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r4, 0x80045400, &(0x7f0000000140)) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000013000/0x18000)=nil, 0x0, 0x72, 0x0, 0x0, 0x1a1) [ 240.003609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 240.091984] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. 03:57:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000300)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000080)={0x0, 0x1000002000000001, 0x2, &(0x7f0000000040)}) 03:57:11 executing program 3: mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) lsetxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='security.evm\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="0300000010000000001ffd90b72c9e6dee748f117a8d3730cf5b318e3da0b4963c04"], 0x29, 0x0) 03:57:11 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000000c00000025000000e8ffffff950000fddfffffff"], &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x3, 0x354, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x2a3, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000100)={0x1, 0x0, [0x0]}) 03:57:11 executing program 0: r0 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x1, 0x200) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000080)={0x1, 'veth0_to_bridge\x00', 0x4}, 0x18) socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigaction(0x0, 0x0, 0x0, 0x8, &(0x7f0000000100)) 03:57:11 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f0000000000)={0x7b, 0x0, [0x7, 0xfffffffffffffc01, 0x7ff, 0x2]}) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000280)={0x77, 0x0, [0x40000081], [0xc1]}) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f00000000c0)=0x2) 03:57:11 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x12, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61, 0x0, 0x8}]}, &(0x7f0000000240)='GPL\x00', 0x7fffffff, 0xfcb1, &(0x7f0000000380)=""/251, 0x0, 0x0, [], 0x0, 0xf}, 0x48) accept(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000080)=0x80) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f00000000c0)={0x2}, 0x1) 03:57:11 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="84fffff21e000000250000000000008100000000000000000149620076fdb07bace5760ecc89f5d2707ce628454245f286efe525cb9bb75b325f39d80749065d8893d5b8c728b47464a33730f904cf51c00d34cf4949e7a754aa1705d82f3bed961209a51841f1e9b3afb4ea53ed721f912cda7868fac85737e9b29c9b9e5d3887ce65b5b7ad42a042033b272876264633b946dae9a5938117308d0a12dc91d3b8a7fa0c743a7066f73954190acd4f03e220687f9a1f464f8b7fffffffd9ac7149b371ea96"], &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) getpid() perf_event_open(&(0x7f0000000640)={0x0, 0x70, 0x0, 0x401, 0x1ff, 0x0, 0x0, 0x100000001, 0x0, 0x8, 0x0, 0x9, 0x0, 0xffffffffffffffd7, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x6, 0x89b, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x9}, 0x0, 0x4, 0x0, 0x0, 0x100000000, 0x300000000000000}, 0x0, 0x0, r0, 0x2) r2 = open(&(0x7f0000000140)='./file0\x00', 0x4000, 0x0) ioctl$TIOCPKT(r2, 0x5420, &(0x7f00000004c0)=0x81) ptrace$getsig(0x4202, 0x0, 0x7, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r1, 0x0, 0xe, 0x0, &(0x7f0000000180)="132d7733fa3232c7c215f57ce18d", 0x0, 0xd1c6}, 0x28) 03:57:11 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0xaf02, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x40, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f00000001c0)={0xf835}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x800000000008032, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, 0x0) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = memfd_create(&(0x7f0000000200)='md5sum\x00', 0x0) setuid(0xee01) write$binfmt_elf32(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000800ffffff7f1000380000030000000000000000000020000202"], 0x2e) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) setxattr$security_evm(&(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, 0x0) lsetxattr$security_ima(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f00000000c0)=""/88) shmctl$SHM_UNLOCK(0x0, 0xc) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f0000000000), 0x2, 0x10000000002) 03:57:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000300)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000080)={0x0, 0x1000002000000001, 0x2, &(0x7f0000000040)}) [ 240.539479] sched: DL replenish lagged too much 03:57:12 executing program 2: restart_syscall() r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000100), 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @link_local, 'bond0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc={0x1f, {0x0, 0xea05000000000000}}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000000100)}}], 0x3b2, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, 0x0) r2 = dup3(r0, r0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4e20}}}, 0x0) select(0x82, &(0x7f0000000180)={0x9, 0x3, 0x2, 0xffff, 0x0, 0x100000100000001, 0x812e, 0x5}, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f00000004c0)=@int=0x4, 0xffffffbd) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000040)={0x2, [0x0, 0x0]}, &(0x7f0000000140)=0xc) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, 0x0, &(0x7f0000000340)) syz_open_dev$mice(&(0x7f00000005c0)='/dev/input/mice\x00', 0x0, 0x1004002) 03:57:12 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x3, &(0x7f0000c91000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2f, 0x57}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x99, &(0x7f0000000180)=""/153}, 0x48) r1 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f00000000c0)="7e982afa57125330a13204b3ef5eef1ad3833b65f7a31cff53af0c78417ac19986c97f9c") bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="a3375f83dd2586651779c2b1dc11", 0x0, 0x6a9}, 0x28) ioctl$KVM_S390_INTERRUPT_CPU(r1, 0x4010ae94, &(0x7f0000000080)={0x6, 0xfff, 0x2}) 03:57:12 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000), &(0x7f0000000100)=0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x3, &(0x7f0000000280)="0adc1f023c129bd93f15931c7fd07819345da686859bf9ced71c9af60bcd364a97e9c9b717a902df3f13ecdb226a2904a34567ced43b3223b8d8dc1b0bccdb440f48a0ea6e037b36a1e1ad069bf88736b74c42455098483b086fca8c9d6fea6c7cfe20d9c2c426d54b2c33da1cd04dc2abc90000") setsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f0000000300)="2be5d08b68c0f5296a47c133285ae8b3ca153706cc91fd704b505d6d6c8471e6c920d960bb3f105637802ef25def36af78274a4801df218fe9c496dc6c2d07311ad57197bfbb998cbf089c63e48982fb29b06e6d642987e75aa34dc3d10f3de98b9f52b0d9122f7291fa94648d7cc96361aeb60de9d84e3afac3cc5668fc66d8e1b8a2aa20984e4d7d5a8992216b37b00acd8861561a4ba12fa894e92e46d962a3a96c3576", 0xa5) sendmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0xfffffffffffffd9b}}], 0x2, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/current\x00', 0x2, 0x0) 03:57:12 executing program 1: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) symlinkat(&(0x7f0000008ff8)='./file0\x00', 0xffffffffffffffff, 0x0) io_submit(0x0, 0x1, &(0x7f0000002780)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) write$P9_RVERSION(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="2a7b32852ba200b134a11ca9800ffeac8f1230f37ed20844b95ab66ec90db4f70c1e3e987a9b3d4bf5fe73ff8d3b60107b0337e05c52aaca4e477d0c166cebfe043ea1975f405936c72cc0d2b763bb4266e64faeda894322332fd392d6c83470abd3c31f72f38aad800c919f95d4f5f4af56b1c21ad3aeb4dc702f664442c6aafe6d1267ad7e2b700eda7dfb81bd40ba25db91cd0404595e86dea1387bb11ce164067be330ec75e49acc45bf574f7648"], 0x1) sendfile(r1, r0, &(0x7f0000000000), 0x10001) open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) sendfile(r1, r1, 0x0, 0x8000fffffffe) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0xff, 0x400) creat(&(0x7f0000000040)='./bus\x00', 0x0) 03:57:12 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='load default user:{ '], 0x1, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000000)={0x0, @aes256, 0x2, "096a2007cf63ad48"}) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) 03:57:12 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0xaf02, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x40, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f00000001c0)={0xf835}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x800000000008032, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, 0x0) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = memfd_create(&(0x7f0000000200)='md5sum\x00', 0x0) setuid(0xee01) write$binfmt_elf32(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000800ffffff7f1000380000030000000000000000000020000202"], 0x2e) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) setxattr$security_evm(&(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, 0x0) lsetxattr$security_ima(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f00000000c0)=""/88) shmctl$SHM_UNLOCK(0x0, 0xc) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f0000000000), 0x2, 0x10000000002) 03:57:12 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x3, &(0x7f0000c91000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2f, 0x57}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x99, &(0x7f0000000180)=""/153}, 0x48) r1 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f00000000c0)="7e982afa57125330a13204b3ef5eef1ad3833b65f7a31cff53af0c78417ac19986c97f9c") bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="a3375f83dd2586651779c2b1dc11", 0x0, 0x6a9}, 0x28) ioctl$KVM_S390_INTERRUPT_CPU(r1, 0x4010ae94, &(0x7f0000000080)={0x6, 0xfff, 0x2}) 03:57:12 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000001c0)=0xc00, 0x4) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x1, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_EDID(r3, 0xc0285629, &(0x7f00000003c0)={0x0, 0x1, 0x7, [], &(0x7f0000000380)=0xffffffffffffffff}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0x4) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000180)) setsockopt$inet_MCAST_LEAVE_GROUP(r3, 0x0, 0x2d, &(0x7f00000002c0)={0xe0, {{0x2, 0x4e23, @broadcast}}}, 0x88) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f000}) getsockopt$TIPC_NODE_RECVQ_DEPTH(r3, 0x10f, 0x83, &(0x7f0000000080), &(0x7f0000000140)=0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) 03:57:12 executing program 3: io_setup(0x3e, &(0x7f0000000000)=0x0) r1 = socket(0x2, 0x803, 0xff) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) io_submit(r0, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x3cb}]) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x400000, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f0000000180)={{0x1, 0x5, 0x4, 0x724, 'syz1\x00', 0x7fffffff}, 0x0, [0x6a34, 0x6, 0x3, 0x0, 0x7f, 0xb58, 0x7, 0x9, 0x800, 0x2, 0x34c000000000, 0x5, 0x4307, 0xffffffffffffff80, 0x32, 0x100000000, 0x3, 0x40, 0x6, 0x9, 0x3, 0x0, 0x0, 0x101, 0x4, 0x200, 0xc7f2, 0x2b32d6d, 0x3, 0x0, 0x80, 0x400, 0xde4, 0x400, 0x0, 0xd52e, 0xff, 0x2, 0x8, 0x1, 0x5ad6b81e, 0x2, 0x5, 0x0, 0x1000, 0x9, 0x9, 0xc2b7, 0x3e00, 0x95f7, 0x1, 0x1, 0x3418, 0x2, 0x454, 0x3, 0x1, 0x8, 0x8, 0xe12, 0x7fff, 0x0, 0x5443, 0xffffffffffffc253, 0x3, 0x8, 0xffffffffffff9913, 0x100000001, 0x90, 0x0, 0x2, 0x0, 0x1, 0x0, 0x8, 0x2, 0x3ff, 0x9, 0x10001, 0x5, 0x9, 0x7fff, 0x0, 0x9, 0x6, 0xff, 0x5, 0x7, 0x69fb, 0x0, 0x948, 0x3, 0x8, 0x0, 0x800, 0x62b, 0x5, 0x6, 0x7, 0x3, 0x1000, 0x3fa6c526, 0x5, 0x4fc, 0x0, 0x8, 0x6, 0x10000, 0x200, 0x81, 0x2, 0x9, 0x9, 0x5c, 0x80000000, 0x0, 0x1, 0x1ff, 0x8000, 0x0, 0x3, 0xff, 0x1, 0x10001, 0x3, 0x8000, 0xfffffffffffff5c8, 0x10001], {0x0, 0x989680}}) [ 240.936880] audit: type=1804 audit(1548302232.422:31): pid=7955 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir710597736/syzkaller.oucTlY/8/bus" dev="sda1" ino=16535 res=1 [ 240.965790] encrypted_key: hex blob is missing 03:57:12 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfb, 0x80}, 0xc) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) fcntl$setlease(r0, 0x400, 0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x402000, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) getsockopt$netlink(r0, 0x10e, 0x3, &(0x7f0000000280)=""/13, &(0x7f0000000300)=0xd) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000540)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000400)={0x2, 0x6}, 0x2) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000500)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10400}, 0xc, &(0x7f0000000380)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x48000}, 0x800) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r2, 0x800442d4, &(0x7f0000000240)=0x1ff) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000007c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000780), 0x0, 0x4}}, 0x20) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r4, 0x402c5342, &(0x7f0000000700)={0x3, 0x4, 0x4, {}, 0x8}) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r6 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$BLKTRACESTART(r5, 0x1274, 0x0) ioctl$PPPOEIOCSFWD(r5, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000440)={0x1, 0x4, 0x4, 0x8, {0x77359400}, {0x3, 0x0, 0x2, 0x6, 0x7, 0x180000000000, "bbf09544"}, 0x0, 0x0, @planes=0x0, 0x4}) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000000)={[], 0x1, 0xbd, 0x279d, 0x0, 0x0, r3}) [ 241.019796] encrypted_key: hex blob is missing [ 241.098930] kvm: pic: non byte read 03:57:12 executing program 0: r0 = socket$isdn_base(0x22, 0x3, 0x0) r1 = accept(r0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000000)={0x0, @remote, 0x4e20, 0x0, 'lblc\x00', 0x10, 0x3a, 0x47}, 0x2c) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000040)=0x9, 0x2) 03:57:12 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='sessionid\x00') exit(0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/52, 0x34}], 0x1, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) 03:57:12 executing program 4: syz_open_dev$sg(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, 0x0, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x20, 0x228000) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x29}}}}, &(0x7f0000000180)=0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000005c0)={r1, @in={{0x2, 0x4e22, @remote}}}, 0x84) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f00000001c0), 0x4000) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x40100, 0x0) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000480)={&(0x7f0000000200)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000280)=""/150, 0x96}, {&(0x7f0000000340)=""/14, 0xe}, {&(0x7f0000000380)=""/99, 0x63}, {&(0x7f0000000400)=""/53, 0x35}], 0x4}, 0x20) sendto$packet(r2, &(0x7f0000000040)="5ef33e420423f3618c6ec670c5e1cfa0511037346e8659501c359c0de55e48094ab13d49f96848ead204d85ddba211121e755ad7af2e4fe7a705cbc4a396ce5c91a02084efcda37fb8e2ebf8d1723d9eda94d608ab40069cbdc9f0e476aa6396f4aa89cc78d39e02d2a4750abd49e07b2631aebc269518e12fd05119228b45814e060fe77853f10bea8c252a755f5aab1fdfa3d76b7dc5a7efc9d678ba29ccabeb1fd842821e0c44543be2fbc7d784a8b51138fafcda8abe0201b1ec7fb72236735c4bfaac61f4690531a00a7acfec30dbb27d6b70", 0xd5, 0x81, &(0x7f00000004c0)={0x11, 0x1e, r3, 0x1, 0xfffffffffffffe00, 0x6, @broadcast}, 0x14) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) [ 241.122243] kvm: pic: non byte read [ 241.136399] kvm: pic: level sensitive irq not supported 03:57:12 executing program 5: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000027000)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)='\x00') sched_getattr(0x0, &(0x7f00000000c0), 0x30, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) keyctl$session_to_parent(0x12) 03:57:12 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c12") syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x0, 0x6000) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x40, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0xb0000, 0x0) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EVIOCSMASK(r2, 0x40104593, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='nfs\x00\a\x00\x00\x00\x00\x00\x02\xb2\x8a\xa8\xd4', 0x10, &(0x7f0000000000)) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) getsockname$unix(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f00000000c0)={0xc0000000000000, 0x5}) renameat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000140)='./file0\x00') r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000640)={"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"}) 03:57:12 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfb, 0x80}, 0xc) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) fcntl$setlease(r0, 0x400, 0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x402000, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) getsockopt$netlink(r0, 0x10e, 0x3, &(0x7f0000000280)=""/13, &(0x7f0000000300)=0xd) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000540)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000400)={0x2, 0x6}, 0x2) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000500)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10400}, 0xc, &(0x7f0000000380)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x48000}, 0x800) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r2, 0x800442d4, &(0x7f0000000240)=0x1ff) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000007c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000780), 0x0, 0x4}}, 0x20) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r4, 0x402c5342, &(0x7f0000000700)={0x3, 0x4, 0x4, {}, 0x8}) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r6 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$BLKTRACESTART(r5, 0x1274, 0x0) ioctl$PPPOEIOCSFWD(r5, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000440)={0x1, 0x4, 0x4, 0x8, {0x77359400}, {0x3, 0x0, 0x2, 0x6, 0x7, 0x180000000000, "bbf09544"}, 0x0, 0x0, @planes=0x0, 0x4}) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000000)={[], 0x1, 0xbd, 0x279d, 0x0, 0x0, r3}) 03:57:12 executing program 2: r0 = gettid() r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000a40)='/dev/vcsa#\x00', 0x800, 0x40000) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffff9c, 0x84, 0x66, &(0x7f0000000a80)={0x0, 0x2}, &(0x7f0000000ac0)=0x8) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000b00)={r4, @in={{0x2, 0x4e23, @loopback}}}, 0x84) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00005e9000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_REGISTER(r1, 0xc028aa03, &(0x7f0000000000)={{&(0x7f00005e3000/0x800000)=nil, 0x800000}, 0x200000}) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) r5 = fcntl$dupfd(r2, 0x0, r2) ioctl$VHOST_VSOCK_SET_GUEST_CID(r5, 0x4008af60, &(0x7f0000000100)={@reserved}) tkill(r0, 0x401104000000016) 03:57:12 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x800, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x101, 0x401, 0x6, 0x7fff, 0x1}, &(0x7f0000000080)=0x14) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={r2, 0xbc6}, &(0x7f0000000100)=0x8) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000001640), 0x4) recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}, 0x0) r4 = shmget$private(0x0, 0x2000, 0x20, &(0x7f0000ffc000/0x2000)=nil) shmctl$IPC_STAT(r4, 0x2, &(0x7f0000000140)=""/58) sendmsg(r3, &(0x7f0000000440)={&(0x7f00000001c0)=@nfc={0x104, 0x2}, 0x80, &(0x7f0000000000), 0x159, &(0x7f00000002c0)}, 0x0) ioctl$SIOCGETNODEID(r1, 0x89e1, &(0x7f0000000240)={0x3}) [ 241.474645] libceph: connect [d::]:6789 error -101 [ 241.483954] libceph: mon0 [d::]:6789 connect error [ 241.514029] libceph: connect [d::]:6789 error -101 03:57:13 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000001c0)={0x14, 0x88, 0xfa00, {r1, 0x0, 0x2, @in={0x2, 0x0, @loopback}}}, 0x90) [ 241.536688] libceph: mon0 [d::]:6789 connect error 03:57:13 executing program 2: r0 = gettid() r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000a40)='/dev/vcsa#\x00', 0x800, 0x40000) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffff9c, 0x84, 0x66, &(0x7f0000000a80)={0x0, 0x2}, &(0x7f0000000ac0)=0x8) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000b00)={r4, @in={{0x2, 0x4e23, @loopback}}}, 0x84) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00005e9000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_REGISTER(r1, 0xc028aa03, &(0x7f0000000000)={{&(0x7f00005e3000/0x800000)=nil, 0x800000}, 0x200000}) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) r5 = fcntl$dupfd(r2, 0x0, r2) ioctl$VHOST_VSOCK_SET_GUEST_CID(r5, 0x4008af60, &(0x7f0000000100)={@reserved}) tkill(r0, 0x401104000000016) 03:57:13 executing program 1: openat$vhci(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$amidi(&(0x7f0000000880)='/dev/amidi#\x00', 0x40, 0x2001fe) openat$cgroup_int(r0, &(0x7f0000000640)='memory.high\x00', 0x2, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000680)={r1}) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 03:57:13 executing program 0: sched_setaffinity(0x0, 0xfffffffffffffd2e, &(0x7f00000001c0)=0x57d) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100a0100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace(0xffffffffffffffff, 0x0) pipe(0x0) shmget$private(0x0, 0x2000, 0x20, &(0x7f0000ffd000/0x2000)=nil) r2 = openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, 0x0, &(0x7f0000000240)) fcntl$setlease(r0, 0x400, 0x1) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f0000000040)={[{0xfff, 0x5, 0x6, 0x1, 0x0, 0xfffffffffffffff8, 0x9, 0x9, 0x1, 0x7, 0x0, 0x9, 0x3}, {0x9, 0x81, 0x800, 0x5, 0x100000001, 0x8, 0x7, 0x2, 0x7, 0x51, 0xfffffffffffffffc, 0x6, 0x9}, {0x1a5, 0xab43, 0x2, 0x924, 0xf6d2, 0xfbb2, 0x400, 0xfffffffffffff2d7, 0x8, 0x0, 0xa467, 0x8, 0xfffffffffffffff9}]}) accept4$nfc_llcp(r1, 0x0, &(0x7f0000000340), 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x80001, 0x0) 03:57:13 executing program 2: r0 = gettid() r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000a40)='/dev/vcsa#\x00', 0x800, 0x40000) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffff9c, 0x84, 0x66, &(0x7f0000000a80)={0x0, 0x2}, &(0x7f0000000ac0)=0x8) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000b00)={r4, @in={{0x2, 0x4e23, @loopback}}}, 0x84) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00005e9000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_REGISTER(r1, 0xc028aa03, &(0x7f0000000000)={{&(0x7f00005e3000/0x800000)=nil, 0x800000}, 0x200000}) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) r5 = fcntl$dupfd(r2, 0x0, r2) ioctl$VHOST_VSOCK_SET_GUEST_CID(r5, 0x4008af60, &(0x7f0000000100)={@reserved}) tkill(r0, 0x401104000000016) 03:57:13 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) getdents(r0, &(0x7f0000000740)=""/135, 0x27b) perf_event_open(&(0x7f0000000440)={0x0, 0x29, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34dc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x400000000}, 0x0, 0xd, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x803, 0x3) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10004080}, 0xc, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="000326bd7000fbdbdf2510336bfdab0002002c00020014010000000000000005000000ffff0000000014000100ac141419003bc94d6bdb159d9fcf0000000000000000000000080006000300000008000600ffffffff08000500000010000800060002000000c78000ab3c855c291baf4e4fcf109ef6415feb3f0e8d1ae666c2e0d4e4c77e1a2a4b59b12cd36ee19a809d0908e417b60440e842300413831987e09cc1"], 0x1}}, 0x4000005) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r3, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x2b) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000100), 0x4) pipe(0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') prctl$PR_GET_SECCOMP(0x15) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) dup3(r3, r1, 0x0) recvmsg(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x4f}, 0x100) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) write$binfmt_elf64(r3, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 03:57:13 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x406c0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000140)=[@in={0x2, 0x4e23, @local}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e20, @multicast2}], 0x30) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x1c, 0x29, 0x1, 0x0, 0x0, {0x8}, [@nested={0x8, 0xb, [@generic='Z']}]}, 0x1c}}, 0x0) mremap(&(0x7f00007c0000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000054000/0x2000)=nil) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f0000000080), &(0x7f00000000c0)=0x8) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000000), 0x4) [ 242.194346] libceph: connect [d::]:6789 error -101 [ 242.203167] libceph: mon0 [d::]:6789 connect error [ 242.210484] WARNING: CPU: 1 PID: 7992 at net/ceph/messenger.c:3073 clear_standby+0x12f/0x160 [ 242.215445] PM: Marking nosave pages: [mem 0x0009f000-0x000fffff] [ 242.219165] Kernel panic - not syncing: panic_on_warn set ... [ 242.219195] CPU: 1 PID: 7992 Comm: syz-executor5 Not tainted 5.0.0-rc3+ #41 [ 242.219204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 242.219220] Call Trace: [ 242.219237] dump_stack+0x1db/0x2d0 [ 242.219258] ? dump_stack_print_info.cold+0x20/0x20 [ 242.228528] PM: Marking nosave pages: [mem 0xbfffd000-0xffffffff] [ 242.231400] ? preempt_schedule_common+0x4f/0xe0 [ 242.231420] ? clear_standby+0x120/0x160 [ 242.231468] panic+0x2cb/0x65c [ 242.231483] ? add_taint.cold+0x16/0x16 [ 242.231499] ? clear_standby+0x12f/0x160 [ 242.231532] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 242.231582] ? __probe_kernel_read+0x1f4/0x250 [ 242.231597] ? __warn.cold+0x5/0x48 [ 242.231614] ? clear_standby+0x12f/0x160 [ 242.231636] __warn.cold+0x20/0x48 [ 242.231650] ? clear_standby+0x12f/0x160 [ 242.231663] report_bug+0x263/0x2b0 [ 242.231718] do_error_trap+0x11b/0x200 [ 242.231736] do_invalid_op+0x37/0x50 [ 242.231748] ? clear_standby+0x12f/0x160 [ 242.231762] invalid_op+0x14/0x20 [ 242.231775] RIP: 0010:clear_standby+0x12f/0x160 [ 242.231788] Code: de e8 85 2a bb f9 48 85 db 0f 84 39 ff ff ff e8 d7 28 bb f9 0f 0b e9 2d ff ff ff e8 9b 25 ff f9 e9 67 ff ff ff e8 c1 28 bb f9 <0f> 0b eb a5 e8 a8 25 ff f9 e9 f6 fe ff ff 4c 89 ef e8 9b 25 ff f9 [ 242.231795] RSP: 0018:ffff888056fa76d0 EFLAGS: 00010216 [ 242.231806] RAX: 0000000000040000 RBX: ffff888054c8cea8 RCX: ffffc90010a85000 [ 242.231813] RDX: 000000000000e337 RSI: ffffffff87c6d80f RDI: 0000000000000007 [ 242.231822] RBP: ffff888056fa76e8 R08: ffff888056f382c0 R09: ffffed100a991a06 [ 242.231829] R10: ffff888056fa76e8 R11: ffff888054c8d02f R12: 0000000000000001 [ 242.231848] R13: ffff888054c8cfe0 R14: ffff888056fa7798 R15: ffff888054c8d028 [ 242.231869] ? clear_standby+0x12f/0x160 [ 242.231888] ceph_con_send+0x450/0x610 [ 242.231902] ? ceph_msg_new+0x40/0x40 [ 242.231921] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 242.231939] __send_prepared_auth_request+0x155/0x1b0 [ 242.231953] __open_session+0x3d9/0x570 [ 242.231969] ceph_monc_open_session+0x1a2/0x360 [ 242.231984] __ceph_open_session+0xe2/0x7e0 [ 242.232019] ? bdi_register_va+0x4c/0x80 [ 242.232033] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 242.232046] ? ceph_destroy_client+0x1a0/0x1a0 [ 242.232076] ? kill_block_super+0x100/0x100 [ 242.232131] ? ceph_put_super+0x70/0x70 [ 242.232143] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 242.232170] ? ns_capable_common+0x141/0x170 [ 242.232194] ceph_mount+0x10d2/0x1c80 [ 242.232214] ? ceph_compare_super+0x510/0x510 [ 242.232228] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 242.232257] ? smack_sb_eat_lsm_opts+0x52d/0x690 [ 242.232276] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 242.232306] mount_fs+0x123/0x43a [ 242.232320] ? emergency_thaw_all+0x260/0x260 [ 242.232364] ? lock_release+0xc40/0xc40 [ 242.232415] ? digsig_verify.cold+0x32/0x32 [ 242.232439] vfs_kern_mount.part.0+0xdb/0x570 [ 242.232455] ? may_umount+0xb0/0xb0 [ 242.232467] ? _raw_read_unlock+0x2d/0x50 [ 242.232480] ? __get_fs_type+0x9a/0xd0 [ 242.232515] do_mount+0x58e/0x3330 [ 242.232548] ? calibrate_delay.cold+0x47b/0x539 [ 242.232566] ? copy_mount_string+0x40/0x40 [ 242.232579] ? retint_kernel+0x2d/0x2d [ 242.232600] ? copy_mount_options+0x234/0x440 [ 242.232612] ? __sanitizer_cov_trace_pc+0x3b/0x50 [ 242.232631] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 242.232644] ? copy_mount_options+0x30e/0x440 [ 242.232662] ksys_mount+0xdb/0x150 [ 242.232678] __x64_sys_mount+0xbe/0x150 [ 242.232694] do_syscall_64+0x1a3/0x800 [ 242.232720] ? syscall_return_slowpath+0x5f0/0x5f0 [ 242.232734] ? prepare_exit_to_usermode+0x232/0x3b0 [ 242.232751] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 242.232770] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 242.232779] RIP: 0033:0x458099 [ 242.232790] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 242.232797] RSP: 002b:00007f024b893c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 242.232808] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000458099 [ 242.232815] RDX: 0000000020000100 RSI: 0000000020000080 RDI: 0000000020000040 [ 242.232822] RBP: 000000000073bfa0 R08: 0000000020000140 R09: 0000000000000000 [ 242.232829] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f024b8946d4 [ 242.232836] R13: 00000000004c3df1 R14: 00000000004d6da8 R15: 00000000ffffffff [ 242.233796] Kernel Offset: disabled [ 242.655993] Rebooting in 86400 seconds..