[ 61.147720] audit: type=1800 audit(1539248387.178:27): pid=6155 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 62.838114] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. [ 63.857940] random: sshd: uninitialized urandom read (32 bytes read) [ 64.506496] random: sshd: uninitialized urandom read (32 bytes read) Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 67.136865] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.10' (ECDSA) to the list of known hosts. [ 73.181165] random: sshd: uninitialized urandom read (32 bytes read) 2018/10/11 09:00:01 fuzzer started [ 77.986722] random: cc1: uninitialized urandom read (8 bytes read) 2018/10/11 09:00:06 dialing manager at 10.128.0.26:39089 2018/10/11 09:00:06 syscalls: 1 2018/10/11 09:00:06 code coverage: enabled 2018/10/11 09:00:06 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/10/11 09:00:06 setuid sandbox: enabled 2018/10/11 09:00:06 namespace sandbox: enabled 2018/10/11 09:00:06 Android sandbox: /sys/fs/selinux/policy does not exist 2018/10/11 09:00:06 fault injection: enabled 2018/10/11 09:00:06 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/10/11 09:00:06 net packed injection: /dev/net/tun can't be opened (open /dev/net/tun: cannot allocate memory) 2018/10/11 09:00:06 net device setup: enabled [ 83.103540] random: crng init done 09:02:14 executing program 0: r0 = socket$kcm(0xa, 0x2, 0x11) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [0xe803, 0xee6e0000, 0x2a0]}, 0xf}, 0x80, &(0x7f0000000340), 0x2b, &(0x7f0000000180)}, 0x0) [ 209.539995] IPVS: ftp: loaded support on port[0] = 21 [ 211.025923] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.032545] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.041325] device bridge_slave_0 entered promiscuous mode [ 211.256981] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.263585] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.272435] device bridge_slave_1 entered promiscuous mode [ 211.456014] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 211.669970] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 212.126428] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 212.278833] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 212.429792] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 212.437052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 212.585551] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 212.592727] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 09:02:19 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write(0xffffffffffffffff, &(0x7f0000000240), 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x10000000011) close(r0) [ 213.046022] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 213.054452] team0: Port device team_slave_0 added [ 213.232739] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 213.240931] team0: Port device team_slave_1 added [ 213.426716] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 213.433968] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 213.443338] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 213.647734] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 213.654921] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 213.664257] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 213.817967] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 213.825804] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 213.835263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 214.074867] IPVS: ftp: loaded support on port[0] = 21 [ 214.183699] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 214.191383] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 214.200801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 216.175405] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.181908] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.190876] device bridge_slave_0 entered promiscuous mode [ 216.388292] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.394942] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.403730] device bridge_slave_1 entered promiscuous mode [ 216.696815] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 216.801351] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.807916] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.815043] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.821529] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.830769] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 216.942795] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 217.432363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 217.756491] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 218.044693] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 218.287069] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 218.295403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 218.617250] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 218.624461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 09:02:25 executing program 2: rt_sigprocmask(0x0, &(0x7f000078b000)={0xfffffffffffffffa}, 0x0, 0x8) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000240), 0xffffffffffffffff) r0 = gettid() wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000400)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x12) ptrace$cont(0x1f, r0, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r1, &(0x7f0000000a80)=[{&(0x7f0000000280)='Q', 0x1}], 0x1) pselect6(0x40, &(0x7f0000000080), &(0x7f0000000fc0), &(0x7f0000013fc0), &(0x7f0000000000)={0x0, 0x989680}, &(0x7f0000000ff0)={&(0x7f0000000040), 0x8}) [ 219.393240] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 219.401449] team0: Port device team_slave_0 added [ 219.670940] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 219.679235] team0: Port device team_slave_1 added [ 219.864907] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 219.883090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 219.892312] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 220.288693] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 220.295937] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 220.305125] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 220.649086] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 220.656875] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 220.666384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 220.795001] IPVS: ftp: loaded support on port[0] = 21 [ 220.980022] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 220.987905] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 220.997237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 223.878845] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.885601] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.894506] device bridge_slave_0 entered promiscuous mode [ 224.267408] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.274006] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.282772] device bridge_slave_1 entered promiscuous mode [ 224.377131] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.383712] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.390695] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.397379] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.406507] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 224.651235] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 224.947009] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 225.302812] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 225.813679] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 226.068713] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 226.346964] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 226.354241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 226.633233] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 226.640343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 227.477426] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 227.485795] team0: Port device team_slave_0 added [ 227.742466] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 227.750851] team0: Port device team_slave_1 added 09:02:34 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x9effffff00000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="ffffff000a0002002aaaaaaaaaaa0000ef875c60d9b1884f0d08bcb9420f90a3eb35f1e5e8fd59690b56396e1ed0e2326acd875d492920c9439bd0afd098c28add0aaffe9dde96e9f21705c2a68b5f9923fe249e3764280ac7b45bc2a0191fdb5159070f65dc347bec5ddad0376efe1a98994619733685ab24003f8c75e8fe9e9a051f044e0a684a14e556567c97b659e0b47f3d7de1a2875d7b9288f8ceed88af5aedf8ad648e"], 0x1}}, 0x0) [ 228.081624] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 228.088884] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 228.098263] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 228.463725] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 228.470840] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 228.480196] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 228.520877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.814859] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 228.822809] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 228.832132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 229.219621] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 229.227883] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 229.237232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 229.658269] IPVS: ftp: loaded support on port[0] = 21 [ 230.073805] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 231.514969] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 231.521368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 231.529724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 233.097437] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.135109] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.141581] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.150463] device bridge_slave_0 entered promiscuous mode [ 233.341368] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.347952] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.355041] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.361521] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.370583] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 233.517218] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.523947] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.532618] device bridge_slave_1 entered promiscuous mode [ 233.907328] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 234.248235] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 234.342651] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 235.358808] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 235.713075] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 236.114784] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 236.122232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 236.450831] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 236.458324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 237.683856] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 237.692311] team0: Port device team_slave_0 added [ 238.052553] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 238.060987] team0: Port device team_slave_1 added [ 238.421133] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 238.428346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 238.437378] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 238.797915] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 238.805213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 238.814457] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready 09:02:45 executing program 4: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) [ 239.280304] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 239.288359] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 239.297722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 239.706241] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 239.716231] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 239.725577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 239.938050] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.045029] IPVS: ftp: loaded support on port[0] = 21 [ 241.528343] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 242.603341] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 09:02:49 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000000), 0x4) [ 243.238866] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 243.245419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 243.253618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 09:02:49 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x32, &(0x7f0000000280), 0xfe94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000000)='security\x00'}, 0x30) 09:02:49 executing program 0: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000022c0)='/dev/vcsa#\x00', 0x8d, 0x60080) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002340)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f00000024c0)={&(0x7f0000002300), 0xc, &(0x7f0000002480)={&(0x7f0000002380)=ANY=[@ANYBLOB="fc003c00", @ANYRES16=r2, @ANYBLOB="210726bd7000fcdbdf2503000000440003000800010003000000140002006966623000000000000000000000000008000500ac141421140002007465716c300000000000000000000000080008003500000024000200080005002000000008000700010000000800030003000000080009005809000008000600050000006400020014000100e00000020000000000000000000000000800090020000000080007008100000008000700a305000008000b0002000000080002004e22000014000100e0000001000000000000000000000000080005000200000008000600d1df00001400020008000500e60c00000800080005000000"], 0xfc}, 0x1, 0x0, 0x0, 0x4000000}, 0x40880) write$apparmor_current(r0, &(0x7f0000000240)=@hat={'changehat ', 0x3}, 0x1d) [ 243.973768] kauditd_printk_skb: 3 callbacks suppressed [ 243.973802] audit: type=1400 audit(1539248570.028:31): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=6973 comm="syz-executor0" 09:02:50 executing program 0: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000022c0)='/dev/vcsa#\x00', 0x8d, 0x60080) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002340)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f00000024c0)={&(0x7f0000002300), 0xc, &(0x7f0000002480)={&(0x7f0000002380)=ANY=[@ANYBLOB="fc003c00", @ANYRES16=r2, @ANYBLOB="210726bd7000fcdbdf2503000000440003000800010003000000140002006966623000000000000000000000000008000500ac141421140002007465716c300000000000000000000000080008003500000024000200080005002000000008000700010000000800030003000000080009005809000008000600050000006400020014000100e00000020000000000000000000000000800090020000000080007008100000008000700a305000008000b0002000000080002004e22000014000100e0000001000000000000000000000000080005000200000008000600d1df00001400020008000500e60c00000800080005000000"], 0xfc}, 0x1, 0x0, 0x0, 0x4000000}, 0x40880) write$apparmor_current(r0, &(0x7f0000000240)=@hat={'changehat ', 0x3}, 0x1d) [ 244.453885] audit: type=1400 audit(1539248570.508:32): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=6987 comm="syz-executor0" [ 244.672066] ip (6990) used greatest stack depth: 53144 bytes left 09:02:50 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x111000, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in, @in6=@loopback}}, {{@in=@multicast2}, 0x0, @in6=@ipv4={[], [], @multicast2}}}, &(0x7f0000000140)=0xe8) r1 = socket$inet6(0xa, 0x80803, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000200)={{{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in6=@ipv4={[], [], @local}, 0x0, 0x32}, 0x0, @in=@remote}}, 0x1b4) [ 245.007876] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.014433] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.021423] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.028025] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.036865] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 245.107224] 8021q: adding VLAN 0 to HW filter on device team0 09:02:51 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000000)) set_mempolicy(0x3, &(0x7f0000000040)=0x80000000000003ff, 0x4) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) lsetxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='security.evm\x00', &(0x7f0000000180)=@md5={0x1, "bd8dcfb4e45e7e625273b0b594808ca2"}, 0x11, 0x2) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffff9c, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x80}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000100)=@sack_info={r1, 0x8000, 0x9}, 0xc) unshare(0x44060000) [ 245.193412] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 245.479309] IPVS: ftp: loaded support on port[0] = 21 [ 245.637450] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.644051] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.652856] device bridge_slave_0 entered promiscuous mode [ 246.027428] IPVS: ftp: loaded support on port[0] = 21 [ 246.058746] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.065420] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.074215] device bridge_slave_1 entered promiscuous mode [ 246.526442] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 247.044855] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 248.522787] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 248.918083] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 249.429271] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 249.436514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 249.850844] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 249.858157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 09:02:56 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000000)) set_mempolicy(0x3, &(0x7f0000000040)=0x80000000000003ff, 0x4) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) lsetxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='security.evm\x00', &(0x7f0000000180)=@md5={0x1, "bd8dcfb4e45e7e625273b0b594808ca2"}, 0x11, 0x2) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffff9c, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x80}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000100)=@sack_info={r1, 0x8000, 0x9}, 0xc) unshare(0x44060000) [ 251.057430] IPVS: ftp: loaded support on port[0] = 21 [ 251.214599] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 251.223116] team0: Port device team_slave_0 added [ 251.625317] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 251.633700] team0: Port device team_slave_1 added 09:02:57 executing program 0: r0 = syz_open_dev$admmidi(&(0x7f0000000200)='/dev/admmidi#\x00', 0x304, 0x82000) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x13}}, 0x4) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x82000, 0x0) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000100)={0x89, @multicast1, 0x4e22, 0x3, 'wlc\x00', 0x21, 0x1, 0x42}, 0x2c) fcntl$setpipe(r1, 0x407, 0x10000000001) r3 = fcntl$getown(r1, 0x9) sched_rr_get_interval(r3, &(0x7f0000000240)) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r2, 0xc0a85352, &(0x7f0000000040)={{0x1, 0x1}, 'port1\x00', 0x0, 0x802, 0x8, 0x2, 0x9, 0x81, 0x9, 0x0, 0x2, 0xffffffff}) accept4(r1, 0x0, &(0x7f0000000180), 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f00000001c0)={0x4, 0x0, 0x2, 0x5, 0x233e2d49, 0xffffffffffffff80}) [ 252.017860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.155275] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 252.162666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 252.172172] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 252.566760] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 252.574059] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 252.583157] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 253.050112] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 253.057990] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 253.067322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 253.537393] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 253.545681] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 253.554898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 253.773790] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 255.244085] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 255.250608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 255.258668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 09:03:02 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SG_GET_COMMAND_Q(r0, 0x2286, &(0x7f0000000040)) [ 256.636900] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.283456] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.289962] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.297085] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.303722] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.312352] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 257.319048] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 260.119676] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.025182] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 261.861555] ptrace attach of "/root/syz-executor2"[7381] was attempted by "/root/syz-executor2"[7382] [ 261.941294] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 261.948087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 261.956184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 09:03:08 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getresuid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f0000000300)) mount(&(0x7f0000000180)=ANY=[], &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, &(0x7f00000002c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='mounts\x00') sendfile(r1, r1, &(0x7f0000000000)=0x20000, 0x3f) unshare(0x0) [ 262.724203] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.478974] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.040878] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready 09:03:12 executing program 3: r0 = semget$private(0x0, 0x20000000102, 0x0) semtimedop(r0, &(0x7f000001dfd6)=[{0x0, 0xfffffffffffffff7}], 0x1, &(0x7f0000000000)={0x101}) semop(r0, &(0x7f0000031000)=[{0x0, 0xfffffffffffffffa}], 0x1) semctl$IPC_RMID(r0, 0x0, 0x0) [ 266.578413] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 266.584800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 266.593011] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 266.966340] 8021q: adding VLAN 0 to HW filter on device team0 09:03:15 executing program 4: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) 09:03:15 executing program 5: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0x0) r1 = request_key(&(0x7f0000000080)='syzkaller\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)='\x00', 0xfffffffffffffff8) keyctl$negate(0xd, r0, 0x4, r1) r2 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000140)) keyctl$unlink(0x9, r1, r1) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000180), &(0x7f00000001c0)=0x4) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) timerfd_settime(r2, 0x1, &(0x7f0000000240)={{}, {r3, r4+10000000}}, &(0x7f0000000280)) add_key(&(0x7f00000002c0)='logon\x00', &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000340)="7d8ab31eb09a239eccc4ba991f1ade079ffa72734d558a078ff15a35a621a5686f118d1837ea40e414ee62c9a9cb15a616fc1c1bde12fae3a81ad50e5e1666a11ef971f4b47aac0889ea27e4ed669648f8cc069eced5f3d0b782ef1256b5122cba7beeb4974b6e6c92d41e5bffd95da699d1c58cc126ef871f62cff783995befa2380256fb10d008a22e40b83ca33e793ad8fdda846a3f389176b237e8e30ef6779aa6f82ed9b79411092e9211c2c1c3", 0xb0, r0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000400)={0x0, 0xffffffff}, &(0x7f0000000440)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000480)={r5, 0x101}, &(0x7f00000004c0)=0x8) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000500), 0x4) r7 = fcntl$getown(r2, 0x9) r8 = syz_open_procfs(r7, &(0x7f0000000540)='net/sco\x00') wait4(r7, 0x0, 0x8, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000580)={r6, 0x9, 0x3, [0xff, 0x3, 0x101]}, &(0x7f00000005c0)=0xe) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = getpgid(r7) write$P9_RXATTRCREATE(r8, &(0x7f0000000640)={0x7, 0x21, 0x2}, 0x7) ioctl$KVM_PPC_ALLOCATE_HTAB(r2, 0xc004aea7, &(0x7f0000000680)=0x80000000) ioctl$SG_GET_NUM_WAITING(r2, 0x227d, &(0x7f00000006c0)) sched_getaffinity(r7, 0x8, &(0x7f0000000700)) connect$l2tp(r2, &(0x7f0000000740)=@pppol2tpv3in6={0x18, 0x1, {0x0, r9, 0x2, 0x4, 0x3, 0x2, {0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, [], 0x15}, 0x6}}}, 0x3a) getpriority(0x0, r7) sched_setparam(r10, &(0x7f0000000780)=0x288c) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f00000007c0)=""/205) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f00000008c0)='syz', r2}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f0000000940)={0xfff, 0x8, 0x1, 0x80000000}, 0x8) getsockopt$inet_sctp6_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f0000000980), &(0x7f00000009c0)=0xb) 09:03:15 executing program 1: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg(r1, &(0x7f0000000440)={&(0x7f00000003c0)=@can, 0x80, &(0x7f0000000900)=[{&(0x7f00000004c0)=""/255, 0xff}], 0x1, &(0x7f0000000980)=""/101, 0x65}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r1, &(0x7f00000001c0)={0x0, 0xffffffff00000000, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) 09:03:15 executing program 0: socketpair(0xb, 0x5, 0x9, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r0, &(0x7f0000000200), 0x12) socketpair(0x8, 0x5, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_type(r1, &(0x7f0000000240)='cgroup.type\x00', 0x2, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f0000000100)) sendmsg$kcm(r2, &(0x7f0000000700)={&(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x3a01]}, 0x6}, 0x80, &(0x7f0000000d40)=[{&(0x7f00000027c0)="d2", 0x1}], 0x1, &(0x7f0000000000)}, 0x20004040) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)="2e2f6367726f75702e6e65742f73797a31eb", 0x1ff) 09:03:15 executing program 2: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg(r1, &(0x7f0000000440)={&(0x7f00000003c0)=@can, 0x80, &(0x7f0000000900)=[{&(0x7f00000004c0)=""/255, 0xff}], 0x1, &(0x7f0000000980)=""/101, 0x65}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) 09:03:15 executing program 3: r0 = semget$private(0x0, 0x20000000102, 0x0) semtimedop(r0, &(0x7f000001dfd6)=[{0x0, 0xfffffffffffffff7}], 0x1, &(0x7f0000000000)={0x101}) semop(r0, &(0x7f0000031000)=[{0x0, 0xfffffffffffffffa}], 0x1) semctl$IPC_RMID(r0, 0x0, 0x0) [ 269.758870] hrtimer: interrupt took 296435 ns 09:03:16 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2, @loopback}, 0xc) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000300)={0x1, {{0x2, 0x0, @multicast2}}, 0x0, 0x1, [{{0x2, 0x0, @broadcast}}]}, 0x110) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000001c0)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) 09:03:16 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x9, 0x1, 0x1}, 0x2c) unshare(0x20400) io_setup(0x3de, &(0x7f0000000000)=0x0) r2 = eventfd(0x0) io_submit(r1, 0x1, &(0x7f0000000940)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x3, r2}]) 09:03:16 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0xad0, 0x4) 09:03:16 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x9, 0x1, 0x1}, 0x2c) unshare(0x20400) io_setup(0x3de, &(0x7f0000000000)=0x0) r2 = eventfd(0x0) io_submit(r1, 0x1, &(0x7f0000000940)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x3, r2}]) 09:03:16 executing program 2: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg(r1, &(0x7f0000000440)={&(0x7f00000003c0)=@can, 0x80, &(0x7f0000000900)=[{&(0x7f00000004c0)=""/255, 0xff}], 0x1, &(0x7f0000000980)=""/101, 0x65}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) 09:03:16 executing program 1: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg(r1, &(0x7f0000000440)={&(0x7f00000003c0)=@can, 0x80, &(0x7f0000000900)=[{&(0x7f00000004c0)=""/255, 0xff}], 0x1, &(0x7f0000000980)=""/101, 0x65}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r1, &(0x7f00000001c0)={0x0, 0xffffffff00000000, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) 09:03:16 executing program 4: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) [ 271.596244] IPVS: ftp: loaded support on port[0] = 21 [ 272.826635] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.833109] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.840675] device bridge_slave_0 entered promiscuous mode [ 272.924266] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.930714] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.938937] device bridge_slave_1 entered promiscuous mode [ 273.018976] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 273.098138] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 273.342537] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 273.427826] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 273.510579] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 273.517700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 273.597719] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 273.604850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 273.850600] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 273.858507] team0: Port device team_slave_0 added [ 273.938741] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 273.946574] team0: Port device team_slave_1 added [ 274.026782] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 274.110004] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 274.189965] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 274.197462] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 274.206871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 274.284135] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 274.291458] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 274.300975] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 275.196633] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.203106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.209926] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.216481] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.224558] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 275.484798] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 278.499426] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.800594] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 279.100908] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 279.107607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 279.115970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 279.415717] 8021q: adding VLAN 0 to HW filter on device team0 09:03:27 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80003, 0x3) recvmmsg(r0, &(0x7f00000004c0)=[{{&(0x7f0000000400)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000000480)}}], 0x400000000000197, 0x0, 0x0) shutdown(r0, 0x0) 09:03:27 executing program 3: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg(r1, &(0x7f0000000440)={&(0x7f00000003c0)=@can, 0x80, &(0x7f0000000900)=[{&(0x7f00000004c0)=""/255, 0xff}], 0x1, &(0x7f0000000980)=""/101, 0x65}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) 09:03:27 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x9, 0x1, 0x1}, 0x2c) unshare(0x20400) io_setup(0x3de, &(0x7f0000000000)=0x0) r2 = eventfd(0x0) io_submit(r1, 0x1, &(0x7f0000000940)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x3, r2}]) 09:03:27 executing program 1: r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000180)=0x20004000) write$binfmt_elf32(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1001) 09:03:27 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:03:27 executing program 4: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) 09:03:27 executing program 2: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x85b, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x5, 0x5, 0x2}, 0x2c) ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) 09:03:27 executing program 1: 09:03:27 executing program 5: 09:03:27 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x9, 0x1, 0x1}, 0x2c) unshare(0x20400) io_setup(0x3de, &(0x7f0000000000)=0x0) r2 = eventfd(0x0) io_submit(r1, 0x1, &(0x7f0000000940)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x3, r2}]) 09:03:28 executing program 1: 09:03:28 executing program 2: 09:03:28 executing program 5: 09:03:28 executing program 3: 09:03:28 executing program 1: 09:03:28 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x9, 0x1, 0x1}, 0x2c) unshare(0x20400) io_setup(0x3de, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000940)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x3}]) 09:03:28 executing program 5: 09:03:29 executing program 4: 09:03:29 executing program 2: 09:03:29 executing program 1: 09:03:29 executing program 3: 09:03:29 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x9, 0x1, 0x1}, 0x2c) unshare(0x20400) io_setup(0x3de, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000940)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x3}]) 09:03:29 executing program 5: 09:03:29 executing program 2: 09:03:29 executing program 1: 09:03:29 executing program 4: 09:03:29 executing program 3: 09:03:29 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x9, 0x1, 0x1}, 0x2c) unshare(0x20400) io_setup(0x3de, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000940)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x3}]) 09:03:29 executing program 4: 09:03:30 executing program 2: 09:03:30 executing program 5: 09:03:30 executing program 3: 09:03:30 executing program 1: 09:03:30 executing program 1: 09:03:30 executing program 4: 09:03:30 executing program 2: 09:03:30 executing program 5: 09:03:30 executing program 3: 09:03:30 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x9, 0x1, 0x1}, 0x2c) unshare(0x20400) r1 = eventfd(0x0) io_submit(0x0, 0x1, &(0x7f0000000940)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x3, r1}]) 09:03:30 executing program 1: 09:03:31 executing program 4: 09:03:31 executing program 2: 09:03:31 executing program 5: 09:03:31 executing program 3: 09:03:31 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x9, 0x1, 0x1}, 0x2c) unshare(0x20400) r1 = eventfd(0x0) io_submit(0x0, 0x1, &(0x7f0000000940)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x3, r1}]) 09:03:31 executing program 2: 09:03:31 executing program 1: 09:03:31 executing program 4: 09:03:31 executing program 5: 09:03:31 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001b80)={0x26, 'skcipher\x00', 0x0, 0x0, 'salsa20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000028c0)="b7f2288a933d66593ae164c990a0028e", 0x10) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000002900)=""/4096, 0xfffffe6d}], 0x1, &(0x7f0000001400)=""/123, 0x7b}, 0x0) 09:03:31 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = socket$inet6(0xa, 0x80007, 0x90a) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000300)="b684ea7cc40b44d81bfae05dd33a9b75", 0x10) getrandom(&(0x7f0000000040)=""/150, 0x96, 0x2) fchdir(r0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) fchdir(r2) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000005c0)={{{@in6=@ipv4={[], [], @dev}, @in=@loopback}}, {{}, 0x0, @in=@broadcast}}, &(0x7f0000000340)=0xe8) fsetxattr(0xffffffffffffffff, &(0x7f0000000b40)=ANY=[@ANYBLOB="6f73782e00f1f3507f742ebad14e248b7a2e98454f1f971de14208101eb6ae3544980fb1d86bae3cc056649e7378bf718334a6a2a98771aa0634e19fbcaac57ced5d03eaa1dcfa0400daf991a457e11b06fc552e1be191004ea980c56dea22ff2ffc13bff6ad6ce3d49f74c36a5fe66bf005527a4fc4ba31c6bc76c04145fa4a63c9eb0a11c8e13657206c7147caf3d5d5320b2de3bdcadb77dfd53efddcb837b4a0091893c2b57bca476bdc7fc227c36b9cbb059d68e600a502e057279e5bd02e11b3a7bf6f914dbfd236f309517e7fedfb002c0c13da3412361c3daf066a0a6066e8da719f4bc0fe2fb32a9777b0fcb7cdc65691ccb882e966e8819978f380e2216d43a950abc1bbaa0ed22e163f6feebda0e1954c386837915623383db0e38951f6fbc2ee89beed1d581b5f41622b083c11445fa88f05d88e87a16cba2d0b61c76db3650c0ad6ffa2388de7267443e27dc76207acc389528b99d1ba4fe4d098e0d005c44a2663cab85b0a38dee1758361a24a580f6ffd9f429b1ab7db90f4263ad69c2b873507fee53204c26841c52253f8a4f2947a79fd2f4d2456d6cbb91e2243cf978e4a25f54141a2"], &(0x7f0000000940)="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", 0x1fa, 0xfffffffffffffffc) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f0000000200)) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f00000001c0)) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f00000003c0)={{0x3, 0x0, 0x2, 0x3, 0x10001}, 0xfffffffffffffff7, 0x4}) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x1be) write$eventfd(r3, &(0x7f0000000080), 0xfffffe5e) r4 = open(&(0x7f0000000000)='./bus\x00', 0x14103e, 0x0) ppoll(&(0x7f0000000440)=[{}, {}, {}, {r3, 0x2000}], 0x4, &(0x7f0000000480), &(0x7f00000004c0), 0x8) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0) fchdir(0xffffffffffffffff) lsetxattr$trusted_overlay_origin(&(0x7f0000000100)='./bus\x00', &(0x7f0000000240)='trusted.overlay.origin\x00', &(0x7f0000000280)='y\x00', 0x2, 0x2) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, 0xffffffffffffffff) sendfile(r4, r4, &(0x7f00000002c0), 0x80000002) ftruncate(r4, 0x0) 09:03:32 executing program 1: ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000040), 0x4) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_wait(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x3, 0x182) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) syz_genetlink_get_family_id$nbd(&(0x7f0000000540)='nbd\x00') sendfile(r0, r0, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 09:03:32 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r1, 0x8912, &(0x7f0000000400)="153f6234488dd25d766070") mmap(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x0, 0x11011, r0, 0x0) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) 09:03:32 executing program 5: 09:03:32 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x9, 0x1, 0x1}, 0x2c) unshare(0x20400) r1 = eventfd(0x0) io_submit(0x0, 0x1, &(0x7f0000000940)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x3, r1}]) 09:03:32 executing program 2: 09:03:32 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000140)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000a8eff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000ac5000), 0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) r2 = memfd_create(&(0x7f00000000c0)='dev ', 0x3) write(r2, &(0x7f00000011c0)="16", 0x1) sendfile(r1, r2, &(0x7f0000000000), 0xffff) clone(0x3502001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) fcntl$addseals(r2, 0x409, 0x8) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) [ 286.922789] print_req_error: I/O error, dev loop3, sector 0 [ 286.928612] Buffer I/O error on dev loop3, logical block 0, lost async page write [ 286.936549] print_req_error: I/O error, dev loop3, sector 8 [ 286.942512] Buffer I/O error on dev loop3, logical block 1, lost async page write [ 286.950328] print_req_error: I/O error, dev loop3, sector 16 [ 286.956537] Buffer I/O error on dev loop3, logical block 2, lost async page write [ 286.964400] print_req_error: I/O error, dev loop3, sector 24 09:03:33 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40084146, &(0x7f0000000000)) [ 286.970260] Buffer I/O error on dev loop3, logical block 3, lost async page write [ 286.978262] print_req_error: I/O error, dev loop3, sector 32 [ 286.984313] Buffer I/O error on dev loop3, logical block 4, lost async page write [ 286.992235] print_req_error: I/O error, dev loop3, sector 40 [ 286.998117] Buffer I/O error on dev loop3, logical block 5, lost async page write [ 287.006019] print_req_error: I/O error, dev loop3, sector 48 [ 287.011893] Buffer I/O error on dev loop3, logical block 6, lost async page write [ 287.019846] print_req_error: I/O error, dev loop3, sector 56 [ 287.025898] Buffer I/O error on dev loop3, logical block 7, lost async page write [ 287.033741] print_req_error: I/O error, dev loop3, sector 64 [ 287.039594] Buffer I/O error on dev loop3, logical block 8, lost async page write [ 287.047512] print_req_error: I/O error, dev loop3, sector 72 [ 287.053450] Buffer I/O error on dev loop3, logical block 9, lost async page write 09:03:33 executing program 2: socketpair(0xb, 0x5, 0x9, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r0, &(0x7f0000000200), 0x12) socketpair(0x8, 0x5, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_type(r1, &(0x7f0000000240)='cgroup.type\x00', 0x2, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000000700)={&(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x3a01]}, 0x6}, 0x80, &(0x7f0000000d40)=[{&(0x7f00000027c0)="d2", 0x1}], 0x1, &(0x7f0000000000)}, 0x20004040) 09:03:33 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x9, 0x1, 0x1}, 0x2c) io_setup(0x3de, &(0x7f0000000000)=0x0) r2 = eventfd(0x0) io_submit(r1, 0x1, &(0x7f0000000940)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x3, r2}]) 09:03:33 executing program 4: accept4(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000340), 0xc, &(0x7f00000000c0)={&(0x7f0000000680)={0x14, 0x1d, 0xfffffffffffffffd, 0x0, 0x0, {0x7592da67}}, 0x14}}, 0x0) 09:03:33 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$unix(0x2, 0x40000000002, 0x88) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) dup3(r2, r1, 0x0) r3 = open(&(0x7f00000001c0)='./file0\x00', 0x101142, 0x0) r4 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) write$binfmt_aout(r3, &(0x7f0000000100)=ANY=[@ANYPTR=&(0x7f00000002c0)=ANY=[@ANYRES64]], 0xfecd) sendfile(r1, r4, &(0x7f00000000c0)=0x5d, 0x10ffff) 09:03:33 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0xb000000}, 0x3b, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv4_newroute={0x1c, 0x18, 0x521, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}}, 0x1c}, 0x14}, 0x0) 09:03:33 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x9, 0x1, 0x1}, 0x2c) io_setup(0x3de, &(0x7f0000000000)=0x0) r2 = eventfd(0x0) io_submit(r1, 0x1, &(0x7f0000000940)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x3, r2}]) 09:03:33 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) getsockopt$inet_buf(r1, 0x0, 0x29, &(0x7f0000000240)=""/145, &(0x7f0000695ffc)=0x15) getsockopt$inet_tcp_int(r1, 0x6, 0x1f, &(0x7f0000000100), &(0x7f0000000080)=0x4) 09:03:33 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40044104, &(0x7f0000000000)) 09:03:34 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000080)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f02acc7edbcd7a071fb35331ce39c5a") ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f00000018c0)) 09:03:34 executing program 3: socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8970, &(0x7f0000000300)="6c6f00966fd651b959a9c84a2c00d2970403dc0d") socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000200)) 09:03:34 executing program 1: socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) unshare(0x60000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./control/file0\x00', &(0x7f00000002c0)='trusted.overlay.upper\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="0b5a15050044e1159ac27f448a0926"], 0x1, 0x1) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mount(&(0x7f0000000040)=@md0='/dev/md0\x00', &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f0000000240)) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000200)='./control/file0\x00') close(r0) 09:03:34 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x9, 0x1, 0x1}, 0x2c) io_setup(0x3de, &(0x7f0000000000)=0x0) r2 = eventfd(0x0) io_submit(r1, 0x1, &(0x7f0000000940)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x3, r2}]) 09:03:34 executing program 4: socket$inet6(0xa, 0x1000000000006, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/loop-control\x00', 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) syslog(0x3, &(0x7f0000000300)=""/219, 0xdb) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb), &(0x7f0000001fee)="520972697374e363757367725669643a4465", 0x0) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, 0x0) modify_ldt$read_default(0x2, &(0x7f0000000200)=""/230, 0xe6) 09:03:34 executing program 2: 09:03:34 executing program 5: 09:03:34 executing program 4: 09:03:34 executing program 3: 09:03:35 executing program 2: 09:03:35 executing program 0: unshare(0x20400) io_setup(0x3de, &(0x7f0000000000)=0x0) r1 = eventfd(0x0) io_submit(r0, 0x1, &(0x7f0000000940)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x3, r1}]) 09:03:35 executing program 5: 09:03:35 executing program 4: 09:03:35 executing program 1: 09:03:35 executing program 2: 09:03:35 executing program 3: 09:03:35 executing program 5: 09:03:35 executing program 4: 09:03:35 executing program 0: unshare(0x0) io_setup(0x3de, &(0x7f0000000000)=0x0) r1 = eventfd(0x0) io_submit(r0, 0x1, &(0x7f0000000940)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x3, r1}]) 09:03:35 executing program 3: 09:03:35 executing program 2: 09:03:36 executing program 1: 09:03:36 executing program 4: 09:03:36 executing program 3: 09:03:36 executing program 5: 09:03:36 executing program 2: 09:03:36 executing program 0: unshare(0x0) io_setup(0x3de, &(0x7f0000000000)=0x0) r1 = eventfd(0x0) io_submit(r0, 0x1, &(0x7f0000000940)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x3, r1}]) 09:03:36 executing program 4: 09:03:36 executing program 1: 09:03:36 executing program 3: 09:03:36 executing program 2: 09:03:37 executing program 5: 09:03:37 executing program 4: 09:03:37 executing program 0: unshare(0x0) io_setup(0x3de, &(0x7f0000000000)=0x0) r1 = eventfd(0x0) io_submit(r0, 0x1, &(0x7f0000000940)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x3, r1}]) 09:03:37 executing program 3: 09:03:37 executing program 1: 09:03:37 executing program 4: 09:03:37 executing program 2: 09:03:37 executing program 5: 09:03:37 executing program 1: 09:03:37 executing program 3: 09:03:37 executing program 5: 09:03:37 executing program 4: 09:03:37 executing program 2: 09:03:38 executing program 0: unshare(0x20400) io_setup(0x0, &(0x7f0000000000)=0x0) r1 = eventfd(0x0) io_submit(r0, 0x1, &(0x7f0000000940)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x3, r1}]) 09:03:38 executing program 1: 09:03:38 executing program 4: 09:03:38 executing program 5: 09:03:38 executing program 3: 09:03:38 executing program 0: unshare(0x20400) io_setup(0x0, &(0x7f0000000000)=0x0) r1 = eventfd(0x0) io_submit(r0, 0x1, &(0x7f0000000940)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x3, r1}]) 09:03:38 executing program 2: 09:03:38 executing program 1: 09:03:38 executing program 5: 09:03:38 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0xc2604110, &(0x7f0000000000)) 09:03:39 executing program 2: r0 = syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x0, 0x1) creat(&(0x7f0000000280)='./bus\x00', 0x51) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) clone(0x6102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) execve(&(0x7f0000000240)='./bus\x00', &(0x7f0000000140), &(0x7f0000000380)) 09:03:39 executing program 3: setrlimit(0x9, &(0x7f0000000000)) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2) 09:03:39 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @remote, 0x1ff}}}, &(0x7f00000001c0)=0x90) 09:03:39 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000040)) 09:03:39 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000040), &(0x7f0000000100)=0x10) 09:03:39 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000000d6, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x71, &(0x7f0000000280)=ANY=[], &(0x7f0000000200)) ioctl$BLKALIGNOFF(0xffffffffffffffff, 0x127a, &(0x7f0000000140)) 09:03:39 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x200, 0x1) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f00000008c0), 0xffffffffffffffff) perf_event_open(&(0x7f0000000740)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x40000000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") ioctl$DRM_IOCTL_GEM_OPEN(r0, 0x4008550c, &(0x7f0000000000)) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000300)=@assoc_value, &(0x7f0000000380)=0x8) [ 296.204965] clocksource: timekeeping watchdog on CPU1: Marking clocksource 'tsc' as unstable because the skew is too large: [ 296.216329] clocksource: 'acpi_pm' wd_now: 9f137b wd_last: bfdfc mask: ffffff [ 296.225639] clocksource: 'tsc' cs_now: a43dcde98c cs_last: a2cca1fe92 mask: ffffffffffffffff [ 296.236196] tsc: Marking TSC unstable due to clocksource watchdog [ 296.243916] TSC found unstable after boot, most likely due to broken BIOS. Use 'tsc=unstable'. 09:03:42 executing program 0: unshare(0x20400) io_setup(0x0, &(0x7f0000000000)=0x0) r1 = eventfd(0x0) io_submit(r0, 0x1, &(0x7f0000000940)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x3, r1}]) 09:03:42 executing program 5: syz_genetlink_get_family_id$nbd(&(0x7f0000000240)='nbd\x00') r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9) request_key(&(0x7f00000002c0)='cifs.spnego\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000800)="00678c7bd710cf593856519992eafed695201f66f0fc23fa144c2e4dca08000091a9366923d35663cc96b867c1c6b53ddcc51be94998fbac64ed83245688d6dfb4d82494f639307085889099d576e228d41a9791", r1) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000000100)={0x0, {0x2, 0x0, @broadcast}, {0x2, 0x0, @loopback}, {0x2, 0x0, @loopback}, 0x40, 0x0, 0x4, 0x0, 0x0, &(0x7f0000000000)='irlan0\x00'}) clone(0x100002102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r3, &(0x7f0000000180)=""/184, 0xfffffffffffffd84, 0x10100, 0x0, 0xfffffffffffffd51) write$nbd(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="674466980100000000"], 0x1) ioctl$KDGKBENT(r3, 0x4b46, &(0x7f00000000c0)={0x8000, 0x81, 0x1a7ce35}) ioctl$FICLONE(r0, 0x40049409, r0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)) r5 = syz_open_procfs(r4, &(0x7f0000000740)="6e65742f7866726d5f737461740009004d98ba69ea32fe9465a40659c68e9389ac00006dbfdf453641dbeea700000000cae667e63de2371335b16670d4033368c4e4065b411a6aae521d16ec7b2c0d17d27cc264c017109e123f5f226287c97ce2197c05bff782ff2bf61a8a4170f102e9fdbe0eb55a8f5cd6d326b6a1d261cde2f0ba11000000000000000000000000000000000000000000") accept4$inet(r0, &(0x7f00000003c0)={0x2, 0x0, @dev}, &(0x7f0000000580)=0x10, 0x80000) ioctl$GIO_SCRNMAP(r5, 0x4b40, &(0x7f0000000480)=""/196) write$eventfd(r0, &(0x7f0000000400), 0x8) getsockname$netlink(r5, &(0x7f0000000680), &(0x7f00000006c0)=0xc) ioctl$BLKSECTGET(r5, 0x1267, &(0x7f0000000600)) 09:03:42 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)="7369743000000000eaff00", 0x10) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080)={0x1}, 0x8) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x13, &(0x7f0000000040), 0x14) close(r0) 09:03:42 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000140)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000a8eff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000ac5000), 0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) r2 = memfd_create(&(0x7f00000000c0)='dev ', 0x3) write(r2, &(0x7f00000011c0)="16", 0x1) sendfile(r1, r2, &(0x7f0000000000), 0xffff) clone(0x3502001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) fcntl$addseals(r2, 0x409, 0x8) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000040)) 09:03:42 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/192, 0xc0}], 0x1, 0x0) preadv(r1, &(0x7f0000000480), 0x10000000000000d6, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000280)=ANY=[], &(0x7f0000000200)) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000180)={0x7}, 0x7) ioctl$BLKALIGNOFF(0xffffffffffffffff, 0x127a, &(0x7f0000000140)) [ 296.252725] sched_clock: Marking unstable (296302025956, -58121080)<-(296361566944, -117662055) [ 296.266995] clocksource: Switched to clocksource acpi_pm 09:03:42 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) readv(r1, &(0x7f0000000440)=[{&(0x7f0000000140)=""/122, 0x7a}], 0x1) 09:03:42 executing program 0: unshare(0x20400) io_setup(0x3de, &(0x7f0000000000)) r0 = eventfd(0x0) io_submit(0x0, 0x1, &(0x7f0000000940)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x3, r0}]) 09:03:42 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x4000100000008912, &(0x7f0000000280)="88f96234488dd25d766070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000d00)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)='\r', 0x1}], 0x1, &(0x7f0000000200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4}], 0x1, 0x0) 09:03:42 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd0ffc)=0x2) ioctl$TCFLSH(r1, 0x540b, 0x0) 09:03:42 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x4112, &(0x7f0000000000)) 09:03:42 executing program 2: rt_sigprocmask(0x0, &(0x7f000078b000), 0x0, 0x8) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000240), 0xffffffffffffffff) r0 = gettid() wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000400)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x12) ptrace$cont(0x1f, r0, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r1, &(0x7f0000000a80)=[{&(0x7f0000000280)='Q', 0x1}], 0x1) 09:03:43 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000080)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x272) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x11011, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000080)='./file0/bus\x00', 0x0) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) 09:03:43 executing program 0: unshare(0x20400) io_setup(0x3de, &(0x7f0000000000)) r0 = eventfd(0x0) io_submit(0x0, 0x1, &(0x7f0000000940)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x3, r0}]) 09:03:43 executing program 5: rt_sigprocmask(0x0, &(0x7f000078b000)={0xfffffffffffffffa}, 0x0, 0x8) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000240), 0xffffffffffffffff) r0 = gettid() wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000400)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x12) ptrace(0x18, r0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) writev(r1, &(0x7f0000000a80)=[{&(0x7f0000000280)='Q', 0x1}], 0x1) pselect6(0x40, &(0x7f0000000080), &(0x7f0000000fc0), &(0x7f0000013fc0), &(0x7f0000000000)={0x0, 0x989680}, &(0x7f0000000ff0)={&(0x7f0000000040), 0x8}) 09:03:43 executing program 3: socket$inet6(0xa, 0x3, 0x3) r0 = socket(0x10000000a, 0x3, 0x6) bind$unix(r0, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e22}, 0x6e) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={"6272696467653000000100"}) 09:03:43 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f000000b540)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0xc0000800005000, &(0x7f0000000000)) 09:03:43 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000380)={@dev}, 0x20) getsockopt$inet6_tcp_buf(r1, 0x6, 0x18, &(0x7f0000000100)=""/249, &(0x7f0000000040)=0xf9) [ 297.574164] ptrace attach of "/root/syz-executor5"[8317] was attempted by "/root/syz-executor5"[8318] 09:03:43 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000140)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40047602, &(0x7f0000000080)) [ 297.768721] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.776188] bridge0: port 1(bridge_slave_0) entered disabled state 09:03:43 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000080)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x272) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x11011, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000080)='./file0/bus\x00', 0x0) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) 09:03:44 executing program 0: unshare(0x20400) io_setup(0x3de, &(0x7f0000000000)) r0 = eventfd(0x0) io_submit(0x0, 0x1, &(0x7f0000000940)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x3, r0}]) 09:03:44 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="580000001400add427323b470c458c5602067fffffff81004e220000000058000b4824ca945f6400940005002825fda48c00000000000080000efffeffe809000000fff5dd00000010000100090a1000410400000000fcff", 0x58}], 0x1) 09:03:44 executing program 5: 09:03:44 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="580000001400add427323b470c458c5602067fffffff81004e220000000058000b4824ca945f6400940005002825fda48c00000000000080000efffeffe809000000fff5dd00000010000100090a1000410400000000fcff", 0x58}], 0x1) 09:03:44 executing program 0: unshare(0x20400) io_setup(0x3de, &(0x7f0000000000)=0x0) eventfd(0x0) io_submit(r0, 0x0, &(0x7f0000000940)) 09:03:44 executing program 5: 09:03:44 executing program 2: 09:03:45 executing program 3: 09:03:45 executing program 5: 09:03:45 executing program 2: 09:03:45 executing program 0: unshare(0x20400) io_setup(0x3de, &(0x7f0000000000)=0x0) eventfd(0x0) io_submit(r0, 0x0, &(0x7f0000000940)) 09:03:45 executing program 1: 09:03:45 executing program 4: 09:03:46 executing program 5: 09:03:46 executing program 4: 09:03:46 executing program 2: 09:03:46 executing program 0: unshare(0x20400) io_setup(0x3de, &(0x7f0000000000)=0x0) eventfd(0x0) io_submit(r0, 0x0, &(0x7f0000000940)) 09:03:46 executing program 1: 09:03:46 executing program 3: 09:03:46 executing program 4: 09:03:46 executing program 5: 09:03:46 executing program 1: 09:03:46 executing program 3: 09:03:46 executing program 4: 09:03:46 executing program 0: unshare(0x20400) io_setup(0x3de, &(0x7f0000000000)=0x0) r1 = eventfd(0x0) io_submit(r0, 0x1, &(0x7f0000000940)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, r1}]) 09:03:47 executing program 5: 09:03:47 executing program 1: 09:03:47 executing program 2: 09:03:47 executing program 4: 09:03:47 executing program 3: 09:03:47 executing program 0: unshare(0x20400) io_setup(0x3de, &(0x7f0000000000)=0x0) r1 = eventfd(0x0) io_submit(r0, 0x1, &(0x7f0000000940)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, r1}]) 09:03:47 executing program 1: 09:03:47 executing program 5: 09:03:47 executing program 4: 09:03:47 executing program 2: 09:03:48 executing program 5: 09:03:48 executing program 0: unshare(0x20400) io_setup(0x3de, &(0x7f0000000000)=0x0) r1 = eventfd(0x0) io_submit(r0, 0x1, &(0x7f0000000940)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, r1}]) 09:03:48 executing program 3: 09:03:48 executing program 1: 09:03:48 executing program 2: 09:03:48 executing program 4: 09:03:48 executing program 5: 09:03:48 executing program 3: 09:03:48 executing program 1: 09:03:48 executing program 4: 09:03:48 executing program 0: unshare(0x20400) io_setup(0x3de, &(0x7f0000000000)=0x0) eventfd(0x0) io_submit(r0, 0x1, &(0x7f0000000940)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x3}]) 09:03:48 executing program 2: io_setup(0x203, &(0x7f0000000040)=0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x0, 0x0) close(r1) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) io_submit(r0, 0x1, &(0x7f0000000b00)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 09:03:49 executing program 5: openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000001400)) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, &(0x7f0000000280), 0x0, 0x0, 0x270}}], 0x1, 0x0, &(0x7f0000000000)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x1a1, 0x0) 09:03:49 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94", 0x5) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r1, &(0x7f0000004740)=[{{&(0x7f00000007c0)=@pptp={0x18, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000840)=""/82, 0x20000892}, {&(0x7f0000000940)=""/191, 0xbf}, {&(0x7f0000000a00)=""/164, 0xa4}, {&(0x7f0000000b40)=""/166, 0xa6}, {&(0x7f0000000c00)=""/197, 0x20000cc5}], 0x5, &(0x7f0000000ec0)=""/210, 0xd2}}], 0x1, 0x0, &(0x7f0000004840)) 09:03:49 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079) ioctl$KVM_SET_CPUID(r0, 0xc0185500, &(0x7f0000000100)=ANY=[@ANYBLOB="02"]) 09:03:49 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000100)="c4e375189cf3162a0000000f07b9800000c00f3235004000000f309a7cd1b3c60d01c4c15dde80000000000f20e035200000000f22e00f35c7442400ffffffffc744240206000000c7442406000000000f011c2466b860008ed8c4c239bdbb0c000000", 0x63}], 0x1, 0x0, &(0x7f00000001c0), 0x0) socketpair$unix(0x1, 0x1000000000002, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000000)={0x77, 0x0, [0x4b564d03, 0x1]}) 09:03:49 executing program 0: unshare(0x20400) io_setup(0x3de, &(0x7f0000000000)=0x0) eventfd(0x0) io_submit(r0, 0x1, &(0x7f0000000940)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x3}]) 09:03:49 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4008ae8a, &(0x7f0000000180)) 09:03:49 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000000380)) ioctl$SCSI_IOCTL_TEST_UNIT_READY(0xffffffffffffffff, 0x2) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040), 0xfe30, 0x0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty={[0xe00000000000000, 0xfe80000000000000, 0xfe800000, 0xe603000000000000]}}, 0x1c) r1 = memfd_create(&(0x7f00000000c0)='lo@{\x00', 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000440)=[@in={0x2, 0x0, @local}, @in6={0xa, 0x4e20, 0x200, @ipv4={[], [], @rand_addr=0x6}, 0x7fff}, @in6={0xa, 0x4e24, 0x200, @dev={0xfe, 0x80, [], 0x17}, 0x5}], 0x48) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000140)=@ll={0x11, 0x0, 0x0}, &(0x7f0000000280)=0x80, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000300)={'team0\x00', r4}) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000340)={0x4, 0xffffffffffffffff}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB]}}, 0x0) accept4(r5, &(0x7f00000003c0)=@ipx, &(0x7f0000000040)=0x80, 0x800) [ 303.756153] vhci_hcd: default hub control req: 0200 v0000 i0000 l0 [ 303.758412] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. [ 303.928144] ================================================================== [ 303.931995] BUG: KMSAN: uninit-value in vmx_set_constant_host_state+0x1778/0x1830 [ 303.931995] CPU: 1 PID: 8479 Comm: syz-executor1 Not tainted 4.19.0-rc4+ #66 [ 303.931995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 303.931995] Call Trace: [ 303.931995] dump_stack+0x306/0x460 [ 303.931995] ? vmx_set_constant_host_state+0x1778/0x1830 [ 303.971252] kmsan_report+0x1a2/0x2e0 09:03:50 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94", 0x5) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r1, &(0x7f0000004740)=[{{&(0x7f00000007c0)=@pptp={0x18, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000840)=""/82, 0x20000892}, {&(0x7f0000000940)=""/191, 0xbf}, {&(0x7f0000000a00)=""/164, 0xa4}, {&(0x7f0000000b40)=""/166, 0xa6}, {&(0x7f0000000c00)=""/197, 0x20000cc5}], 0x5, &(0x7f0000000ec0)=""/210, 0xd2}}], 0x1, 0x0, &(0x7f0000004840)) [ 303.971252] __msan_warning+0x7c/0xe0 [ 303.971252] vmx_set_constant_host_state+0x1778/0x1830 [ 303.971252] vmx_create_vcpu+0x3e6f/0x7870 [ 303.971252] ? vmx_vm_init+0x340/0x340 [ 303.971252] kvm_arch_vcpu_create+0x25d/0x2f0 [ 303.971252] kvm_vm_ioctl+0x13fd/0x33d0 [ 303.971252] ? __msan_poison_alloca+0x17a/0x210 [ 303.971252] ? do_vfs_ioctl+0x18a/0x2810 [ 303.971252] ? __se_sys_ioctl+0x1da/0x270 [ 303.971252] ? vcpu_stat_clear_per_vm+0x420/0x420 [ 303.971252] ? vcpu_stat_clear_per_vm+0x420/0x420 [ 303.971252] do_vfs_ioctl+0xcf3/0x2810 [ 303.971252] ? security_file_ioctl+0x92/0x200 [ 303.971252] __se_sys_ioctl+0x1da/0x270 [ 303.971252] __x64_sys_ioctl+0x4a/0x70 [ 303.971252] do_syscall_64+0xbe/0x100 [ 303.971252] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 303.971252] RIP: 0033:0x457519 [ 303.971252] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 303.971252] RSP: 002b:00007fa6ff26fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 303.971252] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457519 [ 303.971252] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000005 [ 303.971252] RBP: 000000000072c040 R08: 0000000000000000 R09: 0000000000000000 [ 303.971252] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa6ff2706d4 [ 303.971252] R13: 00000000004bfbb7 R14: 00000000004cfc40 R15: 00000000ffffffff [ 303.971252] [ 303.971252] Local variable description: ----dt@vmx_set_constant_host_state [ 303.971252] Variable was created at: [ 303.971252] vmx_set_constant_host_state+0x2b0/0x1830 [ 303.971252] vmx_create_vcpu+0x3e6f/0x7870 [ 303.971252] ================================================================== [ 303.971252] Disabling lock debugging due to kernel taint [ 303.971252] Kernel panic - not syncing: panic_on_warn set ... [ 303.971252] [ 303.971252] CPU: 1 PID: 8479 Comm: syz-executor1 Tainted: G B 4.19.0-rc4+ #66 [ 303.971252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 303.971252] Call Trace: [ 303.971252] dump_stack+0x306/0x460 [ 303.971252] panic+0x54c/0xafa [ 303.971252] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 303.971252] kmsan_report+0x2d3/0x2e0 [ 303.971252] __msan_warning+0x7c/0xe0 [ 303.971252] vmx_set_constant_host_state+0x1778/0x1830 [ 303.971252] vmx_create_vcpu+0x3e6f/0x7870 [ 303.971252] ? vmx_vm_init+0x340/0x340 [ 303.971252] kvm_arch_vcpu_create+0x25d/0x2f0 [ 303.971252] kvm_vm_ioctl+0x13fd/0x33d0 [ 303.971252] ? __msan_poison_alloca+0x17a/0x210 [ 303.971252] ? do_vfs_ioctl+0x18a/0x2810 [ 303.971252] ? __se_sys_ioctl+0x1da/0x270 [ 303.971252] ? vcpu_stat_clear_per_vm+0x420/0x420 [ 303.971252] ? vcpu_stat_clear_per_vm+0x420/0x420 [ 304.242122] do_vfs_ioctl+0xcf3/0x2810 [ 304.242122] ? security_file_ioctl+0x92/0x200 [ 304.242122] __se_sys_ioctl+0x1da/0x270 [ 304.242122] __x64_sys_ioctl+0x4a/0x70 [ 304.242122] do_syscall_64+0xbe/0x100 [ 304.242122] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 304.242122] RIP: 0033:0x457519 [ 304.242122] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 304.242122] RSP: 002b:00007fa6ff26fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 304.242122] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457519 [ 304.242122] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000005 [ 304.242122] RBP: 000000000072c040 R08: 0000000000000000 R09: 0000000000000000 [ 304.242122] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa6ff2706d4 [ 304.242122] R13: 00000000004bfbb7 R14: 00000000004cfc40 R15: 00000000ffffffff [ 304.242122] Kernel Offset: disabled [ 304.242122] Rebooting in 86400 seconds..