[ 50.066656] audit: type=1800 audit(1545314320.101:26): pid=6317 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 51.609489] kauditd_printk_skb: 2 callbacks suppressed [ 51.609518] audit: type=1800 audit(1545314321.651:29): pid=6317 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 51.634300] audit: type=1800 audit(1545314321.661:30): pid=6317 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 54.432360] sshd (6454) used greatest stack depth: 53728 bytes left Warning: Permanently added '10.128.0.28' (ECDSA) to the list of known hosts. 2018/12/20 13:58:54 fuzzer started 2018/12/20 13:58:59 dialing manager at 10.128.0.26:46613 2018/12/20 13:58:59 syscalls: 1 2018/12/20 13:58:59 code coverage: enabled 2018/12/20 13:58:59 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/12/20 13:58:59 setuid sandbox: enabled 2018/12/20 13:58:59 namespace sandbox: enabled 2018/12/20 13:58:59 Android sandbox: /sys/fs/selinux/policy does not exist 2018/12/20 13:58:59 fault injection: enabled 2018/12/20 13:58:59 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/12/20 13:58:59 net packet injection: enabled 2018/12/20 13:58:59 net device setup: enabled 13:59:14 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x4, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000040)={0xf000000, 0x1, 0x0, [], &(0x7f0000000580)={0x98f908, 0x8, [], @ptr}}) [ 84.746072] IPVS: ftp: loaded support on port[0] = 21 [ 86.178711] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.185316] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.193802] device bridge_slave_0 entered promiscuous mode [ 86.290073] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.296722] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.305136] device bridge_slave_1 entered promiscuous mode [ 86.387866] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 86.468483] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 86.717074] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 86.803565] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 86.888193] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 86.895234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 86.980370] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 86.987397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 87.246251] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 87.254934] team0: Port device team_slave_0 added [ 87.339671] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 87.348280] team0: Port device team_slave_1 added [ 87.433824] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 87.524854] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 87.612943] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 87.620716] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 87.630151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 87.717268] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 87.724977] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 87.734567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready 13:59:18 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ppoll(&(0x7f0000000200)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl(r1, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") ioctl$int_in(r0, 0x8000008004500b, 0x0) [ 88.577565] IPVS: ftp: loaded support on port[0] = 21 [ 89.106955] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.113602] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.120748] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.127420] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.136720] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 89.143230] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 91.048397] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.055079] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.063935] device bridge_slave_0 entered promiscuous mode [ 91.279599] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.286237] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.294604] device bridge_slave_1 entered promiscuous mode [ 91.439901] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 91.533497] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 91.822880] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 91.945957] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 92.423090] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 92.431838] team0: Port device team_slave_0 added [ 92.594051] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 92.602720] team0: Port device team_slave_1 added [ 92.773522] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 92.780489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 92.789502] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 92.923541] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 92.930789] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 92.940166] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 93.092056] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 93.099685] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 93.108900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 93.207926] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 93.215671] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 93.225877] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready 13:59:23 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0xbeb}]}) [ 94.098505] IPVS: ftp: loaded support on port[0] = 21 [ 94.874747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.122589] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.129102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.136290] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.142872] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.152491] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 95.158995] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 95.419828] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 95.988452] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 95.994837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 96.002922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 96.564349] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.570897] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.579358] device bridge_slave_0 entered promiscuous mode [ 96.683580] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.796241] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.803008] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.811225] device bridge_slave_1 entered promiscuous mode [ 96.958243] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 97.118977] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 97.576642] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 97.712356] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 98.321046] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 98.329656] team0: Port device team_slave_0 added [ 98.430783] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 98.439461] team0: Port device team_slave_1 added [ 98.623085] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 98.630037] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 98.639173] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 98.848587] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 98.855701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 98.864546] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 98.968061] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 98.975737] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 98.984787] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 99.184144] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 99.191845] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 99.200930] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready 13:59:30 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x4) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f00000032c0)=[{{0x0, 0x3e2, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f0000000140)=""/225, 0xe1}, {&(0x7f00000012c0)=""/123, 0x11f}, {&(0x7f0000001340)=""/158, 0x9e}], 0x4, &(0x7f0000000240)=""/35, 0x23}}, {{&(0x7f00000019c0)=@nl, 0x80, &(0x7f0000001ac0), 0x3b8}}], 0x2, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0xfffffff0}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x28, 0xb01, 0x0, 0x0, {0x10}}, 0x165}}, 0x0) 13:59:30 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x4, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000040)={0xf000000, 0x1, 0x0, [], &(0x7f0000000580)={0x98f908, 0x8, [], @ptr}}) 13:59:31 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x4, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000040)={0xf000000, 0x1, 0x0, [], &(0x7f0000000580)={0x98f908, 0x8, [], @ptr}}) [ 100.888022] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.894687] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.901930] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.908492] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.917615] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 100.924140] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 13:59:31 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x4, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000040)={0xf000000, 0x1, 0x0, [], &(0x7f0000000580)={0x98f908, 0x8, [], @ptr}}) [ 101.243256] IPVS: ftp: loaded support on port[0] = 21 13:59:31 executing program 0: futex(0xfffffffffffffffd, 0x3, 0x0, &(0x7f0000000140), &(0x7f00000001c0), 0x0) 13:59:31 executing program 0: futex(0xfffffffffffffffd, 0x3, 0x0, &(0x7f0000000140), &(0x7f00000001c0), 0x0) 13:59:31 executing program 0: futex(0xfffffffffffffffd, 0x3, 0x0, &(0x7f0000000140), &(0x7f00000001c0), 0x0) 13:59:32 executing program 0: futex(0xfffffffffffffffd, 0x3, 0x0, &(0x7f0000000140), &(0x7f00000001c0), 0x0) 13:59:32 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000000000002000000000020009004000f40a000000000000000003000600000000000200ee00e0000054d81458186fe8b90002000100000000000000020200044a7b030005000000000002000000e0003f010000000000fca0d9"], 0x60}}, 0x0) [ 102.353796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.128235] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready 13:59:33 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000000000002000000000020009004000f40a000000000000000003000600000000000200ee00e0000054d81458186fe8b90002000100000000000000020200044a7b030005000000000002000000e0003f010000000000fca0d9"], 0x60}}, 0x0) [ 103.801402] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 103.807845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 103.815816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 104.465872] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.504131] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.510682] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.518935] device bridge_slave_0 entered promiscuous mode [ 104.688870] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.695495] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.703766] device bridge_slave_1 entered promiscuous mode [ 104.879286] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 104.970985] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 105.371303] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 105.542941] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 105.848841] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 105.856399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 106.323481] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 106.332212] team0: Port device team_slave_0 added [ 106.516852] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 106.525677] team0: Port device team_slave_1 added [ 106.664852] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 106.856604] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 106.863693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 106.872516] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 106.967214] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 106.975034] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 106.984087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 107.115494] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 107.123345] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 107.132360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 108.510923] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.835717] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.842396] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.849537] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.856177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.865630] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 108.872223] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 109.155357] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready 13:59:39 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ppoll(&(0x7f0000000200)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl(r1, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") ioctl$int_in(r0, 0x8000008004500b, 0x0) [ 109.773747] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 109.780125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 109.789115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 110.327766] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.473107] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. 13:59:43 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000000000002000000000020009004000f40a000000000000000003000600000000000200ee00e0000054d81458186fe8b90002000100000000000000020200044a7b030005000000000002000000e0003f010000000000fca0d9"], 0x60}}, 0x0) [ 114.321234] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.488054] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 114.646810] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 114.653149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 114.660966] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 114.824878] 8021q: adding VLAN 0 to HW filter on device team0 13:59:45 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x4) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f00000032c0)=[{{0x0, 0x3e2, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f0000000140)=""/225, 0xe1}, {&(0x7f00000012c0)=""/123, 0x11f}, {&(0x7f0000001340)=""/158, 0x9e}], 0x4, &(0x7f0000000240)=""/35, 0x23}}, {{&(0x7f00000019c0)=@nl, 0x80, &(0x7f0000001ac0), 0x3b8}}], 0x2, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0xfffffff0}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x28, 0xb01, 0x0, 0x0, {0x10}}, 0x165}}, 0x0) 13:59:45 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0xbeb}]}) 13:59:46 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ppoll(&(0x7f0000000200)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl(r1, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") ioctl$int_in(r0, 0x8000008004500b, 0x0) 13:59:46 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$TIOCLINUX7(r0, 0x541c, &(0x7f0000000040)={0x7, 0x1}) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f00000001c0)={r1, 0x1, &(0x7f00000000c0)=[0x7], &(0x7f0000000100)=[0x1000, 0xfffffffffffffff8, 0x40, 0xe23b, 0x2, 0x6, 0x75, 0xffffffffffff8001], 0x4, 0x6, 0xfffffffffffff800, &(0x7f0000000140)=[0x8, 0x1800, 0x81, 0x0, 0x1ff, 0x5], &(0x7f0000000180)=[0x0, 0x200, 0x8000, 0xffff]}) ioctl$TIOCCONS(r0, 0x541d) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_GET_NO_NEW_PRIVS(0x27) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000200)={'nat\x00'}, &(0x7f0000000280)=0x54) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f00000002c0)=0x400) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000300)={0x0, 0xffffffff, 0x3d, 0x0, 0x0, [], [], [], 0x1, 0x401}) bind$netlink(r0, &(0x7f0000000440)={0x10, 0x0, 0x25dfdbfb, 0x40040000}, 0xc) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000480)={0x0, 0x5}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000500)={0x3, 0x5, 0x5, 0x8, r2}, 0x10) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000540)=0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000580)={0x0, 0x0}) tgkill(r3, r4, 0x1d) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/mixer\x00', 0x2, 0x0) open_by_handle_at(r5, &(0x7f0000000600)={0xc0, 0x7ff, "4cc6b7342b77b6b7f3627d7d89470d92687706702f44df2bc89f37a953a4aa571433948235a1f54832d28691bb5211c681bbf7228e258d49faa9abd4550033a132c97a7a22edaaa27c7e92ad14b076f651eee4315692d1d5879b6ffe74acccc920b56e9178416bf3524189c6b764157ae31f32550e1f2515c8633086a326b74f31adb8262b1c9a999b2ab5476e45c239f50060393a6b3ed6e49746dc40343ee32dda29a60c36b0c97ca7ec55f74e55fb7af04f7c9a9ac8a1"}, 0xe000) ptrace$getregset(0x4204, r4, 0x200, &(0x7f0000000700)={&(0x7f00000006c0)=""/7, 0x7}) setsockopt$inet6_IPV6_ADDRFORM(r5, 0x29, 0x1, &(0x7f0000000740), 0x4) r6 = syz_open_dev$sndpcmc(&(0x7f0000000780)='/dev/snd/pcmC#D#c\x00', 0x0, 0x20002) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000800)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r5, &(0x7f0000000a40)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2050}, 0xc, &(0x7f0000000a00)={&(0x7f0000000840)={0x1c0, r7, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0xec, 0x5, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800000000000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5b80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xaf9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x68}]}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_NET={0x4}, @TIPC_NLA_SOCK={0x3c, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x24}]}, @TIPC_NLA_MEDIA={0x14, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MEDIA={0x2c, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd129}]}]}, @TIPC_NLA_SOCK={0x1c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x40}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3ff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10000}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) ioctl$KVM_SET_SREGS(r0, 0x4138ae84, &(0x7f0000000a80)={{0xd000, 0x0, 0x8, 0x7fffffff80, 0x40, 0x5, 0x100, 0x3ff, 0x401, 0x24a1, 0x7, 0x6}, {0x1000, 0xd000, 0x0, 0xffff, 0x2, 0x0, 0xeb, 0x1, 0xcfc, 0x9, 0x5, 0x4}, {0x2001, 0xd000, 0x0, 0x100, 0x25ff, 0x6, 0x1, 0x81, 0x1f, 0x45e0, 0x9, 0x47fd2c3e}, {0x103000, 0xd000, 0xe, 0x6, 0xfffffffffffffffb, 0x8, 0x2, 0x0, 0x7f, 0x9, 0xffffffff80000001, 0xf627}, {0x10000, 0x4, 0xf, 0x3, 0x6, 0x81, 0x9, 0x9, 0x3, 0x3, 0x7, 0x1000}, {0x0, 0x0, 0x10, 0x8, 0x3, 0x6, 0x3f, 0xdec, 0x3, 0x0, 0xfffffffffffffff8, 0x101}, {0xf000, 0xf000, 0x9, 0xf01, 0x5, 0x7, 0x76, 0xff, 0xfffffffffffffe00, 0x8001, 0x3f, 0x100000000}, {0x10000, 0x2, 0xb, 0x1, 0x10001, 0x1, 0x200, 0x7, 0x80000000, 0x6, 0x8, 0x3f}, {0x10f002, 0x100000}, {0x6000, 0x5000}, 0x10, 0x0, 0x10000, 0x400000, 0x4, 0x100, 0x4006, [0x4, 0x8, 0x7, 0x1]}) ioctl$UI_SET_RELBIT(r6, 0x40045566, 0xc) fsetxattr$security_ima(r0, &(0x7f0000000bc0)='security.ima\x00', &(0x7f0000000c00)=@ng={0x4, 0xe, "508e"}, 0x4, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000c80)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000c40)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r6, &(0x7f0000000cc0)={0xf, 0x8, 0xfa00, {r8, 0xa}}, 0x10) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r6, 0x80045700, &(0x7f0000000d00)) ioctl$BINDER_THREAD_EXIT(r5, 0x40046208, 0x0) 13:59:46 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000000000002000000000020009004000f40a000000000000000003000600000000000200ee00e0000054d81458186fe8b90002000100000000000000020200044a7b030005000000000002000000e0003f010000000000fca0d9"], 0x60}}, 0x0) 13:59:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0xbeb}]}) 13:59:46 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0xbeb}]}) 13:59:46 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x4) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f00000032c0)=[{{0x0, 0x3e2, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f0000000140)=""/225, 0xe1}, {&(0x7f00000012c0)=""/123, 0x11f}, {&(0x7f0000001340)=""/158, 0x9e}], 0x4, &(0x7f0000000240)=""/35, 0x23}}, {{&(0x7f00000019c0)=@nl, 0x80, &(0x7f0000001ac0), 0x3b8}}], 0x2, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0xfffffff0}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x28, 0xb01, 0x0, 0x0, {0x10}}, 0x165}}, 0x0) 13:59:46 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x4) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f00000032c0)=[{{0x0, 0x3e2, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f0000000140)=""/225, 0xe1}, {&(0x7f00000012c0)=""/123, 0x11f}, {&(0x7f0000001340)=""/158, 0x9e}], 0x4, &(0x7f0000000240)=""/35, 0x23}}, {{&(0x7f00000019c0)=@nl, 0x80, &(0x7f0000001ac0), 0x3b8}}], 0x2, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0xfffffff0}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x28, 0xb01, 0x0, 0x0, {0x10}}, 0x165}}, 0x0) 13:59:46 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x4) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f00000032c0)=[{{0x0, 0x3e2, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f0000000140)=""/225, 0xe1}, {&(0x7f00000012c0)=""/123, 0x11f}, {&(0x7f0000001340)=""/158, 0x9e}], 0x4, &(0x7f0000000240)=""/35, 0x23}}, {{&(0x7f00000019c0)=@nl, 0x80, &(0x7f0000001ac0), 0x3b8}}], 0x2, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0xfffffff0}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x28, 0xb01, 0x0, 0x0, {0x10}}, 0x165}}, 0x0) 13:59:46 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0xbeb}]}) 13:59:46 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x4) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f00000032c0)=[{{0x0, 0x3e2, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f0000000140)=""/225, 0xe1}, {&(0x7f00000012c0)=""/123, 0x11f}, {&(0x7f0000001340)=""/158, 0x9e}], 0x4, &(0x7f0000000240)=""/35, 0x23}}, {{&(0x7f00000019c0)=@nl, 0x80, &(0x7f0000001ac0), 0x3b8}}], 0x2, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0xfffffff0}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x28, 0xb01, 0x0, 0x0, {0x10}}, 0x165}}, 0x0) 13:59:46 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ppoll(&(0x7f0000000200)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl(r1, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") ioctl$int_in(r0, 0x8000008004500b, 0x0) 13:59:46 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x4) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f00000032c0)=[{{0x0, 0x3e2, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f0000000140)=""/225, 0xe1}, {&(0x7f00000012c0)=""/123, 0x11f}, {&(0x7f0000001340)=""/158, 0x9e}], 0x4, &(0x7f0000000240)=""/35, 0x23}}, {{&(0x7f00000019c0)=@nl, 0x80, &(0x7f0000001ac0), 0x3b8}}], 0x2, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0xfffffff0}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x28, 0xb01, 0x0, 0x0, {0x10}}, 0x165}}, 0x0) 13:59:46 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ppoll(&(0x7f0000000200)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl(r1, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") ioctl$int_in(r0, 0x8000008004500b, 0x0) [ 116.879399] IPVS: ftp: loaded support on port[0] = 21 [ 116.995439] IPVS: ftp: loaded support on port[0] = 21 [ 118.487500] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.494158] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.502303] device bridge_slave_0 entered promiscuous mode [ 118.580011] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.587065] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.595297] device bridge_slave_1 entered promiscuous mode [ 118.607204] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.614021] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.622303] device bridge_slave_0 entered promiscuous mode [ 118.670300] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 118.704254] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.710753] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.718888] device bridge_slave_1 entered promiscuous mode [ 118.746199] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 118.796055] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 118.872756] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 118.989643] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 119.069379] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 119.110116] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 119.148790] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 119.155834] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 119.195283] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 119.237004] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 119.244036] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 119.276048] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 119.283071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 119.367629] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 119.374652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 119.486036] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 119.494731] team0: Port device team_slave_0 added [ 119.571329] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 119.579860] team0: Port device team_slave_1 added [ 119.611892] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 119.620270] team0: Port device team_slave_0 added [ 119.655509] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 119.697941] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 119.707348] team0: Port device team_slave_1 added [ 119.739478] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 119.784885] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 119.819370] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 119.827306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 119.836315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 119.866961] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 119.916752] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 119.924822] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 119.933912] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 119.948999] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 119.956685] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 119.966149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 120.028423] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 120.036225] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 120.045168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 120.879387] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.886061] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.893206] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.899686] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.908776] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 120.992428] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.998971] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.006110] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.012562] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.020375] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 121.161896] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 121.169773] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 124.229103] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.265494] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.532021] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 124.565976] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 124.828425] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 124.834828] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 124.842824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 124.864210] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 124.870503] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 124.878642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 125.166229] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.182185] 8021q: adding VLAN 0 to HW filter on device team0 13:59:57 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r0, 0xc08c5114, &(0x7f0000a07fff)) 13:59:57 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ppoll(&(0x7f0000000200)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl(r1, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") ioctl$int_in(r0, 0x8000008004500b, 0x0) 13:59:57 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f0000000a40), 0x400000000000038, 0x0) 13:59:57 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ppoll(&(0x7f0000000200)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl(r1, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") ioctl$int_in(r0, 0x8000008004500b, 0x0) 13:59:57 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind(r0, &(0x7f0000001d80)=@un=@file={0x0, './file0\x00'}, 0x80) 13:59:57 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0xbeb}]}) 13:59:57 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind(r0, &(0x7f0000001d80)=@un=@file={0x0, './file0\x00'}, 0x80) 13:59:57 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0xbeb}]}) 13:59:57 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r0, 0xc08c5114, &(0x7f0000a07fff)) 13:59:57 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f0000000a40), 0x400000000000038, 0x0) 13:59:57 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind(r0, &(0x7f0000001d80)=@un=@file={0x0, './file0\x00'}, 0x80) 13:59:57 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r0, 0xc08c5114, &(0x7f0000a07fff)) 13:59:58 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r0, 0xc08c5114, &(0x7f0000a07fff)) 13:59:58 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ppoll(&(0x7f0000000200)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl(r1, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") ioctl$int_in(r0, 0x8000008004500b, 0x0) 13:59:58 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f0000000a40), 0x400000000000038, 0x0) 13:59:58 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind(r0, &(0x7f0000001d80)=@un=@file={0x0, './file0\x00'}, 0x80) 13:59:58 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f0000000a40), 0x400000000000038, 0x0) 13:59:58 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f0000000a40), 0x400000000000038, 0x0) 13:59:58 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ppoll(&(0x7f0000000200)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl(r1, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") ioctl$int_in(r0, 0x8000008004500b, 0x0) 13:59:58 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f0000000a40), 0x400000000000038, 0x0) 13:59:58 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f0000000a40), 0x400000000000038, 0x0) 13:59:58 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f0000000a40), 0x400000000000038, 0x0) 13:59:58 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f0000000a40), 0x400000000000038, 0x0) 13:59:58 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f0000000a40), 0x400000000000038, 0x0) 13:59:58 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f000004d000)=[{}], 0x10) [ 129.021724] hrtimer: interrupt took 218719 ns 13:59:59 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ppoll(&(0x7f0000000200)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl(r1, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") ioctl$int_in(r0, 0x8000008004500b, 0x0) 13:59:59 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f0000000a40), 0x400000000000038, 0x0) 13:59:59 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f0000000a40), 0x400000000000038, 0x0) 13:59:59 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f000004d000)=[{}], 0x10) 13:59:59 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f0000000a40), 0x400000000000038, 0x0) 13:59:59 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000100)=ANY=[@ANYBLOB="609aa3c88cab27fd"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000013000/0x18000)=nil, 0x0, 0x101, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:59:59 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f000004d000)=[{}], 0x10) 13:59:59 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r0, 0x4010641a, &(0x7f0000000080)={0x0, 0x0}) 13:59:59 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000100)=ANY=[@ANYBLOB="609aa3c88cab27fd"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000013000/0x18000)=nil, 0x0, 0x101, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:59:59 executing program 4: r0 = memfd_create(&(0x7f0000000240)='#em1#+\x00', 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0x20) sendfile(r0, r0, &(0x7f0000001000), 0x930) mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x80000000004, 0x11, r0, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x200000a, 0x800032, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x7, &(0x7f0000001300), &(0x7f0000000100)=0x60) 13:59:59 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) close(r0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 13:59:59 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f000004d000)=[{}], 0x10) 14:00:00 executing program 0: r0 = memfd_create(&(0x7f0000000240)='#em1#+\x00', 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0x20) sendfile(r0, r0, &(0x7f0000001000), 0x930) mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x80000000004, 0x11, r0, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x200000a, 0x800032, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x7, &(0x7f0000001300), &(0x7f0000000100)=0x60) 14:00:00 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r0, 0x4010641a, &(0x7f0000000080)={0x0, 0x0}) 14:00:00 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000100)=ANY=[@ANYBLOB="609aa3c88cab27fd"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000013000/0x18000)=nil, 0x0, 0x101, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:00:00 executing program 4: r0 = memfd_create(&(0x7f0000000240)='#em1#+\x00', 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0x20) sendfile(r0, r0, &(0x7f0000001000), 0x930) mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x80000000004, 0x11, r0, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x200000a, 0x800032, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x7, &(0x7f0000001300), &(0x7f0000000100)=0x60) 14:00:00 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) close(r0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 14:00:00 executing program 3: r0 = memfd_create(&(0x7f0000000240)='#em1#+\x00', 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0x20) sendfile(r0, r0, &(0x7f0000001000), 0x930) mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x80000000004, 0x11, r0, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x200000a, 0x800032, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x7, &(0x7f0000001300), &(0x7f0000000100)=0x60) 14:00:00 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) close(r0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 14:00:00 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r0, 0x4010641a, &(0x7f0000000080)={0x0, 0x0}) 14:00:00 executing program 0: r0 = memfd_create(&(0x7f0000000240)='#em1#+\x00', 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0x20) sendfile(r0, r0, &(0x7f0000001000), 0x930) mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x80000000004, 0x11, r0, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x200000a, 0x800032, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x7, &(0x7f0000001300), &(0x7f0000000100)=0x60) 14:00:00 executing program 3: r0 = memfd_create(&(0x7f0000000240)='#em1#+\x00', 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0x20) sendfile(r0, r0, &(0x7f0000001000), 0x930) mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x80000000004, 0x11, r0, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x200000a, 0x800032, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x7, &(0x7f0000001300), &(0x7f0000000100)=0x60) 14:00:00 executing program 4: r0 = memfd_create(&(0x7f0000000240)='#em1#+\x00', 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0x20) sendfile(r0, r0, &(0x7f0000001000), 0x930) mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x80000000004, 0x11, r0, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x200000a, 0x800032, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x7, &(0x7f0000001300), &(0x7f0000000100)=0x60) 14:00:00 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000100)=ANY=[@ANYBLOB="609aa3c88cab27fd"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000013000/0x18000)=nil, 0x0, 0x101, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:00:00 executing program 3: r0 = memfd_create(&(0x7f0000000240)='#em1#+\x00', 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0x20) sendfile(r0, r0, &(0x7f0000001000), 0x930) mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x80000000004, 0x11, r0, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x200000a, 0x800032, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x7, &(0x7f0000001300), &(0x7f0000000100)=0x60) 14:00:00 executing program 4: r0 = memfd_create(&(0x7f0000000240)='#em1#+\x00', 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0x20) sendfile(r0, r0, &(0x7f0000001000), 0x930) mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x80000000004, 0x11, r0, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x200000a, 0x800032, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x7, &(0x7f0000001300), &(0x7f0000000100)=0x60) 14:00:00 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r0, 0x4010641a, &(0x7f0000000080)={0x0, 0x0}) 14:00:00 executing program 0: r0 = memfd_create(&(0x7f0000000240)='#em1#+\x00', 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0x20) sendfile(r0, r0, &(0x7f0000001000), 0x930) mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x80000000004, 0x11, r0, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x200000a, 0x800032, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x7, &(0x7f0000001300), &(0x7f0000000100)=0x60) 14:00:00 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) close(r0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 14:00:01 executing program 2: clone(0x200, &(0x7f00000001c0), &(0x7f0000000000), &(0x7f0000000180), &(0x7f0000000200)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000340), &(0x7f0000000240)) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') pread64(r0, &(0x7f00009f3000), 0x0, 0x0) lseek(r0, 0x0, 0x3) pread64(r0, &(0x7f0000000280)=""/71, 0x47, 0x0) open$dir(&(0x7f00000001c0)='./file0\x00', 0x101001, 0x0) 14:00:01 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0xaaaaaaaaaaaaaff, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:00:01 executing program 3: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,r&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1sr/\xd3g\xad\"\xe8U0%\xa2\xe8\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5BB5CZ=\xbbv\xbc} 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 131.401783] RSP: 002b:00007fde902a7c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 131.409494] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457669 [ 131.416766] RDX: 000000000000001c RSI: 0000000020000280 RDI: 0000000000000003 [ 131.424054] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 131.431350] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fde902a86d4 [ 131.438625] R13: 00000000004bdc27 R14: 00000000004cd678 R15: 00000000ffffffff [ 131.445917] [ 131.447560] Local variable description: ----combined@secure_ipv6_port_ephemeral [ 131.455006] Variable was created at: [ 131.458723] secure_ipv6_port_ephemeral+0x6a/0x220 [ 131.463660] inet6_hash_connect+0x11f/0x1a0 [ 131.467969] [ 131.469617] Bytes 2-7 of 8 are uninitialized [ 131.474038] Memory access of size 8 starts at ffff88815af2fa08 [ 131.480014] ================================================================== [ 131.487364] Disabling lock debugging due to kernel taint [ 131.492828] Kernel panic - not syncing: panic_on_warn set ... [ 131.498726] CPU: 0 PID: 8340 Comm: syz-executor5 Tainted: G B 4.20.0-rc7+ #8 [ 131.507208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 131.516574] Call Trace: [ 131.519191] dump_stack+0x173/0x1d0 [ 131.522852] panic+0x3ce/0x961 [ 131.526155] kmsan_report+0x285/0x290 [ 131.529983] kmsan_internal_check_memory+0x9a7/0xa20 [ 131.535126] __msan_instrument_asm_load+0x8a/0x90 [ 131.539986] __siphash_aligned+0x512/0xae0 [ 131.544261] secure_ipv6_port_ephemeral+0x110/0x220 [ 131.549305] inet6_hash_connect+0x11f/0x1a0 [ 131.553647] dccp_v6_connect+0x197e/0x1e20 [ 131.557916] ? __msan_poison_alloca+0x1e0/0x270 [ 131.562617] ? dccp_v6_exit_batch+0x40/0x40 [ 131.566953] __inet_stream_connect+0x2f9/0x1340 [ 131.571679] inet_stream_connect+0x101/0x180 [ 131.576130] __sys_connect+0x664/0x820 [ 131.580038] ? __inet_stream_connect+0x1340/0x1340 [ 131.584983] ? prepare_exit_to_usermode+0x114/0x420 [ 131.590007] ? syscall_return_slowpath+0x50/0x650 [ 131.594877] __se_sys_connect+0x8d/0xb0 [ 131.598873] __x64_sys_connect+0x4a/0x70 [ 131.602941] do_syscall_64+0xbc/0xf0 [ 131.606676] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 131.611924] RIP: 0033:0x457669 [ 131.615117] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 131.634017] RSP: 002b:00007fde902a7c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 131.641728] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457669 [ 131.649015] RDX: 000000000000001c RSI: 0000000020000280 RDI: 0000000000000003 [ 131.656286] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 131.663576] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fde902a86d4 [ 131.670867] R13: 00000000004bdc27 R14: 00000000004cd678 R15: 00000000ffffffff [ 131.679036] Kernel Offset: disabled [ 131.682667] Rebooting in 86400 seconds..