Warning: Permanently added '10.128.0.6' (ECDSA) to the list of known hosts. 2018/11/10 07:08:59 fuzzer started 2018/11/10 07:09:04 dialing manager at 10.128.0.26:36239 syzkaller login: [ 81.275356] ld (6381) used greatest stack depth: 53232 bytes left 2018/11/10 07:09:04 syscalls: 1 2018/11/10 07:09:04 code coverage: enabled 2018/11/10 07:09:04 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/11/10 07:09:04 setuid sandbox: enabled 2018/11/10 07:09:04 namespace sandbox: enabled 2018/11/10 07:09:04 Android sandbox: /sys/fs/selinux/policy does not exist 2018/11/10 07:09:04 fault injection: enabled 2018/11/10 07:09:04 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/11/10 07:09:04 net packed injection: enabled 2018/11/10 07:09:04 net device setup: enabled 07:12:06 executing program 0: [ 264.718600] IPVS: ftp: loaded support on port[0] = 21 [ 267.221208] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.228487] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.237505] device bridge_slave_0 entered promiscuous mode [ 267.384255] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.390794] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.399757] device bridge_slave_1 entered promiscuous mode [ 267.547058] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 267.693619] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 268.150330] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 268.301593] bond0: Enslaving bond_slave_1 as an active interface with an up link 07:12:11 executing program 1: [ 268.594345] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 268.601455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 269.291536] IPVS: ftp: loaded support on port[0] = 21 [ 269.329629] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 269.337951] team0: Port device team_slave_0 added [ 269.551847] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 269.560219] team0: Port device team_slave_1 added [ 269.878537] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 269.885745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 269.895112] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 270.144628] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 270.152209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 270.161465] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 270.362844] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 270.370564] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 270.379984] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 270.553257] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 270.561054] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 270.570401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 273.040692] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.047341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.054475] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.060953] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.070366] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 273.142927] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 273.446061] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.452658] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.461315] device bridge_slave_0 entered promiscuous mode [ 273.647149] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.653775] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.662709] device bridge_slave_1 entered promiscuous mode [ 273.928537] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 274.166261] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 274.926891] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 275.142469] bond0: Enslaving bond_slave_1 as an active interface with an up link 07:12:18 executing program 2: [ 275.444548] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 275.451622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 275.788365] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 275.795607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 276.200772] IPVS: ftp: loaded support on port[0] = 21 [ 276.735320] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 276.743900] team0: Port device team_slave_0 added [ 277.055351] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 277.063700] team0: Port device team_slave_1 added [ 277.401324] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 277.408660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 277.417678] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 277.775206] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 277.782316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 277.791402] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 278.082376] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 278.090515] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 278.099556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 278.457503] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 278.465322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 278.474549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 280.939504] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.946330] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.955081] device bridge_slave_0 entered promiscuous mode [ 281.314003] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.320491] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.329420] device bridge_slave_1 entered promiscuous mode [ 281.517209] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 281.851177] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 281.987119] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.993690] bridge0: port 2(bridge_slave_1) entered forwarding state [ 282.000641] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.007248] bridge0: port 1(bridge_slave_0) entered forwarding state [ 282.016891] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 282.630621] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 282.735072] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 283.060732] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 283.427096] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 283.434387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 283.776552] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 283.783785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 07:12:27 executing program 3: [ 284.638708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.667627] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 284.676450] team0: Port device team_slave_0 added [ 285.081606] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 285.090031] team0: Port device team_slave_1 added [ 285.472008] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 285.479236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 285.488365] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 285.805641] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 285.812827] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 285.821542] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 286.011706] IPVS: ftp: loaded support on port[0] = 21 [ 286.061742] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 286.080627] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 286.090071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 286.243709] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 286.450670] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 286.458802] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 286.468055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 287.619722] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 287.626318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 287.634597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 288.998150] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.599108] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.605687] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.612786] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.619257] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.628168] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 291.453640] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 292.162156] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.168737] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.177910] device bridge_slave_0 entered promiscuous mode [ 292.594753] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.601239] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.610044] device bridge_slave_1 entered promiscuous mode [ 292.949443] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 293.307716] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 294.358122] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 294.724644] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 295.114836] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 295.121910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 295.501652] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 295.508914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 296.435857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 296.627329] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 296.635926] team0: Port device team_slave_0 added 07:12:39 executing program 4: [ 297.073383] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 297.081574] team0: Port device team_slave_1 added [ 297.598829] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 297.606030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 297.614866] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 07:12:40 executing program 0: [ 298.036788] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 298.044109] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 298.053030] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 298.109538] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready 07:12:41 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000080)={&(0x7f0000ffd000/0x2000)=nil, 0xffffffff, 0x3, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x6}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"726f73653000010000000600", 0x2}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'veth1_to_bond\x00', 0x400}) [ 298.474502] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 298.482164] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 298.491292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 298.498621] IPVS: ftp: loaded support on port[0] = 21 [ 298.841779] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 298.849686] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 298.858927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready 07:12:42 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) bind$inet(r1, &(0x7f0000dc7ff0)={0x2, 0x0, @local}, 0x10) recvfrom$inet(r1, &(0x7f0000000100)=""/214, 0xd6, 0x2, &(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10) preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000723f20)=""/127, 0x7f}], 0x1, 0x102) [ 299.869951] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 299.876538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 299.884747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 07:12:43 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) recvmmsg(r0, &(0x7f00000032c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, &(0x7f0000000080)=""/210, 0xd2, 0x2}, 0x200}, {{&(0x7f0000001280)=@sco, 0x80, &(0x7f0000000180)=[{&(0x7f0000001300)=""/137, 0x89}, {&(0x7f00000013c0)=""/142, 0x8e}, {&(0x7f0000001480)=""/152, 0x98}], 0x3, &(0x7f0000001540)=""/4096, 0x1000, 0x8}, 0x100000001}, {{&(0x7f0000002540), 0x80, &(0x7f0000003280), 0x0, 0x0, 0x0, 0x4}, 0xfff}, {{&(0x7f0000002740)=@can={0x1d, 0x0}, 0x80, &(0x7f0000002880)=[{&(0x7f00000027c0)=""/17, 0x11}, {&(0x7f0000002800)=""/101, 0x65}], 0x2, 0x0, 0x0, 0x6}, 0xfb3}, {{&(0x7f00000028c0)=@l2, 0x80, &(0x7f0000002c00)=[{&(0x7f0000002940)=""/243, 0xf3}, {&(0x7f0000002a40)=""/65, 0x41}, {&(0x7f0000002ac0)=""/22, 0x16}, {&(0x7f0000002b00)=""/8, 0x8}, {&(0x7f0000002b40)=""/173, 0xad}], 0x5, &(0x7f0000002c80)=""/71, 0x47, 0x3}, 0xffffffffffffffff}, {{&(0x7f0000002d00)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000002d80), 0x0, &(0x7f0000002dc0)=""/79, 0x4f, 0x8}, 0x7}, {{&(0x7f0000002e40)=@generic, 0x80, &(0x7f0000002fc0)=[{&(0x7f0000002ec0)=""/12, 0xc}, {&(0x7f0000002f00)=""/39, 0x27}, {&(0x7f0000002f40)=""/35, 0x23}, {&(0x7f0000003240)=""/47, 0x2f}], 0x4, 0x0, 0x0, 0x2}, 0x100000001}], 0x7, 0x20, &(0x7f00000031c0)={0x77359400}) lstat(&(0x7f0000002600)='./file0\x00', &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f0000002f80)=@req) sendmsg$nl_xfrm(r2, &(0x7f0000002700)={&(0x7f00000025c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000026c0)={&(0x7f0000003480)=@delpolicy={0x12a0, 0x14, 0x10a, 0x70bd2c, 0x25dfdbfc, {{@in6=@remote, @in6=@mcast2, 0x4e22, 0x1, 0x4e20, 0x0, 0x0, 0x20, 0x80, 0x3f, r1, r3}, 0x6e6bb8, 0x2}, [@algo_auth={0x10c, 0x1, {{'sha3-512-generic\x00'}, 0x608, "151ed9fe6dcfc00648f6eb2c0517635074f513246b9d81ee2bdc78e0483d2a6ca828a64464cfdd5bb15a80f700efaa62db963323da3a58b1bde73a051915b946e23c3803d06720d502b8d6f791441ce70eafbe2b6e38d62e59b32d7a163c485a71b7c07be091764a0b48bef7f987a4c97fe26188042acb1f7eb3ca5095574ac8018655e1abc5f042fdc4e53ba6b2a01f07dbdc01ab28e4c245c651165f50930e088c6e449bafb01233bfecce9a58b615e7d0e7620f036bcbdafdfaea884c6c4f0b"}}, @replay_val={0x10, 0xa, {0x70bd2d, 0x70bd28, 0x20}}, @encap={0x1c, 0x4, {0x3, 0x4e22, 0x4e21, @in=@multicast2}}, @algo_auth_trunc={0x104c, 0x14, {{'sha1-avx\x00'}, 0x8000, 0xe0, "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"}}, @migrate={0x5c, 0x11, [{@in=@multicast2, @in=@broadcast, 0xff, 0x1, 0x0, 0x0, 0xa}, {@in6=@loopback, @in6=@mcast2, 0x3c, 0x1, 0x0, 0x3502, 0xa, 0xa}]}, @proto={0x8, 0x19, 0x3f}, @etimer_thresh={0x8, 0xc, 0x266f}, @offload={0xc, 0x1c, {0x0, 0x1}}, @sec_ctx={0x54, 0x8, {0x4e, 0x8, 0x1, 0x9, 0x46, "58b657e3bbb26bad9491b4a587fdc9ef146e308e3f633f453da0c0f5b8d9f43a4c94589f923da924c22da1ceab45070b729f48a9eb274afa6fde0b15fe763678eb5dbc3590fd"}}]}, 0x12a0}, 0x1, 0x0, 0x0, 0x10}, 0x40090) getsockopt$sock_buf(r0, 0x1, 0x12, &(0x7f00000001c0)=""/152, &(0x7f0000000000)=0xfd45) r4 = syz_open_dev$amidi(&(0x7f0000002d80)='/dev/amidi#\x00', 0x3, 0x800) faccessat(r4, &(0x7f0000003200)='./file0\x00', 0x141, 0xe00) 07:12:43 executing program 0: r0 = memfd_create(&(0x7f0000000300), 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x200000000011, r0, 0x0) seccomp(0x1, 0x0, &(0x7f0000001980)) [ 300.658937] ip (7098) used greatest stack depth: 53216 bytes left 07:12:44 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x8000, 0x0) ioctl$VIDIOC_DBG_G_CHIP_INFO(r1, 0xc0c85666, &(0x7f0000000480)={{0x5, @addr=0x101}, "ee36a92a6ac1d88e85d406d2dbdf5c8d78ea33b823a6edbeaff71fbeb29a9075", 0x2}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) setrlimit(0x7, &(0x7f0000000080)={0x91, 0x3f}) ioctl$int_in(r0, 0x5421, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000140)={0x0, 0x7}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f00000001c0)={r2, 0xfffffffffffffffb}, &(0x7f0000000240)=0x8) read$FUSE(r0, &(0x7f0000002000), 0x4fa) 07:12:44 executing program 0: process_vm_writev(0x0, &(0x7f0000002800), 0x0, &(0x7f0000000780)=[{&(0x7f00000028c0)=""/224, 0xe0}], 0x1, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x181800, 0x0) ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f00000001c0)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000b00)=[{&(0x7f0000000a40)=""/178, 0xb2}], 0x1, &(0x7f0000000700)=[{&(0x7f0000000c00)=""/251, 0xfb}], 0x1, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000007c0)=@hci, 0x80, &(0x7f0000000280), 0x115, &(0x7f00000024c0)=""/129, 0x2eb}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) [ 301.612117] 8021q: adding VLAN 0 to HW filter on device team0 07:12:45 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='sessionid\x00') exit(0xcd) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000080)={0xb, 0x0, 0x2, {0x4d, 0x1, 0x1}}) sendfile(r0, r0, &(0x7f0000000040), 0x40) [ 303.838629] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.845268] bridge0: port 2(bridge_slave_1) entered forwarding state [ 303.852243] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.858979] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.867868] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 304.813551] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 305.471200] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.478000] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.486869] device bridge_slave_0 entered promiscuous mode [ 305.889884] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.896699] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.905580] device bridge_slave_1 entered promiscuous mode [ 306.287991] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 306.680569] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 306.870225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 307.803379] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 308.198124] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 308.275848] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 308.612225] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 308.619694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 308.972288] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 308.979492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 309.647482] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 309.653985] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 309.661765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 310.096110] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 310.104465] team0: Port device team_slave_0 added [ 310.428708] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 310.437060] team0: Port device team_slave_1 added 07:12:53 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x25}}, &(0x7f0000000000)="504c20004cf7d12af11ce92537b5e3191e66de5d4ec18e4c2df01484a86d77842f624946eae310794c8c96ff1466232e25951139bda5d2990e523f8ec3080ffc1224d8dc4c84a9c8e8ab31576806715523fa749e8615c61049b8b1be6aa7740702cc5add", 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000200)) [ 310.708155] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 310.715457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 310.724565] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 310.920668] 8021q: adding VLAN 0 to HW filter on device team0 [ 311.087889] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 311.095635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 311.104535] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 311.360031] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 311.367991] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 311.377407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 311.621105] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 311.629043] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 311.638160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 314.115099] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.122084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.129229] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.135887] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.144708] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 314.154112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 315.962190] 8021q: adding VLAN 0 to HW filter on device bond0 07:12:59 executing program 2: r0 = getpgrp(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000000280)={0xfffffffffffffffe}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0x7, &(0x7f00000000c0)) r2 = signalfd4(0xffffffffffffffff, &(0x7f00000001c0), 0x8, 0x0) read(r2, &(0x7f0000000000)=""/128, 0x20000080) signalfd4(r2, &(0x7f0000000140)={0x4000000020064}, 0x8, 0x0) [ 316.787602] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 317.406551] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 317.413076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 317.420953] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 317.974003] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.007479] 8021q: adding VLAN 0 to HW filter on device bond0 07:13:04 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x5, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read$FUSE(r0, &(0x7f0000000600), 0x1000) [ 321.593318] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 321.942991] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 321.949233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 321.957555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 322.251222] 8021q: adding VLAN 0 to HW filter on device team0 07:13:07 executing program 4: ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000240)=ANY=[]) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) sched_setaffinity(0x0, 0xffffffffffffffd9, &(0x7f0000000280)) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000380)={@dev}, &(0x7f0000000540)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001700)={{{@in=@dev, @in=@local}}, {{@in=@rand_addr}, 0x0, @in=@multicast1}}, &(0x7f0000000640)=0xe8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={"0000000000000000000000000200", 0x5002}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xfffffffffffffffe}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000340)=0x1, 0x4) write$P9_RXATTRCREATE(r3, &(0x7f0000000140)={0x7, 0x21, 0x2}, 0x7) write$P9_RSETATTR(r3, &(0x7f0000000040)={0x7}, 0x7) sendfile(r0, r3, &(0x7f0000d83ff8), 0x800000000024) creat(&(0x7f0000000000)='./bus\x00', 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)) 07:13:07 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x101002) write$binfmt_elf64(r0, &(0x7f0000000940)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x10000}]}, 0x78) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2000, 0x0) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f0000000040), 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xfe3000)=nil, 0xfe3000, 0xffffffffffffffff, 0x80000000000032, 0xffffffffffffffff, 0x0) 07:13:07 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x80100, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x7, 0x4, 0x6}) r1 = dup2(r0, r0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000140)) ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f0000000180)={0x7, 0x7}) ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f00000001c0)=0x20) getsockopt$inet_buf(r1, 0x0, 0x3f, &(0x7f0000000200)=""/4096, &(0x7f0000001200)=0x1000) pwritev(r1, &(0x7f00000016c0)=[{&(0x7f0000001240)="09e3131b23cb149499fb00e7dff849da78a4d4030d430324785fc7cde03d2f272fdcf57611f88f8e7a54c8a6e2afd968", 0x30}, {&(0x7f0000001280)="f4b8c48baa61e72d774757149b5a1faae20f7c28b17fc5508ff36476c2fccad18f639347ce4ce48b9d840d9d0fd613c8910e376bbb01fc64fac48c2367d9bb4609bbb632d062e1060b82158d3c9b5f6eaec5ec5a6fb72f747f06389106af90cb0cb2b6009c96e7bb494b79f336452140de", 0x71}, {&(0x7f0000001300)="aa0fca3c7c0f51e6dc11b374377d6c0ff93c4883806d3a1c2f4e0f935fc9b23b46e1a6b77581987493fe351e80864525c92e506f0e374816a91bd03eec6a7fd9171ef3030a5ff64eae93c7dd718d5d0c5fd1bad7d226d7dcb68dee6321f8ad74e1555bfa9d28fef4d35c0fac88f2d08971794ef49983b98ee3dd339669d69cd46eaa7b6f2ba839fd5b8da91ffe0df2fdf17018639e2db78367ad07db9b7718d3b1239618efdcd39500981283b8f99ac90168e771fe6d720bf48e6f890c16cce485ac7818a9a5b90677fff062655951b1c36c8f2dfed1d573857028951dcdf07eaf4e", 0xe2}, {&(0x7f0000001400)="e0ca7e6b040d21d1afc25cc8d001be82d298556ff6ba9a14d47ae28af0ba0b385c2d95d0ed8ca7a861beddb70a0da6fad320620caef70e42243bb22c177f45758998697edadb8095b21374b8e858339f51f78d1e5d795321ae352c044e176e707e0a78e1d342fedf0d62e0484e34f71a93c541cf345d8f1eba19d9e5936000ef247f8c0abe76aed1bd00ef7c119a571076d42ddb32a2687a77ee4aae633ef7681a143faf74358a77844a202a0830a6478e00", 0xb2}, {&(0x7f00000014c0)="3376602aac9750ee4046e13a90b2d0904ce17181c8b8d7d50fbba41307049fe4ab2da7830d2e62fc69cf51f6b74d83986373975019f15ce47346f9e7d5e03654f566735ee9e02c18353610aeab3d2510e11d4ee2599bdf977b3ce00af466d9", 0x5f}, {&(0x7f0000001540)="304ed773db8d2191b2e7495a5239c74afea81b482f6e7b588f46f93d6be3b51eb6dfcd79dfb46e076a87f7873bc7f401c9f9560c140e1e8ac88b17d504de488946810d822ce85dd73ad7e3fd3dae288506d8afd1c3eb0a61b9e97240be021421143ef00df0128bb1076b79a25283a9950c8ac913152d16e16e2940aeda1a51d57784f947d022c810d8a9eb682b115123efbf9cb778ffd34c2eb030bd5b7fb321f5f65e613f1e0b3a053eddaf32fc3da503bd360b680bc5126db917473fbff36eda1ef6aa0d33cface4a208db60ae903320780d7fa8b0f003530a849a2bb62fcc4a3324879bd8549fee33e4306edf73f3", 0xf0}, {&(0x7f0000001640)="da51457cd463c83112eb2ceb7d9467b60bbe76b06a19b4a0f5feeb0f66e9cb17d8dcc3ff20fe24f23de9c1c3d460ca8ca0f5a78725fd494d703d5c461b77089190e66fe26dd940fa7cf7645d12ceba77065ad9a7d06a920a83d911", 0x5b}], 0x7, 0x0) write$binfmt_script(r1, &(0x7f0000001740)={'#! ', './file0', [{0x20, '/dev/ion\x00'}, {0x20, '/dev/ion\x00'}, {0x20, '/dev/ion\x00'}, {0x20, '(+-$'}], 0xa, "858527cd86514a91ebb9483df62b94738c6b0792bf89b59be6888bf9b23029566861d0360ac5a46472d224eca106906e43cb382911919d7d922f58d7a6b0731626cecb7fade3908b5c5f1d971c9ec90cb437ec452205b56ec52bda0e72bca88be023b9d0e40e03170baa0ec3bbe3e6a8581d674a340f6041a65195534f90cc7e9b2deed11990a256d31e20fdacc8928b5d0ff47a02a2370e5cff5d1f8ee0ce31547e20b83fd9a919b7eaf7fa79d545935116b57276d54d35"}, 0xe6) ioctl$KVM_GET_SREGS(r1, 0x8138ae83, &(0x7f0000001840)) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) write$apparmor_current(r1, &(0x7f0000001980)=@profile={'stack ', "6367726f75708c294076626f786e65743000"}, 0x18) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/null\x00', 0x22000, 0x0) open_by_handle_at(r1, &(0x7f0000001a00)={0xc4, 0x4, "4246e575c9eaa83ed68789b624ea26e369609b4f4cfc5c8505230c7caf094d464b5ae510545105491f3b1783dc979dd13fe167950d259a8d01903f45cd73b8ee2a6b4a81f6af8c10f2272c3d79e714a5be92d11f65c8b93b251e91486ed1308d2597e72931ac49b5aa7ade789b203c568be5492522df9485b863890f21fcf55f2607ca47c63cbbb633d7094d25a5b3c282369daff6926e9c0784da0b9d0315cd485991542c65b88ea5f816263bbac296a5e87bf5072dc2b07a16f786"}, 0x2) ioctl$RTC_WIE_ON(r1, 0x700f) r3 = syz_open_dev$mice(&(0x7f0000001b00)='/dev/input/mice\x00', 0x0, 0x2000) r4 = semget(0x1, 0x0, 0x200) semctl$SEM_INFO(r4, 0x7, 0x13, &(0x7f0000001b40)=""/214) ioctl$VIDIOC_S_AUDIO(r2, 0x40345622, &(0x7f0000001c40)={0x3f, "3314cd4d412e3b7b54f7ce1eefeafb7fe9587c6295be7eba3117415091a21171", 0x1, 0x1}) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000001c80)=r2) inotify_add_watch(r1, &(0x7f0000001cc0)='./file0\x00', 0x100) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000001d00)=0x7, 0x2) ioctl$VIDIOC_OVERLAY(r1, 0x4004560e, &(0x7f0000001d40)=0x101) unlinkat(r3, &(0x7f0000001d80)='./file0\x00', 0x200) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000002f40)={{{@in6=@mcast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@multicast1}}, &(0x7f0000003040)=0xe8) setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000003080)={r5, @dev={0xac, 0x14, 0x14, 0x1d}, @multicast2}, 0xc) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f00000030c0)={0x35b40000, 0x3, 0x0, 0x3f2, 0x400, 0x9}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000003140)={0x16000, &(0x7f0000003100), 0x1, r1}) r6 = openat$mixer(0xffffffffffffff9c, &(0x7f0000003180)='/dev/mixer\x00', 0x214002, 0x0) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f00000031c0)={"e7d5dae1f5f9be9d10b3ac74f031076576aab61cce5a9c277fb170a7fa59ec9408277a4151ea894d12300e62e1278580f0564d426bb3b4864033f5e9c604153daacd538966fecdd6139a35a091ec257eae4810fab5ef64f7030bdc663494a78b9b1ffd90b2ea2303cb95ce26f5691b06671c5eef357625a660f859995d08d5f516b9a4a97e6872e0097b2d5e0134d2d5cbc51b7a226675ddbe51253d891a735c02c427d1f43d0fe22ca3531ebf2be90fb93811d1a8d5bb80da3f2154807c8597fb16a5f6e668fc498db11aadf2c4606a440d40d00f2e6f0fbdaa28b3734b83227fa4481b0b73082e2cc54f4168891f6183139d9984833b927287992539ef13d04643504c7b5ffbc45d159a464b0daa997e2105d258982384e5f60f47c48d5e0c7ff738ff1e271b762f5c6561aa92bd24bb3f47507d8cedae3d1ceb5cfa4b73fdd80669f8767f8002c76e6f713ebdd3342d95c8d272be7a306cd119efd1a92d7510505a81107481945bd7dbb28d96db158b7c872a70e45661f6a9f9d51f9cd7c65e8132ba05e4a0d2c0ebc67a9f13b172e08ea2e914e0bcb34db5df9af7c49fd30150b22136db94fa306e60d0be314c32be43291598710381a3d6e9b3ec7f47ab88981936f2051778c2f0c0938ca4535dd41086e8ce3970e636a7e5dac6d965ba3b3c39f7b9dbfb9809bcba5b122a8eb5773133bd72b27a8df00216a9faea1dc08c2b8bc60a4fb200d54e6cf66d7a5f442c1807d9b33f354955fbe562b1562ab00f066af886b221f6a34a45b517248accb7eb0c1999b04c5cec6627eb6b3ece7730ff9764d381597c313c1a20ad33ecced22f7a9b318a627fa587be642d6d5eba090776becb315b8ae418460920d90fa41fc66d28dcac9b0145cb7ed60c7a2ae43c05bed915fa326892040cdbfca51cc71cacc49d6eba6be006b6d48c7fb5515b40341808e7e2b7cf4e835571861c434d1c114b67119ad297050dd4946566bce851bcd4dc00bb74ce1771fdde1c0885aec8e6874eac18ab78701b891e9c6199691679b9055040197a626306e70e98af318057b75b5e2fb9bae92ff94375868691799f0227fb8195a6314421d5d4e3f9d7f99dfd339cc6d08c3ff7a3ed72f3125b5ad20fee42af89c2fa6fa8d72611c06ebd4fd77927f6c1dea0cbfdb9019b470a710007188da1de79213ba78f758b9f518bcd991be70e13cb04cb615410c0043312227bf6fa2d4ebf953fce0a71d706dcdc0fd9cf56efb54181f4600a977ee58e9b57c68b4ff822cb5daa2d2968ca9ee52384553b6503a970847e61062670a2f5ce85a43a1ceebc334f7527134a52e97ef009068bc7621323a16872271ab391539e76935bdc922e2d6fe1c0622a407b4864d9e744c0561d6b7711471c7bf3cee430faa08d334dea6c63369629314dd47af8b963cee50cf4672f41fdfdabae6cb0"}) 07:13:07 executing program 2: r0 = socket$inet6(0xa, 0x80002, 0x88) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f0000000000), 0x38a, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) 07:13:07 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x11, r3, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f000000a000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000080)="f30f5ac36667660fecf066b95803000066b82c02000066ba000000000f300f01dfe1fb66b8ed0f300e0f23c80f21f86635040080000f23f80f300f01cb66b9030300000f32da80f60e", 0x49}], 0x1, 0x0, &(0x7f0000000100), 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000001040)=ANY=[@ANYBLOB="06000000000000000000000000000000000000000000000000000000000000000000000000000000001e0000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d84c8f7245f0fb7b00000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000004916f6c8bd7ec16d000000000000000000000000000000040000000000000007"]) ioctl$KVM_RUN(r3, 0xae80, 0x0) 07:13:07 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x5, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read$FUSE(r0, &(0x7f0000000600), 0x1000) [ 324.447181] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. 07:13:07 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x79330f12804dd5e0) [ 324.601872] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 324.608759] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 324.774567] *** Guest State *** [ 324.778044] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 324.787538] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 324.796539] CR3 = 0x0000000000000000 [ 324.800308] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 324.806485] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 324.812631] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 324.819368] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 324.827645] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 324.835811] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 324.844019] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 324.852068] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 324.860291] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 324.868452] GDTR: limit=0x00000000, base=0x0000000000000000 [ 324.876701] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 324.884842] IDTR: limit=0x00000000, base=0x0000000000000000 [ 324.893042] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 324.901070] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 324.907685] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 324.915305] Interruptibility = 00000000 ActivityState = 00000000 [ 324.921592] *** Host State *** 07:13:07 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) [ 324.925012] RIP = 0xffffffff812c8203 RSP = 0xffff8801ab2af3c8 [ 324.931066] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 324.937649] FSBase=00007f337caf4700 GSBase=ffff88021fc00000 TRBase=fffffe0000003000 [ 324.945623] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 324.951579] CR0=0000000080050033 CR3=0000000185fac000 CR4=00000000001426f0 [ 324.958820] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff8ae01260 [ 324.965660] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 324.971760] *** Control State *** [ 324.975431] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 324.982158] EntryControls=0000d1ff ExitControls=002fefff [ 324.987829] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 324.994923] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 325.001644] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 325.008421] reason=80000021 qualification=0000000000000000 [ 325.014898] IDTVectoring: info=00000000 errcode=00000000 [ 325.020398] TSC Offset = 0xffffff4d19980abb 07:13:08 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)="68756765746c04000000000000006167655f69725f5aa2f4657300", 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)="6367706f75702e6576656e7473003ea55e10a8299d73ee6d72da86f4dbed2f19b52a48a90e618729894c918a4985eb8f6f2c31681f988720c1753c87f13d0361b825fe2f4ac4ad9edbd55eebfe0cee240ff894a14ae0ebe6c841b49bedc14402a1528815b5af7235f0efcee6b1cba8728161d61a1ab8a917c2b5", 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000380), 0x10076) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000001300)={0x2880008, r0, 0x8000a0ffffffff}) [ 325.024941] EPT pointer = 0x00000001338d201e 07:13:08 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x1e, 0x4, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f0000000000), 0xc, &(0x7f000000d379)={&(0x7f0000000200)={0x18, 0x14, 0x301, 0x0, 0x0, {0x1e}, [@generic="c1"]}, 0x18}}, 0x0) [ 325.182169] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 07:13:08 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000040)={'stack ', '&&\x00'}, 0x1de) [ 325.677121] ================================================================== [ 325.684571] BUG: KMSAN: uninit-value in aa_fqlookupn_profile+0x336/0x730 [ 325.691447] CPU: 0 PID: 7758 Comm: syz-executor1 Not tainted 4.19.0+ #81 [ 325.698309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 325.707690] Call Trace: [ 325.710327] dump_stack+0x32d/0x480 [ 325.713989] ? aa_fqlookupn_profile+0x336/0x730 [ 325.718712] kmsan_report+0x19f/0x300 [ 325.722559] __msan_warning+0x76/0xd0 [ 325.726413] aa_fqlookupn_profile+0x336/0x730 [ 325.730958] ? __msan_warning+0xb1/0xd0 [ 325.734975] aa_label_strn_parse+0x17bb/0x1e70 [ 325.739636] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 325.745035] ? refcount_inc_not_zero_checked+0x5d7/0x6f0 [ 325.750529] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 325.755936] aa_label_parse+0x11f/0x130 [ 325.759954] aa_change_profile+0x959/0x3da0 [ 325.764319] ? vfs_write+0x4a0/0x8f0 [ 325.768078] ? task_kmsan_context_state+0x51/0x90 [ 325.772956] ? __msan_get_context_state+0x9/0x30 [ 325.777748] ? INIT_INT+0xc/0x30 [ 325.781187] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 325.786674] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 325.792061] ? strcmp+0x83/0x160 [ 325.795469] apparmor_setprocattr+0xba4/0x13a0 [ 325.800126] ? apparmor_getprocattr+0x660/0x660 [ 325.804829] security_setprocattr+0x139/0x210 [ 325.809379] proc_pid_attr_write+0x407/0x4f0 [ 325.813834] ? proc_pid_attr_read+0x530/0x530 [ 325.818365] __vfs_write+0x1f4/0xb80 [ 325.822141] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 325.827542] ? __sb_start_write+0x119/0x240 [ 325.831905] vfs_write+0x4a3/0x8f0 [ 325.832200] IPVS: ftp: loaded support on port[0] = 21 [ 325.835504] __se_sys_write+0x17a/0x370 [ 325.835561] __x64_sys_write+0x4a/0x70 [ 325.848636] do_syscall_64+0xcf/0x110 [ 325.852470] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 325.857686] RIP: 0033:0x457569 [ 325.860902] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 325.879825] RSP: 002b:00007f337cb14c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 325.887568] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457569 [ 325.894864] RDX: 00000000000001de RSI: 0000000020000040 RDI: 0000000000000005 [ 325.902153] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 325.909445] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f337cb156d4 [ 325.916735] R13: 00000000004c5772 R14: 00000000004d9328 R15: 00000000ffffffff [ 325.924039] [ 325.925683] Local variable description: ----ns_name@aa_fqlookupn_profile [ 325.932530] Variable was created at: [ 325.936289] aa_fqlookupn_profile+0x79/0x730 [ 325.940726] aa_label_strn_parse+0x17bb/0x1e70 [ 325.945314] ================================================================== [ 325.952683] Disabling lock debugging due to kernel taint [ 325.958143] Kernel panic - not syncing: panic_on_warn set ... [ 325.958143] [ 325.965540] CPU: 0 PID: 7758 Comm: syz-executor1 Tainted: G B 4.19.0+ #81 [ 325.973780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 325.983148] Call Trace: [ 325.985765] dump_stack+0x32d/0x480 [ 325.989440] panic+0x57e/0xb28 [ 325.992703] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 325.998196] kmsan_report+0x300/0x300 [ 326.002037] __msan_warning+0x76/0xd0 [ 326.005879] aa_fqlookupn_profile+0x336/0x730 [ 326.010416] ? __msan_warning+0xb1/0xd0 [ 326.014435] aa_label_strn_parse+0x17bb/0x1e70 [ 326.019090] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 326.024486] ? refcount_inc_not_zero_checked+0x5d7/0x6f0 [ 326.029979] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 326.035385] aa_label_parse+0x11f/0x130 [ 326.039403] aa_change_profile+0x959/0x3da0 [ 326.043754] ? vfs_write+0x4a0/0x8f0 [ 326.047509] ? task_kmsan_context_state+0x51/0x90 [ 326.052385] ? __msan_get_context_state+0x9/0x30 [ 326.057165] ? INIT_INT+0xc/0x30 [ 326.060593] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 326.066085] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 326.071474] ? strcmp+0x83/0x160 [ 326.074874] apparmor_setprocattr+0xba4/0x13a0 [ 326.079515] ? apparmor_getprocattr+0x660/0x660 [ 326.084209] security_setprocattr+0x139/0x210 [ 326.088750] proc_pid_attr_write+0x407/0x4f0 [ 326.093203] ? proc_pid_attr_read+0x530/0x530 [ 326.097720] __vfs_write+0x1f4/0xb80 [ 326.101477] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 326.106892] ? __sb_start_write+0x119/0x240 [ 326.111297] vfs_write+0x4a3/0x8f0 [ 326.114887] __se_sys_write+0x17a/0x370 [ 326.119422] __x64_sys_write+0x4a/0x70 [ 326.123342] do_syscall_64+0xcf/0x110 [ 326.127180] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 326.132392] RIP: 0033:0x457569 [ 326.135610] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 326.154531] RSP: 002b:00007f337cb14c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 326.162283] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457569 [ 326.169574] RDX: 00000000000001de RSI: 0000000020000040 RDI: 0000000000000005 [ 326.176862] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 326.184151] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f337cb156d4 [ 326.191438] R13: 00000000004c5772 R14: 00000000004d9328 R15: 00000000ffffffff [ 326.199666] Kernel Offset: disabled [ 326.203304] Rebooting in 86400 seconds..