[?25l[?1c7[ ok 8[?25h[?0c. [ 43.135570] kauditd_printk_skb: 3 callbacks suppressed [ 43.135595] audit: type=1800 audit(1538774910.186:29): pid=5740 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 43.160387] audit: type=1800 audit(1538774910.186:30): pid=5740 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 47.658712] random: sshd: uninitialized urandom read (32 bytes read) [ 48.122379] random: sshd: uninitialized urandom read (32 bytes read) [ 49.810685] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.125' (ECDSA) to the list of known hosts. [ 55.439352] random: sshd: uninitialized urandom read (32 bytes read) 2018/10/05 21:28:44 fuzzer started [ 59.098186] random: cc1: uninitialized urandom read (8 bytes read) 2018/10/05 21:28:48 dialing manager at 10.128.0.26:36867 2018/10/05 21:28:48 syscalls: 1 2018/10/05 21:28:48 code coverage: enabled 2018/10/05 21:28:48 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/10/05 21:28:48 setuid sandbox: enabled 2018/10/05 21:28:48 namespace sandbox: enabled 2018/10/05 21:28:48 Android sandbox: /sys/fs/selinux/policy does not exist 2018/10/05 21:28:48 fault injection: enabled 2018/10/05 21:28:48 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/10/05 21:28:48 net packed injection: enabled 2018/10/05 21:28:48 net device setup: enabled [ 63.077180] random: crng init done 21:30:14 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x0, 0x0, &(0x7f0000000080)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x18, 0x0, &(0x7f00000004c0)=[@clear_death={0x400c630f, 0x0, 0x200000000000000}, @register_looper, @enter_looper], 0x0, 0x0, &(0x7f00000005c0)}) [ 148.382003] IPVS: ftp: loaded support on port[0] = 21 [ 150.023979] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.030399] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.038367] device bridge_slave_0 entered promiscuous mode [ 150.148976] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.155568] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.163398] device bridge_slave_1 entered promiscuous mode [ 150.261879] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 150.359741] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 150.660277] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 150.761896] bond0: Enslaving bond_slave_1 as an active interface with an up link 21:30:17 executing program 1: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000000)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000380)={0x0, 0x2000000229, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) [ 150.862540] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 150.869635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 151.018605] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 151.025586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 151.362747] IPVS: ftp: loaded support on port[0] = 21 [ 151.480106] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 151.487867] team0: Port device team_slave_0 added [ 151.681309] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 151.688960] team0: Port device team_slave_1 added [ 151.818059] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 151.825096] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 151.833596] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 152.017414] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 152.024476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 152.032925] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 152.225224] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 152.232736] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 152.241143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 152.358542] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 152.366229] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 152.374720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 154.110623] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.117165] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.124956] device bridge_slave_0 entered promiscuous mode [ 154.281475] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.287994] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.295808] device bridge_slave_1 entered promiscuous mode [ 154.337717] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.344282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.351055] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.357692] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.365865] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 154.450823] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 154.590911] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 154.663241] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 21:30:21 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000080), 0xfffffe73, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) [ 155.269550] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 155.514845] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 155.557882] IPVS: ftp: loaded support on port[0] = 21 [ 155.752486] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 155.759411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 155.935742] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 155.942859] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 156.519431] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 156.527244] team0: Port device team_slave_0 added [ 156.731662] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 156.739148] team0: Port device team_slave_1 added [ 156.921989] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 156.929110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 156.937401] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 157.107797] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 157.114933] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 157.123325] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 157.251634] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 157.259066] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 157.267563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 157.458797] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 157.466268] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 157.474771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 158.813248] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.819767] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.827705] device bridge_slave_0 entered promiscuous mode [ 159.050900] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.057472] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.065357] device bridge_slave_1 entered promiscuous mode [ 159.241041] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 159.458942] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 159.972125] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 159.980582] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.987055] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.993951] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.000357] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.008422] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 160.159585] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 160.389509] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 160.397697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 160.792989] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 21:30:27 executing program 3: r0 = creat(&(0x7f0000000140)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x101002, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000003d40)=[{{&(0x7f0000002f80)=@un=@abs, 0x80, &(0x7f0000003280), 0x0, &(0x7f0000005040)}}], 0x1, 0x0) sendfile(r1, r3, &(0x7f0000d83ff8), 0x8000fffffffe) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="310000000600000000000000000000000000f8ff0000000000000000000000000800000000000000736b62656469740000"], 0x31) [ 161.320840] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 161.328779] team0: Port device team_slave_0 added [ 161.620779] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 161.628572] team0: Port device team_slave_1 added [ 161.733786] IPVS: ftp: loaded support on port[0] = 21 [ 161.890661] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 161.901300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 161.909749] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 162.185094] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 162.192328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 162.200626] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 162.410257] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 162.417770] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 162.426535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 162.688420] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 162.696049] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 162.704573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 163.312371] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.272319] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 165.111901] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 165.118182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 165.125784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 165.666734] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.673215] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.679978] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.686458] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.694648] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 165.713338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 165.944835] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.951368] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.959293] device bridge_slave_0 entered promiscuous mode [ 166.227197] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.233713] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.241473] device bridge_slave_1 entered promiscuous mode [ 166.257348] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.528100] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 166.768732] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 167.503346] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 167.759661] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 168.029678] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 168.036771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 168.311464] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 168.318558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 21:30:35 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="153f6234488dd25d766070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a60000000a84306910000005f00090035000c00060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) [ 169.156510] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 169.164336] team0: Port device team_slave_0 added [ 169.400820] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 169.408663] team0: Port device team_slave_1 added [ 169.733781] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 169.752313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 169.760771] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 169.781967] IPVS: ftp: loaded support on port[0] = 21 [ 170.043101] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 170.050070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 170.058455] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 170.310192] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 170.317708] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 170.326281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 170.624629] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 170.632187] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 170.640681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 170.674779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.866367] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 172.873997] binder: 6612:6615 Acquire 1 refcount change on invalid ref 0 ret -22 [ 172.881943] binder: 6612:6615 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 172.933175] binder: 6612:6617 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 172.940051] binder: 6612:6617 ERROR: BC_REGISTER_LOOPER called without request [ 172.947643] binder: 6612:6617 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 173.005271] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 173.011769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 173.019191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 173.025289] binder: 6612:6617 Acquire 1 refcount change on invalid ref 0 ret -22 [ 173.033404] binder: 6612:6617 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 21:30:40 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x0, 0x0, &(0x7f0000000080)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x18, 0x0, &(0x7f00000004c0)=[@clear_death={0x400c630f, 0x0, 0x200000000000000}, @register_looper, @enter_looper], 0x0, 0x0, &(0x7f00000005c0)}) [ 173.340337] binder: 6631:6633 Acquire 1 refcount change on invalid ref 0 ret -22 [ 173.348206] binder: 6631:6633 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 173.383078] binder: 6631:6633 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 173.390041] binder: 6631:6633 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER [ 173.398098] binder: 6631:6633 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER 21:30:40 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40044590, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)}) 21:30:41 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) clock_settime(0x2, &(0x7f0000000000)) getsockopt$sock_buf(r0, 0x1, 0x38, &(0x7f0000000040)=""/215, &(0x7f0000000180)=0xd7) [ 174.182240] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.286528] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.293138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.299924] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.306418] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.314380] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready 21:30:41 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f00000018c0)=[{&(0x7f0000000600)=@in6, 0x1c, &(0x7f0000001780), 0x0, &(0x7f00000017c0)=ANY=[@ANYBLOB="18000000000000008400000007000000ac1414000000000000840000000200000000000480000000000000000000000000000000", @ANYRES32=0x0], 0x38}], 0x1, 0x0) 21:30:41 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f0000de2ff4), 0xc, &(0x7f0000000100)={&(0x7f0000000000)={0xffffffffffffff75, 0x4000000003001, 0x8, 0xffffffffffffffff, 0x0, 0x0, {}, [@typed={0x0, 0x34, @binary="01f19a73"}, @typed={0x0, 0x1e, @u32=0xc0}, @generic="1bc5dcbe504df7bc19c7b83df3851c10a5079c0172d324fb81be6a83fcd065e7e6f9283e3c96d2a83bc63d630cff22c55b94914dcdeba8479e6c4589a68a4b2223f914cd546d1e42726581b4887954051eed829c65b6ee781c7246c3335d3bd187b323f5f6b41c64"]}, 0x293}}, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x40, 0x0) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f00000001c0)={{0xf001, 0x2, 0x3, 0x40, 0x8001, 0x663ce804, 0x8000, 0x9af, 0xf575, 0x2, 0x8001, 0x80000000}, {0x0, 0x5, 0x10, 0x7ff, 0xbf26, 0x8, 0x401, 0x4, 0x80000000, 0x5, 0x8000, 0x30c1}, {0x0, 0x107000, 0xb, 0x4, 0x5, 0x0, 0x2, 0xae, 0x3ff, 0xfff, 0x81, 0x4d}, {0x10f001, 0x0, 0xd, 0x20, 0x80000000, 0xffff, 0x1c, 0x1, 0x400, 0x0, 0x100000001, 0x3}, {0x101000, 0x2000, 0x0, 0x5, 0x7, 0x0, 0x18b8, 0x2, 0x4, 0x4, 0x7, 0xf79d}, {0x10001, 0x2, 0x0, 0x8, 0x40, 0xfffffffffffffff7, 0x10001, 0x1de9, 0x0, 0x9, 0x8, 0x4}, {0x3004, 0x7000, 0xa, 0x0, 0x7, 0x0, 0x8, 0x4, 0x3, 0x0, 0xfffffffffffffffb}, {0x1000, 0xf004, 0xf, 0x401, 0x2, 0x3ff, 0x0, 0x6, 0x2, 0x1f, 0x20, 0x7}, {0xf002, 0x100001}, {0x3000, 0x6000}, 0x40050006, 0x0, 0x10f000, 0x80, 0x9, 0x8000, 0x0, [0x421d, 0x7, 0x5, 0xfa]}) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000180)=0x4, 0x4) r2 = getpgrp(0xffffffffffffffff) ptrace$setsig(0x4203, r2, 0x0, &(0x7f00000000c0)={0x21, 0x80, 0x8, 0x3ff}) [ 174.889364] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.896018] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.904324] device bridge_slave_0 entered promiscuous mode 21:30:42 executing program 0: unshare(0x20040000) io_setup(0x0, &(0x7f0000000000)) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x2, &(0x7f0000fff000/0x1000)=nil) clone(0x68002000, &(0x7f00000002c0), &(0x7f0000000200), &(0x7f0000000280), &(0x7f00000003c0)) [ 175.061865] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 175.232302] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.238803] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.246686] device bridge_slave_1 entered promiscuous mode [ 175.489545] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready 21:30:42 executing program 0: unshare(0x20040000) io_setup(0x0, &(0x7f0000000000)) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x2, &(0x7f0000fff000/0x1000)=nil) clone(0x68002000, &(0x7f00000002c0), &(0x7f0000000200), &(0x7f0000000280), &(0x7f00000003c0)) [ 175.872032] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready 21:30:43 executing program 0: process_vm_writev(0x0, &(0x7f0000002800), 0x0, &(0x7f0000000780)=[{&(0x7f00000028c0)=""/224, 0xe0}], 0x1, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x40, 0x0) setns(r0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000b00)=[{&(0x7f0000000a40)=""/178, 0xb2}], 0x1, &(0x7f0000000700)=[{&(0x7f0000000c00)=""/251, 0xfb}], 0x1, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0xa3}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'syzkaller0\x00', 0x2}, 0x18) [ 176.776178] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 177.049424] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 177.271749] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 177.278707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 177.490359] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 177.497393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 177.599070] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.198816] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 178.206479] team0: Port device team_slave_0 added [ 178.256054] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 178.442675] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 178.450425] team0: Port device team_slave_1 added [ 178.665208] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 178.672410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 178.680733] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 178.938222] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 178.944664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 178.952200] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 178.960277] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 178.967659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 178.975988] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 179.148193] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 179.155751] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 179.164297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 179.358830] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 179.366468] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 179.375086] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 179.852511] 8021q: adding VLAN 0 to HW filter on device team0 21:30:47 executing program 1: [ 181.294027] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.300479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.307351] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.313802] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.321501] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 181.328063] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 183.011452] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.547753] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 183.676404] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 184.001462] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 184.008167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 184.015729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 21:30:51 executing program 2: [ 184.490032] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.699312] 8021q: adding VLAN 0 to HW filter on device bond0 21:30:54 executing program 3: [ 187.092529] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 187.342987] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 187.349283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 187.356907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 187.581058] 8021q: adding VLAN 0 to HW filter on device team0 21:30:56 executing program 4: 21:30:56 executing program 1: 21:30:56 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x0}, {}]}) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000000c0)={r1, 0x3}) ioctl$TIOCCONS(r0, 0x541d) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100)=0x0) wait4(r2, &(0x7f0000000140), 0x40000001, &(0x7f0000000180)) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000240), &(0x7f0000000280)=0x4) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f00000002c0), &(0x7f0000000300)=0x8) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000340)={{0x4d, 0x7, 0x6, 0x7ff}, 'syz0\x00', 0x47}) getsockopt$inet6_dccp_buf(r0, 0x21, 0xc, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=0x1000) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f0000001400)) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000001540)={@in={{0x2, 0x4e24, @rand_addr=0x43b0}}, 0x2, 0x80000001, 0x59e1, "d7b377e3e0b5392abca359f5818764ff285da85acd555d622a40543918d1d75441eb2797462747cf17e2f1736b77e6683206d48efdd13447e70c09bdedec067d04cc16856faa9bf43cfdb21209d66816"}, 0xd8) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x2f0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000001640)={0x4, 0x32, 0x3f, 0x7f, 0x3, 0x7, 0x100000000, 0xaf, 0x3, 0x1ff, 0x0, 0xe0d3c52}) lremovexattr(&(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)=@known='user.syz\x00') getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000001700)={0x0, 0x1, 0x30}, &(0x7f0000001740)=0xc) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000001780)={0x100000001, 0x8000, 0x9, 0x74, r3}, 0x10) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1415f313ec615540) getsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f00000017c0), &(0x7f0000001800)=0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000001840)={0x80000000}) getgid() fstat(r0, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001900)={0x0, 0x0, 0x0}, &(0x7f0000001940)=0xc) fchown(r0, r4, r5) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000001980)=r0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000019c0)={r0, 0x0, 0x1, 0x4c11, 0x2f}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000001a00)={r3, @in6={{0xa, 0x4e20, 0x1f, @local, 0x9}}, 0x8, 0x1ff, 0x800, 0x9, 0x20}, 0x98) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000001ac0)='veth1_to_bridge\x00', 0x10) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000001b00)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000001b40)={[{0x2b, 'io'}, {0x2d, 'io'}]}, 0x8) 21:30:56 executing program 2: 21:30:56 executing program 3: 21:30:56 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000002c0)='vmnet0&\' selinux\'\x00') [ 189.005082] netlink: 57 bytes leftover after parsing attributes in process `syz-executor4'. [ 189.013944] IPv6: NLM_F_REPLACE set, but no existing node found! [ 189.022888] netlink: 57 bytes leftover after parsing attributes in process `syz-executor4'. [ 189.031849] IPv6: NLM_F_REPLACE set, but no existing node found! 21:30:56 executing program 2: creat(&(0x7f0000000140)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x8200) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x101002, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000003d40)=[{{&(0x7f0000002f80)=@un=@abs, 0x80, &(0x7f0000003280), 0x0, &(0x7f0000005040)}}], 0x1, 0x0) sendfile(r0, r2, &(0x7f0000d83ff8), 0x8000fffffffe) 21:30:56 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000040)=r2, 0x4) 21:30:56 executing program 4: r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, &(0x7f00000000c0)}, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@nfc={0x27, 0x3, 0x0, 0xffffff7f}, 0x80, &(0x7f00000001c0)=[{&(0x7f00000000c0)="bba600000000000000fd78c5712581075c52871a5bba00000000000000cbd9a73174437f", 0x24}], 0x1}, 0x0) 21:30:56 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000100)={0x0, 0x0, 0x10000, 0x0, [], [], [], 0x0, 0x0, 0x0, 0x0, "10b907b2f23982392b90f2cb02deb00e"}) 21:30:56 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000140)={@dev, 0x7}, 0x20) 21:30:56 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0)={0x0, 0x3f}, 0x8) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000240)={0x0, 0x7f}, 0x8) getpgrp(0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vsock\x00', 0x840, 0x0) move_pages(0x0, 0x1, &(0x7f0000001f00)=[&(0x7f0000b8c000/0x2000)=nil], &(0x7f0000001f40)=[0x0, 0xab], &(0x7f0000001f80)=[0x0, 0x0, 0x0, 0x0], 0x2) renameat2(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x4) ioctl$KVM_ASSIGN_SET_INTX_MASK(0xffffffffffffffff, 0x4040aea4, &(0x7f0000000100)={0xffffffffffffff81, 0xfffffffffffff801, 0x7, 0x2}) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0xc, &(0x7f0000000140)=""/133, &(0x7f0000000200)=0x85) write$binfmt_misc(r2, &(0x7f0000003140)=ANY=[@ANYBLOB="737c7a31aba72bd169b98c248ae49766232ee8885893b100406498ba90467ccbc9e0599a61914f6bff7f4a3f2d73fa8a5928618927a1b94ece2029e50d8962701bc23d0e60b9b84c843630b7ea635f6a8d947a5c0c92cc3713589f2f022997239ec876dc5dc3471ddf990f98662946c7225c7c035b7ec1845790e389dd56d7be728e525a8d9611dea16f507a3f5531b3616af6c8141af2848088285d713aad1a4857b4bfb9b1e1726bb0275200000000"], 0xb0) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r4, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r5 = socket$inet(0x10, 0x0, 0xc) sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000100)="24000000010307031dfffd946ff20c0020200a0009000100021d85680c1baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000000000000000000000", 0x4c}], 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000005c0)={0x0, 0x1ff}, &(0x7f0000000600)=0xc) sendmsg$nl_generic(r3, &(0x7f0000001ec0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20008000}, 0xc, &(0x7f0000000580)={&(0x7f0000000b00)={0x10c, 0x3f, 0x10, 0x70bd2d, 0x25dfdbfe, {0x14}, [@nested={0xf8, 0x6a, [@generic="a658bc47bfc42849d0c311457b9126a5b60a193fd164c5461c72b33237222d87f344a850861aa2544648016f748e5edfe8dd89605203ff2788cb03d413a430df718beac6e49b0d7ec74b3713daf26e90f6a8f9fea9035c2f6343f2e80bf3771f51fca00f7e05da5923575a01540209a6002fe3e752ca7a4267e672f5bb9d2c250b8f0550c65ea24a24b6f2322422c3a4c51274e1270171db115114e4f7431752c373f57f8355d07f9ef6071a52f4c94e3ac97aee0d803deeb5dccff940ccce9c7c0db3177fc8a3603fcecf9a97b1ac2d5c213c8228b27ebf5cda8fad30e5f09655988dc6499ea008255a1caf393a35a5a6d689"]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x1}, 0x10) [ 189.703018] hrtimer: interrupt took 31974 ns [ 190.052789] IPVS: ftp: loaded support on port[0] = 21 [ 191.028988] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.035430] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.043110] device bridge_slave_0 entered promiscuous mode [ 191.104686] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.111065] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.118786] device bridge_slave_1 entered promiscuous mode [ 191.180394] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 191.241452] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 191.425515] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 191.491222] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 191.788630] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 191.797003] team0: Port device team_slave_0 added [ 191.857106] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 191.864599] team0: Port device team_slave_1 added [ 191.923989] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 191.931005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 191.939361] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 192.003498] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 192.010416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 192.018802] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 192.083914] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 192.091108] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 192.099715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 192.163656] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 192.170897] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 192.179603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 192.930950] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.937389] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.944221] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.950597] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.958615] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 193.781871] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 195.481243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.725960] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 195.954405] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 195.960651] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 195.968370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 196.193185] 8021q: adding VLAN 0 to HW filter on device team0 21:31:04 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) io_setup(0x8, &(0x7f0000000000)=0x0) io_submit(r0, 0x1, &(0x7f0000000940)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x1}]) 21:31:04 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) write$binfmt_aout(r0, &(0x7f0000001000)=ANY=[@ANYBLOB='\x00'], 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x17}) 21:31:04 executing program 4: r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, &(0x7f00000000c0)}, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@nfc={0x27, 0x3, 0x0, 0xffffff7f}, 0x80, &(0x7f00000001c0)=[{&(0x7f00000000c0)="bba600000000000000fd78c5712581075c52871a5bba00000000000000cbd9a73174437f", 0x24}], 0x1}, 0x0) 21:31:04 executing program 3: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x85a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000140)="580000001400add427323b470c458c5602067fffffff81004e220000ac1414aa0b4824ca945f64009400050028925aa80000000000000080000efffeffe809000000fff5dd00000010000100090a1000410400000000fcff", 0x58}], 0x1) 21:31:04 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x4}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) 21:31:04 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0)={0x0, 0x3f}, 0x8) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000240)={0x0, 0x7f}, 0x8) getpgrp(0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vsock\x00', 0x840, 0x0) move_pages(0x0, 0x1, &(0x7f0000001f00)=[&(0x7f0000b8c000/0x2000)=nil], &(0x7f0000001f40)=[0x0, 0xab], &(0x7f0000001f80)=[0x0, 0x0, 0x0, 0x0], 0x2) renameat2(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x4) ioctl$KVM_ASSIGN_SET_INTX_MASK(0xffffffffffffffff, 0x4040aea4, &(0x7f0000000100)={0xffffffffffffff81, 0xfffffffffffff801, 0x7, 0x2}) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0xc, &(0x7f0000000140)=""/133, &(0x7f0000000200)=0x85) write$binfmt_misc(r2, &(0x7f0000003140)=ANY=[@ANYBLOB="737c7a31aba72bd169b98c248ae49766232ee8885893b100406498ba90467ccbc9e0599a61914f6bff7f4a3f2d73fa8a5928618927a1b94ece2029e50d8962701bc23d0e60b9b84c843630b7ea635f6a8d947a5c0c92cc3713589f2f022997239ec876dc5dc3471ddf990f98662946c7225c7c035b7ec1845790e389dd56d7be728e525a8d9611dea16f507a3f5531b3616af6c8141af2848088285d713aad1a4857b4bfb9b1e1726bb0275200000000"], 0xb0) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r4, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r5 = socket$inet(0x10, 0x0, 0xc) sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000100)="24000000010307031dfffd946ff20c0020200a0009000100021d85680c1baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000000000000000000000", 0x4c}], 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000005c0)={0x0, 0x1ff}, &(0x7f0000000600)=0xc) sendmsg$nl_generic(r3, &(0x7f0000001ec0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20008000}, 0xc, &(0x7f0000000580)={&(0x7f0000000b00)={0x10c, 0x3f, 0x10, 0x70bd2d, 0x25dfdbfe, {0x14}, [@nested={0xf8, 0x6a, [@generic="a658bc47bfc42849d0c311457b9126a5b60a193fd164c5461c72b33237222d87f344a850861aa2544648016f748e5edfe8dd89605203ff2788cb03d413a430df718beac6e49b0d7ec74b3713daf26e90f6a8f9fea9035c2f6343f2e80bf3771f51fca00f7e05da5923575a01540209a6002fe3e752ca7a4267e672f5bb9d2c250b8f0550c65ea24a24b6f2322422c3a4c51274e1270171db115114e4f7431752c373f57f8355d07f9ef6071a52f4c94e3ac97aee0d803deeb5dccff940ccce9c7c0db3177fc8a3603fcecf9a97b1ac2d5c213c8228b27ebf5cda8fad30e5f09655988dc6499ea008255a1caf393a35a5a6d689"]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x1}, 0x10) 21:31:04 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000440)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) sendto$inet6(r0, &(0x7f0000000380), 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x0, 0x0, @loopback}, 0x1c) 21:31:05 executing program 4: r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, &(0x7f00000000c0)}, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@nfc={0x27, 0x3, 0x0, 0xffffff7f}, 0x80, &(0x7f00000001c0)=[{&(0x7f00000000c0)="bba600000000000000fd78c5712581075c52871a5bba00000000000000cbd9a73174437f", 0x24}], 0x1}, 0x0) 21:31:05 executing program 0: socket$inet6(0xa, 0x803, 0x3) r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000001) 21:31:05 executing program 3: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x85a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000140)="580000001400add427323b470c458c5602067fffffff81004e220000ac1414aa0b4824ca945f64009400050028925aa80000000000000080000efffeffe809000000fff5dd00000010000100090a1000410400000000fcff", 0x58}], 0x1) 21:31:05 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) io_setup(0x8, &(0x7f0000000000)=0x0) io_submit(r0, 0x1, &(0x7f0000000940)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x1}]) 21:31:05 executing program 1: 21:31:05 executing program 2: 21:31:05 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x40080, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f0000000000)=""/2, 0x2000, 0x800}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000000c0)=0x400, 0x4) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x890f, &(0x7f0000000280)="153f6234488dd25d766070") getpgid(0xffffffffffffffff) mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x180000000) 21:31:05 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) getrandom(&(0x7f0000000080)=""/103, 0x67, 0x2) setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000080), 0xfffffe73, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TCFLSH(r1, 0x540b, 0x2) 21:31:05 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)="2f007e574d000330809022cfde26555dc9ecfe1974406edad38364782d63b6612854b9e49dbdcaef718197e37e870a308b1e3a798fa788a46d3025ef933e51828ab679064e2adbe9126423b4a73d68fbe99c6db2f160d49cb6cce76c27289a4f9d097354aaa5860d2383df87526baa184d90bb7729366c17bc33d765e9bc2f882a13f3a9c1f60660bd4fd22b1082fa31d22289bce062d10d24ded5406918a66b2c75c43fe1ff458ae5cd9fec63039ba5a7b66a60ede5ccdabc7ee77660ef2358ccdff02226021384b0c235f114ed9ade92767aecc256acdeb610df42e7169f240357f735ae5fe29017e51e27252f48b95bfbbb3a865535298bdc36d71db635f41c57771db77aeaff883feb3dc3cc24bd3c036e396ad3af37945058839e812270bc40901fa654e7cc3292a82fc80c374dc07142a1c2e9d3e2528e4fdac32bcaefe910ebd3b948a3bfebef5fa8d82473c73a8b9a457ef6ac989547fbf3ec5a50d7cd4fc76e93fc43bb3d94c178046bdc15dba89749f76d176253ca6cb31c53e8a94c156b279eb3d40a4040b0dd93c2e70956197bd3899b85b2d1d377ec4943dc030a6d8c43ef9ab1c004a36d90b5910dfd657c1f8804257aff05678c66e5cc8e986521e9dac7ee12588fa3f01a6e4c2b0200000000", 0x0, 0x0) getdents(r0, &(0x7f0000000000)=""/253, 0x26) getdents(r0, &(0x7f00000017c0)=""/4096, 0x1000) 21:31:05 executing program 4: r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, &(0x7f00000000c0)}, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@nfc={0x27, 0x3, 0x0, 0xffffff7f}, 0x80, &(0x7f00000001c0)=[{&(0x7f00000000c0)="bba600000000000000fd78c5712581075c52871a5bba00000000000000cbd9a73174437f", 0x24}], 0x1}, 0x0) 21:31:05 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) userfaultfd(0x98000) 21:31:05 executing program 2: [ 198.637524] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 21:31:05 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x40080, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f0000000000)=""/2, 0x2000, 0x800}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000000c0)=0x400, 0x4) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x890f, &(0x7f0000000280)="153f6234488dd25d766070") getpgid(0xffffffffffffffff) mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x180000000) 21:31:05 executing program 1: 21:31:05 executing program 5: 21:31:05 executing program 4: r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@nfc={0x27, 0x3, 0x0, 0xffffff7f}, 0x80, &(0x7f00000001c0)=[{&(0x7f00000000c0)="bba600000000000000fd78c5712581075c52871a5bba00000000000000cbd9a73174437f", 0x24}], 0x1}, 0x0) 21:31:06 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x40080, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f0000000000)=""/2, 0x2000, 0x800}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000000c0)=0x400, 0x4) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x890f, &(0x7f0000000280)="153f6234488dd25d766070") getpgid(0xffffffffffffffff) mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x180000000) 21:31:06 executing program 1: 21:31:06 executing program 2: 21:31:06 executing program 0: 21:31:06 executing program 5: 21:31:06 executing program 1: 21:31:06 executing program 2: 21:31:06 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x40080, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f0000000000)=""/2, 0x2000, 0x800}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000000c0)=0x400, 0x4) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x890f, &(0x7f0000000280)="153f6234488dd25d766070") getpgid(0xffffffffffffffff) mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x180000000) 21:31:06 executing program 4: r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@nfc={0x27, 0x3, 0x0, 0xffffff7f}, 0x80, &(0x7f00000001c0)=[{&(0x7f00000000c0)="bba600000000000000fd78c5712581075c52871a5bba00000000000000cbd9a73174437f", 0x24}], 0x1}, 0x0) 21:31:06 executing program 2: 21:31:06 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x40080, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f0000000000)=""/2, 0x2000, 0x800}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000000c0)=0x400, 0x4) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x890f, &(0x7f0000000280)="153f6234488dd25d766070") mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x180000000) 21:31:06 executing program 5: 21:31:06 executing program 1: 21:31:06 executing program 0: 21:31:06 executing program 1: 21:31:07 executing program 4: r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@nfc={0x27, 0x3, 0x0, 0xffffff7f}, 0x80, &(0x7f00000001c0)=[{&(0x7f00000000c0)="bba600000000000000fd78c5712581075c52871a5bba00000000000000cbd9a73174437f", 0x24}], 0x1}, 0x0) 21:31:07 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x40080, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f0000000000)=""/2, 0x2000, 0x800}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000000c0)=0x400, 0x4) socket$inet6(0xa, 0x1000000000002, 0x0) mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x180000000) 21:31:07 executing program 2: 21:31:07 executing program 5: 21:31:07 executing program 1: 21:31:07 executing program 2: 21:31:07 executing program 0: 21:31:07 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, &(0x7f00000000c0)}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)=@nfc={0x27, 0x3, 0x0, 0xffffff7f}, 0x80, &(0x7f00000001c0)=[{&(0x7f00000000c0)="bba600000000000000fd78c5712581075c52871a5bba00000000000000cbd9a73174437f", 0x24}], 0x1}, 0x0) 21:31:07 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x40080, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f0000000000)=""/2, 0x2000, 0x800}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000000c0)=0x400, 0x4) mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x180000000) 21:31:07 executing program 1: 21:31:07 executing program 5: 21:31:07 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, &(0x7f00000000c0)}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)=@nfc={0x27, 0x3, 0x0, 0xffffff7f}, 0x80, &(0x7f00000001c0)=[{&(0x7f00000000c0)="bba600000000000000fd78c5712581075c52871a5bba00000000000000cbd9a73174437f", 0x24}], 0x1}, 0x0) 21:31:07 executing program 2: 21:31:07 executing program 1: 21:31:07 executing program 0: 21:31:07 executing program 5: 21:31:07 executing program 1: 21:31:08 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x40080, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f0000000000)=""/2, 0x2000, 0x800}, 0x18) mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x180000000) 21:31:08 executing program 2: 21:31:08 executing program 5: 21:31:08 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, &(0x7f00000000c0)}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)=@nfc={0x27, 0x3, 0x0, 0xffffff7f}, 0x80, &(0x7f00000001c0)=[{&(0x7f00000000c0)="bba600000000000000fd78c5712581075c52871a5bba00000000000000cbd9a73174437f", 0x24}], 0x1}, 0x0) 21:31:08 executing program 0: 21:31:08 executing program 1: 21:31:08 executing program 2: 21:31:08 executing program 0: 21:31:08 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x40080, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000000c0)=0x400, 0x4) mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x180000000) 21:31:08 executing program 5: 21:31:08 executing program 4: r0 = socket$kcm(0x11, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, &(0x7f00000000c0)}, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@nfc={0x27, 0x3, 0x0, 0xffffff7f}, 0x80, &(0x7f00000001c0)=[{&(0x7f00000000c0)="bba600000000000000fd78c5712581075c52871a5bba00000000000000cbd9a73174437f", 0x24}], 0x1}, 0x0) 21:31:08 executing program 1: 21:31:08 executing program 2: 21:31:08 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f0000000000)=""/2, 0x2000, 0x800}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000000c0)=0x400, 0x4) mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x180000000) 21:31:08 executing program 5: 21:31:08 executing program 0: 21:31:09 executing program 3: setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f0000000000)=""/2, 0x2000, 0x800}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f00000000c0)=0x400, 0x4) mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x180000000) 21:31:09 executing program 2: 21:31:09 executing program 4: r0 = socket$kcm(0x11, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, &(0x7f00000000c0)}, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@nfc={0x27, 0x3, 0x0, 0xffffff7f}, 0x80, &(0x7f00000001c0)=[{&(0x7f00000000c0)="bba600000000000000fd78c5712581075c52871a5bba00000000000000cbd9a73174437f", 0x24}], 0x1}, 0x0) 21:31:09 executing program 1: 21:31:09 executing program 0: 21:31:09 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f0000000000)=""/2, 0x2000, 0x800}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000000c0)=0x400, 0x4) mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x180000000) 21:31:09 executing program 5: 21:31:09 executing program 2: 21:31:09 executing program 4: r0 = socket$kcm(0x11, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, &(0x7f00000000c0)}, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@nfc={0x27, 0x3, 0x0, 0xffffff7f}, 0x80, &(0x7f00000001c0)=[{&(0x7f00000000c0)="bba600000000000000fd78c5712581075c52871a5bba00000000000000cbd9a73174437f", 0x24}], 0x1}, 0x0) 21:31:09 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f0000000000)=""/2, 0x0, 0x800}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000000c0)=0x400, 0x4) mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x180000000) 21:31:09 executing program 1: 21:31:09 executing program 0: 21:31:09 executing program 5: 21:31:09 executing program 2: 21:31:09 executing program 0: 21:31:09 executing program 1: 21:31:09 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f0000000000)=""/2, 0x2000}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000000c0)=0x400, 0x4) mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x180000000) 21:31:09 executing program 2: 21:31:10 executing program 4: r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2, 0x80, &(0x7f00000000c0)}, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@nfc={0x27, 0x3, 0x0, 0xffffff7f}, 0x80, &(0x7f00000001c0)=[{&(0x7f00000000c0)="bba600000000000000fd78c5712581075c52871a5bba00000000000000cbd9a73174437f", 0x24}], 0x1}, 0x0) 21:31:10 executing program 5: 21:31:10 executing program 0: 21:31:10 executing program 2: 21:31:10 executing program 1: 21:31:10 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f0000000000)=""/2, 0x2000, 0x800}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f00000000c0)=0x400, 0x4) mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x180000000) 21:31:10 executing program 5: 21:31:10 executing program 2: 21:31:10 executing program 4: r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2, 0x80, &(0x7f00000000c0)}, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@nfc={0x27, 0x3, 0x0, 0xffffff7f}, 0x80, &(0x7f00000001c0)=[{&(0x7f00000000c0)="bba600000000000000fd78c5712581075c52871a5bba00000000000000cbd9a73174437f", 0x24}], 0x1}, 0x0) 21:31:10 executing program 0: 21:31:10 executing program 1: 21:31:10 executing program 5: 21:31:10 executing program 2: 21:31:10 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f0000000000)=""/2, 0x2000, 0x800}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000000c0), 0x4) mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x180000000) 21:31:10 executing program 0: 21:31:10 executing program 1: 21:31:10 executing program 5: 21:31:11 executing program 4: r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2, 0x80, &(0x7f00000000c0)}, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@nfc={0x27, 0x3, 0x0, 0xffffff7f}, 0x80, &(0x7f00000001c0)=[{&(0x7f00000000c0)="bba600000000000000fd78c5712581075c52871a5bba00000000000000cbd9a73174437f", 0x24}], 0x1}, 0x0) 21:31:11 executing program 2: 21:31:11 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f0000000000)=""/2, 0x2000, 0x800}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000000c0)=0x400, 0x4) mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x180000000) 21:31:11 executing program 1: 21:31:11 executing program 4: socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, &(0x7f00000000c0)}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)=@nfc={0x27, 0x3, 0x0, 0xffffff7f}, 0x80, &(0x7f00000001c0)=[{&(0x7f00000000c0)="bba600000000000000fd78c5712581075c52871a5bba00000000000000cbd9a73174437f", 0x24}], 0x1}, 0x0) 21:31:11 executing program 0: 21:31:11 executing program 2: 21:31:11 executing program 1: 21:31:11 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f0000000000)=""/2, 0x2000, 0x800}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000000c0)=0x400, 0x4) mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x180000000) 21:31:11 executing program 5: 21:31:11 executing program 4: socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, &(0x7f00000000c0)}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)=@nfc={0x27, 0x3, 0x0, 0xffffff7f}, 0x80, &(0x7f00000001c0)=[{&(0x7f00000000c0)="bba600000000000000fd78c5712581075c52871a5bba00000000000000cbd9a73174437f", 0x24}], 0x1}, 0x0) 21:31:11 executing program 0: 21:31:11 executing program 2: 21:31:11 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f0000000000)=""/2, 0x2000, 0x800}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000000c0)=0x400, 0x4) mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 21:31:11 executing program 1: 21:31:11 executing program 5: 21:31:11 executing program 2: 21:31:12 executing program 0: 21:31:12 executing program 1: 21:31:12 executing program 4: socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, &(0x7f00000000c0)}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)=@nfc={0x27, 0x3, 0x0, 0xffffff7f}, 0x80, &(0x7f00000001c0)=[{&(0x7f00000000c0)="bba600000000000000fd78c5712581075c52871a5bba00000000000000cbd9a73174437f", 0x24}], 0x1}, 0x0) 21:31:12 executing program 3: 21:31:12 executing program 5: 21:31:12 executing program 0: 21:31:12 executing program 2: 21:31:12 executing program 1: 21:31:12 executing program 5: 21:31:12 executing program 2: 21:31:12 executing program 3: 21:31:12 executing program 4: r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, &(0x7f00000000c0)}, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@nfc={0x27, 0x0, 0x0, 0xffffff7f}, 0x80, &(0x7f00000001c0)=[{&(0x7f00000000c0)="bba600000000000000fd78c5712581075c52871a5bba00000000000000cbd9a73174437f", 0x24}], 0x1}, 0x0) 21:31:12 executing program 0: 21:31:12 executing program 1: 21:31:12 executing program 3: 21:31:12 executing program 2: 21:31:13 executing program 1: 21:31:13 executing program 5: 21:31:13 executing program 0: 21:31:13 executing program 4: r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, &(0x7f00000000c0)}, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000001c0)=[{&(0x7f00000000c0)="bba600000000000000fd78c5712581075c52871a5bba00000000000000cbd9a73174437f", 0x24}], 0x1}, 0x0) 21:31:13 executing program 3: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0xfe) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x2e7) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) 21:31:13 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0x140, &(0x7f0000000500)={@link_local={0x1, 0x80, 0xc2, 0x3a000000}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x2, 0x3a, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0xf5ffffff00000000]}, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000100)) 21:31:13 executing program 0: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/net/tun\x00', 0x2001, 0x0) write$P9_RCLUNK(r0, &(0x7f0000000040)={0x7}, 0x7) 21:31:13 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000100)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000300)) 21:31:13 executing program 4: r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, &(0x7f00000000c0)}, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@nfc={0x27, 0x3, 0x0, 0xffffff7f}, 0x80, &(0x7f00000001c0)}, 0x0) 21:31:13 executing program 5: [ 206.432606] ================================================================== [ 206.440205] BUG: KMSAN: uninit-value in iptable_mangle_hook+0x620/0x720 [ 206.446967] CPU: 1 PID: 7893 Comm: syz-executor4 Not tainted 4.19.0-rc4+ #63 [ 206.454146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 206.463496] Call Trace: [ 206.466087] dump_stack+0x306/0x460 [ 206.469710] ? iptable_mangle_hook+0x620/0x720 [ 206.474307] kmsan_report+0x1a3/0x2d0 [ 206.478119] __msan_warning+0x7c/0xe0 [ 206.481927] iptable_mangle_hook+0x620/0x720 [ 206.486360] ? iptable_mangle_net_exit+0x130/0x130 [ 206.491468] nf_hook_slow+0x15c/0x3d0 [ 206.495283] __ip_local_out+0x6f2/0x810 [ 206.499277] ? __ip_local_out+0x810/0x810 [ 206.503435] ip_local_out+0xa4/0x1d0 [ 206.507176] iptunnel_xmit+0x835/0xd50 [ 206.511086] ip_tunnel_xmit+0x3647/0x3b40 [ 206.515265] ipgre_xmit+0xf59/0x1070 [ 206.518990] ? ipgre_close+0x230/0x230 [ 206.522880] dev_hard_start_xmit+0x6b8/0xdb0 [ 206.527311] __dev_queue_xmit+0x2e62/0x3d90 [ 206.531660] dev_queue_xmit+0x4b/0x60 [ 206.535467] ? __netdev_pick_tx+0x1490/0x1490 [ 206.539971] packet_sendmsg+0x840f/0x8fe0 [ 206.544156] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 206.549558] ___sys_sendmsg+0xe47/0x1200 [ 206.553633] ? compat_packet_setsockopt+0x360/0x360 [ 206.558663] ? __fget+0x8f7/0x940 [ 206.562149] __se_sys_sendmsg+0x307/0x460 [ 206.566316] __x64_sys_sendmsg+0x4a/0x70 [ 206.570381] do_syscall_64+0xbe/0x100 [ 206.574194] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 206.579381] RIP: 0033:0x457579 [ 206.582575] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 206.601477] RSP: 002b:00007f0cd9964c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 206.609189] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457579 [ 206.616461] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000003 [ 206.623733] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 206.631003] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0cd99656d4 [ 206.638276] R13: 00000000004c3837 R14: 00000000004d5640 R15: 00000000ffffffff [ 206.645552] [ 206.647277] Uninit was stored to memory at: [ 206.651601] kmsan_internal_chain_origin+0x136/0x240 [ 206.656700] __msan_chain_origin+0x75/0xd0 [ 206.660932] iptunnel_xmit+0xa39/0xd50 [ 206.664829] ip_tunnel_xmit+0x3647/0x3b40 [ 206.668977] ipgre_xmit+0xf59/0x1070 [ 206.672690] dev_hard_start_xmit+0x6b8/0xdb0 [ 206.677096] __dev_queue_xmit+0x2e62/0x3d90 [ 206.681416] dev_queue_xmit+0x4b/0x60 [ 206.685217] packet_sendmsg+0x840f/0x8fe0 [ 206.689365] ___sys_sendmsg+0xe47/0x1200 [ 206.693428] __se_sys_sendmsg+0x307/0x460 [ 206.697578] __x64_sys_sendmsg+0x4a/0x70 [ 206.701640] do_syscall_64+0xbe/0x100 [ 206.705555] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 206.710735] [ 206.712355] Uninit was created at: [ 206.715898] kmsan_internal_poison_shadow+0xc8/0x1d0 [ 206.721089] kmsan_kmalloc+0xa4/0x120 [ 206.724889] kmsan_slab_alloc+0x10/0x20 [ 206.728866] __kmalloc_node_track_caller+0xb43/0x1400 [ 206.734056] __alloc_skb+0x422/0xe90 [ 206.737773] alloc_skb_with_frags+0x1d0/0xac0 [ 206.742268] sock_alloc_send_pskb+0xe00/0x1420 [ 206.746852] packet_sendmsg+0x6787/0x8fe0 [ 206.750999] ___sys_sendmsg+0xe47/0x1200 [ 206.755059] __se_sys_sendmsg+0x307/0x460 [ 206.759211] __x64_sys_sendmsg+0x4a/0x70 [ 206.763272] do_syscall_64+0xbe/0x100 [ 206.767077] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 206.772256] ================================================================== [ 206.779611] Disabling lock debugging due to kernel taint [ 206.785054] Kernel panic - not syncing: panic_on_warn set ... [ 206.785054] [ 206.792425] CPU: 1 PID: 7893 Comm: syz-executor4 Tainted: G B 4.19.0-rc4+ #63 [ 206.800995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 206.810340] Call Trace: [ 206.812932] dump_stack+0x306/0x460 [ 206.816588] panic+0x54c/0xafa [ 206.819808] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 206.825264] kmsan_report+0x2cd/0x2d0 [ 206.829075] __msan_warning+0x7c/0xe0 [ 206.832884] iptable_mangle_hook+0x620/0x720 [ 206.837305] ? iptable_mangle_net_exit+0x130/0x130 [ 206.842235] nf_hook_slow+0x15c/0x3d0 [ 206.846049] __ip_local_out+0x6f2/0x810 [ 206.850035] ? __ip_local_out+0x810/0x810 [ 206.854190] ip_local_out+0xa4/0x1d0 [ 206.857918] iptunnel_xmit+0x835/0xd50 [ 206.861831] ip_tunnel_xmit+0x3647/0x3b40 [ 206.866019] ipgre_xmit+0xf59/0x1070 [ 206.869749] ? ipgre_close+0x230/0x230 [ 206.873639] dev_hard_start_xmit+0x6b8/0xdb0 [ 206.878070] __dev_queue_xmit+0x2e62/0x3d90 21:31:13 executing program 1: 21:31:13 executing program 1: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0xfe) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) prctl$getname(0x10, &(0x7f0000000280)=""/70) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x2e7) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) 21:31:13 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)}) 21:31:13 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) write$binfmt_elf32(r2, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) [ 206.882418] dev_queue_xmit+0x4b/0x60 [ 206.886220] ? __netdev_pick_tx+0x1490/0x1490 [ 206.890724] packet_sendmsg+0x840f/0x8fe0 [ 206.894902] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 206.900311] ___sys_sendmsg+0xe47/0x1200 [ 206.904379] ? compat_packet_setsockopt+0x360/0x360 [ 206.909407] ? __fget+0x8f7/0x940 [ 206.912887] __se_sys_sendmsg+0x307/0x460 [ 206.917059] __x64_sys_sendmsg+0x4a/0x70 [ 206.921134] do_syscall_64+0xbe/0x100 [ 206.924945] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 206.930140] RIP: 0033:0x457579 21:31:14 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000005c0)="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") fdatasync(r0) [ 206.933336] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 206.952235] RSP: 002b:00007f0cd9964c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 206.959949] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457579 [ 206.967220] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000003 [ 206.974487] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 206.981754] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0cd99656d4 [ 206.989025] R13: 00000000004c3837 R14: 00000000004d5640 R15: 00000000ffffffff [ 206.997526] Kernel Offset: disabled [ 207.001152] Rebooting in 86400 seconds..