[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 59.926901] audit: type=1800 audit(1541995285.981:25): pid=6469 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 59.946105] audit: type=1800 audit(1541995285.991:26): pid=6469 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 59.965593] audit: type=1800 audit(1541995286.011:27): pid=6469 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.54' (ECDSA) to the list of known hosts. 2018/11/12 04:01:38 fuzzer started 2018/11/12 04:01:43 dialing manager at 10.128.0.26:42475 2018/11/12 04:01:43 syscalls: 1 2018/11/12 04:01:43 code coverage: enabled 2018/11/12 04:01:43 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/11/12 04:01:43 setuid sandbox: enabled 2018/11/12 04:01:43 namespace sandbox: enabled 2018/11/12 04:01:43 Android sandbox: /sys/fs/selinux/policy does not exist 2018/11/12 04:01:43 fault injection: enabled 2018/11/12 04:01:43 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/11/12 04:01:43 net packed injection: enabled 2018/11/12 04:01:43 net device setup: enabled 04:04:04 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000), 0x2000005) syzkaller login: [ 219.087493] IPVS: ftp: loaded support on port[0] = 21 [ 221.191840] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.198317] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.206888] device bridge_slave_0 entered promiscuous mode [ 221.342531] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.348995] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.357497] device bridge_slave_1 entered promiscuous mode [ 221.480247] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 221.601966] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 221.987701] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 222.117793] bond0: Enslaving bond_slave_1 as an active interface with an up link 04:04:08 executing program 1: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0xfe) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000000c0)={0x0, r0, 0x0, 0x0, 0x0, 0x7ff}) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x2e7) getegid() r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(r0, &(0x7f0000000400)=[{&(0x7f0000000380)="ba9b952732cee296b351a50653f7c4f58083df978f225923fea25ca972783045c4dedb41406208c4c5ed6329708f3986e898ce35a613fdbc7a5f7acf4b424f5d5623886dfc91110cf98a14732f227bfd76255f50166a84c393cadb3fb912da469941235b848d0243a6cdda2cf1", 0x6d}], 0x1, 0x0) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f0000000000)={0x0, 0x2}) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000100)=0x7) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000200)=""/239) madvise(&(0x7f00001a2000/0xc00000)=nil, 0xc00000, 0x4000000000000008) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) [ 222.875311] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 222.883471] team0: Port device team_slave_0 added [ 223.078006] IPVS: ftp: loaded support on port[0] = 21 [ 223.085110] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 223.093079] team0: Port device team_slave_1 added [ 223.236055] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 223.243275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 223.252192] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 223.400113] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 223.407348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 223.416236] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 223.617817] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 223.625493] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 223.634573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 223.819621] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 223.827329] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 223.836441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 224.717638] ip (6729) used greatest stack depth: 53216 bytes left [ 226.376136] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.382725] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.389630] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.396178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.404871] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 226.561888] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 226.584173] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.590623] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.599135] device bridge_slave_0 entered promiscuous mode [ 226.802275] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.808752] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.817249] device bridge_slave_1 entered promiscuous mode [ 227.031309] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 227.210820] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready 04:04:13 executing program 2: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) [ 227.844978] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 228.165134] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 228.470877] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 228.477092] IPVS: ftp: loaded support on port[0] = 21 [ 228.478068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 228.780764] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 228.787901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 229.527915] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 229.535926] team0: Port device team_slave_0 added [ 229.833967] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 229.841989] team0: Port device team_slave_1 added [ 230.044727] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 230.051871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 230.060591] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 230.313622] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 230.320714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 230.329427] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 230.530419] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 230.538226] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 230.547294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 230.700306] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 230.708054] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 230.717106] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 232.505622] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.512264] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.520559] device bridge_slave_0 entered promiscuous mode [ 232.773527] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.779992] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.788602] device bridge_slave_1 entered promiscuous mode [ 233.082793] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 233.327047] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.333585] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.340477] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.347052] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.355712] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 233.371402] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 233.743624] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 234.218997] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 234.500847] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 234.745140] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 234.753903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 235.054604] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 235.061867] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 235.833639] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 235.841819] team0: Port device team_slave_0 added [ 236.085252] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 236.093486] team0: Port device team_slave_1 added 04:04:22 executing program 3: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x0, 0x0) unshare(0x600) pselect6(0x40, &(0x7f0000000000)={0x8}, &(0x7f0000000040), &(0x7f0000000300), &(0x7f0000000340)={0x0, 0x1c9c380}, &(0x7f00000003c0)={&(0x7f0000000380), 0x8}) [ 236.267140] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 236.274329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 236.283549] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 236.662636] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 236.669705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 236.678512] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 236.955162] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.975270] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 236.983033] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 236.991978] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 237.250771] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 237.258694] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 237.267872] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 237.437747] IPVS: ftp: loaded support on port[0] = 21 [ 238.191114] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 239.151034] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 239.157661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 239.165819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 240.380893] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.837219] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.843763] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.850643] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.857204] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.865729] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 240.872408] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 243.084810] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.091747] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.100105] device bridge_slave_0 entered promiscuous mode [ 243.367673] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.374433] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.382853] device bridge_slave_1 entered promiscuous mode [ 243.683195] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 244.000068] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 244.907827] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 245.285186] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 245.614629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.653014] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 245.660111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 245.934720] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 245.942011] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 04:04:32 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000200)={0xe0003, 0x0, [0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="2e65f32efe0a6766c7442400008000006766c7442402000000006766c744240600000000670f011c24b866000f00d066b88044a2b20f23c80f21f866350400d0000f23f80f0766b80500000066b9080000000f01c10f0766b8010000000f01c10f01dfb835008ee0", 0x68}], 0x269, 0x0, &(0x7f00000000c0), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000340)="b9024d564b0f3248b83cc6e176511aef170f23d80f21f835000000300f23f8660f383dc70f06470fbe641303470f01c83e460fc7183e66410f38802866b845000f00d80f35", 0x45}], 0x1, 0x0, &(0x7f00000006c0), 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000680)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 246.773115] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 246.939668] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 246.947723] team0: Port device team_slave_0 added [ 247.298705] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 247.306906] team0: Port device team_slave_1 added [ 247.696254] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 247.703469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 247.712260] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 247.913735] IPVS: ftp: loaded support on port[0] = 21 04:04:34 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000), 0x2000005) [ 248.125002] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 248.132217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 248.140906] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 248.463393] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 248.469800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 248.477859] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 248.571959] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 248.579573] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 248.588743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready 04:04:34 executing program 0: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0xfe) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7ff}) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x2e7) getegid() r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f0000000480)={0x45fd, 0x0, 0x0, 0xc0b}) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000180)={0x2c, r2, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xf4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9206}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000300)=""/194) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f0000000000)={0x200}) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000200)=""/239) madvise(&(0x7f00001a2000/0xc00000)=nil, 0xc00000, 0x4000000000000008) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) [ 248.934264] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 248.942216] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 248.950995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready 04:04:35 executing program 0: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0xfe) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7ff}) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x2e7) getegid() r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f0000000480)={0x45fd, 0x0, 0x0, 0xc0b}) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000180)={0x2c, r2, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xf4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9206}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000300)=""/194) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f0000000000)={0x200}) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000200)=""/239) madvise(&(0x7f00001a2000/0xc00000)=nil, 0xc00000, 0x4000000000000008) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) 04:04:35 executing program 0: clone(0x4008500, 0x0, 0xfffffffffffffffe, &(0x7f0000000300), 0xffffffffffffffff) socketpair$inet(0x2, 0x0, 0x0, &(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000000)={0x4, 0x761}) exit(0x0) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000000340)={0x7b, 0x0, [0x2, 0x80000001, 0xd01a, 0x4]}) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)=0x0) write$P9_RGETATTR(r0, &(0x7f0000000240)={0xa0, 0x19, 0x2, {0x800, {0xa0, 0x3, 0x1}, 0x100, r1, r2, 0x800, 0x2, 0x100000000, 0x9, 0x8, 0x0, 0x401, 0x6, 0x56bb, 0x74, 0x4, 0x100, 0x7, 0x81, 0xffffffffffffff80}}, 0xa0) fstat(r0, &(0x7f0000000600)) [ 249.916237] 8021q: adding VLAN 0 to HW filter on device team0 04:04:36 executing program 0: r0 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000100)=0x800, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r1, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") sendto(r0, &(0x7f0000000040)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) getsockopt$sock_buf(r0, 0x1, 0x3f, &(0x7f0000000080)=""/27, &(0x7f00000000c0)=0x1b) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000002400)=""/191, 0xf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f00000002c0), 0x12, &(0x7f00000036c0)=""/64, 0x40}}], 0x400000000000258, 0x0, &(0x7f0000000300)={0x77359400}) ioctl(r1, 0x8, &(0x7f0000000000)="bb0461ccd62051e72cc58b19a022e7") ioctl$sock_netdev_private(r1, 0x89fe, &(0x7f0000000200)="5effe4d11cc6948afb44c6bc45e00646b22508c3a77b76f5d74ae8918a9434f3a209c5750ef6b58dd4fed36d2da9317469857e257ff45e667654ff51879413655465a91073e4b7b687b2afcae5fa0351a5168e6d4272558a093460e54d6cccc67cb61a1ef9f3c164061c28cf4e613e3a29ec83065efde09597459219ce8895a12378cca59b0600bf026e84b26a96956293e85ada8ca17de6aaca5608f528180a4454ed44577fe4d7e2de0434") 04:04:37 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xa) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r1, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") sendmsg$nl_route(r0, &(0x7f0000004fc8)={&(0x7f0000016000), 0xc, &(0x7f000000b000)={&(0x7f000002c000)=@mpls_newroute={0x1c, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}}, 0x1c}}, 0x0) 04:04:37 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) r1 = memfd_create(&(0x7f0000000040)='security)(!,^cpuset\x00', 0x4) ioctl$KVM_GET_XCRS(r1, 0x8188aea6, &(0x7f0000000080)={0x6, 0x4, [{0x3, 0x0, 0x5d12}, {0x9, 0x0, 0xa4}, {0x1, 0x0, 0x68}, {0x7, 0x0, 0xffffffffffffffff}, {0x100000000, 0x0, 0x19}, {0x7, 0x0, 0x9f}]}) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010407031dfffd946fa2830020200a0009000600021d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) [ 251.505937] netlink: 'syz-executor0': attribute type 6 has an invalid length. 04:04:37 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioprio_get$pid(0x1, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)=0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x0, 0x0) readlinkat(r3, &(0x7f00000011c0)='./file0\x00', &(0x7f0000001200)=""/250, 0xfa) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r2, 0x6, &(0x7f00000001c0)=""/4096) r4 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0xefa, 0x80a00) ioctl$TIOCSBRK(r4, 0x5427) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000080)) socket$xdp(0x2c, 0x3, 0x0) [ 253.428779] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.435355] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.442370] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.448821] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.457109] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 253.913482] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 254.326951] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.333609] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.342006] device bridge_slave_0 entered promiscuous mode [ 254.610283] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.617085] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.626206] device bridge_slave_1 entered promiscuous mode [ 254.886065] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 255.200822] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 255.798179] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.160557] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 256.446945] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 256.828823] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 256.835989] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 257.060411] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 257.156093] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 257.163384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 258.201262] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 258.209353] team0: Port device team_slave_0 added 04:04:44 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xcf6, 0x40000) sendmsg$alg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000300)="6cb5579f29678ce66d5ea6640272f49210d06d96c98774c0362cf34ec4853dd4f86728d8d20c4fe289683056ab3b1f62b5c76021e45c59f17322e4c976c2e7124fd035587b4940c5c5fbd434c5deaaf6048b729fd479322abcf5590eb0abc0fcc9fa12c60144f308ad5b6a67dcd3cfdee769c9cda0c40ccf5ef4b582d4c1a420028020db88fc81a4dafa553c694fc00f6f75e542cc140fde4bd8a3ff", 0x9c}, {&(0x7f00000003c0)="9745c021e27b6c7c842e7761fb29956770b198f5974e49665b708f222d9410d701b0b92eb520fdc1f25603804f41ea66edc86555735a293ade56a9e3b11afbc1820979340bd7fe48d75269ce0954d6f8798f8c49a4b4fecb57009eb658f1963045428916582b548d375f4c628ee10fb6df88aa421d7bf1cd36f726011808470f23bf100b16ba6456fadc19c8387322858d1d15550e18f8cb7e4269d6369da05ef692b73fbc9c3a06c02a2075d53ada02569fecda2266da227cbdb01c3b265497800dc1564839", 0xc6}, {&(0x7f00000004c0)="4095c10b954694f0c5eb430c33a91f139615776c099c64bc4d0cf92bda5cd1a83f67eec139d25e9f4b4fc1362df1bcfb14a3e824b79c0cd3c4fb2af85d080a1eed41ebe5853cfcd44880db2e315eab9f038b201145e26c45f372e8ceae7577d9d03358b65084260b7c0c23e36acdb493d28704a2f62dadb92126e4db4a008336d7cf570e177a35515d9dcdaf82d1ce7d1440453c730f035b037ce886216fe7d4b97eb7cb27", 0xa5}, {&(0x7f0000000580)="a48fd3d5d489608f6c52ef2161d2236dbedefdb19e61891059b6eaddff62d3af525f4d494e86a4a3f9756dcb24fa38af4878b5c97b8f82fa083ab0ec01c920fb098b077493805c80db2b28914cab776f0bf68b038af3c090db64141fae1ae7a8507b571fcfaef116d234e38590d21b8d58edc41619828ba87bc76c23a829ff1a84ae2dde88344d45ca2431648321e5ae7081a73d7f6db681f6e9d7ad036192115f379aff728f33c71346509b904539c6cf5b46dc72246658fa6ef2fde414c154aebd3f8892ba45d6cd85b52c78f4a4288b9de8abe0ec718e8e27c46ef2b63c1c2f0768b1f05adecf0f7bcf3ff1dd117a127f7f491bfe55fcf4753b6ed1db7fb4f4f91437cf88cb5764dbab4cdcfe90ce7dd245f4d3957cb692eda2310bc8c0ecd3135258dbd83fdfba3c6805d8c0e4dc28876a2448965df60cc77fc2a11c73c83c921c69c847e68399be93a282320e63841fe433c821b7bccd3dba09a0028aff1a4d1407f55829b7b7dc7c1d66be3da7b85c92128426a8cd309a6d57a8166038a2adfbdc0ee400cd1252fe09c3061f91d2c36aca188ef477663ff96c3f8577849a4aa40e17a2ea74321325fd029be1a0d2b57fd3305235735cd452e6e22536feb2136879869237fd6e72dafc9a49d00e60a8e81ae56463853ebc46efffd694f0784cd3159d9ce78632764c7c0afe8a00185affc5b9fa78cc11fa60547beeb25afaedaeb0a7c69e5988158680513e217327dcc7c2ad47619b8abc92fbd0020a0ddba1b6afc287284e3e978f985eb881e112b8ef9d585f0f16af124a7f7f0d124279f636ecf5161371375103f3d1a578774425183ed8af1ba001518abb32a0f6b3f358f5b8bd28b0240ebc5f1cdcc47048de17ffb2687e68836ea1ba7c7f3a6d900605a5e09828c9a1439e669151e1c6a9b05876776b91df0908c23e00d3e401281dda37fe4a740fcfa38ed14617b6f5827b254e2f01d832c5d84732d318ea43321b2ad44f82216907a8405ae3b9fdb28eec762981fc113ab3c5da958325996354bd8e86714f32a92da97021ca10e584047220895382541ede70092450de9c0fe937b2597255ecc18b126196f09ab4b481b540ca21d50e1f99c77a126b951292cf3066655a7df21e2f2140e90bf0752b95abc34c969b3416b6760205814f9ad5b1e87b69dff7372e1e917e513c5d908724c1f93f51eb4b1308e772c0d5ce505a6c70585de8c6a407807cad9d67bac26e7385384dc94e3adf4311b1ed6ae49cb0445c316fda8ba75e23bfd7a6923c63179517712aee77f61fd668c26008adc4a9023ccdc13ebe521479c89b65c132e1488648010d001f0230dc0d5e987149a2b60fd0902d43872b8fe9a2556499915691fc8eae3d59752aef99a2159703f91936553ce8523866fcdf4c06c3e3598a452b361827599f0043aa0f6da3dc6050876a1e4e172ea1f56cc950f2960726ecc03ce29fb78689c48a601d5f65487816d0b366941dba51b30d0c8d0ba277acb46520f37819814abee0785ceb682fe9e18466a3e27ed8ea3283bb482cc37f0f80da9bed0be84023d96f033f19f1d3cd2a10ea82126fa9e71889a49b1d6ef31113efc48148371b0a2f2740923d0ea96e69c4d049143ce70f5076881ddaa1494b23667ec3fc4ccec8399bbe0e360a5726a04ea5908c4d5d20058a6756286cb631ad263bed28540b9aeedaf216ca5356976129943bde3eb9cb28d0263f986c7a7436b9ea9527cf4295c2f0affe8b5cd1e3d3fee69802348ed5823fcb333809a7e8e4c0c3e6adb25fbdc94606e70f44c4b63e8c6d48105026a4130f134e9e3ee9f417450ae5449c4630792832a29824691f102ff2580c740608ab2d92085dba480176c95f9fdcbd9fb662edc0d167a1259c4618bade81ff8ad07c670e22cd0c333fcf6688d8c36bd25b3f51612b5150135dac90c4d3a0645a96109bfb16a1afe26d82de919fc3dd907ef537226b162fd98824a6bff4e8ad9198fd4d5761d2271999e394597b0c61d28344672dff20df2399e6f817673e662bc50068b94f8c8846b5b627736789cb9f496b18934fc9e84185820793ac46853cd23ef55a6ec368ba105ad09c1a742b070705071338f086d75e11e7fe47c696aace3d20146ed531ee0e47eb94fe092c2206cba11534f6981155ad8dc3ffb46ff11d0fddbfcf837405f7988612b6491d5046a644ec21ac36b03296cd54db7572e0cd5c0911d4f8fdbefb76a22c800749cd7c329ac7351ef5bd421bac1e9b882ef505b34139c6954bfbafe1714ed205da9e8b1427777bc5aa6d83c73984d7eff20dc8c808a253c15977ff1de972638a26ee1f2070b85b7be928f93e354525bd7d2e438b01c42e0e8ddc8eee4599370e69f8507975aa42ca0111fb1d49383bfae54c0506ffaf59c29fefa37481e5224f7f89053503a7d341605571c5a0aa86d633b2b8d210b4b0bdbdfa55754688dbe4628f6cfa7e87987d6cd724d42b19b1575c3b587e8e25edd93ad1fac590aafb93945fe369fb2f4a792c578e5ded7c204c664d289033f83da0accabf7be97beb54c00adff801f48a22d90c67202dc2f0f503e97916cd84858e26abe6ec81637caab807a2be0b079c30cae092fa5c3a2eb4961f4fbbfeceff3ec5dea102de93cc4ee7ecbf4cba29480b5902393c4fb95e232c7eb29a287515baaf9e84c9d21ec974362287f0faaa3a782b79882f0f427fd8902f994db3791615c4eb9fc29ed522e35c3490314bd32bcf342a22a7a8231a36993a74b78797784ffd41e061a622fca7cc408b57682b01aad6fd9c3438548587aa1699a0311a498224ced75056406d6367b1a8f0f57ccae096461efc343b708975fb8dba51e05abf9706bab92ea6261229df7fbfab8d46cdfcd4b8f3dcf7e961bf5a5f4b224bbbd2c0e10eb6d15406ecebb0b8412482c226e2314cc60e95c271919248d55270b7f2ddea6737bc48361cfc0bee812905750b6585bccdebc92912548645c3d27adcce1fd8287d8f5b435bd79cebf1d032c4984f1a8b2ec5de473b3f05fc9d0b89acbd11509ac04e06027c747225f68749214c6ae135521ead943b54047f9001cfa2373627ef2a5b9049c9a60c613415e8980cd206064ce1395d51d862e8d26a126877cbe30c93f67b29f5d5244e9b2f025d22bc810919e67e12eeb4950893f9bbed5a22d51a85a69cdeac76ca360a598c9533ab1e0c0c967bfdeb91ab3caab4248a57bd253463956c49da81c674026494ab5cd0922304f169a00b5f2fe67e6f0550e6bda04839d9ff4769ebc59063f3f58c1c2731a6af61572b399fa483c8f5d43f7f2138a6934fea792401fd8cc75deaed24c901bf92516e9f935754897ca617deb0dd604b4d78e65dbe7238ef40f21cf30926ae3615f9b0a7aaa8002d1ee90ed270620e9675aab13207451ffdfd9195ab86ca7870c8833ffb0665ed88f27b0cd748f751ceb7b59a584c43f7c28b979e006c18c9214c648a45dfe9f5c85f0215265eea7309e5dfad87453d98aea2fcb31ec27904205c4d559f557487bf761145bd0cc1404adb38b0f248113b85033e343418d3aa052ac726756fdb0f18ea8470a2591e4ae0abe2b85e5a1f22dc887de0f4be82dfccdd87b0a3e315f67efc9adce3a99db0f4ca27ee116d4cea874eaa70b026e359d4818d5f87f27f8466c17d3d78b1eaff82fcefceba92ea47947944bfb5d6c54034dbcfc073ef208eb7dea8b7aa842a84bbed387781c972d714340aede4db849553284462481c18d284128baeefb4ea34650769ff9c935a604151a1ab34b4a2afd5a40a6c22c39a8ef5506e4988887131af2d10ba5bf811546eb2f7f1183cceb41fb980deadadd388ba9405736c1f454146b0a7a7e51d7bd4e79892c7ad767876a2cfc327e9c74a3935ba2ba9712f1213c56e624fd113c8997d46c0329127edf6926888cdec474c90cc87d2e16c6a3fc3d460ba11f01b7c3d442dd31c7d74602596c1e4400937bc07f5479be657bfa28e73c359b0a678076492adfff7ff9f2aa6cadb4939dcc602557e800a97cbd2fcfdde7b1d6c0bfdbcb68fc04e127024cff70c1878edb94c3e27f1499dcf1772fcfaa4ca48189bf5b595901c7254137a164e89ad56d983e0f85856833a5bd3a17ccdcf2c278bcb33e2a935770818ca17e591e3c65e95383b37dd293625e12b56ec4843258e839123c02756523b5b6d528a30c3009baf4db34c9ad015c9d6a1f69c190198a0dd9d1fe5c2c9adb1f97c92ce7b563f604e518d1da9f3d1a7643710850eeb4d80f52e2fe64737c750d7303ba883dc48ad5e563700508cf953977b8979bcae4802e1192f3e0e1b6325d24e8534610f38ea00f0d911449d4742f97a67e86a0b766f6c8546d06ba9f2fbb9a8d1c4c2eac018f8051affc6daa3f3bc03c0e07481038b3b81ed028858bcb53eb09f7c0128a6a292dce70dd4a01331f06c8f6eafa2eed0d747d96f1ab06f2a928d9a51c9d82b7bebfbb0ec33912bf956fdb12b0b19b09b6747d0ca80a600f3ea81b6fa514e5d8baf7d4bb7486bb2b481c9b516688ed39419272383cb566ef6dbb7f196212412e50273b2b17805ff0ae5df98d7451dfc781c78bf8a60cfdb02aeb2268bf04146fae8fab5f16ad5555ca0ad67c63382c03ffde1acee5ffa947ddc19d9bf5bb3f5baa3b8c9bedc97a510d95fa16c58b1ec030956678b6f0383ea6bd4493e98752e26af8eedb8f9a221d791f293c67a11b6e0d01d6cadf8dd2f0ef070f3dd8b39cf9d5933d0800525d59b6ce9bbe48a304d10ea0bcdb47d0d9bd685e3f1b773dd0ad07783ce7ece0f2b9e21a9ef625061e3b792ae582451027330ae65cdb50571862fd90f03e064624c5582513028c48c31db216403147fe19022f9f62758f5e662e9772e4a254801b097bfbc7db4d9cc6cc996ad3a014709b9c525a599ac228006c04e65654b7415f43d0e4db3ec3aeb6c2b80f82947429578531e60f6e660f274d6fcfd7118e1e30a36d5502ef35b1c69d2c51bdd5f27e1dd6d27b893f8aaf9e1557838188917962075a8320622028042794bc679f0142ed3017e2bead130594d9b50bda2025c84cd5a8c6171634030160cc3cf74b081a7541a5424c00f1dba7104325d3b15a0c984944500f602c8d8b9c5cc881a17b7cd75accca7913ec0d2deab66210c1e40776032520e5dad65bbdfebe9a7c2dc993134feeca6dd5071894ce3a76bbf9dc199456dab154d37c07be1f3b520df6e8a575d06fd5316f21385a42ae13c64caef23d44d25b9d69cd9f8729e6b6530d27d05b6ef475e397edc7f6fffa57dba0fa25a3aaa32b414484f1150de0727d480fce33f86cba89f7dc46567572731e55cd86d8fce50cf8b0200118ddc1dccc7f1bfe1d7f4b88c4b7f42b8a7184f11d325cada965f37dccefb867d8dfa7d9cbbe4e0868dfb2d99c82746146545edfd78f2f61339b8e0160230ee2cd16a13104803d138867c0db2ed61a4862afe0779c1de85d603f4c7bbeaf391def96fe6de4b9a10354661ad1fc051b6be925d7e9546f6af5dde4f0c6d14e9f0add5e801cdad7b22c461cc079b4df52394e28f7ad75fbb7fba09c6f07f6d5762286a1c011418b77af1a736de9ef3d87090193a2685a0e5945ff3caefb837a02361958f36aff0e2d78afa593116714a7ae4c9ea2139e3fee1a9a4d89837c18ae0c03601adfea20c12168ae80f006919bad5402aed0b0839e24838c1d8fcd16409f64188bc2a45643e698f88c5782781e862fa050a68f110f2707896b13540254caf823dc68a121a2e84a0bc04d088f17b8d3ddc60e3", 0x1000}, {&(0x7f0000001580)="d5c39b48e1860313b240e63d1645bb876e665718d7fd63226202cd67842829e7db6e5ccc3ba6487d0d58f019e4d9e8c063442aad5ab495ec733472a7ff68633130aaef93b342c3d1f838de24f7855b25835e5c7af63e44423d4826a5a4d00a00ef1fee2d78fe8d2639a0a65eee87e163d3d55deab08e8a12d42d9c7a3c2ab980ff85ed36d4a1bcb02a55e5c3419d58b20a0cbf7181f7f873020cfbb042ce315938bd4c688ec3d60559d0b391e4167d3016a7907f758832132da3de6c6c9b64a5588435fe5c372a959cc9f54acc7a9290404e3614eeefe4e9ae2022c521f4358812b6b5429b15017a5a01666a3a3a6f16a95fc0f5eab41da4bb", 0xf9}], 0x5, 0x0, 0x0, 0x800}, 0x4000) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000003cc0)={0x0, @in={{0xa, 0x0, @multicast1}}, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x98) sendto$inet(r1, &(0x7f0000000140)="9c", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) socket$inet6(0xa, 0x537965978e125924, 0xffffffffffffffa5) fcntl$getownex(r1, 0x10, &(0x7f0000000240)={0x0, 0x0}) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000280)=r2) r3 = msgget$private(0x0, 0x1) msgctl$IPC_INFO(r3, 0x3, &(0x7f0000001740)=""/232) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x84, &(0x7f0000000000)=[@in={0x2, 0x4e24, @multicast2}, @in6={0xa, 0x4e23, 0x6, @loopback, 0x1}, @in6={0xa, 0x4e20, 0x84, @dev={0xfe, 0x80, [], 0x1f}}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x12}}, @in={0x2, 0x4e24}, @in6={0xa, 0x4e20, 0x2, @mcast2, 0xc4e}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000001c0)={0x91d, 0x0, 0x8, 0x0, 0x3, 0x1, 0x1f, 0x2, r4}, &(0x7f0000000200)=0x20) socket$inet_sctp(0x2, 0x5, 0x84) [ 258.302483] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 258.308885] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 258.316708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 258.580812] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 258.588806] team0: Port device team_slave_1 added [ 258.853874] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 258.860969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 258.869592] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 259.023057] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.076301] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 259.083548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 259.092170] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 259.316466] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 259.324182] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 259.332944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 259.553465] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 259.561003] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 259.570000] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 261.609321] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.615890] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.622891] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.629317] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.637872] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 261.646281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 263.589564] 8021q: adding VLAN 0 to HW filter on device bond0 04:04:49 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x120) write$UHID_DESTROY(r0, &(0x7f0000000200)={0xa}, 0x4) [ 263.858161] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 263.865080] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 263.871971] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 263.878738] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 263.885647] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 263.892501] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 263.899334] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 263.906191] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 263.913049] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 263.919813] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 263.926718] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 263.963742] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz1 [ 264.259643] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 264.737421] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 264.743885] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 264.751847] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 265.243977] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.762698] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.233609] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready 04:04:54 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0xa00000000000000, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180)}}}], 0x32, 0x0, &(0x7f0000000280)}) [ 268.458451] binder: 7921:7922 got reply transaction with no transaction stack [ 268.466132] binder: 7921:7922 transaction failed 29201/-71, size 0-0 line 2762 [ 268.480580] binder: undelivered TRANSACTION_ERROR: 29201 [ 268.680597] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 268.686997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 268.694863] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 268.975698] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.720893] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. 04:04:56 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timerfd_create(0x0, 0x0) clone(0x802122001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="b700000005ed0050bfa30000000000000703000028feffff7a0af0fff8ffffff71a4f0ff00000000b7060000000000012d400500000000005504000001ed00001d040000000000002c460000000000006b0a00fe000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000100)='EPL\x00'}, 0x48) getegid() exit(0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') syz_open_dev$evdev(&(0x7f0000000380)='/dev/input/event#\x00', 0x9, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f00000002c0), &(0x7f0000000300)=0x30) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0) 04:04:56 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000000c0)) ioctl$KVM_SET_PIT2(r1, 0xae71, &(0x7f00000001c0)={[{}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}]}) 04:04:56 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGBITSW(r0, 0x80084504, &(0x7f0000000040)=""/89) 04:04:56 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x24000, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000080)='trusted.overlay.opaque\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000100)=0x8001) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000140)={0x1, 0x0, @pic={0x28000000000000, 0x9, 0xaceb, 0x5, 0x7, 0x7, 0xe81, 0x0, 0x100000001, 0x4, 0x7fffffff, 0xe48, 0x623, 0x26, 0x7, 0x9}}) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r1, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100000000}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4000) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000380)) readahead(r0, 0x800, 0x1) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f00000003c0)) socket$bt_hidp(0x1f, 0x3, 0x6) write$FUSE_WRITE(r0, &(0x7f0000000500)={0x18, 0x0, 0x7, {0x3f}}, 0x18) bind$alg(r0, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f00000005c0)) clock_gettime(0x0, &(0x7f0000000600)={0x0, 0x0}) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r0, 0xc0385720, &(0x7f0000000640)={0x1, {r2, r3+10000000}, 0x401, 0xffffffff}) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000680), &(0x7f00000006c0)=0x30) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x30, r0, 0x0) fstat(r0, &(0x7f0000000700)) socket$nl_route(0x10, 0x3, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000780)) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f00000007c0)={0x0, 0x0, {0x0, 0x2f, 0xf, 0x12, 0x2, 0xc, 0x2, 0x8c, 0xffffffffffffffff}}) getsockopt$inet6_mreq(r0, 0x29, 0x1f, &(0x7f0000000800)={@remote, 0x0}, &(0x7f0000000840)=0x14) sendmsg$can_bcm(r0, &(0x7f0000000980)={&(0x7f0000000880)={0x1d, r4}, 0x10, &(0x7f0000000940)={&(0x7f00000008c0)={0x2, 0x1, 0x401, {}, {0x0, 0x7530}, {0x2, 0x7, 0x8d, 0x8001}, 0x1, @canfd={{0x1, 0x3, 0x0, 0x100}, 0x29, 0x2, 0x0, 0x0, "58da508bd1eec709f0b4e5d8f0b228f7784dbe39030157ba395bff8116be233a900935cae33b08f60f1dcf56e7712433947bd9f691fa23c59902e3b37783185f"}}, 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f00000009c0)={0x2, [0x0, 0x0]}, &(0x7f0000000a00)=0xc) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000a40)) ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000a80)={0x0, @src_change}) ioctl$DRM_IOCTL_FREE_BUFS(r0, 0x4010641a, &(0x7f0000000b80)={0x2, &(0x7f0000000b40)=[0x4e3, 0xa6]}) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r0, 0x800442d3, &(0x7f0000000bc0)={0x4, 0x8, 0x7, @empty, 'dummy0\x00'}) memfd_create(&(0x7f0000000c00)='trusted.overlay.opaque\x00', 0x4) 04:04:56 executing program 2: syz_emit_ethernet(0x3e, &(0x7f0000000100)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, @local, @dev}}}}}}, &(0x7f0000000000)={0x0, 0xffdffffffffffffe, [0x0, 0xcd0]}) 04:04:56 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0xa00000000000000, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180)}}}], 0x32, 0x0, &(0x7f0000000280)}) [ 270.950784] binder: 7992:7996 got reply transaction with no transaction stack [ 270.958321] binder: 7992:7996 transaction failed 29201/-71, size 0-0 line 2762 [ 271.018828] binder: undelivered TRANSACTION_ERROR: 29201 [ 271.098388] hrtimer: interrupt took 32389 ns 04:04:57 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ptype\x00') preadv(r0, &(0x7f0000000ac0)=[{&(0x7f00000001c0)=""/32, 0x20}], 0x1, 0x0) 04:04:57 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000980)={0x2, 0x1}, 0x10) syz_emit_ethernet(0x423, &(0x7f0000000cc0)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x415, 0x0, 0x0, 0x0, 0x200000000000011, 0x0, @rand_addr, @multicast1}, @dccp={{0x0, 0x1, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d70502", 0x0, "f53475"}, "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"}}}}}, 0x0) 04:04:57 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0xa00000000000000, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180)}}}], 0x32, 0x0, &(0x7f0000000280)}) 04:04:57 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='syscall\x00') setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000100)='tls\x00', 0xffffffffffffff79) preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000140)={'syzkaller0\x00', {0x2, 0x4e24, @local}}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000180), &(0x7f0000000200)=0x8) poll(&(0x7f0000000140), 0x0, 0x100000000) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=ANY=[], &(0x7f0000000100)='EPL\x00'}, 0x48) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r2, &(0x7f0000008000)=[{&(0x7f0000000080)}], 0x1) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f0000000240)={0x5, 0x0, 0x4, 'queue1\x00'}) 04:04:57 executing program 0: r0 = socket(0x10, 0x4, 0x6) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000a00)={0x1, [0x0]}, &(0x7f0000000a40)=0x8) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000200), &(0x7f0000000240)=0x8) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000140)=@sack_info={0x0, 0x7f, 0x4}, 0xc) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000280)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000001c0)=0x3) ioctl(r1, 0x20000000008912, &(0x7f0000000040)="0a5c2d02402b6285717070") 04:04:57 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f00000000c0)=""/12) [ 271.603972] binder: 8017:8019 got reply transaction with no transaction stack [ 271.611362] binder: 8017:8019 transaction failed 29201/-71, size 0-0 line 2762 [ 271.785487] binder: undelivered TRANSACTION_ERROR: 29201 04:04:57 executing program 1: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = gettid() wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000340)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2e}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 04:04:58 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0xa00000000000000, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180)}}}], 0x32, 0x0, &(0x7f0000000280)}) 04:04:58 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGBITSW(r0, 0x80044584, &(0x7f0000000040)=""/89) [ 272.782900] binder: 8040:8043 got reply transaction with no transaction stack [ 272.790357] binder: 8040:8043 transaction failed 29201/-71, size 0-0 line 2762 [ 272.813611] binder: undelivered TRANSACTION_ERROR: 29201 [ 273.287087] IPVS: ftp: loaded support on port[0] = 21 [ 275.932970] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.939373] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.947351] device bridge_slave_0 entered promiscuous mode [ 276.023182] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.029576] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.037585] device bridge_slave_1 entered promiscuous mode [ 276.111905] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 276.188002] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 276.414314] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 276.492384] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 276.637134] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 276.644209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 276.867441] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 276.875060] team0: Port device team_slave_0 added [ 276.950864] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 276.958599] team0: Port device team_slave_1 added [ 277.033647] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 277.112798] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 277.189808] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 277.197252] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 277.206465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 277.274349] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 277.281915] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 277.290685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 278.130892] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.137368] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.144339] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.150757] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.158835] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 278.611948] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 281.203018] 8021q: adding VLAN 0 to HW filter on device bond0 [ 281.489007] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 281.769416] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 281.775812] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 281.783859] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 282.062455] 8021q: adding VLAN 0 to HW filter on device team0 04:05:09 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x41, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000100)) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) socketpair(0x1f, 0x2, 0x100000001, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f00000000c0)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4a}) read(r2, &(0x7f0000000080)=""/19, 0xffffff5c) 04:05:09 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x12) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x404000, 0x0) ioctl$VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f0000000180)={0xf, @raw_data="d1e899698be34cb2a4c329d44ac89ec22c0dae85d5c910f21f7c848adcd3756b8f83cbb03f4c4f22222fdc532f8759c870f5f1b535a42d90ef0fe4863776dcf77817c287909e8a90c2226d5818ae7b8675f5141503ff88329fd288b3f434882f8161d0425941eccc7b8a4198cda7d55287994202bf74ccbe7f3eb4dddc7cddcc1ff3885389cc86d162c1361ebf0095a22d9d48cb06196c60fd205e4f72557a7aa0ddcf989d4d033df335d7a55619270a9ad8158795c88de6e9cb7f47f39c0979ebf7d87cedcb60a4"}) sendmsg$nl_route(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0xfffffffc}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x20, 0x10, 0x809, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}}, 0x0) 04:05:09 executing program 3: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0xa00000000000000, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180)}}}], 0x32, 0x0, &(0x7f0000000280)}) 04:05:09 executing program 1: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x100, 0x0) ioctl$TIOCLINUX2(r0, 0x541c, &(0x7f0000000200)={0x2, 0x7fff, 0xffffffffffffffc8, 0x1f80000000000, 0x3ff, 0x20}) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f0000000240)) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000240), &(0x7f0000000280)=0x4) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0, 0x0) write$UHID_SET_REPORT_REPLY(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="0e0000000200e9ff03962600a86be7a649ea0ec95ebef0f5bb044e3e000000000000067b553b0900000000000000e9be2bd735a8baafd6ef7a"], 0x32) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r2, 0x0, &(0x7f00000001c0)="0a5c5d8daccbff513ed29a") r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c00000029000d00000000000000000001000000180000000180000000000011ff0000000000ffffac1414bb2d7014a85c"], 0x2c}}, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x6) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000300)=0x8) 04:05:09 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='syscall\x00') setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000100)='tls\x00', 0xffffffffffffff79) preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000140)={'syzkaller0\x00', {0x2, 0x4e24, @local}}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000180), &(0x7f0000000200)=0x8) poll(&(0x7f0000000140), 0x0, 0x100000000) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=ANY=[], &(0x7f0000000100)='EPL\x00'}, 0x48) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r2, &(0x7f0000008000)=[{&(0x7f0000000080)}], 0x1) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f0000000240)={0x5, 0x0, 0x4, 'queue1\x00'}) 04:05:09 executing program 0: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x600000, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x2aeb4800bb21a971, 0xffffffffffffffff, 0x0) [ 284.004166] Started in network mode [ 284.007898] Own node identity ff000000, cluster identity 4711 [ 284.014139] 32-bit node address hash set to ff000000 04:05:10 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x0, 0x0) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000040)={'bridge_slave_0\x00', 0x200}) setsockopt(0xffffffffffffffff, 0x400000000ff, 0x24, &(0x7f0000000040), 0x0) 04:05:10 executing program 1: clone(0x1000000000011, &(0x7f0000000100), &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000000)) waitid(0x0, 0x0, &(0x7f0000000400), 0x401000004, &(0x7f0000000440)) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x400000, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xdc, r1, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x44, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x20}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x100}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x10000}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x400}]}, @IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'sit0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x64}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xdc2}]}, 0xdc}, 0x1, 0x0, 0x0, 0x48054}, 0x0) 04:05:10 executing program 3: syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0xa00000000000000, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180)}}}], 0x32, 0x0, &(0x7f0000000280)}) 04:05:10 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x4400010009, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0x4004510f, &(0x7f0000b18000)={{}, {0x0, 0xfffffdfd}}) 04:05:11 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r0, &(0x7f00000006c0), 0x6, 0x2) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000040)="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") 04:05:11 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000280)}) 04:05:12 executing program 5: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f00000000c0), &(0x7f0000000100)=0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={&(0x7f0000000b40), 0xc, &(0x7f00000001c0)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x24, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0xc, 0x5, [@IFLA_BRPORT_GUARD={0x8, 0x5, 0x1}]}}}]}, 0x44}}, 0x0) 04:05:12 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x8, 0x20002) sendmsg$nl_crypto(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800020}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="f80000001300200029bd7000fedbdf25726d6432353600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000200000000000000000000008000100080000000800010007000000080001007f00000000000000000000"], 0xf8}, 0x1, 0x0, 0x0, 0x40004}, 0x80) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f00000000c0)=0x4006, 0x4) sendto$inet6(r0, &(0x7f0000000780), 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x2000000000e, @mcast2}, 0x1c) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/qat_adf_ctl\x00', 0x408000, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) 04:05:12 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x3) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x4000000000020011, r1, 0x4) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="00000000000000005c66d5e4f5edb1f4a36f0d5b628ddff524be52a8298dc963e00b5f2efcffffff5043d6eb6ec4e792a9e5e9eb6c6933e9a0a2ea895e45ec0919cb3ef57a8dbf70b2bcd0ee07b77eea2adecb9595e25197303e0aa5571570c5a93efcd9ef729a35e692c99d373061fd144e029c170798c39aa9ed2d6d8bfabb477c1b1879836637a902fb51f540beb591d18faaeb3eddaadf080aae08a6b6d912d988c15a7b58496fef47248379c3041633ec75126c0c2a287d12e100fa41c98dd2d13a"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000480)=[@request_death], 0x0, 0x0, &(0x7f0000000540)}) 04:05:12 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000280)}) [ 286.583152] binder_alloc: 8369: binder_alloc_buf, no vma [ 286.588847] binder: 8369:8372 transaction failed 29189/-3, size 24-8 line 2970 [ 286.663518] binder: 8369:8375 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 286.673647] netlink: 'syz-executor5': attribute type 5 has an invalid length. [ 286.704860] binder: BINDER_SET_CONTEXT_MGR already set [ 286.710349] binder: 8369:8375 ioctl 40046207 0 returned -16 [ 286.721110] binder_alloc: 8369: binder_alloc_buf, no vma [ 286.726940] binder: 8369:8376 transaction failed 29189/-3, size 24-8 line 2970 [ 286.736512] binder: 8369:8372 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 286.744443] binder: undelivered TRANSACTION_ERROR: 29189 [ 286.753565] binder: undelivered TRANSACTION_ERROR: 29189 [ 286.830896] netlink: 'syz-executor5': attribute type 5 has an invalid length. 04:05:13 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='syscall\x00') setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000100)='tls\x00', 0xffffffffffffff79) preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000140)={'syzkaller0\x00', {0x2, 0x4e24, @local}}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000180), &(0x7f0000000200)=0x8) poll(&(0x7f0000000140), 0x0, 0x100000000) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=ANY=[], &(0x7f0000000100)='EPL\x00'}, 0x48) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r2, &(0x7f0000008000)=[{&(0x7f0000000080)}], 0x1) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f0000000240)={0x5, 0x0, 0x4, 'queue1\x00'}) 04:05:13 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000100)='net/fib_triestat\x00') renameat2(r1, &(0x7f0000000040)='./file0\x00', r2, &(0x7f0000000080)='./file0\x00', 0x1) close(r2) 04:05:13 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0x1}, 0x12) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000080), &(0x7f0000000140)=0x4) bind$unix(r1, &(0x7f000000f000)=@abs={0x1, 0x0, 0x1}, 0x6e) bind$unix(r2, &(0x7f0000000200)=@abs={0x1}, 0x6e) flistxattr(r1, &(0x7f0000000000)=""/110, 0x6e) 04:05:13 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000280)}) 04:05:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x10000) r4 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x4, 0x2140) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000340)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f00000003c0)={0x14, 0x88, 0xfa00, {r5, 0x1c, 0x0, @ib={0x1b, 0x4, 0x8, {"ec142787461ea4041ac47c24617675d8"}, 0x907, 0x3f, 0x2d}}}, 0x90) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r3, 0x40505331, &(0x7f00000001c0)={{0x0, 0x7ff}, {0x200, 0x5}, 0x6, 0x4, 0x3}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000000c000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000240)="0fea02b805000000b9000000000f01d9460f35b9a90800000f32670f07440f009c226f9600003e260f01df66baf80cb8d2e9b388ef66bafc0c66ed410f3248b8feffffffff7f00000f23d80f21f835800000b00f23f8", 0x56}], 0x1, 0x0, &(0x7f0000000340), 0x0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x1, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:05:13 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x14) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23}, 0x1c) listen(r0, 0x18) r1 = socket$inet6(0xa, 0x5, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x1, 0x400000) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000100)) ioctl$BLKALIGNOFF(0xffffffffffffffff, 0x127a, &(0x7f0000000700)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback}, @in={0x2, 0x4e23, @local}], 0x2c) 04:05:13 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000040feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000a9ca6405000000000065040400010000000704000001000000b703000000feff006a0a00fe00000000850000001a000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) 04:05:13 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0x1}, 0x12) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000080), &(0x7f0000000140)=0x4) bind$unix(r1, &(0x7f000000f000)=@abs={0x1, 0x0, 0x1}, 0x6e) bind$unix(r2, &(0x7f0000000200)=@abs={0x1}, 0x6e) flistxattr(r1, &(0x7f0000000000)=""/110, 0x6e) 04:05:14 executing program 3 (fault-call:1 fault-nth:0): r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0xa00000000000000, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180)}}}], 0x32, 0x0, &(0x7f0000000280)}) [ 288.492681] FAULT_INJECTION: forcing a failure. [ 288.492681] name failslab, interval 1, probability 0, space 0, times 1 [ 288.504328] CPU: 0 PID: 8415 Comm: syz-executor3 Not tainted 4.19.0+ #82 [ 288.511215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 288.520609] Call Trace: [ 288.523230] ================================================================== [ 288.530607] BUG: KMSAN: uninit-value in show_trace_log_lvl+0x53f/0x11e0 [ 288.537373] CPU: 0 PID: 8415 Comm: syz-executor3 Not tainted 4.19.0+ #82 [ 288.544221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 288.553575] Call Trace: [ 288.556181] dump_stack+0x419/0x480 [ 288.559823] ? show_trace_log_lvl+0x53f/0x11e0 [ 288.564437] kmsan_report+0x19f/0x300 [ 288.568255] __msan_warning+0x76/0xd0 [ 288.572063] ? stack_type_name+0x14/0xe0 [ 288.576138] show_trace_log_lvl+0x53f/0x11e0 [ 288.580578] ? dump_stack+0x32d/0x480 [ 288.584392] show_stack+0x12e/0x170 [ 288.588040] dump_stack+0x32d/0x480 [ 288.591690] should_fail+0x11e5/0x13c0 [ 288.595603] __should_failslab+0x278/0x2a0 [ 288.599855] should_failslab+0x29/0x70 [ 288.603757] __kmalloc+0xcf/0x4d0 [ 288.607221] ? _raw_spin_lock+0x1fb/0x2f0 [ 288.611375] ? binder_get_thread+0x46d/0x1200 [ 288.615891] binder_get_thread+0x46d/0x1200 [ 288.620240] binder_ioctl+0x61b/0x2850 [ 288.624147] ? kmsan_set_origin+0x83/0x130 [ 288.628405] ? do_vfs_ioctl+0x187/0x2d30 [ 288.632469] ? binder_poll+0xbe0/0xbe0 [ 288.636354] do_vfs_ioctl+0xf77/0x2d30 [ 288.640252] ? security_file_ioctl+0x92/0x200 [ 288.644752] __se_sys_ioctl+0x1da/0x270 [ 288.648727] __x64_sys_ioctl+0x4a/0x70 [ 288.652611] do_syscall_64+0xcf/0x110 [ 288.656415] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 288.661607] RIP: 0033:0x457569 [ 288.664795] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 288.683693] RSP: 002b:00007f50e614bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 288.691407] RAX: ffffffffffffffda RBX: 00007f50e614bc90 RCX: 0000000000457569 [ 288.698676] RDX: 0000000020000300 RSI: 00000000c0306201 RDI: 0000000000000003 [ 288.705942] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 288.713207] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f50e614c6d4 [ 288.720467] R13: 00000000004be858 R14: 00000000004ce830 R15: 0000000000000004 [ 288.727736] [ 288.729359] Local variable description: ----state@show_trace_log_lvl [ 288.735839] Variable was created at: [ 288.739549] show_trace_log_lvl+0xb3/0x11e0 [ 288.743866] show_stack+0x12e/0x170 [ 288.747480] ================================================================== [ 288.754824] Disabling lock debugging due to kernel taint [ 288.760265] Kernel panic - not syncing: panic_on_warn set ... [ 288.760265] [ 288.767626] CPU: 0 PID: 8415 Comm: syz-executor3 Tainted: G B 4.19.0+ #82 [ 288.775842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 288.785185] Call Trace: [ 288.787769] dump_stack+0x419/0x480 [ 288.791414] panic+0x57e/0xb28 [ 288.794629] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 288.800088] kmsan_report+0x300/0x300 [ 288.803897] __msan_warning+0x76/0xd0 [ 288.807697] ? stack_type_name+0x14/0xe0 [ 288.811755] show_trace_log_lvl+0x53f/0x11e0 [ 288.816179] ? dump_stack+0x32d/0x480 [ 288.819984] show_stack+0x12e/0x170 [ 288.823621] dump_stack+0x32d/0x480 [ 288.827252] should_fail+0x11e5/0x13c0 [ 288.831148] __should_failslab+0x278/0x2a0 [ 288.835385] should_failslab+0x29/0x70 [ 288.839274] __kmalloc+0xcf/0x4d0 [ 288.842721] ? _raw_spin_lock+0x1fb/0x2f0 [ 288.846866] ? binder_get_thread+0x46d/0x1200 [ 288.851358] binder_get_thread+0x46d/0x1200 [ 288.855685] binder_ioctl+0x61b/0x2850 [ 288.859571] ? kmsan_set_origin+0x83/0x130 [ 288.863820] ? do_vfs_ioctl+0x187/0x2d30 [ 288.867882] ? binder_poll+0xbe0/0xbe0 [ 288.871762] do_vfs_ioctl+0xf77/0x2d30 [ 288.875661] ? security_file_ioctl+0x92/0x200 [ 288.880156] __se_sys_ioctl+0x1da/0x270 [ 288.884132] __x64_sys_ioctl+0x4a/0x70 [ 288.888014] do_syscall_64+0xcf/0x110 [ 288.891811] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 288.896993] RIP: 0033:0x457569 [ 288.900181] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 288.919074] RSP: 002b:00007f50e614bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 288.926797] RAX: ffffffffffffffda RBX: 00007f50e614bc90 RCX: 0000000000457569 [ 288.934057] RDX: 0000000020000300 RSI: 00000000c0306201 RDI: 0000000000000003 [ 288.941322] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 288.948596] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f50e614c6d4 [ 288.955864] R13: 00000000004be858 R14: 00000000004ce830 R15: 0000000000000004 [ 288.964318] Kernel Offset: disabled [ 288.967946] Rebooting in 86400 seconds..