Warning: Permanently added '10.128.0.78' (ECDSA) to the list of known hosts. 2018/12/06 14:28:33 fuzzer started 2018/12/06 14:28:35 dialing manager at 10.128.0.26:38563 2018/12/06 14:28:35 syscalls: 1 2018/12/06 14:28:35 code coverage: enabled 2018/12/06 14:28:35 comparison tracing: enabled 2018/12/06 14:28:35 setuid sandbox: enabled 2018/12/06 14:28:35 namespace sandbox: enabled 2018/12/06 14:28:35 Android sandbox: /sys/fs/selinux/policy does not exist 2018/12/06 14:28:35 fault injection: enabled 2018/12/06 14:28:35 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/12/06 14:28:35 net packet injection: enabled 2018/12/06 14:28:35 net device setup: enabled 14:31:32 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x4, 0x200) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f0000000040)) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000000080)={0xe, 0x5607, 0x20}) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0xc) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f00000000c0)={0x1, 0x8}) r1 = inotify_init1(0x80000) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x20000, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000140)={0x4, {{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xe}}}}, 0x88) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000200)={0x1f, 0x2, {0x0, 0x3, 0xff, 0x2, 0x7fffffff}}) ioctl$VT_WAITACTIVE(r0, 0x5607) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000280)) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'veth0_to_bridge\x00'}) ioctl$VIDIOC_S_JPEGCOMP(r2, 0x408c563e, &(0x7f0000000300)={0x3ff, 0x1, 0x1f, "298d41707de6717943e1c56c50544e9e7a2c86b06e868f3d00997a6a9f291715fed395bf718525243f621ad2b03c7a184b3afc943440fd48d9cfb4a2", 0x30, "f0b1785cc5389b2106f35dbd4ff9eeaa45453c027a3a58a84bbdf1c0128ca47d795983b60dedc4d0709683cf5204f71a4f20b05363cf13b5edb327a0", 0x80}) r3 = syz_open_dev$mouse(&(0x7f00000003c0)='/dev/input/mouse#\x00', 0x1, 0x400400) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000400)=0x43, 0x4) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000440), &(0x7f0000000480)=0x4) r4 = getpid() ptrace$pokeuser(0x6, r4, 0xffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f00000004c0)={{{@in6=@mcast1, @in=@empty}}, {{@in6=@mcast1}, 0x0, @in=@empty}}, &(0x7f00000005c0)=0xe8) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000640)={&(0x7f0000000600)='./file0\x00', 0x0, 0x18}, 0x10) flistxattr(r5, &(0x7f0000000680)=""/4096, 0x1000) recvfrom(r3, &(0x7f0000001680)=""/217, 0xd9, 0x20, &(0x7f0000001780)=@ax25={0x3, {"dc27084cf0fc29"}, 0x7}, 0x80) fsetxattr$trusted_overlay_redirect(r5, &(0x7f0000001800)='trusted.overlay.redirect\x00', &(0x7f0000001840)='./file0\x00', 0x8, 0x2) pwrite64(r2, &(0x7f0000001880)="1f231a84d2ce3d5eccaa9380678e3d13a40c3c98afc4fe2b25619a63cac4dd2f5cbadb0af86f4be2f306299211d5f75bee2365005a83e451f1d11e635ab574c4f816945445ba38f1748337fc462c3b2a384b3d692c68ec5aad42e670217c833d266f21c3825dae04a651b232f0cdab01cfb04b4b4ff88612b8156128827e2fb9392f60e3e39fcc34a1f8c1182dafb49f8145bf7608d133e1dc4df560def57505433ba1791ed51826aed86c5c854be972586858fceba4fe5c716597c8ce3ff914ae2e05ed25cf621f29e3a77da4f032434183e3", 0xd3, 0x0) fchmod(r5, 0xa0) ioctl$TIOCSTI(r1, 0x5412, 0x0) lsetxattr(&(0x7f0000001980)='./file0\x00', &(0x7f00000019c0)=@known='system.posix_acl_access\x00', &(0x7f0000001a00)='veth0_to_bridge\x00', 0x10, 0x1) getpeername$llc(r2, &(0x7f0000001a40)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000001a80)=0x10) syzkaller login: [ 217.569470] IPVS: ftp: loaded support on port[0] = 21 14:31:32 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x2, @random="813bc8531429", 'bridge0\x00'}}) r1 = signalfd4(r0, &(0x7f0000000080)={0xad7}, 0x8, 0x80800) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f00000000c0)) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000100)=0x0) fcntl$lock(r1, 0x7, &(0x7f0000000140)={0x3, 0x3, 0x3, 0x10001, r2}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000180)={0x2, 0x7, 0x1000, 'queue1\x00', 0x8}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000240)=[@window={0x3, 0x2, 0x2c}, @timestamp, @sack_perm, @mss={0x2, 0x8000}, @mss={0x2, 0x3}, @mss={0x2, 0x3}], 0x6) syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x4, 0x6600) rt_sigprocmask(0x2, &(0x7f00000002c0)={0x800}, &(0x7f0000000300), 0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000340)={0x0, 0x60, "2d51655530b239414a6bdb7e05c064b3f3c1e2e35be51b3875b905a8c9a82fc3964310b42380d9b147b4a6bd2a5572c198257b7c7fbbda3d54cd2111004b43351e53ed0a8104448a86f1d09186b8160bb0b22040398c1fb93205f162607e33bd"}, &(0x7f00000003c0)=0x68) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000400)={r3, 0x8, 0x10, 0x2, 0x4}, &(0x7f0000000440)=0x18) bind$vsock_dgram(r0, &(0x7f0000000480)={0x28, 0x0, 0xffffffff, @my=0x0}, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000500)='team\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000540)={{{@in6, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000680)={'vcan0\x00', 0x0}) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000780)={@mcast1, 0x0}, &(0x7f00000007c0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000800)={{{@in=@broadcast, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@dev}}, &(0x7f0000000900)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000940)={{{@in6=@loopback, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@mcast2}}, &(0x7f0000000a40)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000a80)={{{@in=@dev, @in6=@ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000000b80)=0xe8) getsockopt$inet6_mreq(r0, 0x29, 0x1f, &(0x7f0000000bc0)={@remote, 0x0}, &(0x7f0000000c00)=0x14) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000001fc0)={{{@in6=@mcast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@loopback}}, &(0x7f00000020c0)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002100)={'ip6_vti0\x00', 0x0}) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000002140)={@remote, @local, 0x0}, &(0x7f0000002180)=0xc) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000021c0)={@loopback, 0x0}, &(0x7f0000002200)=0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000027c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002780)={&(0x7f0000002240)={0x52c, r4, 0x0, 0x70bd26, 0x25dfdbff, {}, [{{0x8, 0x1, r5}, {0x1a8, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r6}}}, {0x74, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x44, 0x4, [{0x2, 0x6, 0x0, 0x1000}, {0x0, 0x9, 0x0, 0xff}, {0x9e1f, 0x7, 0x0, 0x7f}, {0xca4d, 0x0, 0x1, 0x800}, {0x69a, 0x3ff, 0x2, 0x21fdb2fb}, {0x9, 0x8, 0x80, 0x5}, {0x80, 0x85b, 0xffdb, 0x8}, {0x5, 0x401, 0x0, 0x1f}]}}}, {0x7c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x4c, 0x4, [{0x3, 0x10000, 0x7ff, 0x3}, {0x1, 0xf4, 0x5, 0x6}, {0x4, 0x7, 0x1000, 0x400}, {0x4, 0xfffffffffffffffa, 0x0, 0x9}, {0x0, 0x2, 0xe10, 0x7ff}, {0x3, 0x4, 0x33, 0x4cf}, {0x7, 0x9e5, 0x4, 0xffff}, {0xda, 0x87aa, 0x1, 0x100000000}, {0x1, 0x3ff, 0x7, 0x1}]}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r7}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r9}, {0x260, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0xff80000000000000}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x7f}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0xc, 0x4, 'random\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x50000000000}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r13}}, {0x8}}}]}}, {{0x8, 0x1, r14}, {0xf8, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x3}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x14, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r15}}}]}}]}, 0x52c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002a80)={&(0x7f0000002800), 0xc, &(0x7f0000002a40)={&(0x7f0000002840)=@deltfilter={0x1cc, 0x2d, 0xf20, 0x70bd28, 0x25dfdbfc, {0x0, r6, {0xe, 0xf}, {0x3, 0xfff9}, {0xffff}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x19c, 0x2, [@TCA_CGROUP_EMATCHES={0xc, 0x3, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}, @TCA_CGROUP_ACT={0x88, 0x1, @m_sample={0x84, 0xb, {{0xc, 0x1, 'sample\x00'}, {0x34, 0x2, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x7, 0x6, 0x20000004, 0x7, 0x80000001}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x2, 0x50, 0x9, 0x3, 0xc}}]}, {0x3c, 0x6, "d4cd67861406393e0fb32b85d0ed11766bd54110ff2977512df0fb0842ab37f0329534d6bc8229d19a08a90a97471f5ccc6688c8c2aa"}}}}, @TCA_CGROUP_POLICE={0xc, 0x2, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}}, @TCA_CGROUP_ACT={0xf8, 0x1, @m_skbmod={0xf4, 0x1b, {{0xc, 0x1, 'skbmod\x00'}, {0x28, 0x2, [@TCA_SKBMOD_SMAC={0xc, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @TCA_SKBMOD_DMAC={0xc, 0x3, @dev={[], 0x1b}}, @TCA_SKBMOD_DMAC={0xc, 0x3, @random="f51464287fd4"}]}, {0xb8, 0x6, "ba554524e7201769539ab462f6341ba20c98d1e106604f185fdb54ff79a2c57f798c36af9e37bbcb987720d1d8b7427ddc4b29747548683b4c0e19d69a126cab51914f668bdbe117e07e7d93f4d63375c8140773aa58bb4b923cd91aa13eac73988e6ce37bc85beec0e5a146dd2d512063308409bc9d43367b8e0663e1331611c6a1e0c251c64453a88a1d09e3a14d075a95bd0d5d1a48519c7c2d066dabfe1ab656c2e86cd6e633f193ed7ee3193ecbb12678af"}}}}]}}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x20040001}, 0x40011) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000002b00)=@filter={'filter\x00', 0xe, 0x4, 0x518, 0x350, 0x350, 0x350, 0x350, 0xf0, 0x448, 0x448, 0x448, 0x448, 0x448, 0x4, &(0x7f0000002ac0), {[{{@uncond, 0x0, 0xc8, 0xf0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}, {{@uncond, 0x0, 0x138, 0x260, 0x0, {}, [@common=@dst={0x48, 'dst\x00', 0x0, {0x6, 0x4, 0x1, [0x8, 0x2, 0x1e8, 0x8, 0xffffffffffffff44, 0x7, 0x2, 0x4, 0x4, 0x0, 0xffffffffffffffac, 0x7f17, 0x198c, 0x7, 0x4, 0x200], 0xc}}, @common=@mh={0x28, 'mh\x00', 0x0, {0x1, 0x5}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x8, 'system_u:object_r:gpg_agent_exec_t:s0\x00'}}}, {{@uncond, 0x0, 0xc8, 0xf8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x7, 0x2, 0x10000, 0x1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x578) r16 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000c, 0x44010, r0, 0x29) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000003080)={r16}) [ 217.834166] IPVS: ftp: loaded support on port[0] = 21 14:31:32 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x63d4, 0x4000) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f00000001c0)={0x2, 0x1, 0x4f5b, 0x9f, &(0x7f0000000040)=""/159, 0x53, &(0x7f0000000100)=""/83, 0x14, &(0x7f0000000180)=""/20}) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x80000, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001640)=0x0) stat(&(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000001740)='./file0\x00', &(0x7f0000001780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000001800)={0x0}, &(0x7f0000001840)=0xc) getresuid(&(0x7f0000001880)=0x0, &(0x7f00000018c0), &(0x7f0000001900)) r7 = getpgrp(0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000001940)={0x0, 0x0}, &(0x7f0000001980)=0xc) sendmsg$unix(r1, &(0x7f0000001ac0)={&(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000015c0)=[{&(0x7f00000002c0)="501b3c1fdc45ff77a65a69d62f7e56f8f85a1f7dc1483d51420538657fa701cba01d0aa6697476b06482f43feaa643b6e53012427b66d3c29975b930db1820fe22fc633435435d4b0de41800229863545324297436df8483091c3a12a0afb3e5f44a67df61411a27bae1fa3ed03c12e0a00f509d8aff298ad3876b8f107e57b3cbd9223073e28ef9fa32ef0788d607f5fc515a185aef642de15fe4bb7e21820972706c38117091763257", 0xaa}, {&(0x7f0000000380)="c58f6592a49df2f931a05dc4e0bac21f7210344186bed9bde60484b4167c970d3c63fcf09e99762bb87b6608ba553417e70e1071f18d3026904bd76c872533f8a5a73cc46f2cce5a4cc9a15483ae4a577aa9ab3d1e6de787b11037dcee6bf3779cb65e554f1cee38de01c38a15f052b594f18d47f7c839a6db9f6835b2db7acbecf392d8be24f37d3425878eeb7bd4911b3a1b6856023f5c56015241dd24dc83a7a7210b03691b", 0xa7}, {&(0x7f0000000440)="f9a1b0bfb138dbde4fa626440a5aadd232f77a8ff66c6638ac0a2b484070e1d7ed36314ce0678fffc0ad8ee7a00147abb84868cb4d0045f1f1801dd1e9cd4da15c09946d614237f7d9791165a9304712799931e8ae22a406f45c38a243872e3b89397bfbf197c82abbe4d1630145ced28dc3ef", 0x73}, {&(0x7f00000004c0)="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", 0x1000}, {&(0x7f00000014c0)="949def5dbabe30", 0x7}, {&(0x7f0000001500)="07c81e30a6b15f4bfab952fe00b83314174259210569825640c4677b245f79b033ed4c976c194cde46eeb75744afd49f18d93ba9c4dc7c07a25adfc4b2e246cd6626da65003116d821eab8b255f63d7ef12f1eab26a2cb791e30d0369c64646961bacd5a7e4b8f09a53a7c7c69cae8652cc9aa651a23111e7c5f337b94abdcc7ed44bb56d52c9d4326c2f5", 0x8b}], 0x6, &(0x7f00000019c0)=[@rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r2, r3, r4}, @rights={0x20, 0x1, 0x1, [r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r5, r6, 0xee01}, @rights={0x30, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r7, r9, 0xee00}], 0xd8, 0x20000000}, 0x20040011) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000001b00)=0x9a, 0x4) r10 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001b40)='/dev/snapshot\x00', 0x200000, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r10, 0x12, 0x2, &(0x7f0000001b80)=""/44, &(0x7f0000001bc0)=0x2c) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x8, 0x4) setsockopt$netlink_NETLINK_PKTINFO(r10, 0x10e, 0x3, &(0x7f0000001c00)=0x1, 0x4) r11 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c40)='/dev/zero\x00', 0x4102, 0x0) ioctl$RTC_AIE_OFF(r11, 0x7002) unshare(0x40000000) ioctl$RTC_WIE_OFF(r11, 0x7010) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000001c80)={'teql0\x00', {0x2, 0x4e22, @loopback}}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r10, 0x84, 0x7c, &(0x7f0000001cc0)={0x0, 0x2, 0x8}, &(0x7f0000001d00)=0x8) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000001d40)={r12, @in6={{0xa, 0x4e22, 0x448, @local, 0x647}}}, 0x84) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r10, 0x6, 0x23, &(0x7f0000001e00)={&(0x7f0000ffc000/0x1000)=nil, 0x1000}, &(0x7f0000001e40)=0x10) get_robust_list(r8, &(0x7f0000001f40)=&(0x7f0000001f00)={&(0x7f0000001e80), 0x0, &(0x7f0000001ec0)}, &(0x7f0000001f80)=0x18) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r10, 0x4008ae48, &(0x7f0000001fc0)=0x2) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000002000)={r12, 0xfff, 0x2}, &(0x7f0000002040)=0x8) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002080)='/dev/dlm-monitor\x00', 0x400000, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r11) ioctl$int_out(r0, 0x5460, &(0x7f00000020c0)) [ 218.128570] IPVS: ftp: loaded support on port[0] = 21 14:31:33 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xf, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x27}, @map={0x18, 0x7, 0x1, 0x0, 0xffffffffffffff9c}, @ldst={0x1, 0x2, 0x7, 0x1, 0xf, 0x0, 0xfffffffffffffffd}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x7}, @alu={0x7, 0xfe7, 0x8, 0xf, 0x0, 0xfffffffffffffff4, 0x1}, @ldst={0x3, 0x0, 0x2, 0x1, 0xd, 0xfffffffffffffffe, 0x10}, @map={0x18, 0x1}, @call={0x85, 0x0, 0x0, 0x43}, @ldst={0x2, 0x1, 0x1, 0x7, 0xf, 0xfffffffffffffff0, 0xfffffffffffffff0}]}, &(0x7f0000000080)='syzkaller\x00', 0x1f, 0x3e, &(0x7f00000000c0)=""/62, 0x41100, 0x1, [], 0x0, 0xc}, 0x48) r1 = signalfd(r0, &(0x7f0000000180)={0x7}, 0x8) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r1, 0x80dc5521, &(0x7f00000001c0)=""/193) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) stat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_xen(&(0x7f00000002c0)='wlan1vboxnet0{eth0md5sum}\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x1000, &(0x7f0000000500)={'trans=xen,', {[{@dfltuid={'dfltuid', 0x3d, r3}}, {@nodevmap='nodevmap'}, {@nodevmap='nodevmap'}, {@access_user='access=user'}, {@afid={'afid', 0x3d, 0x6}}, {@cache_none='cache=none'}, {@loose='loose'}, {@privport='privport'}, {@cachetag={'cachetag', 0x3d, 'syzkaller\x00'}}], [{@dont_measure='dont_measure'}, {@dont_appraise='dont_appraise'}, {@uid_lt={'uid<', r4}}, {@permit_directio='permit_directio'}, {@dont_hash='dont_hash'}]}}) r6 = syz_open_dev$media(&(0x7f0000000600)='/dev/media#\x00', 0x1, 0x800) ioctl$LOOP_SET_FD(r6, 0x4c00, r2) ioctl$KVM_ASSIGN_PCI_DEVICE(r6, 0x8040ae69, &(0x7f0000000640)={0xfff, 0xc8, 0x6, 0x1, 0x81}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r6, 0xc0a85320, &(0x7f0000000680)={{0x7802fcda, 0xbc0}, 'port0\x00', 0x2, 0x10070, 0x2, 0x2, 0xffff, 0x0, 0x5, 0x0, 0x4, 0x6}) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, &(0x7f0000000740)=0x44, 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000780)={0x3, [0x0, 0x0, 0x0]}, &(0x7f00000007c0)=0x10) syz_open_dev$sndseq(&(0x7f0000000800)='/dev/snd/seq\x00', 0x0, 0x0) bind(r2, &(0x7f0000000840)=@nl=@unspec, 0x80) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000008c0)=0x0) fcntl$lock(r0, 0x0, &(0x7f0000000900)={0x1, 0x2, 0x5, 0x8, r7}) ioctl$KVM_CHECK_EXTENSION_VM(r6, 0xae03, 0x7) timerfd_gettime(r6, &(0x7f0000000940)) r8 = dup2(r2, r1) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000980)=0xe31f847d55ee6173, 0x4) socket$rds(0x15, 0x5, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r8, 0x84, 0x16, &(0x7f00000009c0)={0x1, [0x1eab9050]}, 0x6) r9 = syz_open_dev$mouse(&(0x7f0000000a00)='/dev/input/mouse#\x00', 0x3, 0x20000) ioctl$EVIOCRMFF(r9, 0x40044581, &(0x7f0000000a40)=0x8) setgid(r5) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000a80), 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r6, 0x400442c8, &(0x7f0000000ac0)={r9, 0x200, 0x17, "6b4be45c32917d1f34e67ecca5358bccc1dd2bfabbd9ecfbd84b2dedb1d25d3ab6a6f1e027527e3f57f88029f117f6d294faa65f557d53551db8def57907c00ff9f009614a838daf609e8a7c86e783e7d82bc199e66f806ea389a97510ed3298788cb546a16def4c35ded547fc08ecd1a195ef05e8b57725cec410a3f391194defdc51875f093c75986753ffa4bcaf12f72d3988e278ddfc9023d2ad254b7ed5798268c468ea881d65365125ec2bd5e7d0f2cca9ad79e16d051b87bd086492c07e06bf5770fd95b47209fc"}) ioctl$UI_SET_KEYBIT(r8, 0x40045565, 0x1f0) [ 218.681989] IPVS: ftp: loaded support on port[0] = 21 14:31:33 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f0000000040)={[{0xffff, 0x6, 0x7fffffff, 0x3, 0x1, 0x0, 0x0, 0x7fff, 0x401, 0x9, 0x9, 0x2, 0x81}, {0x9, 0xfc55, 0x7fffffff, 0x10001, 0xffffffff00000000, 0x5, 0x80000001, 0x57, 0x44, 0x7fff, 0x81, 0x4, 0x1}, {0x7954, 0x1, 0x9, 0x100000000, 0x0, 0xb772, 0x100, 0x5, 0xa2, 0x2, 0x99, 0xe8}]}) ioctl$sock_netdev_private(r0, 0x89f8, &(0x7f00000000c0)="52419a2cec0d5552e484bf37f68898f420410b1dce2ab45bf40f4e564b1adac40c30330eac115bb4f712661b19db91e9c5e5b5acd6c4c456ed27292f4c410a3b0f71693592d827885a3d49bdb71db333601ceeabb6c86807fd5a8b60012cbc9bdd640dd2f59c2ea476dfd9995cc1f64c60") ioctl$VIDIOC_DBG_S_REGISTER(r0, 0x4038564f, &(0x7f0000000140)={{0x7, @addr=0x6}, 0x8, 0x2, 0x8}) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000180)={{0x2, 0x4e22, @broadcast}, {0x1, @dev={[], 0xe}}, 0x20, {0x2, 0x4e23, @rand_addr=0xc601}, 'yam0\x00'}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}, &(0x7f0000000240)=0x10) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000280)={0x8, 0x6, 0x3f, 0x7, 0x0, 0x0, 0x8, 0x0, 0x9, 0xfffffffffffffffa}) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f00000002c0), &(0x7f0000000300)=0x4) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f0000000340)={[{0x6, 0x6, 0x100, 0x9d4, 0x5, 0x8, 0x7ff, 0x1e132a7a, 0x1f, 0x401, 0x10000, 0x4, 0xa446}, {0x4, 0x4, 0xffffffff, 0xffffffff, 0x0, 0x7ff, 0x5657, 0x1f, 0x6, 0x20, 0x7, 0x5, 0x4}, {0x2, 0xfffffffffffffc00, 0x7fffffff, 0x3, 0x3, 0x5, 0xa8f, 0x8, 0x0, 0x80, 0x7e4, 0x3f, 0x7f}], 0xd6a}) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000440)={&(0x7f00000003c0)=""/70, 0x4000, 0x800}, 0x18) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000480)={0x0, 0x0, 0x2080}) sysinfo(&(0x7f0000002500)=""/145) accept4$alg(r0, 0x0, 0x0, 0x80000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000002700)={0x24, 0x0, &(0x7f00000025c0)=[@decrefs={0x40046307, 0x1}, @increfs={0x40046304, 0x1}, @clear_death={0x400c630f, 0x2}, @register_looper], 0xd8, 0x0, &(0x7f0000002600)="19e32a3356bd577961218b641f59612dc0c481603e058f52ff7521cac2dd0a6f7941127d3e1ae6d562a440f70ce5232a4d3d3262ffd9b1f7a0eb7ff328ecab3f3cb37c6428c043080c8e6d10f6bc826bc0933f770cae3d98ef412170c8c7bfb992d8a078bec418c125c824762cece09d439bad97ed04dc84cac70211c49a8b6495c79946136368540f444f2a5a7323779f1239d8164af2ab797a4853bc6671b25048ae6aba5bdaf51c93abf68090bbc981854bfde9776f2252763820ee941c0764139235d915b9ce8bbeca792a9310ce9358278a4a4b37ed"}) fgetxattr(r0, &(0x7f0000002740)=@known='trusted.overlay.redirect\x00', &(0x7f0000002780)=""/47, 0x2f) r1 = syz_open_dev$adsp(&(0x7f00000027c0)='/dev/adsp#\x00', 0x1000, 0x1) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000002800)={0x0, 0x80000001}, &(0x7f0000002840)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000002880)={r2, @in6={{0xa, 0x4e21, 0x2324, @remote, 0x7}}, 0x6, 0x80000001}, 0x90) ioctl$VIDIOC_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f0000002940)={0x0, @reserved}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002a40)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000002bc0)={&(0x7f0000002a00), 0xc, &(0x7f0000002b80)={&(0x7f0000002a80)={0xc8, r3, 0x706, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8000}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffffffffc01}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x97f}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffffffff001}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7ff}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x5}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x840}, 0x800) r4 = shmget$private(0x0, 0x3000, 0x1, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_STAT(r4, 0x2, &(0x7f0000002c00)=""/49) ioctl$SG_SET_COMMAND_Q(r1, 0x2271, &(0x7f0000002c40)) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000002c80)=0x7fffffff, 0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000002cc0)={{0xffffffffffffffff, 0x3, 0x31da, 0x3, 0x9}, 0x9, 0x800, 0x80000000}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000002d40)={'ifb0\x00', 0x1010}) arch_prctl$ARCH_SET_GS(0x1001, 0x40) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000002d80)=0x40, 0x4) setxattr$trusted_overlay_upper(&(0x7f0000002dc0)='./file0\x00', &(0x7f0000002e00)='trusted.overlay.upper\x00', &(0x7f0000002e40)={0x0, 0xfb, 0x4f, 0x2, 0x8, "976eda461a89a290ac22549a4dadb6b6", "a44f2aebbef8995d2545c8a803240b7fcd306b556d2497fb2347389bda3484ec2c0f995b7147f01d83b55e2fead811700d592a34cddc124d8684"}, 0x4f, 0x2) [ 218.983191] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.009571] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.022917] device bridge_slave_0 entered promiscuous mode [ 219.188130] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.203853] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.214983] device bridge_slave_1 entered promiscuous mode [ 219.232484] IPVS: ftp: loaded support on port[0] = 21 [ 219.416892] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready 14:31:34 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2) getsockopt$inet_tcp_buf(r0, 0x6, 0x2f, &(0x7f0000000040)=""/150, &(0x7f0000000100)=0x96) ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x100000001) ioctl$int_in(r0, 0x5421, &(0x7f0000000180)=0x4) r1 = syz_open_dev$sndctrl(&(0x7f00000001c0)='/dev/snd/controlC#\x00', 0xbe6, 0x20000) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000240)) name_to_handle_at(r2, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x53, 0x7f, "64227c0a0812739d321feeccd870cb604f5b7d38a626f08905ba0e7b2a68578feeb6528e347a2022b6a67d0789ec8d4c6a4592209d845b407b777dbf48e7401bee0d5f21035855a659c8cb"}, &(0x7f0000000340), 0x1000) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) ioctl$int_out(r1, 0x2, &(0x7f0000000380)) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f00000003c0)=0x2, 0x4) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000400)={0x6, 0x5, 0x6001, 0x9, 0x3, 0x73afc13f, 0x1ff}) ftruncate(r0, 0x6) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000440)={0xbff, 0x6, 0x2}) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000480)={0x0, 0x7d}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000500)={r3, 0xf8}, &(0x7f0000000540)=0xc) ioctl$SG_GET_SG_TABLESIZE(r2, 0x227f, &(0x7f0000000580)) setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f00000005c0)=0x1, 0x4) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000600)={0x2d, @multicast1, 0x4e24, 0x2, 'nq\x00', 0x1a, 0x4, 0x8}, 0x2c) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000000640)=""/2) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000680)=""/15) ioctl$SG_GET_SG_TABLESIZE(r2, 0x227f, &(0x7f00000006c0)) ioctl$DRM_IOCTL_VERSION(r2, 0xc0406400, &(0x7f0000000980)={0x4, 0x7, 0x4, 0x90, &(0x7f0000000700)=""/144, 0xb7, &(0x7f00000007c0)=""/183, 0xed, &(0x7f0000000880)=""/237}) write$FUSE_NOTIFY_DELETE(r0, &(0x7f00000009c0)={0x3c, 0x6, 0x0, {0x1, 0x0, 0x13, 0x0, '/dev/snd/controlC#\x00'}}, 0x3c) syz_open_dev$video4linux(&(0x7f0000000a00)='/dev/v4l-subdev#\x00', 0x5, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0xc) recvfrom$unix(r0, &(0x7f0000000a40)=""/185, 0xb9, 0x2000, &(0x7f0000000b00)=@file={0x1, './file0\x00'}, 0x6e) openat$uinput(0xffffffffffffff9c, &(0x7f0000000b80)='/dev/uinput\x00', 0x802, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000bc0)={0x0, @rand_addr, @multicast2}, &(0x7f0000000c00)=0xc) exit_group(0x8) [ 219.557492] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 219.729891] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.759912] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.784398] device bridge_slave_0 entered promiscuous mode [ 219.865045] IPVS: ftp: loaded support on port[0] = 21 [ 219.906315] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 219.935058] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.941581] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.953029] device bridge_slave_1 entered promiscuous mode [ 220.014710] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 220.066466] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 220.079713] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.098501] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.106241] device bridge_slave_0 entered promiscuous mode [ 220.188702] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 220.204423] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.212241] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.224323] device bridge_slave_1 entered promiscuous mode [ 220.334839] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 220.469600] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 220.586732] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 220.669327] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 220.696290] team0: Port device team_slave_0 added [ 220.759494] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 220.785695] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 220.792999] team0: Port device team_slave_1 added [ 220.810619] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.821641] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.844877] device bridge_slave_0 entered promiscuous mode [ 220.898222] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 220.905503] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 220.925288] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 220.957075] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 220.983748] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.990229] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.005185] device bridge_slave_1 entered promiscuous mode [ 221.011876] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 221.028424] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 221.043712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 221.051452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 221.074676] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 221.094465] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 221.117745] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 221.135671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 221.153088] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 221.177636] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 221.190057] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 221.206986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 221.235037] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 221.276679] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 221.294115] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 221.302081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 221.343323] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.369195] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.384146] device bridge_slave_0 entered promiscuous mode [ 221.525818] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.563504] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.570887] device bridge_slave_1 entered promiscuous mode [ 221.589558] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 221.604448] team0: Port device team_slave_0 added [ 221.651671] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 221.683883] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 221.707782] team0: Port device team_slave_1 added [ 221.714852] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 221.825081] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 221.835135] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 221.841976] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 221.851047] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 221.892034] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 221.913138] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 221.934093] team0: Port device team_slave_0 added [ 221.948110] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 221.974887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 221.996087] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 222.007576] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 222.032491] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 222.076095] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 222.086250] team0: Port device team_slave_1 added [ 222.123601] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 222.130753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 222.149269] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 222.172516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 222.203968] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 222.215222] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.221584] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.234051] device bridge_slave_0 entered promiscuous mode [ 222.243063] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 222.270495] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 222.291949] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 222.314249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 222.324990] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 222.343687] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 222.363974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 222.375544] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.381981] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.389028] device bridge_slave_1 entered promiscuous mode [ 222.413827] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 222.474778] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 222.524410] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 222.536515] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 222.555288] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 222.574289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 222.615267] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 222.622580] team0: Port device team_slave_0 added [ 222.639249] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 222.652261] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 222.677498] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 222.704323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 222.714337] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 222.733892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 222.793565] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 222.803917] team0: Port device team_slave_1 added [ 222.923101] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 222.945031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 222.960282] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 222.978152] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.984798] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.991828] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.998268] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.010352] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 223.057587] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 223.086903] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 223.102223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 223.117905] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 223.201110] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 223.227171] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 223.264777] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 223.273813] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 223.303279] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 223.320054] team0: Port device team_slave_0 added [ 223.374688] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 223.382101] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 223.398361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 223.459343] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 223.484114] team0: Port device team_slave_1 added [ 223.591412] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 223.683896] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 223.705739] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 223.714277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 223.722182] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 223.824381] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 223.842511] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 223.854279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 223.931180] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.937601] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.944301] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.950656] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.968914] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 223.976389] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 223.989253] team0: Port device team_slave_0 added [ 224.000294] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.006712] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.013408] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.019767] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.027386] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 224.044408] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 224.064227] team0: Port device team_slave_1 added [ 224.069664] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 224.092317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 224.112975] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 224.148011] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 224.174033] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 224.182603] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 224.277071] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 224.404198] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 224.411537] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 224.429770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 224.590993] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 224.613099] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 224.629171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 224.693817] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 224.700993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 224.763252] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.769692] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.776426] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.782807] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.807084] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 225.469030] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.475485] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.482130] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.488558] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.523729] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 225.756304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 225.765416] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 225.852230] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.858685] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.865416] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.871803] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.880655] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 226.793562] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 228.264448] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.633846] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 228.808557] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.040746] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 229.063728] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 229.072462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 229.197070] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.323952] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 229.447415] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.583971] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.677517] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 229.760643] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 229.783484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 229.793614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 230.021439] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 230.110535] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 230.117317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 230.134055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 230.221195] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.397396] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.487835] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 230.499278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 230.514040] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 230.537825] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.690207] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.790063] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 230.954960] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.118986] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 231.212285] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 231.218533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 231.237880] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 231.597181] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 231.605182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 231.613981] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 231.657556] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.034360] 8021q: adding VLAN 0 to HW filter on device team0 14:31:47 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm-control\x00', 0x400148, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x2c4, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0xffffffffffffffff, 0xfe, 0x0, 0x0, 0x5}, 0x0, 0x0, r0, 0x0) r1 = epoll_create(0x143) r2 = epoll_create(0x4) r3 = epoll_create(0x7fffffff) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f000000e000)) fsetxattr$trusted_overlay_opaque(r3, &(0x7f0000000300)='trusted.overlay.opaque\x00', &(0x7f0000000040)='y\x00', 0x2, 0x2) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f000000dff4)) epoll_create(0x401) r4 = epoll_create(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r6 = creat(&(0x7f0000000140)='./file0\x00', 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000180)=0xc) fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', r7, 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @multicast1}, {0x2, 0x4e23, @remote}, {0x2, 0x0, @loopback}, 0x100, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x9b}) unshare(0x400) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000240)=""/117) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000500)={{{@in=@loopback}}, {{@in6=@remote}, 0x0, @in=@remote}}, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000380)) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x80, 0x0) lseek(r0, 0x0, 0x3) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) r9 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, r9) syz_open_dev$video4linux(&(0x7f0000000200)='/dev/v4l-subdev#\x00', 0x43194f85, 0x20000) ioctl$LOOP_CTL_ADD(r8, 0x4c80, 0x0) syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) [ 232.478550] hrtimer: interrupt took 33951 ns 14:31:47 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm-control\x00', 0x400148, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x2c4, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0xffffffffffffffff, 0xfe, 0x0, 0x0, 0x5}, 0x0, 0x0, r0, 0x0) r1 = epoll_create(0x143) r2 = epoll_create(0x4) r3 = epoll_create(0x7fffffff) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f000000e000)) fsetxattr$trusted_overlay_opaque(r3, &(0x7f0000000300)='trusted.overlay.opaque\x00', &(0x7f0000000040)='y\x00', 0x2, 0x2) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f000000dff4)) epoll_create(0x401) r4 = epoll_create(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r6 = creat(&(0x7f0000000140)='./file0\x00', 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000180)=0xc) fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', r7, 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @multicast1}, {0x2, 0x4e23, @remote}, {0x2, 0x0, @loopback}, 0x100, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x9b}) unshare(0x400) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000240)=""/117) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000500)={{{@in=@loopback}}, {{@in6=@remote}, 0x0, @in=@remote}}, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000380)) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x80, 0x0) lseek(r0, 0x0, 0x3) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) r9 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, r9) syz_open_dev$video4linux(&(0x7f0000000200)='/dev/v4l-subdev#\x00', 0x43194f85, 0x20000) ioctl$LOOP_CTL_ADD(r8, 0x4c80, 0x0) syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) [ 232.975230] IPVS: ftp: loaded support on port[0] = 21 [ 233.209360] IPVS: ftp: loaded support on port[0] = 21 14:31:48 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0xfffffffffffffffb) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0xc0f85403) 14:31:48 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm-control\x00', 0x400148, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x2c4, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0xffffffffffffffff, 0xfe, 0x0, 0x0, 0x5}, 0x0, 0x0, r0, 0x0) r1 = epoll_create(0x143) r2 = epoll_create(0x4) r3 = epoll_create(0x7fffffff) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f000000e000)) fsetxattr$trusted_overlay_opaque(r3, &(0x7f0000000300)='trusted.overlay.opaque\x00', &(0x7f0000000040)='y\x00', 0x2, 0x2) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f000000dff4)) epoll_create(0x401) r4 = epoll_create(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r6 = creat(&(0x7f0000000140)='./file0\x00', 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000180)=0xc) fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', r7, 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @multicast1}, {0x2, 0x4e23, @remote}, {0x2, 0x0, @loopback}, 0x100, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x9b}) unshare(0x400) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000240)=""/117) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000500)={{{@in=@loopback}}, {{@in6=@remote}, 0x0, @in=@remote}}, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000380)) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x80, 0x0) lseek(r0, 0x0, 0x3) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) r9 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, r9) syz_open_dev$video4linux(&(0x7f0000000200)='/dev/v4l-subdev#\x00', 0x43194f85, 0x20000) ioctl$LOOP_CTL_ADD(r8, 0x4c80, 0x0) syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) 14:31:48 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffffffffc00, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x7, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x1, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x400007) fstat(0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$KVM_GET_FPU(r4, 0x81a0ae8c, &(0x7f0000000340)) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000040)={0x0, 0x100}) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x0) ioctl$EXT4_IOC_MIGRATE(r4, 0x6609) setsockopt$inet_sctp_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000080)={0x10000, 0x3, 0xd4cc0, 0x800, 0x3, 0x7, 0x7fffffff, 0x1, 0x67, 0x92, 0x9a87}, 0xb) ioctl$KDSKBMODE(r3, 0x4b45, &(0x7f0000000100)=0x2) shmget(0x2, 0x4000, 0x1001, &(0x7f0000ffc000/0x4000)=nil) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)={r1, r2, 0x7, 0x3}, 0x10) 14:31:48 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm-control\x00', 0x400148, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x2c4, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0xffffffffffffffff, 0xfe, 0x0, 0x0, 0x5}, 0x0, 0x0, r0, 0x0) r1 = epoll_create(0x143) r2 = epoll_create(0x4) r3 = epoll_create(0x7fffffff) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f000000e000)) fsetxattr$trusted_overlay_opaque(r3, &(0x7f0000000300)='trusted.overlay.opaque\x00', &(0x7f0000000040)='y\x00', 0x2, 0x2) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f000000dff4)) epoll_create(0x401) r4 = epoll_create(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r6 = creat(&(0x7f0000000140)='./file0\x00', 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000180)=0xc) fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', r7, 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @multicast1}, {0x2, 0x4e23, @remote}, {0x2, 0x0, @loopback}, 0x100, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x9b}) unshare(0x400) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000240)=""/117) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000500)={{{@in=@loopback}}, {{@in6=@remote}, 0x0, @in=@remote}}, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000380)) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x80, 0x0) lseek(r0, 0x0, 0x3) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) r9 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, r9) syz_open_dev$video4linux(&(0x7f0000000200)='/dev/v4l-subdev#\x00', 0x43194f85, 0x20000) ioctl$LOOP_CTL_ADD(r8, 0x4c80, 0x0) syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) 14:31:48 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1092, r0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)}}, 0x20) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0xfffffffffffffffe, &(0x7f0000000080), &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000140)) 14:31:48 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x40000, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=')'}) 14:31:50 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e1, &(0x7f0000000040)) 14:31:50 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm-control\x00', 0x400148, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x2c4, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0xffffffffffffffff, 0xfe, 0x0, 0x0, 0x5}, 0x0, 0x0, r0, 0x0) r1 = epoll_create(0x143) r2 = epoll_create(0x4) r3 = epoll_create(0x7fffffff) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f000000e000)) fsetxattr$trusted_overlay_opaque(r3, &(0x7f0000000300)='trusted.overlay.opaque\x00', &(0x7f0000000040)='y\x00', 0x2, 0x2) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f000000dff4)) epoll_create(0x401) r4 = epoll_create(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r6 = creat(&(0x7f0000000140)='./file0\x00', 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000180)=0xc) fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', r7, 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @multicast1}, {0x2, 0x4e23, @remote}, {0x2, 0x0, @loopback}, 0x100, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x9b}) unshare(0x400) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000240)=""/117) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000500)={{{@in=@loopback}}, {{@in6=@remote}, 0x0, @in=@remote}}, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000380)) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x80, 0x0) lseek(r0, 0x0, 0x3) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) r9 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, r9) syz_open_dev$video4linux(&(0x7f0000000200)='/dev/v4l-subdev#\x00', 0x43194f85, 0x20000) ioctl$LOOP_CTL_ADD(r8, 0x4c80, 0x0) 14:31:50 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000000)="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", 0xfc) bind$pptp(r0, &(0x7f0000000100)={0x18, 0x2, {0x0, @local}}, 0x1e) 14:31:50 executing program 3: socket$l2tp(0x18, 0x1, 0x1) r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = dup(r0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f00000000c0)=""/44, &(0x7f0000000100)=0x2c) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f0000000080)={r2, 0x31}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'team_slave_1\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x13}}) 14:31:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1}, [@generic="44a3c35300"]}, 0x1c}}, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000300)='/dev/radio#\x00', 0x0, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r2, 0x7fff, 0x0, 0x0, 0x0, @in={0x2, 0x4e24, @multicast2}, @ib={0x1b, 0x100000001, 0xffffffffffffffff, {"0685b773eb4a574d8365dbb8b7d5f935"}, 0x7fff, 0x9, 0x1}}}, 0x118) 14:31:50 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) 14:31:50 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) 14:31:50 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f0000000200)=""/147, 0x20000}, 0x18) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0xffffffffffffffa2, &(0x7f00000000c0), 0x282, &(0x7f0000000000)=[@rights={0x18, 0x1, 0x1, [r1, r0]}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000002b80)=[{{&(0x7f0000000080)=@nfc_llcp, 0x80, &(0x7f0000000040), 0x8d, &(0x7f0000002b40)=""/44, 0x2}}], 0x400000000000085, 0x0, &(0x7f0000002cc0)={0x0, 0x1c9c380}) 14:31:50 executing program 2: r0 = socket$inet6(0xa, 0x1000000000000001, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'bond0\x00'}) 14:31:50 executing program 5: perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x859, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x80000000002) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x8000000000000053, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000200)="24f6170e9d92", 0x0, 0x0, 0x0, 0x0, 0x0}) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) 14:31:50 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000480)={'erspan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000003c0)={0x1d, r1}, 0x10) 14:31:50 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) open(&(0x7f0000000000)='./file0\x00', 0x141042, 0x0) 14:31:50 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.stat\x00', 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x7c774aac) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000001c0)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000480)='IPVS\x00') write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f454c4600000104030000000000000002003f00716e830b940200003800000000000000010001000000200002000700050081000000000057e5747406000000010000800000000000000000050000000100000006000000a8bcd3a553608bfda69ed9e19a764f8a13286e3c375d96dc5fea858408567314d8840dde41dad9d09277807b372b92da534bba397eb796e11d86f433f2c1152255217fd3316c75e845a37692cf1ecd4fdf244ba7ba36b737092b3669f500000000000000000000000000000000000000000000000000000000000000"], 0xd4) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x300000a, 0x2011, r1, 0x0) mmap(&(0x7f0000a35000/0x400000)=nil, 0x400000, 0x1000006, 0x2013, r1, 0x0) socket$rds(0x15, 0x5, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000006c0)={0x800, 0x8201, 0x4, 0x7, 0x0}, &(0x7f0000000700)=0x10) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000007c0)={r2, @in6={{0xa, 0x4e23, 0x0, @dev, 0x5}}}, 0x84) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000003c0)={'mangle\x00'}, &(0x7f0000000440)=0x54) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000000480)={&(0x7f0000000380)={0x2, 0x0, @dev}, 0x10, &(0x7f00000004c0), 0x0, &(0x7f0000000240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000000)=""/57, 0x39}, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1}}], 0x48}, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000600), &(0x7f0000000640)=0x4) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000200)=@srh={0x3f, 0x2, 0x4, 0x1, 0x1f, 0x50, 0x6, [@empty]}, 0x18) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000740), &(0x7f0000000880)=0x4) connect$l2tp(r0, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x0, 0x4, 0x0, {0xa, 0x0, 0x5, @local}}}, 0x3a) socket$rds(0x15, 0x5, 0x0) ioctl$sock_bt_bnep_BNEPCONNDEL(r1, 0x400442c9, &(0x7f0000000680)={0x100000000, @broadcast}) 14:31:51 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm-control\x00', 0x400148, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x2c4, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0xffffffffffffffff, 0xfe, 0x0, 0x0, 0x5}, 0x0, 0x0, r0, 0x0) r1 = epoll_create(0x143) r2 = epoll_create(0x4) r3 = epoll_create(0x7fffffff) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f000000e000)) fsetxattr$trusted_overlay_opaque(r3, &(0x7f0000000300)='trusted.overlay.opaque\x00', &(0x7f0000000040)='y\x00', 0x2, 0x2) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f000000dff4)) epoll_create(0x401) r4 = epoll_create(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r6 = creat(&(0x7f0000000140)='./file0\x00', 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000180)=0xc) fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', r7, 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @multicast1}, {0x2, 0x4e23, @remote}, {0x2, 0x0, @loopback}, 0x100, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x9b}) unshare(0x400) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000240)=""/117) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000500)={{{@in=@loopback}}, {{@in6=@remote}, 0x0, @in=@remote}}, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000380)) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x80, 0x0) lseek(r0, 0x0, 0x3) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) r9 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, r9) syz_open_dev$video4linux(&(0x7f0000000200)='/dev/v4l-subdev#\x00', 0x43194f85, 0x20000) 14:31:51 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7040000020000006a0a00fe000000088500000020000000b7000000000000009500040000000000"], 0x0}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0xfffff000, 0xe, 0x0, &(0x7f0000000080)="bd25e7b9d668c6e5db803ff1dcbd", 0x0, 0xe54c}, 0x28) 14:31:51 executing program 1: r0 = memfd_create(&(0x7f0000000040)='Z\x00', 0x0) write(r0, &(0x7f00000003c0)="b156d417452c8f6db1077f2abaa85f348946610dabcc617d9aeb42aa515f23c9150bfdba5ea1be4e0415cb2c3a4a1cdff5aba4a225b20c21", 0x38) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) sendfile(r0, r0, &(0x7f0000000200), 0xff8) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4002102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='Z\x00') 14:31:51 executing program 4: timerfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') 14:31:51 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b000000"]) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x48}]}) 14:31:51 executing program 2: [ 236.385348] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. 14:31:51 executing program 2: 14:31:51 executing program 4: 14:31:51 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) r1 = epoll_create(0x7fff) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000200)) 14:31:51 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'veth1_to_bond\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="000000000c000000000000000800010073667100480002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x1}}, 0x0) 14:31:51 executing program 1: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x174}]}) 14:31:51 executing program 3: 14:31:51 executing program 1: 14:31:51 executing program 2: 14:31:51 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm-control\x00', 0x400148, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x2c4, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0xffffffffffffffff, 0xfe, 0x0, 0x0, 0x5}, 0x0, 0x0, r0, 0x0) r1 = epoll_create(0x143) r2 = epoll_create(0x4) r3 = epoll_create(0x7fffffff) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f000000e000)) fsetxattr$trusted_overlay_opaque(r3, &(0x7f0000000300)='trusted.overlay.opaque\x00', &(0x7f0000000040)='y\x00', 0x2, 0x2) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f000000dff4)) epoll_create(0x401) r4 = epoll_create(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r6 = creat(&(0x7f0000000140)='./file0\x00', 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000180)=0xc) fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', r7, 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @multicast1}, {0x2, 0x4e23, @remote}, {0x2, 0x0, @loopback}, 0x100, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x9b}) unshare(0x400) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000240)=""/117) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000500)={{{@in=@loopback}}, {{@in6=@remote}, 0x0, @in=@remote}}, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000380)) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x80, 0x0) lseek(r0, 0x0, 0x3) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) r9 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, r9) ioctl$LOOP_CTL_ADD(r8, 0x4c80, 0x0) 14:31:51 executing program 4: 14:31:51 executing program 5: 14:31:51 executing program 2: 14:31:51 executing program 4: 14:31:52 executing program 1: 14:31:52 executing program 5: 14:31:52 executing program 3: 14:31:52 executing program 2: 14:31:52 executing program 4: 14:31:52 executing program 2: 14:31:52 executing program 5: 14:31:52 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm-control\x00', 0x400148, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x2c4, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0xffffffffffffffff, 0xfe, 0x0, 0x0, 0x5}, 0x0, 0x0, r0, 0x0) r1 = epoll_create(0x143) r2 = epoll_create(0x4) r3 = epoll_create(0x7fffffff) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f000000e000)) fsetxattr$trusted_overlay_opaque(r3, &(0x7f0000000300)='trusted.overlay.opaque\x00', &(0x7f0000000040)='y\x00', 0x2, 0x2) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f000000dff4)) epoll_create(0x401) r4 = epoll_create(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000180)=0xc) fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', r6, 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @multicast1}, {0x2, 0x4e23, @remote}, {0x2, 0x0, @loopback}, 0x100, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x9b}) unshare(0x400) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000240)=""/117) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000500)={{{@in=@loopback}}, {{@in6=@remote}, 0x0, @in=@remote}}, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000380)) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x80, 0x0) lseek(r0, 0x0, 0x3) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, 0x0) syz_open_dev$video4linux(&(0x7f0000000200)='/dev/v4l-subdev#\x00', 0x43194f85, 0x20000) ioctl$LOOP_CTL_ADD(r7, 0x4c80, 0x0) 14:31:52 executing program 1: 14:31:52 executing program 3: 14:31:52 executing program 4: 14:31:52 executing program 5: 14:31:52 executing program 2: 14:31:52 executing program 3: 14:31:52 executing program 2: 14:31:52 executing program 1: 14:31:52 executing program 5: 14:31:52 executing program 4: 14:31:52 executing program 3: 14:31:52 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm-control\x00', 0x400148, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x2c4, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0xffffffffffffffff, 0xfe, 0x0, 0x0, 0x5}, 0x0, 0x0, r0, 0x0) r1 = epoll_create(0x143) r2 = epoll_create(0x4) r3 = epoll_create(0x7fffffff) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f000000e000)) fsetxattr$trusted_overlay_opaque(r3, &(0x7f0000000300)='trusted.overlay.opaque\x00', &(0x7f0000000040)='y\x00', 0x2, 0x2) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f000000dff4)) epoll_create(0x401) r4 = epoll_create(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000180)=0xc) fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', r6, 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @multicast1}, {0x2, 0x4e23, @remote}, {0x2, 0x0, @loopback}, 0x100, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x9b}) unshare(0x400) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000240)=""/117) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000500)={{{@in=@loopback}}, {{@in6=@remote}, 0x0, @in=@remote}}, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000380)) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x80, 0x0) lseek(r0, 0x0, 0x3) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, 0x0) syz_open_dev$video4linux(&(0x7f0000000200)='/dev/v4l-subdev#\x00', 0x43194f85, 0x20000) ioctl$LOOP_CTL_ADD(r7, 0x4c80, 0x0) 14:31:52 executing program 2: 14:31:52 executing program 5: 14:31:52 executing program 1: 14:31:52 executing program 4: 14:31:52 executing program 3: 14:31:53 executing program 2: 14:31:53 executing program 4: 14:31:53 executing program 1: 14:31:53 executing program 5: 14:31:53 executing program 3: 14:31:53 executing program 2: 14:31:53 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm-control\x00', 0x400148, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x2c4, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0xffffffffffffffff, 0xfe, 0x0, 0x0, 0x5}, 0x0, 0x0, r0, 0x0) r1 = epoll_create(0x143) r2 = epoll_create(0x4) r3 = epoll_create(0x7fffffff) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f000000e000)) fsetxattr$trusted_overlay_opaque(r3, &(0x7f0000000300)='trusted.overlay.opaque\x00', &(0x7f0000000040)='y\x00', 0x2, 0x2) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f000000dff4)) epoll_create(0x401) r4 = epoll_create(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r6 = creat(&(0x7f0000000140)='./file0\x00', 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000180)=0xc) fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', r7, 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @multicast1}, {0x2, 0x4e23, @remote}, {0x2, 0x0, @loopback}, 0x100, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x9b}) unshare(0x400) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000240)=""/117) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000500)={{{@in=@loopback}}, {{@in6=@remote}, 0x0, @in=@remote}}, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000380)) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x80, 0x0) lseek(r0, 0x0, 0x3) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) r9 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, r9) syz_open_dev$video4linux(&(0x7f0000000200)='/dev/v4l-subdev#\x00', 0x43194f85, 0x20000) ioctl$LOOP_CTL_ADD(r8, 0x4c80, 0x0) 14:31:53 executing program 5: 14:31:53 executing program 1: 14:31:53 executing program 2: 14:31:53 executing program 4: 14:31:53 executing program 3: 14:31:53 executing program 1: 14:31:53 executing program 3: 14:31:53 executing program 2: 14:31:53 executing program 5: 14:31:53 executing program 4: 14:31:53 executing program 1: 14:31:54 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm-control\x00', 0x400148, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x2c4, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0xffffffffffffffff, 0xfe, 0x0, 0x0, 0x5}, 0x0, 0x0, r0, 0x0) r1 = epoll_create(0x143) r2 = epoll_create(0x4) r3 = epoll_create(0x7fffffff) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f000000e000)) fsetxattr$trusted_overlay_opaque(r3, &(0x7f0000000300)='trusted.overlay.opaque\x00', &(0x7f0000000040)='y\x00', 0x2, 0x2) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f000000dff4)) epoll_create(0x401) r4 = epoll_create(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r6 = creat(&(0x7f0000000140)='./file0\x00', 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000180)=0xc) fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', r7, 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @multicast1}, {0x2, 0x4e23, @remote}, {0x2, 0x0, @loopback}, 0x100, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x9b}) unshare(0x400) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000240)=""/117) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000500)={{{@in=@loopback}}, {{@in6=@remote}, 0x0, @in=@remote}}, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000380)) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x80, 0x0) lseek(r0, 0x0, 0x3) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) r9 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, r9) syz_open_dev$video4linux(&(0x7f0000000200)='/dev/v4l-subdev#\x00', 0x43194f85, 0x20000) ioctl$LOOP_CTL_ADD(r8, 0x4c80, 0x0) 14:31:54 executing program 5: 14:31:54 executing program 3: 14:31:54 executing program 2: 14:31:54 executing program 4: 14:31:54 executing program 1: 14:31:54 executing program 3: 14:31:54 executing program 4: 14:31:54 executing program 1: 14:31:54 executing program 5: 14:31:54 executing program 2: 14:31:54 executing program 3: 14:31:54 executing program 2: 14:31:54 executing program 5: 14:31:54 executing program 4: 14:31:54 executing program 1: 14:31:54 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm-control\x00', 0x400148, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x2c4, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0xffffffffffffffff, 0xfe, 0x0, 0x0, 0x5}, 0x0, 0x0, r0, 0x0) r1 = epoll_create(0x143) r2 = epoll_create(0x4) r3 = epoll_create(0x7fffffff) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f000000e000)) fsetxattr$trusted_overlay_opaque(r3, &(0x7f0000000300)='trusted.overlay.opaque\x00', &(0x7f0000000040)='y\x00', 0x2, 0x2) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f000000dff4)) epoll_create(0x401) r4 = epoll_create(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r6 = creat(&(0x7f0000000140)='./file0\x00', 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000180)=0xc) fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', r7, 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @multicast1}, {0x2, 0x4e23, @remote}, {0x2, 0x0, @loopback}, 0x100, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x9b}) unshare(0x400) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000240)=""/117) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000500)={{{@in=@loopback}}, {{@in6=@remote}, 0x0, @in=@remote}}, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000380)) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x80, 0x0) lseek(r0, 0x0, 0x3) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) r9 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, r9) syz_open_dev$video4linux(&(0x7f0000000200)='/dev/v4l-subdev#\x00', 0x43194f85, 0x20000) ioctl$LOOP_CTL_ADD(r8, 0x4c80, 0x0) 14:31:54 executing program 3: 14:31:54 executing program 2: [ 239.752582] ------------[ cut here ]------------ [ 239.757396] DEBUG_LOCKS_WARN_ON(depth <= 0) [ 239.757522] WARNING: CPU: 1 PID: 7814 at kernel/locking/lockdep.c:3595 lock_release+0x740/0xa10 [ 239.770671] Kernel panic - not syncing: panic_on_warn set ... [ 239.776564] CPU: 1 PID: 7814 Comm: syz-executor0 Not tainted 4.20.0-rc1-next-20181109+ #110 [ 239.785052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 239.794447] Call Trace: [ 239.797040] dump_stack+0x244/0x39d [ 239.799071] kobject: 'loop5' (0000000061dc4671): kobject_uevent_env [ 239.800673] ? dump_stack_print_info.cold.1+0x20/0x20 [ 239.807173] kobject: 'loop5' (0000000061dc4671): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 239.812253] panic+0x2ad/0x55c [ 239.823839] kobject: 'loop3' (000000002c2c1c81): kobject_uevent_env [ 239.824874] ? add_taint.cold.5+0x16/0x16 [ 239.831281] kobject: 'loop3' (000000002c2c1c81): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 239.835400] ? __warn.cold.8+0x5/0x45 [ 239.835418] ? lock_release+0x740/0xa10 [ 239.835446] __warn.cold.8+0x20/0x45 [ 239.835460] ? lock_release+0x740/0xa10 [ 239.835477] report_bug+0x254/0x2d0 [ 239.863983] do_error_trap+0x11b/0x200 [ 239.867873] do_invalid_op+0x36/0x40 [ 239.871610] ? lock_release+0x740/0xa10 [ 239.875587] invalid_op+0x14/0x20 [ 239.879061] RIP: 0010:lock_release+0x740/0xa10 [ 239.883636] Code: 03 38 d0 7c 08 84 d2 0f 85 da 02 00 00 8b 35 a7 95 b3 08 85 f6 75 15 48 c7 c6 20 66 2b 88 48 c7 c7 c0 33 2b 88 e8 10 36 e7 ff <0f> 0b 48 8b 95 e8 fe ff ff 4c 89 f7 48 8b b5 f0 fe ff ff e8 e8 58 [ 239.902529] RSP: 0018:ffff88017ffbf868 EFLAGS: 00010086 [ 239.907885] RAX: 0000000000000000 RBX: 1ffff1002fff7f12 RCX: ffffc90005dd5000 [ 239.915167] RDX: 0000000000007f95 RSI: ffffffff8165ba15 RDI: 0000000000000006 [ 239.922429] RBP: ffff88017ffbf998 R08: ffff8801bc65c140 R09: fffffbfff12b2254 [ 239.929690] R10: fffffbfff12b2254 R11: ffffffff895912a3 R12: ffffffff8b0e27a0 [ 239.936957] R13: ffff88017ffbf970 R14: ffff8801bc65c140 R15: ffff88017ffbf8b0 [ 239.944238] ? vprintk_func+0x85/0x181 [ 239.948125] ? lock_release+0x740/0xa10 [ 239.952103] ? loop_control_ioctl+0xf5/0x4e0 [ 239.956508] ? lock_downgrade+0x900/0x900 [ 239.960659] ? __radix_tree_lookup+0x3a7/0x500 [ 239.965250] ? radix_tree_insert+0x870/0x870 [ 239.969668] ? mark_held_locks+0xc7/0x130 [ 239.973839] __mutex_unlock_slowpath+0x102/0x8c0 [ 239.978592] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 239.983169] ? wait_for_completion+0x8a0/0x8a0 [ 239.987750] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 239.992515] ? radix_tree_lookup+0x21/0x30 [ 239.996747] ? idr_find+0x44/0x50 [ 240.000213] ? loop_lookup+0x105/0x230 [ 240.004097] ? loop_exit_cb+0x20/0x20 [ 240.007906] mutex_unlock+0xd/0x10 [ 240.011447] loop_control_ioctl+0xf5/0x4e0 [ 240.015700] ? loop_add+0xa20/0xa20 [ 240.019330] ? __might_fault+0x12b/0x1e0 [ 240.023420] ? lock_downgrade+0x900/0x900 [ 240.027564] ? lock_release+0xa10/0xa10 [ 240.031531] ? perf_trace_sched_process_exec+0x860/0x860 [ 240.036994] ? loop_add+0xa20/0xa20 [ 240.040616] do_vfs_ioctl+0x1de/0x1790 [ 240.044514] ? ioctl_preallocate+0x300/0x300 [ 240.048925] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 240.054455] ? __fget_light+0x2e9/0x430 [ 240.058440] ? fget_raw+0x20/0x20 [ 240.061884] ? _copy_to_user+0xc8/0x110 [ 240.065855] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 240.071392] ? put_timespec64+0x10f/0x1b0 [ 240.075537] ? nsecs_to_jiffies+0x30/0x30 [ 240.079683] ? do_syscall_64+0x9a/0x820 [ 240.083667] ? do_syscall_64+0x9a/0x820 [ 240.087635] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 240.092214] ? security_file_ioctl+0x94/0xc0 [ 240.096613] ksys_ioctl+0xa9/0xd0 [ 240.100074] __x64_sys_ioctl+0x73/0xb0 [ 240.103982] do_syscall_64+0x1b9/0x820 [ 240.107865] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 240.113239] ? syscall_return_slowpath+0x5e0/0x5e0 [ 240.118198] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 240.123040] ? trace_hardirqs_on_caller+0x310/0x310 [ 240.128084] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 240.133094] ? prepare_exit_to_usermode+0x291/0x3b0 [ 240.138121] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 240.142981] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 240.148180] RIP: 0033:0x457569 [ 240.151383] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 240.170275] RSP: 002b:00007f04df265c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 240.177982] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457569 [ 240.185241] RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 000000000000000a [ 240.192515] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 240.199776] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f04df2666d4 [ 240.207049] R13: 00000000004c06f1 R14: 00000000004d1028 R15: 00000000ffffffff [ 240.215344] Kernel Offset: disabled [ 240.218966] Rebooting in 86400 seconds..