[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 16.444105] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 20.872127] random: sshd: uninitialized urandom read (32 bytes read) [ 21.292527] random: sshd: uninitialized urandom read (32 bytes read) [ 22.152193] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.57' (ECDSA) to the list of known hosts. [ 27.725318] random: sshd: uninitialized urandom read (32 bytes read) 2018/07/20 07:48:15 fuzzer started [ 29.107926] random: cc1: uninitialized urandom read (8 bytes read) 2018/07/20 07:48:17 dialing manager at 10.128.0.26:33123 2018/07/20 07:48:22 syscalls: 1808 2018/07/20 07:48:22 code coverage: enabled 2018/07/20 07:48:22 comparison tracing: enabled 2018/07/20 07:48:22 setuid sandbox: enabled 2018/07/20 07:48:22 namespace sandbox: enabled 2018/07/20 07:48:22 fault injection: enabled 2018/07/20 07:48:22 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/07/20 07:48:22 net packed injection: enabled 2018/07/20 07:48:22 net device setup: enabled [ 35.603267] random: crng init done 07:49:34 executing program 0: syz_emit_ethernet(0x36, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14}, @remote={0xac, 0x14, 0x223, 0xbb}}, @icmp=@timestamp_reply={0xe}}}}}, &(0x7f0000000140)) 07:49:34 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") r1 = socket(0x10, 0x3, 0x0) recvmsg(r1, &(0x7f0000000380)={&(0x7f0000000140)=@nfc, 0x80, &(0x7f0000000200), 0x0, &(0x7f0000000280)=""/253, 0xfd}, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000740)={0x14, 0x1a, 0x201}, 0x14}, 0x1}, 0x0) 07:49:34 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000740), 0x269, 0x0) poll(&(0x7f0000000080)=[{r1}], 0x1, 0x2e9) close(r0) 07:49:34 executing program 3: r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000d81ff8)=0x101) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) lremovexattr(&(0x7f0000000040)='./control/file0\x00', &(0x7f0000000080)=@random={'os2.', 'security.selinux\x00'}) fremovexattr(r2, &(0x7f0000000100)=@known='security.selinux\x00') close(r1) 07:49:34 executing program 4: mknod(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) 07:49:34 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14}, @remote={0xac, 0x14, 0x223, 0xbb}, {[@rr={0xffffff86, 0x3}]}}, @icmp=@timestamp_reply={0xe}}}}}, &(0x7f0000000140)) connect(0xffffffffffffffff, &(0x7f0000000040)=@ax25={0x3, {"42c6ac53c86b1c"}}, 0x80) 07:49:34 executing program 6: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000007ffc)) 07:49:34 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) close(r0) [ 106.998731] IPVS: ftp: loaded support on port[0] = 21 [ 106.999058] IPVS: ftp: loaded support on port[0] = 21 [ 107.031708] IPVS: ftp: loaded support on port[0] = 21 [ 107.047851] IPVS: ftp: loaded support on port[0] = 21 [ 107.066389] IPVS: ftp: loaded support on port[0] = 21 [ 107.081963] IPVS: ftp: loaded support on port[0] = 21 [ 107.082559] IPVS: ftp: loaded support on port[0] = 21 [ 107.092670] IPVS: ftp: loaded support on port[0] = 21 [ 108.682291] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.688687] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.707708] device bridge_slave_0 entered promiscuous mode [ 108.739392] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.745860] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.762391] device bridge_slave_0 entered promiscuous mode [ 108.778110] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.784495] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.806871] device bridge_slave_0 entered promiscuous mode [ 108.815270] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.821639] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.829073] device bridge_slave_0 entered promiscuous mode [ 108.837411] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.843790] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.852385] device bridge_slave_1 entered promiscuous mode [ 108.861243] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.867591] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.875738] device bridge_slave_0 entered promiscuous mode [ 108.885593] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.891961] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.903728] device bridge_slave_0 entered promiscuous mode [ 108.910755] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.917120] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.928427] device bridge_slave_0 entered promiscuous mode [ 108.936398] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.942772] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.950648] device bridge_slave_1 entered promiscuous mode [ 108.957126] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.963581] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.971551] device bridge_slave_0 entered promiscuous mode [ 108.979463] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 108.987933] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.994301] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.006744] device bridge_slave_1 entered promiscuous mode [ 109.014800] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.021221] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.034766] device bridge_slave_1 entered promiscuous mode [ 109.043501] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.049883] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.057724] device bridge_slave_1 entered promiscuous mode [ 109.064920] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.071293] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.078239] device bridge_slave_1 entered promiscuous mode [ 109.085983] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 109.094612] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 109.103005] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 109.112910] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 109.124904] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.131327] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.161754] device bridge_slave_1 entered promiscuous mode [ 109.170365] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.176747] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.186840] device bridge_slave_1 entered promiscuous mode [ 109.200188] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 109.208458] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 109.215626] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 109.224066] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 109.247535] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 109.255864] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 109.319088] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 109.327415] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 109.347956] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 109.356908] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 109.411562] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 109.432826] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 109.546851] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 109.556807] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 109.567879] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 109.597705] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 109.666718] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 109.675728] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 109.685544] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 109.693593] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 109.702424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 109.720973] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 109.730851] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 109.739894] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 109.816302] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 109.835944] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 109.847877] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 109.863964] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 109.918932] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 110.081060] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 110.100629] team0: Port device team_slave_0 added [ 110.187860] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 110.202528] team0: Port device team_slave_1 added [ 110.214497] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 110.224206] team0: Port device team_slave_0 added [ 110.243145] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 110.261556] team0: Port device team_slave_0 added [ 110.279967] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 110.290197] team0: Port device team_slave_0 added [ 110.296604] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 110.303476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 110.314547] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 110.354490] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 110.367234] team0: Port device team_slave_1 added [ 110.379803] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 110.395559] team0: Port device team_slave_0 added [ 110.406721] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 110.413715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 110.423462] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 110.434203] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 110.447556] team0: Port device team_slave_1 added [ 110.454625] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 110.467758] team0: Port device team_slave_0 added [ 110.475621] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 110.485982] team0: Port device team_slave_0 added [ 110.492793] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 110.504130] team0: Port device team_slave_1 added [ 110.511316] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 110.519712] team0: Port device team_slave_0 added [ 110.526672] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 110.533825] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 110.542348] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 110.556562] team0: Port device team_slave_1 added [ 110.575525] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 110.590556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 110.600898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 110.608700] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 110.617430] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 110.625007] team0: Port device team_slave_1 added [ 110.632526] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 110.641195] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 110.649377] team0: Port device team_slave_1 added [ 110.661236] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 110.668577] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 110.680607] team0: Port device team_slave_1 added [ 110.693037] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 110.700560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 110.708871] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 110.725540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 110.736271] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 110.743812] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 110.751505] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 110.760394] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 110.767751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 110.775564] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 110.784987] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 110.792066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 110.799841] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 110.810160] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 110.817250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 110.832503] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 110.841830] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 110.850123] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 110.857531] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 110.865367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 110.875188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 110.883223] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 110.899630] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 110.906887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 110.918207] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 110.938390] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 110.947258] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 110.958597] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 110.967487] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 110.975954] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 110.983155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 110.990960] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 111.029530] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 111.039923] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 111.047645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 111.055403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 111.062971] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 111.070490] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 111.078479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 111.088062] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 111.099064] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 111.107619] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 111.118040] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 111.126734] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 111.133874] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 111.154550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 111.181597] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 111.199733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 111.207904] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 111.217212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 111.224962] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 111.232406] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 111.240109] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 111.247775] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 111.255502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 111.267584] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 111.274654] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 111.282700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 111.294587] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 111.303271] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 111.312368] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 111.324385] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 111.331661] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 111.354631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 111.378631] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 111.390254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 111.398495] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 111.406375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 111.414356] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 111.422179] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 111.431707] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 111.439047] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 111.448147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 111.517633] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 111.524830] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 111.535506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 112.287814] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.294209] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.300845] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.307207] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.334855] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 112.352167] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 112.374268] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.380682] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.387331] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.393700] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.438730] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 112.447231] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.453619] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.460240] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.466619] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.478904] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 112.487068] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.493441] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.500085] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.506449] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.514093] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 112.526888] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.533267] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.539890] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.546253] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.563158] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 112.606525] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.612936] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.619554] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.625927] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.651396] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 112.671664] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.678247] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.684886] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.691273] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.699845] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 112.742575] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.748975] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.755604] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.761967] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.783623] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 113.376282] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 113.386767] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 113.417929] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 113.428606] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 113.436495] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 113.443725] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 113.450992] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 116.255581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.298329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.337497] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.485378] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.570283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.622805] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 116.634534] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.649683] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 116.719861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.733777] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 116.750735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.871091] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 116.952851] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 116.985067] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 116.998216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 117.008548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 117.038641] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 117.047392] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 117.059304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 117.069467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 117.093833] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 117.156497] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 117.162712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 117.172657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 117.195701] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 117.301828] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 117.310134] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 117.328471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 117.364683] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 117.371256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 117.387675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 117.407044] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.431492] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 117.442113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 117.450150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 117.466156] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.504586] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 117.512689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 117.526500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 117.585914] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.644332] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 117.650575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 117.660675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 117.700073] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.716699] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.845490] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.903383] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.017387] 8021q: adding VLAN 0 to HW filter on device team0 07:49:47 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x400, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00', 0x0}) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000240)=r2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"69726c61bd15000000001f0000000020", 0x1012}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'bcsh0\x00', 0x2401}) 07:49:47 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) memfd_create(&(0x7f0000000000)='&systemselinux]\x00', 0x3) pread64(r0, &(0x7f00000002c0)=""/218, 0xda, 0x0) read(r2, &(0x7f00000012c0)=""/4096, 0x350) 07:49:47 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="0001000000000000b8ffffff"]) 07:49:47 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) epoll_create(0xa000000000) r2 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00000001c0)="c2e7ba4309fa230ff55733a95d989f459e0458769c50fdbd909c32efa026cae8f9febefa6b294f411d65f2749c2dd52c97727e95c1161ff34b11b1159ef84b5981d3f0a54fec793bc7250de7279655fe6a8cd9f6257321a0a2e38a9869fabcb6e442678fd3298e110fc3ce16b827c706065dc81b82be5913270a7a7ce0f5fec6451f2d670f", 0x85, 0xfffffffffffffffa) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000380), &(0x7f00000003c0)=0x4) keyctl$describe(0x6, r2, &(0x7f0000000280)=""/244, 0xf4) epoll_wait(r1, &(0x7f00000000c0)=[{}, {}], 0x2, 0x7ff) keyctl$assume_authority(0x10, r2) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x7) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x6f, &(0x7f0000000100)=0x7ff, 0x4) 07:49:47 executing program 6: r0 = syz_open_dev$loop(&(0x7f000091dff5)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000000c0)={0x1, 0x0, [{0x0, 0x1ff}]}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) recvmmsg(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000006c0)=""/25, 0x19}, {&(0x7f00000002c0)=""/247, 0xf7}, {&(0x7f0000000800)=""/65, 0x41}], 0x3, &(0x7f0000000a00)=""/181, 0xb5}}], 0x1, 0x0, &(0x7f0000000040)={0x0, 0x989680}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000ec0)={"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"}) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f0000000180)={0x7b}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) madvise(&(0x7f00001a2000/0xc00000)=nil, 0xc00000, 0x4000000000000008) clone(0x0, &(0x7f0000000240), &(0x7f0000001ffc), &(0x7f00000001c0), &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000b09000/0x3000)=nil, 0x3000}, 0x2}) 07:49:47 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000c7df60)={0x7ff, @in6={{0xa}}}, &(0x7f000064b000)=0xa0) socketpair$inet(0x2, 0x2, 0x7fff, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000080)={r1, 0xa8, "2b8296627d6f2a2a4b9e2b4d702b686f6b5dc3e8b0c6895fff90cee63331b91053ee67d19299203417cc993e8e7f7961b322c2ff1a13a08176c3680393ea874738f3478980eb673fcfd5ed10a7c7d8f1cf40ce4ebe8193139402ca72f109a16d6017e5ad431a479a9de1927db6d1b7b114f6f3ebd25801405c72ee33d30ed95ca95da3cd519011ca78c65dc5c81f5509759c22255dc38a53900a170ecbde5e5748d313d1f52ab561"}, &(0x7f0000000140)=0xb0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, r1}, 0x10) 07:49:47 executing program 0: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffffff) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f00000002c0)=0x6, &(0x7f0000000240)=0x4) r1 = socket$inet6(0xa, 0x3, 0x100000003) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="315c489e164f92b54a8e01c11e7186702800001f1338f7bfe67804932a00000000000000", @ANYRES32=r3, @ANYBLOB="000000000000050008000a000f000000"], 0x28}, 0x1}, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x40000, 0x0) ioctl$KVM_PPC_GET_SMMU_INFO(r4, 0x8250aea6, &(0x7f0000000140)=""/176) 07:49:47 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') ioctl(r0, 0x1000000008912, &(0x7f0000000280)="024a903d6d345f8f762070") r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0x6857b21ff1155d93) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) pwrite64(r1, &(0x7f0000000000)="af", 0x1, 0x0) ftruncate(r1, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ppoll(&(0x7f0000000080)=[{r1, 0x20}, {r1, 0x400}], 0x2, &(0x7f0000000100)={r2, r3+30000000}, &(0x7f0000000140)={0x2}, 0x8) [ 120.091540] kvm [6557]: vcpu0, guest rIP: 0x9112 Hyper-V uhandled wrmsr: 0x40000066 data 0x0 [ 120.101458] kvm [6557]: vcpu0, guest rIP: 0x9112 Hyper-V uhandled wrmsr: 0x40000040 data 0x0 [ 120.114548] kvm [6557]: vcpu0, guest rIP: 0x9112 Hyper-V uhandled wrmsr: 0x40000012 data 0x0 [ 120.130902] kvm [6557]: vcpu0, guest rIP: 0x9112 Hyper-V uhandled wrmsr: 0x40000058 data 0x0 07:49:47 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x7, 0x5, 0x1}, 0x2c) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000080)={r0, 0x0, 0x0, 0x6, 0x2}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f00000000c0), &(0x7f00000001c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) fdatasync(r0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r0, &(0x7f0000000180), &(0x7f0000000300)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r0, &(0x7f0000000180)}, 0x10) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x8, 0x40) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x2, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 'vcan0\x00'}}, 0x1e) [ 120.140263] kvm [6557]: vcpu0, guest rIP: 0x9112 Hyper-V uhandled wrmsr: 0x4000001c data 0x0 [ 120.155708] kvm [6557]: vcpu0, guest rIP: 0x9112 Hyper-V uhandled wrmsr: 0x40000022 data 0x0 [ 120.165525] kvm [6557]: vcpu0, guest rIP: 0x9112 Hyper-V uhandled wrmsr: 0x4000008c data 0x0 [ 120.174822] kvm [6557]: vcpu0, guest rIP: 0x9112 Hyper-V uhandled wrmsr: 0x40000054 data 0x0 [ 120.227104] kvm: pic: non byte read [ 120.230948] kvm [6557]: vcpu0, guest rIP: 0x9112 Hyper-V uhandled wrmsr: 0x40000030 data 0x0 [ 120.239705] kvm [6557]: vcpu0, guest rIP: 0x9112 Hyper-V uhandled wrmsr: 0x4000001f data 0x0 07:49:48 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x80800, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000080)=0x3, 0x4) ioctl$KVM_ENABLE_CAP_CPU(r1, 0xc008ae88, &(0x7f00000001c0)={0x2, 0x0, [0x8b, 0x0, 0x0, 0x6]}) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f00000000c0)=""/212) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000240)=ANY=[@ANYPTR64=&(0x7f0000000300)=ANY=[@ANYRES16, @ANYRESHEX=r1, @ANYRESOCT=r0, @ANYRESHEX=r1, @ANYRES64=r1, @ANYRES16=r0]], 0x1) 07:49:48 executing program 0: r0 = socket(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={"6272696467653000000100"}) sendmsg$rds(r0, &(0x7f0000001fc0)={&(0x7f0000000000)={0x2, 0x4e20, @rand_addr=0x3f}, 0x10, &(0x7f0000001540)=[{&(0x7f0000000140)=""/159, 0x9f}, {&(0x7f0000000040)=""/48, 0x30}, {&(0x7f0000000200)=""/138, 0x8a}, {&(0x7f00000002c0)=""/234, 0xea}, {&(0x7f00000003c0)=""/78, 0x4e}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/201, 0xc9}, {&(0x7f00000000c0)=""/10, 0xa}], 0x8, &(0x7f0000001d00)=[@fadd={0x58, 0x114, 0x6, {{0xf5ac, 0x80000000}, &(0x7f00000015c0)=0x10000, &(0x7f0000001600)=0xffffffff, 0x9, 0x6, 0x7, 0x1, 0x8, 0x401}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000001640)=""/248, 0xf8}, &(0x7f0000001740), 0x8}}, @rdma_args={0x48, 0x114, 0x1, {{0xffff, 0x1}, {&(0x7f0000001780)=""/85, 0x55}, &(0x7f0000001840)=[{&(0x7f0000001800)=""/50, 0x32}], 0x1, 0x20}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000001880)=""/189, 0xbd}, &(0x7f0000001940), 0x40}}, @mask_cswp={0x58, 0x114, 0x9, {{0x7e, 0x1}, &(0x7f0000001980)=0x1, &(0x7f00000019c0)=0x5, 0x1, 0x28c8, 0x4, 0x10000, 0x4, 0xffffffff}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x9}, @fadd={0x58, 0x114, 0x6, {{0x6}, &(0x7f0000001a00)=0x2000000000000, &(0x7f0000001a40)=0x7, 0x52, 0x6, 0x0, 0x1000, 0x10, 0x3}}, @rdma_args={0x48, 0x114, 0x1, {{0x2, 0x57}, {&(0x7f0000001a80)=""/17, 0x11}, &(0x7f0000001bc0)=[{&(0x7f0000001ac0)=""/245, 0xf5}], 0x1, 0x20, 0x1}}, @fadd={0x58, 0x114, 0x6, {{0x24f8c0ca, 0xfffffffffffffffd}, &(0x7f0000001c00)=0x7, &(0x7f0000001c40)=0xffff, 0x3ff, 0x2, 0x2, 0x5fd, 0x2, 0x6}}, @mask_fadd={0x58, 0x114, 0x8, {{0x3f, 0x7}, &(0x7f0000001c80), &(0x7f0000001cc0)=0x100000000, 0x4, 0x80, 0x100000000, 0x80000001, 0x71, 0x3}}], 0x2c0, 0x40001}, 0x48881) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge0\x00', 0xffffffffffffffff}) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000003000)={r0, r0, 0x3, 0x0, &(0x7f0000002000)="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", 0x7f, 0x1d, 0x413f, 0x3f, 0x2dda, 0x6, 0xbf, "ac0060a5c672dae6b4313e8d2b0b50db84bc187f96137fe5a250bf117a2f286cdc96031dbab5ca48214afbd1f8fa82a6baac9b5f61a4dc37a55adb6a0e4a952f030662646bd125a7b5a73062a5dfbabd26026867bf4ea1f57a3fa07ed34324337aec6314192a51c667871a6aa453c31c2434ca4af19f84dc87ca3637707dd4a3a9ffffbf1b0fd8fb5ae508c1d75fbc6a81244fb5395f73e0b2a89ab24b45ea2bb68c17728a72a828f21a96ba187abb71f9b11904f9d952bd23aeeaa6a86e666172288da98af1a1223c00cd43b0edc83fbdd3646f0d26c489da9d170f74b7b7c4a1366c3da6f49fe8198cd34bbaf4546b65a1297a1e"}) 07:49:48 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') pread64(r1, &(0x7f0000000000)=""/218, 0xffffff6b, 0x0) socket$pppoe(0x18, 0x1, 0x0) preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000280)=""/76, 0x4c}], 0x1, 0x0) 07:49:48 executing program 6: mkdir(&(0x7f0000f4eff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000001c000)) chdir(&(0x7f0000000780)='./file0\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000029ff6)='./file0\x00', 0x0) rename(&(0x7f0000000080)='./control\x00', &(0x7f0000000040)='./file0\x00') pivot_root(&(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='./file0\x00') 07:49:48 executing program 4: mknod(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) 07:49:48 executing program 7: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0xf4, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$unix(0xa, 0x3, 0x3a) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="c100000005000000bd07000022681efdb5011ad25947cff05e8bf01dd36696b199706ebe66dc223a7f8cb0094f03c78d4aa21e02e0cec0562370a0edd46bc616e545ee3ca0de685b80e6b84d3e1149dea66cd5db97aa2a4afe7a1ca6120ade7446704eb86a365be4677337f6642ddd0cc5057ed7e37d3abf0fb63b4e2e7c38a8c85b2b1adc93bc51f50b19d00b14d2071494729e9cf3fa0ac1d30ac119ec13ce40cc46f7e74fcc94b4e826f1299ef1b2ebed23847b9e6bca1f0e8eb6deb70f3addb17e231e8352dc869f7e248b9739426d1e6f0fcc"]) r2 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x0, 0x101040) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) ioctl$RTC_VL_CLR(r2, 0x7014) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f0000000240)={0x4, 0x8, 0xfa00, {r3, 0x3f}}, 0x10) bind$unix(r1, &(0x7f00000000c0)=@abs={0xa}, 0x1b) delete_module(&(0x7f0000000040)='vboxnet0\x00', 0x200) 07:49:48 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0xc) r2 = dup2(r1, r0) ioctl$RTC_PLL_SET(r2, 0x40207012, &(0x7f00000001c0)={0x7f, 0x6f00, 0x1, 0x4, 0x1, 0x4, 0x5}) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/32, 0x20}], 0x1, &(0x7f0000000340)=""/123, 0x7b}, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x2000, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r3, &(0x7f0000000180)={0x28, 0x3, 0x0, {0x1, 0x7, 0x0, '{!wlan0'}}, 0x28) 07:49:48 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$md(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/md0\x00', 0x0, 0x0) socket(0xe, 0x8000e, 0x7f) ioctl$BLKPG(r1, 0x40140921, &(0x7f000000b100)={0x0, 0x1, 0x0, &(0x7f0000000700)}) fgetxattr(r1, &(0x7f0000000000)=@random={'os2.', '/dev/md0\x00'}, &(0x7f0000000040)=""/103, 0x67) [ 120.960091] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.966773] bridge0: port 1(bridge_slave_0) entered disabled state 07:49:48 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="1c5cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r0]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0xc0000101]}) 07:49:48 executing program 2: r0 = add_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a}, &(0x7f0000000400), 0x0, 0xffffffffffffffff) r1 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(0x0, r2) socket$pppoe(0x18, 0x1, 0x0) keyctl$setperm(0x5, r0, 0x20000008) 07:49:48 executing program 3: r0 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r0, 0x280080) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f0000000000)=0x8, 0x4) sendfile(r1, r0, &(0x7f0000d83ff8), 0x2008000fffffffe) [ 121.006790] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.013323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.019950] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.026424] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.033176] device bridge0 entered promiscuous mode 07:49:48 executing program 2: getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@dev}}, &(0x7f0000000300)=0xe8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x3, &(0x7f0000000340)=@framed={{0x18}, [], {0x95}}, &(0x7f0000003ff6)='syzkaller\x00', 0x3, 0xc3, &(0x7f0000386000)=""/195, 0x40f00, 0x0, [], r0}, 0x48) r2 = socket$kcm(0x29, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000003c0)=r1, 0x34a) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xf) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x3, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x400002, 0x0) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f00000002c0)={@remote={0xac, 0x14, 0x14, 0xbb}, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x3, [@local={0xac, 0x14, 0x14, 0xaa}, @multicast2=0xe0000002, @empty]}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r3, &(0x7f0000000040), &(0x7f0000000100)}, 0x20) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/mixer\x00', 0xc2001, 0x0) ioctl$BLKSECTGET(r5, 0x1267, &(0x7f0000000280)) bpf$PROG_LOAD(0x5, &(0x7f0000001c80)={0x1, 0x5, &(0x7f0000000080)=@framed={{0x18}, [@map={0x18, 0x0, 0x1, 0x0, r3}], {0x95}}, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x90, &(0x7f0000000140)=""/144, 0x8000000000000, 0x0, [], 0x0, 0x7}, 0x48) 07:49:48 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8, &(0x7f0000000080)="225cc83d6d345faf762101") r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) getsockname$unix(r1, &(0x7f00000001c0)=@abs, &(0x7f0000000240)=0x6e) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x4900, 0x0) openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.controllers\x00', 0x0, 0x0) [ 121.098295] md: invalid raid superblock magic on ram0 [ 121.103584] md: ram0 does not have a valid v0.0 superblock, not importing! [ 121.128758] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.135234] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.142077] md: md_import_device returned -22 07:49:48 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x8001}, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000040000,user_id=\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r0, &(0x7f0000001000), 0x1000) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x44d8093551e2f17c, 0x0) r3 = syz_open_dev$dmmidi(&(0x7f00000001c0)='/dev/dmmidi#\x00', 0x999, 0x400080) renameat2(r2, &(0x7f0000000180)='./file0\x00', r3, &(0x7f0000000240)='./file0\x00', 0x1) read$FUSE(r0, &(0x7f0000005000), 0xe83) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1b}}, 0x50) read$FUSE(r0, &(0x7f0000001000), 0x1000) mount$fuse(0x0, &(0x7f0000000480)='./file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x0, &(0x7f0000000580)={{'fd', 0x3d}, 0x2c, {'rootmode', 0x3d}, 0x2c, {'user_id', 0x3d}, 0x2c, {'group_id', 0x3d}, 0x2c}) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$FUSE_OPEN(r0, &(0x7f0000000040)={0x20, 0x0, 0x3}, 0x20) [ 121.153974] md: invalid raid superblock magic on ram0 [ 121.159237] md: ram0 does not have a valid v0.0 superblock, not importing! [ 121.173331] device bridge0 left promiscuous mode 07:49:48 executing program 7: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x400, 0x0) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000040)={r1}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f00000000c0)) ioctl$sock_ifreq(r2, 0x891d, &(0x7f0000000240)={'lo\x00', @ifru_names='teql0\x00'}) ioctl$sock_ifreq(r0, 0x89a2, &(0x7f0000001340)={'eql\x00', @ifru_mtu=0x7}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000001300)={r3, 0x1, 0xffffffffffffff1c, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x10) ioctl$KVM_SET_PIT(r0, 0x8048ae66, &(0x7f0000001280)={[{0x80, 0x2, 0x1f, 0xfffffffffffffe00, 0xa55, 0x7, 0xff, 0x0, 0x3, 0x6806, 0x3, 0x5f, 0x674f}, {0x8, 0x2, 0x8, 0x80000001, 0x8, 0x5, 0x3ff0000000000000, 0x2, 0x10001, 0x100000001, 0x85, 0x1, 0x9}, {0x9, 0x8001, 0x7, 0xe038, 0x8, 0x5af1, 0x1f, 0x4, 0x5, 0x16a2, 0x8, 0x6, 0x3f}], 0x1}) fadvise64(r1, 0x0, 0x7ff, 0x7) timer_create(0x3, &(0x7f0000000180)={0x0, 0x3e, 0x1, @thr={&(0x7f0000000280)="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", &(0x7f0000000100)="f4d529a1b608d9ab580f3454b4acf4d0af9cd92745f7a974f6a5e1327bcc65434c1d3fc423b88c773ee6b1127b77b2119c678037e8cd61e980d808054e1be4fe3aec8f6b0ebfbdd91ac457f5384b252f6f742391acc3f73c2df396ef08286b"}}, &(0x7f00000001c0)=0x0) timer_getoverrun(r4) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000080)) 07:49:48 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070bf9a8ff2443e0b8ae856394839b4fd834174ef6bb93eed00248816819fa8f1d62eac8a57d7563645552cdf178f8311fa67fcba5040edcc60cef4a643e787e3ec4735ffb858f32d4a65197da11ab7114b87a71ffd582e9831a01df2410f263698b9457f5bbf2ad856e42c0040753bfaaa15775c613c41045db3933452dcd00cc14cb8bcb40221591defe16bbb55") r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000001480)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75c01f0200f58d26d7a071fb35331ce39c5aeeff5083cf07dd46455c914d4aff1e7cf7ed57c0c2056f5ca933f03cbf82bd13534737339245d31b0041be6281d7e1b4b7099114c571872298dd7f2120e2b6fa2a2e2a2c9c6e0034750b7961fa2c1584c0b5a500ae0ac39bc76a78d9158266759f766a3e8c84c09cf35a214a200421dcbc4cb6ee55476d8ead8882947ffa1fb4c050727beb12c57e06ff59") setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000040)=0x3ff, 0x4) ioctl$SG_GET_NUM_WAITING(r2, 0x40086607, &(0x7f0000000000)) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0xc8, 0xa000) 07:49:48 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x80000, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r0, &(0x7f0000000080)="d5f125414ee16cd8055af1408bcb73b251af594a877e61bf070ebf115692a4d49b", &(0x7f00000000c0)=""/165}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x10cd, 0x0, r0}, 0x2c) prctl$void(0x1d) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x5, &(0x7f0000346fc8)=ANY=[@ANYBLOB="47e1f5c2e2fa4fb0abd23438b11ec71361433a9a554ee2000000080000000000bf"], &(0x7f000031cff6)='syzkaller\x00', 0x3c, 0xfffffffffffffeb8, &(0x7f00001a7f05)=""/251}, 0x48) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, &(0x7f0000000040)=0x5) [ 121.194294] md: md_import_device returned -22 [ 121.197420] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.205224] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.211859] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.218234] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.224905] device bridge0 entered promiscuous mode 07:49:48 executing program 0: clone(0x200, &(0x7f0000000180), &(0x7f00000002c0), &(0x7f0000fef000), &(0x7f0000000000)) mknod(&(0x7f00000000c0)='./file0\x00', 0x103e, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x5) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x1, 0xc000) getsockopt$inet6_dccp_int(r0, 0x21, 0xa, &(0x7f0000000100), &(0x7f0000000140)=0x4) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000578fe8), &(0x7f00000000c0)) creat(&(0x7f0000000040)='./file0\x00', 0x0) 07:49:48 executing program 6: pipe(&(0x7f0000000080)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0xffffffff80000000, 0x6, [0x10001, 0x0, 0x6, 0x401, 0x1, 0x401]}, &(0x7f0000000100)=0x14) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000140)={r1, @in6={{0xa, 0x4e23, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0xffffffffffffffff}}}, 0x84) prctl$setmm(0x23, 0x2, &(0x7f0000ffd000/0x3000)=nil) prctl$setmm(0x23, 0x1, &(0x7f0000ffc000/0x3000)=nil) r2 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) write$P9_RRENAMEAT(r2, &(0x7f0000000040)={0x7, 0x4b, 0x1}, 0x7) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000000)=0x6) 07:49:48 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x5, 0x200000) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000002c0)={0x0, 0x1000, "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"}, &(0x7f00000000c0)=0x1008) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000100)={r2, 0xc3, "6203bade5b0ce4b52ae4d7ab9ab6043331e40e98d9c056f7c9c63dd29e2b00f41de5910bf69ec98ec1bcfaee8cfc69963e0b0ea94e2bdfd346a175e4094d8527eb9dd8995a58c6f6b59dba085602bdf3d031f421f49109ff4f1e1277c51110d102c506659074357ac8aa4c5fed8af20db0333df6d9f1732324cd03b943408aa719dab45603f72fa89e40d609e4637229371da410c7dd8f44000f34b95ea1a145139de51434834466b8938679b9cb91ccc80507662fe9d83492df901be098d435f3a662"}, &(0x7f0000000200)=0xcb) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000280)={0x14, 0x2, 0x1, 0xffffffffffffffff}, 0x14}, 0x1}, 0x0) [ 121.253554] EXT4-fs warning (device sda1): ext4_group_extend:1785: will only finish group (524288 blocks, 256 new) [ 121.264237] EXT4-fs warning (device sda1): ext4_group_extend:1790: can't read last block, resize aborted [ 121.332457] EXT4-fs warning (device sda1): ext4_group_extend:1785: will only finish group (524288 blocks, 256 new) [ 121.370687] EXT4-fs warning (device sda1): ext4_group_extend:1790: can't read last block, resize aborted 07:49:49 executing program 4: mknod(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) 07:49:49 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000340)='fou\x00') ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000040)='fou\x00') fsync(0xffffffffffffffff) 07:49:49 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) socketpair$inet6_udplite(0xa, 0x2, 0x88, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x80000) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = creat(&(0x7f0000000100)='./bus\x00', 0xd4cbb08a79e632d1) fcntl$setlease(r0, 0x400, 0x40000000000000) rename(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='./file0\x00') fcntl$setlease(r3, 0x400, 0x2) 07:49:49 executing program 5: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x200, 0x0) ioctl$KIOCSOUND(r2, 0x4b2f, 0x5) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)) r3 = fcntl$dupfd(r0, 0x406, r1) ioctl$KVM_GET_TSC_KHZ(r3, 0xaea3) r4 = getuid() setsockopt$sock_cred(r0, 0x1, 0x10, &(0x7f0000000040)={0x0, r4}, 0xfffffc37) 07:49:49 executing program 7: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, &(0x7f0000975000)=@can, &(0x7f0000000040)=0x80, 0x0) sendmmsg(r2, &(0x7f0000000c00), 0x70967c17166daa5c, 0x0) recvmsg(r1, &(0x7f00000016c0)={&(0x7f00000000c0)=@rc, 0x80, &(0x7f0000000440), 0x0, &(0x7f0000001640)=""/112, 0x70}, 0x0) accept4(r0, 0x0, &(0x7f0000000440), 0x0) recvmsg(r1, &(0x7f0000000080)={&(0x7f0000000180)=@pppoe={0x0, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000480)=""/80, 0x50}, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x400401, 0x82) unlinkat(r3, &(0x7f0000000200)='./file0\x00', 0x0) write(r1, &(0x7f0000000840), 0xff98) 07:49:49 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000080)) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f00000000c0)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000100)=0x18) 07:49:49 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = dup(r0) r2 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000600)={{0x5, 0x1, 0xa7b, 0x3, 'syz1\x00', 0xffffffffffffffe1}, 0x0, 0x20, 0x4, r2, 0x1, 0x5, 'syz1\x00', &(0x7f0000000040)=['net/rt6_stats\x00'], 0xe, [], [0xb4, 0x80000000, 0x7, 0x5d4]}) listen(r1, 0x9) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$TUNGETSNDBUF(r3, 0x800454d3, &(0x7f0000000100)) ioctl(r0, 0x5a3, &(0x7f00000003c0)="025cc83d6d345f8f762070e7cca410a2924a6f82a03928615d0d17a42589b993dd0079559b5df893ca463425c242957696d6fddc1c1b48bd0faefdff10c2e300a8a24026838cdf87070a5304a41058b4f0b97450ec4bec50f46926578bbc2f9e958f56a49f9d60dfe40e0f87b4de91daa76db4b148dd97d35a513a5a716c58ba875dc372e7e08599a00a732190d6fe46d0818f5b6eb86f8d362bb16a5bfc6c7e238a3224877d5d4044aa54df47aadd4d09b4787756d149590993eceb1bae812c60fafca198769361c089db4c72") r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/rt6_stats\x00') r5 = gettid() ioctl$EVIOCSABS3F(r4, 0x401845ff, &(0x7f00000000c0)={0x4, 0x4, 0x80000000, 0x7, 0x9, 0xb7e6}) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r4, 0xc1105511, &(0x7f00000004c0)={{0x6, 0x6, 0x7f, 0x0, 'syz0\x00'}, 0x5, 0x34, 0x100000000, r5, 0x0, 0x7, 'syz1\x00', &(0x7f0000000040), 0x0, [], [0x800, 0x7, 0x7, 0x2]}) read(r4, &(0x7f00000002c0)=""/250, 0xfa) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000080)={0x100, 0x8, 0xfff, 0x0, 0xfffffffffffffffd}) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000001c0)={0x1, 0x205, 0x8, 0xfff, 0x0}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={r6, 0x38, &(0x7f0000000240)=[@in6={0xa, 0x4e22, 0x1, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, @in6={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}, 0x2a1}]}, &(0x7f0000000740)=0x10) r7 = msgget$private(0x0, 0x4) msgctl$MSG_INFO(r7, 0xc, &(0x7f0000000140)=""/59) 07:49:49 executing program 6: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x10000, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast5)\x00'}, 0x58) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x10) r2 = accept$alg(r1, 0x0, 0x0) r3 = accept4(r2, 0x0, &(0x7f0000000080), 0x0) sendmmsg(r3, &(0x7f0000001b00)=[{{&(0x7f0000001640)=@hci={0x1f}, 0x80, &(0x7f0000001a80)=[{&(0x7f0000001980)="32ec300c5df63e3242d635250dede6bfdaa12cdd02db72b0f44ce1362088b949e4", 0x21}], 0x1}}], 0x1, 0x0) 07:49:49 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000000000000000fbff000000000000000007002e2f66691e6530"], 0x2a) lstat(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = getgid() mount$9p_virtio(&(0x7f0000000080)='cache=none', &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x20a2, &(0x7f00000005c0)={'trans=virtio,', {[{@version_9p2000='version=9p2000', 0x2c}, {@access_uid={'access', 0x3d, r2}, 0x2c}, {@debug={'debug', 0x3d, 0x5}, 0x2c}, {@afid={'afid', 0x3d, 0x9}, 0x2c}, {@afid={'afid', 0x3d}, 0x2c}, {@dfltgid={'dfltgid', 0x3d, r3}, 0x2c}, {@posixacl='posixacl', 0x2c}, {@version_u='version=9p2000.u', 0x2c}, {@nodevmap='nodevmap', 0x2c}, {@uname={'uname', 0x3d, 'wlan1vboxnet0'}, 0x2c}]}}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RSTATu(r1, &(0x7f0000001a40)=ANY=[@ANYBLOB="790000007d010000005800000000000000000000000000000000000000000000000000000000000000000000000800000000000000657273696f6e3d3970323030302e750d00776c616e3176626f786e657430030039700005007266646e6f0c0076626f786e657431287d2524", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_none='cache=none', 0x2c}]}}) 07:49:49 executing program 3: socketpair(0x15, 0x806, 0x400000000, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000000)=""/228) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000100)={0x55, 0x3f, 0xdf8d, {0x80000001, 0x8}, {0xf1, 0x80000001}, @rumble={0x5, 0x6}}) 07:49:49 executing program 5: r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f00000000c0), 0x0) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x81) timerfd_settime(r0, 0x3, &(0x7f0000000080)={{}, {0x0, 0x1c9c380}}, &(0x7f000000dfe0)) clock_gettime(0x0, &(0x7f0000000040)={0x0}) clock_settime(0x0, &(0x7f0000000180)={r1}) 07:49:49 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x1b, 0x5, 0x2}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f0000000000)="86", &(0x7f0000000240)}, 0x20) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x2080, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="110828bd7000fddbdf250500000020000300080007004eecda0014000200000000000000000000000000000000000800040003000000"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) 07:49:49 executing program 6: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000007751957bca1e752200000703000000fe81007a0af0fff8fffffd79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000008000000b7050000020000006a0a00fe000000008500000032000000b7000000000000009500040000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x8a, &(0x7f0000000080)="de009b8db770076a6337ccd9e871", &(0x7f00000000c0)=""/138}, 0x28) r1 = gettid() tkill(r1, 0x28) 07:49:49 executing program 0: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000140)='./file0/file1\x00') write$cgroup_int(r1, &(0x7f0000000980), 0x1) write$cgroup_int(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="1a"], 0x1) times(&(0x7f0000000000)) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f0000000480)=&(0x7f0000000240)) truncate(&(0x7f0000000b00)='./file0/file1\x00', 0x201f) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x8000, 0x80) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e22, 0x4, @empty, 0x8}}, 0x7fff, 0x9, 0x8, 0x8, 0x10}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000380)={r2, @in6={{0xa, 0x4e21, 0x80000001, @remote={0xfe, 0x80, [], 0xbb}, 0x9}}, [0xfffffffffffffc00, 0x5b12, 0x7981, 0x3, 0x1, 0x6, 0x8000, 0xffffffff98430efd, 0x3ff, 0x4, 0x3, 0x6, 0x2, 0x2, 0xb8]}, &(0x7f00000001c0)=0x100) 07:49:49 executing program 1: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000000), 0x9486, &(0x7f0000000280)=ANY=[@ANYBLOB="6c6f636b70726f74de29902b3c6c654906786f3d6c6f636b5f6e6f6c6f636b2c6c74"]) 07:49:49 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x100000000011, 0x4, 0x4, 0x7}, 0x2c) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003dc0)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000037c0), 0x0, &(0x7f0000003d00)}, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040), 0x10) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r0, &(0x7f0000000180), &(0x7f0000000400)=""/221}, 0x12) socket$inet_udp(0x2, 0x2, 0x0) [ 122.394868] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 122.402747] FAT-fs (loop0): Filesystem has been set read-only [ 122.692905] ================================================================== [ 122.700327] BUG: KASAN: use-after-free in _copy_from_iter+0x9ea/0x1090 [ 122.706983] Read of size 21 at addr ffff88018fbba660 by task kworker/1:2/4687 [ 122.714237] [ 122.715855] CPU: 1 PID: 4687 Comm: kworker/1:2 Not tainted 4.18.0-rc5-next-20180719+ #11 [ 122.724072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 122.733422] Workqueue: events p9_write_work [ 122.737725] Call Trace: [ 122.740300] dump_stack+0x1c9/0x2b4 [ 122.743912] ? dump_stack_print_info.cold.2+0x52/0x52 [ 122.749102] ? printk+0xa7/0xcf [ 122.752369] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 122.757127] ? _copy_from_iter+0x9ea/0x1090 [ 122.761440] print_address_description+0x6c/0x20b [ 122.766268] ? _copy_from_iter+0x9ea/0x1090 [ 122.770571] kasan_report.cold.7+0x242/0x30d [ 122.774973] check_memory_region+0x13e/0x1b0 [ 122.779375] memcpy+0x23/0x50 [ 122.782475] _copy_from_iter+0x9ea/0x1090 [ 122.786604] ? schedule+0xfb/0x450 [ 122.790125] ? __schedule+0x1ea0/0x1ea0 [ 122.794086] ? _copy_from_iter_nocache+0x1050/0x1050 [ 122.799184] ? insert_work+0x375/0x4f0 [ 122.803841] ? __queue_work+0x688/0x1410 [ 122.807886] copy_page_from_iter+0x576/0x890 [ 122.812279] ? mutex_lock_nested+0x16/0x20 [ 122.816515] ? pipe_wait+0x1ff/0x2c0 [ 122.820214] ? _copy_from_iter+0x1090/0x1090 [ 122.824611] pipe_write+0x235/0xeb0 [ 122.828223] __vfs_write+0x6af/0x9d0 [ 122.831927] ? kernel_read+0x120/0x120 [ 122.835797] ? lock_acquire+0x1e4/0x540 [ 122.839763] ? p9_poll_workfn+0x4cb/0x6d0 [ 122.843899] ? lock_acquire+0x1e4/0x540 [ 122.847867] ? p9_write_work+0x554/0xd50 [ 122.851941] ? rw_verify_area+0x118/0x360 [ 122.856079] vfs_write+0x1fc/0x560 [ 122.859612] kernel_write+0xab/0x120 [ 122.863309] p9_write_work+0x6f1/0xd50 [ 122.867193] ? p9_fd_create_tcp+0x8a0/0x8a0 [ 122.871498] ? lock_acquire+0x1e4/0x540 [ 122.875480] ? process_one_work+0xb9b/0x1ba0 [ 122.879881] ? kasan_check_read+0x11/0x20 [ 122.884028] ? lock_release+0xa30/0xa30 [ 122.887985] ? kasan_check_read+0x11/0x20 [ 122.892119] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 122.896682] ? read_word_at_a_time+0x20/0x20 [ 122.901074] ? do_raw_spin_lock+0xc1/0x200 [ 122.905290] process_one_work+0xc73/0x1ba0 [ 122.909515] ? trace_hardirqs_on+0x10/0x10 [ 122.913750] ? pwq_dec_nr_in_flight+0x4a0/0x4a0 [ 122.918400] ? lock_repin_lock+0x430/0x430 [ 122.922620] ? __sched_text_start+0x8/0x8 [ 122.926757] ? lock_downgrade+0x8f0/0x8f0 [ 122.930896] ? check_preempt_wakeup+0x6a8/0x1280 [ 122.935644] ? run_rebalance_domains+0x4c0/0x4c0 [ 122.940401] ? kasan_check_write+0x14/0x20 [ 122.944643] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 122.949559] ? lock_downgrade+0x8f0/0x8f0 [ 122.953693] ? lock_acquire+0x1e4/0x540 [ 122.957651] ? worker_thread+0x3dc/0x13c0 [ 122.961794] ? lock_downgrade+0x8f0/0x8f0 [ 122.965946] ? lock_release+0xa30/0xa30 [ 122.969902] ? kasan_check_read+0x11/0x20 [ 122.974044] ? do_raw_spin_unlock+0xa7/0x2f0 [ 122.978436] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 122.983005] ? kasan_check_write+0x14/0x20 [ 122.987236] ? do_raw_spin_lock+0xc1/0x200 [ 122.991461] worker_thread+0x189/0x13c0 [ 122.995422] ? process_one_work+0x1ba0/0x1ba0 [ 122.999914] ? finish_task_switch+0x1d3/0x870 [ 123.004399] ? lock_acquire+0x1e4/0x540 [ 123.008367] ? __kthread_parkme+0xd7/0x1b0 [ 123.012600] ? kasan_check_read+0x11/0x20 [ 123.016731] ? do_raw_spin_unlock+0xa7/0x2f0 [ 123.021155] ? kasan_check_write+0x14/0x20 [ 123.025466] ? trace_hardirqs_on+0xd/0x10 [ 123.029605] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 123.035132] ? __kthread_parkme+0x106/0x1b0 [ 123.039523] kthread+0x345/0x410 [ 123.042872] ? process_one_work+0x1ba0/0x1ba0 [ 123.047357] ? kthread_bind+0x40/0x40 [ 123.051144] ret_from_fork+0x3a/0x50 [ 123.054836] [ 123.056442] Allocated by task 6771: [ 123.060056] save_stack+0x43/0xd0 [ 123.063488] kasan_kmalloc+0xc4/0xe0 [ 123.067190] __kmalloc+0x14e/0x760 [ 123.070710] p9_fcall_alloc+0x1e/0x90 [ 123.074490] p9_client_prepare_req.part.8+0x107/0xa00 [ 123.079669] p9_client_rpc+0x242/0x1330 [ 123.084062] p9_client_create+0xca4/0x1537 [ 123.088279] v9fs_session_init+0x21a/0x1a80 [ 123.092593] v9fs_mount+0x7c/0x900 [ 123.096123] legacy_get_tree+0x131/0x460 [ 123.100177] vfs_get_tree+0x1cb/0x5c0 [ 123.103958] do_mount+0x6f2/0x1e20 [ 123.107478] ksys_mount+0x12d/0x140 [ 123.111086] __x64_sys_mount+0xbe/0x150 [ 123.115049] do_syscall_64+0x1b9/0x820 [ 123.118918] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 123.124095] [ 123.125702] Freed by task 6771: [ 123.128963] save_stack+0x43/0xd0 [ 123.132394] __kasan_slab_free+0x11a/0x170 [ 123.136609] kasan_slab_free+0xe/0x10 [ 123.140402] kfree+0xd9/0x260 [ 123.143497] p9_free_req+0xb5/0x120 [ 123.147107] p9_client_rpc+0xa8e/0x1330 [ 123.151081] p9_client_create+0xca4/0x1537 [ 123.155297] v9fs_session_init+0x21a/0x1a80 [ 123.159600] v9fs_mount+0x7c/0x900 [ 123.163140] legacy_get_tree+0x131/0x460 [ 123.167182] vfs_get_tree+0x1cb/0x5c0 [ 123.170962] do_mount+0x6f2/0x1e20 [ 123.174480] ksys_mount+0x12d/0x140 [ 123.178085] __x64_sys_mount+0xbe/0x150 [ 123.182045] do_syscall_64+0x1b9/0x820 [ 123.185919] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 123.191081] [ 123.192701] The buggy address belongs to the object at ffff88018fbba640 [ 123.192701] which belongs to the cache kmalloc-16384 of size 16384 [ 123.205691] The buggy address is located 32 bytes inside of [ 123.205691] 16384-byte region [ffff88018fbba640, ffff88018fbbe640) [ 123.217643] The buggy address belongs to the page: [ 123.222554] page:ffffea00063eee00 count:1 mapcount:0 mapping:ffff8801da802200 index:0x0 compound_mapcount: 0 [ 123.232507] flags: 0x2fffc0000010200(slab|head) [ 123.237163] raw: 02fffc0000010200 ffffea00063f5808 ffffea00063d8608 ffff8801da802200 [ 123.245035] raw: 0000000000000000 ffff88018fbba640 0000000100000001 0000000000000000 [ 123.252908] page dumped because: kasan: bad access detected [ 123.258594] [ 123.260198] Memory state around the buggy address: [ 123.265108] ffff88018fbba500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 123.272446] ffff88018fbba580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 123.279800] >ffff88018fbba600: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 123.287137] ^ [ 123.293621] ffff88018fbba680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 123.300959] ffff88018fbba700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 123.308306] ================================================================== [ 123.316564] Kernel panic - not syncing: panic_on_warn set ... [ 123.316564] [ 123.323954] CPU: 1 PID: 4687 Comm: kworker/1:2 Tainted: G B 4.18.0-rc5-next-20180719+ #11 [ 123.332056] dccp_insert_option_ackvec: No space left for Ack Vector (51) on skb (65432+0), MPS=65475 ==> reduce payload size? [ 123.333551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 123.333573] Workqueue: events p9_write_work [ 123.333586] Call Trace: [ 123.361239] dump_stack+0x1c9/0x2b4 [ 123.364865] ? dump_stack_print_info.cold.2+0x52/0x52 [ 123.370042] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 123.374789] panic+0x238/0x4e7 [ 123.377964] ? add_taint.cold.5+0x16/0x16 [ 123.382102] ? do_raw_spin_unlock+0xa7/0x2f0 [ 123.386491] ? do_raw_spin_unlock+0xa7/0x2f0 [ 123.390880] ? _copy_from_iter+0x9ea/0x1090 [ 123.395193] kasan_end_report+0x47/0x4f [ 123.399153] kasan_report.cold.7+0x76/0x30d [ 123.403458] check_memory_region+0x13e/0x1b0 [ 123.407847] memcpy+0x23/0x50 [ 123.410935] _copy_from_iter+0x9ea/0x1090 [ 123.415065] ? schedule+0xfb/0x450 [ 123.418584] ? __schedule+0x1ea0/0x1ea0 [ 123.422543] ? _copy_from_iter_nocache+0x1050/0x1050 [ 123.427653] ? insert_work+0x375/0x4f0 [ 123.431530] ? __queue_work+0x688/0x1410 [ 123.435584] copy_page_from_iter+0x576/0x890 [ 123.439972] ? mutex_lock_nested+0x16/0x20 [ 123.444188] ? pipe_wait+0x1ff/0x2c0 [ 123.447884] ? _copy_from_iter+0x1090/0x1090 [ 123.452286] pipe_write+0x235/0xeb0 [ 123.455902] __vfs_write+0x6af/0x9d0 [ 123.459603] ? kernel_read+0x120/0x120 [ 123.463482] ? lock_acquire+0x1e4/0x540 [ 123.467447] ? p9_poll_workfn+0x4cb/0x6d0 [ 123.471582] ? lock_acquire+0x1e4/0x540 [ 123.475541] ? p9_write_work+0x554/0xd50 [ 123.479585] ? rw_verify_area+0x118/0x360 [ 123.483725] vfs_write+0x1fc/0x560 [ 123.487249] kernel_write+0xab/0x120 [ 123.490958] p9_write_work+0x6f1/0xd50 [ 123.494834] ? p9_fd_create_tcp+0x8a0/0x8a0 [ 123.499160] ? lock_acquire+0x1e4/0x540 [ 123.503115] ? process_one_work+0xb9b/0x1ba0 [ 123.507506] ? kasan_check_read+0x11/0x20 [ 123.511725] ? lock_release+0xa30/0xa30 [ 123.515680] ? kasan_check_read+0x11/0x20 [ 123.519812] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 123.524387] ? read_word_at_a_time+0x20/0x20 [ 123.528781] ? do_raw_spin_lock+0xc1/0x200 [ 123.533010] process_one_work+0xc73/0x1ba0 [ 123.537243] ? trace_hardirqs_on+0x10/0x10 [ 123.541460] ? pwq_dec_nr_in_flight+0x4a0/0x4a0 [ 123.546116] ? lock_repin_lock+0x430/0x430 [ 123.550342] ? __sched_text_start+0x8/0x8 [ 123.554490] ? lock_downgrade+0x8f0/0x8f0 [ 123.559109] ? check_preempt_wakeup+0x6a8/0x1280 [ 123.563845] ? run_rebalance_domains+0x4c0/0x4c0 [ 123.568603] ? kasan_check_write+0x14/0x20 [ 123.572825] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 123.577738] ? lock_downgrade+0x8f0/0x8f0 [ 123.581869] ? lock_acquire+0x1e4/0x540 [ 123.585828] ? worker_thread+0x3dc/0x13c0 [ 123.589955] ? lock_downgrade+0x8f0/0x8f0 [ 123.594090] ? lock_release+0xa30/0xa30 [ 123.594649] dccp_close: ABORT with 65432 bytes unread [ 123.598064] ? kasan_check_read+0x11/0x20 [ 123.598076] ? do_raw_spin_unlock+0xa7/0x2f0 [ 123.598087] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 123.598100] ? kasan_check_write+0x14/0x20 [ 123.598113] ? do_raw_spin_lock+0xc1/0x200 [ 123.624820] worker_thread+0x189/0x13c0 [ 123.628807] ? process_one_work+0x1ba0/0x1ba0 [ 123.633313] ? finish_task_switch+0x1d3/0x870 [ 123.637804] ? lock_acquire+0x1e4/0x540 [ 123.641761] ? __kthread_parkme+0xd7/0x1b0 [ 123.645998] ? kasan_check_read+0x11/0x20 [ 123.650133] ? do_raw_spin_unlock+0xa7/0x2f0 [ 123.654524] ? kasan_check_write+0x14/0x20 [ 123.658740] ? trace_hardirqs_on+0xd/0x10 [ 123.662872] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 123.668386] ? __kthread_parkme+0x106/0x1b0 [ 123.672698] kthread+0x345/0x410 [ 123.676049] ? process_one_work+0x1ba0/0x1ba0 [ 123.680524] ? kthread_bind+0x40/0x40 [ 123.684307] ret_from_fork+0x3a/0x50 [ 123.688500] Dumping ftrace buffer: [ 123.692025] (ftrace buffer empty) [ 123.695810] Kernel Offset: disabled [ 123.699416] Rebooting in 86400 seconds..