[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 92.140039] audit: type=1800 audit(1553402507.189:25): pid=9838 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 92.159232] audit: type=1800 audit(1553402507.199:26): pid=9838 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 92.178625] audit: type=1800 audit(1553402507.219:27): pid=9838 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 97.694969] sshd (9975) used greatest stack depth: 53616 bytes left Warning: Permanently added '10.128.0.5' (ECDSA) to the list of known hosts. 2019/03/24 04:42:03 fuzzer started 2019/03/24 04:42:08 dialing manager at 10.128.0.26:37019 2019/03/24 04:42:08 syscalls: 1 2019/03/24 04:42:08 code coverage: enabled 2019/03/24 04:42:08 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2019/03/24 04:42:08 extra coverage: extra coverage is not supported by the kernel 2019/03/24 04:42:08 setuid sandbox: enabled 2019/03/24 04:42:08 namespace sandbox: enabled 2019/03/24 04:42:08 Android sandbox: /sys/fs/selinux/policy does not exist 2019/03/24 04:42:08 fault injection: enabled 2019/03/24 04:42:08 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/03/24 04:42:08 net packet injection: enabled 2019/03/24 04:42:08 net device setup: enabled 04:45:47 executing program 0: [ 333.288451] IPVS: ftp: loaded support on port[0] = 21 [ 333.446645] chnl_net:caif_netlink_parms(): no params data found [ 333.521508] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.528254] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.537041] device bridge_slave_0 entered promiscuous mode [ 333.546567] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.553188] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.561620] device bridge_slave_1 entered promiscuous mode [ 333.596066] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 333.607675] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 333.641566] team0: Port device team_slave_0 added [ 333.650830] team0: Port device team_slave_1 added [ 333.787970] device hsr_slave_0 entered promiscuous mode [ 334.022457] device hsr_slave_1 entered promiscuous mode [ 334.194281] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.200858] bridge0: port 2(bridge_slave_1) entered forwarding state [ 334.208182] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.214801] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.299100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.320577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 334.332918] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.341509] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.355530] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 334.374887] 8021q: adding VLAN 0 to HW filter on device team0 [ 334.393593] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 334.401928] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.408421] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.468860] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 334.477399] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.484014] bridge0: port 2(bridge_slave_1) entered forwarding state [ 334.493966] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 334.503182] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 334.511982] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 334.520145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 334.533271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 334.541336] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 334.603405] 8021q: adding VLAN 0 to HW filter on device batadv0 04:45:49 executing program 0: 04:45:49 executing program 0: 04:45:49 executing program 0: 04:45:50 executing program 0: 04:45:50 executing program 0: 04:45:50 executing program 0: syz_emit_ethernet(0x3a, &(0x7f00000001c0)={@local, @local, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0xf433, 0x0, @dev, @remote={0xac, 0x14, 0x223}, {[@rr={0xffffff86, 0x3}]}}, @icmp=@timestamp_reply}}}}, 0x0) r0 = eventfd2(0x6, 0x1) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000000)) 04:45:50 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000080)={{{@in6, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6}}, &(0x7f0000000180)=0xe8) fstat(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0, 0x0}, &(0x7f0000000440)=0xc) r6 = getgid() getresgid(&(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)=0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000540)={0x0, 0x0, 0x0}, &(0x7f0000000580)=0xc) r9 = getgid() fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000005c0)={{}, {0x1, 0x1}, [{0x2, 0x7, r1}, {0x2, 0x4, r2}, {0x2, 0x0, r3}], {0x4, 0x7}, [{0x8, 0x4, r4}, {0x8, 0x4, r5}, {0x8, 0x7, r6}, {0x8, 0x1, r7}, {0x8, 0x7, r8}, {0x8, 0x1, r9}], {}, {0x20, 0x1}}, 0x6c, 0x2) poll(&(0x7f0000000200)=[{r0}], 0x1, 0x0) 04:45:50 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000080)={{{@in6, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6}}, &(0x7f0000000180)=0xe8) fstat(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0, 0x0}, &(0x7f0000000440)=0xc) r6 = getgid() getresgid(&(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)=0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000540)={0x0, 0x0, 0x0}, &(0x7f0000000580)=0xc) r9 = getgid() fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000005c0)={{}, {0x1, 0x1}, [{0x2, 0x7, r1}, {0x2, 0x4, r2}, {0x2, 0x0, r3}], {0x4, 0x7}, [{0x8, 0x4, r4}, {0x8, 0x4, r5}, {0x8, 0x7, r6}, {0x8, 0x1, r7}, {0x8, 0x7, r8}, {0x8, 0x1, r9}], {}, {0x20, 0x1}}, 0x6c, 0x2) poll(&(0x7f0000000200)=[{r0}], 0x1, 0x0) 04:45:50 executing program 0: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x1) ioctl$UFFDIO_REGISTER(r0, 0x8010aa02, &(0x7f0000006ffc)={{&(0x7f0000009000/0x4000)=nil, 0x4000}}) 04:45:50 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x105000, 0x0) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000040)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_buf(r1, 0x1, 0x2a, &(0x7f0000000080)=""/192, &(0x7f0000004ffc)=0xc0) 04:45:50 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x105000, 0x0) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000040)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_buf(r1, 0x1, 0x2a, &(0x7f0000000080)=""/192, &(0x7f0000004ffc)=0xc0) 04:45:50 executing program 0: syz_emit_ethernet(0x46, &(0x7f00000a8fa2)={@link_local, @link_local, [], {@ipv4={0x800, {{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @broadcast, {[@rr={0x7, 0x3, 0x4}, @timestamp={0x44, 0xc, 0x9, 0x0, 0x0, [{}, {}]}]}}, @icmp=@timestamp}}}}, 0x0) r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x20040, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x8) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x64800, 0x0) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mixer\x00', 0x0, 0x0) ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f0000000180)={0x1, 0x3, [{r2, 0x0, 0xfffffffff0001000, 0x1000000}, {r3, 0x0, 0xfffffffff0000000}, {r4, 0x0, 0x100000000, 0x10000}]}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r0, 0xc040564b, &(0x7f0000000040)={0x4, 0x0, 0x0, 0x4000000000000000, 0x2, {0x8, 0x100000001}, 0xfffffffffffffffd}) 04:45:51 executing program 0: init_module(&(0x7f0000000340)='\x00', 0x1, &(0x7f0000000380)='\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$VIDIOC_ENCODER_CMD(r2, 0xc028564d, &(0x7f00000002c0)={0x1, 0x1, [0x2, 0x1, 0x1ff, 0x40, 0xea10000000000000, 0x80, 0x6]}) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000080)) ioctl$VIDIOC_S_MODULATOR(r1, 0x40445637, &(0x7f0000000140)={0x9, "842db7c5f0a199f9fa8a042e86f4ab6d6fe9240c74c76c64d5599b67db30ddc5", 0x0, 0xddef, 0x5b6, 0x3}) truncate(&(0x7f00000003c0)='./file0\x00', 0x2) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20000000220001000000001800000000884a0e01060000000c000a000300005666474fa0f9595aebf09eb5d6253aaeead0e4fb363211ed60080659b0badaa18ffbd3139d6fe8bc6909f264daf95f23bdb8b1bde325a75df3fb031a0eeebc45a1c91cf34b85f7d1b38e71282c21eab3b7af097812dc98f3a4a671d28f0772d9585a18ade5065f00f27214f0b98407ada4060f000000000000440b2f2d2beee9fe24cb7561df5e331807df9646f9271fd627e30986c72ec2d670675197db626022648e356f00534e7a3c8a"], 0x20}}, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f00000000c0)=0xc00, 0x4) times(&(0x7f0000000300)) 04:45:51 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000080)={0x8, {{0xa, 0x4e23, 0x3, @loopback, 0x5}}, 0x0, 0x3, [{{0xa, 0x4e24, 0x4, @remote, 0x5}}, {{0xa, 0x4e23, 0x0, @loopback, 0x1}}, {{0xa, 0x4e20, 0x4, @empty, 0x4}}]}, 0x210) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000000)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900080003000c00060000001900a30700000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) [ 336.151295] IPv6: Can't replace route, no match found [ 336.159493] IPv6: Can't replace route, no match found 04:45:51 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000840, &(0x7f0000000140)={0x2, 0x4e22, @rand_addr=0xfffffffffffffffe}, 0x10) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[], 0x47) ioctl$SG_GET_NUM_WAITING(r1, 0x227d, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x40000, 0x0) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x3, 0x0, 0x4}}, 0x14) 04:45:51 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev, 0x4}, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, r3}}, 0x48) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x18, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00'}, 0x30) r5 = getuid() getgroups(0x2, &(0x7f0000000a40)=[0xee00, 0xffffffffffffffff]) r7 = getpid() r8 = getuid() r9 = getgid() ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000001040)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000001080)={{{@in=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000001180)=0xe8) r12 = getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000013c0)=0x0) fstat(r1, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000002b40)=0x0) fstat(r0, &(0x7f0000002b80)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, &(0x7f0000003a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r19 = gettid() getresuid(&(0x7f0000002c80), &(0x7f0000002cc0)=0x0, &(0x7f0000002d00)) lstat(&(0x7f0000002d40)='./file0\x00', &(0x7f0000002d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002e00)={0x0}, &(0x7f0000002e40)=0xc) lstat(&(0x7f0000002e80)='./file0\x00', &(0x7f0000002ec0)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000002f40)='./file0\x00', &(0x7f0000002f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r25 = getpgrp(0x0) r26 = getuid() stat(&(0x7f0000003000)='./file0\x00', &(0x7f0000003040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000003280)=0x0) r29 = getuid() getresgid(&(0x7f00000032c0), &(0x7f0000003300), &(0x7f0000003340)=0x0) r31 = gettid() getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000003380)={{{@in=@initdev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@loopback}}, &(0x7f0000003480)=0xe8) stat(&(0x7f00000034c0)='./file0\x00', &(0x7f0000003500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003580)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000035c0)={{{@in=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f00000036c0)=0xe8) stat(&(0x7f0000000c80)='./file0\x00', &(0x7f0000003b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r1, &(0x7f0000003880)=[{&(0x7f0000000080)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000980)=[{&(0x7f00000002c0)="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", 0xfd}, {&(0x7f0000000480)="324d69318624fa3b732145a68eee69c8013126a03d6b7ff3ed0e9ed272356468cc04e6903f269a1834a269f5df8cc1aa6ceb8f678c2f7f305cd163760a359b9b97625b6a8dad23e77690f8e40affba6dadff6331b11fac1be26ae19eed91fdaf0178176b0f9fbb4bb1413c8a449bc70e506f2e78a6c854c7d08a591d3a844847589cb793805f9ff453bc6789bfde25e032f5ad046be0ad0e06b507d0d7e82d7a5a148f5add58cebc683795fc6f39c50392e245eae16f4ea6ab3619eacb040fe71770d97d24fc9570f7456906d89f51d805b88b80a265", 0xd6}, {&(0x7f0000000000)="687d04aeef1a", 0x6}, {&(0x7f0000000580)="2881f6a276d0322824ed1bdafded39c2de28012776ed9114f6b8be3177315f28917c35dcaf7fcc47fba8733381babe921229ea2f8b900fd2c9495ad7bf810e1ecc9597690604fe38316863630b420d6e82b09c69d5bb10f030f50d944f08986b60520fda9ed8c189c787e2050488e3645a4bf5c8cdf6b2e19459b8d9fd71ad4a1ca9c74ab2766a491412f059c78f74d4f7ce9a12c2c0425d8619b945b9f738130b0cd3a7859cf8db6b387f1fd8fdc239bcb9a3f9e3786c5dd8119c5d805fe28a14137610ad55fd52abac", 0xca}, {&(0x7f0000000680)="edcb38ba050bbb63f9a2b82780033ceaa5c876f5b5ccd2d15efc98690f115c2f9295aaa732ec0d0ad7611b0a60c4fe5c780895fb78ce9f018624cbdd61a6661b9fc15a753ccd071124c2776ba52cb473bd60f78912a0888aa63fcdab0b88e615b8b7c8153aaa563e2ac428994cbbd811004bff4cf09788df5026d6a3843dc7a49847f8e72504d14ae7aac8c860612180cf0ab134cbef0a71e20f22b39e166b433b6f5e91b81f3eee3cf4282624fde6db37d64c96e06ff0044017f887224822a2ffa2d4ea5914463e9f85081b86", 0xcd}, {&(0x7f0000000780)="94935a6537f4352bf763ac5366a57bef25e3c87a983b53d7e16e5b52766d1aba70601ea34a67c7e15a086441e21156ca2d5f45bcc633232c90c0dff0993dbd9fcf66e3a4caa4c706153bdf436b1bcb4b3a15f7ee9c7d2099a2e856b6a39459a4882e4c3d27918b015e93c8a4ca3feade8f6eb59a66587bae083b2c9bb549d4e176b451b552959cc37a5b5874dadef2b806a0a6e16b81ee2e35dc58b7760f97ce2c2890463a3740c7356f2e2f72eb0cb116b8d67fee55736be5b8a4db5273574d5a", 0xc1}, {&(0x7f0000000200)="ddc77aa27d0fceb6e33a5e0eb992e9d936f266f802f606da71cf8e9ca36301dac795cfbdbb84efd099577ea09ac9e9768010fa811413e041e2f908a3b01d6f6981c21a4a3cd7b6707eea5498cf03150b02a0caf03ce793a160fbf5848891431a8a72da2b986b35e3347b72a39ed5bb69991334bd933b9cbefa", 0x79}, {&(0x7f0000000880)="78787bee8310e59a96d9d4f2e1f2054c14a35db13edc66874972c1f9fcb1d4c3844d2103c24302bc927e548e35c26c5766c1eb06e02175036ebb6cd94127bf49c01a82c9117705d1ab5ae7d85ca516c2adae6e56c10ef896663382d87717c997817c965bad3d524c2bce4568c9d33e2963d7d0c33247411829507a8ef4704785b9acb34e4e8e57f990b0960582b88ff60fb5d8ab46e5d99e64f47a74e298ae1c6fb01bfb79bf7c0c37cfa1116358e446546b783c851ed3f982e41d3b8c72697fec9a15d90e08ef4b", 0xc8}], 0x8, &(0x7f0000000a80)=[@cred={0x20, 0x1, 0x2, r4, r5, r6}, @cred={0x20, 0x1, 0x2, r7, r8, r9}], 0x40}, {&(0x7f0000000ac0)=@file={0x1}, 0x6e, &(0x7f0000000c40)=[{&(0x7f0000000b40)="9e78a1faa64cc8b93f161be42aedd0cafb507dddb88565356da702cf0cd2fd4feb97f2eda906d648", 0x28}, {&(0x7f0000000b80)="95918b4b80161945e628905238fb88150ed14676eef3436304ad786b32d9ced7f5358185e9fd2377c658af14f854be499fabf1f544cede4fd7f36e461aa7ca3c6035bd4c4b4e569a05aa606a2b41e3a953fabc685453d450b4bc1592877d67edb2e990871820fa26116ee5b2b373c5e60869b0138f2798238037c31a042f8174d5044dc609d9d6f7f8045a22e25ce8f58a10c3ba83522faf23b68c5a6ed3600414a20639", 0xa4}], 0x2, &(0x7f0000000c80), 0x0, 0x40}, {&(0x7f0000000cc0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001000)=[{&(0x7f0000000d40)="f2736361ebacd40c2c89b5cda5b80fc00f2bdbb7e4981d148b5dd50f73448ecf839cf57a0b35706544457f97262394fc298be967522c1942b45060d105466df31bb273eeff48a165960aa891f70cf9606b6524f45a59e2cf3b6f657d2c721b6659898541911561105e81933f72a0c807e752cf7b2e76dc8a6973890fbbab6a7ade8843b6f519cac1b75b18cb376b8e2810f176385891ad9be8ba1c96a8f1651847b419b72c3a3a790f867d95e06c1c6cd13153713fc4d0b418812f", 0xbb}, {&(0x7f0000000e00)="5e2489e83ea8e4fbb5dd0f59e33f08ff6f1ddd2ceb126893877b05869a5248c268cd07addc0669c735865a7f8a379d1c004c1fd4d288d42d4f6d3be444179c64e68cbd4d0d31450863030800b84b1e9e1adfa88c883d70f49c1fb417401a4d4f57b0abb830702438a51e098ffdede114aeb27204d4d57417481c65a2dfb150f261c5ef0faee5a11a8d306275e2b9b2209d176e061e10c78960173922cd6798146b08cbb8c8f9f724a868eeda64c0b76326b446c8931be7061ebffb5447bbdeea41c2ad331a89ba4491c1b55743530b0b28473363ed79239d1c99cd8a5868b6cf5e7bd116c8bf358d36432d73", 0xec}, {&(0x7f0000000f00)="c2374c40d70752b2b44f484a56fc6c8824cf211a4a9d854b0e9cc5e99a0618f67464257c39fd36fca2445589004f280de64f46114c7305b932cfe7b0c2d3e6a19f5c6e77671808474c70898117e8df8b716cb508356759063b1b0256cc6c5d37978af8fba2ffc0a40bee6c6db9144772b6c19b176ba68d6df169722301de4af323464fb406db12cd0d2d302fcc4a813f11c4d269ff5e43a8d51c5cbf6bdcebb2965c4259e4d09875aba0aacc", 0xac}, {&(0x7f0000000fc0)="6b12dc8f8ad2680abd9b958ca0ee", 0xe}], 0x4, &(0x7f00000011c0)=[@cred={0x20, 0x1, 0x2, r10, r11, r12}], 0x20, 0x40005}, {&(0x7f0000001200)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001380)=[{&(0x7f0000001280)="f50b2318175c71b292f0330fc72890d6c618986813c4aec9dd956f0c512bb673e9c6cbfb2798063972a9c2c460ef42adbfeff350c764fbb0a2cc86949b0f5f388784cc9767cdb7a2cd587bd807b8a322911e444281c68010feacc94ca8dd3ee65ca6a71ed7f0348486c5bd4996bb14e13a4ae3bb59e9fdc551f91d47e1d49fc7027e0e20f46c6ef9be54260c5cf14dfd910c44da039487afba04e79d3f5de4a73b883371f8425741038278509923198f661615a0d9aea9ab84bd26ac86f2841b130fd8fe59bb4aa4e1093dc277588033631794e5373342c4c3b1ccecb3f9a5ae26", 0xe1}], 0x1, &(0x7f0000001500)=[@cred={0x20, 0x1, 0x2, r13, r14, r15}], 0x20}, {&(0x7f0000001540)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002ac0)=[{&(0x7f00000015c0)="804a4c1653a896357c6f5969e1009e86d3bf031099745a4d13d9ea8e7280108de94e5d7dc6b4cdeca722a69b3913906d613286080a8255f217e0750146b959cdaafb2ba86a053e0f53f97b29e3d0f891ca11d70d6b34ed1cc9f88884e1f1b5bb9dd9ce8b9ebb31adbb374ede704786ffae73fe157907049628e6eb3b073841efdc1d30cca4f6c668ca68b5169a54904b8c159e989a90590af566190e958e6e8dfb9924ae60ba10db911fbc8f27ba218f461b62bfcc2fdc6d2109f0c2a07dca67cc", 0xc1}, {&(0x7f00000016c0)="2bfc6109c70d860e76e5a11267620f0e44f0ddb18662a40d6aba8dd1f6333be1d0ded3bc8292bb4a94f3e728edd15bc3023bef45c61b3fb32274b50caf7d2bc6e6fe5b3959eca2f057811681f5450f37ee58efc9dfceaa9b0733580ae8d83aef7e77e741b8617185fb275597d4fb6487c6602dcc31a1c9f888fbd8932005a8a1587e", 0x82}, {&(0x7f0000001780)}, {&(0x7f00000017c0)="245fd1b53e5d8e1cdb79cd679f29bf94c24ce4bd4094ef6c7d778518d33de14e4fdd194ec1d64c784d621b21f069f63ed2c10feafb5f15ca9b0da213f6616d70079e9f0fa77eea89487cfd7e0cedfad45adcd657cc9d144a61e6383648dcc2c0b6b3665fc1801fe96baa50cbef72590772e2140a8c0c6d5bdd1411b10de90b6ed1", 0x81}, {&(0x7f0000001880)="d5c59da0a938595257c59e925250e8359a161d14f6e1303b952e9d2d40dbb3d0293836be5a2077f6d512f9d16035cd96d1985618e9ae", 0x36}, {&(0x7f00000018c0)="e22e4f8c20cd7056545f3404a876b3b98d50ba853cb84ac4b908c103da0ce86f8df4bb53bcccccdaeebd652cdeb72018325eeec1836a5b818fef34633097bd3a7cb98012ff1eb6cff7788656bc5dec803da3c6836c2051008b73e1c572af49d6f892a19461d2b87d43a488e1d7c599f2bdcb53cf606b029c1f53132c1b4fc34396053051622e701d8167204df000baf46c62b429606c4a0ad327548e868c51778717dea5536ea068a3aa7f7f4e03012fd160a4b26b6e0338900bbea49d570c023e51ca4ff9e2c27d8b21", 0xca}, {&(0x7f00000019c0)="ab3a98f82513a612b14e53069141966fa124bb0cdb39e6e39b744b39aeb7a44feb25a2ae3d32bcaf69ae694de697786afb091592a2208c81c513b234582348c61ce2ebbaa5cfcc56889a4fa2d78a3166b13ec03f9cc69f264f1facd3c84db1e18b934a149a5f76e08ec2ff15d08d43ff9a3ab2d47df3e1a9ab572ddc53f26f52755ed9792fdcf4c80bce33fabe5e85b1f5b7d8232efb479aed16970fc26139b43c8e18809499d4ec6bbb91b7332200c8197dfb6343c67b25f83ffe01a61a735ae780650d8f8e2b2af64f76c623c09e8075bcb3cbed8614fb16aaa798f003ce5bed", 0xe1}, {&(0x7f0000001ac0)="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", 0x1000}], 0x8, &(0x7f00000030c0)=[@rights={0x28, 0x1, 0x1, [r1, r1, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r16, r17, r18}, @cred={0x20, 0x1, 0x2, r19, r20, r21}, @cred={0x20, 0x1, 0x2, r22, r23, r24}, @cred={0x20, 0x1, 0x2, r25, r26, r27}], 0xa8, 0x44}, {&(0x7f0000003180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003240)=[{&(0x7f0000003200)="301cfac8ddd394d6043ff77351a076def498a0a6a68570457fe3ed9860d59f6be800154a53786d8e28f25417a429456609d33824f2367d6d3c", 0x39}], 0x1, &(0x7f00000037c0)=[@cred={0x20, 0x1, 0x2, r28, r29, r30}, @cred={0x20, 0x1, 0x2, r31, r32, r33}, @rights={0x28, 0x1, 0x1, [r1, r0, r0, r1, r2, r2]}, @cred={0x20, 0x1, 0x2, r34, r35, r36}, @rights={0x20, 0x1, 0x1, [r1, r1, r1, r2]}], 0xa8, 0x4000000}], 0x6, 0x844) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000100)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x3f00000040000000]}}, {0x2, 0x0, 0xfffffffffffffffd, @local}, r3}}, 0x48) 04:45:51 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="8537689876eae563f8a6f42910d8e720888201919549000025002a000000000095000000000ed1f03158e72a1808701a2dedfa803ec834d19b041eb4a9d6879ede9d6f772e6ce501d64ce675f79e738c465f35bf54e6c29ea9908b7f7cd888e369c62b938ec77f4ae44aee9c06af1b56a253957d617bd80debe016ed830b7bd3821783e3aced201182dc5c6563fd7cfdd8d80914eb4c330c0b72"], &(0x7f0000003ff6)='GPL\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x800) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x154, r1, 0x500, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x3c, 0x1, [@TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'hsr0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x14}}}}}]}, @TIPC_NLA_MEDIA={0x8c, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffffffff79b3}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10001}]}, @TIPC_NLA_NET={0x58, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x800}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x10}, 0x4) 04:45:51 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000040)={0xa, 0x1000000000004e20, 0x0, @loopback}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000000c0)={{{@in6=@mcast2, @in6=@initdev}}, {{@in6=@mcast1}, 0x0, @in=@multicast2}}, &(0x7f00000001c0)=0xe8) close(r0) fdatasync(r0) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x2b6, 0x80000) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000080)={0x101, 0x3, 0x7ff, 0xffff, "b9bd5abd8484c14ffc8dc16ecda4014f6e84f8c331cc25b75f5f9b0ad81bf858"}) 04:45:51 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$audion(&(0x7f0000000400)='/dev/audio#\x00', 0xfffffffffffffffe, 0x10400) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, &(0x7f0000000440)=""/5, &(0x7f0000000480)=0x5) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB="2c726fcb665e6d04cefd9fc87b336f746d6f64653d30163030303030303030abf964ea3134303030302c757365725f69b0438e42842ddf09bf53ee6c468882717ca2ce10e8c1e3298190a65c33e59aee80cb89cc1156009a73795c8eb321856500ecc143de90983f7338beca13053fa42d34788f4e3f469c278858aa89fc961f55073a8d59cf7b222afa5ad630d15a26883d8e6d93d7f388816543ba822452ddd82a01af4fb300ec370e61c4c14ccc3e4df0f7c7f504c8bcef35ba32968d99ad9b2f99cde19aad49a23cc13b4c491b054f42efebb0bae00c14b01c6473a38527cb59c036403dca7df6b7e0e70e585098f5d871ed74a7758f9fd224e3976dc3f7ec900a", @ANYRESDEC=r2, @ANYBLOB=',group_id=', @ANYBLOB="aacfae73e42ed82fa090d63edcf3dc38c9b593f19bd345", @ANYBLOB=',\x00']) 04:45:51 executing program 0: creat(&(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000440)=""/246) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ppp\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000100)=""/246) syz_open_dev$rtc(&(0x7f0000000000)='/dev/rtc#\x00', 0x4, 0x40) 04:45:52 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x200, 0x0) ioctl$TCFLSH(r2, 0x540b, 0x6) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)) 04:45:52 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0x8001, 0x5, 0xfffffffffffffffe, 0x58ee}, 0x8) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x13, r1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x3b, &(0x7f0000000140)=""/244, &(0x7f0000000080)=0xf4) 04:45:52 executing program 1: r0 = open(&(0x7f0000000000)='./file0\x00', 0x208000, 0x0) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000040)="0cb3d23169592f5dd901d8798a5ebe2d9be853d03a9602737ee004c670ac48638247b00d6edab3163cd1843fd2132168fe6f606df5f1459e558e6b05c111") ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000080)={0x5, 0x2, 0x88cb, 0x93, 0x5089}) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x12d5) setsockopt$inet6_int(r0, 0x29, 0xcb, &(0x7f00000000c0)=0x8, 0x4) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000100)={{0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3}, {0xa, 0x4e21, 0xff, @mcast1, 0x7fffffff}, 0x4, [0x101, 0xad, 0x3, 0x57, 0x10001, 0x6, 0x6, 0xbbb]}, 0x5c) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000180)={0x7, 0x2, 0xd2, 0xfa9, 0xc5a5, 0x4}) utimensat(r0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={{0x0, 0x7530}}, 0x0) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000240)='syz0\x00') ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000280)={0x9, [0x7, 0x9da, 0x9, 0x3, 0x3, 0x3, 0x4, 0x100000001, 0x3, 0x80, 0x7, 0x401, 0x946e, 0x6, 0x180, 0x612295e3, 0xf7, 0xff, 0x6, 0x3, 0x7, 0x7, 0x4, 0x4, 0x1, 0xfffffffffffffffc, 0x408, 0x9, 0x0, 0x7, 0x7, 0x1, 0x3, 0x5, 0xdc13, 0x5, 0x2, 0x80000001, 0x9, 0x80000001, 0x6, 0x5, 0x7ff, 0x1, 0x482, 0x9, 0x9, 0xfffffffffffff5d7], 0xc}) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000300)={0x0, {0x400, 0x4}}) write$apparmor_current(r0, &(0x7f0000000340)=@profile={'changeprofile ', 'syz0\x00'}, 0x13) connect$netlink(r0, &(0x7f0000000380)=@kern={0x10, 0x0, 0x0, 0x10080}, 0xc) r1 = gettid() ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ptmx\x00', 0x40, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000400)={0x7, 0x3, 0x2, 0x8}, 0x10) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000440)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000640)={0x1, 0x1, &(0x7f0000000480)=""/153, &(0x7f0000000540)=""/5, &(0x7f0000000580)=""/149, 0x16004}) getsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000680), &(0x7f00000006c0)=0x4) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000700)={{0x80, 0x9}, {0x9, 0x5}, 0xd6f, 0x0, 0xe0}) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f0000000780)={0x9, 0xfffffffffffffffc}) sendmsg$nl_crypto(r0, &(0x7f0000000980)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1110}, 0xc, &(0x7f0000000940)={&(0x7f0000000800)=@upd={0x120, 0x12, 0x20, 0x70bd26, 0x25dfdbfe, {{'jitterentropy_rng\x00'}, [], [], 0x2400, 0x2000}, [{0x8}, {0x8, 0x1, 0x401}, {0x8, 0x1, 0x2}, {0x8, 0x1, 0x81}, {0x8, 0x1, 0x8}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x8001}, {0x8, 0x1, 0x101}]}, 0x120}, 0x1, 0x0, 0x0, 0x4000040}, 0x4044) pipe(&(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000000a00)) setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x0, 0x488, &(0x7f0000000a40)={{0x6, @local, 0x4e23, 0x3, 'lblcr\x00', 0x1, 0xfffffffffffffffd, 0x21}, {@multicast2, 0x4e20, 0x0, 0x100, 0xffffffffffffff81, 0x4}}, 0x44) fcntl$lock(r3, 0x5, &(0x7f0000000ac0)={0x0, 0x5, 0xffff, 0x1, r1}) 04:45:52 executing program 0: unshare(0x24020400) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x80000, 0x102) syz_extract_tcp_res$synack(&(0x7f00000001c0), 0x1, 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000100)="416554f3503aebdddb9fa15a7fd4775bd5b879873c89268052a9158e0547db6183f2640c90df6e6d0dee1f6ba72e4e4e21a619f38fa12b85e4c0472161cf5447165e5482f843e1b490e88923a0adfa884f49acb966795613b545e9f43743ab18631fd2790d69a1900e94e1320d577664b97a7a8b42844168ad774706d48e1e11a8b1870549df177bd27772268aab0773f8d3353d02c166b8253d5e21238270d856733e4dec29555502173106d42f4d633c4dc8e46d8b491a6d510c3a7f0fc3") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x4031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x2, 0xffffffffffff8001, 0x51ef, 0x0, 0x4, r0}, 0x2c) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x10) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000000080)) 04:45:52 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f000086fff4)) r3 = getpgrp(0xffffffffffffffff) r4 = getpid() kcmp$KCMP_EPOLL_TFD(r4, r3, 0x7, r0, &(0x7f0000000000)={r2, r1}) 04:45:52 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x11, r2, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000001040)=ANY=[@ANYBLOB="06670000000020000000000000000000000000000000000000000000000000000000000000000000001e0000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000ddf773cd000000000000000000000000000000000000000000000000000000491ff6c8bd7ec16d000000000000000000000000000000040000000000000003"]) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 337.986187] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. [ 338.122467] *** Guest State *** [ 338.125915] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 338.134984] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 338.144038] CR3 = 0x0000000000000000 [ 338.147798] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 338.153889] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 338.159919] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 338.166744] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 338.174857] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 338.182974] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 338.190998] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 338.199120] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 338.207239] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 338.215397] GDTR: limit=0x00000000, base=0x0000000000000000 [ 338.221414] IPVS: ftp: loaded support on port[0] = 21 [ 338.223489] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 338.223520] IDTR: limit=0x00000000, base=0x0000000000000000 [ 338.223568] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 338.223602] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 338.259596] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 338.267239] Interruptibility = 00000000 ActivityState = 00000000 [ 338.273584] *** Host State *** [ 338.276826] RIP = 0xffffffff812ff9c0 RSP = 0xffff888058d0f340 [ 338.283609] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 338.290073] FSBase=00007f65f8b8d700 GSBase=ffff88812fd00000 TRBase=fffffe000003d000 [ 338.298055] GDTBase=fffffe000003b000 IDTBase=fffffe0000000000 [ 338.307373] CR0=0000000080050033 CR3=000000005a351000 CR4=00000000001426e0 [ 338.314673] Sysenter RSP=fffffe000003c200 CS:RIP=0010:ffffffff8ae015f0 [ 338.321397] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 338.327604] *** Control State *** [ 338.331106] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 338.337940] EntryControls=0000d1ff ExitControls=002fefff [ 338.343509] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 338.350498] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 338.357346] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 338.364049] reason=80000021 qualification=0000000000000000 [ 338.370402] IDTVectoring: info=00000000 errcode=00000000 [ 338.376024] TSC Offset = 0xffffff46eda53f86 [ 338.380391] EPT pointer = 0x000000005739301e [ 338.453765] *** Guest State *** [ 338.457296] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 338.466767] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 338.475742] CR3 = 0x0000000000000000 [ 338.479501] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 338.485662] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 338.492222] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 338.498945] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 338.507111] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 338.515216] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 338.523335] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 338.525984] chnl_net:caif_netlink_parms(): no params data found [ 338.531365] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 338.545736] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 338.553898] GDTR: limit=0x00000000, base=0x0000000000000000 [ 338.562027] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 338.570038] IDTR: limit=0x00000000, base=0x0000000000000000 [ 338.578436] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 338.586534] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 338.593102] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 338.600596] Interruptibility = 00000000 ActivityState = 00000000 [ 338.606938] *** Host State *** [ 338.610174] RIP = 0xffffffff812ff9c0 RSP = 0xffff88805691f340 [ 338.616340] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 338.622881] FSBase=00007f65f8b4b700 GSBase=ffff88812fc00000 TRBase=fffffe0000003000 [ 338.630719] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 338.636774] CR0=0000000080050033 CR3=000000005a351000 CR4=00000000001426f0 [ 338.643946] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff8ae015f0 [ 338.650656] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 338.656883] *** Control State *** [ 338.660388] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 338.667215] EntryControls=0000d1ff ExitControls=002fefff [ 338.668491] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.672788] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 338.672830] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 338.679291] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.686193] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 338.695002] device bridge_slave_0 entered promiscuous mode [ 338.699286] reason=80000021 qualification=0000000000000000 [ 338.718023] IDTVectoring: info=00000000 errcode=00000000 [ 338.723642] TSC Offset = 0xffffff46eda53f86 [ 338.728001] EPT pointer = 0x000000005739301e [ 338.757664] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.759839] *** Guest State *** [ 338.764293] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.767471] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 338.775802] device bridge_slave_1 entered promiscuous mode [ 338.782899] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 338.782925] CR3 = 0x0000000000000000 [ 338.801323] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 338.807632] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 338.813758] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 338.820474] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 338.828656] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 338.836787] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 338.844952] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 338.853079] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 338.861100] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 338.869296] GDTR: limit=0x00000000, base=0x0000000000000000 [ 338.877472] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 338.885645] IDTR: limit=0x00000000, base=0x0000000000000000 [ 338.893852] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 338.902022] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 338.908480] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 338.916289] Interruptibility = 00000000 ActivityState = 00000000 [ 338.922645] *** Host State *** [ 338.925889] RIP = 0xffffffff812ff9c0 RSP = 0xffff88805691f340 [ 338.932078] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 338.938549] FSBase=00007f65f8b4b700 GSBase=ffff88812fc00000 TRBase=fffffe0000003000 [ 338.946522] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 338.952552] CR0=0000000080050033 CR3=000000005a351000 CR4=00000000001426f0 [ 338.959627] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff8ae015f0 [ 338.966471] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 338.972686] *** Control State *** [ 338.976188] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 338.983023] EntryControls=0000d1ff ExitControls=002fefff [ 338.988570] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 338.989080] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 338.995691] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 338.995725] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 339.016713] reason=80000021 qualification=0000000000000000 [ 339.023205] IDTVectoring: info=00000000 errcode=00000000 [ 339.028697] TSC Offset = 0xffffff46eda53f86 [ 339.033177] EPT pointer = 0x000000005739301e [ 339.046483] bond0: Enslaving bond_slave_1 as an active interface with an up link 04:45:54 executing program 0: r0 = socket(0x40000000002, 0x3, 0x80000000002) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge_slave_0\x00', 0x10) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f00000003c0)=0x3ff, 0x79) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000e0}, 0x33) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000000)={'bpq0\x00', 0xfffffffffffffffd}) recvmmsg(r0, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/35, 0x23}}], 0x2cd, 0x40000002, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="f4000000984650124ea09ae8e81b62a46c094ea36025e04b60505f4fa74f61dc8ec4a697b375ce710cf270c9f77cb0c9b80bd78833f43286f0ba1fba2449f25df5be34839a59a448957cf12d98fd4174275aa336480c2d81ccbbbc8fa19f05fb5803d81a5becd89a9050974a1e745ff7541b184f8a60ff8609f1a639a826efec8eaf54ea969ec626b7762f5c551252d3fb69cd4daac2edb94e8f29af6c882314d83e42e7658cba9d1abd866f4cffb8bf858a65df6c1c52b4cff1789910d9c620000000", @ANYRES16=r1, @ANYBLOB="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"], 0xf4}, 0x1, 0x0, 0x0, 0x10}, 0x0) [ 339.106749] team0: Port device team_slave_0 added [ 339.119098] team0: Port device team_slave_1 added [ 339.192329] raw_sendmsg: syz-executor.0 forgot to set AF_INET. Fix it! [ 339.198113] device hsr_slave_0 entered promiscuous mode [ 339.222881] device hsr_slave_1 entered promiscuous mode 04:45:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x3, &(0x7f0000000100)="f23a4a") sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x39a, &(0x7f0000000440)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0x18}]}, 0x18}}, 0x0) [ 339.297574] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.304232] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.311417] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.318083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.461375] 8021q: adding VLAN 0 to HW filter on device bond0 04:45:54 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x8000000000000031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x7ff, 0x8200) write$input_event(r0, &(0x7f00000000c0)={{}, 0x15, 0x0, 0xfffffffffffffffd}, 0x18) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000040)=0x20) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0x40000000000d0, &(0x7f0000000080), 0x4) [ 339.506908] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 339.516088] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.526203] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.540399] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 339.575836] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.608942] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready 04:45:54 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00pI\x00', 0x8}, 0x10) r1 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) readv(r1, &(0x7f0000000200)=[{&(0x7f0000000080)=""/18, 0x12}, {&(0x7f00000000c0)=""/157, 0x9d}, {&(0x7f0000000180)=""/114, 0x72}], 0x3) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/mixer\x00', 0x40000, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000280)='/dev/vcs#\x00', 0x8, 0x408000) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) ioctl(r0, 0x8918, &(0x7f0000000000)) [ 339.619420] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 339.627624] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.634188] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.675140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 339.683767] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 339.692120] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.698628] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.724510] IPVS: ftp: loaded support on port[0] = 21 [ 339.739521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 339.748857] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 339.778648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 339.788118] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 339.796772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 339.805731] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 339.814410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 339.822893] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 339.866188] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 339.875220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 339.883629] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 339.896823] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 339.957827] 8021q: adding VLAN 0 to HW filter on device batadv0 04:45:55 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x1) ioctl$KVM_SET_CPUID(r0, 0xc0185500, &(0x7f0000000040)=ANY=[@ANYBLOB="2001290918725f82d06ed7d2cac9900024aec57873aa02d9fbffffff9228fe69b380"]) 04:45:55 executing program 1: r0 = socket$inet6(0xa, 0x802, 0x0) r1 = gettid() r2 = open(&(0x7f0000000300)='./file0/file0\x00', 0x20000, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000340)='/dev/adsp#\x00', 0x2, 0x400000) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000280)=r1) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000040), &(0x7f0000000080)=0x4) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f00000002c0)=0xffffffffffffffff, 0x28e) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) recvmmsg(r0, &(0x7f0000008880), 0x4000124, 0x44000102, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$BLKBSZGET(r2, 0x80081270, &(0x7f0000000380)) gettid() r5 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0xabd0, 0x0) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x0, 0x0) renameat2(r5, &(0x7f0000000140)='./file0\x00', r6, &(0x7f00000001c0)='./file0\x00', 0x4) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000200)={'erspan0\x00', @local}) sendto(r4, &(0x7f00000000c0)="be5a640dbc43390d5b6e7b2313e0c26e85ce4d7e30f0ee0e", 0x18, 0x40, 0x0, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x0, 0x5}, 0x8) [ 340.425807] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 340.729438] IPVS: ftp: loaded support on port[0] = 21 04:45:57 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_G_INPUT(r0, 0x80045626, &(0x7f0000000000)) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0xe, 0x2, 0x0, "b708502568e3c02a78c9f423e99b399e9c01c0eca0c2284c1550d0779ac7827a"}) 04:45:57 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000001140)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0x99f901}) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x80000, 0x0) connect$rds(r1, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) fcntl$notify(r1, 0x402, 0x28) ioctl$VIDIOC_G_INPUT(r0, 0x80045626, &(0x7f00000000c0)) 04:45:57 executing program 0: clock_gettime(0xf7ffffbffffffc03, &(0x7f0000000100)) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x100, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000180)={0x8001000, 0x1f, 0x3}) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x100) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f0000000040)=""/182) 04:45:57 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x2000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x80) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000004ff0)={0x3, &(0x7f0000002fe8)=[{0x45, 0x0, 0x4000000000401}, {}, {0x6}]}, 0x10) 04:45:57 executing program 0: r0 = socket$inet6(0xa, 0x80001, 0xfc) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, &(0x7f0000000140)) r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000100)=""/28, 0x35c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bf}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0a85322, &(0x7f0000000300)={0x1}) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x1000000000013) r4 = syz_open_dev$sndpcmp(&(0x7f00000001c0)='/dev/snd/pcmC#D#p\x00', 0x1, 0x0) accept4$packet(r4, &(0x7f0000000080), &(0x7f00000000c0)=0x14, 0x80000) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) 04:45:58 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x4000) 04:45:58 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0xfffffffffffffffd, 0x400100) ioctl$KVM_GET_DEVICE_ATTR(r1, 0x4018aee2, &(0x7f0000000180)={0x0, 0x0, 0xffffffff80000000, &(0x7f0000000140)=0x5}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01000500", @ANYRES32=0x0], 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, &(0x7f0000000000)={r2, 0x0, 0x10}, &(0x7f0000000040)=0x18) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='user.syz\x00') 04:45:58 executing program 0: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000080)=0x6, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc9f123c123f3188b070") ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0xd) write$nbd(0xffffffffffffffff, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], 0x1001) 04:45:58 executing program 0: 04:45:59 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) capset(&(0x7f0000000040)={0x20080522, r1}, &(0x7f0000000080)={0x7fffffff, 0x5, 0x3, 0x4, 0xffffffffffffffff, 0x7fffffff}) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000d0fff5)='/dev/audio\x00', 0x0, 0x0) ioctl$CAPI_NCCI_GETUNIT(r2, 0x80044327, &(0x7f00000000c0)=0x9) ioctl$int_in(r2, 0x80000080044df9, &(0x7f0000003ff8)) 04:45:59 executing program 0: mq_notify(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x4, @thr={0x0, 0x0}}) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x600481, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000080)) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x120000000, 0x40) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0x40) 04:46:02 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x2, 0x20000) sync_file_range(r0, 0x9, 0x1, 0x7) r1 = socket$inet6(0xa, 0x100000803, 0x2b) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0xd}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000000)=@fragment, 0x8) sendmmsg(r1, &(0x7f0000008500)=[{{0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000000740)="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", 0x5ad}], 0x1, 0x0, 0x158}}], 0x1, 0x0) 04:46:02 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) r1 = accept(0xffffffffffffff9c, &(0x7f0000000040)=@nfc_llcp, &(0x7f0000000100)=0x80) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000140)=0x10221, 0x4) r2 = openat$cgroup_subtree(r0, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000240)='team\x00') getpeername$packet(r1, &(0x7f0000003880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000038c0)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000039c0)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@dev}}, &(0x7f0000003ac0)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000003b00)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4}, 0x0, @in=@dev}}, &(0x7f0000003c00)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000003d00)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000044c0)={'teql0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000004500)={{{@in6=@initdev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f0000004600)=0xe8) accept$packet(r1, &(0x7f0000004780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000047c0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000004800)={{{@in=@dev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@mcast2}}, &(0x7f0000004900)=0xe8) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000004940)={0x0, @rand_addr, @dev}, &(0x7f0000004980)=0xc) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000004a80)={0x0, @remote, @local}, &(0x7f0000004ac0)=0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000004ec0)={'vcan0\x00', 0x0}) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000005000)={@remote, @remote, 0x0}, &(0x7f0000005040)=0xc) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000005080)={{{@in=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000005180)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000005280)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@remote}}, &(0x7f0000005380)=0xe8) accept$packet(r1, &(0x7f00000053c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000005400)=0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000005440)={'veth0_to_bond\x00', 0x0}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000005480)={0x0, @broadcast, @loopback}, &(0x7f00000054c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000005540)={'team0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000056c0)={{{@in=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@remote}}, &(0x7f00000057c0)=0xe8) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000005800)={0x0, @loopback, @local}, &(0x7f0000005840)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000005880)={{{@in6=@ipv4={[], [], @broadcast}, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@multicast2}}, &(0x7f0000005980)=0xe8) getsockname$packet(r1, &(0x7f00000059c0)={0x11, 0x0, 0x0}, &(0x7f0000005a00)=0x14) accept4$packet(r1, &(0x7f0000005a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000005a80)=0x14, 0x80800) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000005b00)={{{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@initdev}}, &(0x7f0000005c00)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000005c40)={{{@in6=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@remote}}, &(0x7f0000005d40)=0xe8) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f00000065c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000004}, 0xc, &(0x7f0000006580)={&(0x7f0000005d80)={0x7e0, r3, 0x405, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8, 0x1, r4}, {0x178, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8}}}]}}, {{0x8, 0x1, r10}, {0xb8, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r12}}}]}}, {{0x8, 0x1, r13}, {0x7c, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r14}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r15}}}]}}, {{0x8, 0x1, r16}, {0x22c, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x100000000}}, {0x8, 0x6, r17}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x7a}}, {0x8, 0x6, r18}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r19}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r20}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x7fffffff}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r21}}}]}}, {{0x8, 0x1, r22}, {0x1d0, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r23}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x2c, 0x4, [{0x100000000, 0x3, 0x40, 0x5}, {0xae, 0x1, 0x7fffffff, 0xfffffffffffffffc}, {0x3, 0x8, 0x9, 0x5}, {0x1, 0x290b, 0xfffffffffffffffc, 0x8}, {0x800, 0x2, 0x4, 0xfffffffffffffffe}]}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r24}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r25}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x1d59}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x8001}}, {0x8, 0x6, r26}}}]}}, {{0x8, 0x1, r27}, {0xf4, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x9}}}, {0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x14, 0x4, [{0x5, 0x800, 0x4, 0x80}, {0x6, 0x2, 0x3, 0x100000000}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r28}}}]}}]}, 0x7e0}, 0x1, 0x0, 0x0, 0x1}, 0x0) write$cgroup_subtree(r2, &(0x7f00000000c0)={[{0x2b, 'cpu'}]}, 0x5) write$cgroup_subtree(r2, &(0x7f00000001c0)={[{0x2d, 'cpu'}]}, 0x5) 04:46:02 executing program 2: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x101000, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, &(0x7f0000000040)) close(r0) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000080)={[0x0, 0x9, 0xb7, 0x0, 0xffffffff, 0x7a, 0x4, 0x2, 0x6, 0x0, 0x7fffffff, 0x0, 0x6, 0x10000, 0x3f], 0x1000, 0x1000}) ioctl$PPPIOCGFLAGS(r0, 0x8004745a, &(0x7f0000000140)) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200141}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x0, 0x70bd25, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x404c800}, 0x48081) r2 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x2000) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000300), &(0x7f0000000340)=0x4) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0x40bc5311, &(0x7f00000003c0)={0x3, 0x0, 'client0\x00', 0xffffffff80000000, "54a0884203ba4ee4", "bd1ab9f5292d8e18ce9190865d1942495ca48d8f9d8af511d0ed2f9abf7cf800", 0x1, 0x10000}) epoll_pwait(r0, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x1, &(0x7f0000000500)={0x5}, 0x8) pipe2(&(0x7f0000000540)={0xffffffffffffffff}, 0x80000) ioctl$BLKRRPART(r3, 0x125f, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000580)) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000780)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000640)={0xec, r4, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x463f}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xffffffff}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x20}}, @IPVS_SVC_ATTR_PROTOCOL={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffffffffbff}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nr0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xb4d9}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'dummy0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x4}, 0x44438b962e8058d5) getsockname$inet6(r3, &(0x7f00000007c0)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000800)=0x1c) syz_open_pts(r3, 0x101000) pause() getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000840)={{{@in=@broadcast, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000940)=0xe8) setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000980)={r5, @local, @multicast2}, 0xc) ioctl$FICLONE(r2, 0x40049409, r0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000009c0)={@local, 0x4, 0x0, 0x3, 0x0, 0x9, 0xffff}, 0x20) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_TIOCINQ(r6, 0x541b, &(0x7f0000000a00)) ioctl$SCSI_IOCTL_DOORUNLOCK(r6, 0x5381) sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x800008}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x30, r1, 0x200, 0x70bd25, 0x25dfdbfc, {{}, 0x0, 0x410c, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}, ["", ""]}, 0x30}}, 0x8001) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000b40)={'veth1_to_hsr\x00', {0x2, 0x4e21, @remote}}) 04:46:02 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000000), &(0x7f0000000080)=0x4) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x22, &(0x7f0000000040), 0x10) 04:46:02 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x10000) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000de4000/0x2000)=nil, 0x2000, 0x3, 0x5c831, 0xffffffffffffffff, 0x0) syz_open_dev$amidi(&(0x7f0000000380)='/dev/amidi#\x00', 0x9, 0x200) mprotect(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xa) madvise(&(0x7f0000779000/0x600000)=nil, 0x600000, 0x1000000000009) r1 = add_key(&(0x7f0000000040)='id_resolver\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f00000000c0)="82eb8d772dec58136fc0e2a68923805fafeac234961038ecd3479591cc445ae7774088dfb737453652840e7837be623e876f7664ea19e9f49ce6c4ad0a6ed419514ce219aabbe48d8a36688593954bbb5188f8ff4c37a25e3eb538813f0f687d555e1757ef54798cc7aad31d5af1d855ccd7b2d6220fc44f3aa58fa211313805b1ed495f4bef141a9f3394976229009da41f9cf44706a3a28eb597240248de3b7bc51cfb765c1793190a8ea75ba262fc0c22849466d0a2aae2e0feaad1fa787273ab0ab9de2def14a787992311701bc5faf57186e0ce426347cea71ddf551cab7eacee", 0xe3, 0xfffffffffffffffd) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in=@empty, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@mcast2}}, &(0x7f0000000300)=0xe8) getgroups(0x1, &(0x7f0000000340)=[0x0]) keyctl$chown(0x4, r1, r2, r3) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x3ff) 04:46:02 executing program 0: unshare(0x20400) r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x20000) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0xc0109207, 0x0) 04:46:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000014100000018001700000000000000006574683a6270713000000000000000000000000000000060ca89bdbd16497c5ab720443fbbd5c88c3587dbe8397071c21fe3cd5c09f6c631ee44f3459b0dad5eeb5835be1c093364077b87a8252302221ab80b7f56eb5812d76cc695e307e928e5ba8399691eff5973c142dda7ace0b4b8a33f35de99deae8bfa"], 0x34}}, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x102000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, r1, 0x1, 0x70bd2d, 0x25dfdbff, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x2}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000041}, 0x0) 04:46:02 executing program 0: r0 = socket$kcm(0xa, 0x805, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x0, 0x240000) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000000c0)={0x7, 0x1, 0xd35, 0x69c}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video35\x00', 0x2, 0x0) sendmsg(r0, &(0x7f0000000680)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @remote, 0x3}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000800)="cf", 0x1}], 0x1}, 0x0) prctl$PR_GET_FP_MODE(0x2e) [ 347.834066] Started in network mode [ 347.837794] Own node identity 2, cluster identity 4711 [ 347.843384] 32-bit node address hash set to 2 [ 347.962608] IPVS: ftp: loaded support on port[0] = 21 04:46:03 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) ioctl$VIDIOC_EXPBUF(0xffffffffffffff9c, 0xc0405610, &(0x7f0000000040)={0xc, 0x3, 0x1f, 0x800, 0xffffffffffffffff}) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000080)=0x1f) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x10010009, 0xffffffffffffffff}) ioctl$KVM_ASSIGN_DEV_IRQ(r0, 0x4040ae70, &(0x7f0000000100)={0x8e, 0x80, 0xc367, 0x206}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x0, 0x0) write$UHID_GET_REPORT_REPLY(r2, &(0x7f0000000180)={0xa, 0x4, 0x7ff, 0x3}, 0xa) 04:46:03 executing program 0: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_int(r1, 0x0, 0x13, &(0x7f0000000000)=0x80000001, 0x4) r2 = dup3(r1, r1, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r2, 0x40206417, &(0x7f0000000080)={0x2, 0x20, 0x8, 0x4, 0x9, 0x9}) fremovexattr(r0, &(0x7f00000001c0)=@random={'user.', 'trusted.overlay.opaque\x00'}) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x3, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r3, 0xc0745645, &(0x7f0000000140)={0x9, [0xad, 0x7, 0x9, 0x3ff, 0x3ff, 0x7, 0x1, 0x8000, 0x3, 0x1, 0x4, 0x5, 0x21, 0x2, 0x100000001, 0xffffffff, 0x1, 0x6, 0x400, 0x4, 0x0, 0xfffffffffffffff7, 0xffffffffffff5323, 0x1, 0x3, 0x5, 0x0, 0xbe2, 0x1, 0x2864786c, 0x7d3, 0x9, 0xff, 0x900000000000000, 0x6, 0x71e, 0x10000, 0xffffffffffffffff, 0x3, 0x9, 0x7f, 0x55d7, 0xdf, 0x1, 0x8, 0x80000000, 0x100000000, 0x101], 0xf}) pause() [ 348.209063] chnl_net:caif_netlink_parms(): no params data found [ 348.303107] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.309723] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.318275] device bridge_slave_0 entered promiscuous mode [ 348.363231] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.373316] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.381891] device bridge_slave_1 entered promiscuous mode [ 348.467383] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 348.490514] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 348.577250] team0: Port device team_slave_0 added [ 348.596751] team0: Port device team_slave_1 added [ 348.730361] device hsr_slave_0 entered promiscuous mode 04:46:04 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x3, 0x0) ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f0000000080)={0x7, 0x10000}) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, 0x0) [ 349.242745] device hsr_slave_1 entered promiscuous mode 04:46:04 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) ioctl$VIDIOC_EXPBUF(0xffffffffffffff9c, 0xc0405610, &(0x7f0000000040)={0xc, 0x3, 0x1f, 0x800, 0xffffffffffffffff}) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000080)=0x1f) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x10010009, 0xffffffffffffffff}) ioctl$KVM_ASSIGN_DEV_IRQ(r0, 0x4040ae70, &(0x7f0000000100)={0x8e, 0x80, 0xc367, 0x206}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x0, 0x0) write$UHID_GET_REPORT_REPLY(r2, &(0x7f0000000180)={0xa, 0x4, 0x7ff, 0x3}, 0xa) [ 349.462408] 8021q: adding VLAN 0 to HW filter on device bond0 [ 349.497638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 349.505944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 349.522710] 8021q: adding VLAN 0 to HW filter on device team0 [ 349.544890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 349.553546] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 349.561752] bridge0: port 1(bridge_slave_0) entered blocking state 04:46:04 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x11, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05630440000000000e630c400000000083"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) [ 349.568247] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.576479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 349.585174] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 349.593369] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.599881] bridge0: port 2(bridge_slave_1) entered forwarding state [ 349.611286] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 349.640471] ------------[ cut here ]------------ [ 349.645286] kernel BUG at mm/kmsan/kmsan.c:729! [ 349.650063] invalid opcode: 0000 [#1] SMP [ 349.654237] CPU: 1 PID: 3764 Comm: udevd Not tainted 5.0.0+ #16 [ 349.660303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 349.669711] RIP: 0010:kmsan_internal_check_memory+0xb84/0xbb0 [ 349.675614] Code: 65 8b 34 25 04 90 03 00 65 48 8b 14 25 90 0d 04 00 48 c7 c7 6c 6c 81 8b 31 c0 e8 b7 fd 79 ff 0f 0b 0f 0b e8 8e 22 56 ff 0f 0b <0f> 0b e8 75 d0 79 ff 85 c0 75 1f 65 8b 34 25 04 90 03 00 65 48 8b [ 349.691106] binder: 10230:10231 Acquire 1 refcount change on invalid ref 0 ret -22 [ 349.694553] RSP: 0018:ffff88810d5ffa60 EFLAGS: 00010046 [ 349.694570] RAX: 0000000000000002 RBX: 00000000e62000b3 RCX: ffff888000000000 [ 349.694583] RDX: 000007ffffffffff RSI: 0000000000000004 RDI: ffff88810d5ffc08 [ 349.694596] RBP: ffff88810d5ffb10 R08: ffff88810d5ffc08 R09: ffff88818d5ffc08 [ 349.694608] R10: ffff88810d43fc08 R11: ffffffff8229a110 R12: 0000000000000004 [ 349.694619] R13: 0000000000000004 R14: 0000000000000282 R15: 0000000000000000 [ 349.694634] FS: 00007fe9cee327a0(0000) GS:ffff88812fd00000(0000) knlGS:0000000000000000 [ 349.694646] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 349.694658] CR2: 000000000073216c CR3: 000000010dc47000 CR4: 00000000001406e0 [ 349.694668] Call Trace: [ 349.694699] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 349.694742] kmsan_check_memory+0xd/0x10 [ 349.702588] binder: 10230:10231 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 349.707843] ep_send_events_proc+0xa8b/0x1640 [ 349.750931] binder: 10230:10232 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 349.752450] ep_scan_ready_list+0x366/0xe80 [ 349.752505] ? ep_busy_loop_end+0x200/0x200 [ 349.752539] do_epoll_wait+0xd00/0x1990 [ 349.752588] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 349.752683] ? prepare_exit_to_usermode+0x114/0x420 [ 349.752720] ? arch_local_irq_disable+0x10/0x10 [ 349.774931] binder: 10230:10232 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 349.777931] __se_sys_epoll_wait+0xb3/0xe0 [ 349.777969] __x64_sys_epoll_wait+0x56/0x70 [ 349.778003] do_syscall_64+0xbc/0xf0 [ 349.794853] binder: 10230:10231 Acquire 1 refcount change on invalid ref 0 ret -22 [ 349.796659] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 349.796692] RIP: 0033:0x7fe9ce546943 [ 349.801043] binder: 10230:10231 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 349.805336] Code: 00 31 d2 48 29 c2 64 89 11 48 83 c8 ff eb ea 90 90 90 90 90 90 90 90 83 3d b5 dc 2a 00 00 75 13 49 89 ca b8 e8 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 34 c3 48 83 ec 08 e8 3b c4 00 00 48 89 04 24 04:46:04 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x11, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05630440000000000e630c400000000083"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, 0x0}) [ 349.805347] RSP: 002b:00007fff04230d68 EFLAGS: 00000246 ORIG_RAX: 00000000000000e8 [ 349.805364] RAX: ffffffffffffffda RBX: 00000000ffffffff RCX: 00007fe9ce546943 [ 349.805375] RDX: 0000000000000008 RSI: 00007fff04230e60 RDI: 000000000000000a [ 349.805386] RBP: 0000000000000000 R08: 00000000014bf0d0 R09: 00007fe9ce5901d0 [ 349.805398] R10: 00000000ffffffff R11: 0000000000000246 R12: 0000000000000003 [ 349.805409] R13: 0000000000000010 R14: 00000000014c0c70 R15: 00000000014bf250 [ 349.805439] Modules linked in: [ 349.805466] ---[ end trace 64cc5fb826818c84 ]--- [ 349.805499] RIP: 0010:kmsan_internal_check_memory+0xb84/0xbb0 [ 349.805516] Code: 65 8b 34 25 04 90 03 00 65 48 8b 14 25 90 0d 04 00 48 c7 c7 6c 6c 81 8b 31 c0 e8 b7 fd 79 ff 0f 0b 0f 0b e8 8e 22 56 ff 0f 0b <0f> 0b e8 75 d0 79 ff 85 c0 75 1f 65 8b 34 25 04 90 03 00 65 48 8b [ 349.805540] RSP: 0018:ffff88810d5ffa60 EFLAGS: 00010046 [ 349.915587] kmsan_in_runtime: -1, last_caller: __msan_instrument_asm_store+0xb2/0x150 [ 349.915836] RAX: 0000000000000002 RBX: 00000000e62000b3 RCX: ffff888000000000 [ 349.923255] ------------[ cut here ]------------ [ 349.930403] RDX: 000007ffffffffff RSI: 0000000000000004 RDI: ffff88810d5ffc08 [ 349.933589] kernel BUG at mm/kmsan/kmsan_hooks.c:366! [ 349.938336] RBP: ffff88810d5ffb10 R08: ffff88810d5ffc08 R09: ffff88818d5ffc08 [ 349.944364] invalid opcode: 0000 [#2] SMP [ 349.963116] R10: ffff88810d43fc08 R11: ffffffff8229a110 R12: 0000000000000004 [ 349.968482] CPU: 0 PID: 10229 Comm: syz-executor.1 Tainted: G D 5.0.0+ #16 [ 349.976437] R13: 0000000000000004 R14: 0000000000000282 R15: 0000000000000000 [ 349.983694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 349.988445] FS: 00007fe9cee327a0(0000) GS:ffff88812fd00000(0000) knlGS:0000000000000000 [ 349.995736] RIP: 0010:kmsan_vmap_page_range_noflush+0x21e/0x220 [ 350.000901] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 350.008165] Code: 0f 0b e8 95 aa 79 ff 85 c0 75 1f 65 8b 34 25 04 90 03 00 65 48 8b 14 25 90 0d 04 00 48 c7 c7 6c 6c 81 8b 31 c0 e8 a2 d7 79 ff <0f> 0b 55 48 89 e5 be c0 80 60 00 e8 62 16 fd ff 5d c3 55 48 89 e5 [ 350.012319] CR2: 000000000073216c CR3: 000000010dc47000 CR4: 00000000001406e0 [ 350.019669] RSP: 0018:ffff88807dd6f608 EFLAGS: 00010246 [ 350.027977] Kernel panic - not syncing: Fatal exception [ 350.035246] RAX: 0000000000000049 RBX: ffffd90010420000 RCX: c4a383ae90f90b00 [ 350.108833] RDX: 0000000000000000 RSI: 000000000000c48c RDI: 000000000000c48d [ 350.116104] RBP: ffff88807dd6f668 R08: 0000000000000000 R09: ffff88812fc39010 [ 350.123374] R10: 0000000000000000 R11: ffffffff861f4290 R12: 800000000000016b [ 350.130643] R13: ffff888055e6a600 R14: ffffd90010400000 R15: ffff888055e6a000 [ 350.137914] FS: 00007fe624b3f700(0000) GS:ffff88812fc00000(0000) knlGS:0000000000000000 [ 350.146137] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 350.152015] CR2: 000000000070d934 CR3: 000000004c17f000 CR4: 00000000001406f0 [ 350.159284] Call Trace: [ 350.161910] vm_map_ram+0x1018/0x1290 [ 350.165827] ion_heap_sglist_zero+0x258/0x4e0 [ 350.170396] ion_heap_buffer_zero+0x19f/0x1d0 [ 350.174907] ion_system_heap_free+0xe6/0x4d0 [ 350.179323] ? ion_system_heap_allocate+0x1400/0x1400 [ 350.184525] ? ion_system_heap_allocate+0x1400/0x1400 [ 350.189718] ? ion_system_heap_allocate+0x1400/0x1400 [ 350.194916] ion_buffer_destroy+0x187/0x4d0 [ 350.199257] _ion_heap_freelist_drain+0x526/0x840 [ 350.204131] ion_heap_freelist_drain+0x6e/0x80 [ 350.208728] ion_alloc+0x57f/0x1650 [ 350.212365] ? kmsan_internal_memset_shadow+0xc6/0x410 [ 350.217687] ion_ioctl+0x326/0x5c0 [ 350.221244] ? debug_shrink_set+0x220/0x220 [ 350.225580] do_vfs_ioctl+0xebd/0x2bf0 [ 350.229491] ? kmsan_get_shadow_origin_ptr+0x73/0x490 [ 350.234703] ? security_file_ioctl+0x92/0x200 [ 350.239219] __se_sys_ioctl+0x1da/0x270 [ 350.243214] __x64_sys_ioctl+0x4a/0x70 [ 350.247117] do_syscall_64+0xbc/0xf0 [ 350.250856] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 350.256045] RIP: 0033:0x458209 [ 350.259241] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 350.278152] RSP: 002b:00007fe624b3ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 350.287355] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458209 [ 350.294641] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 350.301913] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 350.309181] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe624b3f6d4 [ 350.316448] R13: 00000000004c09cb R14: 00000000004d2740 R15: 00000000ffffffff [ 350.323741] Modules linked in: [ 350.327594] Kernel Offset: disabled [ 350.331222] Rebooting in 86400 seconds..