[ 75.226343] audit: type=1800 audit(1544016540.259:27): pid=6728 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 77.339131] kauditd_printk_skb: 1 callbacks suppressed [ 77.339162] audit: type=1800 audit(1544016542.389:29): pid=6728 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 77.364003] audit: type=1800 audit(1544016542.409:30): pid=6728 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.25' (ECDSA) to the list of known hosts. 2018/12/05 13:29:15 fuzzer started 2018/12/05 13:29:20 dialing manager at 10.128.0.26:40237 2018/12/05 13:29:20 syscalls: 1 2018/12/05 13:29:20 code coverage: enabled 2018/12/05 13:29:20 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/12/05 13:29:20 setuid sandbox: enabled 2018/12/05 13:29:20 namespace sandbox: enabled 2018/12/05 13:29:20 Android sandbox: /sys/fs/selinux/policy does not exist 2018/12/05 13:29:20 fault injection: enabled 2018/12/05 13:29:20 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/12/05 13:29:20 net packet injection: enabled 2018/12/05 13:29:20 net device setup: enabled 13:33:08 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x100}) syzkaller login: [ 324.048731] IPVS: ftp: loaded support on port[0] = 21 [ 326.568651] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.575424] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.584983] device bridge_slave_0 entered promiscuous mode [ 326.733682] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.740309] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.749880] device bridge_slave_1 entered promiscuous mode [ 326.895068] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 327.037336] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready 13:33:12 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) [ 327.490521] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 327.771325] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 327.994443] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 328.001571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 328.194653] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 328.202045] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 328.294653] IPVS: ftp: loaded support on port[0] = 21 [ 328.961452] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 328.970977] team0: Port device team_slave_0 added [ 329.198928] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 329.208153] team0: Port device team_slave_1 added [ 329.481031] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 329.488426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 329.498491] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 329.647956] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 329.655383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 329.665069] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 329.906325] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 329.914392] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 329.924014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 330.189787] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 330.197864] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 330.207757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 331.947037] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.953943] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.963261] device bridge_slave_0 entered promiscuous mode [ 332.151183] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.157895] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.167290] device bridge_slave_1 entered promiscuous mode [ 332.340927] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 332.630364] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 332.971764] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.978470] bridge0: port 2(bridge_slave_1) entered forwarding state [ 332.985861] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.992522] bridge0: port 1(bridge_slave_0) entered forwarding state [ 333.002758] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 333.297502] bond0: Enslaving bond_slave_0 as an active interface with an up link 13:33:18 executing program 2: ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, 0x0) sync() fcntl$getown(0xffffffffffffffff, 0x9) [ 333.609249] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 333.807396] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 333.816768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 333.902054] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 334.121260] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 334.128588] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 334.492143] IPVS: ftp: loaded support on port[0] = 21 [ 335.053998] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 335.063072] team0: Port device team_slave_0 added [ 335.293171] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 335.302440] team0: Port device team_slave_1 added [ 335.639684] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 335.647063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 335.656730] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 336.029816] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 336.037233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 336.046996] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 336.291409] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 336.299808] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 336.309689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 336.587552] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 336.595575] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 336.605769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 337.805824] ip (7126) used greatest stack depth: 53824 bytes left [ 339.304383] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.311009] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.320379] device bridge_slave_0 entered promiscuous mode [ 339.645260] ip (7166) used greatest stack depth: 53680 bytes left [ 339.720261] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.727080] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.736436] device bridge_slave_1 entered promiscuous mode [ 339.887263] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.894014] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.901305] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.908071] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.917939] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 339.986230] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 340.267669] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 340.894693] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 341.122546] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 341.478944] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 341.775218] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 341.782512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready 13:33:27 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfd5000)=nil, 0xfd5000, 0x0, 0x32, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000000200)=""/196, 0xc4) [ 342.068172] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 342.075613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 343.181286] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 343.191576] team0: Port device team_slave_0 added [ 343.243121] IPVS: ftp: loaded support on port[0] = 21 [ 343.638250] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 343.647443] team0: Port device team_slave_1 added [ 343.929757] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 343.937147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 343.946837] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 344.334916] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 344.342253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 344.351594] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 344.641383] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 344.649280] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 344.658751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 345.051330] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 345.059347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 345.069206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 345.796941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 347.003626] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 348.236294] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 348.242977] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 348.251540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 349.187199] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.193984] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.203099] device bridge_slave_0 entered promiscuous mode [ 349.570763] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.577688] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.587016] device bridge_slave_1 entered promiscuous mode [ 349.605329] 8021q: adding VLAN 0 to HW filter on device team0 [ 349.623018] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.629609] bridge0: port 2(bridge_slave_1) entered forwarding state [ 349.636975] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.643658] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.654228] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 350.025472] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 350.364858] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 350.572199] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 351.385075] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 351.791213] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 352.154049] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 352.161196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 352.503703] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 352.510833] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 13:33:38 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000d40)={{{@in=@local, @in=@multicast2}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000000000)) memfd_create(0x0, 0x0) setxattr$security_selinux(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_GET_DAEMON(r0, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$vhci(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 353.596231] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 353.605356] team0: Port device team_slave_0 added [ 354.032177] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 354.041142] team0: Port device team_slave_1 added [ 354.504446] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 354.511567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 354.521312] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 354.565067] 8021q: adding VLAN 0 to HW filter on device bond0 [ 354.644312] IPVS: ftp: loaded support on port[0] = 21 [ 354.922841] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 354.932764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 354.942370] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 355.356857] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 355.364922] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 355.374476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 355.789382] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 355.797391] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 355.807120] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 356.223715] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 357.852926] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 357.859369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 357.868174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 359.499415] 8021q: adding VLAN 0 to HW filter on device team0 13:33:44 executing program 0: sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000d40)={{{@in=@local, @in=@multicast2}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) setxattr$security_selinux(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='security.selinux\x00', 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$vhci(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 359.867180] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. 13:33:45 executing program 0: sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000d40)={{{@in=@local, @in=@multicast2}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) setxattr$security_selinux(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='security.selinux\x00', 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$vhci(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 360.791709] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.798425] bridge0: port 2(bridge_slave_1) entered forwarding state [ 360.805755] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.812407] bridge0: port 1(bridge_slave_0) entered forwarding state [ 360.822200] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 360.862258] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 13:33:46 executing program 0: timer_create(0x7, &(0x7f00000001c0)={0x0, 0x2a, 0x7, @thr={&(0x7f0000000040)="16b6cb63eb7640419a21e778ca40cf18965e8056b05ee969cf6af669acb52dc733aa617cdf74aa4a71813742574f78f501b6814a189164c0275bf9901fb25de1be497fd034c738e61e3af9b22bfaa0267e408013e0a6bd301db099ad7009d982a271d9bccbc900b6318dc6f3d3190e683980e89172896b8ca04c5383d6f814a15f7a3a90beaf8a137def56310aa6632e736b30c3b41e974dc0c25cb98679523ff95a1f82dc97c6a8aa9775ee1e170e662bc3ba01be0bea6985581684ae705c5f97b1cf1c23180b86388c02a183a70875006310d72335e26b8c6dc2f4b503f29570fb7933f8c2", &(0x7f0000000140)="f5249c25e70ab82bbfbd04e2810a92dc09a1f3c8fdb0f046004bd12e6d31430b706aa323c5e59c7518236a01fc6927ffeb486216e6212a362e22b66d9c7cccad9a41de3eb079a0b603392d2f77f10da446e11e095ab52925d88b36297d24baed8d76ac15703ef2eb68c631d291854ecf7c8e8ee1232a0793b28d98"}}, &(0x7f0000000200)) syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x2000000000000006, 0x2c03) 13:33:46 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x463}) mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000000100)=0x1, 0x7fffffff, 0x1) r2 = syz_open_pts(r1, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1f, &(0x7f0000000000)={@dev, 0x0}, &(0x7f0000000080)=0x14) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r3}, 0x10) ioctl$TIOCMBIC(r2, 0x5417, 0x0) 13:33:46 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x4) ioctl(r0, 0x3000008910, &(0x7f00000000c0)="0a5c2d023c126285718070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="24000000020707041dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) [ 362.070542] netlink: 20 bytes leftover after parsing attributes in process `syz-executor0'. [ 362.129474] netlink: 20 bytes leftover after parsing attributes in process `syz-executor0'. [ 362.240501] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.247215] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.256609] device bridge_slave_0 entered promiscuous mode 13:33:47 executing program 0: seccomp(0x1, 0x0, &(0x7f0000001980)={0x2, &(0x7f0000000000)=[{0x2c}, {0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x20) getsockopt$inet_buf(r0, 0x0, 0x0, &(0x7f0000000080)=""/66, &(0x7f0000000100)=0x42) [ 362.772046] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.778637] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.787803] device bridge_slave_1 entered promiscuous mode 13:33:48 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x8000400200) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000380)={0x8004, 0x800000000001a}) [ 363.278632] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready 13:33:48 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000500)={0x26, 'aead\x00', 0x0, 0x0, 'morus640\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) setrlimit(0x8, &(0x7f0000000240)={0x1a15, 0x3}) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vsock\x00', 0x12000, 0x0) ioctl$VHOST_SET_VRING_NUM(r2, 0x4008af10, &(0x7f0000000480)={0x1, 0x7}) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x200}], 0x30}, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x271) sendmsg$alg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="2628246708e9853f9a310163460ece01b3b6efcdf52bd10aa2916401efacbe8f8eefe9e4d4dc5755a8b7ccb2a713d21f70b6f559cfb13cc06614083ef6c7dbace31e4036f2df88f53d000184fdb144467ac29a9bbb948ca7a43eb55b726f64575b9a7ae29b0af842e9d2ef67a9b5eb68d119b3141154ce1cbbd4f4d89e1acf2ea2a58185c16e49579f4fe5579fb65b308bc5aa4b60bad619e876a9158fc63f55bac881f42e52b7780c73916b7124c783c823ac9df8b7db397e122b8a57bd7ef8db9ad77b8809c2779687d7713a0fd2985c74e3e6b1729d6d35f4953dd76d5dbe3171eb2a188e2b5c3d74a1f0f0b55c516784bc065189", 0xf6}], 0x1, &(0x7f0000000800)=[@iv={0xf0, 0x117, 0x2, 0xdb, "e7ab5d26b550e7ac8cb829439c95f048f3bf1e0dec4bc5494e13a1b0ff5835e3e450a1aa0b55aab8cba61c170bee62936f21efca00f8920caaba79cc6dcc21cdae103bd20ab8190b40f0db72ef88cb75db7393894725fc7fe76c803ff9772d30fbefbfe88c5ce0a4f571bdb1802f75dfd8972a52e4d2468f53dafce3abaf03c2f82e04bae55fa895383b5c62ce486cd1497c93f6062be233468202e8dc43d9ec5074afe688cf31c6e205a894842b56b5b9bfc6e03e7eb12e0bb1f20a983f550e70bcbae784b13a604596322f1a750a882968af89ccf0526c423d37"}, @assoc={0x18, 0x117, 0x4, 0x9}, @iv={0x28, 0x117, 0x2, 0xd, "d04fd4bb8e5491da2c86d8faef"}], 0x130, 0x11}, 0x40000) recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/84, 0x54}, {&(0x7f0000000780)=""/98, 0x1ac}, {&(0x7f0000000280)=""/112, 0x70}, {&(0x7f0000000340)=""/249, 0xf9}], 0x4, &(0x7f0000000440)=""/45, 0x2d}}], 0x4000000000000e9, 0x0, &(0x7f0000000640)={0x77359400}) [ 363.697449] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 364.883089] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 365.241119] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 365.582920] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 365.590072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 365.908575] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 365.916053] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 366.211018] 8021q: adding VLAN 0 to HW filter on device bond0 [ 366.956151] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 366.965221] team0: Port device team_slave_0 added [ 367.268340] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 367.277600] team0: Port device team_slave_1 added [ 367.427409] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 367.627992] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 367.635210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 367.644650] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 367.891312] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 367.898570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 367.907941] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 368.207442] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 368.215321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 368.224845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 368.506980] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 368.515489] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 368.525094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 368.589792] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 368.596566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 368.604848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 13:33:53 executing program 1: [ 369.680756] 8021q: adding VLAN 0 to HW filter on device team0 [ 371.065655] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.072348] bridge0: port 2(bridge_slave_1) entered forwarding state [ 371.079612] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.086359] bridge0: port 1(bridge_slave_0) entered forwarding state [ 371.095878] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 371.102728] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 373.172329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 374.006413] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 374.714708] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 374.721153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 374.729720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 13:34:00 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000500)={0x26, 'aead\x00', 0x0, 0x0, 'morus640\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) setrlimit(0x8, &(0x7f0000000240)={0x1a15, 0x3}) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vsock\x00', 0x12000, 0x0) ioctl$VHOST_SET_VRING_NUM(r2, 0x4008af10, &(0x7f0000000480)={0x1, 0x7}) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x200}], 0x30}, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x271) sendmsg$alg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="2628246708e9853f9a310163460ece01b3b6efcdf52bd10aa2916401efacbe8f8eefe9e4d4dc5755a8b7ccb2a713d21f70b6f559cfb13cc06614083ef6c7dbace31e4036f2df88f53d000184fdb144467ac29a9bbb948ca7a43eb55b726f64575b9a7ae29b0af842e9d2ef67a9b5eb68d119b3141154ce1cbbd4f4d89e1acf2ea2a58185c16e49579f4fe5579fb65b308bc5aa4b60bad619e876a9158fc63f55bac881f42e52b7780c73916b7124c783c823ac9df8b7db397e122b8a57bd7ef8db9ad77b8809c2779687d7713a0fd2985c74e3e6b1729d6d35f4953dd76d5dbe3171eb2a188e2b5c3d74a1f0f0b55c516784bc065189", 0xf6}], 0x1, &(0x7f0000000800)=[@iv={0xf0, 0x117, 0x2, 0xdb, "e7ab5d26b550e7ac8cb829439c95f048f3bf1e0dec4bc5494e13a1b0ff5835e3e450a1aa0b55aab8cba61c170bee62936f21efca00f8920caaba79cc6dcc21cdae103bd20ab8190b40f0db72ef88cb75db7393894725fc7fe76c803ff9772d30fbefbfe88c5ce0a4f571bdb1802f75dfd8972a52e4d2468f53dafce3abaf03c2f82e04bae55fa895383b5c62ce486cd1497c93f6062be233468202e8dc43d9ec5074afe688cf31c6e205a894842b56b5b9bfc6e03e7eb12e0bb1f20a983f550e70bcbae784b13a604596322f1a750a882968af89ccf0526c423d37"}, @assoc={0x18, 0x117, 0x4, 0x9}, @iv={0x28, 0x117, 0x2, 0xd, "d04fd4bb8e5491da2c86d8faef"}], 0x130, 0x11}, 0x40000) recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/84, 0x54}, {&(0x7f0000000780)=""/98, 0x1ac}, {&(0x7f0000000280)=""/112, 0x70}, {&(0x7f0000000340)=""/249, 0xf9}], 0x4, &(0x7f0000000440)=""/45, 0x2d}}], 0x4000000000000e9, 0x0, &(0x7f0000000640)={0x77359400}) [ 375.585886] 8021q: adding VLAN 0 to HW filter on device team0 [ 378.434387] 8021q: adding VLAN 0 to HW filter on device bond0 [ 378.915153] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready 13:34:04 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfd5000)=nil, 0xfd5000, 0x0, 0x32, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000000200)=""/196, 0xc4) [ 379.440796] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 379.447175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 379.455772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 379.754841] 8021q: adding VLAN 0 to HW filter on device team0 13:34:06 executing program 1: 13:34:06 executing program 4: 13:34:06 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000500)={0x26, 'aead\x00', 0x0, 0x0, 'morus640\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) setrlimit(0x8, &(0x7f0000000240)={0x1a15, 0x3}) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vsock\x00', 0x12000, 0x0) ioctl$VHOST_SET_VRING_NUM(r2, 0x4008af10, &(0x7f0000000480)={0x1, 0x7}) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x200}], 0x30}, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x271) sendmsg$alg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="2628246708e9853f9a310163460ece01b3b6efcdf52bd10aa2916401efacbe8f8eefe9e4d4dc5755a8b7ccb2a713d21f70b6f559cfb13cc06614083ef6c7dbace31e4036f2df88f53d000184fdb144467ac29a9bbb948ca7a43eb55b726f64575b9a7ae29b0af842e9d2ef67a9b5eb68d119b3141154ce1cbbd4f4d89e1acf2ea2a58185c16e49579f4fe5579fb65b308bc5aa4b60bad619e876a9158fc63f55bac881f42e52b7780c73916b7124c783c823ac9df8b7db397e122b8a57bd7ef8db9ad77b8809c2779687d7713a0fd2985c74e3e6b1729d6d35f4953dd76d5dbe3171eb2a188e2b5c3d74a1f0f0b55c516784bc065189", 0xf6}], 0x1, &(0x7f0000000800)=[@iv={0xf0, 0x117, 0x2, 0xdb, "e7ab5d26b550e7ac8cb829439c95f048f3bf1e0dec4bc5494e13a1b0ff5835e3e450a1aa0b55aab8cba61c170bee62936f21efca00f8920caaba79cc6dcc21cdae103bd20ab8190b40f0db72ef88cb75db7393894725fc7fe76c803ff9772d30fbefbfe88c5ce0a4f571bdb1802f75dfd8972a52e4d2468f53dafce3abaf03c2f82e04bae55fa895383b5c62ce486cd1497c93f6062be233468202e8dc43d9ec5074afe688cf31c6e205a894842b56b5b9bfc6e03e7eb12e0bb1f20a983f550e70bcbae784b13a604596322f1a750a882968af89ccf0526c423d37"}, @assoc={0x18, 0x117, 0x4, 0x9}, @iv={0x28, 0x117, 0x2, 0xd, "d04fd4bb8e5491da2c86d8faef"}], 0x130, 0x11}, 0x40000) recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/84, 0x54}, {&(0x7f0000000780)=""/98, 0x1ac}, {&(0x7f0000000280)=""/112, 0x70}, {&(0x7f0000000340)=""/249, 0xf9}], 0x4, &(0x7f0000000440)=""/45, 0x2d}}], 0x4000000000000e9, 0x0, &(0x7f0000000640)={0x77359400}) 13:34:06 executing program 2: ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, 0x0) sync() fcntl$getown(0xffffffffffffffff, 0x9) 13:34:06 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000500)={0x26, 'aead\x00', 0x0, 0x0, 'morus640\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) setrlimit(0x8, &(0x7f0000000240)={0x1a15, 0x3}) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vsock\x00', 0x12000, 0x0) ioctl$VHOST_SET_VRING_NUM(r2, 0x4008af10, &(0x7f0000000480)={0x1, 0x7}) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x200}], 0x30}, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x271) sendmsg$alg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="2628246708e9853f9a310163460ece01b3b6efcdf52bd10aa2916401efacbe8f8eefe9e4d4dc5755a8b7ccb2a713d21f70b6f559cfb13cc06614083ef6c7dbace31e4036f2df88f53d000184fdb144467ac29a9bbb948ca7a43eb55b726f64575b9a7ae29b0af842e9d2ef67a9b5eb68d119b3141154ce1cbbd4f4d89e1acf2ea2a58185c16e49579f4fe5579fb65b308bc5aa4b60bad619e876a9158fc63f55bac881f42e52b7780c73916b7124c783c823ac9df8b7db397e122b8a57bd7ef8db9ad77b8809c2779687d7713a0fd2985c74e3e6b1729d6d35f4953dd76d5dbe3171eb2a188e2b5c3d74a1f0f0b55c516784bc065189", 0xf6}], 0x1, &(0x7f0000000800)=[@iv={0xf0, 0x117, 0x2, 0xdb, "e7ab5d26b550e7ac8cb829439c95f048f3bf1e0dec4bc5494e13a1b0ff5835e3e450a1aa0b55aab8cba61c170bee62936f21efca00f8920caaba79cc6dcc21cdae103bd20ab8190b40f0db72ef88cb75db7393894725fc7fe76c803ff9772d30fbefbfe88c5ce0a4f571bdb1802f75dfd8972a52e4d2468f53dafce3abaf03c2f82e04bae55fa895383b5c62ce486cd1497c93f6062be233468202e8dc43d9ec5074afe688cf31c6e205a894842b56b5b9bfc6e03e7eb12e0bb1f20a983f550e70bcbae784b13a604596322f1a750a882968af89ccf0526c423d37"}, @assoc={0x18, 0x117, 0x4, 0x9}, @iv={0x28, 0x117, 0x2, 0xd, "d04fd4bb8e5491da2c86d8faef"}], 0x130, 0x11}, 0x40000) recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/84, 0x54}, {&(0x7f0000000780)=""/98, 0x1ac}, {&(0x7f0000000280)=""/112, 0x70}, {&(0x7f0000000340)=""/249, 0xf9}], 0x4, &(0x7f0000000440)=""/45, 0x2d}}], 0x4000000000000e9, 0x0, &(0x7f0000000640)={0x77359400}) 13:34:06 executing program 3: 13:34:07 executing program 1: 13:34:07 executing program 2: 13:34:07 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000500)={0x26, 'aead\x00', 0x0, 0x0, 'morus640\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) setrlimit(0x8, &(0x7f0000000240)={0x1a15, 0x3}) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vsock\x00', 0x12000, 0x0) ioctl$VHOST_SET_VRING_NUM(r2, 0x4008af10, &(0x7f0000000480)={0x1, 0x7}) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x200}], 0x30}, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x271) sendmsg$alg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="2628246708e9853f9a310163460ece01b3b6efcdf52bd10aa2916401efacbe8f8eefe9e4d4dc5755a8b7ccb2a713d21f70b6f559cfb13cc06614083ef6c7dbace31e4036f2df88f53d000184fdb144467ac29a9bbb948ca7a43eb55b726f64575b9a7ae29b0af842e9d2ef67a9b5eb68d119b3141154ce1cbbd4f4d89e1acf2ea2a58185c16e49579f4fe5579fb65b308bc5aa4b60bad619e876a9158fc63f55bac881f42e52b7780c73916b7124c783c823ac9df8b7db397e122b8a57bd7ef8db9ad77b8809c2779687d7713a0fd2985c74e3e6b1729d6d35f4953dd76d5dbe3171eb2a188e2b5c3d74a1f0f0b55c516784bc065189", 0xf6}], 0x1, &(0x7f0000000800)=[@iv={0xf0, 0x117, 0x2, 0xdb, "e7ab5d26b550e7ac8cb829439c95f048f3bf1e0dec4bc5494e13a1b0ff5835e3e450a1aa0b55aab8cba61c170bee62936f21efca00f8920caaba79cc6dcc21cdae103bd20ab8190b40f0db72ef88cb75db7393894725fc7fe76c803ff9772d30fbefbfe88c5ce0a4f571bdb1802f75dfd8972a52e4d2468f53dafce3abaf03c2f82e04bae55fa895383b5c62ce486cd1497c93f6062be233468202e8dc43d9ec5074afe688cf31c6e205a894842b56b5b9bfc6e03e7eb12e0bb1f20a983f550e70bcbae784b13a604596322f1a750a882968af89ccf0526c423d37"}, @assoc={0x18, 0x117, 0x4, 0x9}, @iv={0x28, 0x117, 0x2, 0xd, "d04fd4bb8e5491da2c86d8faef"}], 0x130, 0x11}, 0x40000) recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/84, 0x54}, {&(0x7f0000000780)=""/98, 0x1ac}, {&(0x7f0000000280)=""/112, 0x70}, {&(0x7f0000000340)=""/249, 0xf9}], 0x4, &(0x7f0000000440)=""/45, 0x2d}}], 0x4000000000000e9, 0x0, &(0x7f0000000640)={0x77359400}) 13:34:07 executing program 3: 13:34:07 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xffff}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x4000000fdfdffff}) 13:34:07 executing program 2: gettid() pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r2, 0x4, 0x2001) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xffffff49) splice(r0, 0x0, r3, 0x0, 0xfffffffffffffc01, 0x0) 13:34:07 executing program 1: wait4(0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r2, 0x4, 0x2001) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xffffff49) splice(r0, 0x0, r3, 0x0, 0xfffffffffffffc01, 0x0) 13:34:07 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x8991, &(0x7f0000000000)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000002200)={"626f6e64300000000600", @ifru_names='bond_slave_1\x00'}) [ 382.996869] bond0: Releasing backup interface bond_slave_1 [ 383.056839] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 383.068368] bond0: Error: Device is in use and cannot be enslaved [ 383.078922] bond0: Releasing backup interface bond_slave_1 [ 383.280443] IPVS: ftp: loaded support on port[0] = 21 [ 384.868404] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.875095] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.883721] device bridge_slave_0 entered promiscuous mode [ 384.965943] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.972520] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.980490] device bridge_slave_1 entered promiscuous mode [ 385.064257] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 385.146480] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 385.395580] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 385.481208] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 385.888861] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 385.897109] team0: Port device team_slave_0 added [ 385.978393] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 385.986626] team0: Port device team_slave_1 added [ 386.074897] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 386.158204] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 386.165321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 386.174935] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 386.256159] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 386.263602] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 386.273657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 386.357299] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 386.364899] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 386.374755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 387.299318] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.305977] bridge0: port 2(bridge_slave_1) entered forwarding state [ 387.313249] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.319750] bridge0: port 1(bridge_slave_0) entered forwarding state [ 387.328646] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 387.335366] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 390.649577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 390.946738] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 391.249158] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 391.255536] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 391.264162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 391.574593] 8021q: adding VLAN 0 to HW filter on device team0 13:34:18 executing program 5: 13:34:18 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) syz_open_pts(r0, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0x14}, 0xfe4e) 13:34:18 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000500)={0x26, 'aead\x00', 0x0, 0x0, 'morus640\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) setrlimit(0x8, &(0x7f0000000240)={0x1a15, 0x3}) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vsock\x00', 0x12000, 0x0) ioctl$VHOST_SET_VRING_NUM(r2, 0x4008af10, &(0x7f0000000480)={0x1, 0x7}) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x200}], 0x30}, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x271) sendmsg$alg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="2628246708e9853f9a310163460ece01b3b6efcdf52bd10aa2916401efacbe8f8eefe9e4d4dc5755a8b7ccb2a713d21f70b6f559cfb13cc06614083ef6c7dbace31e4036f2df88f53d000184fdb144467ac29a9bbb948ca7a43eb55b726f64575b9a7ae29b0af842e9d2ef67a9b5eb68d119b3141154ce1cbbd4f4d89e1acf2ea2a58185c16e49579f4fe5579fb65b308bc5aa4b60bad619e876a9158fc63f55bac881f42e52b7780c73916b7124c783c823ac9df8b7db397e122b8a57bd7ef8db9ad77b8809c2779687d7713a0fd2985c74e3e6b1729d6d35f4953dd76d5dbe3171eb2a188e2b5c3d74a1f0f0b55c516784bc065189", 0xf6}], 0x1, &(0x7f0000000800)=[@iv={0xf0, 0x117, 0x2, 0xdb, "e7ab5d26b550e7ac8cb829439c95f048f3bf1e0dec4bc5494e13a1b0ff5835e3e450a1aa0b55aab8cba61c170bee62936f21efca00f8920caaba79cc6dcc21cdae103bd20ab8190b40f0db72ef88cb75db7393894725fc7fe76c803ff9772d30fbefbfe88c5ce0a4f571bdb1802f75dfd8972a52e4d2468f53dafce3abaf03c2f82e04bae55fa895383b5c62ce486cd1497c93f6062be233468202e8dc43d9ec5074afe688cf31c6e205a894842b56b5b9bfc6e03e7eb12e0bb1f20a983f550e70bcbae784b13a604596322f1a750a882968af89ccf0526c423d37"}, @assoc={0x18, 0x117, 0x4, 0x9}, @iv={0x28, 0x117, 0x2, 0xd, "d04fd4bb8e5491da2c86d8faef"}], 0x130, 0x11}, 0x40000) 13:34:18 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x8991, &(0x7f0000000000)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000002200)={"626f6e64300000000600", @ifru_names='bond_slave_1\x00'}) 13:34:18 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x8991, &(0x7f0000000000)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000002200)={"626f6e64300000000600", @ifru_names='bond_slave_1\x00'}) 13:34:18 executing program 1: socket$inet(0x2, 0x2, 0x0) [ 393.705431] bond0: Releasing backup interface bond_slave_1 [ 393.760013] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 393.774816] bond0: Enslaving bond_slave_1 as an active interface with an up link 13:34:19 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000500)={0x26, 'aead\x00', 0x0, 0x0, 'morus640\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) setrlimit(0x8, &(0x7f0000000240)={0x1a15, 0x3}) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vsock\x00', 0x12000, 0x0) ioctl$VHOST_SET_VRING_NUM(r2, 0x4008af10, &(0x7f0000000480)={0x1, 0x7}) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x200}], 0x30}, 0x0) sendmsg$alg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="2628246708e9853f9a310163460ece01b3b6efcdf52bd10aa2916401efacbe8f8eefe9e4d4dc5755a8b7ccb2a713d21f70b6f559cfb13cc06614083ef6c7dbace31e4036f2df88f53d000184fdb144467ac29a9bbb948ca7a43eb55b726f64575b9a7ae29b0af842e9d2ef67a9b5eb68d119b3141154ce1cbbd4f4d89e1acf2ea2a58185c16e49579f4fe5579fb65b308bc5aa4b60bad619e876a9158fc63f55bac881f42e52b7780c73916b7124c783c823ac9df8b7db397e122b8a57bd7ef8db9ad77b8809c2779687d7713a0fd2985c74e3e6b1729d6d35f4953dd76d5dbe3171eb2a188e2b5c3d74a1f0f0b55c516784bc065189", 0xf6}], 0x1, &(0x7f0000000800)=[@iv={0xf0, 0x117, 0x2, 0xdb, "e7ab5d26b550e7ac8cb829439c95f048f3bf1e0dec4bc5494e13a1b0ff5835e3e450a1aa0b55aab8cba61c170bee62936f21efca00f8920caaba79cc6dcc21cdae103bd20ab8190b40f0db72ef88cb75db7393894725fc7fe76c803ff9772d30fbefbfe88c5ce0a4f571bdb1802f75dfd8972a52e4d2468f53dafce3abaf03c2f82e04bae55fa895383b5c62ce486cd1497c93f6062be233468202e8dc43d9ec5074afe688cf31c6e205a894842b56b5b9bfc6e03e7eb12e0bb1f20a983f550e70bcbae784b13a604596322f1a750a882968af89ccf0526c423d37"}, @assoc={0x18, 0x117, 0x4, 0x9}, @iv={0x28, 0x117, 0x2, 0xd, "d04fd4bb8e5491da2c86d8faef"}], 0x130, 0x11}, 0x40000) 13:34:19 executing program 5: 13:34:19 executing program 4: 13:34:19 executing program 1: 13:34:19 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x8991, &(0x7f0000000000)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000002200)={"626f6e64300000000600", @ifru_names='bond_slave_1\x00'}) 13:34:19 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x8991, &(0x7f0000000000)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000002200)={"626f6e64300000000600", @ifru_names='bond_slave_1\x00'}) [ 394.322518] bond0: Releasing backup interface bond_slave_1 13:34:19 executing program 5: 13:34:19 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000500)={0x26, 'aead\x00', 0x0, 0x0, 'morus640\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) setrlimit(0x8, &(0x7f0000000240)={0x1a15, 0x3}) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vsock\x00', 0x12000, 0x0) ioctl$VHOST_SET_VRING_NUM(r2, 0x4008af10, &(0x7f0000000480)={0x1, 0x7}) sendmsg$alg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="2628246708e9853f9a310163460ece01b3b6efcdf52bd10aa2916401efacbe8f8eefe9e4d4dc5755a8b7ccb2a713d21f70b6f559cfb13cc06614083ef6c7dbace31e4036f2df88f53d000184fdb144467ac29a9bbb948ca7a43eb55b726f64575b9a7ae29b0af842e9d2ef67a9b5eb68d119b3141154ce1cbbd4f4d89e1acf2ea2a58185c16e49579f4fe5579fb65b308bc5aa4b60bad619e876a9158fc63f55bac881f42e52b7780c73916b7124c783c823ac9df8b7db397e122b8a57bd7ef8db9ad77b8809c2779687d7713a0fd2985c74e3e6b1729d6d35f4953dd76d5dbe3171eb2a188e2b5c3d74a1f0f0b55c516784bc065189", 0xf6}], 0x1, &(0x7f0000000800)=[@iv={0xf0, 0x117, 0x2, 0xdb, "e7ab5d26b550e7ac8cb829439c95f048f3bf1e0dec4bc5494e13a1b0ff5835e3e450a1aa0b55aab8cba61c170bee62936f21efca00f8920caaba79cc6dcc21cdae103bd20ab8190b40f0db72ef88cb75db7393894725fc7fe76c803ff9772d30fbefbfe88c5ce0a4f571bdb1802f75dfd8972a52e4d2468f53dafce3abaf03c2f82e04bae55fa895383b5c62ce486cd1497c93f6062be233468202e8dc43d9ec5074afe688cf31c6e205a894842b56b5b9bfc6e03e7eb12e0bb1f20a983f550e70bcbae784b13a604596322f1a750a882968af89ccf0526c423d37"}, @assoc={0x18, 0x117, 0x4, 0x9}, @iv={0x28, 0x117, 0x2, 0xd, "d04fd4bb8e5491da2c86d8faef"}], 0x130, 0x11}, 0x40000) [ 394.457693] bond0: Enslaving bond_slave_1 as an active interface with an up link 13:34:19 executing program 4: [ 394.632244] bond0: Releasing backup interface bond_slave_1 13:34:19 executing program 1: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x910, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockname$inet(r1, 0x0, &(0x7f0000000040)) fcntl$getownex(r0, 0x10, &(0x7f0000000100)) [ 394.718001] bond0: Enslaving bond_slave_1 as an active interface with an up link 13:34:20 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x8991, &(0x7f0000000000)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000002200)={"626f6e64300000000600", @ifru_names='bond_slave_1\x00'}) 13:34:20 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000500)={0x26, 'aead\x00', 0x0, 0x0, 'morus640\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) setrlimit(0x8, &(0x7f0000000240)={0x1a15, 0x3}) openat$vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vsock\x00', 0x12000, 0x0) sendmsg$alg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="2628246708e9853f9a310163460ece01b3b6efcdf52bd10aa2916401efacbe8f8eefe9e4d4dc5755a8b7ccb2a713d21f70b6f559cfb13cc06614083ef6c7dbace31e4036f2df88f53d000184fdb144467ac29a9bbb948ca7a43eb55b726f64575b9a7ae29b0af842e9d2ef67a9b5eb68d119b3141154ce1cbbd4f4d89e1acf2ea2a58185c16e49579f4fe5579fb65b308bc5aa4b60bad619e876a9158fc63f55bac881f42e52b7780c73916b7124c783c823ac9df8b7db397e122b8a57bd7ef8db9ad77b8809c2779687d7713a0fd2985c74e3e6b1729d6d35f4953dd76d5dbe3171eb2a188e2b5c3d74a1f0f0b55c516784bc065189", 0xf6}], 0x1, &(0x7f0000000800)=[@iv={0xf0, 0x117, 0x2, 0xdb, "e7ab5d26b550e7ac8cb829439c95f048f3bf1e0dec4bc5494e13a1b0ff5835e3e450a1aa0b55aab8cba61c170bee62936f21efca00f8920caaba79cc6dcc21cdae103bd20ab8190b40f0db72ef88cb75db7393894725fc7fe76c803ff9772d30fbefbfe88c5ce0a4f571bdb1802f75dfd8972a52e4d2468f53dafce3abaf03c2f82e04bae55fa895383b5c62ce486cd1497c93f6062be233468202e8dc43d9ec5074afe688cf31c6e205a894842b56b5b9bfc6e03e7eb12e0bb1f20a983f550e70bcbae784b13a604596322f1a750a882968af89ccf0526c423d37"}, @assoc={0x18, 0x117, 0x4, 0x9}, @iv={0x28, 0x117, 0x2, 0xd, "d04fd4bb8e5491da2c86d8faef"}], 0x130, 0x11}, 0x40000) 13:34:20 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x8991, &(0x7f0000000000)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000002200)={"626f6e64300000000600", @ifru_names='bond_slave_1\x00'}) 13:34:20 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002000)=ANY=[], 0x0}, 0x48) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fallocate(r2, 0x1, 0x0, 0x20008000) ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000000)) 13:34:20 executing program 4: setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)="0b8493da69d419d3e5a313affec5c48780fa42c0606761a2404a9a6c5a567525af09b4ae9ae6a36177018ff55a012c3fa3d9a196466f930c37b676633bbcdd54ad15d1d19aa5b95e6b797acddbacf7ed0796c0f196dfbb8bbe0d57cab508ca10839a6750dab329b861c57d41508204309f85c612f8e5b88a528d442e05736cbb65dc347f371e3b617e807818682759751ae85a5f6de6d672fdf84dfe6317c6c4a7e11b8fd8babb2127430a3eb34f68c6487f", 0xb2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) semget$private(0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000280)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 395.183611] bond0: Releasing backup interface bond_slave_1 [ 395.279104] bond0: Releasing backup interface bond_slave_1 13:34:20 executing program 1: syz_emit_ethernet(0x32, &(0x7f0000000100)={@local, @link_local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @multicast1}, @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "10d1f6", 0x0, "071ccd"}}}}}}, 0x0) 13:34:20 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000500)={0x26, 'aead\x00', 0x0, 0x0, 'morus640\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) setrlimit(0x8, &(0x7f0000000240)={0x1a15, 0x3}) sendmsg$alg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="2628246708e9853f9a310163460ece01b3b6efcdf52bd10aa2916401efacbe8f8eefe9e4d4dc5755a8b7ccb2a713d21f70b6f559cfb13cc06614083ef6c7dbace31e4036f2df88f53d000184fdb144467ac29a9bbb948ca7a43eb55b726f64575b9a7ae29b0af842e9d2ef67a9b5eb68d119b3141154ce1cbbd4f4d89e1acf2ea2a58185c16e49579f4fe5579fb65b308bc5aa4b60bad619e876a9158fc63f55bac881f42e52b7780c73916b7124c783c823ac9df8b7db397e122b8a57bd7ef8db9ad77b8809c2779687d7713a0fd2985c74e3e6b1729d6d35f4953dd76d5dbe3171eb2a188e2b5c3d74a1f0f0b55c516784bc065189", 0xf6}], 0x1, &(0x7f0000000800)=[@iv={0xf0, 0x117, 0x2, 0xdb, "e7ab5d26b550e7ac8cb829439c95f048f3bf1e0dec4bc5494e13a1b0ff5835e3e450a1aa0b55aab8cba61c170bee62936f21efca00f8920caaba79cc6dcc21cdae103bd20ab8190b40f0db72ef88cb75db7393894725fc7fe76c803ff9772d30fbefbfe88c5ce0a4f571bdb1802f75dfd8972a52e4d2468f53dafce3abaf03c2f82e04bae55fa895383b5c62ce486cd1497c93f6062be233468202e8dc43d9ec5074afe688cf31c6e205a894842b56b5b9bfc6e03e7eb12e0bb1f20a983f550e70bcbae784b13a604596322f1a750a882968af89ccf0526c423d37"}, @assoc={0x18, 0x117, 0x4, 0x9}, @iv={0x28, 0x117, 0x2, 0xd, "d04fd4bb8e5491da2c86d8faef"}], 0x130, 0x11}, 0x40000) [ 395.349568] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 395.366942] bond0: Enslaving bond_slave_1 as an active interface with an up link 13:34:20 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f0000000140)) 13:34:20 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x8991, &(0x7f0000000000)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) 13:34:20 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000500)={0x26, 'aead\x00', 0x0, 0x0, 'morus640\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="2628246708e9853f9a310163460ece01b3b6efcdf52bd10aa2916401efacbe8f8eefe9e4d4dc5755a8b7ccb2a713d21f70b6f559cfb13cc06614083ef6c7dbace31e4036f2df88f53d000184fdb144467ac29a9bbb948ca7a43eb55b726f64575b9a7ae29b0af842e9d2ef67a9b5eb68d119b3141154ce1cbbd4f4d89e1acf2ea2a58185c16e49579f4fe5579fb65b308bc5aa4b60bad619e876a9158fc63f55bac881f42e52b7780c73916b7124c783c823ac9df8b7db397e122b8a57bd7ef8db9ad77b8809c2779687d7713a0fd2985c74e3e6b1729d6d35f4953dd76d5dbe3171eb2a188e2b5c3d74a1f0f0b55c516784bc065189", 0xf6}], 0x1, &(0x7f0000000800)=[@iv={0xf0, 0x117, 0x2, 0xdb, "e7ab5d26b550e7ac8cb829439c95f048f3bf1e0dec4bc5494e13a1b0ff5835e3e450a1aa0b55aab8cba61c170bee62936f21efca00f8920caaba79cc6dcc21cdae103bd20ab8190b40f0db72ef88cb75db7393894725fc7fe76c803ff9772d30fbefbfe88c5ce0a4f571bdb1802f75dfd8972a52e4d2468f53dafce3abaf03c2f82e04bae55fa895383b5c62ce486cd1497c93f6062be233468202e8dc43d9ec5074afe688cf31c6e205a894842b56b5b9bfc6e03e7eb12e0bb1f20a983f550e70bcbae784b13a604596322f1a750a882968af89ccf0526c423d37"}, @assoc={0x18, 0x117, 0x4, 0x9}, @iv={0x28, 0x117, 0x2, 0xd, "d04fd4bb8e5491da2c86d8faef"}], 0x130, 0x11}, 0x40000) 13:34:20 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000002200)={"626f6e64300000000600", @ifru_names='bond_slave_1\x00'}) [ 395.853188] bond0: Releasing backup interface bond_slave_1 13:34:20 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000380)="b4177b6531a21cfd7092ca49149ae73b515241c40d5a108e05cd2f66914391bddcd67c9bb8718ed381572898a7208a0337dfc8c9e71777537fa2f0a6d4e2c7953302f8", 0x43, 0x0, 0x0, 0x0) close(r0) 13:34:21 executing program 4: setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)="0b8493da69d419d3e5a313affec5c48780fa42c0606761a2404a9a6c5a567525af09b4ae9ae6a36177018ff55a012c3fa3d9a196466f930c37b676633bbcdd54ad15d1d19aa5b95e6b797acddbacf7ed0796c0f196dfbb8bbe0d57cab508ca10839a6750dab329b861c57d41508204309f85c612f8e5b88a528d442e05736cbb65dc347f371e3b617e807818682759751ae85a5f6de6d672fdf84dfe6317c6c4a7e11b8fd8babb2127430a3eb34f68c6487f", 0xb2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) semget$private(0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000280)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:34:21 executing program 2: ioctl$sock_ifreq(0xffffffffffffffff, 0x8991, &(0x7f0000000000)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) [ 396.187837] bond0: Error: Device is in use and cannot be enslaved 13:34:21 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f0000000140)) 13:34:21 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000500)={0x26, 'aead\x00', 0x0, 0x0, 'morus640\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10) sendmsg$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="2628246708e9853f9a310163460ece01b3b6efcdf52bd10aa2916401efacbe8f8eefe9e4d4dc5755a8b7ccb2a713d21f70b6f559cfb13cc06614083ef6c7dbace31e4036f2df88f53d000184fdb144467ac29a9bbb948ca7a43eb55b726f64575b9a7ae29b0af842e9d2ef67a9b5eb68d119b3141154ce1cbbd4f4d89e1acf2ea2a58185c16e49579f4fe5579fb65b308bc5aa4b60bad619e876a9158fc63f55bac881f42e52b7780c73916b7124c783c823ac9df8b7db397e122b8a57bd7ef8db9ad77b8809c2779687d7713a0fd2985c74e3e6b1729d6d35f4953dd76d5dbe3171eb2a188e2b5c3d74a1f0f0b55c516784bc065189", 0xf6}], 0x1, &(0x7f0000000800)=[@iv={0xf0, 0x117, 0x2, 0xdb, "e7ab5d26b550e7ac8cb829439c95f048f3bf1e0dec4bc5494e13a1b0ff5835e3e450a1aa0b55aab8cba61c170bee62936f21efca00f8920caaba79cc6dcc21cdae103bd20ab8190b40f0db72ef88cb75db7393894725fc7fe76c803ff9772d30fbefbfe88c5ce0a4f571bdb1802f75dfd8972a52e4d2468f53dafce3abaf03c2f82e04bae55fa895383b5c62ce486cd1497c93f6062be233468202e8dc43d9ec5074afe688cf31c6e205a894842b56b5b9bfc6e03e7eb12e0bb1f20a983f550e70bcbae784b13a604596322f1a750a882968af89ccf0526c423d37"}, @assoc={0x18, 0x117, 0x4, 0x9}, @iv={0x28, 0x117, 0x2, 0xd, "d04fd4bb8e5491da2c86d8faef"}], 0x130, 0x11}, 0x40000) 13:34:21 executing program 3: ioctl$sock_ifreq(0xffffffffffffffff, 0x8991, &(0x7f0000000000)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8990, &(0x7f0000002200)={"626f6e64300000000600", @ifru_names='bond_slave_1\x00'}) 13:34:21 executing program 1: r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00006cdffb)="8907040000", 0x5) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00002ce000), 0x10) 13:34:21 executing program 4: r0 = socket(0x200000000000011, 0x802, 0x4000000dd86) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000780)="c0", 0x1}], 0x1) 13:34:21 executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(0xffffffffffffffff, 0x8991, &(0x7f0000000000)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) 13:34:21 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f0000000140)) 13:34:21 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000500)={0x26, 'aead\x00', 0x0, 0x0, 'morus640\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10) sendmsg$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="2628246708e9853f9a310163460ece01b3b6efcdf52bd10aa2916401efacbe8f8eefe9e4d4dc5755a8b7ccb2a713d21f70b6f559cfb13cc06614083ef6c7dbace31e4036f2df88f53d000184fdb144467ac29a9bbb948ca7a43eb55b726f64575b9a7ae29b0af842e9d2ef67a9b5eb68d119b3141154ce1cbbd4f4d89e1acf2ea2a58185c16e49579f4fe5579fb65b308bc5aa4b60bad619e876a9158fc63f55bac881f42e52b7780c73916b7124c783c823ac9df8b7db397e122b8a57bd7ef8db9ad77b8809c2779687d7713a0fd2985c74e3e6b1729d6d35f4953dd76d5dbe3171eb2a188e2b5c3d74a1f0f0b55c516784bc065189", 0xf6}], 0x1, &(0x7f0000000800)=[@iv={0xf0, 0x117, 0x2, 0xdb, "e7ab5d26b550e7ac8cb829439c95f048f3bf1e0dec4bc5494e13a1b0ff5835e3e450a1aa0b55aab8cba61c170bee62936f21efca00f8920caaba79cc6dcc21cdae103bd20ab8190b40f0db72ef88cb75db7393894725fc7fe76c803ff9772d30fbefbfe88c5ce0a4f571bdb1802f75dfd8972a52e4d2468f53dafce3abaf03c2f82e04bae55fa895383b5c62ce486cd1497c93f6062be233468202e8dc43d9ec5074afe688cf31c6e205a894842b56b5b9bfc6e03e7eb12e0bb1f20a983f550e70bcbae784b13a604596322f1a750a882968af89ccf0526c423d37"}, @assoc={0x18, 0x117, 0x4, 0x9}, @iv={0x28, 0x117, 0x2, 0xd, "d04fd4bb8e5491da2c86d8faef"}], 0x130, 0x11}, 0x40000) [ 396.973785] ================================================================== [ 396.981234] BUG: KMSAN: uninit-value in check_6rd+0x65a/0x710 [ 396.987148] CPU: 0 PID: 8651 Comm: syz-executor4 Not tainted 4.20.0-rc3+ #106 [ 396.994440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 397.003809] Call Trace: [ 397.006437] dump_stack+0x32d/0x480 [ 397.010099] ? check_6rd+0x65a/0x710 [ 397.013876] kmsan_report+0x12d/0x290 [ 397.017736] __msan_warning+0x76/0xc0 13:34:22 executing program 3: ioctl$sock_ifreq(0xffffffffffffffff, 0x8991, &(0x7f0000000000)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8990, &(0x7f0000002200)={"626f6e64300000000600", @ifru_names='bond_slave_1\x00'}) [ 397.021581] check_6rd+0x65a/0x710 [ 397.025178] sit_tunnel_xmit+0xb9a/0x37f0 [ 397.029424] ? dev_hard_start_xmit+0xe0/0xde0 [ 397.033973] ? ipip6_tunnel_uninit+0x800/0x800 [ 397.038590] dev_hard_start_xmit+0x6dc/0xde0 [ 397.043081] __dev_queue_xmit+0x2d9e/0x3e00 [ 397.047504] dev_queue_xmit+0x4b/0x60 [ 397.051353] ? __netdev_pick_tx+0x14c0/0x14c0 [ 397.055890] packet_sendmsg+0x84b3/0x9180 [ 397.060094] ? kmsan_memcpy_metadata+0xb/0x10 [ 397.064622] ? __msan_memcpy+0x61/0x70 [ 397.068545] ? do_iter_readv_writev+0x822/0xac0 [ 397.073244] ? __se_sys_writev+0x9b/0xb0 [ 397.077357] ? do_syscall_64+0xcd/0x110 [ 397.081374] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 397.086777] ? balance_callback+0x48/0x260 [ 397.091045] ? kmsan_check_memory+0xd/0x10 [ 397.095309] ? wake_up_new_task+0xa40/0x1b50 [ 397.099773] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 397.105441] ? compat_packet_setsockopt+0x360/0x360 [ 397.110507] sock_write_iter+0x3f4/0x4f0 [ 397.114634] ? sock_read_iter+0x4e0/0x4e0 [ 397.118825] do_iter_readv_writev+0x822/0xac0 [ 397.123391] ? sock_read_iter+0x4e0/0x4e0 [ 397.127585] do_iter_write+0x302/0xd80 [ 397.131515] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 397.136996] ? import_iovec+0x41f/0x680 [ 397.141040] do_writev+0x397/0x860 [ 397.144660] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 397.150146] ? prepare_exit_to_usermode+0x137/0x460 [ 397.155188] ? syscall_return_slowpath+0x64/0x700 [ 397.160055] ? do_syscall_64+0xf3/0x110 [ 397.164074] __se_sys_writev+0x9b/0xb0 [ 397.168006] __x64_sys_writev+0x4a/0x70 [ 397.172018] do_syscall_64+0xcd/0x110 [ 397.175852] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 397.181075] RIP: 0033:0x457569 [ 397.184299] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 397.203229] RSP: 002b:00007f5da043ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 397.210972] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457569 13:34:22 executing program 3: ioctl$sock_ifreq(0xffffffffffffffff, 0x8991, &(0x7f0000000000)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8990, &(0x7f0000002200)={"626f6e64300000000600", @ifru_names='bond_slave_1\x00'}) 13:34:22 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000500)={0x26, 'aead\x00', 0x0, 0x0, 'morus640\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10) sendmsg$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="2628246708e9853f9a310163460ece01b3b6efcdf52bd10aa2916401efacbe8f8eefe9e4d4dc5755a8b7ccb2a713d21f70b6f559cfb13cc06614083ef6c7dbace31e4036f2df88f53d000184fdb144467ac29a9bbb948ca7a43eb55b726f64575b9a7ae29b0af842e9d2ef67a9b5eb68d119b3141154ce1cbbd4f4d89e1acf2ea2a58185c16e49579f4fe5579fb65b308bc5aa4b60bad619e876a9158fc63f55bac881f42e52b7780c73916b7124c783c823ac9df8b7db397e122b8a57bd7ef8db9ad77b8809c2779687d7713a0fd2985c74e3e6b1729d6d35f4953dd76d5dbe3171eb2a188e2b5c3d74a1f0f0b55c516784bc065189", 0xf6}], 0x1, &(0x7f0000000800)=[@iv={0xf0, 0x117, 0x2, 0xdb, "e7ab5d26b550e7ac8cb829439c95f048f3bf1e0dec4bc5494e13a1b0ff5835e3e450a1aa0b55aab8cba61c170bee62936f21efca00f8920caaba79cc6dcc21cdae103bd20ab8190b40f0db72ef88cb75db7393894725fc7fe76c803ff9772d30fbefbfe88c5ce0a4f571bdb1802f75dfd8972a52e4d2468f53dafce3abaf03c2f82e04bae55fa895383b5c62ce486cd1497c93f6062be233468202e8dc43d9ec5074afe688cf31c6e205a894842b56b5b9bfc6e03e7eb12e0bb1f20a983f550e70bcbae784b13a604596322f1a750a882968af89ccf0526c423d37"}, @assoc={0x18, 0x117, 0x4, 0x9}, @iv={0x28, 0x117, 0x2, 0xd, "d04fd4bb8e5491da2c86d8faef"}], 0x130, 0x11}, 0x40000) [ 397.218259] RDX: 0000000000000001 RSI: 00000000200004c0 RDI: 0000000000000003 [ 397.225546] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 397.232835] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5da043b6d4 [ 397.240137] R13: 00000000004c3807 R14: 00000000004d9f50 R15: 00000000ffffffff [ 397.247455] [ 397.249100] Uninit was created at: [ 397.252698] kmsan_internal_poison_shadow+0x92/0x150 [ 397.257832] kmsan_kmalloc+0xa1/0x100 [ 397.261663] kmsan_slab_alloc+0xe/0x10 [ 397.265585] __kmalloc_node_track_caller+0x1017/0x1360 [ 397.270893] __alloc_skb+0x42b/0xeb0 [ 397.274671] alloc_skb_with_frags+0x1c9/0xa80 [ 397.279198] sock_alloc_send_pskb+0xde3/0x13f0 [ 397.283814] packet_sendmsg+0x6698/0x9180 [ 397.287993] sock_write_iter+0x3f4/0x4f0 [ 397.292085] do_iter_readv_writev+0x822/0xac0 [ 397.296606] do_iter_write+0x302/0xd80 [ 397.300523] do_writev+0x397/0x860 [ 397.304088] __se_sys_writev+0x9b/0xb0 [ 397.308006] __x64_sys_writev+0x4a/0x70 [ 397.312029] do_syscall_64+0xcd/0x110 [ 397.315862] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 397.321067] ================================================================== [ 397.328440] Disabling lock debugging due to kernel taint [ 397.333937] Kernel panic - not syncing: panic_on_warn set ... [ 397.339856] CPU: 0 PID: 8651 Comm: syz-executor4 Tainted: G B 4.20.0-rc3+ #106 [ 397.348532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 397.357914] Call Trace: [ 397.360556] dump_stack+0x32d/0x480 [ 397.364240] panic+0x5db/0xbb8 [ 397.367534] kmsan_report+0x290/0x290 [ 397.371377] __msan_warning+0x76/0xc0 [ 397.375221] check_6rd+0x65a/0x710 [ 397.378819] sit_tunnel_xmit+0xb9a/0x37f0 [ 397.383050] ? dev_hard_start_xmit+0xe0/0xde0 [ 397.387579] ? ipip6_tunnel_uninit+0x800/0x800 [ 397.392189] dev_hard_start_xmit+0x6dc/0xde0 [ 397.396674] __dev_queue_xmit+0x2d9e/0x3e00 [ 397.401088] dev_queue_xmit+0x4b/0x60 [ 397.404925] ? __netdev_pick_tx+0x14c0/0x14c0 [ 397.409452] packet_sendmsg+0x84b3/0x9180 [ 397.413635] ? kmsan_memcpy_metadata+0xb/0x10 [ 397.418152] ? __msan_memcpy+0x61/0x70 13:34:22 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(0xffffffffffffffff, 0x8991, &(0x7f0000000000)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000002200)={"626f6e64300000000600", @ifru_names='bond_slave_1\x00'}) [ 397.422072] ? do_iter_readv_writev+0x822/0xac0 [ 397.426768] ? __se_sys_writev+0x9b/0xb0 [ 397.430852] ? do_syscall_64+0xcd/0x110 [ 397.434859] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 397.440259] ? balance_callback+0x48/0x260 [ 397.444538] ? kmsan_check_memory+0xd/0x10 [ 397.448804] ? wake_up_new_task+0xa40/0x1b50 [ 397.453268] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 397.458745] ? compat_packet_setsockopt+0x360/0x360 [ 397.463797] sock_write_iter+0x3f4/0x4f0 [ 397.467936] ? sock_read_iter+0x4e0/0x4e0 13:34:22 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000500)={0x26, 'aead\x00', 0x0, 0x0, 'morus640\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="2628246708e9853f9a310163460ece01b3b6efcdf52bd10aa2916401efacbe8f8eefe9e4d4dc5755a8b7ccb2a713d21f70b6f559cfb13cc06614083ef6c7dbace31e4036f2df88f53d000184fdb144467ac29a9bbb948ca7a43eb55b726f64575b9a7ae29b0af842e9d2ef67a9b5eb68d119b3141154ce1cbbd4f4d89e1acf2ea2a58185c16e49579f4fe5579fb65b308bc5aa4b60bad619e876a9158fc63f55bac881f42e52b7780c73916b7124c783c823ac9df8b7db397e122b8a57bd7ef8db9ad77b8809c2779687d7713a0fd2985c74e3e6b1729d6d35f4953dd76d5dbe3171eb2a188e2b5c3d74a1f0f0b55c516784bc065189", 0xf6}], 0x1, &(0x7f0000000800)=[@iv={0xf0, 0x117, 0x2, 0xdb, "e7ab5d26b550e7ac8cb829439c95f048f3bf1e0dec4bc5494e13a1b0ff5835e3e450a1aa0b55aab8cba61c170bee62936f21efca00f8920caaba79cc6dcc21cdae103bd20ab8190b40f0db72ef88cb75db7393894725fc7fe76c803ff9772d30fbefbfe88c5ce0a4f571bdb1802f75dfd8972a52e4d2468f53dafce3abaf03c2f82e04bae55fa895383b5c62ce486cd1497c93f6062be233468202e8dc43d9ec5074afe688cf31c6e205a894842b56b5b9bfc6e03e7eb12e0bb1f20a983f550e70bcbae784b13a604596322f1a750a882968af89ccf0526c423d37"}, @assoc={0x18, 0x117, 0x4, 0x9}, @iv={0x28, 0x117, 0x2, 0xd, "d04fd4bb8e5491da2c86d8faef"}], 0x130, 0x11}, 0x40000) [ 397.472117] do_iter_readv_writev+0x822/0xac0 [ 397.476680] ? sock_read_iter+0x4e0/0x4e0 [ 397.480857] do_iter_write+0x302/0xd80 [ 397.484779] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 397.490257] ? import_iovec+0x41f/0x680 [ 397.494298] do_writev+0x397/0x860 [ 397.497905] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 397.503405] ? prepare_exit_to_usermode+0x137/0x460 [ 397.508470] ? syscall_return_slowpath+0x64/0x700 [ 397.513366] ? do_syscall_64+0xf3/0x110 [ 397.517387] __se_sys_writev+0x9b/0xb0 [ 397.521323] __x64_sys_writev+0x4a/0x70 [ 397.525329] do_syscall_64+0xcd/0x110 [ 397.529169] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 397.533121] bond0: Error: Device is in use and cannot be enslaved [ 397.534376] RIP: 0033:0x457569 [ 397.534399] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 397.534414] RSP: 002b:00007f5da043ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 397.534451] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457569 [ 397.534465] RDX: 0000000000000001 RSI: 00000000200004c0 RDI: 0000000000000003 [ 397.534494] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 397.592386] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5da043b6d4 [ 397.599678] R13: 00000000004c3807 R14: 00000000004d9f50 R15: 00000000ffffffff [ 397.608211] Kernel Offset: disabled [ 397.611856] Rebooting in 86400 seconds..