[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [ 60.817297] sshd (6055) used greatest stack depth: 53184 bytes left [....] Starting OpenBSD Secure Shell server: sshd[ 61.050336] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 64.754981] random: sshd: uninitialized urandom read (32 bytes read) [ 65.333484] random: sshd: uninitialized urandom read (32 bytes read) [ 67.742813] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.22' (ECDSA) to the list of known hosts. [ 73.482955] random: sshd: uninitialized urandom read (32 bytes read) 2018/10/11 08:42:19 fuzzer started [ 78.323987] random: cc1: uninitialized urandom read (8 bytes read) 2018/10/11 08:42:24 dialing manager at 10.128.0.26:39089 2018/10/11 08:42:24 syscalls: 1 2018/10/11 08:42:24 code coverage: enabled 2018/10/11 08:42:24 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/10/11 08:42:24 setuid sandbox: enabled 2018/10/11 08:42:24 namespace sandbox: enabled 2018/10/11 08:42:24 Android sandbox: /sys/fs/selinux/policy does not exist 2018/10/11 08:42:24 fault injection: enabled 2018/10/11 08:42:24 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/10/11 08:42:24 net packed injection: /dev/net/tun can't be opened (open /dev/net/tun: cannot allocate memory) 2018/10/11 08:42:24 net device setup: enabled [ 83.658234] random: crng init done 08:44:25 executing program 0: r0 = socket(0x10, 0x802, 0x0) socket$inet6(0xa, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000000080), 0xa9, &(0x7f0000000140)={&(0x7f00000000c0)=@bridge_delneigh={0x28, 0x1d, 0x5, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xb}, [@NDA_DST_MAC={0xc, 0x1, @broadcast}]}, 0x28}}, 0x0) [ 202.311862] IPVS: ftp: loaded support on port[0] = 21 [ 203.769755] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.776432] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.785265] device bridge_slave_0 entered promiscuous mode [ 203.937224] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.943837] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.952850] device bridge_slave_1 entered promiscuous mode [ 204.101766] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 204.252803] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 204.715401] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 204.867875] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 205.159227] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 205.166444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 08:44:29 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0x0) semget(0x1, 0x1, 0x0) semtimedop(0x0, &(0x7f0000000280)=[{0x0, 0x7, 0x1800}], 0x1, &(0x7f0000000300)) [ 205.679357] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 205.687886] team0: Port device team_slave_0 added [ 205.987286] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 205.996007] team0: Port device team_slave_1 added [ 206.261712] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 206.269137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 206.278729] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 206.510649] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 206.517890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 206.526799] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 206.585282] IPVS: ftp: loaded support on port[0] = 21 [ 206.774798] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 206.782759] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 206.792101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 207.030627] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 207.039049] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 207.049173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 208.861382] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.868157] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.876900] device bridge_slave_0 entered promiscuous mode [ 209.131290] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.138057] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.147085] device bridge_slave_1 entered promiscuous mode [ 209.426635] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 209.638156] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 209.777181] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.783868] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.790906] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.797606] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.806882] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 210.173260] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 210.326558] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 210.589023] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 210.841727] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 210.848917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 211.097007] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 211.104288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 08:44:35 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000004d00)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000140), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) connect$netlink(r1, &(0x7f0000000080)=@unspec, 0xc) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) sendmmsg(r0, &(0x7f0000007200)=[{{&(0x7f00000002c0)=@rc, 0x80, &(0x7f0000000540), 0x0, &(0x7f00000005c0)}}], 0x1, 0x20000000) sendmsg$netlink(r1, &(0x7f0000004c80)={&(0x7f0000000000), 0xc, &(0x7f0000004bc0), 0x0, &(0x7f0000004c40)}, 0x0) [ 212.108143] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 212.116563] team0: Port device team_slave_0 added [ 212.331755] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 212.340046] team0: Port device team_slave_1 added [ 212.430820] IPVS: ftp: loaded support on port[0] = 21 [ 212.689328] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 212.696731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 212.705971] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 213.082161] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 213.089256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 213.098470] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 213.381129] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 213.389243] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 213.399729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 213.671357] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 213.679338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 213.688889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 215.573749] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.580234] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.589045] device bridge_slave_0 entered promiscuous mode [ 215.914644] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.921131] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.930063] device bridge_slave_1 entered promiscuous mode [ 216.318009] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 216.564033] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 217.152989] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.159517] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.166708] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.173250] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.182474] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 217.353733] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 217.478944] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 217.718093] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 217.999997] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 218.007250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 218.311589] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 218.318953] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 219.127066] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 219.135516] team0: Port device team_slave_0 added [ 219.402689] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 219.410865] team0: Port device team_slave_1 added [ 219.760171] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 219.767482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 219.776599] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 220.016757] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 220.024474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 220.033713] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready 08:44:44 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) connect$inet(r0, &(0x7f0000301000)={0x2, 0x0, @rand_addr=0x80000001}, 0x10) shutdown(r0, 0x1) sendmmsg(r0, &(0x7f00000010c0)=[{{&(0x7f00000004c0)=@alg={0x2, 'aead\x00', 0x0, 0x0, 'gcm(seed-generic)\x00'}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000000)="ed", 0x1}], 0x1, &(0x7f0000000640)}}], 0x1, 0x0) [ 220.410715] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 220.418514] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 220.427788] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 220.767560] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 220.775243] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 220.784560] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 221.586591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.015845] IPVS: ftp: loaded support on port[0] = 21 [ 222.915073] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 224.340849] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 224.347433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 224.355817] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 224.999753] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.006521] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.013610] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.020150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.030439] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 225.300626] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.307601] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.316260] device bridge_slave_0 entered promiscuous mode [ 225.582345] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 225.646666] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.653376] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.662189] device bridge_slave_1 entered promiscuous mode [ 225.714719] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.007927] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 226.406265] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 227.590181] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 227.983655] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 228.387063] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 228.394304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 228.729752] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 228.737176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 229.836728] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 229.845084] team0: Port device team_slave_0 added [ 230.164226] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 230.172648] team0: Port device team_slave_1 added [ 230.577771] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 230.585128] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 230.594224] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 230.912861] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 230.920051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 230.929793] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 231.267345] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 231.275337] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 231.284594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 231.454367] 8021q: adding VLAN 0 to HW filter on device bond0 08:44:55 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000006c0)="f95f874fb17b96eb0734133051114495828c3a432aa25c281465fae51a42c1dc278df3422f24c7ea9e76242722c766c5fbec20ee1bb88b5d78d3b3b2097abf9d2ce2928eabaa4cb67103fe8bec1d06ce85dc73647c0e297c95645e3c860e33fa8b763b1bc890afe28b8956052f9f55f406839396a91d0e0f8b", 0x79}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000000280)=[{{&(0x7f0000000340)=@ipx, 0x80, &(0x7f00000000c0), 0x0, &(0x7f00000003c0)=""/154, 0x77, 0x6}}], 0xfffffffffffffd0c, 0x0, 0x0) [ 231.654125] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 231.661675] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 231.671068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 232.973447] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 233.619608] IPVS: ftp: loaded support on port[0] = 21 [ 234.639591] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 234.646136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 234.654351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 08:44:59 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x200, 0x0) flistxattr(r0, &(0x7f0000000040)=""/241, 0xf1) 08:45:00 executing program 0: io_setup(0x9fa, &(0x7f0000000140)=0x0) r1 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6}}, &(0x7f0000000100)=0xe8) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000280)={r2, @local}, 0xc) write$binfmt_elf64(r1, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x836, 0x101, 0x8, 0x4, 0x8, 0x3, 0x3f, 0xe131, 0x95, 0x40, 0x2dc, 0x1, 0x8001, 0x38, 0x1, 0xc2d8, 0x3, 0xffffffffffffffc1}, [{0x2, 0x9, 0x100000000, 0x8, 0x5, 0x7f, 0x8001, 0x6}], "5edc8fbc7cd1efff447421db590eb059e2405b752a61c025d4425cdec4732a483c73f121d9f10763cf7cbcc5bbdf585656af8b40edc2d55face592c80ed51106639300a632e275c8dd5dcbb39ecba65af825ec47555be8cec61106d11100d7", [[], []]}, 0x2d7) r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x0, 0x0) close(r3) r4 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) io_submit(r0, 0x1, &(0x7f0000000b00)=[&(0x7f00000002c0)={0x0, 0x8, 0x0, 0x5, 0x0, r3, 0x0}]) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x8, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000080), &(0x7f0000000600)=0x4) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x9) [ 236.414309] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.521230] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.527862] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.535047] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.541576] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.550494] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 236.793930] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 08:45:01 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x4, 0x4, 0x400000000004, 0x9}, 0x2c) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x40, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000140)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000080)=""/32, 0x20}, {&(0x7f00000001c0)=""/129, 0x81}, {&(0x7f0000000280)=""/66, 0x42}, {&(0x7f0000000300)=""/242, 0xf2}, {&(0x7f0000000400)=""/31, 0x1f}, {&(0x7f0000000440)=""/107, 0x6b}, {&(0x7f00000004c0)=""/190, 0xbe}], 0x7, &(0x7f0000000600)=""/20, 0x14, 0x1}, 0x400}, {{&(0x7f0000000640)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000800)=[{&(0x7f00000006c0)=""/98, 0x62}, {&(0x7f0000000740)=""/6, 0x6}, {&(0x7f0000000780)=""/109, 0x6d}], 0x3, &(0x7f0000000840)=""/135, 0x87, 0xe8}, 0x5}, {{&(0x7f0000000900)=@ipx, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000980)=""/113, 0x71}, {&(0x7f0000000a00)=""/110, 0x6e}, {&(0x7f0000000a80)=""/116, 0x74}, {&(0x7f0000000b00)=""/161, 0xa1}], 0x4, &(0x7f0000000c00)=""/161, 0xa1, 0x1}, 0x4}, {{&(0x7f0000000cc0)=@in, 0x80, &(0x7f0000001000)=[{&(0x7f0000000d40)=""/116, 0x74}, {&(0x7f0000000dc0)=""/106, 0x6a}, {&(0x7f0000000e40)=""/242, 0xf2}, {&(0x7f0000000f40)=""/142, 0x8e}], 0x4, &(0x7f0000001040)=""/177, 0xb1}, 0x7b6264bb}, {{&(0x7f0000001100)=@ipx, 0x80, &(0x7f00000012c0)=[{&(0x7f0000001180)=""/29, 0x1d}, {&(0x7f00000011c0)=""/102, 0x66}, {&(0x7f0000001240)=""/115, 0x73}], 0x3, &(0x7f0000001300)=""/113, 0x71}, 0x8}, {{&(0x7f0000001380)=@ipx, 0x80, &(0x7f00000016c0)=[{&(0x7f0000001400)=""/251, 0xfb}, {&(0x7f0000001500)=""/132, 0x84}, {&(0x7f00000015c0)=""/242, 0xf2}], 0x3, &(0x7f0000001700)=""/61, 0x3d}, 0x5}], 0x6, 0x40, &(0x7f00000018c0)={0x77359400}) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000001900)={@ipv4={[], [], @rand_addr}, @loopback, @empty, 0x4, 0x5, 0x9, 0x500, 0x4, 0x1200080, r2}) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r0, &(0x7f0000000100)='9'}, 0x10) 08:45:01 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000180), 0x1) r1 = msgget$private(0x0, 0x6) msgctl$IPC_INFO(r1, 0x3, &(0x7f0000000100)=""/48) msgctl$IPC_INFO(r1, 0x3, &(0x7f0000000000)=""/231) 08:45:01 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000001300)={&(0x7f0000000040)=@in6={0xa, 0x4e21, 0x6, @empty, 0x6}, 0x80, &(0x7f0000000280)=[{&(0x7f00000000c0)="5d9b06e1d3f1349d02a28b5a84e759996d3281eafc54802a10c4e2a462b78e9d89fbcc66a85f87169be6125362038ffebeba5f43ce134bc231770ce89ada2de3cc748fe8533ab9d6217b0e6a2c5fa56681a4fde2568e121dfdec8bdf956ea9df361c256fb49512fd88", 0x69}, {&(0x7f0000000180)="3596136001b358d7318998dd8246e12e52c4e9a67bd3df83ded76817bdddcf61fbdc6f32093f862fb21152ad46a7ec4228348b629496105f8a10c016d2efe0c303b06bc7bbf2dc8ed310c12f6aff160a105c532f349312f1e049ae134f433563016033535bd80881ed0fed720ebf22f1a7dc4bb87181695d107bc86c218b6204a9e331123896aefe93ea015b9cc70c3e6ccb2a246a182abd9ed10f83176196b382519a7f7dc58e21de527661055f3a8764a6d4d465a6f01a4d848286b1c9328d24183fe572510412e2557225439dae16ba", 0xd1}], 0x2, &(0x7f00000002c0)=[{0x1010, 0x13a, 0x1d, "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"}], 0x1010, 0x4041}, 0x80) r1 = socket$inet6(0xa, 0x3, 0x0) getsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f000059dffc), &(0x7f0000000140)=0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x14}, 0x4}], 0x1c) [ 237.981841] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.988690] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.997493] device bridge_slave_0 entered promiscuous mode [ 238.452355] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.458862] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.467548] device bridge_slave_1 entered promiscuous mode 08:45:02 executing program 0: r0 = epoll_create(0x3) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x8001, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf8000)) 08:45:03 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) close(0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) getsockopt$bt_hci(r1, 0x0, 0x2, &(0x7f0000000500)=""/166, &(0x7f00000005c0)=0xa6) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000980), 0xffffff4d) close(r0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x80, &(0x7f0000000000), 0x0, &(0x7f00000001c0)=""/17, 0x11}, 0x3f00) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) ioctl(r0, 0x8916, &(0x7f00000000c0)="153f6234418dd25d766070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x3, 0x85) dup(r3) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000600)=0x1, 0x4) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f00000000c0)={0x9, {0x2, 0x4e21, @rand_addr}, {0x2, 0x4e23, @dev}, {0x2, 0x4e23, @broadcast}, 0x80, 0x102, 0x40, 0x80000000, 0x0, &(0x7f0000000080)='lo\x00', 0x7, 0x0, 0x101}) io_setup(0x5, &(0x7f0000000000)=0x0) getsockopt$inet6_tcp_int(r3, 0x6, 0x1b, &(0x7f00000002c0), &(0x7f0000000300)=0x4) ioctl$int_out(r3, 0x5460, &(0x7f0000000040)) io_submit(r5, 0x14f, &(0x7f00000001c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000300), 0xfd2a}]) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000340)) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200000, 0x80) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000080)=0x101) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240)='/dev/hwrng\x00', 0x42, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000440)=0x0) prlimit64(r8, 0x3, &(0x7f0000000480)={0x7ff, 0x1}, &(0x7f00000004c0)) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r6, 0x12, 0x2, &(0x7f0000000380)=""/71, &(0x7f0000000400)=0x47) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000100)={0x0, 0x8203}, 0x10) [ 238.965651] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 239.348648] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready 08:45:04 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0xc, &(0x7f0000000080)=@req3, 0x1c) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x5, 0x2040) fanotify_mark(r1, 0x80, 0x8010000, r1, &(0x7f0000000040)='./file0\x00') setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x479) [ 240.698284] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 241.129476] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 241.521563] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 241.528955] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 241.880758] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 241.887987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 242.035094] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.092581] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 243.100824] team0: Port device team_slave_0 added [ 243.510996] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 243.519427] team0: Port device team_slave_1 added [ 243.554732] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 243.815531] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 243.822787] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 243.831568] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 244.197854] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 244.205151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 244.214160] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 244.598803] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 244.606610] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 244.615750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 244.902310] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 244.910664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 244.919664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 244.929026] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 244.962409] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 244.971469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready 08:45:10 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/ptype\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000080)=@nl, 0x80, &(0x7f0000000540), 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x0) [ 246.199814] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.248235] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.254814] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.261787] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.268396] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.277569] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 248.284542] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 249.850083] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.692975] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready 08:45:15 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000040)) [ 251.546936] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 251.553402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 251.561237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 252.227647] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.703402] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.120815] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 256.486975] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 256.493287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 256.501242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 08:45:20 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)) perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, r0, 0x2) [ 256.988193] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.963246] hrtimer: interrupt took 33666 ns 08:45:23 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000006c0)="f95f874fb17b96eb0734133051114495828c3a432aa25c281465fae51a42c1dc278df3422f24c7ea9e76242722c766c5fbec20ee1bb88b5d78d3b3b2097abf9d2ce2928eabaa4cb67103fe8bec1d06ce85dc73647c0e297c95645e3c860e33fa8b763b1bc890afe28b8956052f9f55f406839396a91d0e0f8b", 0x79}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000000280)=[{{&(0x7f0000000340)=@ipx, 0x80, &(0x7f00000000c0), 0x0, &(0x7f00000003c0)=""/154, 0x77, 0x6}}], 0xfffffffffffffd0c, 0x0, 0x0) 08:45:23 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = accept4(r0, 0x0, &(0x7f0000000040), 0x800) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x2a0801, 0x0) write$UHID_GET_REPORT_REPLY(r2, &(0x7f0000000100)={0xa, 0x5, 0x80, 0x6}, 0xa) bind$bt_rfcomm(r1, &(0x7f0000000080)={0x1f, {0x4, 0xffffffff, 0x200, 0xfff, 0x3, 0x80000000}, 0xfffffffffffffff9}, 0xa) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) sendto$inet6(r2, &(0x7f0000000140), 0x3c1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @dev={0xfe, 0x80, [], 0x11}}, 0x1de) 08:45:23 executing program 5: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000040)={{{@in6=@dev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000140)=0xe8) quotactl(0x80, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000180)="d3c8ce37cbf5ebccb7f058c28f8da2827e7d83f89fc648a351aaf059002c0bdd62811bffe38f8cadb84899c0e2ebf6cc21daa52652f198a0e07961c9e308e9a70abddbaa3aa5f1cae7944343e7ddddd09a76bba07b6d13862951cfd41c626eccf0ff092f2ae87afce5c54b8768d32f26558e512f360e79a5aa5a16f79f5b911d8bc856125571c3ca6ebf24e72461dca0c94055d00fddae2701636230b88591fc93d521379b7e23dd261cabf7b4c632bbb3e52928e536ebb19b571ab41263932e820df031609c1fe57893807b5e9ae8bd3df712499bb3c8a63476339f76c3e71d5c1a96a5368e472c3a9302b63dff752842eef89c38ecfb71bab575153b2bd26db2a9741d77fbc0c63948a7afa678a161be896ece6e1987161981e028cb049845abac6e2d192d4d04ddbfff818c631ab83ff8b5152e5886b3246c4940f9d392ba20e840c32a528b326c143d98b471cf0c80dda3b08a16305111f17b70b0ee4ca223fd98a186d3da6312d9141834fd4c772163c7897bc49161caddb14117006a8d43ed0421b9e39f1a62b0e239f799f6564d44bfa9e5caf2f389caf243eae0d6d96aec1264a9cd91ad4277f8e76c91f871e2b0b00c4bc2c728a357db4e7d0285addfe777c7efddb6c2022d9739eda744cc034a07d0a98d55b048a9b567af3b36f49f8bd7153072571aa68cb8ab3f7f2b638894d553d1e45f51a0bd5eeffef2905085577c8c86a721a364c72d64d1bbc3ac6abf663076db38dde3e951e21eb68b4a00c78404c449f14a4f3a516246bbcd2aa6484331a2cba60a7f23dd533d04b4e63783970be92062ca91db716dc7110bc58b77a4a665ced2cbcd8995bb47b253a3d54f156ea676e3e8426ab40afd5370ca20a6f63867cf772b0e0332154540daaef83d63ab1807724aaa639d942d0dcd8c67e814571252838093c37ac541e040011328effa4fd694da87cc0eda20c8b1714f268d8dd2bd53bbfe124b1449da5de971ebe0daf4c5beadedeedf4422ad29da3b3117aed66983601c192436957ec4d0955a5c5c426d57c3706d91dac88cdbff34f55ce7f2de9a587e09bc7030d07bbe38aacc70d1f5c2866d4bb512b630ae4335ae7f62c37159bdfa7e7c3fc765e946b95af1c6cd96c1b1716464b07d0674c94213101fb78cef26c082d9c7262dd929453ded79c0e9f8e09d82d91b52b22df7d42f1fd0f8e5911c7f07f1ad98997ebd6fff951ca225950c1474383b34e914112c441e84882d8cfc6a22927f0f96981c768fd41065b5d354eb0d85bf785ff81aa7ae5391039fbb96b7f4a49768bfc8ed75a8ac3eaa9d84f095d05b2e3711edc0dfb7d97a117f28a6cb023dbfc86c6ad46ee8c71361ac206695132b801196517f4c39745c9f8626898a9f30f6458d3a6cc84052d1917684e510fe531ccf8bd51115550441273460e18e62b07cba9f6546ec465905b4848cddcf76f1290228425e6fe8b61732991d65de499a33153cde8e2aad766e4079335cea92b86ae60c31ed90c02a9a542246095a27cb14ebb3fb1455192841920ea796b2782d1847519062be1a90bf5e203a989efc72d80de303b24e50bca5781988f6e4ac6bc2685c45e87dd5300bf7db0379f5655757f2c03415d9b048e2cd7a77db37bb85d83bdcc13f64b9c076db0cbf5378c860c2c32d452f9d3fba3cb265694d7228616ba873855465194f110d7d6951792a8ca3e18ab4c30ff4267ff0f5686a107f0d3b1239378b7b65202ee2d9d82e6ac72871c0eb454abdb0e58d6312d0d1ed28345d041219a254dc97642315f617a98ac495fc0f8ce83a054f5318bc0ee8ae9d3dd1446c10b46c79d42cc208408af01b8a3a035f11b4494fc3abdcf1470b54bd8dbce03f161abf425c4cd8c3da4f760fc84de8aadcc647ec1d6c07ace6b676ec0194a0c6b32f09b1011a202c67259f6fe95de8c30fc80c8a8a62b520a6a8e3540f2908bb263960cdb38017d1d7837561eb322851a2ff436e9bfda2b88c74dd5a15d55d66897628e9cfff6fbda0385d1083ab051406067c52338160d3ec5dd552e3b375f024195fbc0fb2224482e95563d5fa052631f453fa35f137a2897dc6b266c18cf59ce0072d78aead7df1d28da2ff1cd1ab55ad1a507586e4b52ec43bef87a1d0b905edf81042e82d1fa987c591bf9c1ccdff8e4b001b4202a8058ce805b9fba6ead06b9f147f60d34062daebec5d063eaf407f9c338c35d9e36ed59e1b9c9bd155df5eedbeab6331027ad2ab84b4d3491babde5a1113edc25ca9eb4ec92c98d9bebbf21c4c2e44a1688d75192768bc34060c9f7662b7b59fac0a379c9098eb852b217eb1c2a1bdfcd38684f17e872565e74951e7d73bf3f94b2dc2152dcbd23f5a3e33c06d09f020e9c2e79ca96e0188597ade8f502b620e165352b08b28cafc9676c4210d1291a19a6c8b59482af19678a3726a1c6287ccab3a6695c0263d564a0faeca84062ccc3a1b7fe31e095881c00a75904f1046282559298d137a3af993eaba67dbc75092a308a68d9cb24bce16e9a22cb24df44e966d1bb026fd670fa22164a89a1129bf6bfa7fb675a89a855aaee060c69470553bab7259f8276f40753abce4bd626e0fb212d99dc68c5d87169f9c0ed24b0f7502d467fadfe1b8e563bdffbbf2763603b9745276125e29a866a7f6f76b9f4601af503c1257f8ac2845bb79194a8f7abedf37fa5326cb9b4b97df6ace746e7dae43dfda427f3a67647b010993432314b7d49ba3d2de7ab47c1b218620ddda109c07a039d39d3e0fc73c888490906b4b8f753cf3c19ae8118d0c5f824fac6fc7b2474250df687233adbdb103401e9c7959a32eafc781f34e8ef849521d6681a8e559aff9d9f9f367bf0a36335f604f7f03c95db63911be804e009a670d9b5c27247f00def8714f273cf330485f3c656f38d17fc27e8521028e4096745edd8b48cb49e9c0321d363590213ab60ed87441ed470e39145815f91b9523540c5a4346243d764dc824675d168c0498ac50bb782f1e8999f9ba7cfe85e5f20800d63478de09455c572f0d041378d2470a76cb7287638a3b28705d365b69c558aca580685d2cb4d516efc29cf12af5cd287ad7a08028158a5ff65284820f5a5b1ba730e57061bfe96dfe765472380d3dd24e227b79297cb9603c597216d4dcfee747460af899add8845a856e3dae8b1045f0696c9a38cc34ce668dd71af70f98db7c1295c5866644dc935432a9cd2c09c02656a291a7404ba248fa7cc03ae9c6848ac25d96571b0d4162dbbb16c5c5bb751f2cfdc1910b59272362e69fdf669b64c1c3311a73371582a5c3774d9eef61f9640a5883e7c9ccdf3c76b8f59b97cb061e1e9d6646709b4c8f930e8c05508a2fd4aad6e92de303ea7b6f3673ff2f304bfa440a0f9c3a39c0f6228ba0a7499aa21200f4e4d888fcd200ca935ec259320d9ee721ae32d5e33450df9dac9625a9150e148f1a6f06529ca34c49b390c6039f748a4da25490106a40af37e7400f154d91dd349fe4b435fccc271eba192f05a87295232bc9658f1158e882b8d14df54976c204ea2f9400ff50f5d1051c195a84b46e18af7a130eb308cdf1531b00a3dcfe90ca69602a38225747d04eca534ce79a37f2aa32e114e8e058c2b849be7957efd652d3d34bdda82a7468c776481468e5e7df4504e1eac2995610a451e3a6b9013b1cd44922ff9776f3527097f10cc77b0defb233e0a2c6d2a435c32ccef62b559e2266c3fda9ad0b0fe20e266d5e258cfbcf56ea0cdc743aa2ab29a4488e6cb0697ddb8f5eb9bfe1f9b0cc371ba8772e5bcc3dcd99bb1909355ab59978670a81e0d468bc6bea3c4949fa33cfea3204595539cd90bdcf76030063d5b72973535bedb96c2ced8acbe63f351cd94810ec820abc3de4410b6409d13b978c60397c74e51c87b5058eff6e8f44eb7d29fa9bc9de1f319f05aaefc1ede6fbfae941d45c54ee41c5047205058c5001ad771b4a0de4002b2949983799abba095c07269a0a16b01b27eb415142536f979548a5c19efaceeb80accf372d99b11653868e05d25182171139af504f717107b3eabe22cb9600a33a8dff92eba99d1f9ca1b2321d1d9f97f27e83ebc04e6570acf35281eeb3357982d13f0c88c626a7d3e2e27d5289bd60614333ffd720428a903fad5030e184f013a5e15e8359464fbb98150d8287deb3069a78f790c12bf54c647f86291f461bd858b879d058d500845a1a06ae303f66b094a84ae63a746205e8746d9866fc56a666ae81ed72dfdc6674eb22ec77ee95c6e1130c2f9d30fef1be6dd86395934e5c993adedf0c3bda11273f09b059f98f38f1a14e3c0aa077c2fe89b65ea9f643d2d56fb2b53d749011c3c5ad274183e4df5e46645eb866d33861b0982f2d417a81b6fd9a39c40b41e48b911b83a3e5fe8080ab1f2dfe9ecd2fad0b4273ea00fc2a20ecb81e41c48c0856c6bcb2960060ce73b057d9bcf76773e8884d690fc8d178076763448307ae2e264b4257408609c460796a80f08e9cf0e84ac76531cec2414b05cc56e7c4936d36f8ae8b4db6ce13123c5852d5c9dd40c75f901a71391194a9604b9cc58458c44390d4254b860a198205c389b266fc6ee280a7027e8629728d09e2ec916418aa935425d715428bb55f268f7a9d3e16f80eec1a7db8b5bc2e81fb1c428952c97658c9efb938fd50ba47d68427da400ac5442b995ee926894d0768a54e9fe058a13552e5a3181623315ca056f2ea5a4ed921af48b7e47e6725ebc34f369a4ff23472dd247d4cb5f68010b66b297eb0886bdf275afaa3d584042a706c0c14fa99b771816896622bc5019c25f2456f42720423a0d3a0b2c129aa67aa4a0394c6546f998393631a2befbdba58aab6b41a9df6d4e7e93d262c07b59398a7033107e1237eed1c18e749e0fbf19c553ec7ee787d2b59c4458cf1f15c12a42801eff4667ef2fa7daeb9092c901795219a0136314c17c47e885bc508dc588e8d8ab05a3ade5160d230bfdfe76ca58de0032e1cf45857e485065c05553097bda9e8c1edf9af0d1c6ea15c6cbc57a7798bde6d7f9f2ef6dff30f0053d6a873c0a6dcfddbc565e04adac99d4fd71ef5514edfc301e54016a3ea4b9f6fbc89dfdd8dc8d1c7c0c2c5439cbfa579454838f7f2ed669840b0a24b41ba119b1190baee96786559c1afaae8d7b3f3330d76a679ac77ad8cbc984027e0118da5fd9b704fda30b9ff5435c9d0c8152397a188f0cc09026967feb52031b3c1a494ada6ba54926ec2f5ff2887f06b8d2224ac8760b3c6a6a1ff378e2ec0600719e37300e8a9bb960254f6ce44e80b5a45edbf640d6a7ee5f956674f073f648d768b8233f77bdaa4a1af655797591cbf0e64896955c20e7e184c4a222919c504ff8221337272e3c7c8c28a2a51056fd2bc2b19686def0f7eb29f2dc10e9d36e0db6e0166b8f3155163c643e3beca053e950a6d59ae364a5843fa4aa7e5874d584fc6c16427d83ddf44dcac79953b7bff8d2b241caf6f582b06e8bfcfaedfc1557462a8c644553a7b402f0f997a920479b7615558663e1671b9701e05da4346c0da7d8114de4bc74b58062df1ea26caf928b0d75a3cc741c58a08d975e41188ad948bbc8c4b4002a4525b9c719344afff769b14bd5c267e111e4a60de4fe2ea0e62a729d7f7cdc0daa03bb6a9109657c232dfe41025daee2ad974581a6f1888be1c6f97270f576d13ab4dc601d29aa37eb965483c8ca1328fbf3ea6393e819742eb16191d01fdc54086f96fc90f4631ac4ddf7d12cfc7b0aab64040b68316") r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001180)='/dev/rtc0\x00', 0x400000, 0x0) ioctl$BLKROGET(r1, 0x125e, &(0x7f00000011c0)) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000001200)) ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f00000012c0)=""/231) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f00000013c0), &(0x7f0000001400)=0x40) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000001440)=0x9) get_thread_area(&(0x7f0000001480)={0x8, 0x20000800, 0x2000, 0xfffffffffffffffb, 0x3, 0x40, 0x3b4, 0xfff, 0x69b, 0x400}) ioctl$sock_SIOCGIFCONF(r1, 0x8910, &(0x7f00000014c0)=@req) keyctl$join(0x1, &(0x7f0000001500)={'syz', 0x0}) ioctl$BLKRESETZONE(r1, 0x40101283, &(0x7f0000001540)={0x56c, 0x1b}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000001580)={0x7f, 0x1, 'client0\x00', 0x4, "cf50a4456e675cd3", "a8e468307a5560000aa82a2da922eb382dac55bef788f31959d67baa03e63385", 0x80000001, 0xffffffff80000000}) socketpair$inet6(0xa, 0x7, 0x2, &(0x7f0000001640)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000001680)={0x1, 0x0, @ioapic={0x1, 0x21, 0x3, 0x100000000, 0x0, [{0x80000000, 0xffff, 0x80000001, [], 0x3f}, {0xffffffff, 0x7, 0xfff, [], 0x7fffffff}, {0x1, 0x9, 0x2f3, [], 0x1}, {0x9, 0x1, 0x6, [], 0x9}, {0x6, 0x3, 0x5, [], 0xffffffff}, {0x100000001, 0x1, 0x9, [], 0xfffffffffffffff7}, {0x3, 0x1, 0x39, [], 0x7fff}, {0x0, 0x80, 0x80, [], 0x2}, {0x400, 0x0, 0x3f, [], 0x8}, {0xff, 0x7ff, 0x4, [], 0x9a8}, {0x7, 0x100, 0x20, [], 0x3}, {0x7, 0x2, 0x400, [], 0x2}, {0xfff, 0xc570}, {0x5a, 0x1, 0x32, [], 0x101}, {0x80000001, 0x45, 0x7, [], 0x20}, {0x1ff, 0xb6, 0x3, [], 0x100000001}, {0x8, 0x101, 0xff, [], 0x10001}, {0x9, 0x4, 0x20, [], 0x614}, {0xa3, 0x80000000, 0xa352, [], 0x1}, {0x0, 0x6, 0x9, [], 0x1}, {0x4, 0x2, 0x3, [], 0x5}, {0x6, 0xffffffffffffff1d, 0x6, [], 0x17c}, {0x5, 0x702, 0x2efb, [], 0x5}, {0x1, 0x10000, 0xa5, [], 0x2}]}}) recvmmsg(r1, &(0x7f0000007b00)=[{{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000001780)=""/183, 0xb7}, {&(0x7f0000001840)=""/163, 0xa3}, {&(0x7f0000001900)=""/9, 0x9}, {&(0x7f0000001940)=""/69, 0x45}, {&(0x7f00000019c0)=""/210, 0xd2}, {&(0x7f0000001ac0)=""/15, 0xf}, {&(0x7f0000001b00)=""/76, 0x4c}], 0x7, &(0x7f0000001c00)=""/199, 0xc7}, 0x977d}, {{&(0x7f0000001d00)=@nfc, 0x80, &(0x7f0000002d80)=[{&(0x7f0000001d80)=""/4096, 0x1000}], 0x1, &(0x7f0000002dc0)=""/85, 0x55, 0x7}, 0x8000}, {{&(0x7f0000002e40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000003440)=[{&(0x7f0000002ec0)=""/192, 0xc0}, {&(0x7f0000002f80)=""/228, 0xe4}, {&(0x7f0000003080)=""/62, 0x3e}, {&(0x7f00000030c0)=""/253, 0xfd}, {&(0x7f00000031c0)=""/76, 0x4c}, {&(0x7f0000003240)=""/83, 0x53}, {&(0x7f00000032c0)=""/112, 0x70}, {&(0x7f0000003340)=""/255, 0xff}], 0x8, &(0x7f00000034c0)=""/43, 0x2b, 0x1}, 0x8}, {{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003500)=""/21, 0x15}, {&(0x7f0000003540)=""/230, 0xe6}, {&(0x7f0000003640)=""/247, 0xf7}, {&(0x7f0000003740)=""/255, 0xff}, {&(0x7f0000003840)=""/221, 0xdd}, {&(0x7f0000003940)=""/63, 0x3f}, {&(0x7f0000003980)=""/33, 0x21}, {&(0x7f00000039c0)=""/229, 0xe5}], 0x8, &(0x7f0000003b40)=""/46, 0x2e, 0x4}, 0x9}, {{&(0x7f0000003b80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000004cc0)=[{&(0x7f0000003c00)=""/98, 0x62}, {&(0x7f0000003c80)=""/23, 0x17}, {&(0x7f0000003cc0)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x6}, 0x2}, {{&(0x7f0000004d00)=@can, 0x80, &(0x7f00000062c0)=[{&(0x7f0000004d80)=""/227, 0xe3}, {&(0x7f0000004e80)=""/4096, 0x1000}, {&(0x7f0000005e80)=""/201, 0xc9}, {&(0x7f0000005f80)=""/137, 0x89}, {&(0x7f0000006040)=""/183, 0xb7}, {&(0x7f0000006100)=""/149, 0x95}, {&(0x7f00000061c0)=""/244, 0xf4}], 0x7, &(0x7f0000006340)=""/224, 0xe0, 0x8001}}, {{&(0x7f0000006440)=@generic, 0x80, &(0x7f0000007940)=[{&(0x7f00000064c0)=""/59, 0x3b}, {&(0x7f0000006500)=""/70, 0x46}, {&(0x7f0000006580)=""/39, 0x27}, {&(0x7f00000065c0)=""/4096, 0x1000}, {&(0x7f00000075c0)=""/58, 0x3a}, {&(0x7f0000007600)=""/148, 0x94}, {&(0x7f00000076c0)=""/70, 0x46}, {&(0x7f0000007740)=""/13, 0xd}, {&(0x7f0000007780)=""/197, 0xc5}, {&(0x7f0000007880)=""/188, 0xbc}], 0xa, &(0x7f0000007a00)=""/217, 0xd9, 0x5}, 0x1}], 0x7, 0x101, 0x0) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000007cc0)={0x8, 0x1}) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000007d00)={0x9, {{0xa, 0x4e22, 0xcecc, @remote, 0x42d}}, 0x1, 0x6, [{{0xa, 0x4e21, 0x1, @remote, 0xfffffffeffffffff}}, {{0xa, 0x4e24, 0x1000, @mcast1, 0x9}}, {{0xa, 0x4e23, 0x8000, @loopback, 0x7}}, {{0xa, 0x4e23, 0xfffffffffffffe01, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xe}}, 0xfffffffffffffff7}}, {{0xa, 0x4e24, 0xce, @mcast1, 0x81}}, {{0xa, 0x4e21, 0xbade, @remote, 0x5}}]}, 0x390) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008100)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f00000081c0)={&(0x7f00000080c0)={0x10, 0x0, 0x0, 0x4608040}, 0xc, &(0x7f0000008180)={&(0x7f0000008140)={0x34, r4, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x400}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000005}, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000008200)={0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000008240)={r5}) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000008280)={{0xffffffffffffffff, 0x3, 0x81, 0x0, 0x401}, 0x3ff, 0x7}) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000008300)=0x7ff, &(0x7f0000008340)=0x2) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000008380)={'filter\x00', 0x4}, 0x68) write$P9_RWALK(r1, &(0x7f0000008400)={0x4a, 0x6f, 0x1, {0x5, [{0x10, 0x4, 0x1}, {0x20, 0x2, 0x5}, {0xca, 0x1, 0x6}, {0x4, 0x4, 0x6}, {0x0, 0x4, 0x8}]}}, 0x4a) syz_genetlink_get_family_id$team(&(0x7f0000008480)='team\x00') ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r1, 0x40045730, &(0x7f00000084c0)=0x401) setsockopt$RDS_FREE_MR(r2, 0x114, 0x3, &(0x7f0000008500)={{0x100, 0x7fffffff}, 0x10}, 0x10) ioctl$TCSETA(r1, 0x5406, &(0x7f0000008540)={0x8001, 0x1, 0x3, 0x100000001, 0x5c5b, 0x8, 0x8, 0x6}) 08:45:23 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000640)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, 'port0\x00', 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000200)={0x2000000021, @time}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40505330, &(0x7f0000000180)) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000280)={{}, 'port1\x00'}) 08:45:23 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0a5c2d023c126285718070") ioctl$sock_ifreq(r0, 0x89f4, &(0x7f00000000c0)={'sit0\x00', @ifru_data=&(0x7f0000000180)="3b5ebbb901391860c2a6aeebdbf6afb10abb4a8112653b32394bb6eb5c81bbf2"}) 08:45:23 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) read$FUSE(r0, &(0x7f00000020c0), 0xfffffe76) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) r1 = gettid() llistxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)=""/97, 0x61) tkill(r1, 0x15) read$FUSE(r0, &(0x7f00000030c0), 0x1000) 08:45:23 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = memfd_create(&(0x7f0000000380)='\x00', 0x0) fstat(r1, &(0x7f0000003400)) 08:45:23 executing program 1: 08:45:23 executing program 2: 08:45:23 executing program 4: 08:45:24 executing program 2: 08:45:24 executing program 1: 08:45:24 executing program 0: 08:45:24 executing program 4: [ 260.676162] IPVS: ftp: loaded support on port[0] = 21 [ 261.498792] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.505399] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.514091] device bridge_slave_0 entered promiscuous mode [ 261.607000] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.613611] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.621405] device bridge_slave_1 entered promiscuous mode [ 261.715154] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 261.800927] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 262.069649] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 262.199319] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 262.318021] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 262.325216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 262.404494] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 262.411473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 262.650321] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 262.658173] team0: Port device team_slave_0 added [ 262.737483] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 262.745304] team0: Port device team_slave_1 added [ 262.824702] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 262.908777] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 262.990634] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 262.998494] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 263.007793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 263.093067] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 263.100361] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 263.109402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 263.994168] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.000596] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.007641] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.014104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.021831] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 264.122478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 267.312577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.619421] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 267.913229] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 267.919497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 267.927559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 268.229500] 8021q: adding VLAN 0 to HW filter on device team0 08:45:34 executing program 5: 08:45:34 executing program 2: 08:45:34 executing program 1: 08:45:34 executing program 0: 08:45:34 executing program 4: 08:45:34 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) read$FUSE(r0, &(0x7f00000020c0), 0xfffffe76) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) r1 = gettid() llistxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)=""/97, 0x61) tkill(r1, 0x15) read$FUSE(r0, &(0x7f00000030c0), 0x1000) 08:45:34 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f00000002c0)=ANY=[@ANYRESHEX], 0xffffffd0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)=0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00', 0x10) write$cgroup_pid(r1, &(0x7f0000000000), 0xfffffea6) 08:45:34 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x11) ioctl$TCSETS(r1, 0x5412, &(0x7f0000000000)) 08:45:34 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_CLR_FD(r0, 0x4c01) 08:45:34 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc4c85513, &(0x7f0000001000)) 08:45:34 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000b82000)={0x10000004}) epoll_wait(r1, &(0x7f0000000040)=[{}], 0x172d, 0x0) 08:45:35 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc4c85513, &(0x7f0000001000)) 08:45:35 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000b82000)={0x10000004}) epoll_wait(r1, &(0x7f0000000040)=[{}], 0x172d, 0x0) 08:45:35 executing program 5: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000002840), 0xffffffffffffffff) socketpair$inet6(0xa, 0x0, 0x0, &(0x7f0000000200)) r0 = getpid() pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) ptrace(0x4206, r0) tkill(r0, 0x9) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) waitid(0x0, 0x0, &(0x7f0000000100), 0xc0000006, &(0x7f00000002c0)) 08:45:35 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) bind$inet(r0, &(0x7f0000000800)={0x2, 0x0, @remote}, 0x10) connect$inet(r0, &(0x7f0000000180), 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000006c0)={0x0, 0x7fff, 0x80000001}, 0x14) shutdown(r0, 0x1) 08:45:35 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000500)=[@text64={0x40, &(0x7f0000000480)="660f38816b0066baf80cb8509b4186ef66bafc0cb87a5b0000ef400f09440f20c0350d000000440f22c0b991000040b8e4dd0000ba000000000f30b9800000c00f3235002000000f3066450f083ef2650f01c90f01d1c7442400d3000000c7442402e4000000c7442406000000000f011424", 0x72}], 0x1, 0x0, &(0x7f0000000000)=[@efer={0x2, 0x4000}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:45:35 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x1100082) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000040)) r2 = memfd_create(&(0x7f0000000080)="74086e750000000000000000008c00", 0x0) pwritev(r0, &(0x7f0000000000)=[{&(0x7f00000004c0)='L', 0x1}], 0x1, 0x0) sendfile(r2, r0, 0x0, 0x9) [ 271.856318] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. [ 271.940363] ================================================================== [ 271.947829] BUG: KMSAN: uninit-value in vmx_set_constant_host_state+0x1778/0x1830 [ 271.955491] CPU: 1 PID: 7777 Comm: syz-executor5 Not tainted 4.19.0-rc4+ #66 [ 271.962694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 271.972074] Call Trace: [ 271.974730] dump_stack+0x306/0x460 [ 271.978395] ? vmx_set_constant_host_state+0x1778/0x1830 [ 271.983916] kmsan_report+0x1a2/0x2e0 [ 271.987781] __msan_warning+0x7c/0xe0 [ 271.991630] vmx_set_constant_host_state+0x1778/0x1830 [ 271.996968] vmx_create_vcpu+0x3e6f/0x7870 [ 272.001270] ? kmsan_set_origin_inline+0x6b/0x120 [ 272.006153] ? __msan_poison_alloca+0x17a/0x210 [ 272.010872] ? vmx_vm_init+0x340/0x340 [ 272.014796] kvm_arch_vcpu_create+0x25d/0x2f0 [ 272.019445] kvm_vm_ioctl+0x13fd/0x33d0 [ 272.023473] ? __msan_poison_alloca+0x17a/0x210 [ 272.028188] ? do_vfs_ioctl+0x18a/0x2810 [ 272.032282] ? __se_sys_ioctl+0x1da/0x270 [ 272.036988] ? vcpu_stat_clear_per_vm+0x420/0x420 [ 272.041866] ? vcpu_stat_clear_per_vm+0x420/0x420 [ 272.046749] do_vfs_ioctl+0xcf3/0x2810 [ 272.050697] ? security_file_ioctl+0x92/0x200 [ 272.055252] __se_sys_ioctl+0x1da/0x270 [ 272.059279] __x64_sys_ioctl+0x4a/0x70 [ 272.063199] do_syscall_64+0xbe/0x100 [ 272.067041] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 272.072259] RIP: 0033:0x457519 [ 272.075481] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 272.094417] RSP: 002b:00007fb258643c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 272.102185] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457519 [ 272.109488] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 272.116793] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 272.124118] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb2586446d4 [ 272.131436] R13: 00000000004bfbb7 R14: 00000000004cfc40 R15: 00000000ffffffff [ 272.138767] [ 272.140430] Local variable description: ----dt@vmx_set_constant_host_state [ 272.147471] Variable was created at: [ 272.151247] vmx_set_constant_host_state+0x2b0/0x1830 [ 272.156492] vmx_create_vcpu+0x3e6f/0x7870 [ 272.160745] ================================================================== [ 272.168128] Disabling lock debugging due to kernel taint [ 272.173604] Kernel panic - not syncing: panic_on_warn set ... [ 272.173604] [ 272.181021] CPU: 1 PID: 7777 Comm: syz-executor5 Tainted: G B 4.19.0-rc4+ #66 [ 272.189633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 272.199020] Call Trace: [ 272.201654] dump_stack+0x306/0x460 [ 272.205342] panic+0x54c/0xafa [ 272.208618] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 272.214122] kmsan_report+0x2d3/0x2e0 [ 272.217976] __msan_warning+0x7c/0xe0 [ 272.221833] vmx_set_constant_host_state+0x1778/0x1830 [ 272.227160] vmx_create_vcpu+0x3e6f/0x7870 [ 272.231456] ? kmsan_set_origin_inline+0x6b/0x120 [ 272.236355] ? __msan_poison_alloca+0x17a/0x210 [ 272.241084] ? vmx_vm_init+0x340/0x340 [ 272.245021] kvm_arch_vcpu_create+0x25d/0x2f0 [ 272.249568] kvm_vm_ioctl+0x13fd/0x33d0 [ 272.253607] ? __msan_poison_alloca+0x17a/0x210 [ 272.258334] ? do_vfs_ioctl+0x18a/0x2810 [ 272.262440] ? __se_sys_ioctl+0x1da/0x270 [ 272.266663] ? vcpu_stat_clear_per_vm+0x420/0x420 [ 272.271566] ? vcpu_stat_clear_per_vm+0x420/0x420 [ 272.276485] do_vfs_ioctl+0xcf3/0x2810 [ 272.280477] ? security_file_ioctl+0x92/0x200 [ 272.285041] __se_sys_ioctl+0x1da/0x270 [ 272.289068] __x64_sys_ioctl+0x4a/0x70 [ 272.293005] do_syscall_64+0xbe/0x100 [ 272.296847] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 272.302066] RIP: 0033:0x457519 [ 272.305287] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 272.324220] RSP: 002b:00007fb258643c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 272.331966] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457519 [ 272.339264] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 272.346560] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 272.353853] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb2586446d4 [ 272.361144] R13: 00000000004bfbb7 R14: 00000000004cfc40 R15: 00000000ffffffff [ 272.369490] Kernel Offset: disabled [ 272.373130] Rebooting in 86400 seconds..