Warning: Permanently added '10.128.0.83' (ECDSA) to the list of known hosts. 2018/12/21 04:50:45 fuzzer started 2018/12/21 04:50:50 dialing manager at 10.128.0.26:38701 2018/12/21 04:50:50 syscalls: 1 2018/12/21 04:50:50 code coverage: enabled 2018/12/21 04:50:50 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/12/21 04:50:50 setuid sandbox: enabled 2018/12/21 04:50:50 namespace sandbox: enabled 2018/12/21 04:50:50 Android sandbox: /sys/fs/selinux/policy does not exist 2018/12/21 04:50:50 fault injection: enabled 2018/12/21 04:50:50 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/12/21 04:50:50 net packet injection: enabled 2018/12/21 04:50:50 net device setup: enabled 04:53:45 executing program 0: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_mems\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000340)) accept4$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) write$evdev(r1, &(0x7f0000000200)=[{{0x0, 0x7530}, 0x4, 0x20, 0x8}, {{r2, r3/1000+30000}, 0x13, 0x81, 0x2}, {{r4, r5/1000+10000}, 0x1f, 0x2, 0x6}], 0x48) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$cgroup_int(r1, &(0x7f0000000080), 0x2001007f) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) [ 245.567904] IPVS: ftp: loaded support on port[0] = 21 [ 246.969940] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.976737] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.985663] device bridge_slave_0 entered promiscuous mode [ 247.070600] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.077238] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.086160] device bridge_slave_1 entered promiscuous mode [ 247.169615] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 247.254825] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 247.517327] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 247.603254] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 247.693066] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 247.700064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 247.786729] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 247.793855] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 248.057120] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 248.065806] team0: Port device team_slave_0 added [ 248.149958] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 248.158780] team0: Port device team_slave_1 added [ 248.244140] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 248.336581] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 248.422764] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 248.430400] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 248.439845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 248.528314] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 248.536074] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 248.545778] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 248.879251] ip (6592) used greatest stack depth: 54096 bytes left 04:53:49 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000009400)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x83, &(0x7f0000000340)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000011180), 0x24a, 0x10022, &(0x7f00000113c0)={0x0, 0x1c9c380}) [ 249.503288] IPVS: ftp: loaded support on port[0] = 21 [ 249.776382] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.783028] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.790178] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.796827] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.806524] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 249.813150] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 251.629851] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.636525] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.644917] device bridge_slave_0 entered promiscuous mode [ 251.781738] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.788280] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.796771] device bridge_slave_1 entered promiscuous mode [ 251.915771] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 252.009478] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 252.379613] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 252.481803] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 253.052471] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 253.061064] team0: Port device team_slave_0 added [ 253.199502] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 253.208283] team0: Port device team_slave_1 added [ 253.340806] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 253.348005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 253.357344] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 253.503417] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 253.510464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 253.519502] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 253.626664] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 253.634376] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 253.643663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 253.792914] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 253.800604] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 253.809735] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready 04:53:54 executing program 2: sched_setaffinity(0x0, 0x8, &(0x7f0000000100)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in6}}, 0xe8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0) [ 255.187235] IPVS: ftp: loaded support on port[0] = 21 [ 255.423791] ip (6784) used greatest stack depth: 54072 bytes left [ 255.522819] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.529378] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.536597] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.543174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.552993] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 255.559507] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 256.116909] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.680047] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 257.316693] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 257.323106] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 257.331001] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 257.800801] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.807512] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.815684] device bridge_slave_0 entered promiscuous mode [ 258.001249] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.029713] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.036815] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.044964] device bridge_slave_1 entered promiscuous mode [ 258.127907] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 258.241053] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 258.798137] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 258.953032] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 259.120340] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 259.127374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 259.619036] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 259.628265] team0: Port device team_slave_0 added [ 259.850309] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 259.858974] team0: Port device team_slave_1 added [ 260.042035] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 260.152280] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 260.159194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 260.168062] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 260.273125] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 260.280660] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 260.289729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 260.467850] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 260.475471] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 260.484600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 261.050501] ip (7012) used greatest stack depth: 53840 bytes left [ 261.515314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.182948] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.189603] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.196861] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.203405] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.212179] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 262.219772] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 262.271895] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 262.831323] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 262.837733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 262.845683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 04:54:03 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00008b7ff0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2400000001010100020000001200ffff02000000100002000c000100050e9f7c064038aa"], 0x24}}, 0x0) 04:54:03 executing program 0: add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@ipv4}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local}, 0x0, @in6}}, 0xe8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev}}, 0x1c) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0) 04:54:03 executing program 0: add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@ipv4}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local}, 0x0, @in6}}, 0xe8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev}}, 0x1c) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0) [ 263.585173] IPVS: ftp: loaded support on port[0] = 21 [ 263.691608] 8021q: adding VLAN 0 to HW filter on device team0 04:54:03 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_targets\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x3}) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 04:54:04 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") perf_event_open(&(0x7f0000000140)={0x2, 0x39f, 0x16, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) fcntl$setsig(r1, 0xa, 0x3) fcntl$setlease(r1, 0x400, 0x0) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, &(0x7f0000d31ff0), &(0x7f00007adff0)={0x77359400}, 0x8) truncate(&(0x7f000037eff8)='./file0\x00', 0x0) fcntl$getflags(r1, 0x401) 04:54:05 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x8000, 0x4) r1 = socket$inet6(0xa, 0x803, 0x6) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x52, r0, 0x0) fstatfs(r0, &(0x7f0000000000)=""/39) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x100000, 0x0, 0x19013, r0, 0x0) finit_module(r0, &(0x7f0000000080)='\x00', 0x0) 04:54:05 executing program 0: accept(0xffffffffffffffff, &(0x7f0000000440)=@ethernet={0x0, @broadcast}, &(0x7f0000000300)=0x31) r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x40046109, &(0x7f0000000300)) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f00000001c0), &(0x7f0000000200)=0x10) close(r0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000080)={'nat\x00', 0xf1, "bc6805e1c7f9d013ce7b70fc1e87c14ef198dfcf81859552387e5d2e0e9e7567090a443e37a0c3590d08780b50abd8b0e70d3cbaf52356cae01fd99b0ef9bc8d7046749546c1ab5761d414f39da67027eeb9df6bab28dab4e7e3224e755010243c8129e4fa938a434a55fd00295dc29fce03f0c1fc304ec1c78ccbb911df2bfff5a49d5e59dd338f822af2d7be24c11065b39252504003daba4267dc9dffddef7f392504a8cf1ad5f1785dfb22921ffc24382aa3ac160623473a1144a02ae3ad3d35592298bdb33a73e78692cb8853f7d5babd37261dffedc673e978c3c6952df709dffbff56b731053732245eaab48500"}, &(0x7f0000000000)=0x115) 04:54:05 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') r2 = accept$packet(0xffffffffffffff9c, &(0x7f00000000c0)={0x11, 0x0, 0x0}, &(0x7f0000000100)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@broadcast}}, &(0x7f0000000240)=0xe8) accept$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000400)=0x14) ioctl$sock_ifreq(r2, 0x0, &(0x7f0000000280)={'sit0\x00', @ifru_mtu=0x73b579d9}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000440)={{{@in=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4}, 0x0, @in=@multicast2}}, &(0x7f0000000540)=0xe8) recvmmsg(r0, &(0x7f0000004840)=[{{&(0x7f0000000640)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f00000007c0)=[{&(0x7f00000006c0)=""/124, 0x7c}, {&(0x7f0000000740)=""/70, 0x46}, {&(0x7f0000000900)=""/4096, 0x1000}], 0x3, &(0x7f0000000800)=""/43, 0x2b}, 0x8000}, {{&(0x7f00000019c0)=@hci, 0x80, &(0x7f0000001900)=[{&(0x7f0000000840)=""/25, 0x19}, {&(0x7f0000001a40)=""/146, 0x92}, {&(0x7f0000001b00)=""/206, 0xce}], 0x3, &(0x7f0000001c00)}, 0x6}, {{&(0x7f0000001c40)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/158, 0x9e}], 0x1, &(0x7f0000001dc0)=""/96, 0x60}, 0xf9db}, {{0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f0000001e40)=""/111, 0x6f}, {&(0x7f0000001ec0)=""/128, 0x80}, {&(0x7f0000001f40)=""/110, 0x6e}, {&(0x7f0000001fc0)=""/48, 0x30}, {&(0x7f0000002000)=""/213, 0xd5}, {&(0x7f0000002100)=""/6, 0x6}, {&(0x7f0000002140)=""/113, 0x71}], 0x7, &(0x7f0000002240)=""/208, 0xd0}, 0x10000}, {{&(0x7f0000002340)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f00000025c0)=[{&(0x7f00000023c0)=""/219, 0xdb}, {&(0x7f00000024c0)=""/37, 0x25}, {&(0x7f0000002500)=""/188, 0xbc}], 0x3, &(0x7f0000002600)=""/223, 0xdf}, 0x180}, {{&(0x7f0000002700)=@alg, 0x80, &(0x7f0000003c80)=[{&(0x7f0000002780)=""/207, 0xcf}, {&(0x7f0000002880)=""/2, 0x2}, {&(0x7f00000028c0)=""/145, 0x91}, {&(0x7f0000002980)=""/4096, 0x1000}, {&(0x7f0000003980)=""/72, 0x48}, {&(0x7f0000003a00)=""/131, 0x83}, {&(0x7f0000003ac0)=""/36, 0x24}, {&(0x7f0000003b00)=""/51, 0x33}, {&(0x7f0000003b40)=""/12, 0xc}, {&(0x7f0000003b80)=""/216, 0xd8}], 0xa, &(0x7f0000003d40)=""/254, 0xfe}, 0xd6f}, {{&(0x7f0000003e40)=@pppol2tpv3in6, 0x80, &(0x7f00000041c0)=[{&(0x7f0000003ec0)=""/137, 0x89}, {&(0x7f0000003f80)=""/31, 0x1f}, {&(0x7f0000003fc0)=""/33, 0x21}, {&(0x7f0000004000)=""/108, 0x6c}, {&(0x7f0000004080)=""/69, 0x45}, {&(0x7f0000004100)=""/63, 0x3f}, {&(0x7f0000004140)=""/19, 0x13}, {&(0x7f0000004180)}], 0x8, &(0x7f0000004240)=""/133, 0x85}, 0x1}, {{&(0x7f0000004300)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f00000043c0)=[{&(0x7f0000004380)=""/25, 0x19}], 0x1, &(0x7f0000004400)=""/35, 0x23}, 0x9}, {{&(0x7f0000004440)=@tipc=@id, 0x80, &(0x7f0000004580)=[{&(0x7f00000044c0)}, {&(0x7f0000004500)=""/53, 0x35}, {&(0x7f0000004540)}], 0x3, &(0x7f00000045c0)=""/150, 0x96}, 0x1}, {{&(0x7f0000004680)=@can={0x1d, 0x0}, 0x80, &(0x7f00000047c0)=[{&(0x7f0000004700)=""/105, 0x69}, {&(0x7f0000004780)=""/19, 0x13}], 0x2, &(0x7f0000004800)=""/61, 0x3d}, 0x7fff}], 0xa, 0x40012042, &(0x7f0000004ac0)) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000004c40)={&(0x7f0000000040), 0xc, &(0x7f0000004c00)={&(0x7f0000004b00)={0xe0, r1, 0x600, 0x70bd2b, 0x25dfdbfd, {}, [{{0x8, 0x1, r3}, {0x80, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r5}}, {0x8}}}]}}, {{0x8, 0x1, r6}, {0x3c, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r7}}}]}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4001}, 0x40) sendmsg$nl_route(r0, &(0x7f00000008c0)={&(0x7f0000000000), 0xc, &(0x7f0000000880)={&(0x7f0000001940)=@setlink={0x48, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_VFINFO_LIST={0x14, 0x16, [{0x10, 0x1, [@typed={0xc, 0xc, @str='syz_tun\x00'}]}]}, @IFLA_IFNAME={0x14, 0x3, 'bond_slave_1\x00'}]}, 0x48}}, 0x0) 04:54:05 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) keyctl$set_reqkey_keyring(0xe, 0x6) r1 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0xd, r2}, 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet_sctp(r1, &(0x7f0000871fc8), 0x71, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000040)={0x4cd, 0x1ad, 0x4, 0x6bf, 0x19600813, 0x40, 0x15, 0xfffffffffffffff8, 0x0}, &(0x7f0000000080)=0x20) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={r3, 0xffffffffffff44da}, 0x8) r4 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x2fb85a59, 0x60080) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f00000001c0)=[@in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e20, 0x59b26c8c, @remote, 0x3f}], 0x2c) ftruncate(r0, 0x7) 04:54:06 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) keyctl$set_reqkey_keyring(0xe, 0x6) r1 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0xd, r2}, 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet_sctp(r1, &(0x7f0000871fc8), 0x71, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000040)={0x4cd, 0x1ad, 0x4, 0x6bf, 0x19600813, 0x40, 0x15, 0xfffffffffffffff8, 0x0}, &(0x7f0000000080)=0x20) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={r3, 0xffffffffffff44da}, 0x8) r4 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x2fb85a59, 0x60080) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f00000001c0)=[@in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e20, 0x59b26c8c, @remote, 0x3f}], 0x2c) ftruncate(r0, 0x7) [ 266.982285] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.988808] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.997047] device bridge_slave_0 entered promiscuous mode [ 267.161047] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.167696] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.175825] device bridge_slave_1 entered promiscuous mode [ 267.287703] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 267.420279] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 267.868803] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 268.073708] bond0: Enslaving bond_slave_1 as an active interface with an up link 04:54:08 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000000000)={&(0x7f000000a000)={0x1d, 0x0, 0x200000000000000}, 0x10, &(0x7f0000000ff0)={&(0x7f00000000c0)=@can={{0x2, 0x8, 0x7fff, 0x10001}, 0x4, 0x3, 0x0, 0x0, "d3288211adcf5125"}, 0x10}}, 0x0) [ 268.306267] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 268.313434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 268.473918] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 268.480923] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 268.940699] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 268.949460] team0: Port device team_slave_0 added [ 269.114975] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 269.124336] team0: Port device team_slave_1 added [ 269.245768] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 269.252885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 269.261825] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 269.415875] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 269.423065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 269.431990] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 269.561881] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 269.569441] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 269.578697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 269.717574] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.744692] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 269.753131] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 269.762171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 270.307175] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 270.835111] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 270.841421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 270.849500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 271.380271] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.540089] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.546680] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.553930] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.560510] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.569629] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 271.576195] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 04:54:15 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x210000, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000080)={&(0x7f0000000040)=[0x1, 0x2, 0x1ff], 0x3, 0x81, 0x3, 0x4, 0x6, 0x1, {0xfff, 0x0, 0x80000000, 0x3, 0x1, 0x0, 0x401, 0x7, 0xa74b, 0x1, 0x4, 0x0, 0x7, 0x474, "93cc217414e652e8e2bc62887eed2949db9d014bf12daa4b31bee0a6ca7f5845"}}) munmap(&(0x7f0000ad9000/0x2000)=nil, 0x2000) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@local}}, &(0x7f0000000200)=0xe8) ioctl$TUNSETOWNER(r0, 0x400454cc, r1) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x12) [ 275.932497] 8021q: adding VLAN 0 to HW filter on device bond0 [ 276.103953] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 276.275327] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 276.281556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 276.289550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 276.459058] 8021q: adding VLAN 0 to HW filter on device team0 04:54:17 executing program 3: syz_open_dev$sndseq(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)="4c0000001400197f09004b0101048c590188ffffcf3d34740600d4ff5bffff00e7e5ed7d00000000c8550000000000002758d60034650c0326356cdb47f6aaaa956086cbfe0db35200af4486", 0x4c}], 0x1) 04:54:17 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x202, &(0x7f0000000080)=0x0) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x0, 0x0) close(r0) close(r2) epoll_create1(0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000b00)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) r3 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0xffffffffffffff01, 0x101000) ioctl$RTC_RD_TIME(r3, 0x80247009, &(0x7f00000000c0)) 04:54:17 executing program 4: r0 = dup(0xffffffffffffff9c) write$P9_RFLUSH(r0, &(0x7f0000000000)={0x7, 0x6d, 0x2}, 0x7) write$P9_RWRITE(r0, &(0x7f0000000040)={0xb, 0x77, 0x1, 0x101}, 0xb) r1 = accept(r0, 0x0, &(0x7f0000000080)) fcntl$getownex(r1, 0x10, &(0x7f00000000c0)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000140)={{0x0, 0x3, 0xfffffffffffffffa, 0x7, 'syz1\x00', 0xfffffffffffff801}, 0x0, 0x52, 0xed2, r2, 0x2, 0x1, 'syz0\x00', &(0x7f0000000100)=['GPL\x00', 'ppp0(wlan0\'\x00'], 0x10, [], [0x1f, 0x101, 0x0, 0x80000001]}) r3 = openat$cgroup_ro(r0, &(0x7f0000000280)='cgroup.events\x00', 0x0, 0x0) ioctl$KVM_NMI(r1, 0xae9a) write$P9_RATTACH(r0, &(0x7f00000002c0)={0x14, 0x69, 0x1, {0x88, 0x1}}, 0x14) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000300)={{0xef, @multicast1, 0x4e21, 0x1, 'nq\x00', 0x8, 0x5, 0x2b}, {@remote, 0x4e23, 0x4, 0x9, 0x180000000000, 0x7fff}}, 0x44) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000380), &(0x7f00000003c0)=0xb) syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') fdatasync(r0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) getsockopt$sock_buf(r3, 0x1, 0x3f, &(0x7f0000000440)=""/4096, &(0x7f0000001440)=0x1000) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000001480)=0xfffffffffffffffc, 0x4) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000014c0)=@assoc_value={0x0, 0x42}, &(0x7f0000001500)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000001540)={r4, 0x400, 0x3f, 0x10001}, 0x10) r5 = syz_open_dev$video(&(0x7f0000001580)='/dev/video#\x00', 0x7, 0x0) sched_yield() ioctl$DRM_IOCTL_MODESET_CTL(r3, 0x40086408, &(0x7f00000015c0)={0x80000001, 0x9}) ioctl$VIDIOC_S_EDID(r0, 0xc0285629, &(0x7f0000001640)={0x0, 0x3ae0e580, 0x6, [], &(0x7f0000001600)=0x3}) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000001680)={r4, 0x1000, 0x1, 0x4}, 0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000001700)={{0x5, 0x3, 0xce, 0x81, 'syz1\x00', 0xbffa}, 0x2, 0x3, 0x4, r2, 0x1, 0x616a, 'syz1\x00', &(0x7f00000016c0)=['\x00'], 0x1, [], [0x2dbcff37, 0x7, 0x200, 0x1]}) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000001840)=0x400, 0x4) ioctl$KVM_SIGNAL_MSI(r3, 0x4020aea5, &(0x7f0000001880)={0x4, 0x6000, 0xffffffffffff4f7b, 0x0, 0x6eb}) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000018c0), 0x4) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r5, 0xc040564b, &(0x7f0000001900)={0xf000000000000000, 0x0, 0x3012, 0x10000, 0x3, {0x9, 0x4}, 0x1}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binder(&(0x7f0000001940)='/dev/binder#\x00', 0x0, 0x800) 04:54:17 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x301401, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000fed000/0x11000)=nil, 0x11000}, 0x1}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000040)={@remote, 0x8000000000008}, 0xe471e1b15e3345f4) 04:54:17 executing program 2: socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_dev$loop(&(0x7f0000001840)='/dev/loop#\x00', 0x400, 0x80) r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = dup(r0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) r2 = dup2(0xffffffffffffff9c, r1) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x0, @multicast1, 0x4e23, 0x0, 'sh\x00', 0x21, 0x2, 0x39}, {@rand_addr=0x7, 0x4e22, 0x2001, 0x146, 0x6, 0x2}}, 0x44) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prlimit64(0x0, 0x7, &(0x7f00000001c0)={0x7, 0x9}, &(0x7f0000000380)) pipe(&(0x7f00000007c0)) 04:54:17 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) shutdown(r0, 0x1) r1 = open(&(0x7f0000000000)='./file0\x00', 0x60100, 0x11c) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) fadvise64(r1, 0x0, 0xf99, 0x5) inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0x100) rmdir(&(0x7f0000000080)='./file0\x00') r2 = accept$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) recvfrom$packet(r1, &(0x7f00000000c0)=""/79, 0x4f, 0x100, &(0x7f00000001c0)={0x11, 0xa, r3, 0x1, 0xffffffffffffff80, 0x6, @dev={[], 0x10}}, 0x14) prctl$PR_SET_TSC(0x1a, 0x3) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0xc004aea7, &(0x7f0000000200)=0xe83) symlink(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0\x00') lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$md(0xffffffffffffff9c, &(0x7f0000000380)='/dev/md0\x00', 0x105000, 0x0) r6 = gettid() r7 = perf_event_open(&(0x7f00000003c0)={0x0, 0x70, 0x7fffffff, 0x401, 0x97, 0xfffffffffffffffc, 0x0, 0x7, 0x400, 0x0, 0x7, 0xd429, 0x101, 0x1, 0x9, 0x7fffffff, 0x0, 0xffffffffffff28e2, 0x5, 0x6, 0x5, 0x2, 0x9, 0x40, 0x7, 0x9, 0x9, 0x3, 0x5, 0x0, 0xbfc3, 0x7, 0x80, 0xef, 0x8, 0x1, 0xfffffffff5f916df, 0x69d8, 0x0, 0x2, 0x7, @perf_config_ext={0x3, 0x9}, 0x202, 0x9, 0x0, 0x0, 0x5, 0x2, 0x5}, r6, 0x3, r1, 0x2) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000440)={0x77359400}, 0x10) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000480)=@req3={0x3, 0x7f, 0x1, 0xffffffffffffff81, 0x3, 0x454, 0x1}, 0x1c) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x40082404, &(0x7f00000004c0)=0xfff) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000500)={{{@in6=@dev={0xfe, 0x80, [], 0xf}, @in6=@mcast2, 0x4e23, 0x9, 0x4e20, 0x2, 0xa, 0xa0, 0x80, 0x3a, r3, r4}, {0x7, 0x401, 0x3, 0x0, 0x101, 0x9, 0x0, 0x8001}, {0x4, 0x7, 0x8, 0x10000000}, 0x0, 0x6e6bb9, 0x2, 0x0, 0x0, 0x3}, {{@in6=@loopback, 0x4d5, 0x3c}, 0xa, @in6=@local, 0x0, 0x3, 0x1, 0x1ff, 0x400, 0xa5e, 0x8001}}, 0xe8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000600)={0x0, 0x7fff, 0x2}, &(0x7f0000000640)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000680)={0x100000000, 0x4, 0x101, 0x9, r8}, 0x10) ioctl$BLKDISCARD(r5, 0x1277, &(0x7f00000006c0)=0x7fff) syslog(0x5, &(0x7f0000000700)=""/54, 0x36) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000740)={r8, 0x3}, &(0x7f0000000780)=0x8) times(&(0x7f00000007c0)) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000800)=""/4096) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000001800)={'team0\x00', r3}) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000001840)={{0x3e, @remote, 0x4e21, 0x0, 'lblcr\x00', 0x4, 0x7, 0x17}, {@local, 0x4e23, 0x10005, 0x3f, 0x6, 0x8}}, 0x44) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001900)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f00000019c0)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001980)={&(0x7f0000001940)={0x24, r9, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xa44c}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) [ 277.565912] netlink: 8 bytes leftover after parsing attributes in process `syz-executor3'. [ 277.576058] netlink: 8 bytes leftover after parsing attributes in process `syz-executor3'. 04:54:17 executing program 0: 04:54:17 executing program 2: 04:54:17 executing program 3: 04:54:17 executing program 1: 04:54:18 executing program 0: syz_open_dev$usbmon(&(0x7f0000000340)='/dev/usbmon#\x00', 0x5, 0x4000) 04:54:18 executing program 3: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$P9_RREMOVE(r1, &(0x7f0000000280)={0xfffffffffffffe94}, 0xe3c7) write$FUSE_GETXATTR(r0, &(0x7f0000000180)={0x18, 0x0, 0x0, {0x1ff}}, 0x18) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) r3 = socket(0x2, 0x803, 0xff) shutdown(r3, 0x1) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) sched_setattr(0x0, &(0x7f00000003c0)={0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) fcntl$setstatus(r2, 0x4, 0x6100) fdatasync(r1) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000200)={0x3, r1}) 04:54:18 executing program 2: 04:54:18 executing program 1: [ 278.593691] IPVS: ftp: loaded support on port[0] = 21 [ 278.595969] IPVS: ftp: loaded support on port[0] = 21 [ 280.245051] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.251782] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.260023] device bridge_slave_0 entered promiscuous mode [ 280.337199] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.343749] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.352048] device bridge_slave_1 entered promiscuous mode [ 280.365999] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.372753] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.381041] device bridge_slave_0 entered promiscuous mode [ 280.429186] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 280.462592] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.469118] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.477190] device bridge_slave_1 entered promiscuous mode [ 280.504972] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 280.555367] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 280.630994] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 280.741529] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 280.827208] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 280.869147] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 280.911495] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 280.918622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 280.946593] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 280.995986] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 281.003022] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 281.023235] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 281.030262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 281.108890] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 281.116007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 281.240404] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 281.248772] team0: Port device team_slave_0 added [ 281.324780] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 281.333393] team0: Port device team_slave_1 added [ 281.352773] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 281.361148] team0: Port device team_slave_0 added [ 281.411973] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 281.444741] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 281.453672] team0: Port device team_slave_1 added [ 281.512679] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 281.544574] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 281.580112] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 281.588027] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 281.597129] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 281.643667] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 281.680113] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 281.687714] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 281.697002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 281.725679] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 281.733818] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 281.743232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 281.822359] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 281.830027] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 281.839132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 282.633604] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.640201] bridge0: port 2(bridge_slave_1) entered forwarding state [ 282.647304] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.653923] bridge0: port 1(bridge_slave_0) entered forwarding state [ 282.662860] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 282.775857] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.782444] bridge0: port 2(bridge_slave_1) entered forwarding state [ 282.789649] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.796387] bridge0: port 1(bridge_slave_0) entered forwarding state [ 282.805199] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 282.922637] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 282.930589] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 285.280590] ip (7969) used greatest stack depth: 53736 bytes left [ 285.862822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 285.969008] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.158320] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 286.261499] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 286.450908] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 286.457249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 286.465345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 286.556090] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 286.562577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 286.570497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 286.767322] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.877963] 8021q: adding VLAN 0 to HW filter on device team0 04:54:28 executing program 2: 04:54:28 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f00000000c0)=""/9) 04:54:28 executing program 0: 04:54:28 executing program 5: 04:54:28 executing program 1: 04:54:28 executing program 3: 04:54:28 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 04:54:28 executing program 2: 04:54:28 executing program 4: 04:54:29 executing program 4: 04:54:29 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty=0xf401000000000000}}, 0x0, 0x0, 0x7000000, 0x0, 0x54}, 0x98) 04:54:29 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$binder(&(0x7f0000000340)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)) syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) 04:54:29 executing program 3: ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x127f, 0xffffffffffffffff) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x400, @dev, 0x3}}}, 0x48) 04:54:29 executing program 0: sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x400, @dev, 0x3}}}, 0x48) 04:54:29 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff3fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) clone(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') 04:54:29 executing program 4: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000001480), 0x0) 04:54:29 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100f9"]) ioctl$KVM_NMI(r3, 0xae9a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 04:54:29 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.opaque\x00', &(0x7f0000000100)='y\x00', 0x2, 0x1) splice(r1, 0x0, r0, 0x0, 0x400000a77, 0x0) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfffffd88) write$FUSE_NOTIFY_INVAL_ENTRY(r2, &(0x7f0000001580)=ANY=[@ANYBLOB="c009195ce12d6c4063fb389a989cf6b218a5e9a56c313951f4f9324b68a690cb63e8964752b1bfe24708c18fbc4ee6766ebce1cbcee7f7b33faf622149ed30915e97e4331a815db425a9a84d865f9a8a445852951e7d2ed53647fa95ca75d60f520710ea3f2f62affd310a7f3c01c6ad1730d46fa9d531a43d000576135b5be96584a38ccec3e861a71182555da8a5e116a56f8d92770bc5b2174d6bb41b6301a30d7ff35d42cfb30432815cc49dfce5dfdfa8ff5952e84779dcdf4869bde55a3a7409c49d9e18c2363620a93c8c89ed4fee1240bdf25e38e50101f9c0961778b378b13cce21f87fa02d9ac498391e4fdf7ec30dce3a5ef78638b86dc7a1159033075bb8fe3ae4889dcf74f77b3d9da3844af4ab73a5506536455d0d88bfe661322127065d9b643da348b0189a7f3af5149ca399b12a3e9da730abc86e86e93aedcdf94b9f7f854ee4284a571a047f54e619a75df5ffe1e2a0409dc6d78b34631323f077f7fb303b5350abf568a2f38fb1dcb8ebe8fa74beed135b91de2a3b9ead5485b13a3a7508123092e4c921190e38b6268befae94b98d8121c9e97c2de6f5f9fb00a9c44b65e1c8a7de3934a63dd4ca3d4c209ae35dd8956837a9bd02037133db5c4be4ef3426d7d29dcc014f93ce14240abc690000000000000000000000000000afa3a797df15f7a0725adc4ce5d23880007a2a11e917ac4e53b92d0a"], 0x200) read$FUSE(r2, &(0x7f0000001780), 0x99d) r3 = gettid() setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000040)={@empty, @dev={0xac, 0x14, 0x14, 0x1e}, 0x1, 0x3, [@multicast2, @rand_addr, @remote]}, 0x1c) timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r3, 0x1000000000013) 04:54:29 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="0000000000000000280012000c000100697036746e6c0000000400ff02000000d6000000000000000000010000000000"], 0x1}}, 0x0) [ 289.606540] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. 04:54:29 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty=0xf401000000000000}}, 0xfffff99d, 0x0, 0x0, 0x0, 0x54}, 0x98) 04:54:29 executing program 2: r0 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000500)={'bridge0\x00\x00\x00\x00\x80\x00', &(0x7f0000000100)=@ethtool_cmd={0x10, 0x0, 0x2}}) 04:54:29 executing program 3: r0 = socket$inet(0x10, 0x3, 0xf) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="24000000030607031dfffd946fa2830020200a0009000200000000680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 04:54:30 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001340)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) recvmsg(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}, 0x0) 04:54:30 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) write$P9_RRENAMEAT(0xffffffffffffffff, 0x0, 0x0) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @sack_perm], 0x2) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) clock_gettime(0xb, &(0x7f0000000200)) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000140)=0x2) syslog(0x0, 0x0, 0x0) ioctl$sock_netdev_private(r0, 0x89f8, &(0x7f00000001c0)) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x20000) r3 = fcntl$dupfd(r2, 0x406, r2) ioctl$PIO_UNISCRNMAP(r3, 0x4b6a, &(0x7f0000000040)="464ecb3378fb1247a73f67780b7c9fedb2d207f480b4dfe0a55259cf0a75bfa97f970cafc8727ec670152f2c8da29c104bee60a34c63e88a4da2af799129bccfaf8be5ae8c4f2741e83e37d30cb9b68983fb016cc37f87be870cb90b8f7a0e979ad2cdc48a3e185803e7bfaa8c60e4ac5f29d14e6deb1819678d4e2ec826099823b52f97f024ada56f10de72fc20a013bed8c9344b03f3eef504029bc60fe9f0608127dcfe8dca85f13fed21170ba4de043d266afe5f7cb0d9d0a615472a4c82a51111bed7") 04:54:30 executing program 3: syslog(0x2, &(0x7f0000000140)=""/171, 0xab) 04:54:30 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x1}}) [ 290.308819] hrtimer: interrupt took 172980 ns 04:54:30 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000008, 0x0) timer_create(0x0, 0x0, &(0x7f0000000000)) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x4000, 0x0) timer_settime(0x0, 0x0, &(0x7f0000e04000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0) 04:54:30 executing program 4: clone(0x20ffff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) rt_sigqueueinfo(r0, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}) 04:54:30 executing program 3: io_setup(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) listen(r0, 0x0) socket$unix(0x1, 0x0, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)="4c0000001400197f09004b0101048c590188ffffcf3d34740600d4ff5bffff00e7e5ed7d00000000c8550000000000002758d60034650c0326356cdb47f6aaaa956086cbfe0db35200af4486", 0x4c}], 0x1) timer_settime(0x0, 0x0, 0x0, 0x0) 04:54:30 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) 04:54:30 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") msync(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) [ 290.864263] ptrace attach of "/root/syz-executor4"[8274] was attempted by "/root/syz-executor4"[8277] 04:54:31 executing program 5: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) accept(0xffffffffffffffff, &(0x7f00000002c0)=@xdp, &(0x7f0000000340)=0x80) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @timestamp, @sack_perm], 0x3) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) clock_gettime(0xb, &(0x7f0000000200)) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000140)=0x2) syslog(0x0, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, 0x0) ioctl$sock_netdev_private(r0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x20000) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000040)="464ecb3378fb1247a73f67780b7c9fedb2d207f480b4dfe0a55259cf0a75bfa97f970cafc8727ec670152f2c8da29c104bee60a34c63e88a4da2af799129bccfaf8be5ae8c4f2741e83e37d30cb9b68983fb016cc37f87be870cb90b8f7a0e979ad2cdc48a3e185803e7bfaa8c60e4ac5f29d14e6deb1819678d4e2ec826099823b52f97f024ada56f10de72fc20a013bed8c9344b03f3eef504029bc60fe9f0608127dcfe8dca85f13fed21170ba4de043d266afe5f7cb0d9d0a615472a4c82a51111bed7") 04:54:31 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'ve\x00', 0xcffd}) 04:54:31 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$binder(&(0x7f0000000340)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x10000014c) syz_open_dev$sndtimer(&(0x7f0000000380)='/dev/snd/timer\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket(0x200000000000011, 0x4000000000080002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) write$input_event(0xffffffffffffffff, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) 04:54:31 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4000001, 0x182) r1 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) write$FUSE_NOTIFY_POLL(r3, 0x0, 0x0) write(r3, &(0x7f00000001c0), 0xfffffef3) r4 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x106045}, 0xc, &(0x7f00000003c0)={&(0x7f0000000180)={0x68, r4, 0x600, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x101}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x83b}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0x68}, 0x1, 0x0, 0x0, 0x20004041}, 0x4004000) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000300)) ioctl$VT_WAITACTIVE(r3, 0x5607) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x8) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, 0x0, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) fstat(r3, &(0x7f0000000440)) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000f40)={{{@in, @in6=@ipv4={[], [], @broadcast}}}, {{}, 0x0, @in6=@remote}}, 0x0) dup2(r1, r2) sendfile(r0, r0, 0x0, 0x2000005) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000080)={0x3}) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 04:54:31 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4000001, 0x182) r1 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) write(r3, &(0x7f00000001c0), 0xfffffef3) r4 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)={0x58, r4, 0x600, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x83b}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004041}, 0x0) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000300)) ioctl$VT_WAITACTIVE(r3, 0x5607) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x8) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, 0x0, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) fstat(r3, &(0x7f0000000440)) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000f40)={{{@in, @in6=@ipv4={[], [], @broadcast}}}, {{}, 0x0, @in6=@remote}}, 0x0) sendfile(r0, r0, 0x0, 0x2000005) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000080)={0x3}) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 04:54:31 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x0, 0x33}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x1}}, 0xe8) sendmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000000740)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x0) [ 291.524554] ------------[ cut here ]------------ [ 291.529363] kernel BUG at mm/kmsan/kmsan_instr.c:183! [ 291.534577] invalid opcode: 0000 [#1] SMP [ 291.538750] CPU: 1 PID: 8315 Comm: loop5 Not tainted 4.20.0-rc7+ #9 [ 291.545167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 291.554552] RIP: 0010:__msan_chain_origin+0xa6/0xb0 [ 291.559587] Code: c8 ff 75 c8 9d 65 48 8b 04 25 28 00 00 00 48 3b 45 d8 75 0f 89 d8 48 83 c4 18 5b 41 5c 41 5e 41 5f 5d c3 e8 2c 0f 59 ff 0f 0b <0f> 0b 0f 1f 84 00 00 00 00 00 40 f6 c7 03 75 28 40 f6 c6 03 75 24 [ 291.578513] RSP: 0018:ffff88821fd0efb0 EFLAGS: 00010096 [ 291.583894] RAX: 00000000bd600109 RBX: 0000000000000000 RCX: 72985b45f1944e00 [ 291.591176] RDX: 0000000000000003 RSI: 0000000000480020 RDI: 00000000b6a00109 [ 291.598459] RBP: ffff88821fd0efe8 R08: 0000000000000003 R09: ffff88821fd0ed6c [ 291.605761] R10: ffffffff8ac01788 R11: 0000000000000000 R12: 0000000000000246 [ 291.613043] R13: ffff88812f021209 R14: 00000000b6a00109 R15: ffff8881531ada00 04:54:31 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)={0xa, 0xc, 0x100000000000914, 0x1}, 0x2c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f0000000180), 0x0, 0x2}, 0x20) 04:54:31 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)={0xa, 0xc, 0x100000000000914, 0x1}, 0x2c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0}, 0x20) [ 291.620855] FS: 0000000000000000(0000) GS:ffff88821fd00000(0000) knlGS:0000000000000000 [ 291.629094] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 291.635051] CR2: 00007f39ea4bfdb8 CR3: 000000012b95f000 CR4: 00000000001406e0 [ 291.642337] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 291.649650] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 291.656947] Call Trace: [ 291.659549] [ 291.661745] __skb_clone+0x78a/0x990 [ 291.665511] skb_clone+0x3e8/0x580 [ 291.669099] __tcp_transmit_skb+0x393/0x5ba0 [ 291.673558] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 291.679028] ? skb_split+0x1114/0x1780 [ 291.682975] tcp_write_xmit+0x31dd/0xa840 [ 291.687274] __tcp_push_pending_frames+0x124/0x4e0 [ 291.692245] tcp_data_snd_check+0x182/0xa20 [ 291.696615] tcp_rcv_established+0x1ac0/0x2850 [ 291.701223] ? vmalloc_to_page+0x56e/0x6a0 [ 291.705523] tcp_v4_do_rcv+0x686/0xd70 [ 291.709455] tcp_v4_rcv+0x6948/0x6f30 [ 291.713344] ? tcp_v4_rcv+0x14c1/0x6f30 [ 291.717854] ? tcp_filter+0x260/0x260 [ 291.721686] ip_local_deliver_finish+0x7a2/0xea0 [ 291.726506] ip_local_deliver+0x44b/0x510 [ 291.731221] ? ip_local_deliver+0x510/0x510 [ 291.735558] ? ip_call_ra_chain+0x7a0/0x7a0 [ 291.739902] ip_rcv+0x6b6/0x740 [ 291.743229] ? ip_rcv_core+0x11f0/0x11f0 [ 291.747332] process_backlog+0x766/0x10f0 [ 291.751539] ? ip_local_deliver_finish+0xea0/0xea0 [ 291.756517] ? rps_trigger_softirq+0x2e0/0x2e0 [ 291.761129] net_rx_action+0x816/0x1aa0 [ 291.765158] ? net_tx_action+0xcb0/0xcb0 [ 291.769253] __do_softirq+0x53f/0x93a [ 291.773117] irq_exit+0x214/0x250 [ 291.776592] exiting_irq+0xe/0x10 [ 291.780071] smp_apic_timer_interrupt+0x48/0x70 [ 291.784778] apic_timer_interrupt+0x2e/0x40 [ 291.789107] [ 291.791371] RIP: 0010:_raw_spin_unlock_irqrestore+0x4b/0x70 [ 291.797102] Code: 00 8b b8 88 0c 00 00 48 8b 00 48 85 c0 75 28 48 89 df e8 48 68 4a f7 c6 00 00 c6 03 00 4d 85 e4 75 1c 4c 89 7d d8 ff 75 d8 9d <48> 83 c4 08 5b 41 5c 41 5e 41 5f 5d c3 e8 33 71 4a f7 eb d1 44 89 [ 291.816025] RSP: 0018:ffff88812a83fe30 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13 [ 291.824226] RAX: ffff88812c7bf698 RBX: ffff88812da3f698 RCX: ffff88812c7bf698 [ 291.831523] RDX: ffff88812b86f698 RSI: 0000160000000000 RDI: ccccccccccccd000 [ 291.838815] RBP: ffff88812a83fe58 R08: 0000000000000000 R09: 0000000000000000 [ 291.846098] R10: 0000000000000001 R11: ffffffff81494230 R12: 0000000000000000 [ 291.853382] R13: ffff88812da3f690 R14: 0000000000000000 R15: 0000000000000286 [ 291.860688] ? native_apic_mem_read+0x60/0x60 [ 291.865239] complete+0x10e/0x170 [ 291.868758] kthread+0x3c6/0x4e0 [ 291.872165] ? loop_attr_do_show_dio+0x150/0x150 [ 291.876939] ? schedule_tail+0x1b2/0x410 [ 291.881056] ? kthread_blkcg+0xf0/0xf0 [ 291.884978] ret_from_fork+0x35/0x40 [ 291.888714] Modules linked in: [ 291.891947] ---[ end trace 761a820478f656e9 ]--- [ 291.896727] RIP: 0010:__msan_chain_origin+0xa6/0xb0 [ 291.901770] Code: c8 ff 75 c8 9d 65 48 8b 04 25 28 00 00 00 48 3b 45 d8 75 0f 89 d8 48 83 c4 18 5b 41 5c 41 5e 41 5f 5d c3 e8 2c 0f 59 ff 0f 0b <0f> 0b 0f 1f 84 00 00 00 00 00 40 f6 c7 03 75 28 40 f6 c6 03 75 24 [ 291.921196] RSP: 0018:ffff88821fd0efb0 EFLAGS: 00010096 [ 291.926589] RAX: 00000000bd600109 RBX: 0000000000000000 RCX: 72985b45f1944e00 [ 291.933868] RDX: 0000000000000003 RSI: 0000000000480020 RDI: 00000000b6a00109 [ 291.941190] RBP: ffff88821fd0efe8 R08: 0000000000000003 R09: ffff88821fd0ed6c [ 291.948475] R10: ffffffff8ac01788 R11: 0000000000000000 R12: 0000000000000246 [ 291.955793] R13: ffff88812f021209 R14: 00000000b6a00109 R15: ffff8881531ada00 [ 291.963072] FS: 0000000000000000(0000) GS:ffff88821fd00000(0000) knlGS:0000000000000000 [ 291.971301] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 291.977189] CR2: 00007f39ea4bfdb8 CR3: 000000012b95f000 CR4: 00000000001406e0 [ 291.984503] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 291.991782] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 291.999055] Kernel panic - not syncing: Fatal exception in interrupt [ 292.006510] Kernel Offset: disabled [ 292.010141] Rebooting in 86400 seconds..