[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 97.790912] audit: type=1800 audit(1551428022.839:25): pid=10799 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 97.810109] audit: type=1800 audit(1551428022.839:26): pid=10799 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 97.829561] audit: type=1800 audit(1551428022.859:27): pid=10799 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.41' (ECDSA) to the list of known hosts. 2019/03/01 08:13:57 fuzzer started syzkaller login: [ 115.555349] cc1 (10958) used greatest stack depth: 54160 bytes left 2019/03/01 08:14:02 dialing manager at 10.128.0.26:40269 2019/03/01 08:14:03 syscalls: 1 2019/03/01 08:14:03 code coverage: enabled 2019/03/01 08:14:03 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2019/03/01 08:14:03 extra coverage: extra coverage is not supported by the kernel 2019/03/01 08:14:03 setuid sandbox: enabled 2019/03/01 08:14:03 namespace sandbox: enabled 2019/03/01 08:14:03 Android sandbox: /sys/fs/selinux/policy does not exist 2019/03/01 08:14:03 fault injection: enabled 2019/03/01 08:14:03 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/03/01 08:14:03 net packet injection: enabled 2019/03/01 08:14:03 net device setup: enabled 08:16:53 executing program 0: [ 288.872627] IPVS: ftp: loaded support on port[0] = 21 [ 289.039892] chnl_net:caif_netlink_parms(): no params data found [ 289.129499] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.136237] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.144849] device bridge_slave_0 entered promiscuous mode [ 289.154125] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.160642] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.169171] device bridge_slave_1 entered promiscuous mode [ 289.205556] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 289.218039] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 289.250630] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 289.259472] team0: Port device team_slave_0 added [ 289.266634] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 289.275635] team0: Port device team_slave_1 added [ 289.281974] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 289.290540] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 289.477427] device hsr_slave_0 entered promiscuous mode [ 289.632279] device hsr_slave_1 entered promiscuous mode [ 289.893048] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 289.900713] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 289.932226] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.939146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 289.946418] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.953010] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.013693] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.025133] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.077208] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.091330] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 290.107902] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 290.114847] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 290.123060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 290.140755] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 290.146964] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.160401] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 290.168673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 290.177471] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 290.185864] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.192407] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.210698] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 290.218852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 290.227667] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 290.236202] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.242757] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.260201] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 290.273133] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 290.286778] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 290.294797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 290.304252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 290.313593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 290.322748] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 290.339741] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 290.352615] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 290.366335] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 290.376184] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 290.386055] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 290.398085] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 290.406275] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 290.415066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 290.424261] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 290.433289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 290.442033] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 290.451226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 290.459874] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 290.471374] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 290.520583] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 290.543037] 8021q: adding VLAN 0 to HW filter on device batadv0 08:16:55 executing program 0: 08:16:55 executing program 0: 08:16:56 executing program 0: 08:16:56 executing program 0: 08:16:56 executing program 0: 08:16:56 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x1ff, 0x2000) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000100)) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r0, 0x5386, &(0x7f0000000080)) futex(&(0x7f000000cffc)=0x2, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x8400, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000000180), 0x33000002) 08:16:56 executing program 0: r0 = fcntl$dupfd(0xffffffffffffffff, 0x4, 0xffffffffffffff9c) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000000)={0x4, 0x0, 0x10000, 0x33b}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x0, r1, 0x2, 0x9}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x5f}}, &(0x7f0000003ff6)='GPL\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) 08:16:56 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x200, 0x0) pread64(r1, &(0x7f0000000080)=""/74, 0x4a, 0x0) r2 = syz_open_dev$dmmidi(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, r2}) ioctl(r3, 0x1, 0x0) close(r0) 08:16:57 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x40000, 0x0) getpeername$netlink(r0, &(0x7f0000000040), &(0x7f0000000080)=0xc) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f00000000c0)={0x3, 'team_slave_0\x00', 0x1}, 0x18) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000100)=0x7ff, 0x4) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000140)=0x3, &(0x7f0000000180)=0x4) lsetxattr$security_selinux(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:systemd_logger_exec_t:s0\x00', 0x2b, 0x2) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r2, &(0x7f00000002c0)={{0xcc, 0x4, 0x1, 0x39, 0x7c, 0x7, 0x39a, 0x6}, "f39bd223b9ece71d18e413a9e5735b681370b51e0ebb0ec8ad17e81c6b197e458fa592ea742917a7ca18e5f906f95142d1f30ec015f10c9b4c9c63d55dc7efcca2e3c3e77313cf04f422b89525275a112df4163fb4b8aa9efe1332e955c43c77c9a2c162d7ed454e34e96007cb61b012c7dc0f077b668a563706c38eba59d37a1c27757418d0e256c032ce8796084adb8ec8e306275bd6d803fa15a1788563d42b6c8a0d36f9f9b79498fbd54f4fe383ff51068836bcffa59950c99b92dc63bffa5b5e271349112adfb27310f31bd4946a69690dd5a039bf0ab1877adf7cbe80bdec8e57b3f976ff8f9a230448a997c8581e5d7ce16590", [[], []]}, 0x317) ftruncate(r1, 0x5) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x6685) ioctl$TIOCGPTPEER(r2, 0x5441, 0x7) writev(r0, &(0x7f0000000880)=[{&(0x7f0000000600)="6831a86c1fea8b5b18aaad6c72769f1530e4bc981f43ea91dc0e9941abac2ec951536f2a3adaabefe95d7c8ba6ba36d2cda9e710d2239de40165f2e7724c75d29b425662ef0c3bb58f4482da8642349eb1a23680f07bd99a7929f0ed61bee3c6785ee730ddc56b4da571f3a9cf8a5f3cd1a02530ae7f20337bea46cd1833e12ba0eab2b2d6501edec7f6ae7cd9858793ae68d6b656274c8022739ba8c2f68916920239", 0xa3}, {&(0x7f00000006c0)="ab212e57638030c31b21f82e1308d39e01182d2478850784ce0c9a56b0795eaf0d85c6ce07", 0x25}, {&(0x7f0000000700)="d0a4a5879a59bfe560c9e72e3bbbe5eb18c34321e6c796b973242fc068f1b90c0d165adb1101b821d9e8cf110729ae9c64738823ee7884648cd337ef6636ec75ef10872cf8c8877035f0e9fba9433f0cf9220ad3c64b645173bfbfd64f0762bae98f2a5ee31e40eee19fd35ef1e15c31a03de857e9a137a12395d79c3816a05e3492ea7f5600476367a4c900faa0e94250fd4cc98b52eb09f91e2a1ebbdb618bd68a909044e036d716ae1f9880b4", 0xae}, {&(0x7f00000007c0)="fa886e03fb8e756eedd55fad2e402c03e51fc3a247d8fdaa300cbb0ced3192302691c29abf0c1a63c34ac534fd7faf3cd84b7c6240b43fd6bde80a676afc974d7158fff1a1c22d717c34559aed9ed86625cdcc25380f66fae8138eb20ef9db84a9a89f9d3bd2454834f554b948f2dee5cf57dc1cbc17e59df72380c7f128750cb3afaaa5ad93958498e22b6f2f3cf8ad8f523a96fe6b9f", 0x97}], 0x4) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000008c0)=[0xaec5]) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000900)={0x7, 0x1}) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000940)='/proc/capi/capi20\x00', 0x400000, 0x0) mount(&(0x7f0000000980)=@sg0='/dev/sg0\x00', &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00)='cramfs\x00', 0x0, &(0x7f0000000a40)='security.selinux\x00') r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/null\x00', 0x200, 0x0) clock_gettime(0x0, &(0x7f0000000ac0)={0x0, 0x0}) ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000000b40)={0x4, 0xc, 0x4, 0x100, {r5, r6/1000+30000}, {0x7, 0x8, 0x8001, 0x80, 0x0, 0xffffffffffffff2a, "a46f7ed5"}, 0x100, 0x3, @planes=&(0x7f0000000b00)={0x4, 0x8, @fd}, 0x4}) setsockopt$inet_group_source_req(r4, 0x0, 0x2f, &(0x7f0000000bc0)={0x6, {{0x2, 0x4e22, @multicast1}}, {{0x2, 0x4e24, @loopback}}}, 0x108) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000d00)={'netdevsim0\x00', {0x2, 0x4e23, @empty}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000ec0)={'vcan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000f00)={'bcsf0\x00', r7}) ioctl$TIOCNOTTY(r0, 0x5422) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) ioctl$sock_inet_SIOCGIFBRDADDR(r2, 0x8919, &(0x7f0000000f40)={'ip6tnl0\x00', {0x2, 0x4e22, @local}}) r8 = syz_open_dev$mice(&(0x7f0000000f80)='/dev/input/mice\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r8, 0x2, r1) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000fc0)=0x2, 0x4) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000001000)=""/123) 08:16:57 executing program 0: setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="736563c93a6974790000000000000000000000000000010000000000000000000e00000004000015a7522f0000000000000000104803000028"], 0x1) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20022000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@getneigh={0x14, 0x1e, 0x20, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8041}, 0x810) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x1f, r0, 0x0, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) 08:16:57 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x7, 0x20c402) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f00000000c0)=0x1, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = getpid() r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x10000, 0x0) write$UHID_INPUT(r3, &(0x7f00000002c0)={0x8, "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", 0x1000}, 0x1006) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000040)=r2) [ 292.758724] IPVS: ftp: loaded support on port[0] = 21 [ 292.943863] chnl_net:caif_netlink_parms(): no params data found [ 293.042614] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.049190] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.057821] device bridge_slave_0 entered promiscuous mode 08:16:58 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x40000, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={0xffffffffffffff9c, 0x10, &(0x7f0000000140)={&(0x7f0000000080)=""/89, 0x59, 0x0}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={r1, 0x10, &(0x7f0000000340)={&(0x7f0000000240)=""/230, 0xe6, r2}}, 0x10) r3 = socket$key(0xf, 0x3, 0x2) recvmmsg(r3, &(0x7f00000045c0)=[{{0x0, 0x0, &(0x7f0000002640)=[{&(0x7f0000001300)=""/147, 0x93}], 0x1}}, {{0x0, 0x0, 0x0}}], 0xd5, 0x22, 0x0) sendmsg$key(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="020d0000100000000000000000000000030006000200000002000000e00000d903000000000000000800120002000200000000007d220000180000000303000000000300000000000000001f0300000016000000002bc512262f85f7c8361101480000ff0300000000000000030005000000000002000100000000e1000000003136b8a2e58a6c9b61179f5b5fb9098a8e92aa37ea6be738051951f7da6497ddf3098506fbd66a1da00d"], 0x80}}, 0x0) [ 293.083168] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.089765] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.098158] device bridge_slave_1 entered promiscuous mode [ 293.176704] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 293.189779] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 293.223810] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 293.232796] team0: Port device team_slave_0 added [ 293.240693] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 293.249502] team0: Port device team_slave_1 added [ 293.257368] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 293.270059] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready 08:16:58 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) unshare(0x203fd) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x76) [ 293.457064] device hsr_slave_0 entered promiscuous mode [ 293.552451] device hsr_slave_1 entered promiscuous mode [ 293.603812] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 293.611806] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready 08:16:58 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$KDGKBLED(r0, 0x40045109, &(0x7f0000a07fff)) [ 293.662104] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.668676] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.675923] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.682538] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.845435] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 293.851617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.867513] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 293.881977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 08:16:58 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x0, [], [{0x8, 0xd7, 0x4, 0xffffffffffffffff, 0x8, 0x9083}, {0x9, 0x7, 0x15b, 0x1, 0x7, 0x8}], [[], [], [], []]}) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x15, &(0x7f0000000100)={@multicast2, @initdev}, 0x10) [ 293.902949] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.921329] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.940918] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 293.992199] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 293.998334] 8021q: adding VLAN 0 to HW filter on device team0 [ 294.038099] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 294.050192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 294.059083] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 294.067640] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.074255] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.089708] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 294.102635] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 294.118456] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 294.126505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 294.135362] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 294.143696] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.150202] bridge0: port 2(bridge_slave_1) entered forwarding state [ 294.159475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 294.168834] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 08:16:59 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x203) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_CPUID(r0, 0x802c550a, &(0x7f0000000080)={0x2, 0x6800, [{0x0, 0x400a00, 0x7ff0bdbe}]}) accept(r1, &(0x7f00000000c0)=@l2, &(0x7f0000000000)=0x80) dup2(r2, r0) [ 294.186590] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 294.201004] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 294.213923] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 294.229500] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 294.237170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 294.246350] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 294.255210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 294.264933] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 294.273728] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 294.282258] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 294.290708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 294.299589] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 294.322916] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 294.329317] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 294.354724] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 294.373059] 8021q: adding VLAN 0 to HW filter on device batadv0 08:16:59 executing program 0: r0 = socket$inet6(0xa, 0x0, 0x10000000088) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='smaps\x00') connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1b}}}, 0x1c) sendfile(r0, r1, 0x0, 0xa7fff) [ 294.398881] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready 08:16:59 executing program 0: syz_emit_ethernet(0x1ddb23, &(0x7f0000000080)={@local, @empty=[0x2], [{[], {0x8100, 0x7ff, 0x1b4af91e, 0x3}}], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x300008, 0x0, 0x0, @ipv4={[0x207835, 0x0, 0x28, 0x0, 0x6], [], @multicast2}, @mcast2={0xff, 0x3}, {[], @icmpv6=@time_exceed={0x2b, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 08:16:59 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) fdatasync(r0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f00000000c0)=[{0x6}]}) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) 08:17:00 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r1 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r1, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000200000016) 08:17:00 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000007700)={0x18, 0x0, {0x5, @link_local, 'ip6gre0\x00'}}, 0x1e) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x3, 0x80) ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000040)=0x7) sendmmsg(r0, &(0x7f0000000000), 0x400000000000118, 0x0) 08:17:00 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x8000, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x7, 0x8, 0x800}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="0af51f023c123f3188a070") r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r4, 0xc008ae88, &(0x7f0000000340)={0x7b, 0x0, [0x0, 0x0, 0x4000009f]}) [ 295.345469] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. 08:17:00 executing program 1: getsockname(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, &(0x7f0000000080)=0x80) close(r0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) lsetxattr(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=@random={'os2.', 'lo)cgroup\x00'}, &(0x7f0000000240)='/dev/kvm\x00', 0x9, 0x2) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000200)) ioctl$EVIOCRMFF(r2, 0x40044581, &(0x7f0000000280)=0x8000) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x600000000000000, [0x2, 0x8], [0xc2]}) 08:17:00 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x3c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x3f, &(0x7f0000000040)=@hopopts={0x0, 0x1, [], [@enc_lim, @enc_lim, @ra]}, 0x2a4) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 08:17:00 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x0, 0x84ac2) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0x42, &(0x7f0000000200)={@local, @local, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @local, {[@ssrr={0x89, 0x7, 0x7b17, [@dev]}, @ssrr={0x89, 0x3}]}}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 08:17:01 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000b1c000/0x1000)=nil}) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) r3 = dup3(r0, r2, 0x0) recvmsg$kcm(r3, &(0x7f0000000740)={0x0, 0x3a3, 0x0, 0x4ca696fa177ba2cc, &(0x7f0000000780)=""/4096, 0x1000}, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000280)='memory.high\x00', 0x2, 0x0) writev(r5, &(0x7f0000000700), 0x1000000000000110) io_setup(0x3, &(0x7f0000000000)=0x0) io_pgetevents(r6, 0x0, 0x0, 0x0, 0x0, 0x0) 08:17:01 executing program 1: ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000000080)) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='task\x00') getdents(r0, &(0x7f0000000140)=""/85, 0x55) inotify_init() getdents(r0, &(0x7f00000003c0)=""/4096, 0x1000) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f00000013c0)=ANY=[@ANYRESOCT=r0, @ANYRES32=r0, @ANYRES64=r0, @ANYPTR64=&(0x7f00000000c0)=ANY=[@ANYRES32=r0, @ANYRES64=r0], @ANYRESHEX=r0, @ANYRES32=r0], &(0x7f0000000040)=0x6) 08:17:01 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local}, 0xc) setsockopt$inet_tcp_int(r3, 0x6, 0x9, &(0x7f0000000000), 0x4) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup3(r1, r2, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) eventfd(0x0) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x6}) 08:17:01 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x4, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x10) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) 08:17:02 executing program 2: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x8001, 0x102) ioctl$BLKRESETZONE(r0, 0x40101283, &(0x7f0000000040)={0x6, 0x3}) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f00000000c0)=@buf={0x17, &(0x7f0000000080)="90c7ba590239e636879db39cca433f97d85ce0843f3d2b"}) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000100)={0x5, {{0x2, 0x4e20, @empty}}, 0x0, 0x3, [{{0x2, 0x4e20, @loopback}}, {{0x2, 0x4e21, @empty}}, {{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x25}}}]}, 0x210) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000340)={0xf5db}) r1 = dup3(r0, r0, 0x80000) getresgid(&(0x7f0000000380), &(0x7f00000003c0)=0x0, &(0x7f0000000400)) ioctl$TUNSETGROUP(r0, 0x400454ce, r2) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000440)=0xb65d, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x2) fstat(r1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000500)={{{@in=@multicast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f0000000600)=0xe8) stat(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r3, r4, r5) setxattr$trusted_overlay_opaque(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)='trusted.overlay.opaque\x00', &(0x7f0000000780)='y\x00', 0x2, 0x2) sendfile(r1, r1, &(0x7f00000007c0), 0x80000001) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000840)={0x2, &(0x7f0000000800)=[{0x4, 0xc276, 0x8000, 0xb63}, {0x8, 0x2, 0x7, 0x8}]}, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000880)=0xb, 0x4) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4008af14, &(0x7f00000008c0)={0x0, 0x4}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000900)=0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000940)=0x0) setpgid(r6, r7) socket$inet6_udplite(0xa, 0x2, 0x88) r8 = syz_open_dev$midi(&(0x7f0000000980)='/dev/midi#\x00', 0x7, 0x18001) ioctl$IOC_PR_CLEAR(r8, 0x401070cd, &(0x7f00000009c0)={0x6}) fcntl$dupfd(r1, 0x0, r8) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000a00)={{0x8000, 0x8095, 0x4eaf, 0x2}, 'syz0\x00', 0x40}) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000cc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x440000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000b00)={0x16c, r9, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6erspan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr="0ad9bdcb2a0152c132b1e57d7c8667a4"}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x89}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2a}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xbf}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gretap0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr="306ce5adebbd0d788d32f601440608eb"}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1f}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8000}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x7}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1000000000000000}]}, 0x16c}, 0x1, 0x0, 0x0, 0x8084}, 0x4) 08:17:03 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r1, 0x10e, 0xb, &(0x7f00007e0000)=""/4, &(0x7f0000000000)=0x4) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) write(r1, &(0x7f0000000080)="27f8326303bab0576e691d2b84aed267b5828924092a91a30bd20b305c548d29768c7be9b64cf320b68a4421653fc18aed43b9a3d5415fdfbf", 0x39) [ 298.129909] IPVS: ftp: loaded support on port[0] = 21 08:17:03 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200), 0x4) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) [ 298.320301] chnl_net:caif_netlink_parms(): no params data found [ 298.428080] sctp: [Deprecated]: syz-executor.0 (pid 11116) Use of int in maxseg socket option. [ 298.428080] Use struct sctp_assoc_value instead [ 298.455341] sctp: [Deprecated]: syz-executor.0 (pid 11116) Use of int in maxseg socket option. [ 298.455341] Use struct sctp_assoc_value instead 08:17:03 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200), 0x4) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) [ 298.489998] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.496719] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.505212] device bridge_slave_0 entered promiscuous mode [ 298.549900] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.556749] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.565524] device bridge_slave_1 entered promiscuous mode [ 298.613438] sctp: [Deprecated]: syz-executor.0 (pid 11120) Use of int in maxseg socket option. [ 298.613438] Use struct sctp_assoc_value instead [ 298.622999] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 298.638947] bond0: Enslaving bond_slave_1 as an active interface with an up link 08:17:03 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000240)='/dev/snd/seq\x00', 0x0, 0x42101) r1 = epoll_create(0x7fffffc3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x1000000004}) ppoll(&(0x7f0000000200)=[{r1}], 0x1, &(0x7f0000000040), 0x0, 0x2a5) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x0, 0x0) mq_timedsend(r2, &(0x7f00000000c0)="6f240f072deb974dbe6851c61fa0c1d1d3fdfcb3bb", 0x15, 0x8b2, &(0x7f0000000100)={0x0, 0x989680}) [ 298.672205] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 298.680960] team0: Port device team_slave_0 added [ 298.689240] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 298.698119] team0: Port device team_slave_1 added [ 298.705946] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 298.714739] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready 08:17:03 executing program 0: socketpair$unix(0x1, 0x400001000000003, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000080)={'veth1_to_team\x00', {0x2, 0x0, @empty}}) r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x4, 0x8000) ioctl$KVM_DIRTY_TLB(r2, 0x4010aeaa, &(0x7f0000000100)={0x0, 0x2}) ioctl$PPPIOCGUNIT(r2, 0x80047456, &(0x7f00000000c0)) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r2, 0xc0045520, &(0x7f0000000040)=0x3) [ 298.837805] device hsr_slave_0 entered promiscuous mode [ 298.873069] device hsr_slave_1 entered promiscuous mode [ 298.903849] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 298.911658] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 298.972265] Bluetooth: hci0: command 0x1003 tx timeout [ 298.977821] Bluetooth: hci0: sending frame failed (-49) [ 299.066187] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.072966] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.080202] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.086847] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.132659] protocol 88fb is buggy, dev hsr_slave_0 [ 299.138461] protocol 88fb is buggy, dev hsr_slave_1 08:17:04 executing program 0: socketpair$unix(0x1, 0x400001000000003, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000080)={'veth1_to_team\x00', {0x2, 0x0, @empty}}) r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x4, 0x8000) ioctl$KVM_DIRTY_TLB(r2, 0x4010aeaa, &(0x7f0000000100)={0x0, 0x2}) ioctl$PPPIOCGUNIT(r2, 0x80047456, &(0x7f00000000c0)) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r2, 0xc0045520, &(0x7f0000000040)=0x3) [ 299.263399] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 299.269635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.285811] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 299.293763] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.304617] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.329174] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 299.349190] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 299.355951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 299.364162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 299.389887] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 299.397071] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.414410] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 299.423259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready 08:17:04 executing program 0: r0 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x8200, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x20) bind$isdn_base(r2, &(0x7f0000000100)={0x22, 0x2, 0xffffffffffffffe0, 0x6, 0x7}, 0x6) keyctl$dh_compute(0x17, &(0x7f00000002c0)={r0, r1, r0}, &(0x7f0000000140)=""/83, 0x53, &(0x7f00000001c0)={&(0x7f0000000040)={'michael_mic\x00'}}) [ 299.434583] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 299.443286] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.449807] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.466888] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 299.495254] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 299.503267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 299.512255] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 299.520650] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.527246] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.536549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 299.585454] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 299.603998] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 299.623268] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready 08:17:04 executing program 0: r0 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x8200, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x20) bind$isdn_base(r2, &(0x7f0000000100)={0x22, 0x2, 0xffffffffffffffe0, 0x6, 0x7}, 0x6) keyctl$dh_compute(0x17, &(0x7f00000002c0)={r0, r1, r0}, &(0x7f0000000140)=""/83, 0x53, &(0x7f00000001c0)={&(0x7f0000000040)={'michael_mic\x00'}}) [ 299.630546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 299.640889] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 299.674296] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 299.698912] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 299.713288] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 299.722145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 299.731374] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 299.741096] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 299.749875] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 299.774340] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 299.789542] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network 08:17:04 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl(r0, 0x4001000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000240)=0x2, 0x4) ppoll(&(0x7f0000000000)=[{r0}, {r0, 0x800000000008180}], 0x2, 0x0, 0x0, 0xfffffffffffffffe) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000180)=0x0) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000300)='/proc/capi/capi20\x00', 0x60000, 0x0) fcntl$getownex(r1, 0x10, &(0x7f00000001c0)={0x0, 0x0}) r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000200)='/proc/capi/capi20\x00', 0x80400, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r5, 0xc0505510, &(0x7f0000000440)={0x8, 0x4, 0x7, 0xa86, &(0x7f0000000340)=[{}, {}, {}, {}]}) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f00000002c0)={0x3, r5}) kcmp$KCMP_EPOLL_TFD(r2, r4, 0x7, r1, &(0x7f0000000280)={r5, r1, 0x62}) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(camellia)\x00'}, 0x58) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000005c0)={&(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0], 0x5, 0x5, 0x6, 0x4}) [ 299.801906] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 299.808030] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 299.822751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 299.831330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 299.903151] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 299.943768] 8021q: adding VLAN 0 to HW filter on device batadv0 08:17:05 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl(r0, 0x4001000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000240)=0x2, 0x4) ppoll(&(0x7f0000000000)=[{r0}, {r0, 0x800000000008180}], 0x2, 0x0, 0x0, 0xfffffffffffffffe) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000180)=0x0) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000300)='/proc/capi/capi20\x00', 0x60000, 0x0) fcntl$getownex(r1, 0x10, &(0x7f00000001c0)={0x0, 0x0}) r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000200)='/proc/capi/capi20\x00', 0x80400, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r5, 0xc0505510, &(0x7f0000000440)={0x8, 0x4, 0x7, 0xa86, &(0x7f0000000340)=[{}, {}, {}, {}]}) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f00000002c0)={0x3, r5}) kcmp$KCMP_EPOLL_TFD(r2, r4, 0x7, r1, &(0x7f0000000280)={r5, r1, 0x62}) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(camellia)\x00'}, 0x58) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000005c0)={&(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0], 0x5, 0x5, 0x6, 0x4}) [ 301.053483] Bluetooth: hci0: command 0x1001 tx timeout [ 301.059056] Bluetooth: hci0: sending frame failed (-49) [ 303.131743] Bluetooth: hci0: command 0x1009 tx timeout 08:17:12 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x4, 0x101000) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f00000000c0)={0x0, {0x2, 0x4e24, @multicast1}, {0x2, 0x4e22, @rand_addr=0x1}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x27}}, 0x40, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000080)='tunl0\x00', 0x0, 0x2, 0x4}) openat$capi20(0xffffffffffffff9c, &(0x7f0000000240)='/dev/capi20\x00', 0x200, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$bt_rfcomm(0x1f, 0x3, 0x3) sysfs$1(0x1, &(0x7f0000000000)='reiserfs\x00') ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000001c0)=0x0) sched_setattr(r3, &(0x7f0000000200)={0x30, 0x7, 0x1, 0x1ff, 0xd0b4, 0x5761, 0x1, 0x8}, 0x0) 08:17:12 executing program 0: r0 = socket$inet6(0xa, 0xffffffffffffffff, 0xfffffffffffffffe) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dlm-monitor\x00', 0x101000, 0x0) ioctl$PIO_UNIMAPCLR(r1, 0x4b68, &(0x7f0000000340)={0x10000, 0x7, 0xeb5f}) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x10000, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') ioctl$EVIOCSABS3F(r2, 0x401845ff, &(0x7f0000000380)={0xffffffff, 0x6, 0x8, 0x1000, 0x10000, 0x7}) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="fc000000", @ANYRES16=r3, @ANYBLOB="02002abd7000fbdbdf2509000000340003000800080000000000080001000100000008000300026d164a8334052c5b5347332100000008000500ffffffff08000400080000000800010001000000340003000800080004000000ab48a78a633fa2f627fc8294fa4bcf44961400060000000000000000000000ffffac1414bb7000036bf100140002006e6c6d6f6e30000000000000000000000800f84d3b42000014000600ff020000000000000000000000000001080004000000000014000200626f6e645f736c6176655f31000000000800010002000000080007004e2400000800040009100000080003000200"], 0xfc}, 0x1, 0x0, 0x0, 0x20000040}, 0x40000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_open_procfs(0x0, &(0x7f00000006c0)='pagemap\x00') sendfile(r0, r5, &(0x7f0000000040)=0x11100000, 0x8001) 08:17:12 executing program 1: r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x10) sync_file_range(r0, 0x7f, 0x100, 0x2) r1 = socket(0x22, 0x2, 0x25) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8, 0x52013, r1, 0x0) close(r1) 08:17:12 executing program 3: sysfs$1(0x1, &(0x7f0000000000)='-\x00') getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) process_vm_writev(r0, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/108, 0x6c}, {&(0x7f0000000140)=""/4, 0x4}, {&(0x7f0000000180)=""/231, 0xe7}, {&(0x7f0000000280)=""/166, 0xa6}], 0x4, &(0x7f0000000400)=[{&(0x7f0000000380)=""/107, 0x6b}], 0x1, 0x0) r1 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000440)={0x2, 0x0, @local}, &(0x7f0000000480)=0x10, 0x80800) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f00000004c0), &(0x7f0000000500)=0x4) r2 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x100000000, 0x7cc878dcbdd55b35) ioctl$PPPIOCSACTIVE(r2, 0x40107446, &(0x7f00000005c0)={0x2, &(0x7f0000000580)=[{0xfff, 0x1ff, 0xfd, 0x20}, {0x10000, 0xfff, 0xfb, 0x4}]}) r3 = open(&(0x7f0000000600)='./file0\x00', 0x200, 0x80) ioctl$EVIOCREVOKE(r3, 0x40044591, &(0x7f0000000640)=0x3) ptrace$cont(0x20, r0, 0x5, 0x80000000) ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000680)={0x1, 0x9}) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000006c0)={0x8, @pix={0x8, 0x410c, 0x36314d4e, 0x7, 0x20, 0x10000, 0xf, 0x2, 0x1, 0x7, 0x2, 0x1}}) setsockopt$TIPC_MCAST_BROADCAST(r2, 0x10f, 0x85) r4 = dup(r3) ioctl$void(r2, 0x5451) ioctl$SG_GET_SG_TABLESIZE(r2, 0x227f, &(0x7f00000007c0)) ioctl$VIDIOC_SUBDEV_G_EDID(r3, 0xc0285628, &(0x7f0000000840)={0x0, 0x2, 0xfffffffffffffff8, [], &(0x7f0000000800)=0x6}) r5 = syz_open_dev$media(&(0x7f0000000880)='/dev/media#\x00', 0x2, 0x40) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000008c0)={{{@in=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@dev}}, &(0x7f00000009c0)=0xe8) bind$xdp(r5, &(0x7f0000000a00)={0x2c, 0x6, r6, 0x2d, 0xffffffffffffff9c}, 0x10) ioctl$TIOCGSOFTCAR(r2, 0x5419, &(0x7f0000000a40)) ioctl$LOOP_CLR_FD(r3, 0x4c01) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000a80)=0xbf09, 0x4) ioctl$DRM_IOCTL_SET_MASTER(r5, 0x641e) faccessat(r5, &(0x7f0000000ac0)='./file0\x00', 0x20, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000b00)={0xb5, 0x100000001, 0x493, "bf32fc70af0382793d8d16436b6da0075e481e9f736f641c356149ed9d490c2a5ec1750ffbc122c22214d8602e91ec869fa958d51aa32ea9fb7611fdff65859e49e6db23bb5088d16f5bc60b2e14705e9aa47a40741cfc255f3330bcc1d20a2809e08c01e0f52eedf4f6c28971b7bd244458b457824ea2bd981e6141ce24af0f0c40cf3fb32407272520064dddf8e09bc904efc0ca4d1f2770f8b6bca176eb4d24e37853212a948bd5ba9aaa59188b7c04de755d30"}) connect$packet(r4, &(0x7f0000000c00)={0x11, 0x10, r6, 0x1, 0x8, 0x6, @local}, 0x14) ioctl$VIDIOC_S_PRIORITY(r3, 0x40045644, 0x2) ioctl$VIDIOC_G_CROP(r2, 0xc014563b, &(0x7f0000000c40)={0x3, {0x3, 0x1, 0x4, 0x3}}) 08:17:12 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xe9b, 0x4000) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000080)={0xffffffffffffffff}, 0x4, {0xa, 0x4e20, 0xffff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7ff}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000100)={0x11, 0x10, 0xfa00, {&(0x7f0000000040), r1}}, 0x18) ioctl$TIOCCBRK(r0, 0x5428) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x300, 0x70bd27, 0x25dfdbfd, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0xa0000000}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x69c820b3420af0dd) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000280)=0x100000000, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000002c0)={0xffffffffffffffff}, 0x106, 0xe}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000340)={0x4, 0x8, 0xfa00, {r3, 0x2}}, 0x10) ioctl$KVM_SET_PIT(r0, 0x8048ae66, &(0x7f0000000380)={[{0xff, 0x1, 0x3, 0x0, 0x8, 0x8000, 0x9, 0x6955, 0x3, 0x1ff, 0xfffffffffffffff8, 0x7fffffff, 0x1d84}, {0x2, 0x7, 0x0, 0x200, 0x32c00000000000, 0x9, 0xc5, 0x200, 0x9, 0x4, 0x7, 0x1, 0x2}, {0x0, 0x7, 0x316, 0xf2, 0x0, 0x3, 0x2, 0x7, 0x7, 0x8001, 0x6, 0xffff, 0x17}], 0x8}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'syz_tun\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000580)={@mcast2, r4}, 0x14) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f00000005c0)={'filter\x00'}, &(0x7f0000000640)=0x54) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x8) write$binfmt_aout(r0, &(0x7f0000000680)={{0x1cf, 0x7, 0x3073, 0x85, 0x30c, 0x101, 0x145, 0xffffffff}, "9909fa34749ee44b62d3ad0ad79b3abf1241c2b5ab3304d57239f977ec754dfb02b631", [[], [], [], [], [], []]}, 0x643) r5 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000d00)='/dev/vhci\x00', 0xa0000) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000d40)={0x0, 0xfffffffffffffffc}, &(0x7f0000000d80)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000dc0)={r6, 0x0, 0x30}, &(0x7f0000000e00)=0xc) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) r7 = socket$isdn_base(0x22, 0x3, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000e80)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000e40)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) ioctl$TCSETS(r7, 0x5402, &(0x7f0000000ec0)={0x2000, 0x8001, 0x7, 0x3, 0x12, 0x4, 0x80000001, 0x80, 0x0, 0x3dfa050, 0x22b8, 0x3}) prctl$PR_GET_DUMPABLE(0x3) ioctl$VT_OPENQRY(r5, 0x5600, &(0x7f0000000f00)) ioctl$sock_FIOGETOWN(r7, 0x8903, &(0x7f0000000f40)=0x0) prctl$PR_SET_PTRACER(0x59616d61, r8) getsockopt$packet_buf(r0, 0x107, 0x1f, &(0x7f0000000f80)=""/219, &(0x7f0000001080)=0xdb) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f00000010c0)=0xd1, 0x4) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000001100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) [ 307.184682] delete_channel: no stack [ 307.209249] delete_channel: no stack 08:17:12 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x1, 0x1, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000280)={0x7b, 0x0, [0x4b564d01, 0x1]}) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000240)={0x0}, &(0x7f0000000300)=0xc) ioprio_get$pid(0x3, r3) r4 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) openat$audio(0xffffffffffffff9c, &(0x7f0000000380)='/dev/audio\x00', 0x2, 0x0) ioctl$sock_inet_SIOCRTMSG(r4, 0x890d, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x19}}, {0x2, 0x4e20, @multicast2}, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)='bridge0\x00', 0x8001, 0x10001, 0x9}) r5 = syz_open_dev$cec(&(0x7f00000003c0)='/dev/cec#\x00', 0x1, 0x2) ioctl$EVIOCGSND(r5, 0x8040451a, &(0x7f0000000400)=""/231) r6 = semget$private(0x0, 0x3, 0x400) semctl$SETALL(r6, 0x0, 0x11, &(0x7f0000000340)=[0x5, 0x100, 0x2, 0x8, 0x5, 0x2, 0x76b]) setsockopt$inet_MCAST_LEAVE_GROUP(r4, 0x0, 0x2d, &(0x7f0000000180)={0x2, {{0x2, 0x4e24, @local}}}, 0x88) ioctl$KVM_RUN(r4, 0xae80, 0x0) 08:17:12 executing program 2: prlimit64(0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) write$P9_RLCREATE(r0, &(0x7f0000000000)={0x18, 0xf, 0x1, {{0x0, 0x2, 0x2}, 0x5}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000100)={0x10, 0x30, 0xfa00, {&(0x7f0000000040), 0x3, {0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7fff}, r1}}, 0x38) 08:17:12 executing program 1: mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r0 = socket(0x10, 0x2, 0x0) syslog(0x3, &(0x7f00000000c0)=""/147, 0x37a8ec531be3c41f) open(&(0x7f0000000e00)='./file1\x00', 0x0, 0x0) mount(&(0x7f0000000280)=ANY=[], &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountstats\x00') sendfile(r0, r1, 0x0, 0x80000008000000a) 08:17:12 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@mcast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x8000000000}, 0x0, 0x0, 0x7}, {{@in=@local}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0x6}}, 0xe8) 08:17:13 executing program 0: pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f00000001c0)) r2 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$ARPT_SO_GET_INFO(r2, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00'}, &(0x7f0000000040)=0x44) getsockopt$inet_int(r2, 0x10d, 0xb2, &(0x7f0000000000), &(0x7f0000000080)=0x15e) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000180)={0x3, 0x7, 0x1, 0x6, 0x3, 0x7ff, 0x2d2}) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000200)={{0x2, 0x4e24, @remote}, {0x1}, 0xc82c0005a973eec2, {0x2, 0x4e24, @broadcast}, 'team_slave_0\x00'}) 08:17:13 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@mcast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x8000000000}, 0x0, 0x0, 0x7}, {{@in=@local}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0x6}}, 0xe8) [ 308.172075] IPVS: ftp: loaded support on port[0] = 21 [ 308.233011] IPVS: ftp: loaded support on port[0] = 21 08:17:13 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x4) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) mq_notify(r0, &(0x7f0000000100)={0x0, 0x23, 0x0, @tid=r1}) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000)=0x0) write$P9_RGETLOCK(r0, &(0x7f0000000080)={0x28, 0x37, 0x1, {0x2, 0xc59e, 0x6, r2, 0xa, '/dev/rtc0\x00'}}, 0x28) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000140)) 08:17:13 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x0, 0x0, {0x8, @vbi={0xfff, 0x1000, 0x6, 0x20363059, [0x3, 0xc06], [0x7f, 0x1ff]}}}) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000100)={0x8000, 0x0, "0b44e55fea91336e5a73d9c82e13bd85a06d2da5f57b4db9", {0x3, 0x8}, 0x5}) 08:17:13 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)=ANY=[@ANYBLOB="02018fec903376edf41aeb00f650f400090a000000000000000000000002001000000000000000000000000000030006000000000002000000e00020010000ac9622cf44000000000000030005000000000002000000e0000001ff7fffffffffffff421193556007cd53c4e167ccad4ea3a07761f892dbcda8"], 0x50}}, 0x0) fcntl$setpipe(r0, 0x407, 0x1000) r1 = socket$unix(0x1, 0x5, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x2, 0x4000) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000040)={r2, 0x0, 0x7, 0x7f, 0x1}) 08:17:13 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x20, 0x0) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000000040)) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)=0x2) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000080)={0x1}, 0x8) sendto$inet6(r1, 0x0, 0x2, 0x24000000, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @mcast2}, 0x1c) [ 308.607496] chnl_net:caif_netlink_parms(): no params data found [ 308.808623] chnl_net:caif_netlink_parms(): no params data found [ 308.819269] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.825836] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.834317] device bridge_slave_0 entered promiscuous mode [ 308.902264] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.908810] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.917305] device bridge_slave_1 entered promiscuous mode [ 308.995094] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.001812] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.010218] device bridge_slave_0 entered promiscuous mode [ 309.025115] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 309.037188] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 309.045118] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.051873] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.060410] device bridge_slave_1 entered promiscuous mode [ 309.121425] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 309.132760] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 309.141442] team0: Port device team_slave_0 added [ 309.148340] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 309.157240] team0: Port device team_slave_1 added [ 309.165539] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 309.185686] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 309.201858] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 309.209926] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 309.218920] team0: Port device team_slave_0 added [ 309.236715] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 309.245184] team0: Port device team_slave_1 added [ 309.262135] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 309.334651] device hsr_slave_0 entered promiscuous mode [ 309.372446] device hsr_slave_1 entered promiscuous mode [ 309.413454] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 309.421918] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 309.440287] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 309.505442] device hsr_slave_0 entered promiscuous mode [ 309.542251] device hsr_slave_1 entered promiscuous mode [ 309.603261] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 309.611756] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 309.663708] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 309.676290] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 309.790338] 8021q: adding VLAN 0 to HW filter on device bond0 [ 309.807793] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 309.826216] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 309.833301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 309.841281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 309.855656] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 309.862481] 8021q: adding VLAN 0 to HW filter on device team0 [ 309.875851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 309.891035] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 309.901313] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 309.907753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 309.916580] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 309.925728] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.932326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 309.940464] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 309.955587] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 309.966010] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 309.976693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 309.985693] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 309.994352] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.000846] bridge0: port 2(bridge_slave_1) entered forwarding state [ 310.008462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 310.016124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 310.030791] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 310.037181] 8021q: adding VLAN 0 to HW filter on device team0 [ 310.048758] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 310.063273] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 310.070398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 310.079866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 310.088635] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 310.096782] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.103353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 310.116750] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 310.123931] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 310.132167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 310.141199] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 310.150092] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.156663] bridge0: port 2(bridge_slave_1) entered forwarding state [ 310.178160] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 310.188561] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 310.199435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 310.208900] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 310.224495] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 310.232705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 310.247169] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 310.259081] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 310.268276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 310.277548] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 310.285768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 310.294732] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 310.304580] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 310.313267] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 310.326355] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 310.339961] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 310.347676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 310.356971] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 310.366027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 310.375604] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 310.395093] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 310.402246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 310.410918] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 310.423440] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 310.431411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 310.440398] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 310.457133] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 310.466912] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 310.474002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 310.484140] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 310.492594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 310.501129] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 310.516095] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 310.522461] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 310.537729] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 310.543982] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 310.577909] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 310.593708] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 310.608276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 310.635910] 8021q: adding VLAN 0 to HW filter on device batadv0 08:17:15 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getpriority(0x0, 0x0) 08:17:15 executing program 4: 08:17:15 executing program 2: syz_emit_ethernet(0x1ca, &(0x7f0000000140)=ANY=[@ANYBLOB="d1b69c9c1e7f8a37962a294f86dd60110c1100302100fe8000000000000000000000000000ffff020000000000000000000080000000010090780000000060cb155d00000000ff020000000000000000000000000001fe800000000000000000000000000000fa21ff43e99df584738c37a4ec3a0466b25f232ad626114820664b978e16e33c860089fba6f61ba5e7a7fcece59bdd51196befed046f076e3ec5599e5d7054b9b234b33015a7b70b6e90bd549e99b5edf06a182e435d6e"], 0x0) 08:17:15 executing program 1: syz_emit_ethernet(0x1e, &(0x7f0000000080)={@local, @dev={[], 0x2b}, [], {@can={0xc, {{0x1, 0x1, 0x9, 0x200}, 0x7, 0x2, 0x0, 0x0, "9a7627aee42259ec"}}}}, &(0x7f00000000c0)={0x0, 0x3, [0xa8, 0xe61, 0xad4, 0xe21]}) r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) ioctl$KVM_GET_DEVICE_ATTR(r1, 0x4018aee2, &(0x7f00000001c0)={0x0, 0xa47, 0x401, &(0x7f0000000180)=0x100000001}) syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x3, 0x2) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x7, 0x1, 0x0, "0f348062d210669f0e613600fa33fac1d718583a70ea62b24d0a0e2e4065af66"}) 08:17:15 executing program 0: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x16) ioctl$sock_SIOCETHTOOL(r0, 0x8993, &(0x7f0000000080)={'mo:,\x00\x00\x81\x80\x00\x00\xfa\xff\xdf\xf7\x00', 0x0}) r1 = getpid() syz_open_procfs$namespace(r1, &(0x7f0000000100)='ns/pid\x00') symlink(&(0x7f0000000240)='./file1\x00', &(0x7f00000000c0)='\x00') lgetxattr(&(0x7f0000000140)='./file0\x00', &(0x7f00000003c0)=@random={'trusted.', '\\vboxnet0posix_acl_access.\x00'}, &(0x7f00000002c0)=""/224, 0xe0) gettid() openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x101000, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) 08:17:15 executing program 5: sigaltstack(&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x200040, 0x0) ioctl$IOC_PR_CLEAR(r0, 0x401070cd, &(0x7f0000000080)={0x4}) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) mlockall(0x1) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f00000000c0)={[0xffff, 0x1, 0xffffffffcf9c3d33, 0x1, 0x81, 0x400, 0x8, 0x0, 0x40, 0x0, 0x7f, 0xc9b, 0x7, 0x4, 0x1, 0x4], 0xd002, 0x8000}) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000180)=@assoc_value={0x0, 0x2}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000200)={r1, 0x8}, &(0x7f0000000240)=0x8) getsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000280), &(0x7f00000002c0)=0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e22, 0x0, @ipv4={[], [], @rand_addr=0x100}, 0xed}}, 0x0, 0x8, 0x0, "65d90a0a92e843f58ade3d9fffa947dceef14f69ce557ce691d83de5e5ede15daa9234dca8bbbb931a66f0c7428b6943022a3175ed3be7e8771ea68621432de15ec596b86405b0938a538cec5a8ab3c6"}, 0xd8) r2 = syz_open_dev$mouse(&(0x7f0000000400)='/dev/input/mouse#\x00', 0x42, 0x2000) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000440)=0x8, 0x4) splice(r0, &(0x7f0000000480), r0, &(0x7f00000004c0), 0x3, 0xe) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x2, 0x0) r4 = gettid() fcntl$lock(r3, 0x27, &(0x7f0000000540)={0x1, 0x7, 0x100, 0x3, r4}) r5 = pkey_alloc(0x0, 0x3) pkey_free(r5) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000580), &(0x7f00000005c0)=0xc) r6 = syz_open_dev$radio(&(0x7f0000000600)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f0000000640)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f0000000700)={0xffffffff, 0x3ff, 0x7fffffff, {}, 0x6, 0x8}) write$P9_RREAD(r0, &(0x7f0000000780)={0x40, 0x75, 0x1, {0x35, "61621e2b69c00161eedc552d4f29aa3fda5faa1aa3c8182ad606fccbeec38fc68a4bcf4b5ee301e69486cdebb6fafec013c59b466a"}}, 0x40) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/rtc0\x00', 0x1, 0x0) getsockopt$IP_VS_SO_GET_INFO(r6, 0x0, 0x481, &(0x7f0000000800), &(0x7f0000000840)=0xc) ioctl$FITRIM(r6, 0xc0185879, &(0x7f0000000880)={0xfffffffffffffffc, 0x40, 0x81}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000008c0)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x16}}, @in={0x2, 0x4e20, @multicast2}, @in={0x2, 0x4e20, @empty}], 0x30) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r7, 0x111, 0x4, 0x1, 0x4) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000900)="91fa8da2c65ba210cb434eb346ec071c1ad6b6d2c8f0192280bb363c4dbe12b82114edc2a93af1aed3b96bc2385c33c466841dfbc90d61bf44d726ccb06bedd1c4f02128dd7e59f1d48de094d7e89397db96fde5983fc123925251e6003186603445cb12fbb1389c48293fd7128c087d194aa06eea972914b648a54c25eb57e926f0ce98be0f09bf3f7e6786013415b128e3c3b464aa6701d3ec649a1ecf2d2fae74f76547f50c5bfa77589548f68f137e855e765639549be7b58eaf8b", 0xbd) finit_module(r3, &(0x7f00000009c0)='md5sum\x00', 0x1) 08:17:16 executing program 3: 08:17:16 executing program 1: 08:17:16 executing program 2: 08:17:16 executing program 4: 08:17:16 executing program 0: 08:17:16 executing program 3: 08:17:16 executing program 4: 08:17:16 executing program 1: 08:17:16 executing program 2: 08:17:16 executing program 4: 08:17:16 executing program 3: [ 312.204463] IPVS: ftp: loaded support on port[0] = 21 [ 312.305612] chnl_net:caif_netlink_parms(): no params data found [ 312.356913] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.364700] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.372810] device bridge_slave_0 entered promiscuous mode [ 312.380720] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.387358] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.395011] device bridge_slave_1 entered promiscuous mode [ 312.426392] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 312.436806] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 312.459629] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 312.467768] team0: Port device team_slave_0 added [ 312.474004] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 312.482378] team0: Port device team_slave_1 added [ 312.488098] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 312.496466] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 312.554716] device hsr_slave_0 entered promiscuous mode [ 312.602504] device hsr_slave_1 entered promiscuous mode [ 312.643875] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 312.652688] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 312.674688] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.681146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.688350] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.694830] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.759814] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 312.766106] 8021q: adding VLAN 0 to HW filter on device bond0 [ 312.776639] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 312.788807] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 312.797259] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.804951] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.813856] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 312.832199] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 312.838309] 8021q: adding VLAN 0 to HW filter on device team0 [ 312.851190] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 312.859587] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.866176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.880598] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 312.889009] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.895597] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.925273] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 312.935259] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 312.956574] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 312.965859] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 312.980267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 312.994279] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 313.000323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 313.020877] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 313.038048] 8021q: adding VLAN 0 to HW filter on device batadv0 08:17:18 executing program 5: 08:17:18 executing program 0: 08:17:18 executing program 2: 08:17:18 executing program 1: 08:17:18 executing program 4: 08:17:18 executing program 3: 08:17:18 executing program 4: 08:17:18 executing program 2: 08:17:18 executing program 0: 08:17:18 executing program 1: 08:17:18 executing program 3: 08:17:18 executing program 5: 08:17:18 executing program 2: socketpair$unix(0x1, 0x5000000000001, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x3, 0x0) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0x2ae6ca2be46e6429) write$P9_RLCREATE(r2, &(0x7f0000000000)={0xfe83}, 0x18) fcntl$setstatus(r2, 0x4, 0x4cc00) write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e"], 0x1) 08:17:18 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="ffff0f000a000200c6e624e87e895069aaaab3aaaaaa0000de46dafbe5"], 0x1}}, 0x0) 08:17:18 executing program 0: 08:17:18 executing program 5: 08:17:18 executing program 3: 08:17:18 executing program 1: 08:17:19 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0) getsockname(r0, &(0x7f0000000480)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f0000000400)=0x202) readv(0xffffffffffffffff, 0x0, 0x0) fcntl$getown(r1, 0x9) 08:17:19 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) pwritev(0xffffffffffffffff, 0x0, 0xffffffffffffff46, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) getgid() listen(r1, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r2 = accept4$inet(r1, 0x0, 0x0, 0x0) connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x0) getpeername$inet(r2, 0x0, &(0x7f0000000080)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1/file0\x00', 0x0, 0x80) 08:17:19 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syncfs(r0) 08:17:19 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x0, 0x0) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) close(r0) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, 0x0, 0x0) 08:17:19 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000024c0)={&(0x7f00000017c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x4, {0xa, 0x0, 0x0, @remote, 0x200}}}, 0x80, 0x0}, 0x20000000) recvmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffffd) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f0000000000), 0x0}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) socket$kcm(0x29, 0x5, 0x0) socket$kcm(0x10, 0x0, 0x0) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400204) r3 = socket$kcm(0x11, 0x2, 0x300) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvmsg$kcm(r3, &(0x7f00000071c0)={0x0, 0x0, &(0x7f0000007180)=[{0x0}, {&(0x7f0000007000)=""/249, 0xf9}], 0x2}, 0x0) socket$kcm(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8907, 0x70cffe) 08:17:19 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000) recvmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffffd) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x41ff9, 0x0) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x0, 0x40000000004, 0x201}, 0x2c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000040)=0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r2 = socket$kcm(0x11, 0x2, 0x300) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvmsg$kcm(r2, &(0x7f00000071c0)={0x0, 0x0, &(0x7f0000007180)=[{0x0}, {&(0x7f0000007000)=""/249, 0xf9}, {0x0}], 0x3}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8907, 0x70cffe) 08:17:19 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.stat\v<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c%\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) 08:17:19 executing program 0: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)='\x00'}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[&\xe5\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ}\xb7\xf3\xfe\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4', 0x2761, 0x0) gettid() write$cgroup_pid(r1, &(0x7f0000000100), 0xda4fff08) perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNGETFILTER(r0, 0x801054db, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x660c, 0x0) 08:17:19 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.stat\v<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x02\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) 08:17:19 executing program 2: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)='\x00'}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[&\xe5\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ}\xb7\xf3\xfe\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4', 0x2761, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0xda4fff08) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNGETFILTER(r0, 0x801054db, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x660c, 0x0) 08:17:19 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.stat\v<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c%\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) [ 314.813587] protocol 88fb is buggy, dev hsr_slave_0 [ 314.819420] protocol 88fb is buggy, dev hsr_slave_1 08:17:19 executing program 3: r0 = socket$kcm(0x11, 0x2, 0x300) recvmsg$kcm(r0, &(0x7f00000071c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8907, 0x70cffe) 08:17:20 executing program 5: write$evdev(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x7530}, 0x11, 0x8001}], 0x18) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) [ 315.066802] hrtimer: interrupt took 205850 ns 08:17:20 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000) recvmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffffd) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x41ff9, 0x0) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x0, 0x40000000004, 0x201}, 0x2c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000040)=0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r2 = socket$kcm(0x11, 0x2, 0x300) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvmsg$kcm(r2, &(0x7f00000071c0)={0x0, 0x0, &(0x7f0000007180)=[{0x0}, {&(0x7f0000007000)=""/249, 0xf9}, {0x0}], 0x3}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8907, 0x70cffe) [ 315.132517] protocol 88fb is buggy, dev hsr_slave_0 [ 315.132637] protocol 88fb is buggy, dev hsr_slave_0 [ 315.138147] protocol 88fb is buggy, dev hsr_slave_1 [ 315.143710] protocol 88fb is buggy, dev hsr_slave_1 08:17:20 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 08:17:20 executing program 1: syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x7, 0x0) r0 = memfd_create(&(0x7f0000000440)='-^user\')\x00', 0x0) r1 = syz_open_dev$loop(0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) 08:17:20 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000180)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0f85403, &(0x7f00000000c0)) 08:17:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000080)=ANY=[@ANYBLOB="0fb4e7"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0xfffffffffffffeba, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:17:20 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000300)) 08:17:20 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_IRQP_READ(r0, 0x8008700b, &(0x7f00000001c0)) 08:17:20 executing program 5: socket$inet6(0x10, 0x2000000003, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x18f040, 0x32) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xed}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rmdir(0x0) r1 = socket$inet6(0xa, 0xffffffffffffffff, 0x1) fcntl$getown(r1, 0x9) creat(&(0x7f00000002c0)='./bus\x00', 0x4) rmdir(&(0x7f0000000580)='./bus\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[], 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, 0x0) r2 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_int(r0, 0x29, 0xcf, &(0x7f0000000840)=0x1, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000880)={@remote, 0x0, 0x0, 0x3, 0x1}, 0x20) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) socket$inet6(0xa, 0xa, 0x3ff) connect$inet6(r2, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r2, r3, &(0x7f00000000c0)=0x202, 0x8) 08:17:21 executing program 2: perf_event_open(&(0x7f000001d000)={0x8000000000001, 0x4df, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000440)='loginuid\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000540)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000000) 08:17:21 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x0) 08:17:21 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000080)=ANY=[@ANYBLOB="0fb4e7"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0xfffffffffffffeba, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:17:21 executing program 4: creat(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)={&(0x7f0000000080)='./file0\x00'}, 0x10) 08:17:21 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000880)={@remote, 0x0, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) 08:17:21 executing program 5: pipe(0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x602000, 0x9) 08:17:21 executing program 1: r0 = msgget$private(0x0, 0x680) msgsnd(r0, 0xfffffffffffffffe, 0x0, 0x0) 08:17:21 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000080)=ANY=[@ANYBLOB="0fb4e7"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0xfffffffffffffeba, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:17:21 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000000)={0x1, 0x0, @ioapic}) 08:17:21 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="145f420000000000000007ff000000000300de56b50000000008000000000800080001000000080005"], 0x1}}, 0x0) write$FUSE_LK(0xffffffffffffffff, &(0x7f00000001c0)={0x28, 0x0, 0x7}, 0x28) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000010000/0x1000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:17:21 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TIOCGETD(r0, 0x541f, 0x0) 08:17:21 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xb, 0x40, 0xa9, 0xa37, 0x1, 0x1}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000da0000000280001a850000000000000095"], 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000040)=@raw=[@map={0x18, 0x2, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x2c}], &(0x7f0000000140)='GPL\x00', 0x41, 0xffc4, &(0x7f00000004c0)=""/167}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r1, 0x0, 0xe, 0x0, &(0x7f00000002c0)="0000000080ffffffffcfe23b0000", 0x0, 0xf000}, 0x28) 08:17:22 executing program 2: syz_execute_func(&(0x7f0000000040)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3196f") r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup2(r0, r0) setsockopt$inet_msfilter(r1, 0x0, 0x29, 0x0, 0x0) 08:17:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000080)=ANY=[@ANYBLOB="0fb4e7"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0xfffffffffffffeba, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:17:22 executing program 4: mknod(&(0x7f0000000540)='./file0\x00', 0x1041, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) clone(0x802102201fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'veth1Tto_bond\x00', 0x3802}) creat(&(0x7f0000000140)='./file0\x00', 0x0) 08:17:22 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{&(0x7f0000003980)=@rc, 0x80, &(0x7f0000002b80)=[{&(0x7f0000000680)=""/190, 0xbe}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/fib_trie\x00') preadv(r0, &(0x7f00000017c0), 0x1d0, 0x1f000000) 08:17:22 executing program 2: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="192757ce781d481aa4005ba59f4d48fd00000100000000003d6dc4b43a25a5b02828f5f1b074a28cd7614bc3239db8e06101ad363c7b22b66a"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x1f, r0, 0x0, 0x0) 08:17:23 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000a83000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @rand_addr="6999b6320794251bcd269b6961a36b7f"}}}, 0x108) 08:17:23 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000080)=ANY=[@ANYBLOB="0fb4e7"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:17:23 executing program 2: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="192757ce781d481aa4005ba59f4d48fd00000100000000003d6dc4b43a25a5b02828f5f1b074a28cd7614bc3239db8e06101ad363c7b22b66a"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x1f, r0, 0x0, 0x0) 08:17:23 executing program 1: open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='oom_adj\x00') exit(0x0) sendfile(r0, r0, 0x0, 0x97) 08:17:23 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000001fc0)='./file0\x00', 0x40, 0x0) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) 08:17:23 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x121000, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000280)={0x8d, 0x29, 0x1, {0x1, [{{0x40}, 0x6, 0x6, 0x9, './control'}, {{0x0, 0x4, 0x7}, 0x8, 0x48, 0x9, './control'}, {{0x4, 0x1, 0x7}, 0x3, 0x21, 0x7, './file0'}, {{0x10, 0x1, 0x8}, 0x10001, 0x9, 0x9, './control'}]}}, 0x8d) acct(&(0x7f0000000380)='./file0/file0\x00') name_to_handle_at(r1, &(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000200)={0x1a, 0x7, "e662f7e201d251e0423199cd2921f02a0e75"}, 0x0, 0x1400) mkdir(&(0x7f0000000240)='./control\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./control\x00', 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./control\x00', 0x0, 0x0) unlinkat(r2, &(0x7f0000000180)='./file0\x00', 0x200) rmdir(&(0x7f0000000080)='./control\x00') [ 318.573902] syz-executor.1 (11492): /proc/11480/oom_adj is deprecated, please use /proc/11480/oom_score_adj instead. 08:17:23 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) inotify_init1(0x0) r0 = socket$unix(0x1, 0x1, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ptrace(0xffffffffffffffff, 0x0) getsockname(r0, &(0x7f0000000480)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f0000000000)=0xdd) readv(0xffffffffffffffff, 0x0, 0x0) r2 = dup2(r0, r1) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) getsockname(0xffffffffffffffff, 0x0, &(0x7f0000000180)) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000080)) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1f, 0x0, 0x0) 08:17:23 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r0, &(0x7f0000001080)=[{{&(0x7f00000002c0)=@in6={0xa, 0x4e22, 0x0, @mcast2}, 0x80, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="58000000000000008e010000ff030000d834d9d7d4a159de079e98085077ba9b37464f56cb93e603ec81203ae34a796cb36d8eabd1edc1d6a5acae0e2cd68fa5c9d927095c62eb10f65aee443d1399b2a150bece46000000280000000000000017010000f9050000"], 0x68}}], 0x1, 0x0) 08:17:23 executing program 2: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="192757ce781d481aa4005ba59f4d48fd00000100000000003d6dc4b43a25a5b02828f5f1b074a28cd7614bc3239db8e06101ad363c7b22b66a"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x1f, r0, 0x0, 0x0) 08:17:23 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000080)=ANY=[@ANYBLOB="0fb4e7"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:17:23 executing program 1: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='tmpfs\x00', 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000340)='system.posix_acl_default\x00', &(0x7f0000000380)=ANY=[@ANYBLOB], 0x1, 0x0) 08:17:23 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f0000000680)=""/190, 0xbe}], 0x1}, 0x6}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/fib_trie\x00') preadv(r0, &(0x7f00000017c0), 0x1d0, 0x1f000000) 08:17:24 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = inotify_init() unshare(0x400) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) 08:17:24 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000080)=ANY=[@ANYBLOB="0fb4e7"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:17:24 executing program 4: clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1e) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={@empty, @mcast1, @ipv4, 0x20000000, 0x0, 0x0, 0x12a}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) stat(&(0x7f0000000000)='./file0\x00', 0x0) ptrace$cont(0x7, r0, 0x0, 0x0) 08:17:24 executing program 2: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="192757ce781d481aa4005ba59f4d48fd00000100000000003d6dc4b43a25a5b02828f5f1b074a28cd7614bc3239db8e06101ad363c7b22b66a"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x1f, r0, 0x0, 0x0) 08:17:24 executing program 1: syz_execute_func(&(0x7f0000000040)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3196f") r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup2(r0, r0) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f00000005c0)={&(0x7f00000004c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x8004}, 0x0) 08:17:24 executing program 5: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052fc73cb00040efb7ef3d6bec5def3bc57780022e00000000b174956bcff6a22c3801b4a4238c7a000000000cd0f703000000e8e39a4ed90a"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) 08:17:24 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x26e, 0x0) 08:17:24 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000000)) socketpair(0x11, 0x3, 0x9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa000000200000000, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, &(0x7f0000000080)=""/44) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x8, &(0x7f000000a000)) 08:17:24 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0xfffffffffffffeba, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:17:24 executing program 4: r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)="c10900000000290000021fe4ac141417e0", 0x11}], 0x1}, 0x0) [ 319.726263] ================================================================== [ 319.733758] BUG: KMSAN: uninit-value in _raw_spin_lock_bh+0xea/0x130 [ 319.740318] CPU: 0 PID: 11554 Comm: syz-executor.4 Not tainted 5.0.0-rc1+ #9 [ 319.747513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 319.756872] Call Trace: [ 319.759525] dump_stack+0x173/0x1d0 [ 319.763198] kmsan_report+0x12e/0x2a0 [ 319.767042] __msan_warning+0x82/0xf0 [ 319.770871] _raw_spin_lock_bh+0xea/0x130 [ 319.775075] inet_frag_find+0x1223/0x24a0 [ 319.779279] ? ip4_obj_hashfn+0x430/0x430 [ 319.783470] ? ip_expire+0xbd0/0xbd0 [ 319.787195] ? ip4_key_hashfn+0x420/0x420 [ 319.791354] ? ip_expire+0xbd0/0xbd0 [ 319.795076] ? ip4_key_hashfn+0x420/0x420 [ 319.799240] ? ip_expire+0xbd0/0xbd0 [ 319.802965] ? ip4_key_hashfn+0x420/0x420 [ 319.807119] ? ip4_obj_hashfn+0x430/0x430 [ 319.811290] ip_defrag+0x47c/0x6310 [ 319.815097] ? __x64_sys_sendmsg+0x4a/0x70 [ 319.819350] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 319.824746] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 319.829952] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 319.835410] ipv4_conntrack_defrag+0x673/0x7d0 [ 319.840038] ? defrag4_net_exit+0xe0/0xe0 [ 319.844229] nf_hook_slow+0x176/0x3d0 [ 319.848079] __ip_local_out+0x6dc/0x800 [ 319.852087] ? __ip_local_out+0x800/0x800 [ 319.856255] ip_local_out+0xa4/0x1d0 [ 319.859994] iptunnel_xmit+0x8a7/0xde0 [ 319.863950] ip_tunnel_xmit+0x35b9/0x3980 [ 319.868170] ipgre_xmit+0x1098/0x11c0 [ 319.872001] ? ipgre_close+0x230/0x230 [ 319.875957] dev_hard_start_xmit+0x604/0xc40 [ 319.880417] __dev_queue_xmit+0x2e48/0x3b80 [ 319.884798] dev_queue_xmit+0x4b/0x60 [ 319.888613] ? __netdev_pick_tx+0x1260/0x1260 [ 319.893187] packet_sendmsg+0x79bb/0x9760 [ 319.897379] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 319.902858] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 319.908070] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 319.913517] ___sys_sendmsg+0xdb9/0x11b0 [ 319.917606] ? compat_packet_setsockopt+0x360/0x360 [ 319.922659] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 319.927878] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 319.933258] ? __fget_light+0x6e1/0x750 [ 319.937275] __se_sys_sendmsg+0x305/0x460 [ 319.941464] __x64_sys_sendmsg+0x4a/0x70 [ 319.945545] do_syscall_64+0xbc/0xf0 [ 319.949286] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 319.954482] RIP: 0033:0x457e29 [ 319.957690] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 319.976600] RSP: 002b:00007feadb510c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 319.984317] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457e29 [ 319.991641] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 319.998918] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 320.006191] R10: 0000000000000000 R11: 0000000000000246 R12: 00007feadb5116d4 [ 320.013496] R13: 00000000004c5461 R14: 00000000004d9308 R15: 00000000ffffffff [ 320.020787] [ 320.022409] Uninit was created at: [ 320.025953] No stack [ 320.028286] ================================================================== [ 320.035638] Disabling lock debugging due to kernel taint [ 320.041088] Kernel panic - not syncing: panic_on_warn set ... [ 320.047074] CPU: 0 PID: 11554 Comm: syz-executor.4 Tainted: G B 5.0.0-rc1+ #9 [ 320.055650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 320.065006] Call Trace: [ 320.067638] dump_stack+0x173/0x1d0 [ 320.071291] panic+0x3d1/0xb01 [ 320.074542] kmsan_report+0x293/0x2a0 [ 320.078370] __msan_warning+0x82/0xf0 [ 320.082194] _raw_spin_lock_bh+0xea/0x130 [ 320.086361] inet_frag_find+0x1223/0x24a0 [ 320.090522] ? ip4_obj_hashfn+0x430/0x430 [ 320.094716] ? ip_expire+0xbd0/0xbd0 [ 320.098434] ? ip4_key_hashfn+0x420/0x420 [ 320.102593] ? ip_expire+0xbd0/0xbd0 [ 320.106314] ? ip4_key_hashfn+0x420/0x420 [ 320.110476] ? ip_expire+0xbd0/0xbd0 [ 320.114201] ? ip4_key_hashfn+0x420/0x420 [ 320.118383] ? ip4_obj_hashfn+0x430/0x430 [ 320.122558] ip_defrag+0x47c/0x6310 [ 320.126201] ? __x64_sys_sendmsg+0x4a/0x70 [ 320.130447] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 320.135843] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 320.141057] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 320.146466] ipv4_conntrack_defrag+0x673/0x7d0 [ 320.151080] ? defrag4_net_exit+0xe0/0xe0 [ 320.155244] nf_hook_slow+0x176/0x3d0 [ 320.159085] __ip_local_out+0x6dc/0x800 [ 320.163087] ? __ip_local_out+0x800/0x800 [ 320.167249] ip_local_out+0xa4/0x1d0 [ 320.171003] iptunnel_xmit+0x8a7/0xde0 [ 320.174955] ip_tunnel_xmit+0x35b9/0x3980 [ 320.179173] ipgre_xmit+0x1098/0x11c0 [ 320.183003] ? ipgre_close+0x230/0x230 [ 320.186919] dev_hard_start_xmit+0x604/0xc40 [ 320.191376] __dev_queue_xmit+0x2e48/0x3b80 [ 320.195751] dev_queue_xmit+0x4b/0x60 [ 320.200010] ? __netdev_pick_tx+0x1260/0x1260 [ 320.204536] packet_sendmsg+0x79bb/0x9760 [ 320.208720] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 320.214194] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 320.219400] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 320.224854] ___sys_sendmsg+0xdb9/0x11b0 [ 320.228940] ? compat_packet_setsockopt+0x360/0x360 [ 320.233982] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 320.239209] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 320.244588] ? __fget_light+0x6e1/0x750 [ 320.248601] __se_sys_sendmsg+0x305/0x460 [ 320.252791] __x64_sys_sendmsg+0x4a/0x70 [ 320.256867] do_syscall_64+0xbc/0xf0 [ 320.260601] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 320.265797] RIP: 0033:0x457e29 [ 320.269088] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 320.287992] RSP: 002b:00007feadb510c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 320.295719] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457e29 [ 320.302989] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 320.310271] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 320.317546] R10: 0000000000000000 R11: 0000000000000246 R12: 00007feadb5116d4 [ 320.324825] R13: 00000000004c5461 R14: 00000000004d9308 R15: 00000000ffffffff [ 320.333409] Kernel Offset: disabled [ 320.337046] Rebooting in 86400 seconds..