[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 40.062754] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 42.544648] random: sshd: uninitialized urandom read (32 bytes read) [ 42.914282] random: sshd: uninitialized urandom read (32 bytes read) [ 44.033707] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.50' (ECDSA) to the list of known hosts. [ 49.708702] random: sshd: uninitialized urandom read (32 bytes read) 2018/09/04 01:07:12 fuzzer started [ 51.233479] random: cc1: uninitialized urandom read (8 bytes read) 2018/09/04 01:07:15 dialing manager at 10.128.0.26:45707 2018/09/04 01:07:17 syscalls: 1 2018/09/04 01:07:17 code coverage: enabled 2018/09/04 01:07:17 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/09/04 01:07:17 setuid sandbox: enabled 2018/09/04 01:07:17 namespace sandbox: enabled 2018/09/04 01:07:17 fault injection: enabled 2018/09/04 01:07:17 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/09/04 01:07:17 net packed injection: enabled 2018/09/04 01:07:17 net device setup: enabled [ 57.043672] random: crng init done 01:09:22 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x1) request_key(&(0x7f0000000340)='blacklist\x00', &(0x7f0000000380), &(0x7f0000000040)='keyring\x00', 0xfffffffffffffffd) request_key(&(0x7f0000000100)='user\x00', &(0x7f00000006c0), &(0x7f00000001c0)="d13ff3d776", 0x0) 01:09:22 executing program 1: clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, &(0x7f0000000240)) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x100000000000005, &(0x7f0000000080), 0x3) r1 = getpid() setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000440)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @local}}}, {{0xa, 0x0, 0x0, @ipv4}}}, 0x108) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) sched_setattr(0x0, &(0x7f0000000000)={0xda8876c3933b94b1, 0x3}, 0x0) 01:09:22 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) sendfile(r1, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 01:09:22 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000440)={0xb1, {{0xa, 0x0, 0x0, @mcast2}}}, 0x90) 01:09:22 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") mknod(&(0x7f00000010c0)='./file0\x00', 0x0, 0x0) unshare(0x2000400) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) 01:09:22 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000380), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={r0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00') accept(r0, &(0x7f0000000440)=@hci, &(0x7f00000004c0)=0x80) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000800)={{{@in=@loopback, @in=@rand_addr}}, {{}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000640)={0x0, @loopback, @multicast1}, &(0x7f0000000680)=0xc) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f00000007c0)={&(0x7f0000000100), 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x14, r2, 0x0, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000240)={'bond_slave_0\x00?\x00', {0x2, 0x0, @rand_addr}}) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000040)={"626f6e645f736c6176655f3000000002", {0x2, 0x0, @local, [0x0, 0x6000]}}) getpid() r4 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x80000000, 0x541000) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)) ioctl$PPPIOCGMRU(r4, 0x80047453, &(0x7f0000000080)) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x1) 01:09:22 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) fanotify_mark(0xffffffffffffffff, 0x0, 0x40000000, 0xffffffffffffffff, &(0x7f0000000080)='./file0\x00') 01:09:22 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x200000000003e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000000)={{}, {}, 0x401}) [ 180.965529] IPVS: ftp: loaded support on port[0] = 21 [ 180.996485] IPVS: ftp: loaded support on port[0] = 21 [ 181.042313] IPVS: ftp: loaded support on port[0] = 21 [ 181.043004] IPVS: ftp: loaded support on port[0] = 21 [ 181.064190] IPVS: ftp: loaded support on port[0] = 21 [ 181.104042] IPVS: ftp: loaded support on port[0] = 21 [ 181.109067] IPVS: ftp: loaded support on port[0] = 21 [ 181.121424] IPVS: ftp: loaded support on port[0] = 21 [ 183.252366] ip (4921) used greatest stack depth: 53528 bytes left [ 185.290541] ip (5036) used greatest stack depth: 53496 bytes left [ 186.018602] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.025222] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.068909] device bridge_slave_0 entered promiscuous mode [ 186.214450] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.220975] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.272187] device bridge_slave_0 entered promiscuous mode [ 186.298007] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.304573] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.343611] device bridge_slave_0 entered promiscuous mode [ 186.369940] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.376452] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.408200] device bridge_slave_0 entered promiscuous mode [ 186.419768] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.426276] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.438973] device bridge_slave_0 entered promiscuous mode [ 186.449609] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.456204] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.478738] device bridge_slave_1 entered promiscuous mode [ 186.500267] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.506780] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.546428] device bridge_slave_1 entered promiscuous mode [ 186.561446] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.567963] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.594017] device bridge_slave_0 entered promiscuous mode [ 186.626200] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.632733] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.671012] device bridge_slave_0 entered promiscuous mode [ 186.707069] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.713709] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.723184] device bridge_slave_0 entered promiscuous mode [ 186.746723] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.753212] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.787600] device bridge_slave_1 entered promiscuous mode [ 186.800357] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.806946] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.828227] device bridge_slave_1 entered promiscuous mode [ 186.836238] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.842801] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.877833] device bridge_slave_1 entered promiscuous mode [ 186.894703] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 186.910150] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.916682] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.957835] device bridge_slave_1 entered promiscuous mode [ 186.974767] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.981262] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.014127] device bridge_slave_1 entered promiscuous mode [ 187.044283] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 187.055707] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.062190] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.107100] device bridge_slave_1 entered promiscuous mode [ 187.122901] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 187.131539] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 187.153828] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 187.171549] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 187.220840] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 187.335264] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 187.344481] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 187.409225] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 187.417220] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 187.463367] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 187.488959] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 187.551810] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 187.676781] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 187.692517] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 188.166461] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 188.287085] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 188.394709] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 188.421316] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 188.439419] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 188.511306] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 188.535460] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 188.557044] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 188.619218] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 188.710047] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 188.735022] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 188.767343] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 188.787618] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 188.869900] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 188.882514] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 188.889440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 188.912176] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 188.922247] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 188.929172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 189.025125] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 189.068203] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 189.077788] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 189.100700] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 189.107758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 189.135467] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 189.143581] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 189.169822] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 189.177100] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 189.216055] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 189.223041] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 189.283677] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 189.290722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 189.313904] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 189.320979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 189.400103] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 189.407108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 189.421976] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 189.435802] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 189.442897] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 189.466831] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 189.538374] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 189.545392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 189.584079] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 189.606108] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 189.617056] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 189.641211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 189.708214] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 189.715219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 190.222489] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 190.252701] team0: Port device team_slave_0 added [ 190.376960] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 190.390799] team0: Port device team_slave_0 added [ 190.442537] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 190.469161] team0: Port device team_slave_0 added [ 190.486145] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 190.505925] team0: Port device team_slave_0 added [ 190.531543] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 190.570270] team0: Port device team_slave_0 added [ 190.605497] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 190.641469] team0: Port device team_slave_0 added [ 190.659519] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 190.672702] team0: Port device team_slave_0 added [ 190.689385] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 190.707357] team0: Port device team_slave_1 added [ 190.746751] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 190.772883] team0: Port device team_slave_0 added [ 190.788014] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 190.809515] team0: Port device team_slave_1 added [ 190.827484] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 190.854289] team0: Port device team_slave_1 added [ 190.875073] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 190.884453] team0: Port device team_slave_1 added [ 190.950339] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 190.965750] team0: Port device team_slave_1 added [ 190.973468] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 190.999142] team0: Port device team_slave_1 added [ 191.012527] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 191.028280] team0: Port device team_slave_1 added [ 191.039808] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 191.056021] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 191.082215] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 191.125466] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 191.137852] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 191.158262] team0: Port device team_slave_1 added [ 191.174859] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 191.194500] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 191.230551] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 191.238043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 191.267365] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 191.302134] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 191.315476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 191.333939] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 191.370016] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 191.379905] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 191.401273] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 191.414918] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 191.442954] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 191.451276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 191.475720] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 191.496031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 191.511841] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 191.535489] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 191.549268] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 191.567014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 191.578782] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 191.597823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 191.615158] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 191.637775] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 191.645712] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 191.652608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 191.684542] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 191.700842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 191.716826] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 191.734315] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 191.742238] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 191.755398] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 191.769956] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 191.777335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 191.800429] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 191.833852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 191.866350] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 191.886521] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 191.912157] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 191.936930] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 191.952962] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 191.967329] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 191.978763] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 191.994175] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 192.013100] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 192.022442] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 192.049582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 192.068064] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 192.085296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 192.103033] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 192.127887] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 192.137129] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 192.163899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 192.184332] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 192.192935] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 192.205135] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 192.217114] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 192.244053] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 192.268126] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 192.292153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 192.309056] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 192.327768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 192.346145] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 192.357775] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 192.365929] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 192.392037] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 192.401925] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 192.418198] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 192.440867] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 192.467919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 192.496256] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 192.516984] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 192.538755] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 192.547587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 192.562111] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 192.575452] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 192.597606] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 192.607293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 192.629470] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 192.645866] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 192.665196] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 192.676298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 192.696955] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 192.729099] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 192.736758] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 192.764363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 192.777299] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 192.788969] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 192.804916] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 192.850176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 192.879795] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 192.902132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 195.778868] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.785374] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.792243] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.798714] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.871846] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 195.880239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 195.918125] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.924667] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.931555] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.938049] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.986183] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 196.030749] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.037227] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.044072] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.050532] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.133602] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 196.140893] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.147878] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.154858] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.161352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.227286] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 196.260251] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.266768] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.273675] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.280121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.311916] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 196.319832] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.326298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.333199] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.339712] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.381147] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 196.393268] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.399724] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.406587] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.413047] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.456186] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 196.476298] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.482756] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.489710] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.496160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.511781] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 196.884369] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 196.902746] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 196.943524] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 196.974776] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 197.001707] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 197.022717] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 197.038454] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 208.884938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.959570] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.011349] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.033016] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.109397] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.234106] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.280173] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.434001] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.043299] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 210.136185] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 210.169711] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 210.202498] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 210.297684] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 210.469484] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 210.505883] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 210.646263] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 211.231856] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 211.238172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 211.258551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 211.327067] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 211.333429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 211.348486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 211.407345] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 211.430934] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 211.441103] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 211.448569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 211.459242] ip (6383) used greatest stack depth: 53464 bytes left [ 211.466953] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 211.483722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 211.524869] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 211.549251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 211.578961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 211.685260] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 211.691745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 211.707960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 211.938979] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 211.945254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 211.953072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 211.994317] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 212.001034] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 212.025071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 212.441422] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.534939] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.634581] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.659801] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.677939] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.982001] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.047661] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.303904] 8021q: adding VLAN 0 to HW filter on device team0 01:10:03 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r0}], 0x1, 0xfffffffffffffffa) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0xdb34) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000080)) 01:10:03 executing program 5: accept4(0xffffffffffffffff, &(0x7f00000001c0)=@hci, &(0x7f0000000100)=0x80, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000180)='veno\x00', 0x5) sendto$inet6(r1, &(0x7f0000000280), 0xfffffffffffffedd, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty={[0xe00000018020000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd9050000]}}, 0x1c) r2 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000340), &(0x7f0000000180)}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(r2, 0x401104000000016) [ 220.194099] hrtimer: interrupt took 44934 ns [ 220.456868] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 01:10:03 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000380), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={r0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00') accept(r0, &(0x7f0000000440)=@hci, &(0x7f00000004c0)=0x80) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000800)={{{@in=@loopback, @in=@rand_addr}}, {{}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000640)={0x0, @loopback, @multicast1}, &(0x7f0000000680)=0xc) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f00000007c0)={&(0x7f0000000100), 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x14, r2, 0x0, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000240)={'bond_slave_0\x00?\x00', {0x2, 0x0, @rand_addr}}) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000040)={"626f6e645f736c6176655f3000000002", {0x2, 0x0, @local, [0x0, 0x6000]}}) getpid() r4 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x80000000, 0x541000) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)) ioctl$PPPIOCGMRU(r4, 0x80047453, &(0x7f0000000080)) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000cc0)=ANY=[@ANYBLOB="f8ffffffffffffff76106fc0e3ecac0b3231414def0fe44d93fbb6cb71f05e9f40af479543176a8ccc33890fd00e431c9df92aa184815f1659063e3a576b1deab26b8695c5503a0ca8ecc0325279dfd6c30e97dcd5f4da8bffdf9a0c0d8cdcecb3ac385f19f4f7c01c2cf95e7ea8206b85b0fb746e4d295906df88bfe185bd5a37fef58f3ae37c6825903e2444cea6d45821bd1f468df3429865c347a7ff9360ba2ad6901271c53ede5b91cdbed70c36eeaf7641d3825ea154b400000000ffa44d9d79e6a13ab9d7415b9190bed81cb91e78652a50f9be60b67b95fcacb0a7cbd9585fe7af21e37937c6149dff612995813fc7095a7c05b953b7b156cdc10e374d170907681b7480ba5944ece9225919b123f03d58e8a6f680b99617c1780e6ab81ca81ca55b6f1f1335fbfcc00d475b9cbf45bc764997644700b997ce3b083d9c3fc8db206b059f7dd1eb8668246c33eea99c4c19116adf1a11095581a0b1eccb175909927a122b13fe867ef47c645cdb9ae9323075be7228d008bdf85a73c384a65bc9814d8670443c3c684423d2f1707f5171e3d91edd8bc33a3c14261d43108d01d2e196c1933be254255a11fd77e004dde6c0600f68a9df00563618e67d142fb688edac711438ceab0cdbe5f1d8"], 0x1) 01:10:03 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000380), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={r0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00') accept(r0, &(0x7f0000000440)=@hci, &(0x7f00000004c0)=0x80) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000800)={{{@in=@loopback, @in=@rand_addr}}, {{}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000640)={0x0, @loopback, @multicast1}, &(0x7f0000000680)=0xc) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f00000007c0)={&(0x7f0000000100), 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x14, r2, 0x0, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000240)={'bond_slave_0\x00?\x00', {0x2, 0x0, @rand_addr}}) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000040)={"626f6e645f736c6176655f3000000002", {0x2, 0x0, @local, [0x0, 0x6000]}}) getpid() r4 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x80000000, 0x541000) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)) ioctl$PPPIOCGMRU(r4, 0x80047453, &(0x7f0000000080)) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x1) 01:10:03 executing program 5: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x80000000006, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0xfa) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b0001020000000000400000000000"], 0x10}}, 0x0) sendmsg$key(r0, &(0x7f00000040c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 01:10:03 executing program 6: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f0000000280)) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_vs\x00') getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e22, 0x0, @local, 0x7f4001c4}}}, &(0x7f0000000000)=0x84) syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x3, 0xc080) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000380)={r1, @in={{0x2, 0x4e22, @multicast1}}, 0x1, 0x101}, &(0x7f0000000040)=0x88) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000140)) preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 01:10:04 executing program 7: syz_emit_ethernet(0xfe4b, &(0x7f0000000140)={@broadcast, @broadcast, [{}]}, &(0x7f0000000040)) 01:10:04 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000200)="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") preadv(r0, &(0x7f00000008c0)=[{&(0x7f0000000140)=""/173, 0xad}], 0x1, 0x0) 01:10:04 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000080)={'filter\x00', 0x0, 0x3, 0xfffffefb, [], 0x21c, &(0x7f0000000040), &(0x7f0000000200)=""/4096}, &(0x7f0000000140)=0x108) 01:10:04 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r1, 0x40000000af01, &(0x7f0000000300)) readv(r1, &(0x7f00000014c0)=[{&(0x7f0000001400)=""/168, 0xa8}], 0x1) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r2) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000f1dff8)={0x0, r2}) [ 221.354729] kernel msg: ebtables bug: please report to author: Nentries wrong 01:10:04 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000380), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={r0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00') accept(r0, &(0x7f0000000440)=@hci, &(0x7f00000004c0)=0x80) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000800)={{{@in=@loopback, @in=@rand_addr}}, {{}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000640)={0x0, @loopback, @multicast1}, &(0x7f0000000680)=0xc) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f00000007c0)={&(0x7f0000000100), 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x14, r2, 0x0, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000240)={'bond_slave_0\x00?\x00', {0x2, 0x0, @rand_addr}}) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000040)={"626f6e645f736c6176655f3000000002", {0x2, 0x0, @local, [0x0, 0x6000]}}) getpid() r4 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x80000000, 0x541000) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)) ioctl$PPPIOCGMRU(r4, 0x80047453, &(0x7f0000000080)) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x1) 01:10:04 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0}) ppoll(&(0x7f0000000240)=[{}], 0x1, &(0x7f0000000100)={r1}, &(0x7f0000000280), 0x8) close(r0) 01:10:04 executing program 5: pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) sched_setscheduler(0x0, 0x5, &(0x7f0000000000)) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x4}) 01:10:04 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x3) ioctl$TCFLSH(r1, 0x5437, 0x0) 01:10:04 executing program 0: creat(&(0x7f0000000000)='./file0\x00', 0x0) listxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/100, 0xffffffffffffff89) 01:10:04 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) fanotify_mark(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000080)='./file0\x00') 01:10:04 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x200000005, &(0x7f0000000200)) r1 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x800003, 0x200000) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000001c0)) clock_getres(0x0, &(0x7f0000000140)) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000000)={{{@in=@multicast2, @in6=@local}}, {{@in6=@dev}, 0x0, @in=@remote}}, &(0x7f0000000100)=0xe8) 01:10:04 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0x0, 0x20000003, &(0x7f00000000c0)={0x2, 0x1000004e23, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='veth1_to_bond\x00', 0x10) r1 = memfd_create(&(0x7f0000000200)='Pev ', 0x0) ftruncate(r1, 0x200739) sendfile(r0, r1, &(0x7f0000000040)=0xffffe, 0xa00004000000002) 01:10:04 executing program 7: clone(0x200, &(0x7f0000000280), &(0x7f0000744000), &(0x7f0000001880), &(0x7f0000001900)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000540), &(0x7f00000006c0)) r0 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), &(0x7f0000000480)}}, &(0x7f00000000c0)) open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000000140)) tkill(r0, 0x1000000000016) open$dir(&(0x7f0000000180)='./file0\x00', 0x27e, 0x0) 01:10:04 executing program 5: openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ppoll(&(0x7f00000002c0), 0x2000000000000053, &(0x7f0000000340), &(0x7f0000000380)={0x3}, 0x8) 01:10:04 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = getpid() r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") sched_setscheduler(r0, 0x5, &(0x7f0000000200)) getresuid(&(0x7f0000000080), 0x0, &(0x7f00000000c0)) 01:10:04 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x840000000003, 0x2) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000000040), 0x4) setsockopt$inet_int(r0, 0x0, 0x40000000000c9, &(0x7f0000000140), 0x4) 01:10:04 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000640)={&(0x7f0000000040), 0xc, &(0x7f0000000600)={&(0x7f00000002c0)=ANY=[@ANYBLOB="00000000000000001c0012000c00010067726574617000000c00420008000300000000000f63a11028c867178983e8c43cd9ff26484554f4c0b9387aa1c48702694a46cf30bb81424045103e2ac49c93db8c8a013e"], 0x1}}, 0x0) 01:10:04 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000000200), 0x0, 0x20000003, &(0x7f00000000c0)={0x2, 0x1000004e23, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='veth1_to_bond\x00', 0x10) r2 = memfd_create(&(0x7f0000000200)='Pev ', 0x0) ftruncate(r2, 0x200739) sendfile(r1, r2, &(0x7f0000000040)=0xffffe, 0xa00004000000002) 01:10:04 executing program 2: syz_emit_ethernet(0x2a, &(0x7f0000000080)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @broadcast}, @igmp={0x11, 0x0, 0x0, @multicast2}}}}}, &(0x7f000071f000)) 01:10:05 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) 01:10:05 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000240), 0x10, &(0x7f0000000580)}, 0x0) 01:10:05 executing program 4: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) 01:10:05 executing program 0: r0 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000200), &(0x7f0000000740)='&', 0x1, 0xffffffffffffffff) keyctl$revoke(0x3, r0) 01:10:05 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ipv6_route\x00') preadv(r0, &(0x7f0000000480)=[{&(0x7f0000003680)=""/4096, 0x1000}], 0x1, 0x0) 01:10:05 executing program 6: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000200)) 01:10:05 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000340)={'vcan0\x00', 0x0}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f00000003c0)=0x800, 0x4) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r2, &(0x7f0000000300)={0x2c, 0x0, r1}, 0x10) sendmsg$xdp(r2, &(0x7f0000000600)={&(0x7f0000000240), 0x10, &(0x7f0000000580)}, 0x0) 01:10:05 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, &(0x7f00000000c0), 0x0) sendto$unix(r2, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) 01:10:05 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000180)='veno\x00', 0x5) sendto$inet6(r1, &(0x7f0000000280), 0xfffffffffffffedd, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty={[0xe00000018020000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd9050000]}}, 0x1c) r2 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000340), &(0x7f0000000180)}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(r2, 0x401104000000016) 01:10:05 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") fcntl$setstatus(r0, 0x4, 0x443fc) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x106}}, 0x20) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) 01:10:05 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xd1, &(0x7f0000000000)=0x9, 0x4) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) 01:10:05 executing program 5: 01:10:05 executing program 6: 01:10:05 executing program 3: 01:10:05 executing program 2: 01:10:06 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") fcntl$setstatus(r0, 0x4, 0x443fc) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x106}}, 0x20) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) 01:10:06 executing program 4: 01:10:06 executing program 1: 01:10:06 executing program 5: 01:10:06 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x40000000000002bd, &(0x7f0000000080)=[&(0x7f0000ffc000/0x2000)=nil], 0x0, &(0x7f0000000000), 0x0) 01:10:06 executing program 3: 01:10:06 executing program 6: 01:10:06 executing program 2: 01:10:06 executing program 4: 01:10:06 executing program 3: 01:10:06 executing program 1: 01:10:06 executing program 7: 01:10:06 executing program 5: 01:10:06 executing program 6: 01:10:06 executing program 2: 01:10:06 executing program 3: 01:10:06 executing program 4: 01:10:06 executing program 7: 01:10:06 executing program 5: 01:10:06 executing program 6: 01:10:08 executing program 7: 01:10:08 executing program 0: 01:10:08 executing program 1: 01:10:08 executing program 2: 01:10:08 executing program 3: 01:10:08 executing program 5: 01:10:08 executing program 6: 01:10:08 executing program 4: 01:10:08 executing program 2: 01:10:08 executing program 4: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b38000)=0x3c) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000380)=""/159, 0x9f}], 0x1) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) fcntl$setown(r2, 0x8, r0) tkill(r0, 0x13) 01:10:08 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x2) readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/180, 0xb4}], 0x1) dup3(r2, r1, 0x0) 01:10:08 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='\x00\x00\x00\x00\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r1 = openat$cgroup_ro(r0, &(0x7f0000000000)="6d656d00017937737761532e63757289c942abe3fa72656e7400", 0x0, 0x0) preadv(r1, &(0x7f0000000380)=[{&(0x7f0000000300)=""/81, 0x51}], 0x231, 0x2000107d) 01:10:09 executing program 3: socket(0x0, 0x0, 0x0) shmget(0x0, 0x1000, 0xfff, &(0x7f0000ffd000/0x1000)=nil) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r0, 0x16, &(0x7f0000000200)) 01:10:09 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x78000) 01:10:09 executing program 1: mkdir(&(0x7f00000006c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x4000200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0xf3, &(0x7f0000000380), &(0x7f0000000280)=""/243, 0x0, 0x8}, 0x28) mount(&(0x7f0000000400)=ANY=[], &(0x7f0000343ff8)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 01:10:09 executing program 6: 01:10:09 executing program 2: 01:10:09 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000005c0)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000e000000044651dfbd0a63000000f003000020020000200200000000000020020000200200005803000058030000580300005803000058"], 0x1) 01:10:09 executing program 5: r0 = socket$inet6(0xa, 0x201000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000200)) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000001c0)={'syz_tun\x00', &(0x7f0000000080)=@ethtool_rxfh_indir={0x43}}) 01:10:09 executing program 6: r0 = socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x7, 0x2}, 0x14) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) 01:10:09 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() r1 = socket$inet6(0xa, 0x3, 0xcc) ioctl(r1, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") sched_setscheduler(r0, 0x5, &(0x7f0000000200)) sysinfo(&(0x7f00000000c0)=""/71) 01:10:09 executing program 1: mkdir(&(0x7f00000006c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x4000200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0xf3, &(0x7f0000000380), &(0x7f0000000280)=""/243, 0x0, 0x8}, 0x28) mount(&(0x7f0000000400)=ANY=[], &(0x7f0000343ff8)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 01:10:09 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CLR_FD(r1, 0x4c01) write$binfmt_script(r0, &(0x7f0000000240)={'#! ', './file0', [{0x20, 'cgroup^vboxnet1nodevl!]keyringuservmnet0+#'}, {0x20, "74086e750000000000000000008c00"}, {0x20, '/,em0self'}], 0xa, "5fdf74a9909284c1b35e00ae6d485838f2feb72f512f1ad30638f78b8bdecb041b749a7d35b0d2d4ed4203efd79a665006db6821f0e074c818823d7f6c2cd70c5fea7510f8f1c01f4176f1b23ea3a143d35f96c81c93fdf971305c9867ce0539c5cdd715eab3e7fd7699f52f4817bda0825d57a6438c5cc53d86adf75a576b8696249bc0aaacb52ee38cbd8e4384ec6ccfb4e1efa646bd1c3c846f"}, 0xeb) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r0, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 01:10:09 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000280), 0xfffffffffffffedd, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty={[0xe00000018020000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd9050000]}}, 0x1c) r2 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000340), &(0x7f0000000180)}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(r2, 0x401104000000016) 01:10:09 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f00000002c0)='./control\x00', 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f00007a7000)='./control\x00', 0xa4000960) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./control\x00', 0x200000, 0x0) 01:10:12 executing program 4: r0 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r0, &(0x7f0000f50f90)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000f3eff0)="01010000000ef40000000300409d9254", 0x10) r2 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYRES64], 0x1}}, 0x8010) sendfile(r2, r0, &(0x7f0000000100), 0x1) 01:10:12 executing program 7: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000080)=ANY=[@ANYBLOB="fcff240000000000"]) unshare(0x40000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001300)={0xffffffffffffffff}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000), 0x0, &(0x7f0000000040)}, 0x0) recvmmsg(r1, &(0x7f0000004100), 0x2a37, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r2, 0x20000) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x40000, 0x0) setsockopt$inet6_tcp_buf(r2, 0x6, 0xb, &(0x7f0000000280)="e3480579ce66be29c6cf383274f157128f585e6e6d83d74b21bf1e175e6658bffa2ab4d78380492b6e9859741f517568c99f0802fbb7fa4d5e9e7848d1b5233cacc8f89865ddbee8cbc9c5ce59017b7d72cf3d01b561cde1af6c56bcaea5a5a60163044b93d00f064ac339514ba2cde6e67bb630ef690bc6a0be61a299065502590a3a99779ab1c85b31cc680faaf4cace82b50d212a739d173de2d11c96838e", 0xa0) write$P9_RLCREATE(r3, &(0x7f0000000240)={0x18, 0xf, 0x1, {{0x7173101d437fb0e7, 0x2, 0x4}, 0x22}}, 0x18) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r3, 0x28, 0x2, &(0x7f0000000040)=0x800, 0x8) creat(&(0x7f0000000080)='./file0\x00', 0x0) r4 = socket$inet(0x10, 0x3, 0x4) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf3", 0x43}], 0x1}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000140)=0x14) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r3, 0x800455d1, &(0x7f00000000c0)) 01:10:12 executing program 1: r0 = socket$inet(0x10, 0x2000000000003, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000030607031dfffd946fa2830020200a0009000100061d85680c1baba204007f7e", 0x24}], 0x1}, 0x0) 01:10:12 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000140)={@mcast2}, 0x14) 01:10:12 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) r0 = gettid() exit(0x0) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/user\x00') get_robust_list(0x0, &(0x7f0000000280)=&(0x7f0000000240)={&(0x7f0000000100)={&(0x7f0000000080)}, 0x0, &(0x7f0000000200)={&(0x7f0000000140)}}, &(0x7f00000002c0)=0xc) prctl$setptracer(0x59616d61, r0) getpid() sched_setscheduler(0x0, 0x0, &(0x7f0000000040)) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000240)=ANY=[], 0x0) 01:10:12 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000002c80)=[{{&(0x7f0000001980)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000002000)=[{&(0x7f0000001a00)=""/212, 0xd4}], 0x1, &(0x7f0000002080)=""/153, 0x99}}], 0x1, 0x1, &(0x7f0000002dc0)={0x77359400}) r0 = syz_open_procfs(0x0, &(0x7f00000015c0)='mounts\x00') preadv(r0, &(0x7f00000017c0), 0x1d0, 0x0) 01:10:12 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000100)='cgroup.type\x00', 0x2, 0x0) readv(r2, &(0x7f0000001580)=[{&(0x7f0000000240)=""/230, 0xe6}], 0x1) 01:10:12 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x78000) [ 229.078392] netlink: 'syz-executor1': attribute type 1 has an invalid length. 01:10:12 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x201000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000080)={'filter\x00', 0x0, 0x3, 0xfffffefb, [], 0x21c, &(0x7f0000000040), &(0x7f0000000200)=""/4096}, &(0x7f0000000140)=0x108) 01:10:12 executing program 6: [ 229.207358] IPVS: ftp: loaded support on port[0] = 21 01:10:12 executing program 3: 01:10:12 executing program 1: 01:10:12 executing program 4: [ 229.390984] kernel msg: ebtables bug: please report to author: Nentries wrong [ 229.467314] kernel msg: ebtables bug: please report to author: Nentries wrong 01:10:12 executing program 5: 01:10:12 executing program 6: 01:10:12 executing program 4: 01:10:12 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ppoll(&(0x7f0000000240)=[{}], 0x1, &(0x7f0000000100)={r2, r3+10000000}, &(0x7f0000000280), 0x8) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) close(r1) [ 230.047062] IPVS: ftp: loaded support on port[0] = 21 01:10:13 executing program 7: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000080)=ANY=[@ANYBLOB="fcff240000000000"]) unshare(0x40000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001300)={0xffffffffffffffff}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000), 0x0, &(0x7f0000000040)}, 0x0) recvmmsg(r1, &(0x7f0000004100), 0x2a37, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r2, 0x20000) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x40000, 0x0) setsockopt$inet6_tcp_buf(r2, 0x6, 0xb, &(0x7f0000000280)="e3480579ce66be29c6cf383274f157128f585e6e6d83d74b21bf1e175e6658bffa2ab4d78380492b6e9859741f517568c99f0802fbb7fa4d5e9e7848d1b5233cacc8f89865ddbee8cbc9c5ce59017b7d72cf3d01b561cde1af6c56bcaea5a5a60163044b93d00f064ac339514ba2cde6e67bb630ef690bc6a0be61a299065502590a3a99779ab1c85b31cc680faaf4cace82b50d212a739d173de2d11c96838e", 0xa0) write$P9_RLCREATE(r3, &(0x7f0000000240)={0x18, 0xf, 0x1, {{0x7173101d437fb0e7, 0x2, 0x4}, 0x22}}, 0x18) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r3, 0x28, 0x2, &(0x7f0000000040)=0x800, 0x8) creat(&(0x7f0000000080)='./file0\x00', 0x0) r4 = socket$inet(0x10, 0x3, 0x4) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf3", 0x43}], 0x1}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000140)=0x14) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r3, 0x800455d1, &(0x7f00000000c0)) 01:10:13 executing program 3: 01:10:13 executing program 4: 01:10:13 executing program 1: 01:10:13 executing program 5: 01:10:13 executing program 2: 01:10:13 executing program 6: 01:10:13 executing program 0: 01:10:13 executing program 0: 01:10:13 executing program 4: 01:10:14 executing program 2: 01:10:14 executing program 1: 01:10:14 executing program 5: 01:10:14 executing program 6: 01:10:14 executing program 3: 01:10:14 executing program 0: [ 231.423597] IPVS: ftp: loaded support on port[0] = 21 01:10:14 executing program 7: 01:10:14 executing program 4: 01:10:14 executing program 3: 01:10:14 executing program 6: 01:10:14 executing program 2: 01:10:14 executing program 5: 01:10:14 executing program 1: 01:10:14 executing program 0: 01:10:14 executing program 6: 01:10:14 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000200)) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r0, r0, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 01:10:15 executing program 2: r0 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x11}}}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ipv6_route\x00') sendfile(r0, r1, &(0x7f0000000040), 0x88001) 01:10:15 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) timerfd_settime(0xffffffffffffffff, 0x10000, &(0x7f0000000080)={{0x77359400}}, &(0x7f0000000140)) 01:10:15 executing program 4: prlimit64(0x0, 0x0, &(0x7f0000000180), &(0x7f0000000040)) 01:10:15 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='\x00\x00\x00\x00\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r1 = openat$cgroup_ro(r0, &(0x7f0000000000)="6d656d00017937737761532e63757289c942abe3fa72656e7400", 0x0, 0x0) preadv(r1, &(0x7f0000000380)=[{&(0x7f0000000300)=""/81, 0x51}], 0x19f, 0x2000107d) 01:10:15 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = getpid() r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") sched_setscheduler(r0, 0x5, &(0x7f0000000200)) getresuid(&(0x7f0000000080), 0x0, &(0x7f00000000c0)) setuid(0x0) 01:10:15 executing program 7: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b38000)=0x3c) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000380)=""/159, 0x9f}], 0x1) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8) dup2(r1, r2) fcntl$setown(r2, 0x8, r0) tkill(r0, 0x13) 01:10:15 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x40, 0x80) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000300)={0x28, 0x2, 0x0, {0x1, 0x23e9, 0xa35}}, 0x28) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="a0000000a19bd183290d2a6eb06a91cb09683a9446af565986249bc0127772e726d7f0f95c12ab3565e0a038c345415aec8e6fa9a1214d8f695dcd6d6dbc38cad5a8fd18949e63feb1bb3353479a7577bd4afa4d5f5e46b0178b4b0ff0e909f516d595774605662e253c5883b70b57d7fb9458030b35516b0f3c13fb51cb2841664d63b1e7d14254a3b8235787704cbe57b2168ace3d1dd8dc254d4bc16c8e1436b925cc0ce8"], &(0x7f00000000c0)=0xa8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000240)={0xe0a, 0x0, 0x10001, 0x19fe, r2}, &(0x7f0000000280)=0x10) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000380)={'team_slave_1\x00', {0x2, 0x4e20, @local}}) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f00000002c0)={0x6, 0x9, 0x101, 0x20}) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000080)={0x0, 0x7530}, 0x10) r3 = accept4(r0, &(0x7f0000000100)=@hci, &(0x7f0000000000)=0xfffffffffffffdb7, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000340)={'veth0\x00', {0x2, 0x4e22, @broadcast}}) 01:10:15 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x6, 0x4, 0x2ed3, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000000)="6377530cf6569f0d673a1340a9968391bffb749388fe957d", &(0x7f0000000080)="c0d7ab0af3a76f1d91f16e2d07f3173b384387fe170819eeeddd1f014239f55fc4f43444bab6e3fdb53d95fd4ad2c1a315285ac90d2c80f3"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f0000000000), &(0x7f00000000c0), 0x3}, 0x20) 01:10:15 executing program 1: creat(&(0x7f0000000140)='./file0\x00', 0x84) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x206000, &(0x7f0000000300)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 01:10:15 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x80000000, 0x50000) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0xfc000000000000, 0x401, 0x7, 0xfffffffffffffff7, 0x1}, &(0x7f0000000100)=0x14) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={r2, 0x5}, 0x8) perf_event_open(&(0x7f0000c86f88)={0x2, 0x232, 0xf2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000200)={&(0x7f0000000500), 0xc, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000002c00051000f9f7ffff0000000300000060000000"], 0x18}}, 0x0) 01:10:15 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x80000000, 0x50000) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0xfc000000000000, 0x401, 0x7, 0xfffffffffffffff7, 0x1}, &(0x7f0000000100)=0x14) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={r2, 0x5}, 0x8) perf_event_open(&(0x7f0000c86f88)={0x2, 0x232, 0xf2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000200)={&(0x7f0000000500), 0xc, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000002c00051000f9f7ffff0000000300000060000000"], 0x18}}, 0x0) 01:10:16 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f75705f693790", @ANYRESDEC=0x0, @ANYBLOB=',allow_other,\x00']) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x200000, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000280)='/dev/snd/pcmC#D#p\x00', 0x1, 0x5c101) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000340), &(0x7f0000000380)=0x4) fanotify_mark(r1, 0x40, 0x10, r2, &(0x7f00000002c0)='./file0\x00') r3 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x9, 0x4c000) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f00000000c0)={0x1, r0}) llistxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)=""/174, 0xffffff9c) 01:10:16 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000080)=0x101, 0x10000025e) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) bind$inet6(r1, &(0x7f0000cb8fe4)={0xa, 0x4e20, 0x0, @ipv4={[], [], @remote}}, 0x47) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f00000000c0)=0x6, 0x4) listen(r0, 0x0) 01:10:16 executing program 1: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000000)={0x33, 0x6, 0x0, {0x0, 0x0, 0xa, 0x0, '/dev/fuse\x00'}}, 0x33) mount(&(0x7f0000000000)=ANY=[@ANYBLOB="cf80be33110c8de0276c04f74bdd8d1fb960ed27299be30f98d5b3ec51d3f65a6779c9a175c9b049844116d939d3dc9a75f919bf7ea8eb8c2e0210f41d548fb6d5fae8458e54931c863e403f5d477bd111bced5741cb2b51"], &(0x7f0000001480)='./file0\x00', &(0x7f00000014c0)='reiserfs\x00', 0x0, 0x0) 01:10:16 executing program 6: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000080)="1042ab6141abce3188e4ac2dff81513311197244f67ca1f1d6ec4a07e6fd1eb9474383", 0x23, 0xfffffffffffffffa) keyctl$invalidate(0x15, r0) r1 = semget$private(0x0, 0x1, 0x2) semctl$IPC_RMID(r1, 0x0, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f00000001c0)) semctl$SEM_INFO(r1, 0x40000000001007, 0x13, &(0x7f00000000c0)=""/185) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0xffff) [ 365.583918] watchdog: BUG: soft lockup - CPU#1 stuck for 123s! [syz-executor5:7346] [ 365.591818] Modules linked in: [ 365.595061] CPU: 1 PID: 7346 Comm: syz-executor5 Not tainted 4.19.0-rc1+ #40 [ 365.602269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 365.611695] RIP: 0010:__sanitizer_cov_trace_pc+0x15/0x50 [ 365.617204] Code: 41 5d 41 5e 41 5f 5d c3 90 90 90 90 90 90 90 90 90 90 90 90 90 48 8b 04 24 65 48 8b 0c 25 80 fc 02 00 65 8b 14 25 94 fc 02 00 c2 00 01 1f 00 75 2c 8b 91 c0 18 00 00 83 fa 02 75 21 48 8b 91 [ 365.636831] RSP: 0018:ffff8801bde9f2d8 EFLAGS: 00000202 ORIG_RAX: ffffffffffffff13 [ 365.644584] RAX: ffffffff815412f5 RBX: 0000000000000001 RCX: ffff8801c0d53b00 [ 365.651880] RDX: 0000000000000000 RSI: aaaaaaaaaaaab000 RDI: ffffea000a737ba0 [ 365.659264] RBP: ffff8801bde9f3c0 R08: 0000000000000000 R09: 0000000000000002 [ 365.666574] R10: 0000000000000000 R11: ffffffff81179950 R12: ffff8801bde9f358 [ 365.673892] R13: 0000000000000000 R14: 0000000000000000 R15: ffff8801c0d54400 [ 365.681232] FS: 0000000000fe4940(0000) GS:ffff88021fd00000(0000) knlGS:0000000000000000 [ 365.689495] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 365.695394] CR2: 00007f858e6b23d0 CR3: 000000013d29a000 CR4: 00000000001406e0 [ 365.702699] Call Trace: [ 365.705364] ? smp_call_function_single+0x365/0x4e0 [ 365.710488] ? has_bh_in_lru+0x520/0x520 [ 365.714587] ? has_bh_in_lru+0x520/0x520 [ 365.718681] ? cpumask_next_and+0xa9/0xc0 [ 365.722887] smp_call_function_many+0x658/0xdb0 [ 365.727631] ? find_next_bit+0x25b/0x2a0 [ 365.731767] ? has_bh_in_lru+0x520/0x520 [ 365.735919] ? has_bh_in_lru+0x520/0x520 [ 365.740046] on_each_cpu_cond+0x322/0x3f0 [ 365.744269] ? invalidate_bh_lrus+0x60/0x60 [ 365.748636] ? has_bh_in_lru+0x520/0x520 [ 365.752789] invalidate_bh_lrus+0x54/0x60 [ 365.757002] __blkdev_put+0x460/0xc90 [ 365.760891] ? __msan_get_context_state+0x9/0x30 [ 365.765737] ? mutex_unlock+0x15/0x80 [ 365.769607] blkdev_put+0x431/0x560 [ 365.773273] blkdev_close+0xa6/0xf0 [ 365.776968] ? blkdev_open+0x490/0x490 [ 365.780925] __fput+0x4cf/0xc20 [ 365.784253] ? fput+0x2e0/0x2e0 [ 365.787576] ____fput+0x37/0x40 [ 365.790931] task_work_run+0x22e/0x2b0 [ 365.794889] do_exit+0x10ee/0x3890 [ 365.798526] do_group_exit+0x1a0/0x350 [ 365.802454] get_signal+0x1425/0x1ef0 [ 365.806379] do_signal+0x11d/0x2060 [ 365.810104] ? __schedule+0x680/0x760 [ 365.813982] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 365.819422] ? schedule+0x1e0/0x2d0 [ 365.823139] prepare_exit_to_usermode+0x273/0x410 [ 365.828058] syscall_return_slowpath+0xdb/0x700 [ 365.832781] do_syscall_64+0xde/0x100 [ 365.836622] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 365.841850] RIP: 0033:0x457099 [ 365.845084] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 365.864020] RSP: 002b:0000000000a3fc18 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 365.871771] RAX: 0000000000000001 RBX: 00000000000007ff RCX: 0000000000457099 [ 365.879084] RDX: 0000000000000000 RSI: 0000000000000081 RDI: 00000000009300a8 [ 365.886381] RBP: 00000000009300a0 R08: 0000000000000000 R09: ffffffffffffffff [ 365.893680] R10: 00000000009300a0 R11: 0000000000000246 R12: 00000000009300ac [ 365.900985] R13: 00000000009300ac R14: 0000000000000003 R15: 0000000000000000 [ 365.908309] Sending NMI from CPU 1 to CPUs 0: [ 365.912885] ------------[ cut here ]------------ [ 365.917665] kernel BUG at mm/kmsan/kmsan_entry.c:81! [ 365.922804] invalid opcode: 0000 [#1] SMP PTI [ 365.927309] CPU: 0 PID: 7352 Comm: syz-executor2 Not tainted 4.19.0-rc1+ #40 [ 365.934496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 365.943870] RIP: 0010:kmsan_nmi_enter+0x42/0x70 [ 365.948549] Code: 00 74 27 65 8b 04 25 40 92 03 00 83 c0 01 83 f8 08 7d 27 65 89 04 25 40 92 03 00 65 c6 04 25 d5 6f 0b 00 ff c3 0f 0b 90 eb fe <0f> 0b 66 90 66 2e 0f 1f 84 00 00 00 00 00 eb fe 0f 0b 66 90 66 2e [ 365.967460] RSP: 0018:fffffe000000eea8 EFLAGS: 00010046 [ 365.972840] RAX: 0000000000000200 RBX: 0000000000000001 RCX: 00000000c0000101 [ 365.980115] RDX: 00000000ffff8802 RSI: ffffffff8900136c RDI: ffff880124279000 [ 365.987388] RBP: fffffe000000eef9 R08: 0000000000000000 R09: 0000000000000000 [ 365.994661] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 366.001944] R13: 0000000000000000 R14: 00000001238b6000 R15: 0000000000000000 [ 366.009253] FS: 00007fb5e3a98700(0000) GS:ffff88021fc00000(0000) knlGS:0000000000000000 [ 366.017495] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 366.023399] CR2: 00007ffffd8e4a09 CR3: 00000001238b6000 CR4: 00000000001406f0 [ 366.030705] Call Trace: [ 366.033302] [ 366.035478] ? end_repeat_nmi+0x19/0x8e [ 366.039468] ? end_repeat_nmi+0x7/0x8e [ 366.043446] ? kmsan_memmove_origins+0xcf/0x1d0 [ 366.048144] ? kmsan_memmove_origins+0xcf/0x1d0 [ 366.052833] ? kmsan_memmove_origins+0xcf/0x1d0 [ 366.057519] [ 366.059779] ? __msan_memmove+0xc3/0x130 [ 366.063869] ? widen_string+0x580/0x6c0 [ 366.067871] ? string+0x32a/0x340 [ 366.071350] ? vsnprintf+0x10aa/0x31a0 [ 366.075283] ? seq_printf+0x2cb/0x460 [ 366.079114] ? seq_puts+0x23c/0x2a0 [ 366.082774] ? ipv6_route_seq_show+0x431/0x520 [ 366.087387] ? seq_read+0x1404/0x1e80 [ 366.091213] ? ipv6_route_seq_stop+0x400/0x400 [ 366.095820] ? ipv6_route_seq_next+0x11d0/0x11d0 [ 366.100607] ? seq_open+0x390/0x390 [ 366.104245] ? proc_reg_read+0x296/0x3c0 [ 366.108332] ? do_iter_read+0xb87/0xe20 [ 366.112325] ? proc_reg_llseek+0x320/0x320 [ 366.116598] ? vfs_readv+0x1d9/0x250 [ 366.120354] ? default_file_splice_read+0xaa0/0x1120 [ 366.125532] ? __ia32_sys_tee+0x160/0x160 [ 366.129708] ? splice_direct_to_actor+0x4af/0xfb0 [ 366.134566] ? do_splice_direct+0x540/0x540 [ 366.138932] ? do_splice_direct+0x332/0x540 [ 366.143288] ? do_sendfile+0x1070/0x1d80 [ 366.147887] ? __se_sys_sendfile64+0x1c2/0x380 [ 366.152495] ? __x64_sys_sendfile64+0x56/0x70 [ 366.157017] ? do_syscall_64+0xb8/0x100 [ 366.161015] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 366.166394] Modules linked in: [ 366.169597] Dumping ftrace buffer: [ 366.173138] (ftrace buffer empty) [ 366.176865] ---[ end trace 3afef9ec937d137d ]--- [ 366.181651] RIP: 0010:kmsan_nmi_enter+0x42/0x70 [ 366.186338] Code: 00 74 27 65 8b 04 25 40 92 03 00 83 c0 01 83 f8 08 7d 27 65 89 04 25 40 92 03 00 65 c6 04 25 d5 6f 0b 00 ff c3 0f 0b 90 eb fe <0f> 0b 66 90 66 2e 0f 1f 84 00 00 00 00 00 eb fe 0f 0b 66 90 66 2e [ 366.205279] RSP: 0018:fffffe000000eea8 EFLAGS: 00010046 [ 366.210656] RAX: 0000000000000200 RBX: 0000000000000001 RCX: 00000000c0000101 [ 366.217944] RDX: 00000000ffff8802 RSI: ffffffff8900136c RDI: ffff880124279000 [ 366.225265] RBP: fffffe000000eef9 R08: 0000000000000000 R09: 0000000000000000 [ 366.232541] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 366.239823] R13: 0000000000000000 R14: 00000001238b6000 R15: 0000000000000000 [ 366.247111] FS: 00007fb5e3a98700(0000) GS:ffff88021fc00000(0000) knlGS:0000000000000000 [ 366.255346] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 366.261235] CR2: 00007ffffd8e4a09 CR3: 00000001238b6000 CR4: 00000000001406f0 [ 366.268510] Kernel panic - not syncing: Fatal exception in interrupt [ 367.857780] Shutting down cpus with NMI [ 367.861954] ------------[ cut here ]------------ [ 367.866757] kernel BUG at mm/kmsan/kmsan_entry.c:81! [ 367.871922] invalid opcode: 0000 [#2] SMP PTI [ 367.876464] CPU: 1 PID: 7346 Comm: syz-executor5 Tainted: G D 4.19.0-rc1+ #40 [ 367.878036] Dumping ftrace buffer: [ 367.885078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 367.888626] (ftrace buffer empty) [ 367.898030] RIP: 0010:kmsan_nmi_enter+0x42/0x70 [ 367.901719] Kernel Offset: disabled [[ 336767..91910003033]3 ]R eReboboootitingn g iin n 886640400 0 sescecoonnddss... . 92 03 00 83 c0 01 83 f8 08 7d 27 65 89 04 25 40 92 03 00 65 c6 04 25 d5 6f 0b 00 ff c3 0f 0b 90 eb fe <0f> 0b 66 90 66 2e 0f 1f 84 00 00 00 00 00 eb fe 0f 0b 66 90 66 2e [ 367.933061] RSP: 0018:fffffe0000049ea8 EFLAGS: 00010046 [ 367.938468] RAX: 0000000000010000 RBX: 0000000000000001 RCX: 00000000c0000101 [ 367.945778] RDX: 00000000ffff8802 RSI: ffffffff8900136c RDI: 0000000000231789 [ 367.953089] RBP: fffffe0000049ef9 R08: 0000000000000000 R09: 0000000000000000 [ 367.960393] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 367.967711] R13: 0000000000000000 R14: 000000013d29a000 R15: 0000000000000000 [ 367.975025] FS: 0000000000fe4940(0000) GS:ffff88021fd00000(0000) knlGS:0000000000000000 [ 367.983373] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 367.989289] CR2: 00007f858e6b23d0 CR3: 000000013d29a000 CR4: 00000000001406e0 [ 367.996586] Call Trace: [ 367.999248] [ 368.001453] ? end_repeat_nmi+0x19/0x8e [ 368.005482] ? end_repeat_nmi+0x7/0x8e [ 368.009416] ? delay_loop+0x50/0x50 [ 368.013120] ? delay_tsc+0xaa/0xe0 [ 368.016713] ? delay_tsc+0xaa/0xe0 [ 368.020295] ? delay_tsc+0xaa/0xe0 [ 368.023872] [ 368.026125] [ 368.028312] ? delay_loop+0x50/0x50 [ 368.032052] ? __const_udelay+0xb2/0xe0 [ 368.036117] ? nmi_trigger_cpumask_backtrace+0x2c9/0x460 [ 368.041618] ? arch_trigger_cpumask_backtrace+0x40/0x40 [ 368.047032] ? arch_trigger_cpumask_backtrace+0x2c/0x40 [ 368.052491] ? watchdog_timer_fn+0x737/0x810 [ 368.056995] ? proc_watchdog_cpumask+0x200/0x200 [ 368.061805] ? __hrtimer_run_queues+0xbfc/0x15b0 [ 368.066721] ? hrtimer_interrupt+0x458/0x13d0 [ 368.071274] ? __msan_poison_alloca+0x173/0x1f0 [ 368.076014] ? hrtimer_init+0x5b0/0x5b0 [ 368.080044] ? local_apic_timer_interrupt+0x6b/0x250 [ 368.085197] ? smp_apic_timer_interrupt+0x5a/0x90 [ 368.090083] ? apic_timer_interrupt+0xf/0x20 [ 368.094508] [ 368.096837] ? native_apic_mem_read+0x60/0x60 [ 368.101372] ? smp_call_function_single+0x365/0x4e0 [ 368.106438] ? __sanitizer_cov_trace_pc+0x15/0x50 [ 368.111347] ? smp_call_function_single+0x365/0x4e0 [ 368.116498] ? has_bh_in_lru+0x520/0x520 [ 368.120622] ? has_bh_in_lru+0x520/0x520 [ 368.124749] ? cpumask_next_and+0xa9/0xc0 [ 368.128991] ? smp_call_function_many+0x658/0xdb0 [ 368.133967] ? find_next_bit+0x25b/0x2a0 [ 368.138155] ? has_bh_in_lru+0x520/0x520 [ 368.142319] ? has_bh_in_lru+0x520/0x520 [ 368.146462] ? on_each_cpu_cond+0x322/0x3f0 [ 368.151120] ? invalidate_bh_lrus+0x60/0x60 [ 368.155504] ? has_bh_in_lru+0x520/0x520 [ 368.159664] ? invalidate_bh_lrus+0x54/0x60 [ 368.164132] ? __blkdev_put+0x460/0xc90 [ 368.168204] ? __msan_get_context_state+0x9/0x30 [ 368.173052] ? mutex_unlock+0x15/0x80 [ 368.176932] ? blkdev_put+0x431/0x560 [ 368.180787] ? blkdev_close+0xa6/0xf0 [ 368.184696] ? blkdev_open+0x490/0x490 [ 368.188675] ? __fput+0x4cf/0xc20 [ 368.192194] ? fput+0x2e0/0x2e0 [ 368.195530] ? ____fput+0x37/0x40 [ 368.199083] ? task_work_run+0x22e/0x2b0 [ 368.203240] ? do_exit+0x10ee/0x3890 [ 368.207075] ? do_group_exit+0x1a0/0x350 [ 368.211192] ? get_signal+0x1425/0x1ef0 [ 368.215298] ? do_signal+0x11d/0x2060 [ 368.219210] ? __schedule+0x680/0x760 [ 368.223108] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 368.228575] ? schedule+0x1e0/0x2d0 [ 368.232328] ? prepare_exit_to_usermode+0x273/0x410 [ 368.237453] ? syscall_return_slowpath+0xdb/0x700 [ 368.242401] ? do_syscall_64+0xde/0x100 [ 368.246443] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 368.251858] Modules linked in: [ 368.255101] Dumping ftrace buffer: [ 368.258663] (ftrace buffer empty) [ 368.262442] ---[ end trace 3afef9ec937d137e ]--- [ 368.267277] RIP: 0010:kmsan_nmi_enter+0x42/0x70 [ 368.271996] Code: 00 74 27 65 8b 04 25 40 92 03 00 83 c0 01 83 f8 08 7d 27 65 89 04 25 40 92 03 00 65 c6 04 25 d5 6f 0b 00 ff c3 0f 0b 90 eb fe <0f> 0b 66 90 66 2e 0f 1f 84 00 00 00 00 00 eb fe 0f 0b 66 90 66 2e [ 368.290944] RSP: 0018:fffffe000000eea8 EFLAGS: 00010046 [ 368.296355] RAX: 0000000000000200 RBX: 0000000000000001 RCX: 00000000c0000101 [ 368.303670] RDX: 00000000ffff8802 RSI: ffffffff8900136c RDI: ffff880124279000 [ 368.311004] RBP: fffffe000000eef9 R08: 0000000000000000 R09: 0000000000000000 [ 368.318320] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 368.325626] R13: 0000000000000000 R14: 00000001238b6000 R15: 0000000000000000 [ 368.332946] FS: 0000000000fe4940(0000) GS:ffff88021fd00000(0000) knlGS:0000000000000000 [ 368.341213] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 368.347154] CR2: 00007f858e6b23d0 CR3: 000000013d29a000 CR4: 00000000001406e0