[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 74.334782] audit: type=1800 audit(1549651719.402:25): pid=9848 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 74.354008] audit: type=1800 audit(1549651719.402:26): pid=9848 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 74.373397] audit: type=1800 audit(1549651719.402:27): pid=9848 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.133' (ECDSA) to the list of known hosts. 2019/02/08 18:48:52 fuzzer started 2019/02/08 18:48:58 dialing manager at 10.128.0.26:37929 2019/02/08 18:48:58 syscalls: 1 2019/02/08 18:48:58 code coverage: enabled 2019/02/08 18:48:58 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2019/02/08 18:48:58 extra coverage: extra coverage is not supported by the kernel 2019/02/08 18:48:58 setuid sandbox: enabled 2019/02/08 18:48:58 namespace sandbox: enabled 2019/02/08 18:48:58 Android sandbox: /sys/fs/selinux/policy does not exist 2019/02/08 18:48:58 fault injection: enabled 2019/02/08 18:48:58 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/02/08 18:48:58 net packet injection: enabled 2019/02/08 18:48:58 net device setup: enabled 18:51:13 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000380)={0x7b, 0x0, [0x40000002, 0xfff]}) syzkaller login: [ 228.673570] IPVS: ftp: loaded support on port[0] = 21 [ 228.803301] chnl_net:caif_netlink_parms(): no params data found [ 228.865331] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.871875] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.879917] device bridge_slave_0 entered promiscuous mode [ 228.888175] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.894728] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.902852] device bridge_slave_1 entered promiscuous mode [ 228.933097] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 228.943891] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 228.970732] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 228.979126] team0: Port device team_slave_0 added [ 228.985301] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 228.993681] team0: Port device team_slave_1 added [ 228.999627] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 229.007896] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 229.135983] device hsr_slave_0 entered promiscuous mode [ 229.292157] device hsr_slave_1 entered promiscuous mode [ 229.552803] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 229.560255] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 229.586897] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.593405] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.600496] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.607025] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.685046] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 229.691179] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.704733] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 229.717513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 229.727419] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.736781] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.746602] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 229.764052] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 229.770171] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.785408] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 229.793605] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.800049] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.813632] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 229.825831] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 229.834546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 229.843129] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 229.851202] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.857779] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.865399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 229.885382] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 229.892440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 229.905441] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 229.912534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 229.921396] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 229.935035] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 229.942898] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 229.950965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 229.959713] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 229.973713] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 229.985223] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 229.992287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 230.000663] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 230.008816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 230.017174] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 230.030203] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 230.036357] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 230.059004] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 230.075609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.200481] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. 18:51:15 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, 0x0) 18:51:15 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, 0x0) [ 230.305493] binder: 10020:10021 ioctl c018620c 0 returned -14 18:51:15 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, 0x0) [ 230.408155] binder: 10025:10026 ioctl c018620c 0 returned -14 18:51:15 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, 0x0) [ 230.457129] binder: 10029:10030 ioctl c018620c 0 returned -14 18:51:15 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, 0x0) [ 230.512573] binder: 10033:10034 ioctl c018620c 0 returned -14 18:51:15 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, 0x0) [ 230.558268] binder: 10036:10037 ioctl c018620c 0 returned -14 18:51:15 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, 0x0) [ 230.652143] binder: 10039:10040 ioctl c018620c 0 returned -14 18:51:15 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, 0x0) [ 230.747248] binder: 10042:10043 ioctl c018620c 0 returned -14 18:51:15 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, 0x0) [ 230.843169] binder: 10045:10046 ioctl c018620c 0 returned -14 18:51:15 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, 0x0) [ 230.903838] binder: 10049:10050 ioctl c018620c 0 returned -14 18:51:16 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, 0x0) [ 230.972603] binder: 10053:10054 ioctl c018620c 0 returned -14 18:51:16 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, 0x0) [ 231.040104] binder: 10057:10058 ioctl c018620c 0 returned -14 18:51:16 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, 0x0) [ 231.090100] binder: 10061:10062 ioctl c018620c 0 returned -14 18:51:16 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc018620c, 0x0) [ 231.135610] binder: 10064:10065 ioctl c018620c 0 returned -14 18:51:16 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc018620c, 0x0) 18:51:16 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc018620c, 0x0) 18:51:16 executing program 0: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, 0x0) 18:51:16 executing program 0: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, 0x0) 18:51:16 executing program 0: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, 0x0) 18:51:16 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, 0x0) 18:51:16 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, 0x0) [ 231.663138] binder: 10091:10092 ioctl c018620c 0 returned -14 18:51:16 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, 0x0) [ 231.727805] binder: 10095:10096 ioctl c018620c 0 returned -14 18:51:16 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, 0x0) [ 231.795208] binder: 10099:10100 ioctl c018620c 0 returned -14 18:51:16 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, 0x0) [ 231.855593] binder: 10103:10104 ioctl c018620c 0 returned -14 18:51:17 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, 0x0) [ 231.921742] binder: 10107:10108 ioctl c018620c 0 returned -14 18:51:17 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, 0x0) [ 232.001002] binder: 10111:10112 ioctl c018620c 0 returned -14 18:51:17 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, 0x0) [ 232.051831] binder: 10115:10116 ioctl c018620c 0 returned -14 18:51:17 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, 0x0) [ 232.106861] binder: 10119:10120 ioctl c018620c 0 returned -14 18:51:17 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, 0x0) [ 232.172588] binder: 10123:10124 ioctl c018620c 0 returned -14 18:51:17 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, 0x0) [ 232.231798] binder: 10127:10128 ioctl c018620c 0 returned -14 18:51:17 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, 0x0) [ 232.311474] binder: 10131:10132 ioctl c018620c 0 returned -14 18:51:17 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) 18:51:17 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, 0x0) [ 232.397424] binder: 10135:10136 ioctl c018620c 0 returned -14 [ 232.552616] binder: 10140:10141 ioctl c018620c 0 returned -14 18:51:17 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, 0x0) [ 232.773600] binder: 10144:10145 ioctl c018620c 0 returned -14 18:51:17 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, 0x0) [ 232.916736] IPVS: ftp: loaded support on port[0] = 21 18:51:18 executing program 0: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc018620c, 0x0) [ 232.987498] binder: 10149:10150 ioctl c018620c 0 returned -14 [ 233.109245] chnl_net:caif_netlink_parms(): no params data found 18:51:18 executing program 0: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc018620c, 0x0) [ 233.173625] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.180168] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.188271] device bridge_slave_0 entered promiscuous mode [ 233.197910] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.204508] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.212546] device bridge_slave_1 entered promiscuous mode [ 233.256422] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 233.268360] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 233.303857] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 233.312251] team0: Port device team_slave_0 added [ 233.332579] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 233.340754] team0: Port device team_slave_1 added 18:51:18 executing program 0: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc018620c, 0x0) [ 233.351591] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 233.367032] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 233.456387] device hsr_slave_0 entered promiscuous mode [ 233.603089] device hsr_slave_1 entered promiscuous mode [ 233.752901] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 233.760276] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready 18:51:18 executing program 0: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000240)}}, 0x20) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, 0x0, 0x0) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffffffffffff8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000000380), 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000380)={0x0, 0xffffffffffffff92, 0x0, 0xfffffffffffffff8, 0x7}, 0x0) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa000000200000000, 0x800007f, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x80a102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x38c, &(0x7f000000a000)) [ 233.806685] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.813289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.820296] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.826957] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.952571] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 233.958706] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.970432] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 233.982694] hrtimer: interrupt took 34960 ns [ 233.994464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 234.004333] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.014514] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.034331] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 234.064666] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 234.070777] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.097038] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 234.105217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 234.113804] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 234.121973] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.128405] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.142571] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 234.155753] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 234.163983] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 234.172495] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 234.180684] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.187167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.195635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 234.210544] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 234.222356] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 234.234408] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 234.246462] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 234.257717] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 234.266440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 234.275494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 234.284242] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 234.292789] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 234.301380] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 234.309840] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 234.318112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 234.326350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 234.334683] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 234.346521] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 234.352662] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 234.377863] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 234.396481] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.415968] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready 18:51:19 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) [ 234.517098] binder: 10174:10175 ioctl c018620b 0 returned -14 18:51:19 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) [ 234.630748] binder: 10178:10179 ioctl c018620b 0 returned -14 18:51:19 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) [ 234.709031] binder: 10182:10183 ioctl c018620b 0 returned -14 [ 234.785766] FS-Cache: Duplicate cookie detected [ 234.790519] FS-Cache: O-cookie c=0000000055548833 [p=000000000c3ba43a fl=212 nc=0 na=0] [ 234.799229] FS-Cache: O-cookie d= (null) n= (null) [ 234.805823] FS-Cache: O-key=[10] '0200020000a07f000008' [ 234.811284] FS-Cache: N-cookie c=000000004d3d07b6 [p=000000000c3ba43a fl=2 nc=0 na=1] [ 234.819350] FS-Cache: N-cookie d=00000000bc1c62ff n=00000000be57c57a [ 234.825904] FS-Cache: N-key=[10] '0200020000a07f000008' 18:51:19 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) [ 234.848172] binder: 10188:10190 ioctl c018620b 0 returned -14 18:51:20 executing program 0: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000240)}}, 0x20) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, 0x0, 0x0) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffffffffffff8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000000380), 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000380)={0x0, 0xffffffffffffff92, 0x0, 0xfffffffffffffff8, 0x7}, 0x0) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa000000200000000, 0x800007f, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x80a102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x38c, &(0x7f000000a000)) [ 234.923477] binder: 10194:10195 ioctl c018620b 0 returned -14 18:51:20 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) [ 235.112054] binder: 10200:10201 ioctl c018620b 0 returned -14 18:51:20 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) 18:51:20 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x19b, &(0x7f00000bfff0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x22, &(0x7f0000000040)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}, 0x800, 0x0, 0x2}, 0x20) [ 235.360536] binder: 10206:10208 ioctl c018620b 0 returned -14 18:51:20 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) 18:51:20 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) [ 235.469864] binder: 10212:10213 ioctl c018620b 0 returned -14 18:51:20 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) 18:51:20 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000380)={0x7b, 0x0, [0x4000009f, 0xfff]}) [ 235.573845] binder: 10217:10218 ioctl c018620b 0 returned -14 18:51:20 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) [ 235.676060] binder: 10221:10225 ioctl c018620b 0 returned -14 18:51:20 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) 18:51:20 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) [ 235.783864] binder: 10229:10230 ioctl c018620b 0 returned -14 [ 235.852613] binder: 10234:10235 ioctl c018620b 0 returned -14 18:51:20 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) 18:51:21 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) [ 235.895915] binder: 10237:10238 ioctl c018620b 0 returned -14 18:51:21 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) [ 236.023733] binder: 10241:10243 ioctl c018620b 0 returned -14 [ 236.026526] binder: 10244:10245 ioctl c018620b 0 returned -14 18:51:21 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc018620b, 0x0) 18:51:21 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) [ 236.104158] binder: 10249:10250 ioctl c018620b 0 returned -14 [ 236.217808] binder: 10255:10257 ioctl c018620b 0 returned -14 18:51:21 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) 18:51:21 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc018620b, 0x0) 18:51:21 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc018620b, 0x0) [ 236.378375] binder: 10261:10264 ioctl c018620b 0 returned -14 18:51:21 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) 18:51:21 executing program 1: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) [ 236.490667] binder: 10269:10271 ioctl c018620b 0 returned -14 18:51:21 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) 18:51:21 executing program 1: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) 18:51:21 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) [ 236.661472] binder: 10277:10278 ioctl c018620b 0 returned -14 18:51:21 executing program 1: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) [ 236.792374] binder: 10284:10286 ioctl c018620b 0 returned -14 18:51:21 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) 18:51:21 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) 18:51:22 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc018620b, 0x0) 18:51:22 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) [ 236.948037] binder: 10295:10297 ioctl c018620b 0 returned -14 [ 236.968989] binder: 10296:10298 ioctl c018620b 0 returned -14 18:51:22 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc018620b, 0x0) 18:51:22 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc018620b, 0x0) 18:51:22 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) [ 237.102464] binder: 10306:10310 ioctl c018620b 0 returned -14 [ 237.140805] cgroup: fork rejected by pids controller in /syz0 [ 237.245532] binder: 10315:10316 ioctl c018620b 0 returned -14 18:51:22 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) 18:51:22 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) [ 237.392076] binder: 10319:10320 ioctl c018620b 0 returned -14 [ 237.466539] binder: 10322:10323 ioctl c018620b 0 returned -14 18:51:22 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) [ 237.662524] binder: 10326:10327 ioctl c018620b 0 returned -14 18:51:22 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) [ 237.841747] binder: 10330:10331 ioctl c018620b 0 returned -14 18:51:23 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) [ 238.006724] binder: 10334:10335 ioctl c018620b 0 returned -14 18:51:23 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) [ 238.224812] binder: 10338:10339 ioctl c018620b 0 returned -14 18:51:23 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) 18:51:23 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) [ 238.398497] binder: 10342:10343 ioctl c018620b 0 returned -14 18:51:23 executing program 2 (fault-call:4 fault-nth:0): r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, 0x0) [ 238.506664] binder: 10346:10347 ioctl c018620b 0 returned -14 18:51:23 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) [ 238.769995] binder: 10351:10352 ioctl c018620b 0 returned -14 [ 239.072086] IPVS: ftp: loaded support on port[0] = 21 [ 240.125896] chnl_net:caif_netlink_parms(): no params data found [ 240.369188] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.375734] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.383856] device bridge_slave_0 entered promiscuous mode [ 240.394589] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.401672] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.409663] device bridge_slave_1 entered promiscuous mode [ 240.616662] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 240.629005] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 240.658683] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 240.667007] team0: Port device team_slave_0 added [ 240.675006] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 240.683257] team0: Port device team_slave_1 added [ 240.689265] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 240.699381] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 240.995862] device hsr_slave_0 entered promiscuous mode [ 241.132169] device hsr_slave_1 entered promiscuous mode [ 241.172783] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 241.180265] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 241.408272] IPVS: ftp: loaded support on port[0] = 21 [ 241.512237] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 242.014238] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.027787] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 242.045624] chnl_net:caif_netlink_parms(): no params data found [ 242.061747] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 242.067994] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 242.075721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 242.097398] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 242.103960] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.328064] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 242.347432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 242.355985] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 242.364133] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.370568] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.381237] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.388142] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.396350] device bridge_slave_0 entered promiscuous mode [ 242.412235] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 242.604649] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 242.614132] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 242.622072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 242.630471] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 242.638671] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.645145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.654316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 242.666388] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.672897] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.680855] device bridge_slave_1 entered promiscuous mode [ 242.695336] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 242.725947] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 242.733402] device bridge_slave_1 left promiscuous mode [ 242.739137] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.884797] device bridge_slave_0 left promiscuous mode [ 242.890554] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.295197] device hsr_slave_1 left promiscuous mode [ 248.447356] device hsr_slave_0 left promiscuous mode [ 248.499620] team0 (unregistering): Port device team_slave_1 removed [ 248.514368] team0 (unregistering): Port device team_slave_0 removed [ 248.527072] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 248.738348] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 248.927924] bond0 (unregistering): Released all slaves [ 249.220653] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 249.233189] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 249.240158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 249.253415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 249.262483] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 249.271217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 249.279957] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 249.295164] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 249.313967] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 249.332008] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 249.339775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 249.348241] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 249.363421] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 249.371247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 249.379526] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 249.388402] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 249.397963] team0: Port device team_slave_0 added [ 249.406630] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 249.415002] team0: Port device team_slave_1 added [ 249.425419] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 249.432220] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 249.533400] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 249.551442] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 249.579164] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 249.685690] device hsr_slave_0 entered promiscuous mode [ 249.743293] device hsr_slave_1 entered promiscuous mode [ 249.783364] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 249.791105] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 249.806957] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 249.848803] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 249.969867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.994958] FAULT_INJECTION: forcing a failure. [ 249.994958] name failslab, interval 1, probability 0, space 0, times 1 [ 250.005946] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 250.006722] CPU: 1 PID: 10362 Comm: syz-executor.2 Not tainted 5.0.0-rc1+ #9 [ 250.019460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 250.025823] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 250.028844] Call Trace: [ 250.037528] dump_stack+0x173/0x1d0 [ 250.041206] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 250.046446] should_fail+0xa19/0xb20 [ 250.050217] __should_failslab+0x278/0x2a0 [ 250.054510] should_failslab+0x29/0x70 [ 250.058444] kmem_cache_alloc_trace+0x125/0xb40 [ 250.063169] ? binder_get_thread+0x406/0xf60 [ 250.067658] binder_get_thread+0x406/0xf60 [ 250.071933] ? binder_poll+0xbd0/0xbd0 [ 250.075863] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 250.081091] ? binder_poll+0xbd0/0xbd0 [ 250.085018] binder_ioctl+0x56d/0x2d20 [ 250.088951] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 250.094375] ? binder_poll+0xbd0/0xbd0 [ 250.098308] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 250.103536] ? binder_poll+0xbd0/0xbd0 [ 250.107474] do_vfs_ioctl+0xebd/0x2bf0 [ 250.111421] ? security_file_ioctl+0x92/0x200 [ 250.115966] __se_sys_ioctl+0x1da/0x270 [ 250.119995] __x64_sys_ioctl+0x4a/0x70 [ 250.123925] do_syscall_64+0xbc/0xf0 [ 250.127688] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 250.132995] RIP: 0033:0x457e39 [ 250.136234] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 250.155168] RSP: 002b:00007f5b84c4dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 250.162919] RAX: ffffffffffffffda RBX: 00007f5b84c4dc90 RCX: 0000000000457e39 [ 250.170222] RDX: 0000000000000000 RSI: 00000000c018620c RDI: 0000000000000003 [ 250.177520] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 250.184822] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5b84c4e6d4 [ 250.192118] R13: 00000000004bf170 R14: 00000000004d0a48 R15: 0000000000000006 [ 250.200200] binder: 10361:10362 ioctl c018620c 0 returned -12 [ 250.216088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 250.223887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 250.239017] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 250.245178] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.302213] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 250.309384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 250.319410] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 250.327559] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.334087] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.352275] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 250.365676] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 250.381985] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 250.393922] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 250.402033] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 250.410518] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 250.418806] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.425293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.434124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 250.443175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 250.455705] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 250.464139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 250.472851] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 250.506053] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 250.514467] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 250.522304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 250.530945] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 250.558773] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 250.577170] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 250.594719] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 250.604572] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 250.616069] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 250.624727] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 250.632863] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 250.641111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 250.649360] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 250.672913] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 250.680570] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 250.696659] 8021q: adding VLAN 0 to HW filter on device batadv0 18:51:35 executing program 0: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) 18:51:35 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) 18:51:35 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$CAPI_SET_FLAGS(r0, 0x80044324, &(0x7f0000000040)) fsetxattr$security_smack_entry(r0, &(0x7f0000000080)='security.SMACK64MMAP\x00', &(0x7f00000000c0)='ppp0#(\x00', 0x7, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000100)={0xf, @raw_data="713310041ceb2670aa68b850c6ae1bb55546ccff7c954cab616114df76b52d2fee367f2d8f7a532a7e843cb11074bfd6e469de40f4636d277f9e3b0d89dcc1b98d28bf8328f91cceb94638524979e5b856b2d609478ce2be01f8e4602ad14d91cf2491028bbd248763ea37e7f032967cf9152a3a8579e5ddc79c6e58badef526e329e851bb8338e48b074ce7ba5c1378f70580eb7c3498d44ee8633f589df112f3269c7ff1fbf0a795ed26f7d81640c351dfb86f199cb54a3b8204a9989f230010eb0547aaa9dc64"}) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000200)=""/35) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r1, 0x302, 0x70bd29, 0x25dfdbfb, {{}, 0x0, 0xb, 0x0, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4048050}, 0x4000084) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000003c0)={0x2, &(0x7f0000000380)=[{0x6, 0x7, 0xffffffff, 0xfffffffffffffffe}, {0x0, 0x4, 0x1cb590f0, 0x4}]}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000400)={'veth1_to_bond\x00', 0x1000}) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x220000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r1, 0x430, 0x70bd27, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x810) r2 = semget$private(0x0, 0x2, 0x80) semctl$SEM_STAT(r2, 0x1, 0x12, &(0x7f0000000540)=""/217) recvfrom$inet6(r0, &(0x7f0000000640)=""/217, 0xd9, 0x40000101, &(0x7f0000000740)={0xa, 0x4e20, 0xfffffffffffffffd, @remote, 0x8}, 0x1c) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000840)={&(0x7f0000000780), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x28, r1, 0x800, 0x70bd26, 0x25dfdbfb, {{}, 0x0, 0xb, 0x0, {0xc, 0x14, 'syz1\x00'}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4c080}, 0x20000001) r3 = socket(0x8, 0x80e, 0x5) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000000880)) write$P9_RLERRORu(r0, &(0x7f0000000a00)={0x1b, 0x7, 0x1, {{0xe, 'veth1_to_bond\x00'}, 0x3}}, 0x1b) shmget(0x1, 0x4000, 0x5, &(0x7f0000ffb000/0x4000)=nil) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000a80)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000a40)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000ac0)={0x9, 0x108, 0xfa00, {r4, 0xd2, "d273ae", "07aafbcf990e01849314415513964d3c8377dbbe7c0eabd00e42b8ee28be3ab5a0f81eb8197ea9672f541ae36e571309107e5e645328297a5d562bbb0be95f21cc9e6a6c5e1cfc4151aed73661fb0740ceb9250470b21d85d3159a8f2366ce6814f61e4f33d0698df1560cd901a4b1e517f2369718f93eb7254415b3bfff5f6c411089dbe64b8078bb83fb510709ca0e80d696bdec0c82408a89dd2f0d3eb70e0a7a5976344e60f1facc0073723ebca6f3285418f37e50bf8437ed2f96689b1dc31ed4e87e0b59a8192e205b7cf8308ddb802299de00a13a729b104d2c82888a54d00117ef208a10fc27b68ee67695b37da6e3fcf39daf9744bda4efa484a306"}}, 0x110) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000d00)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000c00)="9321dc0562dcc5f3549ac09011084a872bdca8d50b466311d5751de5acca1056bf98633c17e1877a26ea78c373118154f07d8483ba399808da47aaf3165b3b919e42f0883a392e6c5cfaf01d6896e6b6d39d27f5c0fb6001bff73806013265ae9be1c9c410f6e6d84af35f502f867e4c2c41dd78920c735754be7b30b411642f125d99455daf15b66fdc5fe1adcbb1caf33885686a1ebc44d8fad19605257a8d02dbefc352b6237e581a3b312bb65781aa866a482e137f78d3449b1d827e5a8a7e7cdaca8fc033976c514215580585c13778883c772ef9e44046878d33ab2ada785e6d23cd48625eb07d0792", 0xec, r0}, 0x68) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000d80)={{0xa, 0x4e20, 0x7588, @remote, 0x5}, {0xa, 0x4e24, 0x6, @mcast2, 0x656}, 0x4, [0x1, 0x800000000000000, 0xfff, 0x0, 0xfffffffffffffff8, 0x5440, 0x8, 0x2]}, 0x5c) r5 = syz_open_dev$audion(&(0x7f0000000e00)='/dev/audio#\x00', 0xfffffffffffffff8, 0x2002) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000e40)=0x1) ioctl$FS_IOC_GETFLAGS(r5, 0x80086601, &(0x7f0000000e80)) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x2) setsockopt$netlink_NETLINK_CAP_ACK(r5, 0x10e, 0xa, &(0x7f0000000ec0)=0x9, 0x4) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000f00)={r3}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r6, 0x84, 0x65, &(0x7f0000000f40)=[@in6={0xa, 0x4e22, 0x3ea, @local, 0x1f}, @in6={0xa, 0x4e24, 0x9, @rand_addr="729f450e90c13a007da7d0f3bd0e10f2", 0x50a8}, @in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e21, 0x6, @empty, 0x33cbf4a9}], 0x64) 18:51:35 executing program 4: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000040)=""/70, 0x10000, 0x1800, 0x3}, 0x18) ioctl$DRM_IOCTL_SET_MASTER(r1, 0x641e) r2 = msgget$private(0x0, 0x402) r3 = getuid() stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = geteuid() getgroups(0x6, &(0x7f00000001c0)=[0xee01, 0x0, 0xffffffffffffffff, 0xee00, 0xee01, 0xffffffffffffffff]) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, r1, 0x0, 0x17, &(0x7f0000000200)='{vboxnet1nodev^md5sum\\\x00', 0x0}, 0x30) r9 = getpid() msgctl$IPC_SET(r2, 0x1, &(0x7f0000000280)={{0x9, r3, r4, r5, r6, 0x2, 0x100000001}, 0x5, 0x5, 0x9, 0x8ee4, 0x800, 0x48, r7, r9}) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r1, 0x810c5701, &(0x7f0000000300)) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000440)) getgid() kexec_load(0xc5, 0x2, &(0x7f0000001600)=[{&(0x7f0000000500)="2b1f98c78b00aff3c2eca211bf1f78a7fee2b7ffb5322d5b7943919c5d0a9bf73af583c91e3fb1076b719a72a98c569317566b9d8a611ffad30fe4cab53b003a8c28c46d04e61d7d3adf651d5c8451159444693591a27fca781413370a2b89b8dc81d1d11b369aa7649f38b27a3e834d2df53cd42f00ab6cf11c37b7f78e9e216dc1456caa61fd1b6b6ea7793249ef4d8364f701af8d7eef98cba26d53cbb6be9bdfbe25087ef2425e85c27c104205e01460e854d6a4792a89f4c0a3d0956aad00bb0919255c65db759bb30e", 0xcc, 0x5, 0x7}, {&(0x7f0000000600)="fdeca45077e82b4e1a311728c66312a5c3c8d095d72a407d45b960e6b07c90826bc5e4449e3c3ab7c8ea2fca259ffa9099945ed76b9e5a9a1ccf3100476da6c0dafef4f3f05f1365d92356d5f7ed115b4a982c17528d09f471f5971fddd2e276073e00daf54b6ef2cd098f4891b21ec57859acb72b94a0ea332b905b286f9e109a63c3c688367fbbe71483785879a1920821cbd74e61cfdba87dca47c4138a0c4263db95563e79c800c92c16431bfb6e04bb867c919b8c24b8ea3d9abdaba77df54a7071097922b00c2eed4bae451b47955d8b3113e1a1f05686eda4446dc436a9f716f422b19d065de3819187d62f012dc36eca4966822fb66ce1017088dcfea528b81f9369d4adc645a87e2a46771351e67afbdc9c9cf91cd7c15c924254f7933faa2bd80885610ff61941802d43758b740a40cf469316d906b120b3506acaf828ce81c544b58f64917671a3238dd22e21cf1341d8fba7a4336b2cbba641fd56982ce2087dfdad1c1e0c3bf3c5aa9a1ad26c065c3cbac00d02208d98fa3563ac3d1055e98da66d1653c458e7291e91d38706d585a7af26b9c9cb832e8ba6fd0b4cb2673458fdc6169d01946504c49277b4fe4e3ee3940de05634caa1a43af542149f5131cc9bc6b1e1afaa9fa4c824b8d4af8ece8dca3844519822dd50c4e6c0aa71c33b3e6a5acdd857bebf7a086c9b482fc86f6135ea34532056c187829cf349fa26c2d704a39c78b24dacd286f86a13d03251dd5821302a3caa2db8c567ab1c89e74fa7525b94fb95e664103497551802273c1b0d667570de6e1825a66dff8034ae1165b14117940fcb450fb6453f94dcddc09d02eff1288786a13e948abed27247fb6c2716d8bb5c318fcd4b05c6262d030c48fb43667c05bdb88447165fff160a4396f383ab3ccc452d928acef80b147cf34328c23c47530bc58ee9f890c87bf634990d894a109fc3703fe6f095376305f43e4d6ebbaebdde66477bcbd0788ef49aadd56216709ec67cbf6ab24feecbcbe6d2b6cff1413dd7193db462877b9b37c54d49b24dc8caf19b7ee2cd078b81bf250b1a13d7971f1cd249874ad077de8607e82a35b4606a6371bcf6865779c58cc14efbbd8ed91270f853507b42db84daac738e65501e76eaef49005ac4374d9cc9f197a9e1829fd9542947dd8e6c0d24d9d9216b4af70166444826d3316d4b7d14939468adf8958054220e5b6ef8b37046944bc8359aa6b1cd1851e67139ce4ee3986643ed9a18ee73e4c5de457052050c92aa0a397fbe85eafbfad38a6a40e651d7adcc895d5c8096975d83f7c78cdac0a9d38c54b2b8f72f5360171960dcbdcf3040b1bdb53c5a69b23d3d88c21a6c82f2ec698cc8e9b0a310e2969e3d7eeb30556ee36536fe37c0b22316f06044b5598c3fcd22b69a240138cf88ea8e5021df7474027c194bf87c427cee1abaf2b61822d130b1d82b852096dcfeffcfc51c699cf50b8ce82a0b08abb2399bf7cbf6585c15ad9f3d84b114c0770950f26a526777acd3b7e841533bb42fc00435fa89db344b648138415e545c95e326be357d860ec456be6a4dc3eec6e41a1c2c930d54193730e05f464253da1a796f3f2b044d9fb67bf37145d46a927ffd02fb211df536f3fb3e83817cffa87b1bf747988f211af9207a18edd6ab9069f953be18514b0318c4619928a28f4ddd9d17d3a44c78c399c5b5db395a36c4de1fea8ba8d729f746196c19e7cb28b5b70363b6c626b47d3652e59285a234eb264295b548c18224d8191f327c2bc94a811b2204dc38f9814e7b1476c160b2ea306050658485bbecfdbe121bdcbc38623312257dc0e7f565908cdf6eb792cd9c62ad768dc35fca3ffe0c7b2baea7cb725e022867c2b1c90f2c07eedc159eeec923ff84ec2a2fa0b029f99c81d9dcd21e81374c86f51f95f54722fca05513a8dca7655a04443c65b14478b628cdbe7fe54d3c93e2b8555c50d7c50af2cf3e95a3565d54f319d778dc05069a695c341d6aed44355098ea0e8ddfd57dde5dd5a647860a87056c7169428543177c7e321ed2639a669e3b2de5df6bc6bdf61a7cc59da94b95cb44ebe1c38bce5f5c8d077288aa4f58b8da8b70903a34b485075aafed94fc74b6bcd2b95f886fd2a417709d2ebeb0add59b99982ff162767cb213c326cd78e2aedf9de1cd0ea22ecd6df1b3130249c02d2253b6fb9dba734e76456e759fbcd43fe942d9e1ce1d55c81f5ba2af3200eaf578f4b43822634379626f59ee894e626d1d1c3e08dc4ebd890116d6be510d8dd50d09a414b3a513e879551f4e0c9bf23f3d0d426626f9fb282676a984daa6352021aed85bbcd061e134d569321fe8345fd910b271fd77038ea4e4ff0daca650be46814e25afbcefdbbd97e94d2bf27a2fda731e59f2600ebe3cb2313b2bacc8bc82f3802d9843ad643f6df803ec80c6faac90471c104c2603386e57e016188ac0cf918a973f7f40a430f799f285ad4b79d6cfc1648c79b8350207032b088b440c45ddecb27f0388c07ac3000728126fc627e69db1f452fc9f1f4161a0c4e54c87fb57607b92c37e6827a3b69132ecd568044c4afd150ad35a1a9ffa267803739a669ebf0f34b4afdb6b5446c9f2c7b632b6fb198d514295c0a52bb9da0aab533ea5169d8c83f1c47fe9b401061ea273115bc9f5a2d2c6c1efa4b1b853603219b2263272d3f30568b2bbf3120c315134f87febedd76737fb1088ff48c834474ff711a220de78ec54182d93ad230c31937aeee731771f4b3ec8b88fb66b8477786f4f6f69667cee0163d2e58ed8a186b10df8e8a4c4a64f6c7b22bf52464080637e5008e01fe11a3ff542ce12ad3e6b0ca498486d909dd9e99dd94e618636bafde364e55ca1390a58150ba84f89359091b07eae2071f6978006f3999664a18fb1abf30cc60877b149161ce4df0bec5ab09072dd1aec4af11f0b6f992c61e18ba5aff475dd8532c98fdbb5c98c8e23edb92f6c1ffe487f0758c74b0883057a9f9d51cc4f2b0aefc8bf47d368528753ed5a32dc86e4ac2fb2be32709cc70450decf956511c4935c461537351327570f357103f4001340f149ce870d5ea3440d1c46aded3423103aaab05e7fe2eed11696b46c134faafd2d3575552f0351ff319a07a18492fbe51d3233b71ed7ddc20776b6b57c92d69060771728d97b6a687fd6a6d2bbd14360950731a0518cf1712e74e03c8f027ade96e4a8e3da42dbbe548e2a5325e66d1d4d8cb4a634c29b8d78b0ead757833e4f0147c995c73ce47b36fe4c14a3fedbb9b5a3fbbf74eb9d83e568895d3b3b28d6559db4828473c4f623771b8022fd74596b8a965003088bb10e2c057b7fb6d969ffeaff92e3b9f5951a67f9fe0d59d27d4b07c7d38b4b0fab17e965c4386a001f5cec67de893509166d9f7456893c01766fae1ae5d6272dfaf12547d4e2b00fda9e30a02fd630399f5a82cfd8a2b40f48f5a02439dc5427960cc34ffca806c27553d06a558a39bcf97d69d55a83b1db2eeef2b45e0a310a6fa2a5ac626a7a34ceabde22d769d62a3ef52028dde8ef65c995c82ad21beb889cb9b3cf25bea9a8ab989117baa0995426b97e6bf1deb0e1f2caeafdd5768765e8f0e709193a575e8d688b556c35eb2d2004f1203a47c0e9bb3e03aa9b7a55158601e70c45fd48c28108221f1e7fc631dd0348e6da661c5b09f09493f75096200262301bb3c9908d12325427709f658fc26c0b106960dc57127357ff0a3a33422b25ac1877ac2dcac815cb0eba6d21b0b13ac89459d0fe7278d1a50283c26940f5711e30e733a3294b688fb9897f02880e8596d53c49bf3541a42e0c56f963bf5c8d14b23cf8a0fc8f4f4d686f425f59a135a9141c4cd310b23e12183ebeddc00fe6d89bb1e0675d0be1ac2425fbd1355a4e713a11742f0d9114c11657ea902e3a7366241cddfb305612644f3730bf2f95b8ff60bc5ae1bae35549ef979c8f6b6bbc6eeb7e4089ad0e2840402dd9c7879782f8888dab363c7cbf9b43744413ae3496baa79dcc1d514932552b8417e4be945ca7bac81640a8588939c270aa71386051e38476dce0fbf1ee99776d392c5575918c84409a37adda9fe7fa5c333bf2087357e367ed9f2b585a3decc7471eae792972c0bb7688e7806c108b82a60aa59519c426d095f9d5c715862787f78760646c8c9f53e4a8fd94d6fedfbc920bb4963b8a1254f22329352ba3c0f00feef9dac38612bf95ca1e47961721f4bb520b718b9b6d4c864df26c9ea5f1a273c7f42daf5a2e25eee2deccb9fb92fb4c29cc268095461dc18309acc2b5f0ec88243089bd433fc6d1ed4425f7379e2c8b58563b5808fc08c21c570eb4c09f79d05888e8d492c86e2f1cb89b00dd9f4a5ee336293c2e5af208e004e85ae173ac4b6f52a355bf988f8c32e7e6125d28476f9f8177472ccd7871bfeb41e9a1f3630aff97f1debcd56326bed3c6dcec6fedf49e14465c9ba5bf98f8c41665f4543048605bf6fa93912a28d65b695c04d8671c5da5af6036b7bd04390aefa28c2e0a49d8e7a8dd009e8cedf002c55ca87d781e188ac294873f68e472ba30e9fe6f7e2122cd20a24bf4733049369c8d2aaefa2452191f86dcfebfed60933313a5d28e166b0345391ff43e4bf9c5c412a029b30bb4bc654be04262c9172e465b738511fed53751bd56d190ddf7c4aedacf0bea4f4780bd9d6f7f3766cd7c937360a6e08be5f98be56c2449dbd3ce9521cdff5d5690686ec07043a9d68c28994825029a1c933d859a773fcf21167218a970395e3d79aac60a79db758bbd88fa4b619459079f343977a8e9275a2ca3418ad83890f2756a545fc93b15edd4ccfb061d1948b57b36963ee52951f5d47583b2a9699943f695f1b1a1305e4779208ebe8889ef4cdaf102571afecefeac91942965fdd97c8139398c62777b6de8e2f15fd315b6a4738d1b4e18c8d99f914d5917e45ba2b9142a417785b3e1135ba190d97af1f519d2cb439147987547d4e100449e287898bb011d0a5fef8a3720c0da4a3928203b6b1829f1eb34260ac6ac05453b2f171db26b73dcd0aac3b3062cf0519abf1bd949214444b02e1502841513aa945461329656842753b9aa96ce3f6c3b126f73254abe18c9ef96318bb559e194da214fc3e8babe1be19401522bc234ce9a5dc1826e036709493fad62cfe38031e98e20b15ddb8c4174b0ab44b13a5802295208e97a5e3fe627386b32a570cdd8a568772ceca572c499d83131fabccf652555b4089699ebb04931bd902f6032ebe7cff98ecd52392e2493708eeaee7a351dc807d8147217f662c69e3940aebfddcec10a55b8baeab6f4d760d264a8b24e6b14a303150a24d409b0dbb86ec4fe95b2e10e52be822c7949049cae52c4838c73a971518064df1ea8ecdc7a3ae61c83c8b24638c52eadb130531898c5f69503b4ba513aead30dbed143db0de9a2ba1bff94e46df368a820436f1c7596b728b87d226bcc36dc90a41c9105a35c93520d64c57b27e2af0af90b525f49bafbb5551aec1f25fb3a7814ed7171f817d99c03da84ad09032ca0d68980a57bdf6357e1d7c91906abe9c1f966be8c7f13475b250187a99952e81fb02ad10ff85a3eb8f3db40840b6a713fe90468fa47a31265409f84932db25ca3648cbfbc7b1929ab947f40d798c306cae1174ced9c322c78536eaeba7d4368d2e13177b372063bb4dcf61777868c4ff8cfdf45cd3547e85a5bb70458999807bcc60567f855d9fc83861ea12de944c0d947781803493fe6eee8894c25f28ab9f14195", 0x1000, 0x3, 0x9}], 0x2a0000) r10 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001640)='/proc/capi/capi20ncci\x00', 0x313000, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000016c0)={&(0x7f0000001680)=""/12, 0x8000, 0x800, 0x63bd6bbd}, 0x18) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000001700)={'nat\x00', 0x3, [{}, {}, {}]}, 0x58) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001780)=r8, 0x4) fsetxattr$trusted_overlay_upper(r0, &(0x7f00000017c0)='trusted.overlay.upper\x00', &(0x7f0000001800)={0x0, 0xfb, 0x4a, 0x4, 0x61, "36c3f55ef62b487051059e832a90f20e", "38fcb05d301014b210555bbf7f826d9574acf3586ab10f465c5dc4523cd393142b046dc6288c207e06ba2509d8e1009d6007013119"}, 0x4a, 0x2) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000001880)=@assoc_value={0x0, 0x3}, &(0x7f00000018c0)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000001900)={r11, 0x6, 0x9, 0x1e}, &(0x7f0000001940)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r10, 0x84, 0x22, &(0x7f0000001980)={0x2da, 0x200, 0x7, 0xf0df, r12}, 0x10) openat$urandom(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/urandom\x00', 0x0, 0x0) r13 = syz_open_dev$ndb(&(0x7f0000001a40)='/dev/nbd#\x00', 0x0, 0x100) splice(r10, &(0x7f0000001a00)=0x53, r13, &(0x7f0000001a80), 0x4, 0x1) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000001ac0)=""/28) syz_open_procfs$namespace(r7, &(0x7f0000001b00)='ns/mnt\x00') lsetxattr$security_selinux(&(0x7f0000001b40)='./file0\x00', &(0x7f0000001b80)='security.selinux\x00', &(0x7f0000001bc0)='system_u:object_r:hald_var_lib_t:s0\x00', 0x24, 0x3) 18:51:35 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, 0x0) r1 = dup2(r0, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffff9c, 0x84, 0x72, &(0x7f0000001180)={0x0, 0xfffffffffffffffb}, &(0x7f00000011c0)=0xc) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000001200)={r2, @in6={{0xa, 0x4e23, 0x1, @mcast1, 0xfff}}, [0x4, 0x2, 0x40, 0x6, 0x1ff, 0x1, 0x6, 0x1, 0x2, 0x8, 0x2, 0x1, 0xe4c, 0xfffffffffffffffa, 0x1]}, &(0x7f0000001300)=0x100) r3 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x89fc, 0x18081) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f00000010c0)={@ax25={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x7}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, {&(0x7f0000000080)=""/4096, 0x1000}, &(0x7f0000001080), 0x2}, 0xa0) [ 250.925214] binder: 10373:10374 ioctl c018620c 0 returned -14 18:51:36 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, 0x0) [ 250.981339] binder: 10377:10377 ioctl c018620c 0 returned -14 [ 250.983818] binder: 10371:10376 ioctl c018620b 0 returned -14 18:51:36 executing program 0: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) 18:51:36 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) 18:51:36 executing program 0: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) [ 251.224245] binder: 10387:10393 ioctl c018620c 0 returned -14 [ 251.361290] binder: 10394:10397 ioctl c018620b 0 returned -14 18:51:36 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x4, 0x246501) ioctl$KDSETMODE(r3, 0x4b3a, 0xd0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000000c0)=0x400080) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r3, 0xc0045520, &(0x7f0000000100)=0x7) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, 0x0) 18:51:36 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) 18:51:36 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) [ 251.662331] binder: 10404:10405 ioctl c018620b 0 returned -14 18:51:36 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={0x0, r0, 0x9, 0x3}, 0x14) 18:51:36 executing program 1: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc018620b, 0x0) [ 251.817982] binder: 10410:10411 ioctl c018620b 0 returned -14 [ 251.835123] IPVS: ftp: loaded support on port[0] = 21 [ 251.906758] binder: 10415:10417 ioctl c018620c 0 returned -14 [ 251.988877] IPVS: ftp: loaded support on port[0] = 21 [ 252.199995] chnl_net:caif_netlink_parms(): no params data found [ 252.273591] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.280065] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.288322] device bridge_slave_0 entered promiscuous mode [ 252.318011] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.324570] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.332811] device bridge_slave_1 entered promiscuous mode [ 252.400872] chnl_net:caif_netlink_parms(): no params data found [ 252.417523] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 252.435948] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 252.480772] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 252.489477] team0: Port device team_slave_0 added [ 252.524765] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 252.533098] team0: Port device team_slave_1 added [ 252.538356] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.544991] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.552774] device bridge_slave_0 entered promiscuous mode [ 252.562294] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.568723] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.576821] device bridge_slave_1 entered promiscuous mode [ 252.583980] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 252.599838] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 252.625282] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 252.642934] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 252.694019] device hsr_slave_0 entered promiscuous mode [ 252.731945] device hsr_slave_1 entered promiscuous mode [ 252.773042] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 252.780554] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 252.795782] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 252.804022] team0: Port device team_slave_0 added [ 252.814263] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 252.822426] team0: Port device team_slave_1 added [ 252.830488] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 252.842291] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 252.894068] device hsr_slave_0 entered promiscuous mode [ 252.942212] device hsr_slave_1 entered promiscuous mode [ 253.003246] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.009730] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.016772] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.023210] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.033531] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 253.041211] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 253.071047] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.077495] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.084625] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.091040] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.167584] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 253.174284] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.189038] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 253.197091] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.204660] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.214485] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 253.223685] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.230729] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.249113] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 253.257539] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 253.265285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 253.280480] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.291806] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 253.297894] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.309651] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 253.319777] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 253.327082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 253.335817] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 253.344168] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.350581] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.362983] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 253.371884] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 253.383882] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 253.393145] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 253.399228] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.406903] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 253.414613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 253.422312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 253.430499] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 253.438957] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.445438] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.453047] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 253.465870] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 253.473150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 253.481683] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 253.489845] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.496291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.509107] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 253.521062] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 253.532271] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 253.542262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 253.551029] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 253.559564] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 253.567701] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.574099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.581746] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 253.589870] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 253.600745] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 253.610325] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 253.617861] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 253.625716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 253.634199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 253.643190] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 253.657087] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 253.666315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 253.679723] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 253.688906] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 253.697107] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 253.708950] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 253.716241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 253.725239] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 253.735015] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 253.748672] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 253.756300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 253.764682] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 253.776013] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 253.784234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 253.793184] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 253.807056] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 253.813222] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 253.825141] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 253.832888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 253.840959] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 253.857152] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 253.867286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 253.875508] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 253.889868] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 253.896015] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 253.909067] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 253.927651] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 253.940310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 253.961046] 8021q: adding VLAN 0 to HW filter on device batadv0 18:51:39 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x12c, 0x20000000, &(0x7f0000000000), 0x10) 18:51:39 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x404002, 0x0) write$P9_RWSTAT(r2, &(0x7f00000000c0)={0x7, 0x7f, 0x2}, 0x7) ioctl$KVM_GET_MP_STATE(r1, 0x8004ae98, &(0x7f0000000080)) 18:51:39 executing program 1: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc018620b, 0x0) 18:51:39 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) 18:51:39 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x0) open_by_handle_at(r0, &(0x7f0000000000)={0x8f, 0xc6e, "053d0240f7e72452636d621b1172228dda6dd0d1d256c8ea91ec62bfe3a6ba3c50c9d0fca1ed1421c347f5260c9e0d911660481a30db6d4e875380f13f6b4eb34caf7b2278ebd20343833dc83e4b82f73858bbbdb8929ccafd98a69ad1a947157dae2f4bfde374a680156835e9bfc0a1871a73153adf305182e297947cf37db0be25feaa29ad9f"}, 0x400102) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f00000000c0)) write$binfmt_script(r0, &(0x7f0000000100)={'#! ', './file0', [{}, {}, {0x20, 'vmnet0&mime_typesecuritykeyring:ppp0eth0%\xf7,vboxnet0vmnet1vboxnet1'}, {0x20, '-'}, {0x20, 'securitysecurityvmnet1cgroup]cpuset{'}, {}, {}, {}, {0x20, ':eth0selfGPL'}], 0xa, "a99bb85c0bb6d893d603f5c75a2ceb151a0c2ac77e4ed509df0f2c9791c32541f7411e910fbb39ba8a"}, 0xaf) r1 = socket$l2tp(0x18, 0x1, 0x1) r2 = syz_open_dev$vcsn(&(0x7f0000000200)='/dev/vcs#\x00', 0x7, 0x40) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000001c0)='#/$\x00', r2}, 0x10) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000280)='trusted.overlay.origin\x00', &(0x7f00000002c0)='y\x00', 0x2, 0x3) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dsp\x00', 0xc001, 0x0) getsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000340), &(0x7f0000000380)=0x4) setsockopt$inet_dccp_buf(r3, 0x21, 0xf, &(0x7f00000003c0)="605bf8d3b3807953a6fa8e00e200386d1f67196ea39012a51e72e65c46ae43babf2d748f837d90b3d094af3237fb1ce4365b94c838de26e6984db569c2", 0x3d) setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, &(0x7f0000000400)=0xff, 0x2) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000440)='/dev/btrfs-control\x00', 0x121200, 0x0) syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0x0, 0x800) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000004c0)={0x0, @in={{0x2, 0x4e21, @multicast1}}, 0x101, 0x100000001}, &(0x7f0000000580)=0x90) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f00000005c0)={r6, 0xe8, "39a956f69403837ca9042bc8f3eee8c1d30eb37ec459aca6dcacbb32dee9b75593952f6ec39afb828deee06f70c75c9bd37d6c5ccfd9a5f3d9233a76d452e5a090e2dcc0b174bb66ce00da2ee56d619696d967f06de963401787cf7b580c6f86bb20c3f9824db1d59ef7de4641b7672644fa9e2473f91a8ba09619b64b2efb1737bd4291f17d86393abcf525b103e36b3c36ad77c8b9fcdaf5dd8fb8a2a21a1098e5c69d905450b9526e311f158be64a1a75ba628bcb6628e81736016def8ba2145ca683657b6f09b78e2cfb10c0bc8c7290d6911f9494bbc8c0dee209e05d70812f55954d73d3ad"}, &(0x7f00000006c0)=0xf0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000a80)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000a40)={&(0x7f0000000780)={0x294, r7, 0xa12, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK={0xac, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf2b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x63}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}]}, @TIPC_NLA_BEARER={0x20, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f5a}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7b0}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA={0xac, 0x5, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x324}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x33}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}]}, @TIPC_NLA_LINK={0x10, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MEDIA={0xa8, 0x5, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffffffb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd03a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x719f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}]}, 0x294}}, 0x4000000) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000ac0)={0x1, [0x100]}, 0x6) symlinkat(&(0x7f0000000b00)='./file0\x00', r4, &(0x7f0000000b40)='./file0\x00') getsockopt$sock_int(r2, 0x1, 0x13, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000c00)={{0xa, 0x4e22, 0x5, @dev={0xfe, 0x80, [], 0x1f}, 0x12}, {0xa, 0x4e22, 0xfffffffffffff2de, @empty, 0xfffffffffffffff7}, 0x2, [0x8, 0x9, 0x1, 0x7, 0x7ff, 0x8, 0xf85a, 0x2]}, 0x5c) getsockopt$EBT_SO_GET_INFO(r5, 0x0, 0x80, &(0x7f0000000c80)={'nat\x00'}, &(0x7f0000000d00)=0x78) bind$isdn(r2, &(0x7f0000000d40)={0x22, 0xffc000000000000, 0x8000, 0xff}, 0x6) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r5, 0xc0a85352, &(0x7f0000000d80)={{0x0, 0xf4}, 'port0\x00', 0x81, 0x141056, 0x7, 0x3, 0x6, 0x0, 0x8c3, 0x0, 0x0, 0x9}) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000e80)={0x5, &(0x7f0000000e40)=[{0x1, 0x0, 0x0, 0x80}, {0x0, 0x2, 0x7fffffff, 0xed9}, {0x0, 0x100, 0xd6c0, 0xdb9}, {0x2, 0xd, 0x5, 0x3}, {0x5, 0x6, 0xffffffffffffffa2, 0x100}]}) ioctl$FICLONE(r5, 0x40049409, r1) mq_timedsend(r2, &(0x7f0000000ec0)="b14471f704eae474f2df66773c5e2b4594ab06f4e58c468e51700f826efa962e0da1701730ec8936beb5c94a4390c6972bb93158f4d53f", 0x37, 0x3, &(0x7f0000000f00)={0x0, 0x1c9c380}) fsetxattr$trusted_overlay_origin(r3, &(0x7f0000000f40)='trusted.overlay.origin\x00', &(0x7f0000000f80)='y\x00', 0x2, 0x1) 18:51:39 executing program 4: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8932, &(0x7f0000000100)={'team0\x00\x00\xff\xff\xff\xc0\x00', 0xc201}) 18:51:39 executing program 1: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc018620b, 0x0) [ 254.265054] binder: 10443:10449 ioctl c018620c 0 returned -14 [ 254.300984] binder: 10442:10445 ioctl c018620b 0 returned -14 18:51:39 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000005}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xcc, r3, 0x310, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x1c, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x4}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x44}, 0x48000) 18:51:39 executing program 1: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x541b, &(0x7f0000000100)={'team0\x00\x00\xff\xff\xff\xc0\x00'}) 18:51:39 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, 0x0) 18:51:39 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = memfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x0) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x5) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, 0x0, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) r5 = inotify_add_watch(r4, &(0x7f0000000000)='./file0\x00', 0x0) inotify_rm_watch(r4, r5) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x4ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) userfaultfd(0x0) syz_open_dev$audion(&(0x7f0000000240)='/dev/audio#\x00', 0x8, 0x460001) epoll_create(0xfffffffd) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x4eaacd4c, 0x0, 0x0, 0x0, 0x54}, 0x98) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r4, 0x4008ae48, &(0x7f0000000340)=0x2000) ioctl$DRM_IOCTL_SET_SAREA_CTX(r4, 0x4010641c, &(0x7f0000000140)={0x0, &(0x7f0000000400)=""/4096}) [ 254.581712] binder: 10462:10463 ioctl c018620c 0 returned -14 18:51:39 executing program 3: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x6000) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000004) [ 254.739062] binder: 10470:10476 ioctl c018620b 0 returned -14 18:51:39 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.stat\x00', 0x0, 0x0) ioctl$RTC_ALM_READ(r2, 0x80247008, &(0x7f00000000c0)) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, 0x0) 18:51:39 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000000c0)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @ipv4={[], [], @remote}}}}, 0x104) 18:51:40 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_subtree(r0, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'], 0x1) 18:51:40 executing program 0: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc018620b, 0x0) [ 254.984316] binder: 10488:10489 ioctl c018620c 0 returned -14 [ 255.278266] IPVS: ftp: loaded support on port[0] = 21 [ 255.383976] chnl_net:caif_netlink_parms(): no params data found [ 255.430419] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.436901] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.444701] device bridge_slave_0 entered promiscuous mode [ 255.455121] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.461714] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.469770] device bridge_slave_1 entered promiscuous mode [ 255.499737] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 255.513036] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 255.548117] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 255.556877] team0: Port device team_slave_0 added [ 255.563588] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 255.572176] team0: Port device team_slave_1 added [ 255.579073] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 255.589064] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 255.645966] device hsr_slave_0 entered promiscuous mode [ 255.674118] device hsr_slave_1 entered promiscuous mode [ 255.713920] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 255.722019] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 255.739392] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.745844] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.752935] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.759465] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.806952] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 255.813212] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.823359] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 255.834447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 255.842795] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.849972] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.858597] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 255.872400] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 255.878578] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.889114] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 255.897225] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.903737] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.918289] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 255.926465] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.932953] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.958034] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 255.966885] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 255.982978] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 255.991025] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 256.005455] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 256.016109] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 256.023884] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 256.038956] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 256.054176] 8021q: adding VLAN 0 to HW filter on device batadv0 18:51:41 executing program 0: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc018620b, 0x0) 18:51:41 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x80, 0x0) ioctl$BLKROSET(r2, 0x125d, &(0x7f00000000c0)=0x7fe000000000) 18:51:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x10040084, @rand_addr, 0x0, 0x0, 'wrr\x00'}, 0x2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 18:51:41 executing program 3: perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c62, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x840000000002, 0x3, 0xff) connect$inet(r0, &(0x7f0000000400)={0x2, 0x0, @remote}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/fib_trie\x00') sendfile(r0, r1, 0x0, 0xfffffffe) 18:51:41 executing program 5: r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/14, 0xe}], 0x1) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x80000003, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 18:51:41 executing program 4: perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c61, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='syscall\x00') sendfile(r0, r0, 0x0, 0x400) 18:51:41 executing program 0: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc018620b, 0x0) [ 256.201442] binder: 10512:10514 ioctl c018620c 0 returned -14 18:51:41 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x1ff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, 0x0) 18:51:41 executing program 4: perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c61, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='syscall\x00') sendfile(r0, r0, 0x0, 0x400) 18:51:41 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) fadvise64(r1, 0x0, 0x5, 0x4) 18:51:41 executing program 3: perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c62, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x840000000002, 0x3, 0xff) connect$inet(r0, &(0x7f0000000400)={0x2, 0x0, @remote}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/fib_trie\x00') sendfile(r0, r1, 0x0, 0xfffffffe) 18:51:41 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1000000000000002, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f00000001c0)='-B\x8e\x12I\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc/w\xee\xa9\x8bCc\xad\x89\x97k\xde\xdc\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\x01\x00\x00\x00\x00\x00\x00\x00\xf7\xd6\x1d\xa1\xce\x81\x19\xea\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\x00\x00\x00\x00\x00\x00\x00\x00\xf3\xea\xcf\xfe\x1ap5W\x8b\x89\xc1\x06?N\x14+\xe6\x1d\xb1>\x11\xee\x90\xb3$\xd4=7\x1b\x13\xf0m\xf6\xc4\xfd\xd3\x00\xa6\xed@\f\xd5T\xc4\x87\xf4\xfb9\xb6^\xf3.\x7f\xd3?\xf5\xea\xba(\xbd\xafI\xe7X\x0e\x82\x9b\xc1\xa7\xb4k\xb2\xdbo\xe3u\xa9\xb7\xd9\x85\x14\xe9\xa6\xa3Y\xf7v\xa0\x8b\xc8', 0x0) write$FUSE_BMAP(r1, &(0x7f00000000c0)={0x8}, 0x1a2) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000100)) [ 256.571432] binder: 10534:10535 ioctl c018620c 0 returned -14 18:51:41 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000080)=0x0) ptrace$pokeuser(0x6, r2, 0x1ff, 0x2) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, 0x0) 18:51:41 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x19b, &(0x7f00000bfff0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x15, &(0x7f0000000040)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}}, 0x20) 18:51:41 executing program 1: set_mempolicy(0x4003, &(0x7f0000000040)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010009, 0xffffffffffffffff}) 18:51:41 executing program 3: perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c62, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x840000000002, 0x3, 0xff) connect$inet(r0, &(0x7f0000000400)={0x2, 0x0, @remote}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/fib_trie\x00') sendfile(r0, r1, 0x0, 0xfffffffe) [ 256.837622] binder: 10554:10557 ioctl c018620c 0 returned -14 18:51:42 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x5, 0x8, 0x7, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xd, 0x4, 0x4000000004, 0x7fa5, 0x0, r0, 0x0, [0x305f, 0xa]}, 0x2c) 18:51:42 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0xffffffff, 0x800) ioctl$PPPIOCSMRRU(r1, 0x4004743b, &(0x7f00000000c0)=0x3e44d9a9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, 0x0) 18:51:42 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x19b, &(0x7f00000bfff0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x15, &(0x7f0000000040)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}}, 0x20) 18:51:42 executing program 3: perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c62, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x840000000002, 0x3, 0xff) connect$inet(r0, &(0x7f0000000400)={0x2, 0x0, @remote}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/fib_trie\x00') sendfile(r0, r1, 0x0, 0xfffffffe) 18:51:42 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/igmp\x00') preadv(r0, &(0x7f0000001540)=[{&(0x7f0000001700)=""/108, 0x6c}], 0x1, 0x400000000000) 18:51:42 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x7f, 0x40000) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x4800) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, 0x0) [ 257.766489] binder: 10576:10579 ioctl c018620c 0 returned -14 18:51:43 executing program 1: set_mempolicy(0x4003, &(0x7f0000000040)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010009, 0xffffffffffffffff}) [ 257.974717] binder: 10590:10591 ioctl c018620c 0 returned -14 18:51:43 executing program 3: perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c62, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x840000000002, 0x3, 0xff) connect$inet(r0, &(0x7f0000000400)={0x2, 0x0, @remote}, 0x10) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffffe) 18:51:43 executing program 0: r0 = socket$inet6(0xa, 0x806, 0x0) r1 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000002c0)={'team0\x00'}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000480)={@ipv4={[], [], @loopback}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'team0\x00\x00\xff\xff\xff\xc0\x00', 0xc201}) [ 258.015037] binder: 10592:10593 ioctl c018620c 0 returned -14 18:51:43 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') getdents(r0, &(0x7f0000000140)=""/49, 0x3cc) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x910, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) openat$md(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$getown(r1, 0x9) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) getdents(r0, 0x0, 0x0) 18:51:43 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x2, 0x1) write$sndseq(r0, &(0x7f00000028ef), 0xffffff2f) 18:51:43 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x400d00, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f00000000c0)) clone(0x40100400, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, 0x0) 18:51:43 executing program 5: pipe2(0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) socketpair$unix(0x1, 0x4000000000000005, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write(0xffffffffffffffff, 0x0, 0x0) fstatfs(r0, &(0x7f0000000000)=""/189) [ 258.544030] IPVS: ftp: loaded support on port[0] = 21 18:51:43 executing program 3: perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c62, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x840000000002, 0x3, 0xff) connect$inet(r0, &(0x7f0000000400)={0x2, 0x0, @remote}, 0x10) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffffe) [ 258.637994] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.692383] binder: 10607:10611 ioctl c018620c 0 returned -14 [ 258.725065] 8021q: adding VLAN 0 to HW filter on device team0 18:51:43 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ab553fec94", 0x5) r1 = accept$alg(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x271) recvmsg(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000004c0)=""/252, 0xfc}, {0x0}], 0x2}, 0x0) 18:51:43 executing program 3: perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c62, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x840000000002, 0x3, 0xff) connect$inet(r0, &(0x7f0000000400)={0x2, 0x0, @remote}, 0x10) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffffe) 18:51:44 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x10000}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x3f00000000000000, 0x60, &(0x7f0000000080)={0x0, @local, 0x0, 0x0, 'fo\x00\a\x00', 0x18}, 0x2c) 18:51:44 executing program 1: set_mempolicy(0x4003, &(0x7f0000000040)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010009, 0xffffffffffffffff}) 18:51:44 executing program 2: shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x420400, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x8f}, &(0x7f0000000180)=0x8) r3 = msgget(0x3, 0x8) msgctl$IPC_INFO(r3, 0x3, &(0x7f0000000200)=""/3) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f00000001c0)={r2, 0x7}, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000300)=0x7) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x28000, 0x0) ioctl$TUNSETVNETHDRSZ(r5, 0x400454d8, &(0x7f00000000c0)=0x5) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, 0x0) msgctl$IPC_INFO(r3, 0x3, &(0x7f0000000240)=""/139) 18:51:44 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x73, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, 0x0, 0x40000) openat$cgroup(0xffffffffffffff9c, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) close(0xffffffffffffffff) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001240)="2e0000002a00815fe45ac187185095cf0800b0eba0b4d65cdbaa98cbb30007fff00000000000000051894d5d1dac", 0x2e}], 0x1}, 0x0) 18:51:44 executing program 3: perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c62, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x840000000002, 0x3, 0xff) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/fib_trie\x00') sendfile(r0, r1, 0x0, 0xfffffffe) [ 259.250936] binder: 10641:10642 ioctl c018620c 0 returned -14 [ 259.348427] binder: 10641:10648 ioctl c018620c 0 returned -14 18:51:44 executing program 3: perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c62, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x840000000002, 0x3, 0xff) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/fib_trie\x00') sendfile(r0, r1, 0x0, 0xfffffffe) [ 259.564295] x_tables: duplicate underflow at hook 4 [ 259.591557] ================================================================== [ 259.598972] BUG: KMSAN: uninit-value in __run_timers+0xc85/0x11d0 [ 259.605333] CPU: 1 PID: 10661 Comm: udevd Not tainted 5.0.0-rc1+ #9 [ 259.611721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 259.621059] Call Trace: [ 259.623645] [ 259.625791] dump_stack+0x173/0x1d0 [ 259.629417] kmsan_report+0x12e/0x2a0 [ 259.633291] __msan_warning+0x82/0xf0 [ 259.637088] __run_timers+0xc85/0x11d0 [ 259.641003] ? timers_dead_cpu+0xa50/0xa50 [ 259.645235] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 259.650424] ? timers_dead_cpu+0xa50/0xa50 [ 259.654660] run_timer_softirq+0x2e/0x50 [ 259.658719] __do_softirq+0x53f/0x93a [ 259.662523] irq_exit+0x214/0x250 [ 259.665967] exiting_irq+0xe/0x10 [ 259.669413] smp_apic_timer_interrupt+0x48/0x70 [ 259.674072] apic_timer_interrupt+0x2e/0x40 [ 259.678379] [ 259.680605] RIP: 0010:kmsan_get_metadata_or_null+0x1/0x320 [ 259.686236] Code: 01 f8 e9 66 fc ff ff 49 81 ff ff ff ff 1f 0f 87 53 ff ff ff 48 8b 34 25 10 90 c3 8b 4c 01 fe e9 41 fe ff ff 0f 1f 44 00 00 55 <48> 89 e5 41 57 41 56 41 55 41 54 53 41 89 d6 49 bd 00 00 00 00 80 [ 259.705129] RSP: 0018:ffff888178bff170 EFLAGS: 00000202 ORIG_RAX: ffffffffffffff13 [ 259.712828] RAX: 0000000000000002 RBX: 0000000000000004 RCX: 0000000000000004 [ 259.720086] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888178bff25c [ 259.727348] RBP: ffff888178bff210 R08: 0000000000000002 R09: ffff888178bff1c8 [ 259.734608] R10: ffffffffffffffff R11: 0000000000000000 R12: ffff888178bff25c [ 259.741872] R13: 0000000000000005 R14: 0000000000000002 R15: 00000000894000ac [ 259.749148] ? __msan_poison_alloca+0x1f0/0x2a0 [ 259.753810] ? page_remove_rmap+0x85/0xec0 [ 259.758038] ? unmap_page_range+0x1f37/0x3f20 [ 259.762523] page_remove_rmap+0x85/0xec0 [ 259.766574] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 259.771755] unmap_page_range+0x1f37/0x3f20 [ 259.776116] unmap_single_vma+0x43f/0x5e0 [ 259.780266] unmap_vmas+0x321/0x440 [ 259.783901] exit_mmap+0x50e/0xa00 [ 259.787453] __mmput+0x159/0x5f0 [ 259.790808] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 259.795991] mmput+0xb9/0x110 [ 259.799092] flush_old_exec+0xdea/0x21b0 [ 259.803157] ? kernel_read+0x173/0x1c0 [ 259.807047] load_elf_binary+0x10a3/0x85b0 [ 259.811306] ? __msan_poison_alloca+0x1f0/0x2a0 [ 259.816090] ? bm_evict_inode+0x1a0/0x1a0 [ 259.820247] ? load_elf_binary+0x11f1/0x85b0 [ 259.824659] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 259.829840] ? load_script+0x10e0/0x10e0 [ 259.833887] ? load_script+0x10e0/0x10e0 [ 259.837943] search_binary_handler+0x2db/0xab0 [ 259.842527] __do_execve_file+0x2440/0x3010 [ 259.846864] __se_sys_execve+0xec/0x110 [ 259.850835] __x64_sys_execve+0x4a/0x70 [ 259.854802] do_syscall_64+0xbc/0xf0 [ 259.858634] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 259.863814] RIP: 0033:0x7fb9fef73207 [ 259.867528] Code: Bad RIP value. [ 259.870880] RSP: 002b:00007fffbafac708 EFLAGS: 00000202 ORIG_RAX: 000000000000003b [ 259.878574] RAX: ffffffffffffffda RBX: 00000000ffffffff RCX: 00007fb9fef73207 [ 259.885832] RDX: 00000000020cd850 RSI: 00007fffbafac800 RDI: 00007fffbafad810 [ 259.893085] RBP: 0000000000625500 R08: 00000000000025e9 R09: 00000000000025e9 [ 259.900354] R10: 0000000000000000 R11: 0000000000000202 R12: 00000000020cd850 [ 259.907608] R13: 0000000000000007 R14: 00000000020bc250 R15: 0000000000000005 [ 259.914878] [ 259.916495] Uninit was created at: [ 259.920035] kmsan_internal_poison_shadow+0x92/0x150 [ 259.925216] kmsan_kmalloc+0xa6/0x130 [ 259.929000] kmsan_slab_alloc+0xe/0x10 [ 259.932875] __kmalloc_track_caller+0xaa8/0xc70 [ 259.937531] kmemdup+0x7a/0xf0 [ 259.940712] __devinet_sysctl_register+0xe4/0x780 [ 259.945539] devinet_sysctl_register+0x2ef/0x3a0 [ 259.950283] inetdev_init+0x54e/0xa00 [ 259.954065] inetdev_event+0x417/0x1d80 [ 259.958023] raw_notifier_call_chain+0x13d/0x240 [ 259.962767] register_netdevice+0x210d/0x2660 [ 259.967250] veth_newlink+0x10e4/0x13b0 [ 259.971229] rtnl_newlink+0x2944/0x37a0 [ 259.975190] rtnetlink_rcv_msg+0x115b/0x1550 [ 259.979590] netlink_rcv_skb+0x431/0x620 [ 259.983654] rtnetlink_rcv+0x50/0x60 [ 259.987357] netlink_unicast+0xf3e/0x1020 [ 259.991600] netlink_sendmsg+0x127f/0x1300 [ 259.995830] __sys_sendto+0x8c4/0xac0 [ 259.999625] __se_sys_sendto+0x107/0x130 [ 260.003674] __x64_sys_sendto+0x6e/0x90 [ 260.007644] do_syscall_64+0xbc/0xf0 [ 260.011346] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 260.016517] ================================================================== [ 260.023861] Disabling lock debugging due to kernel taint [ 260.029293] Kernel panic - not syncing: panic_on_warn set ... [ 260.035180] CPU: 1 PID: 10661 Comm: udevd Tainted: G B 5.0.0-rc1+ #9 [ 260.042959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 260.052292] Call Trace: [ 260.054857] [ 260.057002] dump_stack+0x173/0x1d0 [ 260.060629] panic+0x3d1/0xb01 [ 260.063833] kmsan_report+0x293/0x2a0 [ 260.067636] __msan_warning+0x82/0xf0 [ 260.071426] __run_timers+0xc85/0x11d0 [ 260.075317] ? timers_dead_cpu+0xa50/0xa50 [ 260.079538] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 260.084716] ? timers_dead_cpu+0xa50/0xa50 [ 260.088940] run_timer_softirq+0x2e/0x50 [ 260.092990] __do_softirq+0x53f/0x93a [ 260.096881] irq_exit+0x214/0x250 [ 260.100326] exiting_irq+0xe/0x10 [ 260.103768] smp_apic_timer_interrupt+0x48/0x70 [ 260.108426] apic_timer_interrupt+0x2e/0x40 [ 260.112728] [ 260.114955] RIP: 0010:kmsan_get_metadata_or_null+0x1/0x320 [ 260.120566] Code: 01 f8 e9 66 fc ff ff 49 81 ff ff ff ff 1f 0f 87 53 ff ff ff 48 8b 34 25 10 90 c3 8b 4c 01 fe e9 41 fe ff ff 0f 1f 44 00 00 55 <48> 89 e5 41 57 41 56 41 55 41 54 53 41 89 d6 49 bd 00 00 00 00 80 [ 260.139455] RSP: 0018:ffff888178bff170 EFLAGS: 00000202 ORIG_RAX: ffffffffffffff13 [ 260.147152] RAX: 0000000000000002 RBX: 0000000000000004 RCX: 0000000000000004 [ 260.154406] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888178bff25c [ 260.161664] RBP: ffff888178bff210 R08: 0000000000000002 R09: ffff888178bff1c8 [ 260.168931] R10: ffffffffffffffff R11: 0000000000000000 R12: ffff888178bff25c [ 260.176190] R13: 0000000000000005 R14: 0000000000000002 R15: 00000000894000ac [ 260.183470] ? __msan_poison_alloca+0x1f0/0x2a0 [ 260.188129] ? page_remove_rmap+0x85/0xec0 [ 260.192350] ? unmap_page_range+0x1f37/0x3f20 [ 260.196839] page_remove_rmap+0x85/0xec0 [ 260.200896] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 260.206076] unmap_page_range+0x1f37/0x3f20 [ 260.210453] unmap_single_vma+0x43f/0x5e0 [ 260.214609] unmap_vmas+0x321/0x440 [ 260.218252] exit_mmap+0x50e/0xa00 [ 260.221818] __mmput+0x159/0x5f0 [ 260.225178] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 260.230367] mmput+0xb9/0x110 [ 260.233471] flush_old_exec+0xdea/0x21b0 [ 260.237522] ? kernel_read+0x173/0x1c0 [ 260.241429] load_elf_binary+0x10a3/0x85b0 [ 260.245687] ? __msan_poison_alloca+0x1f0/0x2a0 [ 260.250349] ? bm_evict_inode+0x1a0/0x1a0 [ 260.254490] ? load_elf_binary+0x11f1/0x85b0 [ 260.258901] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 260.264169] ? load_script+0x10e0/0x10e0 [ 260.268220] ? load_script+0x10e0/0x10e0 [ 260.272277] search_binary_handler+0x2db/0xab0 [ 260.276865] __do_execve_file+0x2440/0x3010 [ 260.281216] __se_sys_execve+0xec/0x110 [ 260.285191] __x64_sys_execve+0x4a/0x70 [ 260.289159] do_syscall_64+0xbc/0xf0 [ 260.292870] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 260.298046] RIP: 0033:0x7fb9fef73207 [ 260.301752] Code: Bad RIP value. [ 260.305100] RSP: 002b:00007fffbafac708 EFLAGS: 00000202 ORIG_RAX: 000000000000003b [ 260.312796] RAX: ffffffffffffffda RBX: 00000000ffffffff RCX: 00007fb9fef73207 [ 260.320054] RDX: 00000000020cd850 RSI: 00007fffbafac800 RDI: 00007fffbafad810 [ 260.327319] RBP: 0000000000625500 R08: 00000000000025e9 R09: 00000000000025e9 [ 260.334578] R10: 0000000000000000 R11: 0000000000000202 R12: 00000000020cd850 [ 260.341836] R13: 0000000000000007 R14: 00000000020bc250 R15: 0000000000000005 [ 261.681596] Shutting down cpus with NMI [ 261.700227] Kernel Offset: disabled [ 261.703855] Rebooting in 86400 seconds..