[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 39.486424] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 42.419973] random: sshd: uninitialized urandom read (32 bytes read) [ 42.866903] random: sshd: uninitialized urandom read (32 bytes read) [ 43.942232] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.61' (ECDSA) to the list of known hosts. [ 49.857103] random: sshd: uninitialized urandom read (32 bytes read) 2018/08/31 05:56:29 fuzzer started [ 51.168703] random: cc1: uninitialized urandom read (8 bytes read) 2018/08/31 05:56:31 dialing manager at 10.128.0.26:36423 2018/08/31 05:56:33 syscalls: 1 2018/08/31 05:56:33 code coverage: enabled 2018/08/31 05:56:33 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/08/31 05:56:33 setuid sandbox: enabled 2018/08/31 05:56:33 namespace sandbox: enabled 2018/08/31 05:56:33 fault injection: enabled 2018/08/31 05:56:33 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/08/31 05:56:33 net packed injection: enabled 2018/08/31 05:56:33 net device setup: enabled [ 58.983245] random: crng init done 05:58:32 executing program 0: pause() mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000), &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f0000d04000), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240), &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) unlink(&(0x7f0000000100)='./file0\x00') mount(&(0x7f0000000000), &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0), &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') mount(&(0x7f0000fb6000), &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f00002b9ff8), &(0x7f0000cbeff8)='./file0\x00', &(0x7f00005f7ffa)='ramfs\x00', 0x0, &(0x7f000002f000)) preadv(r0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x100) 05:58:32 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000000)) 05:58:32 executing program 3: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(&(0x7f0000018000), &(0x7f0000027000)='./file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, &(0x7f000000a000)) rename(&(0x7f0000000000)='./file0/bus\x00', &(0x7f0000000040)='./file0/file0\x00') lsetxattr(&(0x7f0000000400)='./file0/bus\x00', &(0x7f00000008c0)=@known='user.syz\x00', &(0x7f0000000900)='SECMARK\x00', 0x8, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40010120}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) 05:58:32 executing program 7: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000000000/0x600000)=nil, 0x600000) mount(&(0x7f0000d04000), &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x0, &(0x7f0000444000)) 05:58:32 executing program 2: r0 = memfd_create(&(0x7f0000001fc1)='#vmnet1nodevem1\x00', 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000), &(0x7f00000000c0)=0x14) close(0xffffffffffffffff) write(r0, &(0x7f0000002000)='/', 0x1) sendfile(r0, r0, &(0x7f0000000040), 0x7f) sendfile(r0, r0, &(0x7f0000001000), 0xfec) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', &(0x7f0000000180)='romfs\x00', 0x1000, &(0x7f00000001c0)) 05:58:32 executing program 4: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', &(0x7f0000000880)="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", 0x3, &(0x7f00000007c0)) perf_event_open(&(0x7f0000000040)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchown(r0, 0x0, 0x0) 05:58:32 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x400, &(0x7f0000000540)) mount(&(0x7f0000d04000), &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000), &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000377ff8), &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000377ff8), &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) unshare(0x2000400) preadv(r0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1af, 0x0) 05:58:32 executing program 6: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000280), &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0x0) write$P9_RLOPEN(r0, &(0x7f0000000080)={0x18}, 0x18) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000200)='./file0\x00', 0x80000002) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") truncate(&(0x7f0000000180)='./file0/bus\x00', 0x6) [ 174.716422] IPVS: ftp: loaded support on port[0] = 21 [ 174.725965] IPVS: ftp: loaded support on port[0] = 21 [ 174.746439] IPVS: ftp: loaded support on port[0] = 21 [ 174.766011] IPVS: ftp: loaded support on port[0] = 21 [ 174.779019] IPVS: ftp: loaded support on port[0] = 21 [ 174.808322] IPVS: ftp: loaded support on port[0] = 21 [ 174.811037] IPVS: ftp: loaded support on port[0] = 21 [ 174.827193] IPVS: ftp: loaded support on port[0] = 21 [ 177.850338] ip (4948) used greatest stack depth: 53960 bytes left [ 178.250653] ip (4969) used greatest stack depth: 53736 bytes left [ 179.050657] ip (5015) used greatest stack depth: 53576 bytes left [ 179.774019] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.780676] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.818865] device bridge_slave_0 entered promiscuous mode [ 179.860369] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.866868] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.877909] ip (5058) used greatest stack depth: 53480 bytes left [ 179.919974] device bridge_slave_0 entered promiscuous mode [ 179.948681] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.955171] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.996428] device bridge_slave_0 entered promiscuous mode [ 180.027043] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.033525] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.055079] device bridge_slave_0 entered promiscuous mode [ 180.068438] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.074911] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.085716] device bridge_slave_0 entered promiscuous mode [ 180.096646] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.103145] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.128223] device bridge_slave_0 entered promiscuous mode [ 180.148247] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.154712] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.177878] device bridge_slave_0 entered promiscuous mode [ 180.206171] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.212658] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.247001] device bridge_slave_0 entered promiscuous mode [ 180.264908] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.271368] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.289065] device bridge_slave_1 entered promiscuous mode [ 180.305082] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.311632] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.337173] device bridge_slave_1 entered promiscuous mode [ 180.353552] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.360319] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.389060] device bridge_slave_1 entered promiscuous mode [ 180.417740] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.424260] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.447076] device bridge_slave_1 entered promiscuous mode [ 180.467059] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.473678] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.502816] device bridge_slave_1 entered promiscuous mode [ 180.511896] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.518342] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.547046] device bridge_slave_1 entered promiscuous mode [ 180.562506] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.569000] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.596710] device bridge_slave_1 entered promiscuous mode [ 180.605221] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.611689] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.635310] device bridge_slave_1 entered promiscuous mode [ 180.651416] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 180.671645] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 180.688040] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 180.705728] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 180.720509] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 180.824808] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 180.867373] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 180.943940] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 180.952160] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 180.989910] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 180.998520] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 181.026745] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 181.034480] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 181.138713] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 181.153798] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 181.255444] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 181.835131] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 181.886138] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 181.928637] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 181.961182] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 181.986982] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 182.094721] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 182.106230] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 182.149165] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 182.165068] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 182.244109] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 182.257305] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 182.292072] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 182.307440] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 182.430931] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 182.461780] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 182.495357] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 182.502368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 182.555236] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 182.565294] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 182.574661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 182.600778] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 182.609690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 182.655413] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 182.665805] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 182.672805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 182.686272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 182.744998] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 182.751989] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 182.779315] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 182.788698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 182.834551] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 182.841670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 182.909882] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 182.916903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 182.943958] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 182.950892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 182.971871] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 182.979122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 183.035980] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 183.047490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 183.074144] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 183.081099] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 183.102187] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 183.109129] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 183.178841] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 183.185764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 183.262715] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 183.269753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 183.770337] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 183.792759] team0: Port device team_slave_0 added [ 183.886500] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 183.921784] team0: Port device team_slave_0 added [ 183.957157] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 183.980144] team0: Port device team_slave_0 added [ 184.042794] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 184.066975] team0: Port device team_slave_0 added [ 184.106000] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 184.125876] team0: Port device team_slave_0 added [ 184.165778] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 184.182867] team0: Port device team_slave_1 added [ 184.210707] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 184.229897] team0: Port device team_slave_0 added [ 184.244277] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 184.266637] team0: Port device team_slave_1 added [ 184.277972] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 184.306880] team0: Port device team_slave_0 added [ 184.320853] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 184.330459] team0: Port device team_slave_1 added [ 184.377686] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 184.395989] team0: Port device team_slave_0 added [ 184.412724] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 184.429624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 184.451121] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 184.483829] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 184.500936] team0: Port device team_slave_1 added [ 184.506864] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 184.524790] team0: Port device team_slave_1 added [ 184.561527] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 184.575704] team0: Port device team_slave_1 added [ 184.588404] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 184.597438] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 184.621727] team0: Port device team_slave_1 added [ 184.639466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 184.656170] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 184.685874] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 184.696748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 184.712790] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 184.763388] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 184.770750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 184.802892] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 184.839524] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 184.853782] team0: Port device team_slave_1 added [ 184.881210] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 184.889872] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 184.913895] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 184.945063] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 184.953770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 184.969972] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 184.999418] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 185.008526] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 185.016436] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 185.023864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 185.053724] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 185.089782] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 185.124353] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 185.149498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 185.178815] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 185.208869] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 185.219148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 185.229637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 185.277773] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 185.285406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 185.298135] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 185.311631] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 185.319049] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 185.326969] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 185.334893] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 185.346943] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 185.355710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 185.386270] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 185.421497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 185.458913] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 185.496304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 185.528279] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 185.555432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 185.577214] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 185.586092] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 185.595811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 185.607426] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 185.618386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 185.631189] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 185.673165] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 185.681301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 185.701091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 185.719326] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 185.727895] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 185.735457] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 185.751194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 185.765374] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 185.779001] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 185.805147] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 185.815873] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 185.824311] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 185.838412] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 185.846871] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 185.889975] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 185.911854] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 185.942116] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 185.969405] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 185.996963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 186.014474] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 186.024025] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 186.042461] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 186.071764] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 186.080373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 186.090255] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 186.117795] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 186.133990] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 186.150314] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 186.158187] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 186.168099] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 186.187180] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 186.201078] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 186.219775] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 186.244187] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 186.279409] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 186.305472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 186.341039] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 186.352681] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 186.366862] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 186.395938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 186.430695] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 186.458455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 186.609425] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 186.617139] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 186.634639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 189.441927] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.448404] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.455279] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.461754] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.496329] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 189.502866] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 189.549911] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.556398] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.563256] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.569761] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.618140] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 189.638204] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.644660] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.651605] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.658057] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.706358] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 189.719783] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.726233] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.733097] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.739546] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.817334] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 189.858484] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.865245] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.872356] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.879054] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.969370] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 189.977556] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.985016] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.991907] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.998376] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.054386] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 190.088023] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.094517] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.101417] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.107905] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.143172] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 190.173064] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.179530] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.186435] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.192879] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.288858] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 190.549384] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 190.564686] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 190.599303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 190.622484] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 190.637704] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 190.649885] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 190.659265] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 202.324968] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.383831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.655164] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.744158] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.762365] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.787965] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.817341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.416815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.551252] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 203.615650] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 203.752275] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 203.897656] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 203.990840] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 204.040607] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 204.053449] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 204.663126] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 204.782189] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 204.788511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 204.798087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 204.838893] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 204.848295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 204.869399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 204.970520] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 204.976888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 204.989020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 205.108841] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 205.115089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 205.128453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 205.210019] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 205.216370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 205.226993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 205.259008] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 205.275166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 205.287801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 205.336206] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 205.351717] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 205.385636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 205.896302] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 205.902902] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 205.917479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 206.017096] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.273975] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.310706] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.379708] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.424423] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.479517] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.664867] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.078326] 8021q: adding VLAN 0 to HW filter on device team0 05:59:12 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x31) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@multicast1, 0x0, 0x33}, 0x0, @in6=@mcast2}}, 0xe8) 05:59:13 executing program 3: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(&(0x7f0000018000), &(0x7f0000027000)='./file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, &(0x7f000000a000)) rename(&(0x7f0000000000)='./file0/bus\x00', &(0x7f0000000040)='./file0/file0\x00') lsetxattr(&(0x7f0000000400)='./file0/bus\x00', &(0x7f00000008c0)=@known='user.syz\x00', &(0x7f0000000900)='SECMARK\x00', 0x8, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40010120}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) 05:59:13 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000007c0)=0x800000000000002, 0x4) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="02005cdf0500"], &(0x7f0000000200)=0x1) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r1, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000a00)="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", 0x481, 0x0, &(0x7f000069affb)={0x2, 0x4e20, @loopback}, 0x10) recvmmsg(r1, &(0x7f0000002500)=[{{&(0x7f0000000180)=@un=@abs, 0x80, &(0x7f0000000100)}}, {{&(0x7f0000000580)=@generic, 0x80, &(0x7f0000002680), 0xdc, &(0x7f0000000780)=""/24, 0x18}}], 0x2, 0x0, &(0x7f0000000100)) 05:59:13 executing program 1: r0 = socket(0x15, 0x80005, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000000040)=ANY=[@ANYBLOB="8f6eef3e5bd6a1b59750f236d80302edf0"], 0x1) 05:59:13 executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff}) read(r0, &(0x7f0000000200)=""/252, 0xffffffffffffff01) 05:59:13 executing program 3: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(&(0x7f0000018000), &(0x7f0000027000)='./file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, &(0x7f000000a000)) rename(&(0x7f0000000000)='./file0/bus\x00', &(0x7f0000000040)='./file0/file0\x00') lsetxattr(&(0x7f0000000400)='./file0/bus\x00', &(0x7f00000008c0)=@known='user.syz\x00', &(0x7f0000000900)='SECMARK\x00', 0x8, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40010120}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) 05:59:13 executing program 7: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000040), 0x12) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 05:59:13 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @remote}, {0x0, @link_local}, 0x9, {0x2, 0x0, @multicast1}, "00000000000000000000000000000001"}) 05:59:13 executing program 0: pause() mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000), &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f0000d04000), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240), &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) unlink(&(0x7f0000000100)='./file0\x00') mount(&(0x7f0000000000), &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0), &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') mount(&(0x7f0000fb6000), &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f00002b9ff8), &(0x7f0000cbeff8)='./file0\x00', &(0x7f00005f7ffa)='ramfs\x00', 0x0, &(0x7f000002f000)) preadv(r0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x100) 05:59:13 executing program 6: getsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0x0, &(0x7f0000000280)=""/133, &(0x7f00000001c0)=0x85) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @local}, &(0x7f0000000240)=0x1c) bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d}, 0x2c) 05:59:13 executing program 4: r0 = socket(0x10, 0x3, 0x0) accept$packet(0xffffffffffffffff, &(0x7f00000005c0), &(0x7f0000000600)=0x14) sendmsg$nl_route(r0, &(0x7f00000006c0)={&(0x7f0000000200), 0xc, &(0x7f0000000680)={&(0x7f0000000640)=@bridge_getneigh={0x20, 0x1e, 0x9, 0x0, 0x25dfdbff}, 0x20}}, 0x0) 05:59:13 executing program 3: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(&(0x7f0000018000), &(0x7f0000027000)='./file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, &(0x7f000000a000)) rename(&(0x7f0000000000)='./file0/bus\x00', &(0x7f0000000040)='./file0/file0\x00') lsetxattr(&(0x7f0000000400)='./file0/bus\x00', &(0x7f00000008c0)=@known='user.syz\x00', &(0x7f0000000900)='SECMARK\x00', 0x8, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40010120}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) 05:59:13 executing program 7: syz_emit_ethernet(0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="ff"], &(0x7f00000002c0)) r0 = semget(0x0, 0x1, 0x80) semctl$IPC_RMID(r0, 0x0, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x8, 0x400000) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x100, 0x0) membarrier(0x20, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000080)={r2, 0x1, 0x9, "cef21e9fe2a128dda9f87da16a49e313ba8508546a07e80660eec7bf73d848292970faa17e1d89ff42f1e507adce7977ee6f15ee6e464eb609"}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000200), 0x42) 05:59:13 executing program 2: r0 = socket(0x11, 0x802, 0xc) write(r0, &(0x7f0000000100)="1f000000010213f5d710e152d91f1c00f3f6000008000100010423dcffdf00", 0x1f) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000040)={0x84, @empty, 0x4e22, 0x1, 'nq\x00', 0x17, 0x173a000, 0x2b}, 0x2c) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)) 05:59:13 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2000, 0x0) splice(r0, &(0x7f0000000040), r1, &(0x7f00000000c0)=0x4b, 0x2, 0xaa6f24c2bb95beeb) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="e955"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x48, 0x6c}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 05:59:13 executing program 1: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x24000, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0x2, 0x3, 0x1, 0x3, 0x1c0000000000000, 0x20, 0x8, 0x34f, 0x1, 0x7fff}) unshare(0x20400) fdatasync(0xffffffffffffffff) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) 05:59:14 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r0}) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000080)={r0}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) seccomp(0x1, 0x0, &(0x7f0000001980)={0x2, &(0x7f0000000580)=[{0x3c}, {0x6}]}) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x10000) 05:59:14 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67affcdf031a5a2080000001c26b3", 0x10) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x3, 0x4800) write$P9_RCREATE(r1, &(0x7f00000000c0)={0x18, 0x73, 0x2, {{0x4, 0x1}, 0x418}}, 0x18) r2 = accept4$alg(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f00000028c0)=[{0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x40040}], 0x4924924924924d7, 0x0) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f00000001c0)) socket$can_bcm(0x1d, 0x2, 0x2) 05:59:14 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x200000) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000380)=[@in={0x2, 0x4e22, @multicast1}, @in={0x2, 0x4e23, @loopback}], 0x20) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='hybla\x00', 0x6) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000240)={0x585, 0x29, 0x7, 0xfa3}, 0x8) io_setup(0x20, &(0x7f0000000280)=0x0) write$binfmt_elf64(r1, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x9, 0x7, 0x101, 0x82, 0x3, 0x3e, 0x5, 0x288, 0x40, 0x1d2, 0x6, 0x5c34, 0x38, 0x1, 0x8, 0x5, 0x3}, [{0x70000002, 0xffffffff, 0xfffffffffffffffb, 0x10000, 0x67, 0x7, 0x501, 0x800}], "626d208ab523ec61d0238e0eab15261105b8380074077a18c4e5f0687248b9665f2abccde512e4991ed3e9433f841d866d8a046dab665ed78d88bef2cfccdac0ebf5a6b68d81cd1053eca2db04e355c07a41dce37d9366ccbb7b89006f68836ae5d31ccf0a2de43039180758ed4d2c6167e5bc4427f22c31233236bf42628a1b97498d775600f1", [[], [], [], [], []]}, 0x5ff) io_destroy(r2) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) ppoll(&(0x7f0000000340)=[{r1}, {r0, 0x400}, {r1}, {r0}, {r0, 0x2}, {r1, 0x4}, {r0, 0x21}], 0x7, &(0x7f00000009c0)={0x77359400}, &(0x7f0000000a00)={0x5}, 0x8) shutdown(r0, 0x1) shutdown(r1, 0x1) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f00000002c0), &(0x7f0000000300)=0x10) getpeername(r0, &(0x7f0000000000)=@ipx, &(0x7f0000000080)=0x80) ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f0000000180)=""/142) 05:59:14 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/autofs\x00', 0x6000, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000340)={0x0, @rand_addr, @rand_addr}, &(0x7f0000000380)=0xc) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000480)={0x0, 0x0, {0x3a, 0x32, 0x12, 0xb, 0x3, 0x8000, 0x3, 0x81}}) r1 = socket(0x1e, 0x20000000202, 0x8) bind(r1, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000400)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x110}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, r2, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x207}, @NBD_ATTR_SOCKETS={0x14, 0x7, [{0x8, 0x1, r1}, {0x8, 0x1, r1}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) ioctl(r0, 0x3ff, &(0x7f00000004c0)="ffd8d5e3d9851cce3ba1852ef9bbdd461622e155aca326aec5a376c5e0ec3ec4cf7528a46b3d866c8fe6e225d9efd553ab2a45902cdd534034d8447b1a66257ebabae5a444a9a55d1a0e929953ef864640f38e0a2a249e1019cc66886a24d37be920583146da2beec3f317eca57de9c7e7b854cd6e7192f65c666702e9893c61a61ad8f3425d764157a916c0ca51943f205df4bc") ioctl$PPPIOCGFLAGS(r1, 0x8004745a, &(0x7f0000000100)) r3 = socket(0x1e, 0x5, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/autofs\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f00000002c0)={0x2, '\x00', 0x2}, 0x18) sendmsg(r3, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000001000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="5e2fa564b81eb4ed3fe3f5f03379071e4c0f000eed0e322db72a5fe1c36a5ab23b7613c891e6a2c5826e57dd57df866801cdc9055769da9aa78eff850f8d18dfb52af0243bf99d7b2b010373971db86eedd38a9a2f501bf92386879bce702e386870db6bb54275b15105266c797f421e8d8d44500a751d92147719562e84cff38739b3b62a6392cce1bc7d9c61f6ab1314901b18ff47fb0c0836cd4243b753ad6177c9edc29d", 0xa6}], 0x1, &(0x7f00002d4000)}, 0x0) rseq(&(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x2, 0xff, 0x3, 0x5}, 0x5}, 0x20, 0x0, 0x0) 05:59:14 executing program 3: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(&(0x7f0000018000), &(0x7f0000027000)='./file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, &(0x7f000000a000)) rename(&(0x7f0000000000)='./file0/bus\x00', &(0x7f0000000040)='./file0/file0\x00') lsetxattr(&(0x7f0000000400)='./file0/bus\x00', &(0x7f00000008c0)=@known='user.syz\x00', &(0x7f0000000900)='SECMARK\x00', 0x8, 0x0) 05:59:14 executing program 1: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x24000, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0x2, 0x3, 0x1, 0x3, 0x1c0000000000000, 0x20, 0x8, 0x34f, 0x1, 0x7fff}) unshare(0x20400) fdatasync(0xffffffffffffffff) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) 05:59:14 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2000, 0x0) splice(r0, &(0x7f0000000040), r1, &(0x7f00000000c0)=0x4b, 0x2, 0xaa6f24c2bb95beeb) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="e955"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x48, 0x6c}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 05:59:14 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) poll(&(0x7f0000000140)=[{r0}, {r1, 0x200}], 0x2, 0x0) 05:59:14 executing program 3: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(&(0x7f0000018000), &(0x7f0000027000)='./file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, &(0x7f000000a000)) rename(&(0x7f0000000000)='./file0/bus\x00', &(0x7f0000000040)='./file0/file0\x00') 05:59:14 executing program 7: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000002c0)="0a5c2d0252926285717070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@ipv6_newrule={0x34, 0x20, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_SRC={0x14, 0x2, @loopback}]}, 0x34}}, 0x0) 05:59:14 executing program 1: r0 = socket$inet6(0xa, 0x1000000000000803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c2d0252926285717070") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 05:59:14 executing program 4: r0 = socket$inet(0x10, 0x4000000003, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000000)) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="24000000260007031dfffd946f610500000000000000fd21fe1c4095421ba3a20400ff7e", 0x24}], 0x1}, 0x0) 05:59:14 executing program 0: pause() mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000), &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f0000d04000), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240), &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) unlink(&(0x7f0000000100)='./file0\x00') mount(&(0x7f0000000000), &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0), &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') mount(&(0x7f0000fb6000), &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f00002b9ff8), &(0x7f0000cbeff8)='./file0\x00', &(0x7f00005f7ffa)='ramfs\x00', 0x0, &(0x7f000002f000)) preadv(r0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x100) 05:59:14 executing program 5: r0 = socket$inet(0x2, 0x3, 0x3) recvfrom$inet(r0, &(0x7f0000000300)=""/103, 0x67, 0x0, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000240), 0x0, 0x0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0a5c2d0252926285717070") ioctl$sock_SIOCGIFINDEX(r0, 0x8906, &(0x7f00000002c0)={'bpq0\x00'}) 05:59:14 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b7070000010000004070000000185819bc700000000000009500000000000000"], &(0x7f0000000140)="7653fd49477c8a4c5bf2279ceab1c0b119919d2f51d9e354ceda783b0225c51cd54741ad5b28bb6c5a011d4692235d25736ad069c6431f26e2c5a57a7fe120fbc23703848eef822dfc2424af0bbd951e0fbe5649ec0d210c86f5fb5b591ed4df63b1c8a2c12f35ff721f8040b846eade93a1cb36eef2ce95f2fd78521746adc17ea2973d4f5e6f22bba8973436"}, 0x48) 05:59:15 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_subtree(r0, &(0x7f00000009c0)={[{0x0, 'rdma'}]}, 0x6) getpid() bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0x28, &(0x7f00000003c0)}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.stat\x00', 0x0, 0x0) getpid() ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000480)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}) 05:59:15 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$sock_attach_bpf(r0, 0x84, 0x65, &(0x7f00000000c0), 0x54deded00158a180) setsockopt$sock_attach_bpf(r0, 0x1, 0x2e, &(0x7f00000001c0), 0x10) close(r0) 05:59:15 executing program 7: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)="2e2f6367726f75702e6e65742f73797a3002", 0x1ff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) write$cgroup_type(r1, &(0x7f0000000180)='threaded\x00', 0xffffff5f) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000240)) close(r1) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) 05:59:15 executing program 6: clone(0x200, &(0x7f0000fbf000), &(0x7f0000000000), &(0x7f0000000100), &(0x7f00000000c0)) mknod(&(0x7f00000056c0)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000000380), &(0x7f00000001c0)) execve(&(0x7f0000000000)='./bus\x00', &(0x7f0000000100), &(0x7f00000002c0)) open(&(0x7f0000363ff8)='./file0\x00', 0x401, 0x0) 05:59:15 executing program 2: mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(&(0x7f0000000000)=ANY=[], &(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000140)='selinuxfs\x00', 0x0, &(0x7f00000000c0)) mremap(&(0x7f0000331000/0x3000)=nil, 0x4cb000, 0x600000, 0x3, &(0x7f00007fc000/0x600000)=nil) 05:59:15 executing program 3: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file0/bus\x00', &(0x7f0000000040)='./file0/file0\x00') 05:59:15 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000100), 0x4) 05:59:15 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000003f00)={&(0x7f0000000a80), 0xc, &(0x7f0000003ec0)={&(0x7f0000000c00)=@setlink={0x20, 0x13, 0x1}, 0x20}}, 0x0) 05:59:15 executing program 3: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file0/bus\x00', &(0x7f0000000040)='./file0/file0\x00') 05:59:15 executing program 0: pause() mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000), &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f0000d04000), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240), &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) unlink(&(0x7f0000000100)='./file0\x00') mount(&(0x7f0000000000), &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0), &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') mount(&(0x7f0000fb6000), &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f00002b9ff8), &(0x7f0000cbeff8)='./file0\x00', &(0x7f00005f7ffa)='ramfs\x00', 0x0, &(0x7f000002f000)) preadv(r0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x100) 05:59:15 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x24) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) sendmmsg(r0, &(0x7f000000be80)=[{{0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f0000000880)}}, {{&(0x7f0000003f40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x80, &(0x7f0000005140), 0x0, &(0x7f0000005180)}}], 0x2, 0x0) 05:59:15 executing program 5: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') poll(&(0x7f00000000c0)=[{r1}, {r0}], 0x2, 0x10080c) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000c85000)) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f00000003c0)=ANY=[], &(0x7f0000026ff8)='./file0\x00', &(0x7f00000013c0)='ramfs\x00', 0x0, &(0x7f0000000000)) chroot(&(0x7f0000000280)='./file0\x00') mount(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', &(0x7f0000000180)='jffs2\x00', 0x201000, &(0x7f00000002c0)) pivot_root(&(0x7f0000001380)='./file0\x00', &(0x7f00000016c0)='./file0\x00') 05:59:15 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendmmsg(r0, &(0x7f00000085c0)=[{{&(0x7f0000000480)=@pppoe={0x18, 0x0, {0x0, @dev, 'eql\x00'}}, 0x80, &(0x7f0000005d00), 0x0, &(0x7f0000005dc0)=[{0x10, 0x1, 0xe59}], 0x10}}], 0x1, 0x0) 05:59:15 executing program 3: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file0/bus\x00', &(0x7f0000000040)='./file0/file0\x00') [ 216.965461] ================================================================== [ 216.972904] BUG: KMSAN: uninit-value in __x64_sys_futex+0x1b9/0x200 [ 216.979337] CPU: 0 PID: 7048 Comm: syz-executor1 Not tainted 4.19.0-rc1+ #39 [ 216.986539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 216.995903] Call Trace: [ 216.998511] dump_stack+0x14b/0x190 [ 217.002181] kmsan_report+0x183/0x2b0 [ 217.006026] __msan_warning+0x70/0xc0 [ 217.009862] __x64_sys_futex+0x1b9/0x200 [ 217.013950] ? __x64_sys_sendmmsg+0x11c/0x170 [ 217.018483] ? futex_lock_pi+0x1dd0/0x1dd0 [ 217.022743] do_syscall_64+0x15b/0x220 [ 217.026679] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 217.031890] RIP: 0033:0x457099 [ 217.035114] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 217.054037] RSP: 002b:00007f69e13b6cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 217.061781] RAX: ffffffffffffffda RBX: 00000000009300a8 RCX: 0000000000457099 [ 217.069070] RDX: 0000000000000016 RSI: 0000000000000081 RDI: 00000000009300ac [ 217.076361] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 217.083659] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000009300ac [ 217.090954] R13: 0000000000a3fb9f R14: 00007f69e13b79c0 R15: 0000000000000000 [ 217.098261] [ 217.099896] Local variable description: ----msg_sys@__sys_sendmmsg [ 217.106225] Variable was created at: [ 217.109966] __sys_sendmmsg+0x98/0x930 [ 217.113929] __x64_sys_sendmmsg+0x11c/0x170 [ 217.118253] ================================================================== [ 217.125616] Disabling lock debugging due to kernel taint [ 217.131073] Kernel panic - not syncing: panic_on_warn set ... [ 217.131073] [ 217.138461] CPU: 0 PID: 7048 Comm: syz-executor1 Tainted: G B 4.19.0-rc1+ #39 [ 217.147046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 217.156407] Call Trace: [ 217.159028] dump_stack+0x14b/0x190 [ 217.162688] panic+0x35d/0x8cb [ 217.165928] ? __x64_sys_sendmmsg+0x11c/0x170 [ 217.170467] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 217.175951] kmsan_report+0x2a8/0x2b0 [ 217.179796] __msan_warning+0x70/0xc0 [ 217.183628] __x64_sys_futex+0x1b9/0x200 [ 217.187743] ? __x64_sys_sendmmsg+0x11c/0x170 [ 217.192274] ? futex_lock_pi+0x1dd0/0x1dd0 [ 217.196528] do_syscall_64+0x15b/0x220 [ 217.200464] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 217.205697] RIP: 0033:0x457099 [ 217.208920] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 217.227841] RSP: 002b:00007f69e13b6cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 217.235571] RAX: ffffffffffffffda RBX: 00000000009300a8 RCX: 0000000000457099 [ 217.242854] RDX: 0000000000000016 RSI: 0000000000000081 RDI: 00000000009300ac [ 217.250141] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 217.257441] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000009300ac [ 217.264745] R13: 0000000000a3fb9f R14: 00007f69e13b79c0 R15: 0000000000000000 [ 217.272401] Dumping ftrace buffer: [ 217.275937] (ftrace buffer empty) [ 217.279632] Kernel Offset: disabled [ 217.283248] Rebooting in 86400 seconds..