[ 58.258644] audit: type=1800 audit(1539008480.291:27): pid=6034 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 59.828629] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 63.726244] random: sshd: uninitialized urandom read (32 bytes read) [ 64.289171] random: sshd: uninitialized urandom read (32 bytes read) [ 66.418974] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.48' (ECDSA) to the list of known hosts. [ 72.206863] random: sshd: uninitialized urandom read (32 bytes read) 2018/10/08 14:21:36 fuzzer started [ 76.856552] random: cc1: uninitialized urandom read (8 bytes read) 2018/10/08 14:21:41 dialing manager at 10.128.0.26:43781 2018/10/08 14:21:41 syscalls: 1 2018/10/08 14:21:41 code coverage: enabled 2018/10/08 14:21:41 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/10/08 14:21:41 setuid sandbox: enabled 2018/10/08 14:21:41 namespace sandbox: enabled 2018/10/08 14:21:41 Android sandbox: /sys/fs/selinux/policy does not exist 2018/10/08 14:21:41 fault injection: enabled 2018/10/08 14:21:41 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/10/08 14:21:41 net packed injection: enabled 2018/10/08 14:21:41 net device setup: enabled [ 82.495575] random: crng init done 14:23:46 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) fanotify_init(0x1b, 0x0) [ 205.005073] IPVS: ftp: loaded support on port[0] = 21 [ 207.418634] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.425258] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.434023] device bridge_slave_0 entered promiscuous mode [ 207.581729] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.588365] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.597063] device bridge_slave_1 entered promiscuous mode [ 207.749842] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 207.897771] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 208.355618] bond0: Enslaving bond_slave_0 as an active interface with an up link 14:23:50 executing program 1: r0 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={&(0x7f0000000380), &(0x7f0000001380)}}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000280)) futex(&(0x7f00000000c0)=0x2, 0x0, 0x2, &(0x7f0000000140)={0x77359400}, &(0x7f0000000180), 0x0) tkill(r0, 0x15) [ 208.519737] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 208.926389] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 208.933689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 209.351326] IPVS: ftp: loaded support on port[0] = 21 [ 209.677021] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 209.685431] team0: Port device team_slave_0 added [ 209.960611] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 209.968809] team0: Port device team_slave_1 added [ 210.229290] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 210.236443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 210.245728] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 210.436868] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 210.444048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 210.453528] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 210.670279] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 210.678124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 210.687549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 210.901211] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 210.909330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 210.918954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 213.373973] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.380452] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.389091] device bridge_slave_0 entered promiscuous mode [ 213.546549] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.553666] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.560646] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.567274] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.576371] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 213.598379] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.605016] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.613838] device bridge_slave_1 entered promiscuous mode [ 213.868405] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 214.026854] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready 14:23:56 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={0x0}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000600)={r1, 0x9}, &(0x7f0000000640)=0x8) r2 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x2, 0x2000) ioctl$EVIOCGBITSND(r2, 0x80404532, &(0x7f0000000180)=""/240) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000000080)) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000280), 0xffffffffffffffff) syz_genetlink_get_family_id$nbd(&(0x7f0000000300)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB="100025bd7000fedbdf25010000000c00060000000000000000000800010000000000"], 0x1}, 0x1, 0x0, 0x0, 0x4004}, 0x40) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000003c0)={{{@in, @in6=@remote}}, {{@in=@rand_addr}, 0x0, @in=@rand_addr}}, &(0x7f0000000100)=0xe8) sendto(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x40, &(0x7f00000004c0)=@hci={0x1f, 0x0, 0x3}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f00000000c0)={'ip6_vth0\x00', {0x2, 0x0, @multicast1}}) setsockopt$inet6_buf(r0, 0x29, 0x80000000000040, &(0x7f0000000080), 0x0) [ 214.412669] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 214.753787] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 215.063775] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 215.358560] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 215.368401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 215.395152] IPVS: ftp: loaded support on port[0] = 21 [ 215.658869] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 215.666360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 216.548831] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 216.557427] team0: Port device team_slave_0 added [ 216.809033] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 216.817317] team0: Port device team_slave_1 added [ 217.107916] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 217.115280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 217.124190] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 217.417747] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 217.424957] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 217.434383] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 217.770982] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 217.778782] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 217.788064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 218.110090] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 218.117933] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 218.127132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 220.188555] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.195242] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.203922] device bridge_slave_0 entered promiscuous mode [ 220.424989] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.431468] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.440160] device bridge_slave_1 entered promiscuous mode [ 220.810464] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 221.150407] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 221.284455] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.290984] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.298086] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.304656] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.313657] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 221.937469] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 222.013529] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 222.284045] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 222.612632] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 222.619715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready 14:24:04 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) sendto$inet6(r0, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x20, @dev}, 0x1c) [ 222.876270] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 222.883665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 223.916741] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 223.924924] team0: Port device team_slave_0 added [ 224.240317] IPVS: ftp: loaded support on port[0] = 21 [ 224.361773] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 224.369979] team0: Port device team_slave_1 added [ 224.741456] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 224.748796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 224.758034] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 225.145609] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 225.152910] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 225.161901] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 225.537024] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 225.544877] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 225.554129] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 225.886072] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 225.893953] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 225.903298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 226.605957] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.939497] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 229.154554] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 229.160969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 229.169142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 230.106526] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.113107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.120047] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.126627] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.135570] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 230.433866] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.677774] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.684445] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.693076] device bridge_slave_0 entered promiscuous mode [ 230.894801] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 231.090251] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.096949] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.105544] device bridge_slave_1 entered promiscuous mode [ 231.494858] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 231.853993] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 232.921335] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 233.345478] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 233.714414] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 233.721861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready 14:24:16 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001000)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(sha3-384-generic,cbc(aes-aesni))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8), 0x1803) [ 234.105918] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 234.113193] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 235.346858] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 235.355143] team0: Port device team_slave_0 added [ 235.809477] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 235.817755] team0: Port device team_slave_1 added [ 235.851845] IPVS: ftp: loaded support on port[0] = 21 [ 236.215591] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 236.222997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 236.231969] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 236.676026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.696885] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 236.704117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 236.713294] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 237.160281] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 237.168848] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 237.178164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 237.654304] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 237.662002] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 237.671600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 238.389922] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready 14:24:22 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000000c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) [ 240.121670] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 240.128339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 240.136436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 14:24:22 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000000c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) 14:24:23 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f4634418dd25d766070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigqueueinfo(0x0, 0x0, &(0x7f00000000c0)) r1 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x5, 0x20000) ioctl$KVM_GET_FPU(r1, 0x81a0ae8c, &(0x7f00000002c0)) seccomp(0x0, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x9, 0x1f, 0x7ff, 0xfffffffffffffff8}, {0x2e, 0x200, 0x400, 0x8}]}) 14:24:23 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x100, 0x9, 0x0, r1}, 0x2c) symlink(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00') ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000080)=""/128) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xd, 0x18, 0x4, 0x7, 0x0, r2}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r3, &(0x7f0000000000), &(0x7f00000001c0)=""/192}, 0x18) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x40, 0x0) fdatasync(r2) lsetxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='trusted.overlay.upper\x00', &(0x7f00000002c0)={0x0, 0xfb, 0x32, 0x7, 0x80000000, "5d91a2ad4f89411a4618db80927c2c9e", "aa8835cc0ca856be86babf324bd4fff57e605b3617fa0c333e820db827"}, 0x32, 0x0) [ 241.941799] 8021q: adding VLAN 0 to HW filter on device team0 14:24:24 executing program 0: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x2f, &(0x7f0000000080), 0x10) 14:24:24 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000100)='schedstat\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x4000)=nil, 0x1000) shmdt(r3) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000001c0)={0x0, 0xc628}, &(0x7f0000000200)=0x8) openat$dsp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dsp\x00', 0x2042, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair(0x0, 0xfffffffffffffffe, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r4, 0x40505331, &(0x7f0000000040)={{0x7, 0x4}, {0x800, 0x10000}, 0x8100000000000, 0x3, 0x1000}) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000280)) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000300)=ANY=[@ANYBLOB="0300000000000000000000000000000000c7188d1a3c200a93558bc592dbf61bca4f6b51991193303796fd6797650f615a53abedf2fa2e42"]) [ 242.798348] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.804981] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.811975] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.818625] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.827318] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 243.152968] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 14:24:25 executing program 0: timer_create(0xffbffffffffffff1, &(0x7f0000000380)={0x0, 0x0, 0x1, @thr={&(0x7f0000000080), &(0x7f0000000140)}}, &(0x7f0000000400)) clock_getres(0x0, &(0x7f0000000100)) r0 = open(&(0x7f0000000000)='./file0\x00', 0xc2, 0x1) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e21, @local}}, [0xa4, 0x2, 0x81, 0x4, 0x1f, 0x250, 0x6, 0xfffffffffffffff5, 0x3f, 0x2, 0x4, 0x9, 0x2000000001, 0x9, 0x400000000]}, &(0x7f0000000080)=0xd7) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x40000000) [ 243.519123] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.526521] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.535663] device bridge_slave_0 entered promiscuous mode 14:24:25 executing program 0: timer_create(0xffbffffffffffff1, &(0x7f0000000380)={0x0, 0x0, 0x1, @thr={&(0x7f0000000080), &(0x7f0000000140)}}, &(0x7f0000000400)) clock_getres(0x0, &(0x7f0000000100)) r0 = open(&(0x7f0000000000)='./file0\x00', 0xc2, 0x1) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e21, @local}}, [0xa4, 0x2, 0x81, 0x4, 0x1f, 0x250, 0x6, 0xfffffffffffffff5, 0x3f, 0x2, 0x4, 0x9, 0x2000000001, 0x9, 0x400000000]}, &(0x7f0000000080)=0xd7) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x40000000) [ 244.018898] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.025652] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.034907] device bridge_slave_1 entered promiscuous mode [ 244.505718] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 244.867936] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 245.983544] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 246.445381] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 246.831956] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 246.839344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 247.210599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.229637] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 247.236951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 248.140479] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 248.149327] team0: Port device team_slave_0 added [ 248.498024] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 248.506627] team0: Port device team_slave_1 added [ 248.515326] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 248.792508] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 248.799927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 248.809217] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 249.126788] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 249.136085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 249.144862] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 249.441485] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 249.449589] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 249.458824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 249.829068] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 249.837143] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 249.846158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 249.863734] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 249.876419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 249.884272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 250.751707] 8021q: adding VLAN 0 to HW filter on device team0 14:24:33 executing program 1: r0 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={&(0x7f0000000380), &(0x7f0000001380)}}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000280)) futex(&(0x7f00000000c0)=0x2, 0x0, 0x2, &(0x7f0000000140)={0x77359400}, &(0x7f0000000180), 0x0) tkill(r0, 0x15) [ 252.975001] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.981508] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.988610] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.995205] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.003934] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 253.010771] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 254.838793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.595544] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready 14:24:38 executing program 2: [ 256.414720] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 256.421095] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 256.428976] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 256.996508] 8021q: adding VLAN 0 to HW filter on device team0 [ 260.266619] 8021q: adding VLAN 0 to HW filter on device bond0 14:24:42 executing program 3: [ 260.767089] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 261.204358] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 261.210625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 261.219095] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 261.519507] 8021q: adding VLAN 0 to HW filter on device team0 14:24:45 executing program 4: 14:24:45 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000080)=0xf8, 0x12) getsockopt(r1, 0x0, 0xce, &(0x7f0000001400)=""/203, &(0x7f0000000040)=0xcb) 14:24:45 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x4000) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000040)={{{@in=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@dev}}, &(0x7f0000000140)=0xe8) connect$packet(r0, &(0x7f0000000180)={0x11, 0x16, r1, 0x1, 0x98, 0x6, @local}, 0x14) r2 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x6, &(0x7f00000001c0)={0x1, 0x4, 0x2, 0x3ff, r2}) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x41091201}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x124, r3, 0x408, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x68, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000001}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6c}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x12}}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x68, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x19, 0x20}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x16}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x10001}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2d}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0x124}, 0x1, 0x0, 0x0, 0x80d0}, 0x40) setsockopt$inet6_dccp_int(r0, 0x21, 0x7, &(0x7f00000004c0)=0x100000000, 0x4) sendmsg$kcm(r0, &(0x7f0000000bc0)={&(0x7f0000000500)=@rc={0x1f, {0xffff, 0x1000, 0x94d, 0xfffffffffffffffe, 0x2, 0x400}, 0x6}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000580)="8d3264a8e762144ac30c3756a5970e3c74307b3e1bff238f70b927e9a974f673e5661fc1461337349bf6dab42c2c06119eee285df1c98de99edf46a7630d84aafd03df73f4082590c1753b8279f534f293", 0x51}, {&(0x7f0000000600)="5c26b18a310e9c0557f3f882fd0b15d810a1ba2a870e2221d44d8f49ad42707b0adced975098e7a75faad85f9e21d875688632b7e572dbb468d5557bf85a40bf20df498999578840a27e70a46daea42803c18bd929562bcdaeed2dadff0bcf867d07d33cac23d9f9aa66da05e55f46c8b501aa012b7465c89e73b4bdd3963cdd6a14d7c1803681aaa008bb29f25b7e02cd4f5635354f25f576ed5499cfb4494791fa0dd149ba448bc3e48e73e6c754f048c3dc53266c85ec82574d", 0xbb}, {&(0x7f00000006c0)="62278bf174cd9ba416850b362b4e35924ef7e1cacd0ff5d30a0ba1f7f9a14492e35ba29f6f885fd54ed50376ee6e8f3948c5c9d8537bc12b2d063fb0f738de818ab9a7614abbf61d3c75439940e4e955d9da60a87feee7c2372feb43fda53730681f74251b7c9b75acc0c380be9ecc3656d907296572ce7fb06ce076c212cdbb6429f78eb7de53b6f023701206bc1ae3ecb82b0f93bddb815671b68e6fabe84d34a74963cec3f86d35e84e1f1912192078ed9a83989d86c9c89c2a37c67db2f7a8ba2fc8e70da0b763378bcece13390bd88c28e4cd8cc612", 0xd8}, {&(0x7f00000007c0)="72ab5d3a7ac186ecb701e744ba8ed139175b864e7bf9f6aec05af24e3c87352e2b77deebbdb701160c412660a0f098822532b405936e08dd85987a1e4113b2a52dbf347621caa0a401fb4c32bbf9c910ea7e151073c5ec7672995b62b20ce67fce14c74d3059f201a529e7a88d4425bac901856b422a711c", 0x78}, {&(0x7f0000000840)="c82d74e20d51d5b5156593f4da83", 0xe}, {&(0x7f0000000880)="0eace1a3e1b7e30c56f1ae32ac5ab673752ad9ecc9925c8df59447a2951303521427137a6420c015ac2e58311d1e78548e386a18a40499887a9e48dedc9ac4cc7786ae64af106cb7fe254449048d56d21a8e0936dd69c754899c83ca881be8356e7127460397649e8a6c1040627fcc807c6bcc0ce04ac76d79caf96c726e67e44f532496e917190cdfa3c54777912a3d70883cbe67c45b911e0176fe82fd06162836329c09305d", 0xa7}, {&(0x7f0000000940)="6c03c10e6c9ac5698f0c37e2064a4171d91db44619b09fecb4bb6056b190f42397f0fb37309b58b06fb765834dca59bb56e68343e316a73dd0ca0e42fa8fa220a2b6ddf94f542d7ac77c08b47f5dcd69b562908947b2dfb27f19399f0a47635c75bea8932dc2b21a4ed89c83fb75efb1934ea235b98cc24a2e50db382196d5ba5e1ff511d42e", 0x86}], 0x7, &(0x7f0000000a80)=[{0xa8, 0x1bf, 0x6, "91047b035989eeee6255fef15ecb818704a672f16254479c1f1d9a6a648129cc7fdb528af47b35fdaa63a4ac2ffbea68e6da519d0815641f02b3649ef840d28371a0dcde139d65aa5a31f608ff3049e93bc009b2069400674186ec29163b89987358d65cd779de7c0a0b9cfa961f83d0dec4616a6286e254e5ecb634eaceaf24fefdf45dda4a1c1123ce9abdea410d2c32b8652666be"}, {0x90, 0x0, 0x1, "eb2a2aea8713ebd1c8c3506a17417692209edc6cfb42ed2db846a336aef70459ef44c6fcecafbcba13ccd6463bfb0ba789c59157acd86d152b12040177b9f4c6e8bc7b2a3957b2936e3bdb2706e8fe976c99a8cafc64a28551efc8bb0448ddb96273a4d530c6f708416b108291668aa2410b7312cdd80f9e538256"}], 0x138, 0x24000080}, 0x8014) fdatasync(r0) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000c00)={0x24ce, 0x1f, 0x0, 0xf9}, 0x8) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = syz_open_dev$sndpcmc(&(0x7f0000000c40)='/dev/snd/pcmC#D#c\x00', 0x4, 0x42) write$binfmt_aout(r4, &(0x7f0000000c80)={{0x1cf, 0x7f4, 0x6, 0x33d, 0x2fd, 0x80000001, 0x220, 0x1}, "4e4e3e80ca70cf16c288df1c20ec7367e9514c6e7df0ca394fec14478cba56d079752c9f2b5f3eb3a6f7bc649f1f58d3d334cfb507fc85a5f3fb8114bc4775794cb8038afd0a4fa9f5fcaeea901f992c338fbca57ced29", [[], [], [], [], [], [], [], []]}, 0x877) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) getsockopt$inet6_buf(r5, 0x29, 0xff, &(0x7f0000001500)=""/4096, &(0x7f0000002500)=0x1000) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000002540)={0x2f, 0x4, 0x0, {0x5, 0x3, 0x7, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x2f) ioctl$KVM_XEN_HVM_CONFIG(r0, 0x4038ae7a, &(0x7f0000002680)={0x8f9c, 0xbee, &(0x7f0000002580)="615bd107266538de1209d19b883547946f9e244b0067", &(0x7f00000025c0)="0d0b106b1c27f13472df398d7e7a06832ffc9c79cbbd3b052000e73bcc93a3137966e6282025942558853bc0cc6caa1c710d4c12c7d2263a3c753b611d890a55e33ee70cf7bc3fd8c368b593454ac3c1cb2aeb87fb6734e50b98186b7fb73bdbfc0ff4104bf4e791c66c889d1c4c31ae7eebc72bcb1f63de3c8f40efffdaa0b37694b74f8560f8", 0x16, 0x87}) ioctl$LOOP_SET_FD(r0, 0x4c00, r0) fdatasync(r4) r6 = socket$xdp(0x2c, 0x3, 0x0) write$binfmt_elf64(r6, &(0x7f00000026c0)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x6, 0x2, 0x1, 0x3, 0x3, 0x3f, 0xfffffffffffffb65, 0x352, 0x40, 0x70, 0x20, 0x1, 0x38, 0x1, 0x0, 0x7, 0x9fa}, [{0x4, 0x40, 0x7771, 0x5, 0x1f, 0x7, 0xca, 0x9}, {0x7, 0x7, 0x0, 0x8, 0x6, 0x0, 0x6, 0x2}], "d4fd8a6099920415d18c4a64608a5a71", [[], [], [], []]}, 0x4c0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000002b80)={0x3, 0x4, 0x1f, {}, 0x8, 0x6}) socket$inet6_tcp(0xa, 0x1, 0x0) fsetxattr$security_capability(r0, &(0x7f0000002c00)='security.capability\x00', &(0x7f0000002c40)=@v2={0x2000000, [{0x20, 0x9}, {0x8, 0x40}]}, 0x14, 0x1) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000002c80), &(0x7f0000002cc0)=0x4) ptrace$getregs(0xe, r2, 0x7fff, &(0x7f0000002d00)=""/212) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000002e00)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) pipe2(&(0x7f0000002e40), 0x4800) 14:24:45 executing program 2: 14:24:45 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000000)=0xffffffffffffffff) ioctl$int_in(r0, 0x800000005452, &(0x7f0000000100)=0xc8) shutdown(r1, 0x1) 14:24:45 executing program 3: 14:24:45 executing program 3: 14:24:45 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x9c, 0x80000) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000140)=[@in={0x2, 0x4e22, @loopback}], 0x10) r3 = dup(r2) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "144f655c1ce6bd0bd794a927c88ff93096cfb24e275514e1a934066cb67b76ae1d2c821785a9b2b4656f17e2ce142cebbcb6505955a58c766d577a55719fa6ad", "b226a4da88e595cb8ed83eabeab31c6e3432b4b218ce63ca0e0eb5bdbd562b05"}) close(r1) 14:24:45 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, &(0x7f0000000440), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='nv\x00', 0xffffffffffffff33) shutdown(r0, 0x0) 14:24:46 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) mount(&(0x7f0000000080), &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x0, &(0x7f0000000100)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) close(r0) 14:24:46 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x3c) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c3d023c126285718070") r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={&(0x7f0000000240), 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@ipv4_newrule={0x28, 0x20, 0x631, 0x0, 0x0, {}, [@FRA_DST={0x8, 0x1, @local}]}, 0x28}}, 0x0) 14:24:46 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) recvmsg(r0, &(0x7f0000001680)={0x0, 0x27a, &(0x7f0000001540), 0x0, &(0x7f00000015c0)=""/131, 0x38}, 0x0) sendto$inet6(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xffffffffffffffff, 0x31, 0xffffffffffffffff, 0x0) ioctl(r0, 0x4000008907, &(0x7f0000000180)) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000080), 0x0) [ 264.245436] kauditd_printk_skb: 3 callbacks suppressed [ 264.245469] audit: type=1804 audit(1539008686.291:31): pid=7573 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/10/file0/bus" dev="ramfs" ino=20478 res=1 [ 264.391855] audit: type=1804 audit(1539008686.341:32): pid=7573 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/newroot/10/file0/file0/bus" dev="ramfs" ino=20974 res=1 [ 264.434397] netlink: 12 bytes leftover after parsing attributes in process `syz-executor1'. 14:24:46 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000080)="8c", 0x1, 0x20000000, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000040), 0x224) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0xffffff84) 14:24:46 executing program 0: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) r1 = socket(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000780)=ANY=[@ANYBLOB="01000000000000000a00000006000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000a004e2001000080fe800000000000000000000000000017a0a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2205000000fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2101000000fe8000000000000000000000000000aada040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2104000000ff010000000000000000000000000001cb160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2000000000ff02000000000000000000000000000100000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e24e20000000000000000000000000000000000000001feffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002de9d7"], 0x1) dup3(r1, r0, 0x0) [ 265.118198] IPVS: ftp: loaded support on port[0] = 21 [ 266.521145] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.527638] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.535986] device bridge_slave_0 entered promiscuous mode [ 266.614098] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.620510] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.628637] device bridge_slave_1 entered promiscuous mode [ 266.705332] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 266.782718] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 267.013432] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 267.101695] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 267.256544] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 267.263639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 267.507800] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 267.515510] team0: Port device team_slave_0 added [ 267.594405] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 267.602072] team0: Port device team_slave_1 added [ 267.683139] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 267.765282] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 267.846273] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 267.853632] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 267.862598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 267.941204] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 267.948617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 267.957760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 268.816838] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.823452] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.830200] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.836736] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.844779] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 269.192680] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 272.131719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.418319] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 272.714278] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 272.720546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 272.728801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 273.030262] 8021q: adding VLAN 0 to HW filter on device team0 14:24:57 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x800001000008912, &(0x7f0000000080)="0a5c2d023c126285718070") r1 = socket(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [], @loopback}}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x200000000000002, &(0x7f0000000140), 0x4) 14:24:57 executing program 2: socket$inet6(0xa, 0x803, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000000)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x4e20}}) 14:24:57 executing program 1: clone(0x7ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000240)={0x1}, 0x0, &(0x7f0000000140)={0x0, 0x1c9c380}, 0xffffffffffffff27) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$cont(0x20, r0, 0x0, 0x0) 14:24:57 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000080), &(0x7f0000000180)) r0 = socket$pptp(0x18, 0x1, 0x2) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) dup2(r1, r0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000008ff8)) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000000)={0x14}, 0x150) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000200)=0x100000001, 0x4) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000240)={@remote}) connect$inet6(0xffffffffffffffff, &(0x7f0000000280), 0x1c) r2 = socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000380)=0x801) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4) mmap(&(0x7f0000604000/0x2000)=nil, 0x2000, 0x0, 0x20000010, r2, 0x0) 14:24:57 executing program 0: socket$inet6(0xa, 0x0, 0x3) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000002f40)={&(0x7f0000000440), 0xc, &(0x7f0000002f00)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_AD_LACP_RATE={0x8, 0xa}]}}}]}, 0x3c}}, 0x0) 14:24:57 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer\x00', 0x9, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x2a}, &(0x7f0000000200)={0x0, r2+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) getresgid(&(0x7f00000001c0), &(0x7f0000000340), &(0x7f0000000380)) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000480)) getegid() vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 275.179147] hrtimer: interrupt took 55077 ns 14:24:58 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) getpid() sched_setscheduler(0x0, 0x0, &(0x7f0000000140)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000600), 0xffffffffffffffff) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000140)=ANY=[]) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dsp\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000380)) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) r2 = perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000280)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xe, 0x24, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) fstat(r3, &(0x7f00000002c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) getresgid(&(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)) getresuid(&(0x7f00000005c0), &(0x7f0000000640), &(0x7f00000003c0)) stat(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000d00)) stat(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000840), &(0x7f0000000880)=0xc) getuid() geteuid() getresgid(&(0x7f0000000700), &(0x7f0000000680), &(0x7f00000009c0)) fstat(r2, &(0x7f0000000bc0)) getresgid(&(0x7f0000000a80), &(0x7f0000000ac0), &(0x7f0000000b00)) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000001140)={{{@in=@rand_addr, @in=@broadcast}}, {{@in=@loopback}}}, &(0x7f0000000400)=0x10000036f) getegid() nanosleep(&(0x7f0000000740)={0x77359400}, &(0x7f00000000c0)) fchdir(r2) perf_event_open(&(0x7f0000000180)={0x5, 0x70, 0x2, 0x3, 0x45f, 0x3f, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x3, 0x6, 0x0, 0x5, 0x0, 0x10001, 0x0, 0x100000000, 0xed59, 0x100000001, 0x9, 0x4, 0x0, 0xfff, 0x0, 0x5, 0x3, 0x1, 0xb54, 0x7, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffff, 0x90fb}, 0x1038, 0x7, 0x4, 0x0, 0x3, 0x4, 0x85c}, 0x0, 0x3, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x3, &(0x7f0000000180)={@in6={0xa, 0x0, 0x0, @mcast1}, {&(0x7f0000000000)=""/119, 0x77}, &(0x7f0000000080)}, 0xa0) 14:24:58 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x0, 0xff}, 0x48) 14:24:58 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000007440)={&(0x7f0000000100), 0xc, &(0x7f0000007400)={&(0x7f0000000600)=ANY=[@ANYBLOB="000000000000000020001200100001006970366772657461700000000c0002fe0800020000000000"], 0x1}}, 0x0) 14:24:58 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x200, 0x4) sendto$inet6(r0, &(0x7f00000001c0)="040300000100000000000000c52cf7c21975e697b02f5c566b2b2ff0dac8897c6b11876d886b6621d8d207ccf73f257e55e86eb29406136fcfff0500000000000000c7a67e5098a35d724459", 0x4c, 0x0, &(0x7f0000000000)={0xa, 0x800, 0x4, @loopback}, 0x1c) 14:24:58 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer\x00', 0x9, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x2a}, &(0x7f0000000200)={0x0, r2+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) getresgid(&(0x7f00000001c0), &(0x7f0000000340), &(0x7f0000000380)) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000480)) getegid() vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 14:24:58 executing program 1: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x85b, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x88d9, @loopback}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@local}, &(0x7f0000000340)=0x20) 14:24:58 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getdents64(r0, &(0x7f0000000000)=""/57, 0x39) 14:24:59 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) r1 = dup(r0) fchmod(r1, 0x0) 14:24:59 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x0, 0xff, 0x1}, 0x2f) 14:25:05 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r0, r2, 0x7aa, 0x0) close(r1) 14:25:05 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000080), &(0x7f0000000180)) r0 = socket$pptp(0x18, 0x1, 0x2) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) dup2(r1, r0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000008ff8)) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000000)={0x14}, 0x150) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000200)=0x100000001, 0x4) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000240)={@remote}) connect$inet6(0xffffffffffffffff, &(0x7f0000000280), 0x1c) r2 = socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000380)=0x801) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4) mmap(&(0x7f0000604000/0x2000)=nil, 0x2000, 0x0, 0x20000010, r2, 0x0) 14:25:05 executing program 2: socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'team0\x00'}) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000340)=ANY=[], 0x0) move_pages(0x0, 0x4, &(0x7f00000001c0)=[&(0x7f0000eb3000/0x3000)=nil, &(0x7f0000df2000/0x2000)=nil, &(0x7f0000f9a000/0x5000)=nil, &(0x7f0000001000/0x1000)=nil], &(0x7f0000000200)=[0x7, 0x4, 0x0], &(0x7f0000000240)=[0x0], 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000005000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000004fc0)={0xffffffffffffffff}, 0x106, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f0000005040)={0x8, 0x120, 0xfa00, {0x3, {0x0, 0x0, "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"}, r1}}, 0x128) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000540)=@pppol2tpv3, 0x80) ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f00000000c0)={0x100000001, 0x0, 0x100000001}) openat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000500)={0x10000009, 0x3, 0x0, 0xffffffffffffffff}) mq_unlink(&(0x7f0000000080)='team0\x00') mmap(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1, 0x811, r3, 0x0) 14:25:05 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x200, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x7) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000300)=0x2, 0x4) connect$inet(r0, &(0x7f0000593000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, &(0x7f00000000c0), 0x366, 0x0, 0x0, 0x4e) 14:25:05 executing program 4: 14:25:05 executing program 0: 14:25:05 executing program 0: 14:25:06 executing program 4: [ 287.741210] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. [ 287.791084] sctp: failed to load transform for md5: -2 [ 287.805555] sctp: failed to load transform for md5: -2 14:25:07 executing program 1: 14:25:07 executing program 5: 14:25:08 executing program 0: r0 = socket$kcm(0x2, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000003, 0x5) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f00000001c0)='a', 0x1, 0x0, &(0x7f0000aa9000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, 0x2}, 0x1c) listen(r2, 0x400080000002) accept(r2, &(0x7f0000000000)=@can, &(0x7f0000000100)=0x80) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)=@nfc_llcp={0x27, 0x0, 0x2, 0x0, 0x0, 0x0, "b6bc8fda04ae1bf1a1e4431ff3e4e210a9ad83a2709b87b524875076871471eb7b6e745475d5febe321ff3eb7a90f27b92d384bf15cacfa784201efd3d604b"}, 0x80, &(0x7f0000000300), 0x13, 0x0, 0x1c4}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x890b, &(0x7f0000000000)) 14:25:08 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000b4eff8)={0xffffffffffffffff}) r1 = epoll_create(0x5) epoll_wait(r1, &(0x7f00004e7fdc)=[{}], 0x162, 0x401) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') epoll_pwait(r1, &(0x7f0000000180)=[{}, {}], 0x2, 0xfffffffffffffffe, &(0x7f0000000200), 0x8) poll(&(0x7f0000000080)=[{r1}], 0x1, 0xff) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000069cff4)={0x4}) 14:25:08 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000000)={0x3}) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 288.811133] clocksource: timekeeping watchdog on CPU0: Marking clocksource 'tsc' as unstable because the skew is too large: [ 288.822604] clocksource: 'acpi_pm' wd_now: ce5531 wd_last: c7b143 mask: ffffff [ 288.831952] clocksource: 'tsc' cs_now: a0547adcda cs_last: 9dc145fa6b mask: ffffffffffffffff [ 288.842649] tsc: Marking TSC unstable due to clocksource watchdog [ 288.863272] TSC found unstable after boot, most likely due to broken BIOS. Use 'tsc=unstable'. [ 288.872217] sched_clock: Marking unstable (288920947149, -57695490)<-(288985998042, -122746183) [ 288.979578] clocksource: Switched to clocksource acpi_pm 14:25:11 executing program 2: 14:25:11 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000080), &(0x7f0000000180)) r0 = socket$pptp(0x18, 0x1, 0x2) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) dup2(r1, r0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000008ff8)) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000000)={0x14}, 0x150) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000200)=0x100000001, 0x4) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000240)={@remote}) connect$inet6(0xffffffffffffffff, &(0x7f0000000280), 0x1c) r2 = socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000380)=0x801) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4) mmap(&(0x7f0000604000/0x2000)=nil, 0x2000, 0x0, 0x20000010, r2, 0x0) 14:25:11 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000b4eff8)={0xffffffffffffffff}) r1 = epoll_create(0x5) epoll_wait(r1, &(0x7f00004e7fdc)=[{}], 0x162, 0x401) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') epoll_pwait(r1, &(0x7f0000000180)=[{}, {}], 0x2, 0xfffffffffffffffe, &(0x7f0000000200), 0x8) poll(&(0x7f0000000080)=[{r1}], 0x1, 0xff) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000069cff4)={0x4}) 14:25:11 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000000)=0xffffffffffffffff) 14:25:11 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000b4eff8)={0xffffffffffffffff}) r1 = epoll_create(0x5) epoll_wait(r1, &(0x7f00004e7fdc)=[{}], 0x162, 0x401) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') epoll_pwait(r1, &(0x7f0000000180)=[{}, {}], 0x2, 0xfffffffffffffffe, &(0x7f0000000200), 0x8) poll(&(0x7f0000000080)=[{r1}], 0x1, 0xff) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000069cff4)={0x4}) 14:25:11 executing program 0: 14:25:11 executing program 2: 14:25:11 executing program 0: 14:25:11 executing program 5: 14:25:11 executing program 0: 14:25:12 executing program 2: 14:25:12 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000b4eff8)={0xffffffffffffffff}) r1 = epoll_create(0x5) epoll_wait(r1, &(0x7f00004e7fdc)=[{}], 0x162, 0x401) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') epoll_pwait(r1, &(0x7f0000000180)=[{}, {}], 0x2, 0xfffffffffffffffe, &(0x7f0000000200), 0x8) poll(&(0x7f0000000080)=[{r1}], 0x1, 0xff) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000069cff4)={0x4}) 14:25:12 executing program 5: 14:25:12 executing program 3: 14:25:12 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000b4eff8)={0xffffffffffffffff}) r1 = epoll_create(0x5) epoll_wait(r1, &(0x7f00004e7fdc)=[{}], 0x162, 0x401) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') epoll_pwait(r1, &(0x7f0000000180)=[{}, {}], 0x2, 0xfffffffffffffffe, &(0x7f0000000200), 0x8) poll(&(0x7f0000000080)=[{r1}], 0x1, 0xff) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000069cff4)={0x4}) 14:25:12 executing program 0: 14:25:12 executing program 3: 14:25:12 executing program 5: 14:25:12 executing program 0: 14:25:12 executing program 2: 14:25:13 executing program 2: 14:25:13 executing program 3: 14:25:13 executing program 0: 14:25:13 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000b4eff8)={0xffffffffffffffff}) r1 = epoll_create(0x5) epoll_wait(r1, &(0x7f00004e7fdc)=[{}], 0x162, 0x401) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') epoll_pwait(r1, &(0x7f0000000180)=[{}, {}], 0x2, 0xfffffffffffffffe, &(0x7f0000000200), 0x8) poll(&(0x7f0000000080)=[{r1}], 0x1, 0xff) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000069cff4)={0x4}) 14:25:13 executing program 5: 14:25:13 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000b4eff8)={0xffffffffffffffff}) r1 = epoll_create(0x5) epoll_wait(r1, &(0x7f00004e7fdc)=[{}], 0x162, 0x401) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') epoll_pwait(r1, &(0x7f0000000180)=[{}, {}], 0x2, 0xfffffffffffffffe, &(0x7f0000000200), 0x8) poll(&(0x7f0000000080)=[{r1}], 0x1, 0xff) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000069cff4)={0x4}) 14:25:13 executing program 2: 14:25:13 executing program 3: 14:25:13 executing program 0: 14:25:13 executing program 5: 14:25:13 executing program 2: 14:25:14 executing program 3: 14:25:14 executing program 5: 14:25:14 executing program 4: 14:25:14 executing program 2: 14:25:14 executing program 0: 14:25:14 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000b4eff8)) r0 = epoll_create(0x5) epoll_wait(r0, &(0x7f00004e7fdc)=[{}], 0x162, 0x401) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') epoll_pwait(r0, &(0x7f0000000180)=[{}, {}], 0x2, 0xfffffffffffffffe, &(0x7f0000000200), 0x8) poll(&(0x7f0000000080)=[{r0}], 0x1, 0xff) 14:25:14 executing program 5: 14:25:14 executing program 3: 14:25:14 executing program 4: 14:25:14 executing program 2: 14:25:14 executing program 3: 14:25:15 executing program 5: 14:25:15 executing program 0: 14:25:15 executing program 4: 14:25:15 executing program 2: 14:25:15 executing program 3: 14:25:15 executing program 0: 14:25:15 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000b4eff8)={0xffffffffffffffff}) r1 = epoll_create(0x5) epoll_wait(r1, &(0x7f00004e7fdc)=[{}], 0x162, 0x401) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') epoll_pwait(r1, &(0x7f0000000180)=[{}, {}], 0x2, 0xfffffffffffffffe, &(0x7f0000000200), 0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000069cff4)={0x4}) 14:25:15 executing program 5: 14:25:15 executing program 3: 14:25:15 executing program 2: 14:25:15 executing program 4: 14:25:15 executing program 0: 14:25:16 executing program 2: 14:25:16 executing program 3: 14:25:16 executing program 4: 14:25:16 executing program 5: 14:25:16 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000b4eff8)={0xffffffffffffffff}) r1 = epoll_create(0x5) epoll_wait(r1, &(0x7f00004e7fdc)=[{}], 0x162, 0x401) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000069cff4)={0x4}) 14:25:16 executing program 0: 14:25:16 executing program 2: 14:25:16 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f01000000450001070000001419001a000400020007000a00550e69330f4de5020080080000", 0x39}], 0x1) 14:25:16 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000001080)={0x2, 0x4e20, @local}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x100, 0x4) write(r0, &(0x7f0000000040)='k', 0x1) 14:25:16 executing program 5: syz_emit_ethernet(0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa0806000108000604000163b88260ae5719ffffffffffff00000000aaaaaa"], &(0x7f0000000040)) 14:25:16 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) creat(&(0x7f0000000140)='./bus\x00', 0x0) 14:25:16 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f000051c000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470080ffe00600000000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) [ 294.864634] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 14:25:17 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000b4eff8)={0xffffffffffffffff}) r1 = epoll_create(0x5) epoll_wait(r1, &(0x7f00004e7fdc)=[{}], 0x162, 0x401) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000069cff4)={0x4}) 14:25:17 executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_int(r0, 0x1, 0xe, &(0x7f0000000100), &(0x7f0000000140)=0x4) 14:25:17 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001680)={'veth1_to_team\x00'}) sendmsg$nl_route(r0, &(0x7f0000001c00)={&(0x7f0000001640), 0xc, &(0x7f0000001bc0)={&(0x7f0000001840)=ANY=[@ANYBLOB="000000000000000008041a0004000f00"], 0x1}}, 0x0) 14:25:17 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@dev}, 0x14) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000280), 0x20) 14:25:17 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6(0xa, 0x803, 0x7) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0a5c2d023c126285718070") setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000400)="0c5d9183", 0x4) ioctl$EXT4_IOC_RESIZE_FS(0xffffffffffffffff, 0x40086610, &(0x7f0000000000)=0x2) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000080)={{0xa, 0x0, 0x0, @remote}, {0xa, 0x10000000, 0x0, @mcast1}, 0x0, [0x0, 0x7, 0x0, 0xfffffffffffffffe]}, 0x5c) sendto$inet6(r0, &(0x7f00000000c0), 0x246, 0x0, &(0x7f0000005fe4)={0xa, 0x0, 0x100000002, @mcast2}, 0x1c) pipe(&(0x7f0000000100)) [ 295.316249] sock: process `syz-executor3' is using obsolete getsockopt SO_BSDCOMPAT 14:25:17 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="14de01000000000000000067e8ffb6cd61650401"], 0x1}}, 0x0) [ 295.523342] skbuff: bad partial csum: csum=0/65534 len=572 [ 295.549910] skbuff: bad partial csum: csum=0/65534 len=572 14:25:17 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000b4eff8)={0xffffffffffffffff}) epoll_wait(0xffffffffffffffff, &(0x7f00004e7fdc)=[{}], 0x162, 0x401) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f000069cff4)={0x4}) 14:25:17 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00005d5ff3)={0x2, 0x4e20, @rand_addr}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x200000000000a, &(0x7f0000df8ffc)=0x4, 0x4) sendto$inet(r0, &(0x7f0000de1fff), 0x0, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000240), 0x4) write$binfmt_misc(r0, &(0x7f00000005c0)={'syz0'}, 0x4) 14:25:17 executing program 5: r0 = socket$inet(0x2, 0x3, 0x19) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in6=@dev}}, {{@in6}, 0x0, @in6=@loopback}}, 0xe8) 14:25:18 executing program 4: 14:25:18 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002740), 0x0, &(0x7f0000000780)=ANY=[]}, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000540)) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xfffffffffffffff9, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)) 14:25:18 executing program 0: r0 = socket(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) [ 295.995583] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 14:25:18 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000000)={'ip6tnl0\x00'}) 14:25:18 executing program 1: r0 = epoll_create(0x5) epoll_wait(r0, &(0x7f00004e7fdc)=[{}], 0x162, 0x401) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f000069cff4)={0x4}) 14:25:18 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x100000008ec0, 0x0) writev(r2, &(0x7f00000011c0)=[{&(0x7f0000000100)='w', 0x1}], 0x1) 14:25:18 executing program 2: socketpair$inet(0x2, 0x0, 0x0, &(0x7f0000000140)) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000280)=0x2000007, 0x4) sendto$inet(r0, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @rand_addr}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000080)={0x2, 0x4e21}, 0x10) recvmsg(r0, &(0x7f0000002b80)={&(0x7f0000000840)=@hci, 0x80, &(0x7f0000001b00), 0x0, &(0x7f0000001b80)=""/4096, 0x1000}, 0x2000) 14:25:18 executing program 5: 14:25:18 executing program 3: 14:25:19 executing program 3: 14:25:19 executing program 5: 14:25:19 executing program 4: 14:25:19 executing program 2: 14:25:19 executing program 3: 14:25:19 executing program 0: 14:25:19 executing program 4: 14:25:19 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000b4eff8)={0xffffffffffffffff}) r1 = epoll_create(0x5) epoll_wait(r1, &(0x7f00004e7fdc)=[{}], 0x162, 0x401) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000069cff4)={0x4}) 14:25:19 executing program 5: 14:25:19 executing program 2: 14:25:19 executing program 3: 14:25:20 executing program 3: 14:25:20 executing program 5: 14:25:20 executing program 2: 14:25:20 executing program 0: 14:25:20 executing program 4: 14:25:20 executing program 3: 14:25:20 executing program 5: 14:25:20 executing program 2: 14:25:21 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000b4eff8)={0xffffffffffffffff}) r1 = epoll_create(0x0) epoll_wait(r1, &(0x7f00004e7fdc)=[{}], 0x162, 0x401) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000069cff4)={0x4}) 14:25:21 executing program 0: 14:25:21 executing program 4: 14:25:21 executing program 3: 14:25:21 executing program 2: 14:25:21 executing program 5: 14:25:21 executing program 4: 14:25:21 executing program 0: 14:25:21 executing program 2: 14:25:21 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000b4eff8)={0xffffffffffffffff}) r1 = epoll_create(0x5) epoll_wait(0xffffffffffffffff, &(0x7f00004e7fdc)=[{}], 0x162, 0x401) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000069cff4)={0x4}) 14:25:21 executing program 4: 14:25:21 executing program 5: 14:25:21 executing program 0: 14:25:21 executing program 3: 14:25:21 executing program 2: 14:25:22 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000b4eff8)={0xffffffffffffffff}) r1 = epoll_create(0x5) epoll_wait(r1, &(0x7f00004e7fdc), 0x0, 0x401) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000069cff4)={0x4}) 14:25:22 executing program 5: 14:25:22 executing program 3: 14:25:22 executing program 0: 14:25:22 executing program 4: 14:25:22 executing program 2: 14:25:22 executing program 5: 14:25:22 executing program 3: 14:25:22 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000b4eff8)={0xffffffffffffffff}) r1 = epoll_create(0x5) epoll_wait(r1, &(0x7f00004e7fdc)=[{}], 0x162, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000069cff4)={0x4}) 14:25:22 executing program 0: 14:25:22 executing program 4: 14:25:22 executing program 2: 14:25:23 executing program 5: 14:25:23 executing program 3: 14:25:23 executing program 0: 14:25:23 executing program 4: 14:25:23 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000b4eff8)={0xffffffffffffffff}) r1 = epoll_create(0x5) epoll_wait(r1, &(0x7f00004e7fdc)=[{}], 0x162, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000069cff4)={0x4}) 14:25:23 executing program 2: 14:25:23 executing program 3: 14:25:23 executing program 5: 14:25:23 executing program 0: 14:25:23 executing program 2: 14:25:23 executing program 4: 14:25:23 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000b4eff8)={0xffffffffffffffff}) r1 = epoll_create(0x5) epoll_wait(r1, &(0x7f00004e7fdc)=[{}], 0x162, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000069cff4)={0x4}) 14:25:23 executing program 3: 14:25:24 executing program 5: socket$inet6(0xa, 0x0, 0x0) r0 = socket(0x2, 0xa, 0x8000) bind$inet(r0, &(0x7f0000000080)={0x2, 0x200, @local}, 0x10) [ 302.169304] syz-executor5 uses obsolete (PF_INET,SOCK_PACKET) 14:25:24 executing program 2: pipe(&(0x7f0000000000)) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0a5c2d023c126285718070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="24000000220007031dfffd946f610500000000000000fd21fe1c4095421ba3a20400ff7e280000001100ffffba16a0aa1ce208b3ef090000000000008e3141eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000004c0)={@rand_addr}, &(0x7f0000000500)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000700)={@mcast2}, &(0x7f0000000740)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000000e00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000e40)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000e80)={'team0\x00'}) 14:25:24 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f000039a000)=[{0x6}]}, 0x10) 14:25:24 executing program 0: r0 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000080)=@fragment, 0x8) sendto$inet6(0xffffffffffffffff, &(0x7f00007a8fff), 0x3a7, 0x0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) close(r0) 14:25:24 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000b4eff8)={0xffffffffffffffff}) r1 = epoll_create(0x5) epoll_wait(r1, &(0x7f00004e7fdc)=[{}], 0x162, 0x401) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f000069cff4)={0x4}) [ 302.447834] netlink: 8 bytes leftover after parsing attributes in process `syz-executor2'. 14:25:24 executing program 3: r0 = socket(0x10, 0x802, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000200)) write(r0, &(0x7f0000000040)="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", 0xfc) [ 302.580364] netlink: 8 bytes leftover after parsing attributes in process `syz-executor2'. 14:25:24 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x3) shutdown(r0, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c2d023c126285718070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00'}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f00000002c0)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000300)=ANY=[@ANYBLOB="e00000027f000001000000000100000000000000f3a81d9cffa880e100cd61b6f041f9e482f3a68cb042b025db6305bb85b6fb9343be5be2d015a0ecefbafd68e3268dd82eb3738f71843f0dfa8cf7e25b33d3df76adb53d6758a14d810e0d1f3a91d866d8c419054ba579566247da473d7effec35fa3b87a3e3197798c0250c6b35a3fd751a84a2ff0ba2600302e1cd9edc416807c3b2a2305c478344637ca5bfb1bb204f07dc30d7e0684d35c3d22a1afae9030c99a5bdbd826d7957fa00a76e109bfa02f6b4dc2b88486ae0030393fad59b0970c7a479ea2dd8171e54a0766b73087f1352d552e104a088115fe3127559b3e98e0000000000000000000000000000"], 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f00000002c0)={@multicast2, @loopback}, 0xc) 14:25:24 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x9) ioctl$sock_ifreq(r0, 0x8932, &(0x7f0000000040)={'veth0_to_bridge\x00', @ifru_map}) 14:25:24 executing program 0: r0 = socket(0x10, 0x4000000000000002, 0xc) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b54c007110000f30501000b000200000000000000cf", 0x1f) 14:25:25 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000005c0)='io.max\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='io.stat\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x6) 14:25:25 executing program 0: r0 = socket$kcm(0x2, 0x5, 0x0) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000080)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000000180)=[{&(0x7f00000002c0)='A', 0x1}], 0x1, &(0x7f0000000440)=[{0x10, 0x84, 0x8}], 0x10, 0x2}, 0x0) 14:25:25 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getuid() recvfrom$inet6(0xffffffffffffffff, &(0x7f0000ffbf47)=""/185, 0xffe8, 0x0, 0x0, 0xfffffe01) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, 0xffffffffffffff91) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000100)="c15c71cf7f5830551bc9b6e1e3ee82bb816badaafce756de46bedd2a2f1885cceac5244b97c673791b1efe2ffcd2275d4ae8dad85bf563d3fb0b1ec8ea70c8a3baabd27df3c14832c9aef50f45ed1b9ceacb5aaf9a7c3ed0bcd9ad2e97af632de023db1639ba132c733ab4bd9b2466722d163a238a8d0562d06734067da72fea402e4b2191173daff1f26136ed2198478d616e8b85a949e01c55660299564ccdd27564540b9bddc6a0e2c138b7680f71327b510ccde6568acec4b9ef5738b8a942373caf971cd3865411fab274fb63306a357b6c4555ddf5a61fd1c39d6b8b01242f27635e816696aa77c6997f2cd821027d5526b1a581fc5f0cd1d74181029c") unshare(0x40000000) [ 303.463204] IPVS: ftp: loaded support on port[0] = 21 14:25:25 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000b4eff8)) r0 = epoll_create(0x5) epoll_wait(r0, &(0x7f00004e7fdc)=[{}], 0x162, 0x401) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f000069cff4)={0x4}) 14:25:25 executing program 0: r0 = socket$kcm(0x2, 0x5, 0x0) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000080)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000000180)=[{&(0x7f00000002c0)='A', 0x1}], 0x1, &(0x7f0000000440)=[{0x10, 0x84, 0x8}], 0x10, 0x2}, 0x0) [ 304.220129] IPVS: ftp: loaded support on port[0] = 21 14:25:26 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c2d023c126285718070") pipe(&(0x7f0000000180)={0xffffffffffffffff}) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000000)="2970571c5deb8ecb676090adf7958b82", 0x10) close(r2) 14:25:26 executing program 0: r0 = socket$kcm(0x2, 0x5, 0x0) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000080)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000000180)=[{&(0x7f00000002c0)='A', 0x1}], 0x1, &(0x7f0000000440)=[{0x10, 0x84, 0x8}], 0x10, 0x2}, 0x0) 14:25:26 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000b4eff8)={0xffffffffffffffff}) r1 = epoll_create(0x5) epoll_wait(r1, &(0x7f00004e7fdc)=[{}], 0x162, 0x401) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000069cff4)) 14:25:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c2d023c126285718070") r1 = socket$inet6(0xa, 0x202000000802, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000140)={{{@in=@rand_addr, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@loopback}}, &(0x7f0000000240)=0xe8) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f0000000300)={'IDLETIMER\x00'}, &(0x7f0000000340)=0x1e) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000280)={@remote, r2}, 0x14) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000f68000)={@dev, 0x800, 0x0, 0xff, 0x8001}, 0x20) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x800, 0x2}, 0x20) 14:25:27 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x3) shutdown(r0, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c2d023c126285718070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00'}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f00000002c0)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f00000002c0)={@multicast2, @loopback}, 0xc) 14:25:27 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x200000, 0xc04e27d3b503e3df, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x2) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000140)=0x2) 14:25:27 executing program 0: r0 = socket$kcm(0x2, 0x5, 0x0) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000080)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000000180)=[{&(0x7f00000002c0)='A', 0x1}], 0x1, &(0x7f0000000440)=[{0x10, 0x84, 0x8}], 0x10, 0x2}, 0x0) [ 305.237454] ion_buffer_destroy: buffer still mapped in the kernel 14:25:27 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto$inet6(r0, &(0x7f0000000140), 0x1d1, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) 14:25:27 executing program 0: sendmsg(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000000180)=[{&(0x7f00000002c0)='A', 0x1}], 0x1, &(0x7f0000000440)=[{0x10, 0x84, 0x8}], 0x10, 0x2}, 0x0) 14:25:29 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000400), 0xc, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001a000101d600000000000000001c0000000000000000000000657d667e79f3e7388720088c6abd3d49e13a360e28a5c2968dac33169128a625628a1439d8e65952c413eada9fb7617df28c2e3fb2b948a6"], 0x1}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c2d023c126285718070") 14:25:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c2d023c126285718070") r1 = socket$inet6(0xa, 0x202000000802, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000140)={{{@in=@rand_addr, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@loopback}}, &(0x7f0000000240)=0xe8) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f0000000300)={'IDLETIMER\x00'}, &(0x7f0000000340)=0x1e) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000280)={@remote, r2}, 0x14) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000f68000)={@dev, 0x800, 0x0, 0xff, 0x8001}, 0x20) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x800, 0x2}, 0x20) 14:25:29 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x200000, 0xc04e27d3b503e3df, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x2) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000140)=0x2) 14:25:29 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x200000, 0xc04e27d3b503e3df, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x2) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000140)=0x2) 14:25:29 executing program 0: sendmsg(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000000180)=[{&(0x7f00000002c0)='A', 0x1}], 0x1, &(0x7f0000000440)=[{0x10, 0x84, 0x8}], 0x10, 0x2}, 0x0) 14:25:29 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0xf}, 0xc, &(0x7f00000002c0)={&(0x7f0000000040)=@ipv6_newaddr={0x2c, 0x14, 0x109, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_ADDRESS={0x14, 0x1, @local}]}, 0x2c}}, 0x0) 14:25:29 executing program 0: sendmsg(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000000180)=[{&(0x7f00000002c0)='A', 0x1}], 0x1, &(0x7f0000000440)=[{0x10, 0x84, 0x8}], 0x10, 0x2}, 0x0) 14:25:29 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x200000, 0xc04e27d3b503e3df, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x2) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000140)=0x2) 14:25:29 executing program 5: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000fd7ff0)={0x77359400}, &(0x7f0000048000), 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0}) futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, &(0x7f00000000c0)={r0}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f000000d000)={0x0, 0x7f}, &(0x7f0000048000), 0x0) 14:25:29 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x200000, 0xc04e27d3b503e3df, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x2) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000140)=0x2) 14:25:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c2d023c126285718070") r1 = socket$inet6(0xa, 0x202000000802, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000140)={{{@in=@rand_addr, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@loopback}}, &(0x7f0000000240)=0xe8) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f0000000300)={'IDLETIMER\x00'}, &(0x7f0000000340)=0x1e) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000280)={@remote, r2}, 0x14) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000f68000)={@dev, 0x800, 0x0, 0xff, 0x8001}, 0x20) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x800, 0x2}, 0x20) [ 307.839723] Not allocated shadow for addr ffff8801844e9030 (page ffffea000919d760) [ 307.845286] Attempted to access 8 bytes [ 307.845286] ------------[ cut here ]------------ [ 307.845286] kernel BUG at mm/kmsan/kmsan.c:1091! [ 307.845286] invalid opcode: 0000 [#1] SMP [ 307.845286] CPU: 0 PID: 8490 Comm: syz-executor1 Not tainted 4.19.0-rc4+ #64 [ 307.873185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 307.873185] RIP: 0010:kmsan_get_shadow_address+0x2d6/0x3d0 [ 307.883899] Code: e9 89 00 00 00 c7 04 25 20 73 28 8c 01 00 00 00 65 48 8b 04 25 00 fd 02 00 c6 80 7b 09 00 00 01 80 3c 25 38 73 28 8c 00 74 0c <0f> 0b 0f 1f 84 00 00 00 00 00 eb fe 48 c7 c7 1c bc 57 8b 31 c0 4c [ 307.896952] RSP: 0018:ffff88018451f7b0 EFLAGS: 00010046 [ 307.896952] RAX: 000000000000001b RBX: 0000000000000000 RCX: f04607fd2e40b200 [ 307.896952] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000000 [ 307.925803] RBP: ffff88018451f7e0 R08: 0000000000000000 R09: ffff88021fc38f50 [ 307.933571] R10: 0000000000000000 R11: ffffffff862594e0 R12: 0000000000000001 [ 307.933571] R13: ffff8801844e9030 R14: 0000000000000001 R15: 0000000000000008 [ 307.933571] FS: 0000000000cda940(0000) GS:ffff88021fc00000(0000) knlGS:0000000000000000 [ 307.933571] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 307.933571] CR2: 0000001b32221000 CR3: 00000001359b5000 CR4: 00000000001406f0 [ 307.933571] Call Trace: [ 307.933571] kmsan_internal_unpoison_shadow+0x5c/0xe0 [ 307.933571] kmsan_unpoison_shadow+0x72/0xd0 [ 307.933571] vunmap_page_range+0x828/0xc20 [ 307.988073] remove_vm_area+0x39b/0x450 [ 307.988073] __vunmap+0x34c/0x5d0 [ 307.988073] vunmap+0x69/0xb0 [ 307.988073] ion_heap_unmap_kernel+0x51/0x70 [ 307.988073] ? ion_heap_map_kernel+0xad0/0xad0 [ 307.988073] ion_dma_buf_release+0x222/0x430 [ 307.988073] dma_buf_release+0x1ab/0x8b0 [ 307.988073] ? dma_buf_mmap_internal+0x2c0/0x2c0 [ 307.988073] __fput+0x4e8/0xda0 [ 307.988073] ____fput+0x37/0x40 [ 307.988073] ? fput+0x3e0/0x3e0 [ 307.988073] task_work_run+0x467/0x500 [ 307.988073] prepare_exit_to_usermode+0x364/0x470 [ 307.988073] syscall_return_slowpath+0x112/0x880 [ 308.043471] ? __close_fd+0x465/0x4c0 [ 308.043471] ? __se_sys_close+0x72/0x140 [ 308.043471] do_syscall_64+0xe4/0x100 [ 308.043471] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 308.043471] RIP: 0033:0x411051 [ 308.043471] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 34 19 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 308.043471] RSP: 002b:0000000000a3fd90 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 308.043471] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 0000000000411051 [ 308.043471] RDX: 0000000000000000 RSI: 0000000000730350 RDI: 0000000000000004 [ 308.043471] RBP: 0000000000000000 R08: ffffffff8224b028 R09: 00000000591bc336 [ 308.043471] R10: 0000000000a3fcc0 R11: 0000000000000293 R12: 0000000000000000 [ 308.043471] R13: 0000000000000001 R14: 000000000000001e R15: 0000000000000001 [ 308.043471] ? __fdget+0x318/0x430 [ 308.043471] Modules linked in: [ 308.043471] ---[ end trace 03890932e321637b ]--- [ 308.043471] RIP: 0010:kmsan_get_shadow_address+0x2d6/0x3d0 [ 308.043471] Code: e9 89 00 00 00 c7 04 25 20 73 28 8c 01 00 00 00 65 48 8b 04 25 00 fd 02 00 c6 80 7b 09 00 00 01 80 3c 25 38 73 28 8c 00 74 0c <0f> 0b 0f 1f 84 00 00 00 00 00 eb fe 48 c7 c7 1c bc 57 8b 31 c0 4c [ 308.043471] RSP: 0018:ffff88018451f7b0 EFLAGS: 00010046 [ 308.043471] RAX: 000000000000001b RBX: 0000000000000000 RCX: f04607fd2e40b200 [ 308.043471] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000000 [ 308.043471] RBP: ffff88018451f7e0 R08: 0000000000000000 R09: ffff88021fc38f50 [ 308.043471] R10: 0000000000000000 R11: ffffffff862594e0 R12: 0000000000000001 [ 308.043471] R13: ffff8801844e9030 R14: 0000000000000001 R15: 0000000000000008 [ 308.043471] FS: 0000000000cda940(0000) GS:ffff88021fc00000(0000) knlGS:0000000000000000 [ 308.043471] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 308.043471] CR2: 0000001b32221000 CR3: 00000001359b5000 CR4: 00000000001406f0 [ 308.043471] Kernel panic - not syncing: Fatal exception [ 308.043471] Kernel Offset: disabled [ 308.043471] Rebooting in 86400 seconds..