[ 56.653640] audit: type=1800 audit(1542010212.700:27): pid=6397 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [ 56.673254] audit: type=1800 audit(1542010212.720:28): pid=6397 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 58.527041] audit: type=1800 audit(1542010214.580:29): pid=6397 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 58.547370] audit: type=1800 audit(1542010214.580:30): pid=6397 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.14' (ECDSA) to the list of known hosts. 2018/11/12 08:10:25 fuzzer started 2018/11/12 08:10:30 dialing manager at 10.128.0.26:42475 2018/11/12 08:10:30 syscalls: 1 2018/11/12 08:10:30 code coverage: enabled 2018/11/12 08:10:30 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/11/12 08:10:30 setuid sandbox: enabled 2018/11/12 08:10:30 namespace sandbox: enabled 2018/11/12 08:10:30 Android sandbox: /sys/fs/selinux/policy does not exist 2018/11/12 08:10:30 fault injection: enabled 2018/11/12 08:10:30 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/11/12 08:10:30 net packed injection: enabled 2018/11/12 08:10:30 net device setup: enabled 08:12:53 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) read(r0, &(0x7f0000000140)=""/11, 0xb) prctl$intptr(0x1d, 0xfffffffffffffc91) prctl$void(0x1e) syz_execute_func(&(0x7f0000000200)="3666440f9bf56664400f9f3241c3c4e2c9975842c4c27d794e003e0f11581010196f04cd04cd0f2902") syzkaller login: [ 217.958385] IPVS: ftp: loaded support on port[0] = 21 [ 220.066099] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.072787] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.081247] device bridge_slave_0 entered promiscuous mode [ 220.207159] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.213713] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.222298] device bridge_slave_1 entered promiscuous mode [ 220.345489] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 220.469981] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 220.856753] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 220.984988] bond0: Enslaving bond_slave_1 as an active interface with an up link 08:12:57 executing program 1: socketpair$unix(0x1, 0x800000000001, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x40096101, 0x730000) [ 221.729900] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 221.737965] team0: Port device team_slave_0 added [ 221.895438] IPVS: ftp: loaded support on port[0] = 21 [ 222.013497] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 222.021459] team0: Port device team_slave_1 added [ 222.223129] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 222.252354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 222.261176] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 222.417234] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 222.624682] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 222.632391] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 222.641362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 222.894715] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 222.902588] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 222.911502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 225.104138] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.110639] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.117660] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.124156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.132911] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 225.182059] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 225.243370] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.249860] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.258533] device bridge_slave_0 entered promiscuous mode [ 225.434865] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.441405] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.449876] device bridge_slave_1 entered promiscuous mode [ 225.676704] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 225.831474] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 226.526692] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 226.784934] bond0: Enslaving bond_slave_1 as an active interface with an up link 08:13:03 executing program 2: clone(0x13102001fef, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r0 = gettid() wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000340)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x7ff, 0x0, 0x75}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) [ 227.014492] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 227.032072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 227.293765] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 227.300863] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 227.660118] IPVS: ftp: loaded support on port[0] = 21 [ 228.188612] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 228.196657] team0: Port device team_slave_0 added [ 228.323556] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 228.331463] team0: Port device team_slave_1 added [ 228.612937] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 228.620035] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 228.628845] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 228.944295] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 228.951396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 228.960371] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 229.146319] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 229.154101] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 229.163046] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 229.405724] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 229.413403] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 229.422579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 231.833888] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.840392] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.849077] device bridge_slave_0 entered promiscuous mode [ 232.103246] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.109721] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.118402] device bridge_slave_1 entered promiscuous mode [ 232.285002] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 232.319773] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.326366] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.333413] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.339890] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.348625] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 232.450545] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 232.495563] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 233.114792] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 233.364636] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 233.617823] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 233.625284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 233.754578] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 233.772648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 234.552388] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 234.560289] team0: Port device team_slave_0 added [ 234.789771] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 234.797922] team0: Port device team_slave_1 added [ 234.970864] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 234.978741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 234.987587] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 235.111818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.225247] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 235.232785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 235.241361] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready 08:13:11 executing program 3: socket$inet6(0xa, 0x807, 0x80000000) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setflags(r0, 0x2, 0x1) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) getsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000280), &(0x7f0000000340)=0x29aeb0be6f496a49) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00', 0x10) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) epoll_wait(r2, &(0x7f0000000140)=[{}, {}, {}], 0x3, 0x1fc000000000) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) ioctl$RTC_WKALM_RD(r3, 0x80287010, &(0x7f0000000300)) [ 235.572184] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 235.579787] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 235.588901] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 235.913178] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 235.920810] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 235.929977] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 236.289737] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 236.457464] IPVS: ftp: loaded support on port[0] = 21 [ 237.578812] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 237.585313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 237.593296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 238.764979] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.625890] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.632444] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.639344] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.645950] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.654583] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 239.661181] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 241.506699] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.513332] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.521810] device bridge_slave_0 entered promiscuous mode [ 241.874575] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.881042] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.889491] device bridge_slave_1 entered promiscuous mode [ 242.239807] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 242.563717] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 243.441800] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 243.797386] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 244.113145] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 244.120357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 244.415538] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 244.422803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 245.293423] 8021q: adding VLAN 0 to HW filter on device bond0 08:13:21 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) gettid() timer_create(0x0, &(0x7f0000044000), &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f00000001c0)) tkill(0x0, 0x0) [ 245.483995] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 245.492086] team0: Port device team_slave_0 added [ 245.843498] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 245.851436] team0: Port device team_slave_1 added [ 246.235837] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 246.243199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 246.252430] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 246.626011] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 246.633274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 246.642050] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 246.732171] IPVS: ftp: loaded support on port[0] = 21 [ 246.766476] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 247.030569] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 247.038314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 247.047486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 247.409003] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 247.416691] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 247.425782] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready 08:13:23 executing program 0: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @dev}}}}}}, &(0x7f0000000000)) 08:13:23 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) getpeername(r0, &(0x7f0000000200)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f0000000100)=0x80) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000280)={0xc00000000000, 0x1, 0x401, 0x2, 0x100000001}, 0xc) socket$packet(0x11, 0x3, 0x300) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='wchan\x00') ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0x2, 0xf, 0x4, 0x0, {0x77359400}, {0x7, 0x0, 0x1, 0x8, 0x10001, 0xf8f5, "2fe73e94"}, 0x5d, 0x5, @fd=r2, 0x4}) recvmmsg(0xffffffffffffffff, &(0x7f0000005180)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000000)=""/99, 0x63}, {&(0x7f0000000080)=""/96, 0x60}], 0x2, &(0x7f00000013c0)=""/213, 0xd5}}], 0x1, 0x0, 0x0) preadv(r2, &(0x7f0000000480), 0x10000000000002a1, 0x38) [ 248.184509] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 248.190931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 248.198872] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 08:13:24 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@loopback, @in6=@ipv4={[], [], @rand_addr}, 0x0, 0x0, 0x0, 0x0, 0x400000002}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x0, 0xff}, 0x0, @in=@multicast1, 0x0, 0x1, 0x0, 0x1}}, 0xe8) r2 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x5, 0x8a00) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x2000, 0x0) ioctl$VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000240)={0xfffffffffffffffc, 0x8, 0x4, 0x0, {}, {0x5, 0xc, 0x21c, 0x8, 0xb046, 0x4, "4008e221"}, 0x4, 0x2, @fd=r3, 0x4}) sendmmsg(r1, &(0x7f0000000000)=[{{&(0x7f0000000180)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000040), 0x0, &(0x7f0000000280)}}], 0x1, 0x0) 08:13:24 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20040000008912, &(0x7f00000001c0)="0a452d0240316285717070") r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x4080, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, &(0x7f0000000080)={0x8000, 0x8, [0x3, 0x0]}) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r2, 0x65, 0x2, &(0x7f0000cbc000)=""/244, &(0x7f0000000000)=0xf4) 08:13:25 executing program 0: stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x2) 08:13:25 executing program 0: setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000080)=0x8, 0x4) r0 = socket$inet6(0xa, 0x80803, 0x9) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40200) ioctl$VIDIOC_S_JPEGCOMP(r1, 0x408c563e, &(0x7f00000000c0)={0x0, 0xf, 0x18, "f91535a83067c0f241b00d1eef5496bcbd9ae8acfefeaba98c9a1c813fbeb0a7560e54d0977c3565e411649e2331af1c55730551801531640c79287e", 0x27, "181e2cf27977c64af5d1bd8056c3cd0234b0edbc795d15c064c83e2306501abb6139e013d5560c9cf4e4ebfcb470af24286e78ee1ecee2eab3c84b99"}) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[0xfec0]}}, 0x34) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000200)=0x0) ptrace$setregs(0xd, r2, 0x6d7, &(0x7f00000001c0)="b2a078e6495322c9e435bc6f5eb0efaf48259ed976ab2d8c6375833c865688909cd39455b46755122214a0c1d6980a6f090a56a42f98f417") setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000180)=0x9, 0x4) [ 249.710634] 8021q: adding VLAN 0 to HW filter on device team0 08:13:26 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000500)="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") mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) pkey_mprotect(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) mlock(&(0x7f0000001000/0x4000)=nil, 0x4000) pkey_mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x3, 0xffffffffffffffff) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x440, 0x0) ioctl$VIDIOC_S_AUDIO(r1, 0x40345622, &(0x7f0000000040)={0x54, "ad9e0693490117144673b316dc329da10a0a82592b0f0204f4eeda132aaf5729", 0x2, 0x1}) 08:13:26 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x204040, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000200)={0xbb0000, 0x3, 0x5, [], &(0x7f00000001c0)={0x990903, 0x0, [], @value64=0xfffffffffffffffd}}) read(r0, &(0x7f00000000c0)=""/199, 0xc7) fcntl$setstatus(r0, 0x4, 0x2800) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c4e6546000000007d95c88c1612786908655d4e1d310e524467c8a1648dd39a8400080033000000"], 0x2a) ioctl$BLKSECTGET(r1, 0x1267, &(0x7f0000000240)) fcntl$setstatus(r0, 0x4, 0x40000) [ 251.737012] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.743576] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.750470] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.757056] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.765447] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 252.222797] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 253.076766] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.083328] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.091852] device bridge_slave_0 entered promiscuous mode [ 253.409522] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.416299] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.424802] device bridge_slave_1 entered promiscuous mode [ 253.589372] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.751723] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 254.101202] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 254.781249] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 255.111318] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 255.455377] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 255.762970] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 255.770094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 256.078029] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 256.085288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 256.136772] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 256.143388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 256.151178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 256.999854] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 257.008036] team0: Port device team_slave_0 added [ 257.207190] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.273480] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 257.281510] team0: Port device team_slave_1 added [ 257.378075] QAT: Device 255 not found 08:13:33 executing program 1: [ 257.622115] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 257.629225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 257.638268] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 257.895844] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 257.903206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 257.911927] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 258.087315] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 258.095130] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 258.103973] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 258.334902] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 258.342916] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 258.351787] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 260.415085] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.421580] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.428646] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.435196] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.443574] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 260.450204] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 261.876256] 8021q: adding VLAN 0 to HW filter on device bond0 08:13:38 executing program 2: [ 262.606922] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 263.099238] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 263.105841] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 263.113794] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 263.593607] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.383394] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.691457] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 266.830946] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 267.177753] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 267.184195] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 267.192256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 08:13:43 executing program 3: socket$inet6(0xa, 0x807, 0x80000000) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setflags(r0, 0x2, 0x1) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) getsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000280), &(0x7f0000000340)=0x29aeb0be6f496a49) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00', 0x10) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) epoll_wait(r2, &(0x7f0000000140)=[{}, {}, {}], 0x3, 0x1fc000000000) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) ioctl$RTC_WKALM_RD(r3, 0x80287010, &(0x7f0000000300)) [ 267.607840] 8021q: adding VLAN 0 to HW filter on device team0 08:13:45 executing program 4: 08:13:45 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x204040, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000200)={0xbb0000, 0x3, 0x5, [], &(0x7f00000001c0)={0x990903, 0x0, [], @value64=0xfffffffffffffffd}}) read(r0, &(0x7f00000000c0)=""/199, 0xc7) fcntl$setstatus(r0, 0x4, 0x2800) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c4e6546000000007d95c88c1612786908655d4e1d310e524467c8a1648dd39a8400080033000000"], 0x2a) ioctl$BLKSECTGET(r1, 0x1267, &(0x7f0000000240)) fcntl$setstatus(r0, 0x4, 0x40000) 08:13:45 executing program 5: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x40c0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x66, 0x4, @buffer={0x0, 0x68, &(0x7f0000000040)=""/104}, &(0x7f00000000c0)="54eb31c1803aabe797333735ad94bd35f2ad9f957f6c9df173bb5072482c8481d36e663df7b5e1f3de2b49e72fcfe9f75e411722d11d3128ccfc96ff4fe159daa2ae4b6190e42a98e9395dc2ca112b4c5a83fa6dd28e10ba5cda1a0f259e1ce55dbce3e745f3", &(0x7f0000000140)=""/49, 0x2, 0x21, 0x0, &(0x7f0000000180)}) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000240)='/dev/cuse\x00', 0x2, 0x0) write$binfmt_elf64(r1, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x4446, 0x4, 0x0, 0x7f, 0xc53, 0x3, 0x6, 0xf2c, 0x7c, 0x40, 0xd1, 0xb622, 0xa01e, 0x38, 0x2, 0xf7, 0x2b5e46f4, 0x2}, [{0x0, 0xde, 0x100000001, 0x1f, 0x2, 0x6, 0x5, 0x6}], "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", [[], [], [], []]}, 0x1478) io_setup(0xfffffffffffffff8, &(0x7f0000001700)=0x0) io_submit(r2, 0x4, &(0x7f0000001980)=[&(0x7f0000001780)={0x0, 0x0, 0x0, 0x6, 0x0, r1, &(0x7f0000001740)="25cff7b5281885d33fbc297656052c19dacd5a2a69a33e5154ec2efcebb608", 0x1f, 0x6, 0x0, 0x0, r0}, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x7, 0x5, r0, &(0x7f00000017c0)="c118f3c681a06ff9aa68e3174a64394f4b374d049c706b4957e911", 0x1b, 0x2, 0x0, 0x0, r0}, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x6, 0x7, r0, &(0x7f0000001840)="0b435e634db56131ca8c7521277f4a747da6a7c0850210270b6c693291151041af0187bd8f6fe112853104bbe81c869c9ca2025d2f78de04e14e4475dfd0975bd7f38e6f954162125197132c003206376e6cdb1696c520d3", 0x58, 0x7, 0x0, 0x2, r0}, &(0x7f0000001940)={0x0, 0x0, 0x0, 0xd, 0x5, r0, &(0x7f0000001900)="d092c0a0030363d2d2062b338a95b7333d054f6d33f47ad2c13852ebb8bfd559ea", 0x21, 0x3, 0x0, 0x695a9b7f01fead43, r0}]) r3 = semget(0x1, 0x6, 0x8) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000019c0)={{{@in=@rand_addr, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@loopback}}, &(0x7f0000001ac0)=0xe8) fstat(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f0000001c80)={{0x3, r4, r5, r6, r7, 0x128, 0x5e41}, 0xe0000000000, 0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000001d40)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000001d00)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000001d80)={0x7, 0x8, 0xfa00, {r8, 0x1}}, 0x10) chdir(&(0x7f0000001dc0)='./file0\x00') ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000001e00)) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000001e40)=""/2) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000001e80)={0x0}) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000001ec0)={r9, 0x1}) open$dir(&(0x7f0000001f00)='./file0\x00', 0x28000, 0xd2) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000001f40)=0x1f, 0x4) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000001f80)={0x3e8a8ccec52df4b3, 0x103, 0x2, {0x5b5d, 0x5, 0x9, 0x4}}) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000001fc0)) truncate(&(0x7f0000002000)='./file0\x00', 0x74a) r10 = add_key$user(&(0x7f0000002040)='user\x00', &(0x7f0000002080)={'syz', 0x0}, &(0x7f00000020c0)="c1a4eeeeee1423c3abd5468586a02a7d8144c2d5b5820229e64cc70abc750e47a2cf01946f054e038bb814349e2db2737311d9d0518203766bbf9d5e16bb446598b529aba8fd21459f97ffba5dff486f3b976bf7987f666e6e49d91287830297ead1893e31ee743fa3041ed0", 0x6c, 0xffffffffffffffff) r11 = add_key$keyring(&(0x7f0000002180)='keyring\x00', &(0x7f00000021c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$instantiate(0xc, r10, &(0x7f0000002140)=@encrypted_update={'update ', 'ecryptfs', 0x20, 'trusted:', '/dev/cuse\x00'}, 0x23, r11) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000002200)={0x0, @in6={{0xa, 0x4e22, 0x9, @dev={0xfe, 0x80, [], 0xc}, 0x7fffffff}}, 0x40, 0x1, 0x7, 0x0, 0xf54b000000}, &(0x7f00000022c0)=0x98) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000002300)={0x2, 0x10001, 0x8, 0x7, 0x22c, 0x8, 0x1000, 0x5, r12}, 0x20) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000002340)='/proc/self/attr/current\x00', 0x2, 0x0) 08:13:45 executing program 2: 08:13:45 executing program 1: 08:13:45 executing program 3: 08:13:46 executing program 4: 08:13:46 executing program 2: sched_setaffinity(0x0, 0xa6, &(0x7f0000000440)=0x84) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2}, 0x1c) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r3, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) ioctl$sock_ifreq(r3, 0x89f3, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) connect(r2, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @broadcast}, 0x4, 0x3, 0x1, 0x3}}, 0x80) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f0000000040)=0xfff, 0x4) sendto$inet(r4, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000001180)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='sit0\x00', 0x10) r5 = dup3(r2, r0, 0x80000) ioctl$UI_END_FF_ERASE(r5, 0x400c55cb, &(0x7f0000000200)={0xb, 0x4000000000000, 0xfffffffffffffffd}) getsockname$inet6(r5, &(0x7f00000001c0), &(0x7f0000000380)=0x1c) sendto$inet(r4, &(0x7f0000d7cfcb), 0x100000252, 0x0, &(0x7f0000893ff0), 0x10) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r5, 0xc0505405, &(0x7f0000000240)={{0x3, 0x0, 0x5, 0x3, 0x1f}, 0xc26, 0x9, 0x4}) shutdown(r4, 0x400000000000001) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r5, 0xc0505405, &(0x7f00000004c0)={{0x3, 0xffffffffffffffff, 0x332, 0x3, 0x21}, 0x0, 0x3ff, 0xffffffffffffff80}) r6 = gettid() capset(&(0x7f0000000340)={0x20080522, r6}, &(0x7f0000000480)={0x7, 0x4, 0x5, 0xa3e5, 0x9, 0x7fff}) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000080)={'lo\x00', {0x2, 0x4e24, @local}}) getsockopt$EBT_SO_GET_INIT_INFO(r5, 0x0, 0x82, &(0x7f00000002c0)={'broute\x00'}, &(0x7f00000003c0)=0x78) ioctl$sock_inet6_tcp_SIOCATMARK(r5, 0x8905, &(0x7f0000000540)) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r7, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 08:13:46 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}, 0x1c) 08:13:46 executing program 3: 08:13:46 executing program 0: 08:13:46 executing program 4: 08:13:46 executing program 1: 08:13:46 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0x0, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) shutdown(r1, 0x1) recvmmsg(r1, &(0x7f000000a2c0)=[{{&(0x7f0000006e80)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f0000007000), 0x0, &(0x7f0000007040)=""/88, 0x58}}], 0x1, 0x0, &(0x7f000000a400)) [ 270.934955] IPVS: ftp: loaded support on port[0] = 21 [ 272.294481] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.300942] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.309007] device bridge_slave_0 entered promiscuous mode [ 272.385094] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.391497] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.399682] device bridge_slave_1 entered promiscuous mode [ 272.475183] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 272.550136] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 272.774829] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 272.852644] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 272.999517] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 273.006742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 273.233456] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 273.241021] team0: Port device team_slave_0 added [ 273.314754] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 273.322716] team0: Port device team_slave_1 added [ 273.397205] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 273.475236] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 273.552250] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 273.559535] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 273.568462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 273.642779] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 273.650179] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 273.659154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 274.490799] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.497280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.504198] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.510609] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.519015] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 274.941957] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 277.554175] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.835272] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 278.113231] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 278.119508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 278.127583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 278.497886] 8021q: adding VLAN 0 to HW filter on device team0 08:13:56 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8922, &(0x7f0000000100)={'bridge0\x00'}) 08:13:56 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/3, 0x3}], 0x1, 0xfffffffffffffffc) 08:13:56 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x8000400000000c9, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000340)) socket$inet6(0xa, 0x0, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000580)=ANY=[], 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) 08:13:56 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x80000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"748f6e6c3000420300000011edee00"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f00000000c0)="0f0f1ba00873850f01d1ba4000b8a989ef660f2ac3ba4000b85700eff3cfbad00466b8b200000066ef3e0f38003abaf80c66b8a206ef8766efbafc0cec", 0x3d}], 0x1, 0x0, &(0x7f0000000200), 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$inet6(0xa, 0x3, 0x3a) stat(&(0x7f0000001380)='./file0\x00', &(0x7f00000003c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:13:56 executing program 2: open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r0 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x638, 0x8083) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x0, [0xfffffffe]}) close(r0) 08:13:56 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)={'stack ', '&&\x00'}, 0x1de) [ 280.416119] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. [ 280.462039] ================================================================== [ 280.469470] BUG: KMSAN: uninit-value in aa_fqlookupn_profile+0x336/0x730 [ 280.476333] CPU: 1 PID: 8209 Comm: syz-executor0 Not tainted 4.19.0+ #82 [ 280.483190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 280.492560] Call Trace: [ 280.495191] dump_stack+0x32d/0x480 [ 280.498845] ? aa_fqlookupn_profile+0x336/0x730 [ 280.501359] bridge0: mtu less than device minimum [ 280.503543] kmsan_report+0x19f/0x300 [ 280.503581] __msan_warning+0x76/0xd0 [ 280.503608] aa_fqlookupn_profile+0x336/0x730 [ 280.503636] ? __msan_warning+0xb1/0xd0 [ 280.503663] aa_label_strn_parse+0x17bb/0x1e70 [ 280.503702] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 280.503721] ? refcount_inc_not_zero_checked+0x5d7/0x6f0 [ 280.503747] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 280.503770] aa_label_parse+0x11f/0x130 [ 280.503795] aa_change_profile+0x959/0x3da0 [ 280.503824] ? vfs_write+0x4a0/0x8f0 [ 280.557920] ? task_kmsan_context_state+0x51/0x90 [ 280.562784] ? __msan_get_context_state+0x9/0x30 [ 280.567554] ? INIT_INT+0xc/0x30 [ 280.570971] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 280.576449] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 280.581827] ? strcmp+0x83/0x160 [ 280.585209] apparmor_setprocattr+0xba4/0x13a0 [ 280.589833] ? apparmor_getprocattr+0x660/0x660 [ 280.594525] security_setprocattr+0x139/0x210 [ 280.599043] proc_pid_attr_write+0x407/0x4f0 [ 280.603477] ? proc_pid_attr_read+0x530/0x530 [ 280.607990] __vfs_write+0x1f4/0xb80 08:13:56 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000780)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000000100)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620c, &(0x7f0000000040)) [ 280.611743] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 280.617125] ? __sb_start_write+0x119/0x240 [ 280.621471] vfs_write+0x4a3/0x8f0 [ 280.625046] __se_sys_write+0x17a/0x370 [ 280.629049] __x64_sys_write+0x4a/0x70 [ 280.632954] do_syscall_64+0xcf/0x110 [ 280.636774] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 280.641980] RIP: 0033:0x457569 [ 280.645184] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 280.664097] RSP: 002b:00007f9e19ac4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 280.671828] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457569 [ 280.679112] RDX: 00000000000001de RSI: 0000000020000040 RDI: 0000000000000003 [ 280.686395] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 280.693676] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9e19ac56d4 [ 280.701461] R13: 00000000004c585a R14: 00000000004d9558 R15: 00000000ffffffff [ 280.708756] [ 280.710394] Local variable description: ----ns_name@aa_fqlookupn_profile [ 280.717238] Variable was created at: [ 280.720973] aa_fqlookupn_profile+0x79/0x730 [ 280.725400] aa_label_strn_parse+0x17bb/0x1e70 [ 280.728156] binder: 8220:8222 ioctl c018620c 20000040 returned -22 [ 280.729979] ================================================================== [ 280.729986] Disabling lock debugging due to kernel taint [ 280.729996] Kernel panic - not syncing: panic_on_warn set ... [ 280.729996] [ 280.730017] CPU: 1 PID: 8209 Comm: syz-executor0 Tainted: G B 4.19.0+ #82 [ 280.730026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 280.730033] Call Trace: [ 280.730057] dump_stack+0x32d/0x480 [ 280.730087] panic+0x57e/0xb28 [ 280.730136] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 280.730159] kmsan_report+0x300/0x300 [ 280.730187] __msan_warning+0x76/0xd0 [ 280.730214] aa_fqlookupn_profile+0x336/0x730 [ 280.730239] ? __msan_warning+0xb1/0xd0 [ 280.730266] aa_label_strn_parse+0x17bb/0x1e70 [ 280.730303] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 280.730320] ? refcount_inc_not_zero_checked+0x5d7/0x6f0 [ 280.730354] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 280.760156] binder: BINDER_SET_CONTEXT_MGR already set [ 280.765072] aa_label_parse+0x11f/0x130 [ 280.765102] aa_change_profile+0x959/0x3da0 [ 280.765120] ? vfs_write+0x4a0/0x8f0 [ 280.765148] ? task_kmsan_context_state+0x51/0x90 [ 280.765169] ? __msan_get_context_state+0x9/0x30 [ 280.765185] ? INIT_INT+0xc/0x30 [ 280.765226] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 280.765250] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 280.765266] ? strcmp+0x83/0x160 [ 280.765289] apparmor_setprocattr+0xba4/0x13a0 [ 280.765330] ? apparmor_getprocattr+0x660/0x660 [ 280.765358] security_setprocattr+0x139/0x210 [ 280.765385] proc_pid_attr_write+0x407/0x4f0 [ 280.765413] ? proc_pid_attr_read+0x530/0x530 [ 280.765429] __vfs_write+0x1f4/0xb80 [ 280.765460] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 280.765478] ? __sb_start_write+0x119/0x240 [ 280.765499] vfs_write+0x4a3/0x8f0 [ 280.765544] __se_sys_write+0x17a/0x370 [ 280.775005] binder: 8220:8224 ioctl 40046207 0 returned -16 [ 280.777504] __x64_sys_write+0x4a/0x70 [ 280.785072] binder: 8220:8224 ioctl c018620c 20000040 returned -22 [ 280.789748] do_syscall_64+0xcf/0x110 [ 280.789772] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 280.789787] RIP: 0033:0x457569 [ 280.789805] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 280.789816] RSP: 002b:00007f9e19ac4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 280.789834] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457569 [ 280.789845] RDX: 00000000000001de RSI: 0000000020000040 RDI: 0000000000000003 [ 280.789855] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 280.789866] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9e19ac56d4 [ 280.789877] R13: 00000000004c585a R14: 00000000004d9558 R15: 00000000ffffffff [ 280.791168] Kernel Offset: disabled [ 281.009848] Rebooting in 86400 seconds..