[ 28.030161] random: sshd: uninitialized urandom read (32 bytes read) [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 30.356197] random: sshd: uninitialized urandom read (32 bytes read) [ 30.656500] audit: type=1400 audit(1536373370.610:6): avc: denied { map } for pid=5447 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 30.712983] random: sshd: uninitialized urandom read (32 bytes read) [ 31.477584] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.31' (ECDSA) to the list of known hosts. [ 37.251006] random: sshd: uninitialized urandom read (32 bytes read) 2018/09/08 02:22:57 fuzzer started [ 37.381023] audit: type=1400 audit(1536373377.340:7): avc: denied { map } for pid=5459 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16479 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 38.483211] random: cc1: uninitialized urandom read (8 bytes read) 2018/09/08 02:22:59 dialing manager at 10.128.0.26:33253 2018/09/08 02:22:59 syscalls: 1 2018/09/08 02:22:59 code coverage: enabled 2018/09/08 02:22:59 comparison tracing: enabled 2018/09/08 02:22:59 setuid sandbox: enabled 2018/09/08 02:22:59 namespace sandbox: enabled 2018/09/08 02:22:59 fault injection: enabled 2018/09/08 02:22:59 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/09/08 02:22:59 net packed injection: enabled 2018/09/08 02:22:59 net device setup: enabled [ 40.664707] random: crng init done 02:25:16 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) 02:25:16 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={&(0x7f0000000240), &(0x7f0000000340)}}, &(0x7f0000044000)) r1 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x4018920a, 0x20000000) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) socketpair$unix(0x1, 0x20000000000002, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x15) 02:25:16 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1000001, 0x4000031, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000080)=[{{&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000002740)=[{&(0x7f0000001740)="c7", 0x1}], 0x1, &(0x7f00000001c0)}}], 0x1, 0x0) sendmmsg(r1, &(0x7f0000000000)=[{{&(0x7f0000002200)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000002700)}}], 0x4000000000000d2, 0x0) 02:25:16 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000200)={'tunl0\x00', @ifru_data=&(0x7f0000000180)="d61a072afa6a2e6e9105a65cf0b08be4d57565e1a85eff283ee23d954743a2e3"}) 02:25:16 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000028fc8)={&(0x7f0000007ff4), 0xc, &(0x7f0000015ff0)={&(0x7f0000023000)={0x1c, 0x20, 0xaff, 0x0, 0x0, {0x1000a}, [@generic="fffffe0121"]}, 0x1c}}, 0x0) [ 176.450992] audit: type=1400 audit(1536373516.410:8): avc: denied { map } for pid=5459 comm="syz-fuzzer" path="/root/syzkaller-shm288083405" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 02:25:16 executing program 6: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r0, 0x0) shutdown(r0, 0x0) 02:25:16 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x800000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@ipv4={[], [], @rand_addr=0x7}, 0x0, 0x0, 0x4e24, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x1f}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0x32}, 0x0, @in6, 0x0, 0xfffffffffffffffd, 0x0, 0x5}}, 0xe8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x4cc, 0x0) socket$inet6(0xa, 0x0, 0x0) 02:25:16 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x0, @remote}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) [ 176.492828] audit: type=1400 audit(1536373516.450:9): avc: denied { map } for pid=5474 comm="syz-executor3" path="/sys/kernel/debug/kcov" dev="debugfs" ino=94 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 176.697721] IPVS: ftp: loaded support on port[0] = 21 [ 176.724450] IPVS: ftp: loaded support on port[0] = 21 [ 176.858181] IPVS: ftp: loaded support on port[0] = 21 [ 176.865166] IPVS: ftp: loaded support on port[0] = 21 [ 176.886934] IPVS: ftp: loaded support on port[0] = 21 [ 176.902490] IPVS: ftp: loaded support on port[0] = 21 [ 176.965943] IPVS: ftp: loaded support on port[0] = 21 [ 176.966264] IPVS: ftp: loaded support on port[0] = 21 [ 179.678929] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.688972] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.696645] device bridge_slave_0 entered promiscuous mode [ 179.862568] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.889193] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.896677] device bridge_slave_1 entered promiscuous mode [ 179.934252] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.949849] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.957338] device bridge_slave_0 entered promiscuous mode [ 180.020774] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.027169] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.053863] device bridge_slave_0 entered promiscuous mode [ 180.065158] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.075566] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.098259] device bridge_slave_0 entered promiscuous mode [ 180.107985] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 180.119177] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.125587] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.139773] device bridge_slave_1 entered promiscuous mode [ 180.153564] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.168796] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.176159] device bridge_slave_0 entered promiscuous mode [ 180.190693] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.197060] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.207577] device bridge_slave_0 entered promiscuous mode [ 180.215129] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.229999] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.237352] device bridge_slave_0 entered promiscuous mode [ 180.261315] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 180.269941] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.276301] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.295040] device bridge_slave_0 entered promiscuous mode [ 180.311383] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.317956] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.333707] device bridge_slave_1 entered promiscuous mode [ 180.341043] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.347414] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.356097] device bridge_slave_1 entered promiscuous mode [ 180.365754] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.374377] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.390190] device bridge_slave_1 entered promiscuous mode [ 180.413805] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.428461] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.436234] device bridge_slave_1 entered promiscuous mode [ 180.444334] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 180.472388] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.490999] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.498441] device bridge_slave_1 entered promiscuous mode [ 180.522614] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.531285] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.539654] device bridge_slave_1 entered promiscuous mode [ 180.550722] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 180.567007] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 180.584999] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 180.616572] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 180.635583] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 180.665009] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 180.711457] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 180.723580] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 180.742692] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 180.768194] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 180.792430] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 180.826637] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 180.944275] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 180.960622] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 181.031813] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 181.169495] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 181.231371] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 181.260450] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 181.273072] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 181.306332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 181.338082] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 181.362330] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 181.386933] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 181.408072] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 181.455140] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 181.477760] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 181.496073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 181.523658] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 181.544037] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 181.563766] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 181.671163] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 181.701913] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 181.856319] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 181.887539] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 181.911779] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 181.919217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 181.936241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 181.981341] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 181.996988] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 182.031454] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 182.042277] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 182.072144] team0: Port device team_slave_0 added [ 182.078274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 182.089736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 182.120252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 182.156924] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 182.192870] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 182.294125] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 182.319574] team0: Port device team_slave_1 added [ 182.377148] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 182.408292] team0: Port device team_slave_0 added [ 182.423856] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 182.431964] team0: Port device team_slave_0 added [ 182.441338] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 182.448843] team0: Port device team_slave_0 added [ 182.470696] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 182.478112] team0: Port device team_slave_0 added [ 182.512093] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 182.553366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 182.580428] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 182.589667] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 182.597096] team0: Port device team_slave_0 added [ 182.613450] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 182.632858] team0: Port device team_slave_0 added [ 182.640209] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 182.647691] team0: Port device team_slave_1 added [ 182.665545] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 182.676126] team0: Port device team_slave_1 added [ 182.685635] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 182.695574] team0: Port device team_slave_1 added [ 182.704652] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 182.726149] team0: Port device team_slave_0 added [ 182.747248] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 182.771957] team0: Port device team_slave_1 added [ 182.811524] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 182.821375] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 182.840413] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 182.848033] team0: Port device team_slave_1 added [ 182.855921] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 182.864537] team0: Port device team_slave_1 added [ 182.877061] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 182.891596] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 182.906634] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 182.930192] team0: Port device team_slave_1 added [ 182.936222] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 182.950340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 182.958332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 182.991559] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 183.005926] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 183.014159] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 183.027164] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 183.040740] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 183.059834] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 183.089493] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 183.099779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 183.117742] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 183.125641] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 183.134014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 183.142082] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 183.150161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 183.162135] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 183.173220] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 183.182226] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 183.201454] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 183.216643] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 183.228075] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 183.259375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 183.267457] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 183.304804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 183.329707] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 183.338028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 183.346180] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 183.354020] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 183.362005] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 183.369838] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 183.377530] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 183.385226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 183.392984] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 183.400939] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 183.409035] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 183.417088] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 183.434124] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 183.452086] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 183.471095] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 183.484015] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 183.499196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 183.514242] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 183.552648] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 183.578927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 183.586919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 183.595563] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 183.603342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 183.611304] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 183.620048] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 183.629948] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 183.638046] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 183.649663] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 183.659208] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 183.676275] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 183.699862] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 183.707132] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 183.740208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 183.774295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 183.793872] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 183.803592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 183.812330] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 183.820874] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 183.830056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 183.841924] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 183.863780] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 183.873692] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 183.901357] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 183.914344] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 183.932669] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 183.959681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 183.967717] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 183.993954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 184.006712] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 184.014986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 184.023088] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 184.031020] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 184.039264] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 184.047153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 184.058592] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 184.098047] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 184.126776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 184.168383] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 184.206991] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 184.230010] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 185.417041] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.423606] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.430779] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.437231] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.503724] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 185.510934] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 185.527450] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.533945] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.540693] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.547081] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.573838] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 185.593097] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.599562] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.606238] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.612652] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.629397] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 185.795601] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.802073] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.808844] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.815232] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.860580] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 185.882670] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.889131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.895833] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.902335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.964574] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 185.983800] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.990252] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.996959] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.003403] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.017709] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 186.199629] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.206160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.212989] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.219439] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.267778] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 186.275818] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.282258] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.289016] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.295390] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.303370] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 186.549108] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 186.556485] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 186.601683] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 186.625181] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 186.637332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 186.646331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 186.653545] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 192.263729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.580670] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.606021] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.681521] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.759183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.859783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.886361] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 192.918136] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.089255] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.219478] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 193.250052] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 193.270017] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 193.402109] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 193.445487] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 193.490183] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 193.496847] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 193.509664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 193.556177] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 193.743827] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 193.778540] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 193.810197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 193.828546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 193.898007] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 193.918571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 193.926200] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 193.945665] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 193.971150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 193.986608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 194.071049] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 194.078367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 194.089313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 194.170192] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.182234] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 194.194072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 194.214595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 194.251508] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 194.270653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 194.282300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 194.468469] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 194.489281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 194.496423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 194.516651] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.560976] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.629576] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.760039] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.859552] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.919817] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.076835] 8021q: adding VLAN 0 to HW filter on device team0 02:25:38 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) 02:25:38 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) 02:25:38 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1000001, 0x4000031, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000080)=[{{&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000002740)=[{&(0x7f0000001740)="c7", 0x1}], 0x1, &(0x7f00000001c0)}}], 0x1, 0x0) sendmmsg(r1, &(0x7f0000000000)=[{{&(0x7f0000002200)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000002700)}}], 0x4000000000000d2, 0x0) 02:25:38 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={&(0x7f0000000240), &(0x7f0000000340)}}, &(0x7f0000044000)) r1 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x4018920a, 0x20000000) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) socketpair$unix(0x1, 0x20000000000002, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x15) 02:25:38 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x0, @remote}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) 02:25:38 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) 02:25:38 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1000001, 0x4000031, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000080)=[{{&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000002740)=[{&(0x7f0000001740)="c7", 0x1}], 0x1, &(0x7f00000001c0)}}], 0x1, 0x0) sendmmsg(r1, &(0x7f0000000000)=[{{&(0x7f0000002200)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000002700)}}], 0x4000000000000d2, 0x0) [ 198.733326] hrtimer: interrupt took 32791 ns 02:25:38 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x0, @remote}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) 02:25:38 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000028fc8)={&(0x7f0000007ff4), 0xc, &(0x7f0000015ff0)={&(0x7f0000023000)={0x1c, 0x20, 0xaff, 0x0, 0x0, {0x1000a}, [@generic="fffffe0121"]}, 0x1c}}, 0x0) 02:25:38 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1000001, 0x4000031, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000080)=[{{&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000002740)=[{&(0x7f0000001740)="c7", 0x1}], 0x1, &(0x7f00000001c0)}}], 0x1, 0x0) sendmmsg(r1, &(0x7f0000000000)=[{{&(0x7f0000002200)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000002700)}}], 0x4000000000000d2, 0x0) 02:25:38 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={&(0x7f0000000240), &(0x7f0000000340)}}, &(0x7f0000044000)) r1 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x4018920a, 0x20000000) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) socketpair$unix(0x1, 0x20000000000002, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x15) 02:25:39 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000200)={'tunl0\x00', @ifru_data=&(0x7f0000000180)="d61a072afa6a2e6e9105a65cf0b08be4d57565e1a85eff283ee23d954743a2e3"}) 02:25:39 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x0, @remote}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) 02:25:39 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x0, @remote}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) 02:25:39 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x800000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@ipv4={[], [], @rand_addr=0x7}, 0x0, 0x0, 0x4e24, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x1f}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0x32}, 0x0, @in6, 0x0, 0xfffffffffffffffd, 0x0, 0x5}}, 0xe8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x4cc, 0x0) socket$inet6(0xa, 0x0, 0x0) 02:25:39 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='/dev/kvm\x00', 0xffffffffffffff9c}, 0x10) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="f6ff"]) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000380)={0x0, 0xfffffffffffffffc}, 0x8) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040), 0x0, 0x0, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000001c0)=""/3) 02:25:39 executing program 6: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r0, 0x0) shutdown(r0, 0x0) 02:25:39 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000200)={'tunl0\x00', @ifru_data=&(0x7f0000000180)="d61a072afa6a2e6e9105a65cf0b08be4d57565e1a85eff283ee23d954743a2e3"}) 02:25:39 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000028fc8)={&(0x7f0000007ff4), 0xc, &(0x7f0000015ff0)={&(0x7f0000023000)={0x1c, 0x20, 0xaff, 0x0, 0x0, {0x1000a}, [@generic="fffffe0121"]}, 0x1c}}, 0x0) 02:25:39 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={&(0x7f0000000240), &(0x7f0000000340)}}, &(0x7f0000044000)) r1 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x4018920a, 0x20000000) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) socketpair$unix(0x1, 0x20000000000002, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x15) 02:25:39 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x0, @remote}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) 02:25:39 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0x40085112, &(0x7f0000000100)={{0x7fffffff, 0x1000000000009}}) [ 199.533038] sched: DL replenish lagged too much [ 199.534499] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. 02:25:39 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x0, @remote}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) 02:25:39 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0x40085112, &(0x7f0000000100)={{0x7fffffff, 0x1000000000009}}) 02:25:39 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000028fc8)={&(0x7f0000007ff4), 0xc, &(0x7f0000015ff0)={&(0x7f0000023000)={0x1c, 0x20, 0xaff, 0x0, 0x0, {0x1000a}, [@generic="fffffe0121"]}, 0x1c}}, 0x0) 02:25:39 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000200)={'tunl0\x00', @ifru_data=&(0x7f0000000180)="d61a072afa6a2e6e9105a65cf0b08be4d57565e1a85eff283ee23d954743a2e3"}) 02:25:39 executing program 6: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r0, 0x0) shutdown(r0, 0x0) 02:25:39 executing program 3: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/packet\x00') socket$packet(0x11, 0x800000000000003, 0x300) socket(0x11, 0x2, 0x0) sendfile(r0, r1, &(0x7f0000000000)=0x7a, 0x80000003) [ 200.058850] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12336 sclass=netlink_route_socket pig=7652 comm=syz-executor3 02:25:40 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x0, &(0x7f0000000140)=0x0) r2 = syz_open_dev$mouse(&(0x7f0000000200)='/dev/input/mouse#\x00', 0xbd, 0x400) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000002c0)={0x0, 0x8, 0x3, [0x2, 0x6f, 0xff]}, &(0x7f0000000340)=0xe) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000380)={r3, 0x69, "4693b63b5b928ad1bdec20a8764b0277c5c64f7e497c87f490b1d0bb5421149083b40383f0149f131b480f90497e707f2477ef79db789bdf994ab115895af43e10336f5cc1cee98793a20c2818527386fc83c82e05fa9a6c2b9ffb99b8a38178c7697582811cc7fe59"}, &(0x7f0000000400)=0x71) io_cancel(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0xfffffffffffffff8, r0, &(0x7f0000000180)="b194d2f74bc8876345c455599b02b08a07569594f1d27df7b1e798f53c", 0x1d, 0x3, 0x0, 0x1, r2}, &(0x7f0000000280)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={"6200e3ffffff004b6d30b300ff4f0138", 0x102}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) close(r0) 02:25:40 executing program 0: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000100)={0x0, 0x101, 0x4, 0x0, 0x17}) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) sendfile(r2, r1, &(0x7f0000000300)=0x10f000, 0x10000000c) getpid() [ 201.269620] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12336 sclass=netlink_route_socket pig=7661 comm=syz-executor3 02:25:41 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x800000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@ipv4={[], [], @rand_addr=0x7}, 0x0, 0x0, 0x4e24, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x1f}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0x32}, 0x0, @in6, 0x0, 0xfffffffffffffffd, 0x0, 0x5}}, 0xe8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x4cc, 0x0) socket$inet6(0xa, 0x0, 0x0) [ 201.452653] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 201.463833] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 02:25:41 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='/dev/kvm\x00', 0xffffffffffffff9c}, 0x10) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="f6ff"]) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000380)={0x0, 0xfffffffffffffffc}, 0x8) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040), 0x0, 0x0, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000001c0)=""/3) 02:25:41 executing program 6: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r0, 0x0) shutdown(r0, 0x0) 02:25:41 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002b000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000500)="f30f00930010f2f30fbb1c2e2ef30f5fca0f350fc79909000f01b10400ba410066ed0f4c1d68043eba4300ec", 0x2c}], 0x1, 0x0, &(0x7f0000000280), 0x10000006) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000000)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x6}) 02:25:41 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0x40085112, &(0x7f0000000100)={{0x7fffffff, 0x1000000000009}}) 02:25:41 executing program 3: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/packet\x00') socket$packet(0x11, 0x800000000000003, 0x300) socket(0x11, 0x2, 0x0) sendfile(r0, r1, &(0x7f0000000000)=0x7a, 0x80000003) [ 201.504502] syz-executor0 (7662) used greatest stack depth: 15160 bytes left [ 201.620581] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12336 sclass=netlink_route_socket pig=7682 comm=syz-executor3 02:25:41 executing program 6: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='/dev/kvm\x00', 0xffffffffffffff9c}, 0x10) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="f6ff"]) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000380)={0x0, 0xfffffffffffffffc}, 0x8) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040), 0x0, 0x0, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000001c0)=""/3) 02:25:41 executing program 0: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000100)={0x0, 0x101, 0x4, 0x0, 0x17}) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) sendfile(r2, r1, &(0x7f0000000300)=0x10f000, 0x10000000c) getpid() [ 201.803315] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 02:25:42 executing program 3: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/packet\x00') socket$packet(0x11, 0x800000000000003, 0x300) socket(0x11, 0x2, 0x0) sendfile(r0, r1, &(0x7f0000000000)=0x7a, 0x80000003) [ 307.198700] rcu: INFO: rcu_preempt self-detected stall on CPU [ 307.205099] rcu: 1-...!: (2 GPs behind) idle=3d6/1/0x4000000000000002 softirq=10570/10571 fqs=0 [ 307.214574] rcu: (t=10500 jiffies g=9645 q=62) [ 307.219385] rcu: rcu_preempt kthread starved for 10500 jiffies! g9645 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 307.229799] rcu: RCU grace-period kthread stack dump: [ 307.234996] rcu_preempt R running task 22360 10 2 0x80000000 [ 307.242209] Call Trace: [ 307.244843] __schedule+0x86c/0x1ed0 [ 307.248581] ? __sched_text_start+0x8/0x8 [ 307.253060] ? __mod_timer+0x6f6/0x1870 [ 307.257054] ? add_timer_on+0x9f0/0x9f0 [ 307.261057] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 307.266167] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 307.271285] ? lockdep_hardirqs_on+0x421/0x5c0 [ 307.275881] ? trace_hardirqs_on+0xbd/0x310 [ 307.280212] ? kasan_check_read+0x11/0x20 [ 307.284376] ? prepare_to_swait_event+0x25a/0x800 [ 307.289236] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 307.294714] schedule+0xfe/0x460 [ 307.298109] ? __schedule+0x1ed0/0x1ed0 [ 307.302104] ? prepare_to_swait_event+0x25a/0x800 [ 307.306962] ? __init_swait_queue_head+0x150/0x150 [ 307.312209] ? __lockdep_init_map+0x105/0x590 [ 307.316713] ? lockdep_init_map+0x9/0x10 [ 307.320800] schedule_timeout+0x140/0x260 [ 307.324956] ? usleep_range+0x1a0/0x1a0 [ 307.328954] ? __next_timer_interrupt+0x1a0/0x1a0 [ 307.333826] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 307.339382] rcu_gp_kthread+0x9d9/0x2310 [ 307.343475] ? rcu_gp_init+0x1830/0x1830 [ 307.347547] ? update_curr+0x344/0xbe0 [ 307.351440] ? graph_lock+0x170/0x170 [ 307.355279] ? __account_cfs_rq_runtime+0x790/0x790 [ 307.360312] ? __lock_acquire+0x7ec/0x4ec0 [ 307.364560] ? graph_lock+0x170/0x170 [ 307.368400] ? mark_held_locks+0x130/0x130 [ 307.372657] ? __lock_is_held+0xb5/0x140 [ 307.376767] ? __account_cfs_rq_runtime+0x790/0x790 [ 307.381890] ? set_next_entity+0x30c/0xc40 [ 307.386132] ? mark_held_locks+0x130/0x130 [ 307.390373] ? rcu_read_lock_sched_held+0x108/0x120 [ 307.395402] ? select_task_rq_fair+0x34f0/0x34f0 [ 307.400173] ? __enqueue_entity+0x10d/0x1f0 [ 307.404515] ? graph_lock+0x170/0x170 [ 307.408330] ? lock_repin_lock+0x241/0x430 [ 307.412579] ? graph_lock+0x170/0x170 [ 307.416398] ? put_prev_task_stop+0x2f0/0xa10 [ 307.420909] ? lock_repin_lock+0x242/0x430 [ 307.425173] ? _raw_spin_unlock_irq+0x27/0x80 [ 307.429704] ? _raw_spin_unlock_irq+0x27/0x80 [ 307.434229] ? lockdep_hardirqs_on+0x421/0x5c0 [ 307.438826] ? trace_hardirqs_on+0xbd/0x310 [ 307.443159] ? kasan_check_read+0x11/0x20 [ 307.447844] ? mark_held_locks+0x130/0x130 [ 307.452090] ? audit_add_watch+0xad1/0xdc0 [ 307.456390] ? kasan_check_write+0x14/0x20 [ 307.460664] ? finish_task_switch+0x2f5/0x900 [ 307.465191] ? __switch_to_asm+0x40/0x70 [ 307.469267] ? preempt_notifier_register+0x200/0x200 [ 307.474382] ? __switch_to_asm+0x34/0x70 [ 307.478449] ? __switch_to_asm+0x34/0x70 [ 307.482511] ? __switch_to_asm+0x40/0x70 [ 307.486578] ? __switch_to_asm+0x40/0x70 [ 307.490684] ? __switch_to_asm+0x34/0x70 [ 307.494749] ? __switch_to_asm+0x40/0x70 [ 307.498833] ? __switch_to_asm+0x34/0x70 [ 307.502899] ? __switch_to_asm+0x34/0x70 [ 307.506974] ? __switch_to_asm+0x40/0x70 [ 307.511063] ? __switch_to_asm+0x40/0x70 [ 307.515130] ? __switch_to_asm+0x34/0x70 [ 307.519195] ? __switch_to_asm+0x40/0x70 [ 307.523272] ? __schedule+0x874/0x1ed0 [ 307.527164] ? __switch_to_asm+0x40/0x70 [ 307.531232] ? __switch_to_asm+0x40/0x70 [ 307.535309] ? graph_lock+0x170/0x170 [ 307.539127] ? __sched_text_start+0x8/0x8 [ 307.543293] ? find_held_lock+0x36/0x1c0 [ 307.547391] ? __kthread_parkme+0xce/0x1a0 [ 307.551637] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 307.556855] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 307.561974] ? lockdep_hardirqs_on+0x421/0x5c0 [ 307.566569] ? trace_hardirqs_on+0xbd/0x310 [ 307.570917] ? kasan_check_read+0x11/0x20 [ 307.575093] ? __kthread_parkme+0xce/0x1a0 [ 307.579352] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 307.584813] ? kasan_check_write+0x14/0x20 [ 307.589055] ? do_raw_spin_lock+0xc1/0x200 [ 307.593303] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 307.598414] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 307.603990] ? __kthread_parkme+0xfb/0x1a0 [ 307.608257] kthread+0x35a/0x420 [ 307.611634] ? rcu_gp_init+0x1830/0x1830 [ 307.615721] ? kthread_bind+0x40/0x40 [ 307.619530] ret_from_fork+0x3a/0x50 [ 307.623277] NMI backtrace for cpu 1 [ 307.627198] CPU: 1 PID: 7686 Comm: syz-executor4 Not tainted 4.19.0-rc2+ #6 [ 307.634304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 307.643683] Call Trace: [ 307.646268] [ 307.648427] dump_stack+0x1c4/0x2b4 [ 307.652061] ? dump_stack_print_info.cold.2+0x52/0x52 [ 307.657262] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 307.662828] ? trace_hardirqs_off+0xb8/0x310 [ 307.667249] nmi_cpu_backtrace.cold.3+0x63/0xa2 [ 307.671930] ? lapic_can_unplug_cpu.cold.27+0x3f/0x3f [ 307.677146] nmi_trigger_cpumask_backtrace+0x1b3/0x1ed [ 307.682439] arch_trigger_cpumask_backtrace+0x14/0x20 [ 307.687643] rcu_dump_cpu_stacks+0x175/0x1c2 [ 307.692068] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 307.697114] print_cpu_stall.cold.78+0x2d3/0x524 [ 307.701882] ? rcu_dynticks_snap+0x30/0x30 [ 307.706124] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 307.711690] ? check_preemption_disabled+0x48/0x200 [ 307.716714] ? check_preemption_disabled+0x48/0x200 [ 307.721743] ? rcu_test_sync_prims+0x30/0x30 [ 307.726188] ? __lock_is_held+0xb5/0x140 [ 307.730285] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 307.735835] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 307.741392] ? check_preemption_disabled+0x48/0x200 [ 307.746442] rcu_check_callbacks+0xfd9/0x1990 [ 307.750952] ? rcu_cpu_stall_reset+0x220/0x220 [ 307.755568] ? lock_release+0x970/0x970 [ 307.759552] ? graph_lock+0x170/0x170 [ 307.763373] ? graph_lock+0x170/0x170 [ 307.767202] ? graph_lock+0x170/0x170 [ 307.771038] ? graph_lock+0x170/0x170 [ 307.774845] ? find_held_lock+0x36/0x1c0 [ 307.778923] ? cpuacct_account_field+0x219/0x3d0 [ 307.783696] ? graph_lock+0x170/0x170 [ 307.787503] ? find_held_lock+0x36/0x1c0 [ 307.791570] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 307.797114] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 307.802680] ? check_preemption_disabled+0x48/0x200 [ 307.807720] ? check_preemption_disabled+0x48/0x200 [ 307.812767] ? trace_hardirqs_off+0xb8/0x310 [ 307.817206] ? __lock_is_held+0xb5/0x140 [ 307.821292] ? trace_hardirqs_on+0x310/0x310 [ 307.825708] ? check_preemption_disabled+0x48/0x200 [ 307.830738] ? raise_softirq+0x199/0x420 [ 307.834808] ? raise_softirq_irqoff+0x2e0/0x2e0 [ 307.839482] ? account_system_index_time+0x333/0x5d0 [ 307.844591] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 307.850233] ? check_preemption_disabled+0x48/0x200 [ 307.855290] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 307.860885] ? hrtimer_run_queues+0x9a/0x400 [ 307.865302] ? run_local_timers+0x19b/0x230 [ 307.869673] ? timer_clear_idle+0x90/0x90 [ 307.873838] ? irqtime_account_process_tick.isra.6+0x35b/0x490 [ 307.879842] ? account_process_tick+0x282/0x350 [ 307.884524] update_process_times+0x2d/0x70 [ 307.888861] tick_sched_handle+0x9f/0x180 [ 307.893045] tick_sched_timer+0x45/0x130 [ 307.897118] __hrtimer_run_queues+0x41c/0x10d0 [ 307.901716] ? tick_sched_do_timer+0x1a0/0x1a0 [ 307.906309] ? hrtimer_start_range_ns+0xe00/0xe00 [ 307.911186] ? pvclock_read_flags+0x160/0x160 [ 307.915697] ? trace_hardirqs_on+0x310/0x310 [ 307.920110] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 307.925143] ? kvm_clock_read+0x18/0x30 [ 307.929177] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 307.934241] ? ktime_get_update_offsets_now+0x3b6/0x550 [ 307.939616] ? do_timer+0x50/0x50 [ 307.943100] ? trace_hardirqs_on+0x310/0x310 [ 307.947522] ? do_raw_spin_lock+0xc1/0x200 [ 307.951772] hrtimer_interrupt+0x313/0x780 [ 307.956048] smp_apic_timer_interrupt+0x1a1/0x760 [ 307.960925] ? smp_call_function_single_interrupt+0x650/0x650 [ 307.966826] ? interrupt_entry+0xb5/0xf0 [ 307.970912] ? trace_hardirqs_off_caller+0xbb/0x310 [ 307.975939] ? trace_hardirqs_off_caller+0xbb/0x310 [ 307.981017] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 307.985886] ? trace_hardirqs_on_caller+0x310/0x310 [ 307.990925] ? trace_hardirqs_on_caller+0x310/0x310 [ 307.995952] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 308.001512] ? check_preemption_disabled+0x48/0x200 [ 308.006534] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 308.012089] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 308.016977] apic_timer_interrupt+0xf/0x20 [ 308.021237] [ 308.023485] RIP: 0010:__srcu_read_lock+0xec/0x160 [ 308.028339] Code: 48 ba 00 00 00 00 00 fc ff df 48 89 f9 48 c1 e9 03 c6 04 13 f8 80 3c 11 00 75 66 48 63 c8 49 8b 95 48 04 00 00 65 48 ff 04 ca 83 44 24 fc 00 48 ba 00 00 00 00 00 fc ff df 49 c7 04 14 00 00 [ 308.047263] RSP: 0018:ffff8801970bf458 EFLAGS: 00000206 ORIG_RAX: ffffffffffffff13 [ 308.055104] RAX: 0000000000000001 RBX: 1ffff10032e17e90 RCX: 0000000000000001 [ 308.062379] RDX: 000060fe24e9b540 RSI: 0000000000000000 RDI: ffffc900124c3c28 [ 308.069653] RBP: ffff8801970bf4e0 R08: ffff88018fbc43c0 R09: 0000000000000006 [ 308.076934] R10: 0000000000000000 R11: ffff88018fbc43c0 R12: 1ffff10032e17e8c [ 308.084217] R13: ffffc900124c37e0 R14: ffff8801970bf4c0 R15: 0000000000000000 [ 308.091524] ? rcu_seq_end+0x120/0x120 [ 308.095448] ? vcpu_enter_guest+0x12a6/0x62e0 [ 308.099975] vcpu_enter_guest+0x1309/0x62e0 [ 308.104328] ? emulator_read_emulated+0x50/0x50 [ 308.109018] ? lockdep_hardirqs_on+0x421/0x5c0 [ 308.113639] ? retint_kernel+0x2d/0x2d [ 308.117571] ? trace_hardirqs_on_caller+0xc0/0x310 [ 308.122521] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 308.127282] ? trace_hardirqs_off+0x310/0x310 [ 308.131791] ? mark_held_locks+0xc7/0x130 [ 308.136026] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 308.140809] ? lockdep_hardirqs_on+0x421/0x5c0 [ 308.145400] ? retint_kernel+0x2d/0x2d [ 308.149345] ? trace_hardirqs_on_caller+0xc0/0x310 [ 308.154285] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 308.159051] ? trace_hardirqs_off+0x310/0x310 [ 308.163565] ? kvm_check_async_pf_completion+0x3ae/0x5c0 [ 308.169027] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 308.173797] ? kvm_clear_async_pf_completion_queue+0x770/0x770 [ 308.179779] ? retint_kernel+0x2d/0x2d [ 308.183703] kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 308.188552] ? kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 308.193613] kvm_vcpu_ioctl+0x72b/0x1150 [ 308.197704] ? kvm_vcpu_block+0x1030/0x1030 [ 308.202043] ? find_held_lock+0x36/0x1c0 [ 308.206123] ? __fget+0x4aa/0x740 [ 308.209585] ? check_preemption_disabled+0x48/0x200 [ 308.214620] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 308.219431] ? lockdep_hardirqs_on+0x421/0x5c0 [ 308.224022] ? retint_kernel+0x2d/0x2d [ 308.227916] ? trace_hardirqs_on_caller+0xc0/0x310 [ 308.232874] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 308.237637] ? trace_hardirqs_off+0x310/0x310 [ 308.242151] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 308.246918] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 308.251694] ? retint_kernel+0x2d/0x2d [ 308.255596] ? kvm_vcpu_block+0x1030/0x1030 [ 308.259927] do_vfs_ioctl+0x1de/0x1720 [ 308.263827] ? selinux_file_ioctl+0x152/0x730 [ 308.268332] ? ioctl_preallocate+0x300/0x300 [ 308.272784] ? selinux_file_mprotect+0x620/0x620 [ 308.277570] ? retint_kernel+0x2d/0x2d [ 308.281476] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 308.287025] ? security_file_ioctl+0x94/0xc0 [ 308.291443] ksys_ioctl+0xa9/0xd0 [ 308.294919] __x64_sys_ioctl+0x73/0xb0 [ 308.298812] do_syscall_64+0x1b9/0x820 [ 308.302724] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 308.308097] ? syscall_return_slowpath+0x5e0/0x5e0 [ 308.313033] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 308.317905] ? trace_hardirqs_on_caller+0x310/0x310 [ 308.322932] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 308.327993] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 308.333540] ? prepare_exit_to_usermode+0x291/0x3b0 [ 308.338573] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 308.343432] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 308.348667] RIP: 0033:0x457099 [ 308.351898] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 308.370824] RSP: 002b:00007fb650cc9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 308.378541] RAX: ffffffffffffffda RBX: 00007fb650cca6d4 RCX: 0000000000457099 [ 308.385827] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 308.393117] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 308.400389] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 308.407666] R13: 00000000004cf730 R14: 00000000004c59b9 R15: 0000000000000000 [ 308.549203] syz-executor0 (7697) used greatest stack depth: 11544 bytes left 2018/09/08 02:27:28 Manager.Poll call failed: write tcp 10.128.0.31:34100->10.128.0.26:33253: write: connection reset by peer