[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 55.204740] kauditd_printk_skb: 4 callbacks suppressed [ 55.204771] audit: type=1800 audit(1544813576.260:29): pid=6364 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 55.229485] audit: type=1800 audit(1544813576.270:30): pid=6364 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.155' (ECDSA) to the list of known hosts. 2018/12/14 18:53:09 fuzzer started 2018/12/14 18:53:14 dialing manager at 10.128.0.26:40477 2018/12/14 18:53:14 syscalls: 1 2018/12/14 18:53:14 code coverage: enabled 2018/12/14 18:53:14 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/12/14 18:53:14 setuid sandbox: enabled 2018/12/14 18:53:14 namespace sandbox: enabled 2018/12/14 18:53:14 Android sandbox: /sys/fs/selinux/policy does not exist 2018/12/14 18:53:14 fault injection: enabled 2018/12/14 18:53:14 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/12/14 18:53:14 net packet injection: enabled 2018/12/14 18:53:14 net device setup: enabled 18:56:22 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "de7b7169176faab34688939a29ed13f9aeba812a76a716e296f1dde909eb40c1"}}) syzkaller login: [ 262.295895] IPVS: ftp: loaded support on port[0] = 21 [ 263.011761] ip (6544) used greatest stack depth: 53624 bytes left [ 263.809302] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.815958] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.824466] device bridge_slave_0 entered promiscuous mode [ 263.912632] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.919181] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.927734] device bridge_slave_1 entered promiscuous mode [ 264.014866] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 264.100666] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 264.370012] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 264.463460] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 264.550877] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 264.558076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 264.648685] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 264.655822] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 264.924756] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 264.933550] team0: Port device team_slave_0 added [ 265.020835] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 265.029523] team0: Port device team_slave_1 added [ 265.118614] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 265.213307] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 265.303802] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 265.327431] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 265.337550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 265.413842] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 265.421627] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 265.430879] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready 18:56:26 executing program 1: syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x100082) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$netlink(0xffffffffffffffff, &(0x7f00000003c0)=@unspec, 0xc) getcwd(&(0x7f0000000080)=""/49, 0x31) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/ip6_mr_cache\x00') setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffd8) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1000000000401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f0000000000)={0xfffffffffffffffc, 0x1000}) r2 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) keyctl$set_reqkey_keyring(0xe, 0x0) ioctl$KDSIGACCEPT(r2, 0x4b4e, 0x1f) creat(&(0x7f0000000180)='./file0\x00', 0x1) accept4(r3, 0x0, &(0x7f0000000040)=0xf, 0x0) [ 266.317459] IPVS: ftp: loaded support on port[0] = 21 [ 266.901493] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.908183] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.915411] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.922028] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.931446] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 266.938178] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 268.771929] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.778496] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.787149] device bridge_slave_0 entered promiscuous mode [ 268.970979] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.977665] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.986033] device bridge_slave_1 entered promiscuous mode [ 269.158824] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 269.360652] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 269.804048] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 269.920420] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 270.149448] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 270.156656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 270.523550] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 270.532365] team0: Port device team_slave_0 added 18:56:31 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r1 = memfd_create(&(0x7f0000000240)="000000008c00000000000000000000", 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) sendfile(r0, r1, 0x0, 0x102002f01) [ 270.708883] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 270.717650] team0: Port device team_slave_1 added [ 270.966411] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 271.126873] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 271.134012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 271.143247] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 271.236055] IPVS: ftp: loaded support on port[0] = 21 [ 271.345335] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 271.353145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 271.362486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 271.508035] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 271.515767] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 271.524931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 272.868247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.527246] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.533891] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.541083] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.547748] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.557775] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 273.569486] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 274.053097] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.059670] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.068118] device bridge_slave_0 entered promiscuous mode [ 274.131799] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 274.242756] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 274.249081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 274.257209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 274.302382] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.308980] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.317498] device bridge_slave_1 entered promiscuous mode [ 274.538435] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 274.739915] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 274.859196] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.277978] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 275.437443] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 275.611534] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 275.618728] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 275.790914] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 275.798104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 276.289139] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 276.297884] team0: Port device team_slave_0 added [ 276.467729] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 276.476537] team0: Port device team_slave_1 added [ 276.562027] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 276.569070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 276.578302] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 276.763340] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 276.770370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 276.779602] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 276.878145] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 276.886020] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 276.895883] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 277.070280] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 277.078906] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 277.088326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready 18:56:39 executing program 3: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000780)='/dev/uhid\x00', 0x0, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000040), 0x21c}], 0x8) 18:56:40 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "de7b7169176faab34688939a29ed13f9aeba812a76a716e296f1dde909eb40c1"}}) 18:56:40 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_GET_TIMERSLACK(0x1e) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) prctl$PR_GET_NAME(0x10, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, 0x0) ioctl$TIOCLINUX7(r0, 0x541c, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$addseals(r0, 0x409, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0) write$binfmt_misc(r0, &(0x7f0000000580)={'syz0'}, 0x4) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, 0x0) r1 = syz_open_pts(r0, 0x0) fchmod(0xffffffffffffffff, 0x0) r2 = add_key$user(0x0, &(0x7f0000000740)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000800)='blacklist\x00', &(0x7f0000000840)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$negate(0xd, r2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) fadvise64(r1, 0x0, 0x0, 0x0) [ 279.250603] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.257364] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.264599] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.271181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 279.280680] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 279.287325] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 18:56:40 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff3fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, r0) [ 279.768412] IPVS: ftp: loaded support on port[0] = 21 18:56:40 executing program 0: unshare(0x37fffffc) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x40, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e24, 0x5, @remote, 0x1f}}, [0x0, 0x1, 0x0, 0x65, 0x7, 0x8, 0x7a0, 0x6, 0xa3a, 0x7ff, 0x800, 0x2, 0x7f3, 0x2, 0x1]}, &(0x7f0000000040)=0x100) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f00000001c0)={r1, 0x2}, 0x8) fsetxattr$security_capability(r0, &(0x7f0000000200)='security.capability\x00', &(0x7f0000000240)=@v2={0x2000000, [{0x5}, {0x100, 0x3}]}, 0x14, 0x3) r2 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x638, 0x1) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0305710, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, [0xfffffffe]}) read$FUSE(r0, &(0x7f00000002c0), 0x1000) ioctl$LOOP_CLR_FD(r2, 0x4c01) 18:56:41 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f00000000c0)={0xfffffff, 0x4, 0x0, [], 0x0}) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000100)={0x1, 0x0, [], {0x0, @reserved}}) 18:56:41 executing program 0: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100) [ 280.548061] audit: type=1400 audit(1544813801.600:31): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=7096 comm="syz-executor0" 18:56:41 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$VIDIOC_S_EDID(r4, 0xc0285629, &(0x7f0000000100)={0x0, 0x0, 0x8, [], &(0x7f00000000c0)=0x5}) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000000)={0x7b, 0xc0010004, [0x40000010]}) [ 280.732860] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. 18:56:42 executing program 0: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x1ffffffe) r1 = socket$inet6(0xa, 0x6, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x8000, 0x20) r3 = geteuid() ioctl$TUNSETOWNER(r2, 0x400454cc, r3) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvfrom$packet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) [ 281.155750] 8021q: adding VLAN 0 to HW filter on device bond0 18:56:42 executing program 0: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x1ffffffe) r1 = socket$inet6(0xa, 0x6, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x8000, 0x20) r3 = geteuid() ioctl$TUNSETOWNER(r2, 0x400454cc, r3) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvfrom$packet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) [ 281.923923] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 282.489135] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 282.495560] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 282.503589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 283.108532] 8021q: adding VLAN 0 to HW filter on device team0 [ 283.269386] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.276024] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.285004] device bridge_slave_0 entered promiscuous mode [ 283.504392] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.510951] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.519568] device bridge_slave_1 entered promiscuous mode [ 283.743404] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 283.951020] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 284.538505] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 284.734012] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 284.921465] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 284.928601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 285.125735] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 285.132916] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 285.702131] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 285.710712] team0: Port device team_slave_0 added [ 285.893433] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 285.902495] team0: Port device team_slave_1 added [ 286.095728] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 286.105771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 286.114741] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 286.294876] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 286.459283] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 286.467038] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 286.476211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 286.611270] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 286.619032] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 286.628244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 287.056036] 8021q: adding VLAN 0 to HW filter on device bond0 18:56:48 executing program 0: r0 = memfd_create(&(0x7f0000000100)="007f00004e285be1ca971dd241e3f05d798394f4ab852b1da75da9b08e92ac7e39539a41289b815a81b1fe12ea0e8a99f5", 0x0) syz_open_dev$vbi(&(0x7f0000001000)='/dev/vbi#\x00', 0x1, 0x2) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000002200)=[{&(0x7f0000000140)="327f18716bde99be82be7d8e833ca3ce9034d67a6cecb78c8ede049c2f7044f6a8422a5f76bcbc1cf19080fc7b3e49baf8e2f0356450aa7fae05252de2ea6a4ff1277f763f382baf0765b2b8651514e8c75ae66279449794995a0a974aa48d33924d8f6698be5749fb67142451fbbfee24fb1a889b7cc7e5c39e9bc239f0ddab7428878e829d07e9d87eb6dfb66e535dcca01e5d4b30bf23e160bc4268eaf1d00bc826b54bc82d465669b5193005c4b9465026764bd2f89a758021ddc8a85ffd9f43766e5126500e45604ae4313618334cab6bb5ff2b4c6e40a221b818200f834262de972613669fe2d1d7274304ec1db63e83c8b5fa7f7166ce517f2183c69e9d60da58d3034b2e87e5ae1ca9aeadd79f4f0ee886b5edbb66a7fccad788a112d18ae81da0b79e5184b36056789cfcd6f555c05889b9b371a04a7d2d1a982c1af5ef7d3489db49e003e27e07aa39e4f9722ffbf3254716ea61633f3e26489d52608cd146885be500000afff700d9265a44dbbdfa6013c7865f6792f27172c93ec3ef3a6f3551dcf99e925470a159b783314ac3bf1057a7dfdc2b9b7e2de4d4a2cb746febd49f6c45f1335dffda1eba5580204db67baa89eb965ef13cb1a32efa0b9438315551359f695d4642146870f07b2dc564e23b49844e05ea1e048ba6b53f60508d76a0e2c6d991791756ff090a48335862d68c2b5d3865c249debd6df62638d0c1ec2179582a4b60b3684f5486fc109cc6e95f437882fef0bb5502595657e1cd312873700ea2314d09455b20f1d627d5baa57b39945f1a7fb22a1f77b8b6d174f09f2ecea5882c230bc394c889eb7eb2cc2463a2d7d284f40cc5ffcb16798ba066d1be0699a8def1c37ac9162d8736073d3240e773de05a62f6744d0ce9d6e3b33b71d30b817e0630e31ba2dc220b4259ec0dfd18afec3bf375b0ca9a8abb1c102f83c07ae448fe4019342cd9cfcb1d6e82f6b33069ffccaa8a368514da20f86e574d3f48453ab824337719252f5251cd3ad1d36f83e04207f32f113e51803bb4801ea24220305e5a08c58e972565dbd9bbd35c4c32796d4e20248d014d26fe9a42b04d382c6ed7ef34ea277b4474caf1b93e5bbeed94b28295bc74df4c9737fedec3a6e89d8cde221f26e35a602c397cc5c75e1b0b0c3e9652a54de6253b4bffbcd0b1a1b663642c3b6173d2ef6399a29eb1e9f3474d9ab448e893266e9c6d685d0709229bd81a19eba73d76b668773271cbf7a6c41a5a9c94c1bdbe7b76f53a8f4d1916b263e5b1fcc641bc5235dc7c5ed6a8ed003950d7da75dd522b29de9ae7909c0d46c7dca6a703f051bd8a6a5e74a0f27681184cd0a4a30952d28cdf75e44146b34109ef3ca82c9c295286009e7f93b5954ebe69df4b501af56422f9552258917d58a9275c1d8ea744530dbc3cc9fa8c9014e9f83128561fab4e6c649913b2a7bb5f68595af00bc9d50341f25644fb4f069e0b82a30967d9d82497f7e056dc985254c1f8e3d91ccb7c9218ed8612836bebc8ec2ebe6ac9923740652500e6d3f3bbb412adb4065335e2796ac179688f968528028802080240e6466c6fa874b6477ca80d58c1494e3102f76858cc0e514e81427ad3df6a014ca2f4d33b89c9b8ccd1c9d8eafee246d0db10f8c29f9232d65f086a6f0863e431cd197984e66f3bc1016fd26a0d1116fe6c0a1656a0d121ce19359618990693c567fa6790d76a650a8d047034747d4605e1c64300b299e2b884a39b7ce5b0f529860046494c1042af471344ef4cfaee3c4cf0a67ce5532f61416984acad0ce819320f7f2debb08a7570d9032a0175453fdf766bdae78fd6f301ab2c12e39185209405fbb059a384339441562fb62a129d093a865532b22a4c1c3296c9ec12fa5b1d0ccddd6d94c4d58c2c17363783e960b7ad1c4ee0e4431026351160cdd88354831968050429a5b7b2f40ff1ccfc3f8d855b116e28e6c07535016a9fee8dce1d7d9a2f67278fa539dc0e20acf3064d5baccf2e4ff15127d3c7de087f4d94303d06066ce88f7043d49cc27c869a79d7c72130b31c2398593f184f0a96b2f5b43d6d08777ea3a7da4469e14faff440441a7bc061aa1293620bce975f0cc9363af48158cb7d8fffa2f97ae8894d69abf2a18bcbdcb29812b93faf80642cc9b2c8305766df416485ff2cb809363b43a10d39d6bc69cd928ca2f1068915d3dea48ea8026c55d1bf38d69a341b9a68bb003dbe732a069a2fed69298252ab357b064507f12c33db778b53a794c569f2e77aba4ebe2ab8fa97682154fa7614586e8d9394af2401a562938bfe7f9e8e7c50d9a26857c50bce5a0f68bc55be86b2fb34c617a21d42f1b5057f12c9f6fa4e790b494abf9677a589bafb9102c83cef17cc98849c01e43f36d544e387ea8bbc7590da22b660d7d6411f06d90c9f4a8e9eacbabe0d9da05b80d9efd5e715a7cbdff126b724d561338d04f65b96e4b52f09f58ce70f4efbfb73cb5033c5a7824dff100716158a2b6b0fb2d60201e55791b15dedcfcaf540b321d3d3baaf81fa713dd0b1344a7dbd7012965408524e21df41e77675344e4d3127f7972ff576cd9a5114ba606e556d087b91f15b3dcf887019a039b3bec97352ba728cb03cc741e82059428208a799193e96fc95012962070fcf93ec4e2d48a4bb21ed923dfd9025cdb3bd630b0afef93539869d99abb1721de5fa466e53855571de32fcfdabee3cdd0dc1cf42387275b3ef419b5560c0e651636666478d63e54a4e9087cd29fe6462f12d5021b850c52379f57b18a94b499508f55d3c2e75ebfff6c6c9dd1c81177ade2a40191efbd942514f14d741b586599e1ea441543c98c3324ec269c781a825575139a63d9efd4c9b9f2811de16cfe22f5d0d1c7262baeb539772c48e6bf21b89150ef07e11645b7b12fc09aa18ad66e21e1e3cc1ec6127eceabde9a1ee162f85f1e23595f85fc49a0355c7548396d09c194bc939c2ed082e9b6c43c71ce21c1c51b57f9b7c0b7563a23c30a0f40baae899a9f8d7e90daf3dc3a4ae3754b5b80d097aa8a7eadb315e22e42b53d17eca4c5bcfcf50ecbe221bc3baa924046c724b947d6074fda532eaf7b54f98d159431215c2eb8613fa011786e660bf53b8511ba21480f0880b5d7ba38afdd1726cf20695cc74236db358bf787519a725ac1347715d2237fccfeb68a31c8853cf8c4c30f5dc6d5c10b0deb164191bd1802e91a2d8de3ac8f9b643ced3418a96a6a974cdebed4b9a7cc5d2917f27029d9a9c60bc52037df448b3c9f23c94021f0d0a9ec647229c90d9a24e3b50fa01a175f8ae8d9942f39df579761e4881a2aed0f81bac7d013131916c2b24cdd90d49a282a6d7a22ec5f494d2afde30ad51ab68ce3ff9ec1cbac04eadef592e41ce3b1221dc6c2ce417a6480b93f33615f2d016a69d2e723db8e5e912d2c88e286af8ee328384bcca153c5968401377017a21a41e1cac0f4336d3d7a827cf9b248c9180f1b285a42e7a849f4290fdbc880fd2b66377f507f031d9a5332d4b1dd1889df74010bf7990d7731ca2fcef4d0210cb1933820d8defb0a78d6e9e2e65a0c86680ac8a1e003804efd1d490204cc979ecb7e191f809205baebe4404e446906b88fb19aa921e1da59c6f903fc80c87d04de72fa566098e21e3d048ba90bc09a0932687e8c9166041986a1bf39d50283bc737cf86bd31da972026c8abb4e0a2493456f65f7ce6233ec03eedf7ca4cefa7141984a1f3e4ce9138af80363741053bcd9d745754f8dc8adc34aa18f24527fbd6e87913fa8a69a5f4176ff87eb12fc7d0e6363c8f00b7d3b145bdacd62e457cfe8fbece9cd075f3e8295196eb8fcac89713b03a6e618edeb2ef4d1bca0bdbc5709d3bea5c2f9cf663824e8054a26acf64886e60816fa0a81cb4e691402f39256a0cc18c6c8f48e1c4214ebec099f63615379b8f167afe54be5cc04995e3b53999cfd3beafd0fbce18d9d2ec1706ad78dd95190d340c9a10d3aa1bbfa87f3471ede5fd10306e9241035fb85fb83d263ef5f9fa7716b32bc61ea3bba16dad346d701f72c8de9573cc524948cd67a67c09cbe5c9626f9b7ca390e67a878ef66b38ffddcbb43b6a21bdab86017f76e14f8d31b07a41040762b2e9fc797262db531448c82c4aae77957d547e72d569ec56c971cf8706ad3d7e07ab7d8d8e30f053de98d901e2a99031f9651d60d27abf2b8f1f71369670cba67a98cac93fc798d166215553ba167b1c4f2d50ce963a1bca06e7a27998173037434e6f2631b67a953ae60b158ce2bf2886813f87af1f689a22139c9056393694754b2c715235c21427da3344378e69b1d22c66749fe4ca6046ca9b825952ce5b705d6b6ad098af16703f311d0e05344e63c616d756cd79f7c2792e06ac89c136056db64ca7acca4de148397c07f4f663c3538d41da070e75aafe1ca980c9169a539e26d9691a212058c1bd77c17b8fe71b51d4eb6ece1f61f43409786dd2590fce2d4bc5c98bfec19d646155e04a8239468322b70a2e7c8bf64ac0a0f5510ec92de77072003592281e014156444887c49e3e6419426ee34998259f287ec8dccf022843152b1f5a564f98a4233a8b3f6cef2a18f10080ccc49ef395acb8a2f305e883c769b0db5217a0ff50b6641270e63b5abe67a4e2e63276211c47a49daa92d9dc3edc6ddd54e588b1d26b3d36bf2a8c9e9cb36cd1f08aab3b9a6da2990d3864b179724eabc09fe0d3f675de88ffc4cf029bebcf72f37e8b08ada19e6da5dc5b18aca8178606af51df4aba733bc2b2fa36ac650d3192f05318e3b89282e35b222013d6d7bdbc480f7ac1db5961b4d4b33d7112f07fc7a9fdfdeababbde15a0cac56d8483de02915fea3129a8cc649a131dd59b7e06a23dc7876ed86c93765847fa4ec414b762e9fc05bd898f8ad4cb1b67204de9a6b1abe403dab3c5dfb52b5574a8fba838da1c3965f14363d8fa9a7a8829c28c1c6ed797f012e52731edf246db938b63dbe3e10d672fd05b3048606a66f6acd3ad222b896076676391907881a8e83c98a546b4db4f22fee134df93f7e73d11471d08e40509e868dbf8dd29c34767dc8af5a356bc009f44842db55c65b5800fac6a75d777834d8e8d1eb033133e28dda24a083e54961e3a845d863c5d8aa05bc7801028c2ee6fa0f3a9c047fe26b7feaadf55bada866d1b36fc44b5878894b3bb922df3029afd2b3e27bd35322ea841abaf9647d93f0ae8cff01c8976e19cb4520dc5d50a7de0eda37a0279f7c96a8d3838549385f10366dd630749abd54c18cb133d0dd818bf3e4296252859424099581ac70a6da18", 0xeb9}], 0x1, &(0x7f0000002400)=ANY=[]}], 0x1, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x400000032, 0xffffffffffffffff, 0x0) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f0000000280), &(0x7f0000000500), 0x1000) [ 287.782663] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 288.316768] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 288.324246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 288.332225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 288.580135] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.586786] bridge0: port 2(bridge_slave_1) entered forwarding state [ 288.594059] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.600620] bridge0: port 1(bridge_slave_0) entered forwarding state [ 288.609749] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 288.867413] 8021q: adding VLAN 0 to HW filter on device team0 [ 289.362616] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 18:56:53 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) [ 293.475531] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.655716] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 293.830623] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 293.836947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 293.844880] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 294.017769] 8021q: adding VLAN 0 to HW filter on device team0 18:56:56 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000780f3de6}) r2 = syz_open_pts(r0, 0x0) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000000)=""/14, 0xe}], 0x1) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)) 18:56:56 executing program 1: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'team_slave_1\x00'}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_getnetconf={0x14, 0x52, 0x800, 0x70bd2a, 0x25dfdbfd}, 0x14}}, 0x0) 18:56:56 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000180)='\x00', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000140)="2f65786500000000000035abe1e80d903e0d717ac1889a45e54a5c8f95f5d2968ae8c767e9d18fd69a000000") mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x800000000004, 0x20011, r2, 0x0) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x72, &(0x7f0000000040)=@assoc_value, &(0x7f0000000080)=0x8) 18:56:56 executing program 4: prctl$PR_SVE_SET_VL(0x32, 0x35099) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x201, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000040)=0x2cc0fee6) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f0000000100)) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x3ef) setxattr$security_smack_entry(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='security.SMACK64\x00', &(0x7f00000001c0)='/dev/vcs\x00', 0x9, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000200)={{0x6, 0x3}, 'port0\x00', 0x8, 0x40000, 0x6, 0x4, 0x1e4c, 0x7302, 0x1f, 0x0, 0x1, 0x8001}) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@local}}, {{@in6}, 0x0, @in6}}, &(0x7f00000003c0)=0xe8) lookup_dcookie(0x200, &(0x7f0000000400)=""/164, 0xa4) chdir(&(0x7f00000004c0)='./file0\x00') ioctl$TIOCLINUX6(r0, 0x541c, &(0x7f0000000500)={0x6, 0x8}) getsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000540), &(0x7f0000000580)=0x4) epoll_wait(r0, &(0x7f00000005c0)=[{}], 0x1, 0xea1b) lsetxattr$security_smack_transmute(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000680)='TRUE', 0x4, 0x3) r1 = syz_open_dev$amidi(&(0x7f00000006c0)='/dev/amidi#\x00', 0x8, 0x400) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f0000000700)=0x80000001) r2 = socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, &(0x7f0000000740)) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc10c5541, &(0x7f0000000780)={0x1ff, 0x8, 0xfffffffffffffff8, 0x0, 0x0, [], [], [], 0x5, 0x8}) name_to_handle_at(r0, &(0x7f00000008c0)='./file0\x00', &(0x7f0000000900)={0x80, 0x0, "9981231adbfcfccd24394e9d4b37181e220f24cab3a5a0de213bf620f835dcdb66bd01f945eb03f14f0d89db163fda9bccaec81a3e117af754295381eeddf41c6ffd6b1cd60169bfc9950a43d2395c1b2350db865f1c7975f0a10b1b35638ff6e1b42acf203d2bf33bd31d2c069647c8156392246497713a"}, &(0x7f0000000980), 0x1000) mkdir(&(0x7f00000009c0)='./file0\x00', 0x40) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000a40)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x488}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x58, r3, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffffffff1db5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9eaf}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x100000000000000}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xa8e}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) syz_genetlink_get_family_id$tipc(&(0x7f0000000b80)='TIPC\x00') sendmmsg(r2, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000bc0)="19463baadc33dcffa828aa041f84a040668af9556029efc1b90b753d9ddd5989b9e48be8261e522f088821994bfadcae1cc55ad43619ac471f432419bb923f667bbe7f25cf47028ec279544cb621bd311146", 0x52}, {&(0x7f0000000c40)="cf8460650482909d0bfade5f26893aaad29ca90bfec7f1005d589e658a8cf999b73edbc5de92b7a91abb229f0192299600c56b94b34adb1ec16e8d8cfca3d508dc128b350a10e7a097017c7f2e426ed9497a9e2b309c1c7041d9707c75b3c276ee9e7d1df1c6013bc806967a5bc697464ebc6291dac72d8b9a411fd1489a9d7673273888ebd8b0f246becb43d7838ff4ca7542bc0add8e2ff5771a6a921ac4925f241e74d04ce0757b7b7f28ea154606984671f93418e37a3a8b043e783fa7607143edcab8e4384f2205e2b49f1b3942ee52f385ffc49a411824f934fa5707263f5c8b99b6ed10082d4f5bfd61f4e57f44c705", 0xf3}, {&(0x7f0000000d40)="4a2813bd77cef3570148e923ff", 0xd}, {&(0x7f0000000d80)="8e9a536df4492f692229be832a004326be86bd0430ba3a8c463ba31887adfd4ed47bdc74987900573ac2b4f54f55bd33bb0b2a089816bb718f95b3d7c7d5547cdfe66293a7e9a720f3b18f3c2f05aafbb1f2bccc650b750ff799a969b7ca1e6b70399c486fb7458b16549a5236ee57ef8d7f41ea4f584b91a945c807f23afbc743ad72794c948378e56ecdfa655188767a3a15ec2c1e001ae2d0dad60bcd", 0x9e}, {&(0x7f0000000e40)="4677605cacdabf9b9078aa939ded7938d36773f45e360a601174189a2c31e65103c488e414413a7ee02c1ea2abb1cd092da2ea19fbb48a5b0bd45551964006c518c221696e6f813a3dcd107dbfba42fb4434b1c893ea737d533eb2649375d02e8ebb65d7be099e343424e8cb273695bd123b93d37f4385c94c197f3d367680c39ce047bd144622b2658ed3210fcf9799cf578b", 0x93}, {&(0x7f0000000f00)="d48e546ffb14927ad7ee4e4a91845796e041d798429a4029a13201a393a5eefdab14c336efa133873a98bded9a2c8b95b0baca355275b691106ccd923badf9433f24cd93761814800f98a83a638950eb7528aa0b349ba584d6e6041b000549385980c281582f70617017123c916b5b606ff32c4a79013c69624ad51fe7dcd25f9c358a2ff5c78563eeb400dafeed5024cd50afcdd6aa75f45f71ec45e4592caedeb0f20765a78e8461bf50eb6e2ef17e437f268017115b74ce36ba8fdc8cfb8834139a62ec854d0b9ab876c0b4d9b3a9307a1699", 0xd4}], 0x6, &(0x7f0000001080)=[{0xc8, 0x10a, 0xdb, "830b6ee4e0181d48729a7cc8b79f0d053dfa10c2dcc1da7cb86c4d49f2c11a6cd8fddf9fc61eb388f252b953d21b748280a0c4ff020cc25f78ae97292afb97cd2bdeb73b866e98ddd55720d5d24761f0e55a46c156c11d556618dcec5de2bd007305668b48412bb5ad507e01d9c2e2cbd6483c1ac3b1d37a45c17b0adc82d209f02264bc4998c3eaac692b0b0ffeb15eda6b1263d3dfa19de06b58089c96024420a7d99ce61d8e9f215d76f1d0dc65e31f74f1"}], 0xc8}, 0x6}], 0x1, 0x40) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f00000011c0)=0x1, 0x4) write$UHID_INPUT2(r0, &(0x7f0000001200)={0xc, 0x3c, "188c2e0b61135afc8ce458350715ae1bec8966bb24c48b45f68972c6436e1feab4130fbd0a42ee2f34dcdd7ffd5d0ff1fed3e68a7c902bc31bbe6551"}, 0x42) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000001280)=0x5) 18:56:56 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x1, 0x0) write$P9_RSTATFS(r0, &(0x7f0000000040)={0x43, 0x9, 0x2, {0x50, 0x6, 0x4, 0x9, 0x3, 0x80000000, 0x8, 0x5, 0x1}}, 0x43) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000100)=""/24) r1 = syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0x1, 0x2) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000180)="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", 0x1000) ioctl$RTC_WIE_ON(r1, 0x700f) signalfd4(r0, &(0x7f0000001180)={0x80000001}, 0x8, 0x80000) getsockopt$inet6_opts(r1, 0x29, 0x3f, &(0x7f00000011c0)=""/229, &(0x7f00000012c0)=0xe5) socketpair(0x1, 0xa, 0x80000001, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) unlink(&(0x7f0000001340)='./file0\x00') ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001380)={{0xffffffffffffffff, 0x3, 0x800, 0x3, 0x9a9}}) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f00000013c0)=""/16, &(0x7f0000001400)=0x10) ioctl$VIDIOC_SUBDEV_G_SELECTION(r0, 0xc040563d, &(0x7f0000001440)={0x1, 0x0, 0x100, 0x1, {0x3, 0x20, 0xfffffffffffffe00, 0x2}}) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000001480)={0xfff, 0x4, 0x1}) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f00000014c0)=0x6462b344, 0x4) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000001500)={0x0, 0x8000, 0x1ff}, &(0x7f0000001540)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000001580)={r4, 0xa9, 0x4, 0xc03}, 0x10) r5 = shmget(0x1, 0x1000, 0x54000200, &(0x7f0000ffe000/0x1000)=nil) shmctl$IPC_STAT(r5, 0x2, &(0x7f00000015c0)=""/4096) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r2, 0x800448d3, &(0x7f00000025c0)={{0x81, 0xb84, 0xb2, 0x3, 0x3}, 0x8, 0x6, 0xe80000000, 0x100000001, 0xeb, "3b393cfb87db49f91b1584b050998c0ca8dfae1bc7c3a40a1142232396da15e9a52996c7d89aa73247105da011439e313aa6703afde8c0494d76072051447f0789d28d4ccc7aab53bd94fde86a3f70f5f4463187ff5f5dd5b458ffd3dca4d6c0550f8000722bb3500e3e9612a405fd75abc75630fa058ec466db419c7f727ef2"}) setns(r0, 0x10000000) fcntl$getownex(r1, 0x10, &(0x7f0000002680)) write$FUSE_POLL(r1, &(0x7f00000026c0)={0x18, 0x0, 0x6, {0x100000001}}, 0x18) socket$pptp(0x18, 0x1, 0x2) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000002700)="4b20954735acfb1045c8fa506bf9acf4238da99354f182febe921032c7a17c99e6b26f34ef8a8885ce416322dc01cd11168a40404db5821767a07c55e800982c0d63347299fb6954a0a875738192c70a9a3167e2ee611add7d4acb2a73be2abc4563ff57f560bc5b1787f464a3192edffbb44fe29d4eeac1ed886f4d907e2c3f05fc23ad74cf2081afaae87d7c0fd6a3a10c101f739ead5d28fe8cf0269d49b3819032b1132a5a476416770e0a714921100837b162d878de43cd99ff1297dd26d5ab70598703a8437789d9d623728e6f4b4321aca0a5789dd982b7df03a86d2d9acec4ded12d583ae66a5951620aa8779d83", 0xf2) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000002800)={0x18}, 0x18) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000002840)={r4, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x16}}}}, 0x84) accept$alg(r0, 0x0, 0x0) ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000002900)) 18:56:56 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff81}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000240)) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x13, r1, 0x0) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) 18:56:56 executing program 1: r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 18:56:56 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) lremovexattr(0x0, 0x0) semget(0xffffffffffffffff, 0x0, 0x0) fsetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) getxattr(0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000640)=[{{&(0x7f0000000300)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getresgid(0x0, 0x0, 0x0) lchown(0x0, 0x0, 0x0) ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, 0x0) write(r1, 0x0, 0x0) 18:56:56 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) 18:56:56 executing program 1: clone(0x84007bf7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) r0 = getpid() mknod(&(0x7f00000000c0)='./file0\x00', 0x1042, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ptrace(0x10, r0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$EVIOCSABS2F(r1, 0x401845ef, 0x0) ptrace(0x11, r0) 18:56:56 executing program 0: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fstatfs(0xffffffffffffffff, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) close(r0) clock_nanosleep(0x0, 0x0, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) write$binfmt_misc(r1, 0x0, 0x0) 18:56:56 executing program 0: clone(0x200, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x4140, 0x1) execve(&(0x7f0000000640)='./file0\x00', 0x0, 0x0) syz_execute_func(&(0x7f00000002c0)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3196f") clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) execveat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000003580)={0x0, 0x0, &(0x7f0000003540)={0x0}}, 0x0) [ 296.055513] IPVS: ftp: loaded support on port[0] = 21 [ 296.104386] IPVS: ftp: loaded support on port[0] = 21 18:56:57 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = dup2(r0, r0) shmget(0xffffffffffffffff, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) semctl$SETVAL(0x0, 0x0, 0x10, 0x0) write$eventfd(r1, 0x0, 0xfffffced) 18:56:57 executing program 1: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) [ 296.297028] binder: BINDER_SET_CONTEXT_MGR already set [ 296.302646] binder: 7659:7667 ioctl 40046207 0 returned -16 18:56:57 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000d80)='/dev/ptmx\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x803, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f0000000400)="e83779d80efa45bb7f48bebc95870bd0cd39bd2830ee47afe7b33fc778bde252c50d2e", 0x0) r5 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r6 = dup2(r5, r4) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, "7175657565310000000000000000313b0000000000000000000000000000000000000000060000000000ccbf7ddd00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00000001c0)={0xf48b, 0x0, 0x0, 'queue1\x00'}) ioctl$FS_IOC_SETFSLABEL(r3, 0x41009432, &(0x7f0000001240)="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") write$sndseq(r4, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) mmap(&(0x7f0000011000/0x6000)=nil, 0x6000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r6, 0xc08c5336, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r6, 0xc0086420, &(0x7f0000000340)) connect$inet6(r4, &(0x7f0000001200)={0xa, 0x4e24, 0x10000, @ipv4={[], [], @empty}, 0x40000000000000}, 0x1c) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) socket$vsock_stream(0x28, 0x1, 0x0) fstatfs(r7, &(0x7f00000001c0)=""/4096) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) read(r1, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)) [ 296.632148] hrtimer: interrupt took 30732 ns [ 298.241061] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.247782] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.256142] device bridge_slave_0 entered promiscuous mode [ 298.269534] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.276311] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.284643] device bridge_slave_0 entered promiscuous mode [ 298.339830] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.346467] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.354911] device bridge_slave_1 entered promiscuous mode [ 298.368775] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.375505] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.383905] device bridge_slave_1 entered promiscuous mode [ 298.435905] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 298.469043] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 298.515714] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 298.552128] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 298.852087] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 298.880796] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 298.949801] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 298.971153] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 299.033076] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 299.040093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 299.056105] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 299.063221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 299.127298] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 299.134430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 299.149501] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 299.156603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 299.398912] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 299.407589] team0: Port device team_slave_0 added [ 299.421643] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 299.430233] team0: Port device team_slave_0 added [ 299.491731] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 299.500421] team0: Port device team_slave_1 added [ 299.513955] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 299.522673] team0: Port device team_slave_1 added [ 299.584385] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 299.631975] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 299.663815] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 299.717139] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 299.751796] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 299.759455] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 299.768577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 299.808402] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 299.816216] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 299.825302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 299.852490] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 299.860318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 299.870453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 299.913547] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 299.921252] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 299.931465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 300.819460] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.826090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.833316] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.839875] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.849080] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 300.873008] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.879561] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.886797] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.893408] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.902492] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 300.913133] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 300.921102] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 304.305914] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.338228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.627653] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 304.658453] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 304.945643] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 304.952090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 304.960272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 304.979545] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 304.986068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 304.994051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 305.293711] 8021q: adding VLAN 0 to HW filter on device team0 [ 305.323379] 8021q: adding VLAN 0 to HW filter on device team0 18:57:08 executing program 2: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000080)="2400000002021f001cfffd940500000000000000099800010002e700000000c3f1f4a58b", 0x24}], 0x1}, 0x0) 18:57:08 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x780f3de6}) r2 = syz_open_pts(r0, 0x0) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000000)=""/14, 0x1}], 0x1) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)) delete_module(&(0x7f0000000100)='\x00', 0x0) 18:57:08 executing program 4: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) symlinkat(0x0, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) getgroups(0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) getresgid(0x0, 0x0, 0x0) mknodat(r0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0) setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) futimesat(r0, 0x0, 0x0) 18:57:08 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000d80)='/dev/ptmx\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x803, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f0000000400)="e83779d80efa45bb7f48bebc95870bd0cd39bd2830ee47afe7b33fc778bde252c50d2e", 0x0) r5 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r6 = dup2(r5, r4) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, "7175657565310000000000000000313b0000000000000000000000000000000000000000060000000000ccbf7ddd00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00000001c0)={0xf48b, 0x0, 0x0, 'queue1\x00'}) ioctl$FS_IOC_SETFSLABEL(r3, 0x41009432, &(0x7f0000001240)="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") write$sndseq(r4, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) mmap(&(0x7f0000011000/0x6000)=nil, 0x6000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r6, 0xc08c5336, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r6, 0xc0086420, &(0x7f0000000340)) connect$inet6(r4, &(0x7f0000001200)={0xa, 0x4e24, 0x10000, @ipv4={[], [], @empty}, 0x40000000000000}, 0x1c) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) socket$vsock_stream(0x28, 0x1, 0x0) fstatfs(r7, &(0x7f00000001c0)=""/4096) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) read(r1, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)) 18:57:08 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x20) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c2d023c126285718070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000300)='cgroup.subtree_control\x00', 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002d80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002740)=""/218, 0xda}}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) readv(r2, &(0x7f00000002c0), 0x2bb) 18:57:08 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x1, 0x0) write$binfmt_elf32(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c46020308"], 0x7) [ 307.473973] netlink: 16 bytes leftover after parsing attributes in process `syz-executor2'. [ 307.484516] netlink: 16 bytes leftover after parsing attributes in process `syz-executor2'. 18:57:08 executing program 2: r0 = epoll_create1(0x0) readv(0xffffffffffffffff, 0x0, 0x0) epoll_wait(r0, &(0x7f0000000340), 0x0, 0x0) 18:57:08 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$P9_RXATTRCREATE(r1, &(0x7f00000001c0)={0x7}, 0xff9d) r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r3 = creat(&(0x7f0000000180)='./file0\x00', 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280)={0x7}, 0xff7f) syncfs(r2) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000100)={0x0, r3, 0x9}) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000200)={0x0, r3, 0x0, 0x8}) 18:57:08 executing program 0: socket$inet6(0xa, 0x80002, 0x0) clock_gettime(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) read(r0, &(0x7f0000000000)=""/11, 0xb) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) syz_execute_func(&(0x7f0000000200)="3666440f9bf56664400f9f3241c3c4e2c9975842c481c27d794e00000f11581010198c7f7fcd04af6e0f01db") setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0) 18:57:08 executing program 1: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000080)=ANY=[@ANYBLOB]) getegid() sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) socket$inet6(0xa, 0x3, 0x5) openat$rfkill(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/rfkill\x00', 0x8000, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, &(0x7f0000000100), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x2) ftruncate(0xffffffffffffffff, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fdatasync(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6, @in6=@mcast2}}, {{@in=@loopback}, 0x0, @in6=@mcast1}}, 0x0) ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$user(&(0x7f00000007c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffff8) add_key(0x0, &(0x7f0000000940)={'syz', 0x1}, &(0x7f0000000980)="868ae10c9b710349a7e29cd885a1eff46a0f5c4db55d62d6abe4f962c801491b3d3faeac868b282d0b4198e8df", 0x2d, 0xffffffffffffffff) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f00000006c0)="20df486936b92927572aebec2fe012cf8be7955b8ab3b17f8680acc312aeaf4fb0dc66e0ab03b66b9048a4ffd6c6617e0ed84e31f16408e3b61a74072847bc88b635b8e7638a939b1408f718a1cfc0f217f0d50c99de6d75af431c947f0621b0f299b9496706220c2f4acf94d3ea3f8cab2337a1d4976722fc29d4f7955cdb2cd5b27b6ccbddb1a6aa4e8b1e705f9738c3038f363185df3ef2c261c3a92314f797a0972a746483d411281a6be63207625ddfd64e82e4b3918c2d20881ec01a000f", 0xc1, 0x801, 0x0, 0x0) connect$inet(r2, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x40000000000002f, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a00)="a27086f099c896406d5d1f4d3c67ffb16adca239f62b0f14d949dc64d0ba92572c8ed48cff14f5c8e14755798f623c90996d5fe09e297c15345f704d2f869c600237408c3e50159313dca48df0a1a1e713dfa84af97ee934bbcf552dd75bcb87f1dabdcce6c80e632d26edff400f3122861dd67a462ccb4dcb59f14b037b1d392a57424e30d3fa25b7bce6cfa27e2bf6e8b84730b344f1843b9ac9", 0x9b, 0x800000020000008, 0x0, 0x0) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, 0x0) 18:57:09 executing program 2: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0x1000000ca) r1 = dup(r0) r2 = gettid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, 0x0) ioctl$TCGETA(r1, 0x5405, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x401004000000016) 18:57:09 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) 18:57:09 executing program 3: r0 = socket(0x200000000000011, 0x802, 0x4001000dd86) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="c0", 0x1}], 0x1) prctl$PR_MCE_KILL_GET(0x22) 18:57:09 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@bridge_getneigh={0x20, 0x1e, 0x303, 0x0, 0x0, {0xc00}}, 0x20}}, 0x0) 18:57:09 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0xffffffffffffffff}, 0x1c) 18:57:09 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0x9}, 0x2c) close(r0) [ 308.712095] ================================================================== [ 308.719545] BUG: KMSAN: uninit-value in check_6rd+0x65a/0x710 [ 308.725954] CPU: 0 PID: 8255 Comm: syz-executor3 Not tainted 4.20.0-rc5+ #2 [ 308.733074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 308.742446] Call Trace: [ 308.745079] dump_stack+0x1c9/0x220 [ 308.748751] kmsan_report+0x12d/0x290 [ 308.752588] __msan_warning+0x76/0xc0 [ 308.756433] check_6rd+0x65a/0x710 [ 308.760041] sit_tunnel_xmit+0xb58/0x34d0 [ 308.764267] ? dev_hard_start_xmit+0xb3/0xc80 [ 308.768796] ? ipip6_tunnel_uninit+0x800/0x800 [ 308.773414] dev_hard_start_xmit+0x627/0xc80 [ 308.777904] __dev_queue_xmit+0x3173/0x3cf0 [ 308.782310] dev_queue_xmit+0x4b/0x60 [ 308.786147] ? __netdev_pick_tx+0x1290/0x1290 [ 308.790676] packet_sendmsg+0x7cbd/0x9200 [ 308.794863] ? kmsan_memcpy_metadata+0xb/0x10 [ 308.799394] ? __msan_memcpy+0x61/0x70 [ 308.803316] ? do_iter_readv_writev+0x822/0xac0 [ 308.808025] ? __se_sys_writev+0x9b/0xb0 [ 308.812112] ? do_syscall_64+0xcd/0x110 [ 308.816131] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 308.821528] ? balance_callback+0x48/0x260 [ 308.825806] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 308.831302] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 308.836704] ? aa_sk_perm+0x7ab/0x9e0 [ 308.840603] ? compat_packet_setsockopt+0x360/0x360 [ 308.845649] sock_write_iter+0x3f4/0x4f0 [ 308.849770] ? sock_read_iter+0x4e0/0x4e0 [ 308.853953] do_iter_readv_writev+0x822/0xac0 [ 308.858501] ? sock_read_iter+0x4e0/0x4e0 [ 308.862674] do_iter_write+0x302/0xd80 [ 308.866594] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 308.872083] ? import_iovec+0x41f/0x680 [ 308.876123] do_writev+0x397/0x860 [ 308.879736] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 308.885216] ? prepare_exit_to_usermode+0x137/0x460 [ 308.890266] ? syscall_return_slowpath+0x50/0x680 [ 308.895155] __se_sys_writev+0x9b/0xb0 [ 308.899084] __x64_sys_writev+0x4a/0x70 [ 308.903092] do_syscall_64+0xcd/0x110 [ 308.906921] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 308.912133] RIP: 0033:0x457659 [ 308.915355] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 308.934282] RSP: 002b:00007fcc4cd51c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 308.942026] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457659 [ 308.949315] RDX: 0000000000000001 RSI: 0000000020000080 RDI: 0000000000000004 [ 308.956611] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 308.963903] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc4cd526d4 [ 308.971203] R13: 00000000004c39e8 R14: 00000000004dae38 R15: 00000000ffffffff [ 308.978509] [ 308.980151] Uninit was created at: [ 308.983726] kmsan_internal_poison_shadow+0x92/0x150 [ 308.988855] kmsan_kmalloc+0xa1/0x100 [ 308.992675] kmsan_slab_alloc+0xe/0x10 [ 308.996591] __kmalloc_node_track_caller+0xf06/0x1120 [ 309.001810] __alloc_skb+0x318/0xa40 [ 309.005547] alloc_skb_with_frags+0x1c9/0xa80 [ 309.010068] sock_alloc_send_pskb+0xb5d/0x1140 [ 309.014674] packet_sendmsg+0x66a2/0x9200 [ 309.018844] sock_write_iter+0x3f4/0x4f0 [ 309.022924] do_iter_readv_writev+0x822/0xac0 [ 309.027437] do_iter_write+0x302/0xd80 [ 309.031340] do_writev+0x397/0x860 [ 309.034907] __se_sys_writev+0x9b/0xb0 [ 309.038812] __x64_sys_writev+0x4a/0x70 [ 309.042816] do_syscall_64+0xcd/0x110 [ 309.046638] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 309.051838] ================================================================== [ 309.059205] Disabling lock debugging due to kernel taint [ 309.064668] Kernel panic - not syncing: panic_on_warn set ... [ 309.070574] CPU: 0 PID: 8255 Comm: syz-executor3 Tainted: G B 4.20.0-rc5+ #2 [ 309.079074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 309.088440] Call Trace: [ 309.091069] dump_stack+0x1c9/0x220 [ 309.094730] panic+0x3f0/0x98f [ 309.097994] kmsan_report+0x290/0x290 [ 309.101837] __msan_warning+0x76/0xc0 [ 309.105681] check_6rd+0x65a/0x710 [ 309.109270] sit_tunnel_xmit+0xb58/0x34d0 [ 309.113489] ? dev_hard_start_xmit+0xb3/0xc80 [ 309.118012] ? ipip6_tunnel_uninit+0x800/0x800 [ 309.122630] dev_hard_start_xmit+0x627/0xc80 [ 309.127111] __dev_queue_xmit+0x3173/0x3cf0 [ 309.131505] dev_queue_xmit+0x4b/0x60 [ 309.135336] ? __netdev_pick_tx+0x1290/0x1290 [ 309.139865] packet_sendmsg+0x7cbd/0x9200 [ 309.144053] ? kmsan_memcpy_metadata+0xb/0x10 [ 309.148578] ? __msan_memcpy+0x61/0x70 [ 309.152491] ? do_iter_readv_writev+0x822/0xac0 [ 309.157185] ? __se_sys_writev+0x9b/0xb0 [ 309.161269] ? do_syscall_64+0xcd/0x110 [ 309.165278] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 309.170660] ? balance_callback+0x48/0x260 [ 309.174923] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 309.180418] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 309.185807] ? aa_sk_perm+0x7ab/0x9e0 [ 309.189694] ? compat_packet_setsockopt+0x360/0x360 [ 309.194730] sock_write_iter+0x3f4/0x4f0 [ 309.198841] ? sock_read_iter+0x4e0/0x4e0 [ 309.203013] do_iter_readv_writev+0x822/0xac0 [ 309.207569] ? sock_read_iter+0x4e0/0x4e0 [ 309.211743] do_iter_write+0x302/0xd80 [ 309.215661] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 309.221137] ? import_iovec+0x41f/0x680 [ 309.225160] do_writev+0x397/0x860 [ 309.228757] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 309.234233] ? prepare_exit_to_usermode+0x137/0x460 [ 309.239271] ? syscall_return_slowpath+0x50/0x680 [ 309.244152] __se_sys_writev+0x9b/0xb0 [ 309.248076] __x64_sys_writev+0x4a/0x70 [ 309.252081] do_syscall_64+0xcd/0x110 [ 309.255912] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 309.261208] RIP: 0033:0x457659 [ 309.264426] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 309.283356] RSP: 002b:00007fcc4cd51c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 309.291100] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457659 [ 309.298400] RDX: 0000000000000001 RSI: 0000000020000080 RDI: 0000000000000004 [ 309.305681] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 309.312965] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc4cd526d4 [ 309.320250] R13: 00000000004c39e8 R14: 00000000004dae38 R15: 00000000ffffffff [ 309.328603] Kernel Offset: disabled [ 309.332237] Rebooting in 86400 seconds..