[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 15.684340] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. [ 16.224218] random: sshd: uninitialized urandom read (32 bytes read) [ 16.365522] random: sshd: uninitialized urandom read (32 bytes read) Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 17.026085] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.42' (ECDSA) to the list of known hosts. [ 26.532270] random: sshd: uninitialized urandom read (32 bytes read) 2018/08/28 22:37:24 fuzzer started [ 27.536058] random: cc1: uninitialized urandom read (8 bytes read) 2018/08/28 22:37:26 dialing manager at 10.128.0.26:39301 2018/08/28 22:37:32 syscalls: 1 2018/08/28 22:37:32 code coverage: enabled 2018/08/28 22:37:32 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/08/28 22:37:32 setuid sandbox: enabled 2018/08/28 22:37:32 namespace sandbox: enabled 2018/08/28 22:37:32 fault injection: CONFIG_FAULT_INJECTION is not enabled 2018/08/28 22:37:32 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/08/28 22:37:32 net packed injection: enabled 2018/08/28 22:37:32 net device setup: enabled [ 36.053775] random: crng init done INIT: Id "5" respawning too fast: disabled for 5 minutes INIT: Id "4" respawning too fast: disabled for 5 minutes INIT: Id "3" respawning too fast: disabled for 5 minutes INIT: Id "1" respawning too fast: disabled for 5 minutes INIT: Id "6" respawning too fast: disabled for 5 minutes INIT: Id "2" respawning too fast: disabled for 5 minutes 22:39:04 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000004, 0x400000000032, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 22:39:04 executing program 2: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00007a8fff), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) mlockall(0x3) 22:39:04 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv4_newroute={0x24, 0x18, 0xd19, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x2}]}, 0x24}}, 0x0) 22:39:04 executing program 3: socket(0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r0, 0x1000000000016) 22:39:04 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='io.stat\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001680)=[{&(0x7f00000000c0)=""/172, 0xac}], 0x1, 0x0) 22:39:04 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0xa, 0x3, 0x7f) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0xe}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000280)={{&(0x7f000090c000/0x1000)=nil, 0x1000}, 0x1}) madvise(&(0x7f000090c000/0x3000)=nil, 0x3000, 0x4) dup3(r1, r2, 0x0) 22:39:04 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000000), 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r0) add_key(&(0x7f00000002c0)='dns_resolver\x00', &(0x7f00000000c0), &(0x7f0000000240)="1db510774375f47a05942c459e810c73fdf5623fb1eea51ac1e04c0907bc6c8326e016c477b652f66bcff5828246a8c69e7a40e2aa1197a1d13cb6162194e50a799882e500", 0x45, r0) keyctl$search(0xa, r0, &(0x7f0000000080)='dns_resolver\x00', &(0x7f00000001c0), 0x0) 22:39:04 executing program 6: syz_read_part_table(0xffffffffffffffff, 0x1, &(0x7f0000001ac0)=[{&(0x7f0000000000)="4552c6", 0x3}]) [ 126.343542] IPVS: Creating netns size=2536 id=1 [ 126.414357] IPVS: Creating netns size=2536 id=2 [ 126.471638] IPVS: Creating netns size=2536 id=3 [ 126.510148] IPVS: Creating netns size=2536 id=4 [ 126.557250] IPVS: Creating netns size=2536 id=5 [ 126.626493] IPVS: Creating netns size=2536 id=6 [ 126.702448] IPVS: Creating netns size=2536 id=7 [ 126.780868] IPVS: Creating netns size=2536 id=8 [ 127.257660] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 127.305596] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 127.384491] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 127.474318] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 127.487838] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 127.512853] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 127.532057] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 127.565445] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 127.659176] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 127.699147] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 127.720197] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 127.765081] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 127.783339] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 127.858991] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 127.867509] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 127.878374] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 127.926788] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 127.950719] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 127.959885] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 127.977341] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 128.008284] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 128.029008] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 128.057530] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 128.074278] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 128.106399] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 128.129480] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 128.163400] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 128.185868] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 128.192817] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 128.209674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 128.224964] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 128.245334] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 128.254303] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 128.289319] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 128.303200] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 128.323568] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 128.332853] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 128.360037] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 128.368176] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 128.389743] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 128.434353] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 128.447892] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 128.497430] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 128.509703] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 128.520218] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 128.530551] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 128.543960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 128.557543] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 128.566040] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 128.575236] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 128.586198] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 128.604642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 128.635530] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 128.643977] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 128.659074] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 128.669001] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 128.684034] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 128.691671] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 128.699306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 128.716704] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 128.723786] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 128.731016] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 128.744805] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 128.756365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 128.767171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 128.775331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 128.782727] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 128.790817] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 128.801681] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 128.809707] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 128.858813] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 128.866828] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 128.875791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 128.886278] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 128.898079] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 128.910077] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 128.926282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 128.948483] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 128.956197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 128.970455] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 128.984087] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 128.991625] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 129.000503] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 129.014224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 129.021751] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 129.029238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 129.045140] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 129.058502] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 129.090505] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 129.102037] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 129.116755] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 129.130359] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 129.143182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 129.177509] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 129.208678] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 129.219890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 132.898619] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 133.156289] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 133.164157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 133.171031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 133.286008] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 133.305050] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 133.313999] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 133.425626] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 133.488562] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 133.504590] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 133.520660] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 133.533511] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 133.541954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 133.551089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 133.558138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 133.565066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 133.576101] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 133.586639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 133.593450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 133.662505] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 133.727799] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 133.747247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 133.755352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 133.762597] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 133.771245] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 133.782122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 133.794076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 133.803219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 133.822553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 133.944968] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 133.956653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 133.963381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 22:39:12 executing program 7: r0 = socket$inet(0x2, 0x4800000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x200007fe, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) close(r0) 22:39:12 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000100)=@ipv4_newroute={0x1c, 0x18, 0x101, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x1c}}, 0x0) 22:39:12 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0xfd, 0x279d, 0x0, 0xffffffffffffffff}) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x0, 0x0) ioctl$TIOCMGET(r1, 0x5415, &(0x7f00000001c0)) r2 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) ioctl(r3, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") dup2(r2, r1) pipe(&(0x7f0000000000)) 22:39:13 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="0000a40000000001"], 0x1) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x0) 22:39:13 executing program 7: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) fcntl$setpipe(r0, 0x407, 0x0) 22:39:13 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f00000000c0)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, 'pids'}]}, 0x6) write$cgroup_subtree(r1, &(0x7f0000000140)={[{0x2d, 'pids'}]}, 0x6) 22:39:13 executing program 7: listen(0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x910, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$void(r0, 0x20000000c0045878) 22:39:13 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000004, 0x400000000032, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 22:39:13 executing program 7: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x0, 0xfffffffffffffffe}, 0x4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000003, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) shutdown(r1, 0x1) [ 135.364458] hrtimer: interrupt took 71265 ns 22:39:13 executing program 2: 22:39:13 executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) setgroups(0x1, &(0x7f0000000100)=[0x0]) 22:39:13 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000004, 0x400000000032, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 22:39:13 executing program 1: 22:39:13 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000000), 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r0) add_key(&(0x7f00000002c0)='dns_resolver\x00', &(0x7f00000000c0), &(0x7f0000000240)="1db510774375f47a05942c459e810c73fdf5623fb1eea51ac1e04c0907bc6c8326e016c477b652f66bcff5828246a8c69e7a40e2aa1197a1d13cb6162194e50a799882e500", 0x45, r0) keyctl$search(0xa, r0, &(0x7f0000000080)='dns_resolver\x00', &(0x7f00000001c0), 0x0) 22:39:13 executing program 6: syz_read_part_table(0xffffffffffffffff, 0x1, &(0x7f0000001ac0)=[{&(0x7f0000000000)="4552c6", 0x3}]) 22:39:13 executing program 4: 22:39:13 executing program 1: 22:39:13 executing program 4: 22:39:13 executing program 2: 22:39:13 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f000075cf53), &(0x7f000015dffc), &(0x7f0000b25ffc), &(0x7f0000923000)) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2, 0x31, 0xffffffffffffffff, 0x0) waitid(0x0, 0x0, &(0x7f0000003ff8), 0xa0000004, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x9) r1 = dup2(r0, r0) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ftruncate(0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x4100c0, 0x40) r3 = fcntl$dupfd(r0, 0x406, r2) r4 = openat$cgroup_ro(r3, &(0x7f0000000480)="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", 0x0, 0x0) ftruncate(r4, 0x0) ioctl$TCSETAF(r4, 0x5408, &(0x7f0000000040)={0x0, 0x3, 0x2, 0x9, 0x1, 0x6, 0x1, 0x500d, 0x0, 0x6}) 22:39:13 executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) setgroups(0x1, &(0x7f0000000100)=[0x0]) 22:39:13 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f00000000c0)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000140)={[{0x2d, 'pids'}]}, 0x6) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x2b, 'rdma'}, {0x2b, 'rdma'}]}, 0xc) 22:39:13 executing program 1: 22:39:13 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000004, 0x400000000032, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 22:39:13 executing program 7: 22:39:13 executing program 6: syz_read_part_table(0xffffffffffffffff, 0x1, &(0x7f0000001ac0)=[{&(0x7f0000000000)="4552c6", 0x3}]) 22:39:13 executing program 5: 22:39:13 executing program 3: 22:39:13 executing program 2: 22:39:13 executing program 1: 22:39:13 executing program 7: 22:39:13 executing program 3: 22:39:13 executing program 5: perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x910, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) dup3(0xffffffffffffffff, r0, 0x80000) ioctl$void(r1, 0x5450) 22:39:13 executing program 7: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x116) 22:39:13 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x100000000000000}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv4_newroute={0x1c, 0x18, 0xd19, 0x0, 0x0, {0xa}}, 0x1c}}, 0x0) 22:39:14 executing program 4: 22:39:14 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") rt_sigsuspend(&(0x7f0000000300)={0x2afe}, 0x2) 22:39:14 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 22:39:14 executing program 6: syz_read_part_table(0xffffffffffffffff, 0x1, &(0x7f0000001ac0)=[{&(0x7f0000000000)="4552c6", 0x3}]) 22:39:14 executing program 3: 22:39:14 executing program 2: 22:39:14 executing program 7: 22:39:14 executing program 5: 22:39:14 executing program 2: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x857, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x900) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)) 22:39:14 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @dev}, {0x2, 0x0, @local}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0xaf, 0x0, 0x0, &(0x7f0000000040)='syz_tun\x00', 0x0, 0x3}) 22:39:14 executing program 4: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="240000001a0025f004859c04fef7001d0a0b49ffed000000800028000800030001000000", 0x24) 22:39:14 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xc, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f00000f5ffc), 0x4) 22:39:14 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 22:39:14 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000140)={0x14, 0x4000000000003, 0x1, 0xffffffffffffffff}, 0x14}}, 0x0) 22:39:14 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000a8eff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) close(r0) 22:39:14 executing program 2: perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x910, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$void(r1, 0x5451) 22:39:14 executing program 1: 22:39:14 executing program 5: 22:39:14 executing program 4: 22:39:14 executing program 6: syz_read_part_table(0x0, 0x1, &(0x7f0000001ac0)=[{&(0x7f0000000000)="4552c6", 0x3}]) 22:39:14 executing program 1: 22:39:14 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 22:39:14 executing program 5: 22:39:14 executing program 4: 22:39:14 executing program 4: 22:39:14 executing program 1: 22:39:14 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000004, 0x400000000032, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)) 22:39:14 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x0, 0xfffffffffffffffe}, 0x4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) shutdown(r1, 0x1) 22:39:14 executing program 7: setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002000)="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", 0x12c) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0x0, 0x40}, 0x14) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000001fde), 0x4) 22:39:14 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv4_newroute={0x1c, 0x18, 0xd19, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, 0x1c}}, 0x0) 22:39:14 executing program 1: setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002000)="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", 0x12e) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0x0, 0x40}, 0x14) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000001fde), 0x4) 22:39:14 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000080)={@multicast2}, 0xc) 22:39:14 executing program 4: r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x8c2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x5}) ftruncate(r0, 0x200000000) 22:39:14 executing program 6: syz_read_part_table(0x0, 0x1, &(0x7f0000001ac0)=[{&(0x7f0000000000)="4552c6", 0x3}]) 22:39:14 executing program 3: 22:39:14 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x400000000032, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 22:39:14 executing program 3: 22:39:14 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000000), 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x0, 0xfffffffffffffffe}, 0x4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) shutdown(r1, 0x1) 22:39:14 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0xfd, 0x279d}) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) personality(0x800010) pipe(&(0x7f0000000000)={0xffffffffffffffff}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000140)={0x0, @dev, @loopback}, &(0x7f00000001c0)=0xc) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) 22:39:14 executing program 6: syz_read_part_table(0x0, 0x1, &(0x7f0000001ac0)=[{&(0x7f0000000000)="4552c6", 0x3}]) 22:39:14 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000340)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00009b4fd0)={0x0, 0x0, &(0x7f0000009ff0), 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000), 0x1, 0x0, &(0x7f0000000300)="c6"}) 22:39:14 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000004, 0x10, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 22:39:14 executing program 4: socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000000)) r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000080)="1f0000001e0007f1fff5ff0200000000000000005307a33d6c390836be381b", 0x1f) [ 136.439390] binder: 7106:7118 ioctl c0306201 20000140 returned -11 22:39:14 executing program 5: 22:39:14 executing program 7: perf_event_open(&(0x7f0000aaa000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fstatfs(r0, &(0x7f0000000140)=""/116) 22:39:14 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x1, 0x80000) ioctl$TCXONC(r1, 0x540a, 0x6) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000240)={'bond_slave_0\x00?\x00', {0x2, 0x0, @rand_addr}}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={"626f6e645f736c6176655f3000000002", {0x2, 0x0, @local}}) 22:39:14 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000b82000)) dup3(r2, r0, 0x0) 22:39:14 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000004, 0x10, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 22:39:14 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x8000080000008947, &(0x7f00000001c0)={'ip6gre0\x00', @ifru_map}) 22:39:14 executing program 6: syz_read_part_table(0xffffffffffffffff, 0x0, &(0x7f0000001ac0)) 22:39:14 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000000), 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x0, 0xfffffffffffffffe}, 0x4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) shutdown(r1, 0x1) 22:39:14 executing program 5: 22:39:14 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000004, 0x10, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 22:39:14 executing program 5: 22:39:14 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000040), 0xc) 22:39:14 executing program 7: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000000)=""/246) 22:39:14 executing program 6: syz_read_part_table(0xffffffffffffffff, 0x0, &(0x7f0000001ac0)) 22:39:14 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000004, 0x400000000032, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)) 22:39:14 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x200000000004e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2]}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739fef, 0x0, 0x0, 0x4f) 22:39:14 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r1, &(0x7f0000005fc0), 0x80000000000006a, 0x0) 22:39:14 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x1, 0x80000) ioctl$TCXONC(r1, 0x540a, 0x6) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000240)={'bond_slave_0\x00?\x00', {0x2, 0x0, @rand_addr}}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={"626f6e645f736c6176655f3000000002", {0x2, 0x0, @local}}) 22:39:14 executing program 6: syz_read_part_table(0xffffffffffffffff, 0x0, &(0x7f0000001ac0)) 22:39:14 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000100)={&(0x7f0000de2ff4), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x2, 0x8, 0xffffffffffffffff}, 0x14}}, 0x0) 22:39:14 executing program 3: 22:39:14 executing program 3: 22:39:14 executing program 4: [ 136.909539] ================================================================== [ 136.916958] BUG: KASAN: slab-out-of-bounds in ip6_xmit+0x1838/0x1b80 [ 136.923444] Read of size 8 at addr ffff8801ccbd5dd8 by task syz-executor1/7184 [ 136.930806] [ 136.932442] CPU: 1 PID: 7184 Comm: syz-executor1 Not tainted 4.9.124-g09eb2ba #31 [ 136.940056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 136.949404] ffff8801b6da7540 ffffffff81eb95e9 ffffea000732f540 ffff8801ccbd5dd8 [ 136.957465] 0000000000000000 ffff8801ccbd5dd8 0000000000000040 ffff8801b6da7578 [ 136.965475] ffffffff8156c35e ffff8801ccbd5dd8 0000000000000008 0000000000000000 [ 136.973478] Call Trace: [ 136.976049] [] dump_stack+0xc1/0x128 [ 136.981396] [] print_address_description+0x6c/0x234 [ 136.988049] [] kasan_report.cold.6+0x242/0x2fe [ 136.994288] [] ? ip6_xmit+0x1838/0x1b80 [ 136.999896] [] __asan_report_load8_noabort+0x14/0x20 [ 137.006631] [] ip6_xmit+0x1838/0x1b80 [ 137.012066] [] ? ip6_finish_output2+0x1d00/0x1d00 [ 137.018541] [] ? retint_kernel+0x2d/0x2d [ 137.024234] [] ? trace_hardirqs_on_caller+0x266/0x590 [ 137.031067] [] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 137.037626] [] ? check_preemption_disabled+0x3b/0x170 [ 137.044448] [] ? retint_kernel+0x2d/0x2d [ 137.050140] [] ? lock_is_held+0xff/0x140 [ 137.055848] [] inet6_csk_xmit+0x27c/0x4d0 [ 137.061623] [] ? inet6_csk_xmit+0xff/0x4d0 [ 137.067492] [] ? inet6_csk_update_pmtu+0x160/0x160 [ 137.074056] [] l2tp_xmit_skb+0xc45/0xf30 [ 137.079746] [] pppol2tp_sendmsg+0x4e0/0x790 [ 137.085710] [] ? selinux_socket_sendmsg+0x3f/0x50 [ 137.092186] [] ? pppol2tp_release+0x2e0/0x2e0 [ 137.098313] [] sock_sendmsg+0xcc/0x110 [ 137.103832] [] ___sys_sendmsg+0x47a/0x840 [ 137.109665] [] ? copy_msghdr_from_user+0x560/0x560 [ 137.116243] [] ? check_preemption_disabled+0x3b/0x170 [ 137.123064] [] ? check_preemption_disabled+0x3b/0x170 [ 137.129888] [] ? __fget+0x20a/0x3b0 [ 137.135145] [] ? __fget+0x231/0x3b0 [ 137.140399] [] ? __fget+0x47/0x3b0 [ 137.145584] [] ? __fget_light+0x169/0x1f0 [ 137.151363] [] ? __fdget+0x18/0x20 [ 137.156549] [] __sys_sendmmsg+0x161/0x3d0 [ 137.162327] [] ? SyS_sendmsg+0x50/0x50 [ 137.167842] [] ? ip6_datagram_connect+0x3a/0x50 [ 137.174142] [] ? inet_dgram_connect+0x11e/0x200 [ 137.180442] [] ? fput+0xd2/0x140 [ 137.185446] [] ? SYSC_connect+0x22a/0x300 [ 137.191227] [] ? SYSC_bind+0x280/0x280 [ 137.196749] [] ? SyS_futex+0x206/0x310 [ 137.202270] [] ? do_futex+0x17c0/0x17c0 [ 137.207874] [] ? SyS_socket+0x121/0x1b0 [ 137.213482] [] ? retint_kernel+0x2d/0x2d [ 137.219173] [] ? move_addr_to_kernel+0x50/0x50 [ 137.225382] [] SyS_sendmmsg+0x35/0x60 [ 137.230813] [] ? __sys_sendmmsg+0x3d0/0x3d0 [ 137.236768] [] do_syscall_64+0x1a6/0x490 [ 137.242459] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 137.249372] [ 137.250979] Allocated by task 0: [ 137.254332] (stack is not available) [ 137.258018] [ 137.259622] Freed by task 0: [ 137.262611] (stack is not available) [ 137.266296] [ 137.267906] The buggy address belongs to the object at ffff8801ccbd5dc0 [ 137.267906] which belongs to the cache ip_dst_cache of size 216 [ 137.280653] The buggy address is located 24 bytes inside of [ 137.280653] 216-byte region [ffff8801ccbd5dc0, ffff8801ccbd5e98) [ 137.292425] The buggy address belongs to the page: [ 137.297338] page:ffffea000732f540 count:1 mapcount:0 mapping: (null) index:0xffff8801ccbd5780 [ 137.306891] flags: 0x8000000000000080(slab) [ 137.311191] page dumped because: kasan: bad access detected [ 137.316877] [ 137.318487] Memory state around the buggy address: [ 137.323396] ffff8801ccbd5c80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 137.330743] ffff8801ccbd5d00: 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc [ 137.338082] >ffff8801ccbd5d80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 137.345427] ^ [ 137.351639] ffff8801ccbd5e00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 137.358982] ffff8801ccbd5e80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 137.366345] ================================================================== [ 137.373679] Disabling lock debugging due to kernel taint [ 137.379192] Kernel panic - not syncing: panic_on_warn set ... [ 137.379192] [ 137.386555] CPU: 1 PID: 7184 Comm: syz-executor1 Tainted: G B 4.9.124-g09eb2ba #31 [ 137.395384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 137.404759] ffff8801b6da74a0 ffffffff81eb95e9 ffffffff843c828b 00000000ffffffff [ 137.412791] 0000000000000000 0000000000000001 0000000000000040 ffff8801b6da7560 [ 137.420847] ffffffff81423eb5 0000000041b58ab3 ffffffff843bb8e8 ffffffff81423cf6 [ 137.428871] Call Trace: [ 137.431463] [] dump_stack+0xc1/0x128 [ 137.436810] [] panic+0x1bf/0x3bc [ 137.441807] [] ? add_taint.cold.6+0x16/0x16 [ 137.447759] [] kasan_end_report+0x47/0x4f [ 137.453538] [] kasan_report.cold.6+0x76/0x2fe [ 137.459664] [] ? ip6_xmit+0x1838/0x1b80 [ 137.465277] [] __asan_report_load8_noabort+0x14/0x20 [ 137.472037] [] ip6_xmit+0x1838/0x1b80 [ 137.477490] [] ? ip6_finish_output2+0x1d00/0x1d00 [ 137.483962] [] ? retint_kernel+0x2d/0x2d [ 137.489654] [] ? trace_hardirqs_on_caller+0x266/0x590 [ 137.496477] [] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 137.503037] [] ? check_preemption_disabled+0x3b/0x170 [ 137.509854] [] ? retint_kernel+0x2d/0x2d [ 137.515545] [] ? lock_is_held+0xff/0x140 [ 137.521239] [] inet6_csk_xmit+0x27c/0x4d0 [ 137.527018] [] ? inet6_csk_xmit+0xff/0x4d0 [ 137.532881] [] ? inet6_csk_update_pmtu+0x160/0x160 [ 137.539456] [] l2tp_xmit_skb+0xc45/0xf30 [ 137.545146] [] pppol2tp_sendmsg+0x4e0/0x790 [ 137.551135] [] ? selinux_socket_sendmsg+0x3f/0x50 [ 137.557619] [] ? pppol2tp_release+0x2e0/0x2e0 [ 137.563758] [] sock_sendmsg+0xcc/0x110 [ 137.569276] [] ___sys_sendmsg+0x47a/0x840 [ 137.575057] [] ? copy_msghdr_from_user+0x560/0x560 [ 137.581616] [] ? check_preemption_disabled+0x3b/0x170 [ 137.588440] [] ? check_preemption_disabled+0x3b/0x170 [ 137.595265] [] ? __fget+0x20a/0x3b0 [ 137.600522] [] ? __fget+0x231/0x3b0 [ 137.605779] [] ? __fget+0x47/0x3b0 [ 137.610950] [] ? __fget_light+0x169/0x1f0 [ 137.616730] [] ? __fdget+0x18/0x20 [ 137.621900] [] __sys_sendmmsg+0x161/0x3d0 [ 137.627679] [] ? SyS_sendmsg+0x50/0x50 [ 137.633195] [] ? ip6_datagram_connect+0x3a/0x50 [ 137.639495] [] ? inet_dgram_connect+0x11e/0x200 [ 137.645794] [] ? fput+0xd2/0x140 [ 137.650792] [] ? SYSC_connect+0x22a/0x300 [ 137.656583] [] ? SYSC_bind+0x280/0x280 [ 137.662103] [] ? SyS_futex+0x206/0x310 [ 137.667621] [] ? do_futex+0x17c0/0x17c0 [ 137.673240] [] ? SyS_socket+0x121/0x1b0 [ 137.678849] [] ? retint_kernel+0x2d/0x2d [ 137.684542] [] ? move_addr_to_kernel+0x50/0x50 [ 137.690755] [] SyS_sendmmsg+0x35/0x60 [ 137.696185] [] ? __sys_sendmmsg+0x3d0/0x3d0 [ 137.702149] [] do_syscall_64+0x1a6/0x490 [ 137.707842] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 137.715022] Dumping ftrace buffer: [ 137.718542] (ftrace buffer empty) [ 137.722239] Kernel Offset: disabled [ 137.725839] Rebooting in 86400 seconds..