[ 50.809452] audit: type=1800 audit(1545144506.847:26): pid=6350 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 52.409951] kauditd_printk_skb: 2 callbacks suppressed [ 52.409980] audit: type=1800 audit(1545144508.467:29): pid=6350 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 52.434792] audit: type=1800 audit(1545144508.477:30): pid=6350 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.182' (ECDSA) to the list of known hosts. 2018/12/18 14:48:41 fuzzer started 2018/12/18 14:48:46 dialing manager at 10.128.0.26:42941 2018/12/18 14:48:46 syscalls: 1 2018/12/18 14:48:46 code coverage: enabled 2018/12/18 14:48:46 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/12/18 14:48:46 setuid sandbox: enabled 2018/12/18 14:48:46 namespace sandbox: enabled 2018/12/18 14:48:46 Android sandbox: /sys/fs/selinux/policy does not exist 2018/12/18 14:48:46 fault injection: enabled 2018/12/18 14:48:46 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/12/18 14:48:46 net packet injection: enabled 2018/12/18 14:48:46 net device setup: enabled 14:51:37 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3a960eca58356ed2eb", 0x10) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000003c0)={{{@in, @in=@dev}}, {{@in=@broadcast}, 0x0, @in=@dev}}, &(0x7f0000000080)=0xe8) sendmmsg$alg(r1, &(0x7f00000069c0)=[{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001380), 0x55911c}], 0x1}, {0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}], 0x3, 0x0) syzkaller login: [ 242.341654] IPVS: ftp: loaded support on port[0] = 21 [ 243.733283] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.739909] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.748191] device bridge_slave_0 entered promiscuous mode [ 243.830421] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.837087] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.845168] device bridge_slave_1 entered promiscuous mode [ 243.925331] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 244.007442] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 244.270259] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 244.357544] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 244.443781] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 244.450762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 244.534987] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 244.542177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 244.800222] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 244.809081] team0: Port device team_slave_0 added [ 244.891565] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 244.900024] team0: Port device team_slave_1 added [ 244.982004] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 245.069370] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 245.155633] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 245.163414] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 245.172840] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 245.259265] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 245.267007] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 245.276283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready 14:51:41 executing program 1: r0 = open(&(0x7f0000001140)='.\x00', 0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lseek(r0, 0x3, 0x0) [ 246.184285] IPVS: ftp: loaded support on port[0] = 21 [ 246.446199] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.452806] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.459935] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.466584] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.475821] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 246.482317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 248.560427] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.567104] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.575267] device bridge_slave_0 entered promiscuous mode [ 248.758205] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.764840] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.773060] device bridge_slave_1 entered promiscuous mode [ 248.919941] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 249.095190] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 249.462153] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 249.632245] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 250.267991] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 250.276782] team0: Port device team_slave_0 added [ 250.405722] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 250.414587] team0: Port device team_slave_1 added [ 250.564808] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 250.665820] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 250.820937] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 250.828760] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 250.838162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 251.029708] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 251.037435] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 251.047172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready 14:51:47 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_SET_PHYS(r0, 0x4008556c, 0x0) [ 251.644192] IPVS: ftp: loaded support on port[0] = 21 [ 252.350240] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.818107] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.824699] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.831841] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.838445] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.847407] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 252.853985] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 252.952919] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 253.583177] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 253.589460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 253.597527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 254.239760] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.303612] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.310127] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.318523] device bridge_slave_0 entered promiscuous mode [ 254.488496] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.495060] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.503302] device bridge_slave_1 entered promiscuous mode [ 254.678852] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 254.831123] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 255.316491] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 255.441216] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 256.207129] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 256.215913] team0: Port device team_slave_0 added [ 256.382047] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 256.390669] team0: Port device team_slave_1 added [ 256.573699] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 256.584895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 256.594020] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 256.743823] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 256.918907] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 256.926707] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 256.936013] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 257.070972] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 257.078550] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 257.087953] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready 14:51:55 executing program 3: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{}, {0x0, 0x989680}}, 0x0) timerfd_settime(r0, 0x0, 0x0, &(0x7f0000000180)) [ 259.371375] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.378075] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.385382] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.391975] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.400972] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 259.407573] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 260.217883] IPVS: ftp: loaded support on port[0] = 21 [ 260.616476] 8021q: adding VLAN 0 to HW filter on device bond0 14:51:57 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) read(r1, &(0x7f0000000280)=""/1, 0xfffffece) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)) syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00') ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r1) syz_open_procfs(0x0, &(0x7f0000000300)='net/sockstat\x00\x03aN\x06S\x1c\x13x\xe1\x83\x86\xcaG\xeb\x84!+\xbai\xffbbO5-\x0eF\xbd7\xdc\x1f\xe6\xf4$q \x96cKH`\xca\xf5\x14{dF\xcf\xc4\x8d{\xbft\xb6\x11(\x8b\v\xa0\xbc\x9ak\xbf\xad1\x9d\xc0\xd2\x11W\xf9G\b!\xd4\xcbq\x8d\x9d\xf5\xd3\x12\xe6\x82}U\x8a\t\xd8\xc0\x87s\x02q\xe4\xe07h\xca?\x1d\x00\xe9\xe4\xf3h\x96@i q&\x0e?\x1a>\x9a\xd3\xec\x84=:sK\xe2Qnj\xdc\xb5\x00\xd9\xd5\x9d\xd4\x8d\xd1O\xf68\xees\xd4;d\xa4\xfd\xea-\x8e\xa5\xb4O\xd4\xe9\xfd\xc0 ~\xd92k\xf6\x18\xab:c\xab\xe3\a\xf6\x04?\xc67\xcf\xda4\aN\xcd\r\a\bZ\xf35\x8b\x82\x92\xf7') close(r0) [ 261.359538] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready 14:51:57 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x0) [ 261.881236] input: syz1 as /devices/virtual/input/input5 [ 261.927751] input: syz1 as /devices/virtual/input/input6 14:51:58 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x40000000002, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000280)="0bff0000000219663d", 0x9}], 0x1) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000000)=0x40, 0x4) [ 262.192778] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 262.199062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 262.207085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 14:51:58 executing program 0: syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) 14:51:58 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r2 = inotify_init1(0x0) mkdir(&(0x7f0000001a00)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) inotify_add_watch(r2, &(0x7f0000000080)='./file0\x00', 0xa400295c) shutdown(r1, 0x1) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000200)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x180, 0x0) mkdirat(r3, &(0x7f0000000100)='./file0\x00', 0x0) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r4, &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r4, &(0x7f0000000040)='./file0\x00', 0x2) 14:51:58 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000140)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000380)=0xe8) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) io_cancel(0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000300)="3819c3b57c3715d7940261bd0f99873bdaa2c49e488aa6336976fa91397f40c19fda", 0x22}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x400000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r3, 0xc0505350, &(0x7f0000000400)={{0x1, 0xc}, {0x101, 0x10000}, 0x0, 0x5, 0x1000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x8040ae9f, &(0x7f0000000080)) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 263.016212] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.032900] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. 14:51:59 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) read(r0, 0x0, 0x0) 14:51:59 executing program 0: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x2000, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x7ff, 0x6, 0x3, {0x6, @raw_data="977a053e5d8f415a45b9b70906b6aba3c4852a552b67bebab67b04a17e01c32d164526ff031902941816149dedd24a5936b0f41e8c011b92d6229db25515a0d3d84da5abdc13ec448e347493fa4912681a01891ee19a128f17a152fef3ea15d9ed849a3143ab938a1ee2ac255453bfd04523114b5dff2a473385cabf521d4deb88807d6f352e235ca7524b24cd2e7ef7a4da8010ae48d1c09ad5728cf85cc145080c86ea0ab102ea60a7018fd0bd7589d72a9cd1df581d796a77fd26e97c5928ff417b21066e96fb"}}) r1 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc0585604, &(0x7f0000000080)={0x2}) 14:51:59 executing program 0: socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000080)=0x5, 0x4) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[], 0xfffffef7) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000480)=""/240, 0xff1c}], 0x1, &(0x7f00000000c0)=""/148, 0x94}, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x10000, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) [ 263.870679] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.877321] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.885487] device bridge_slave_0 entered promiscuous mode [ 264.091439] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.098857] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.107140] device bridge_slave_1 entered promiscuous mode [ 264.385556] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 264.614238] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 265.131869] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 265.330577] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 265.449477] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 265.456553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 265.657993] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 265.665055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 266.044993] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 266.053938] team0: Port device team_slave_0 added [ 266.235061] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 266.243750] team0: Port device team_slave_1 added [ 266.374667] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 266.382009] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 266.390633] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 266.509757] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 266.516796] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 266.525626] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 266.709417] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 266.717107] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 266.726061] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 266.909918] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 266.917621] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 266.926925] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready 14:52:03 executing program 1: clock_getres(0x2, &(0x7f0000000000)) [ 267.459313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.983440] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 268.491571] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 268.498028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 268.506035] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 268.811056] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.817665] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.824923] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.831529] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.840544] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 269.063506] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.521723] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 272.594380] input: syz1 as /devices/virtual/input/input7 [ 272.612493] input: syz1 as /devices/virtual/input/input8 14:52:08 executing program 2: [ 273.316920] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.477953] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 273.644280] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 273.650468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 273.658380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 273.820353] 8021q: adding VLAN 0 to HW filter on device team0 14:52:11 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000002640)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001400)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000280)="39b91095f06273f4ac4ee1e7203f473b9eb468437f9e7f886ab0799ef33fbd3cc180f56d90a22937", 0x28}], 0x1, 0x0, 0x0, 0x40}, 0x0) recvmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001540)=""/165, 0xa5}], 0x1}}], 0x1, 0x0, 0x0) 14:52:11 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x20000, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYBLOB="cb0000008d00c0d75663108ecc0bb9fa66b6e2d2f4ec0c1acf7e06304ba3f693846158787430ff3630c9c51c50ff01b184bb57009502a07e8faef4448db3d177532f914be5a0d57f32428def2b002cf013c94a307cfb0ae22874670edd4132f234fcd6eed99ce4a91c14c65805cb531b44b3d683969c647f2f1851aa70d18758cd0dc20ce7c3883afabefb853b1e92394c5295eb5f87610944e76fc94aa80e79b21105aacf776bcd0114c2ec48cae8f03c01f621b94e6d043ea05f6381a076a70cc6ac7fffc86651913b8f82eec164"], &(0x7f0000000400)=0xd3) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000480)=@assoc_id=r1, &(0x7f00000004c0)=0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) process_vm_writev(0x0, &(0x7f0000001580)=[{&(0x7f0000000100)=""/45, 0x2d}, {&(0x7f0000000200)=""/47, 0x2f}, {&(0x7f0000000240)=""/74, 0x4a}, {&(0x7f0000000580)=""/11, 0xb}], 0x4, 0x0, 0x0, 0x0) ioctl$VIDIOC_DBG_S_REGISTER(r0, 0x4038564f, &(0x7f0000000500)={{0x3, @addr=0x1000}, 0x8, 0x4, 0xff}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000140)={[0x3, 0xfff, 0x0, 0x0, 0x7fffffff, 0x1, 0xe96, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x8001], 0x0, 0x80}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = dup3(r3, r3, 0x80000) ioctl$DRM_IOCTL_RES_CTX(r5, 0xc0106426, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}]}) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x20000, 0x0) 14:52:11 executing program 4: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x1ff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={r0, 0x50, &(0x7f0000000040)}, 0x10) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000100)=0x20, 0x4) r1 = syz_open_dev$sndmidi(&(0x7f0000000140)='/dev/snd/midiC#D#\x00', 0x4, 0x141000) r2 = dup3(r0, r0, 0x80000) ioctl$DRM_IOCTL_SET_UNIQUE(r2, 0x40106410, &(0x7f0000000200)={0x6c, &(0x7f0000000180)="6a4d1698f52edeb98e575728ccc716a6b7dc3deefacc9fcdf06db1122de5c665d30b78e4b93a1e420d6a1024a4486345abcdd619222bf74ef5317bbeabcab54c89f6bda011e4df578c4000ddbe46cac64c9d21b592df78c2099315283e50929a6c5fac0ef246d204121f389e"}) symlink(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0\x00') ioctl$RTC_EPOCH_READ(r2, 0x8008700d, &(0x7f00000002c0)) ioctl$EVIOCSCLOCKID(r2, 0x400445a0, &(0x7f0000000300)=0xfff) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000340)=r0, 0x4) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000380)) r3 = fcntl$getown(r2, 0x9) getpriority(0x0, r3) fstatfs(r2, &(0x7f00000003c0)=""/105) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000440)={0x1000}, 0x4) ioctl$SCSI_IOCTL_GET_IDLUN(r2, 0x5382, &(0x7f0000000480)) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000004c0)=[@timestamp, @window={0x3, 0x8, 0x100000001}], 0x2) fstat(r1, &(0x7f0000000500)) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000005c0), &(0x7f0000000600)=0xb) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r2, 0xc040564a, &(0x7f0000000640)={0x5, 0x0, 0x3015, 0x1ff, 0x12000, 0x9, 0x3}) arch_prctl$ARCH_SET_GS(0x1001, 0x6a6) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000680)=0x404000000, 0x4) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f00000006c0)={0x4, 0x34, 0x13, 0xf, 0x1, 0x8000, 0x0, 0x35, 0xffffffffffffffff}) write$UHID_CREATE(r2, &(0x7f00000007c0)={0x0, 'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000700)=""/167, 0xa7, 0x8000, 0x2a, 0x7, 0x9, 0x100000001}, 0x120) fanotify_mark(r0, 0x10, 0x8000002, r0, &(0x7f0000000900)='./file0\x00') ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, &(0x7f0000000bc0)={0x4, &(0x7f0000000940)=[{}, {}, {}, {}]}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000c00)={0x2, 0x2, 0x200, 0x0, 0x1f}) syz_genetlink_get_family_id$fou(&(0x7f0000000c80)='fou\x00') ppoll(&(0x7f0000000cc0)=[{r1, 0x44}], 0x1, &(0x7f0000000d00)={0x77359400}, &(0x7f0000000d40)={0x6}, 0x8) 14:52:11 executing program 5: r0 = msgget$private(0x0, 0x8015ead0b22d2615) msgctl$IPC_RMID(r0, 0x0) socketpair(0x4, 0x0, 0x2, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$alg(r1, &(0x7f0000001880)=[{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000040)="bb9c027b0297f3a419c5806768bfcbbf9504cbd593df6fe2ca6370460bdcebb376d743470ec8af", 0x27}, {&(0x7f0000000080)="f02e2fcacc8d1f94159380beeaabf49865766ed768a11e897cd2a41464292718bafc15a7ea2cc96a640645804c7448792a93b8905e73126c7c", 0x39}, {&(0x7f00000000c0)="a89116a36bf322c3f7fb36126d49c1635fc01d3fc164df4814ddbf92e5d67a7a634e80553e25aadaae8f0bef5740cc2ff8743440d01b72f13efd2697050e7a9292e89ade900f4bc7ad2e07482546d8b77343ffedb0de81f123f92bb0a4cddbd5e0deacf0a1a3ec6353ca7cdac276c50526e562acfc527cf15b42dd276ecd188b4d15b367b6da0e0309c57aa1b31e5a7b7a497a579c67bc39b7bef73621be045555da8ae3c23bf5d7620eac6aaf5addbe2a6f9191c47c5c09d93dc7875916ecb36421f9f46a404f626414a78fcbf8de66d69cc74abff61198337a", 0xda}, {&(0x7f00000001c0)="468e024ec5dff0ed135f2815fbd3197ad4137793f6f00e399f55b3a9f55ef507ab205cd542a411e078f3108214dc7e3c808295588725f568caae109c9c1a8ed770140581b6e948e6475a0e39cf9127877546ab3fedabcdccbfa9a1e9d9d681e6a4f60e2299a8d65d0132730f2b71e23d506ad9c2824439594ab0c1c13b7c387d0669996ac37459ad0c23bd800fa9ae553a4775203dfde8a1d6a851dfbf29fd4f645f2946885ee6686ca5f2af39584904b595fa5ce8d00d1d0481a65bbafe1556c60dc922642fc9c08a1adf04aa750ff76d10be7ca14a258b87b26696a6", 0xdd}, {&(0x7f00000002c0)="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", 0x1000}, {&(0x7f00000012c0)="3326af3cf439922436e8c8", 0xb}, {&(0x7f0000001300)="0ea6f970ee79d43156b44e558ef7a12191899be20f16bab7748669e6afd6fe42b3241a7d77044918904622fd112cd36b72fdeadff20327ce82b4eb30ed63b8d5431d23f3da0883868ab4", 0x4a}, {&(0x7f0000001380)="7bf25edd8c19465d0f0292de0fa7752407744e9fdd3c8ccce4f9a5886428abb11ace06e62af6", 0x26}, {&(0x7f00000013c0)}, {&(0x7f0000001400)="fe00e1e9a138ee8485e4e7b490de06b0", 0x10}], 0xa, &(0x7f0000001500)=[@iv={0x38, 0x117, 0x2, 0x24, "80daf34bac7dd6e259f52a77a49d0545e56bdebc0916f17ed15534bed1fc233eb7f9ce44"}, @iv={0x28, 0x117, 0x2, 0x14, "b58eee5b4e8b11088a0f78173b2e744a4d1c9713"}, @assoc={0x18, 0x117, 0x4, 0x8}, @iv={0x100, 0x117, 0x2, 0xe5, "e037bff029a301d30f96bd793afb5b4d96fcf07e7623f5d7c053ef9db17dd547a278c6ef19af9d00162bbdbd5b69c3a9f01018212456e437aa025a86436b2732a6d6389d3e48a738fc05d6a401e80ab276ac4dba8cb4e434221c42ef35f3511f27fce238d1b3c89202bb332c2ab877ec2272efb55c7e552d2add171a6089b9dd4f9de031401300e9caa53cc13416ab9b753f56a7616c046fe1f2ff64c8b54feeb8b6f022bcde50d4eff3ebd0a80bba6c67a8f4547a4d18b84dc130400d2037ed4d6553460f05a5bb9400a11e869a4dd9738188503b9efbc3315c34d3e2f90842d65ec43595"}, @assoc={0x18, 0x117, 0x4, 0x7fffffff}, @iv={0xa8, 0x117, 0x2, 0x91, "f9529441d067a4f9c6d6dcf9fe4a397bec9f2c05d45f5070dfc33f6efdd005d8f739ac63e7f1f627b09ee50ea66617a6088edd9d91b25758c9b18b9cf6a1245c0604be326270037d9606769d7a2c1be27984da1da8750591bb26790a7c92c302ff0310dc3af3648a69edfb0a1c06ade91c39be45238cce5999779f318c6631b4ae3fdb62a43618b104c4c2c4f9e5c7c3aa"}, @iv={0xc8, 0x117, 0x2, 0xae, "e4efeea38b16f2ffa3656e30b34e3d16b56296c74f3e599ddee2c5a0477e8556105fd5f36d5691c9fda77cd96a6c2fba3a3a4c2572d2001fbf3b1a09a54b59ac1b22fc0203e83b24e916503d5be1286dd6cc99ba998abb7c947d64276720d1918ae219ada3385564a82281d745cea242bedb1d07032bffb28cae8b638755c0f64d6877a2f9a7bf7e31edcfbf5fd353bde3da0f1e1a21c2c1937eaaf924a4b6834640e7219e553beb538bd2f66212"}, @assoc={0x18, 0x117, 0x4, 0x3}, @assoc={0x18, 0x117, 0x4, 0x4}, @op={0x18}], 0x348, 0x8000}], 0x1, 0x20000000) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001900)='/dev/sequencer\x00', 0x1, 0x0) linkat(r1, &(0x7f00000018c0)='./file0\x00', r2, &(0x7f0000001940)='./file0\x00', 0x400) ioctl$KDSETLED(r2, 0x4b32, 0x800) r3 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f00000019c0)={{0x0, 0x6, 0x3, 0x5, 'syz0\x00', 0x6}, 0x2, 0x40, 0xffffffff, r3, 0x5, 0x6c22ef29, 'syz1\x00', &(0x7f0000001980)=[',\x00', ']&(]J\x00', '/dev/sequencer\x00', '\x00', '/dev/sequencer\x00'], 0x27, [], [0x1, 0x7, 0x40, 0x8]}) sysfs$2(0x2, 0x3, &(0x7f0000001b00)=""/118) setsockopt$IP_VS_SO_SET_DEL(r2, 0x0, 0x484, &(0x7f0000001b80)={0x7f, @broadcast, 0x4e24, 0x0, 'lblc\x00', 0x1, 0x10000, 0x13}, 0x2c) msgsnd(r0, &(0x7f0000001bc0)={0x3, "846ca52c06bee43caa52fb890ecd4d9414ccc1d6da64bf3c88daae585553133e9446353b513a8ce92536a91a16c8610491d24aadcd84bb36eddc4f6fa20033c332e28e9aaaf2fc05a5d67f0e51db5cbe6a885db6baf0139e4a57a5895dde0867427e145a673b80d16a1e3ecdfbad3a4522f68fd7d369d9cc8f4cc898ed0b06118ba5e766c1ceb98873bcc05e32034cb109b1d538efcbb11fdd81b4bb25e62fa4a7dbdcc9f39ea49f07a3ebf2ff12113b5d19fec61ffff73e03411fe1a3bcf3a3847cca0f77bc45b21bc1dedc"}, 0xd4, 0x800) umount2(&(0x7f0000001cc0)='./file0\x00', 0x1) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000001d40)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0x120, 0x120, 0x210, 0x0, 0x358, 0x358, 0x358, 0x358, 0x358, 0x358, 0x4, &(0x7f0000001d00), {[{{@ipv6={@empty, @dev={0xfe, 0x80, [], 0x15}, [0x0, 0xff, 0xff000000, 0xffffff00], [0xffffff00, 0x0, 0xffffff00], 'eql\x00', 'veth0\x00', {0xff}, {0xff}, 0x0, 0x1ff, 0x0, 0x1}, 0x0, 0xf0, 0x120, 0x0, {}, [@common=@inet=@dscp={0x28, 'dscp\x00', 0x0, {0x2, 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x800000000000, 0x80, 0x3f, 0x2}}}, {{@ipv6={@mcast1, @remote, [0xff000000, 0xff, 0xffffffff], [0x0, 0xffffffff, 0xffffffff, 0xffffffff], 'bpq0\x00', 'ipddp0\x00', {0xff}, {0xff}, 0xc, 0x30, 0x2, 0x2}, 0x0, 0xc8, 0xf0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@inet=@l2tp={0x30, 'l2tp\x00', 0x0, {0x4, 0x4, 0x3, 0x1}}, @common=@hl={0x28, 'hl\x00', 0x0, {0x1}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x81}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000002240)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000002300)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000022c0)={&(0x7f0000002280)={0x34, r4, 0x601, 0x70bd26, 0x25dfdbfe, {{}, 0x0, 0x4101, 0x0, {0x18, 0x17, {0x16, 0x7f, @l2={'ib', 0x3a, 'ip6tnl0\x00'}}}}, ["", "", ""]}, 0x34}}, 0x24000080) ioctl$VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000002340)={0xc, @sliced={0xd, [0x7, 0xbb, 0x2, 0x5, 0x5, 0x10001, 0x81, 0x3, 0x1b05, 0xe2e, 0x9, 0x9, 0x1, 0x0, 0x80000000, 0x6, 0x7, 0x8, 0x3, 0x65b, 0x6, 0x6, 0x4, 0x94, 0x81, 0xa0, 0x0, 0x9, 0x20, 0xfffffffffffffff7, 0x8, 0x335, 0x1980000000000, 0xffffffffffff8001, 0x7, 0x2, 0x5, 0xa8, 0x40, 0x1, 0xfffffffffffffff8, 0x1f, 0x5, 0x80, 0xfffffffffffffffd, 0x9, 0x4, 0x9], 0x1000}}) fsetxattr$security_smack_entry(r1, &(0x7f0000002440)='security.SMACK64IPOUT\x00', &(0x7f0000002480)='keyring\xbfem0cpuset^-trusted\x00', 0x1b, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f00000024c0)={0x0, @speck128, 0x0, "88d54ba58de6e8bd"}) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000002500), &(0x7f0000002540)=0x4) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000002580)={0x0, 0x102, 0x7, {0x1, 0x0, 0x3, 0xffffffffffff8001}}) ioctl$SG_GET_COMMAND_Q(r2, 0x2270, &(0x7f00000025c0)) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002640)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000002840)={&(0x7f0000002600)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002800)={&(0x7f0000002680)={0x14c, r5, 0x410, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'eql\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x80}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xca}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x84, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'irlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xfffffffffffffff7}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x12}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x1f}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = syz_genetlink_get_family_id$fou(&(0x7f00000028c0)='fou\x00') sendmsg$FOU_CMD_GET(r1, &(0x7f00000029c0)={&(0x7f0000002880)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002980)={&(0x7f0000002900)={0x4c, r6, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_TYPE={0x8}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0xc}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e20}, @FOU_ATTR_AF={0x8, 0x2, 0x2}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e23}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) ioctl$KVM_ASSIGN_SET_INTX_MASK(r2, 0x4040aea4, &(0x7f0000002a00)={0x3ff, 0x2, 0x1f, 0x7, 0x8}) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000002a40)={0x0, @in={{0x2, 0x4e24, @multicast1}}, 0x9, 0x6, 0x7, 0x10000}, &(0x7f0000002b00)=0x98) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000002b40)={r7, 0x1}, &(0x7f0000002b80)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000002bc0)={r8, 0x7ff, 0x6, 0xe41}, 0x10) 14:52:11 executing program 2: r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f00000004c0)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000500)="c1bbf9010000000000881ee4ac141411e0", 0x11}], 0x1}, 0x0) 14:52:11 executing program 1: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='(mime_type]\x00') r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x800, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r1, 0x40045730, &(0x7f0000000080)=0x4) [ 275.100628] ================================================================== [ 275.108150] BUG: KMSAN: uninit-value in __neigh_create+0x21fe/0x2630 [ 275.114676] CPU: 1 PID: 7615 Comm: syz-executor2 Not tainted 4.20.0-rc7+ #3 [ 275.121792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 275.131157] Call Trace: [ 275.133775] dump_stack+0x1c9/0x220 [ 275.137503] kmsan_report+0x12d/0x290 [ 275.141341] __msan_warning+0x76/0xc0 [ 275.145198] __neigh_create+0x21fe/0x2630 [ 275.149401] ? is_console_locked+0x29/0x50 [ 275.153716] ip_finish_output2+0xa4f/0x1880 [ 275.158100] ip_finish_output+0xd40/0xfe0 [ 275.162298] ip_output+0x559/0x620 [ 275.165880] ? ip_mc_finish_output+0x3b0/0x3b0 [ 275.170493] ? ip_finish_output+0xfe0/0xfe0 [ 275.174843] ip_local_out+0x164/0x1d0 [ 275.178687] iptunnel_xmit+0x8d3/0xe20 [ 275.182665] ip_tunnel_xmit+0x378c/0x3b50 [ 275.186938] ipgre_xmit+0xddc/0xec0 [ 275.190635] ? ipgre_close+0x230/0x230 [ 275.194577] dev_hard_start_xmit+0x627/0xc80 [ 275.199037] __dev_queue_xmit+0x3173/0x3cf0 [ 275.203415] dev_queue_xmit+0x4b/0x60 [ 275.207231] ? __netdev_pick_tx+0x1290/0x1290 [ 275.211735] packet_sendmsg+0x7cbd/0x9200 [ 275.215909] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 275.221463] ? rw_copy_check_uvector+0x149/0x6b0 [ 275.226241] ? __msan_poison_alloca+0x1e0/0x270 [ 275.230941] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 275.236317] ? aa_sk_perm+0x7ab/0x9e0 [ 275.240211] ___sys_sendmsg+0xdbc/0x11d0 [ 275.244299] ? compat_packet_setsockopt+0x360/0x360 [ 275.249355] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 275.254760] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 275.260134] ? __fget_light+0x714/0x780 [ 275.264196] __se_sys_sendmsg+0x305/0x460 [ 275.268402] __x64_sys_sendmsg+0x4a/0x70 [ 275.272503] do_syscall_64+0xcd/0x110 [ 275.276324] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 275.281518] RIP: 0033:0x457669 [ 275.284726] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 275.303677] RSP: 002b:00007f767734ec78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 275.311414] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457669 [ 275.318716] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000003 [ 275.325995] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 275.333267] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f767734f6d4 [ 275.340558] R13: 00000000004c442e R14: 00000000004d73f8 R15: 00000000ffffffff [ 275.347857] [ 275.349483] Uninit was created at: [ 275.353030] No stack [ 275.355348] ================================================================== [ 275.362705] Disabling lock debugging due to kernel taint [ 275.368156] Kernel panic - not syncing: panic_on_warn set ... [ 275.374055] CPU: 1 PID: 7615 Comm: syz-executor2 Tainted: G B 4.20.0-rc7+ #3 [ 275.382555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 275.391936] Call Trace: [ 275.394545] dump_stack+0x1c9/0x220 [ 275.398192] panic+0x3f0/0x98f [ 275.401437] kmsan_report+0x290/0x290 [ 275.405293] __msan_warning+0x76/0xc0 [ 275.409129] __neigh_create+0x21fe/0x2630 [ 275.413325] ? is_console_locked+0x29/0x50 [ 275.417623] ip_finish_output2+0xa4f/0x1880 [ 275.421996] ip_finish_output+0xd40/0xfe0 [ 275.426205] ip_output+0x559/0x620 [ 275.429768] ? ip_mc_finish_output+0x3b0/0x3b0 [ 275.434357] ? ip_finish_output+0xfe0/0xfe0 [ 275.438687] ip_local_out+0x164/0x1d0 [ 275.442521] iptunnel_xmit+0x8d3/0xe20 [ 275.446464] ip_tunnel_xmit+0x378c/0x3b50 [ 275.450676] ipgre_xmit+0xddc/0xec0 [ 275.454338] ? ipgre_close+0x230/0x230 [ 275.458270] dev_hard_start_xmit+0x627/0xc80 [ 275.462728] __dev_queue_xmit+0x3173/0x3cf0 [ 275.467108] dev_queue_xmit+0x4b/0x60 [ 275.470916] ? __netdev_pick_tx+0x1290/0x1290 [ 275.475415] packet_sendmsg+0x7cbd/0x9200 [ 275.479604] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 275.485077] ? rw_copy_check_uvector+0x149/0x6b0 [ 275.489858] ? __msan_poison_alloca+0x1e0/0x270 [ 275.494548] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 275.499915] ? aa_sk_perm+0x7ab/0x9e0 [ 275.503789] ___sys_sendmsg+0xdbc/0x11d0 [ 275.507872] ? compat_packet_setsockopt+0x360/0x360 [ 275.512925] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 275.518321] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 275.523698] ? __fget_light+0x714/0x780 [ 275.527714] __se_sys_sendmsg+0x305/0x460 [ 275.531908] __x64_sys_sendmsg+0x4a/0x70 [ 275.535979] do_syscall_64+0xcd/0x110 [ 275.539802] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 275.545014] RIP: 0033:0x457669 [ 275.548218] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 275.567127] RSP: 002b:00007f767734ec78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 275.574836] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457669 [ 275.582107] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000003 [ 275.589379] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 275.596654] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f767734f6d4 [ 275.603935] R13: 00000000004c442e R14: 00000000004d73f8 R15: 00000000ffffffff [ 275.612168] Kernel Offset: disabled [ 275.615795] Rebooting in 86400 seconds..