Warning: Permanently added '10.128.10.46' (ECDSA) to the list of known hosts. 2018/12/11 18:03:08 fuzzer started 2018/12/11 18:03:13 dialing manager at 10.128.0.26:41935 2018/12/11 18:03:13 syscalls: 1 2018/12/11 18:03:13 code coverage: enabled 2018/12/11 18:03:13 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/12/11 18:03:13 setuid sandbox: enabled 2018/12/11 18:03:13 namespace sandbox: enabled 2018/12/11 18:03:13 Android sandbox: /sys/fs/selinux/policy does not exist 2018/12/11 18:03:13 fault injection: enabled 2018/12/11 18:03:13 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/12/11 18:03:13 net packet injection: enabled 2018/12/11 18:03:13 net device setup: enabled 18:06:19 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) clone(0x1ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fcntl$getown(0xffffffffffffffff, 0x9) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) clone(0x2502001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) recvfrom(r1, 0x0, 0x0, 0x0, &(0x7f0000001700)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, 0x0) syzkaller login: [ 280.597754] IPVS: ftp: loaded support on port[0] = 21 [ 282.960189] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.966912] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.976086] device bridge_slave_0 entered promiscuous mode [ 283.114580] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.121176] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.130347] device bridge_slave_1 entered promiscuous mode [ 283.267693] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 283.404509] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 283.832466] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 283.977839] bond0: Enslaving bond_slave_1 as an active interface with an up link 18:06:24 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000240)="0a5c2d023c126285718070") r1 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x8, 0x23, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x1, 0xfb, &(0x7f0000002880)=""/251}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r1, 0x50, &(0x7f0000000080)={0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180)=r2, 0x4) [ 284.345684] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 284.352958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 284.898700] IPVS: ftp: loaded support on port[0] = 21 [ 284.986321] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 284.995641] team0: Port device team_slave_0 added [ 285.151511] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 285.160880] team0: Port device team_slave_1 added [ 285.370318] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 285.648348] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 285.655728] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 285.665495] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 285.936848] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 285.944838] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 285.954635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 286.135861] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 286.143905] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 286.153759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 288.706694] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.713453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 288.720733] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.727491] bridge0: port 1(bridge_slave_0) entered forwarding state [ 288.737553] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 288.752726] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 288.964141] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.970724] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.979862] device bridge_slave_0 entered promiscuous mode [ 289.192218] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.198822] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.207963] device bridge_slave_1 entered promiscuous mode [ 289.344941] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 289.546370] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready 18:06:29 executing program 2: syz_open_dev$loop(&(0x7f0000003640)='/dev/loop#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x24180) read(r0, &(0x7f0000000200)=""/30, 0xfffffe80) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x0) [ 290.382129] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 290.676531] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 290.942678] IPVS: ftp: loaded support on port[0] = 21 [ 290.971582] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 290.978819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 291.329015] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 291.337025] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 292.078638] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 292.087839] team0: Port device team_slave_0 added [ 292.384002] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 292.393321] team0: Port device team_slave_1 added [ 292.712713] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 292.723855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 292.733252] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 293.052493] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 293.059595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 293.069153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 293.281256] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 293.289261] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 293.298865] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 293.438643] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 293.446641] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 293.456261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 295.894739] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.901336] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.910412] device bridge_slave_0 entered promiscuous mode [ 296.214772] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.221376] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.230627] device bridge_slave_1 entered promiscuous mode [ 296.520422] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 296.699121] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.705887] bridge0: port 2(bridge_slave_1) entered forwarding state [ 296.713347] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.719953] bridge0: port 1(bridge_slave_0) entered forwarding state [ 296.729959] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 296.830297] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 297.466084] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 297.546980] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 297.706940] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 297.863538] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 297.870751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 298.019848] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 298.027159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 18:06:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000280)={0x0, 0x0, [0x4b564d03, 0x1]}) ioctl$KVM_GET_NESTED_STATE(r3, 0x8080aea1, &(0x7f0000000300)={0x0, 0x0, 0x2080}) [ 298.932831] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 298.942202] team0: Port device team_slave_0 added [ 299.321204] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 299.330369] team0: Port device team_slave_1 added [ 299.373641] IPVS: ftp: loaded support on port[0] = 21 [ 299.761682] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 299.769104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 299.778789] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 300.160070] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 300.167618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 300.177252] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 300.219910] 8021q: adding VLAN 0 to HW filter on device bond0 [ 300.505227] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 300.513271] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 300.523120] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 300.824375] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 300.832744] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 300.842215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 301.472179] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 302.787749] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 302.794543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 302.803304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 304.139040] 8021q: adding VLAN 0 to HW filter on device team0 [ 304.505676] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.512409] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.519669] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.526442] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.536504] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 304.813147] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 305.388516] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.395513] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.404588] device bridge_slave_0 entered promiscuous mode [ 305.710469] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.717366] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.726627] device bridge_slave_1 entered promiscuous mode [ 306.149835] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 306.495443] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 307.596396] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 307.944579] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 308.286487] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 308.293821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 308.649906] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 308.657229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 18:06:49 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x2100) close(r0) [ 310.026077] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 310.035278] team0: Port device team_slave_0 added [ 310.432100] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 310.441157] team0: Port device team_slave_1 added [ 310.812429] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 310.819661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 310.830237] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 310.933847] IPVS: ftp: loaded support on port[0] = 21 [ 311.263004] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 311.270329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 311.280207] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 311.446366] 8021q: adding VLAN 0 to HW filter on device bond0 [ 311.600491] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 311.608844] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 311.618555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 312.058453] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 312.066390] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 312.076321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready 18:06:52 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x4001) io_setup(0x1002, &(0x7f0000000040)=0x0) r3 = creat(&(0x7f00000004c0)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x4000) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x420, 0x70bd2d, 0x25dfdbff, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x7}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) ftruncate(r3, 0x8008202) write$evdev(r3, &(0x7f0000000000)=[{{0x0, 0x2710}}, {{0x77359400}}, {}], 0xfffffffffffffdc6) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7}]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 18:06:53 executing program 0: socketpair$unix(0x1, 0x80000000000005, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0xc, &(0x7f0000000080)=0x0) r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) sendfile(r3, r1, &(0x7f0000000000), 0x3) r4 = dup2(r1, r3) io_submit(r2, 0x1ffffffffffffe76, &(0x7f0000000b00)=[&(0x7f00000002c0)={0x7fffffffefff, 0x4, 0x70500000000000, 0x80000000005, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff9c}]) recvmmsg(r1, &(0x7f00000014c0)=[{{&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f00000004c0), 0x0, &(0x7f0000000540)=""/131, 0x83}}], 0x1, 0x0, &(0x7f00000015c0)={0x77359400}) dup2(r4, r0) [ 313.142781] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready 18:06:53 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f00000001c0)) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0], 0x9, 0x5, 0x3, 0x1}) r1 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x200, 0x0) ioctl(r1, 0x401006bf, &(0x7f0000000280)) 18:06:54 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x22, 0x1, 0x0, "0f348062d210669f0e613600fa33fac1d718583a70ea62b24d0a0e2e4065af66"}) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0xc4ed, [], &(0x7f00000000c0)}) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000080)={0x1, 0xd008f, "e59219d4654d1c490b7d5d279d6db0bf3bb20ae4c4a53c86", {0x9, 0x7fff}, 0x4}) 18:06:54 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x402, 0x0) write$sndseq(r0, &(0x7f0000000340)=[{0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {0x81, 0x1}, {}, @control={0x8}}], 0x30) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x306, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000004) [ 314.980470] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 314.987348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 314.995870] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 18:06:55 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x2, 0x200) ioctl$KVM_TPR_ACCESS_REPORTING(r0, 0xc028ae92, &(0x7f0000000180)={0x3651}) r1 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000040)={0x3, 0x0, 0x1, 0x1, 0x200}) lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='security.capability\x00', &(0x7f00000000c0)=@v1={0x1000000, [{0x80000000, 0xffffffffffff8993}]}, 0xc, 0x2) 18:06:55 executing program 0: syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$SG_GET_KEEP_ORPHAN(r1, 0x2288, &(0x7f0000000000)) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000040)={0x1, 0x0, &(0x7f0000ffa000/0x4000)=nil}) pselect6(0x40, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)={0x9}, &(0x7f00000003c0)={0x0, 0x989680}, &(0x7f0000000440)={&(0x7f0000000400), 0x8}) 18:06:56 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RSTATFS(r1, &(0x7f00000000c0)={0x43, 0x9, 0x2, {0x6, 0x2, 0x5, 0x1, 0x3f, 0x1, 0x8, 0x1f}}, 0x43) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket(0xa, 0x1, 0x0) getsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000040), &(0x7f0000013000)=0x4) mmap(&(0x7f0000000000/0xfe3000)=nil, 0xfe3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) close(r0) [ 316.767871] 8021q: adding VLAN 0 to HW filter on device team0 [ 316.797778] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.804510] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.811774] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.818557] bridge0: port 1(bridge_slave_0) entered forwarding state [ 316.828981] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 317.015796] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 317.731416] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.738173] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.747599] device bridge_slave_0 entered promiscuous mode [ 318.098319] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.105210] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.114292] device bridge_slave_1 entered promiscuous mode [ 318.487966] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 318.758471] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 319.829709] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 320.151244] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 320.181127] 8021q: adding VLAN 0 to HW filter on device bond0 [ 320.372675] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 320.379801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 320.656307] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 320.663608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 321.471574] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 321.480728] team0: Port device team_slave_0 added [ 321.563312] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 321.815652] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 321.824683] team0: Port device team_slave_1 added [ 322.147079] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 322.155611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 322.165264] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 322.492164] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 322.499329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 322.508674] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 322.749062] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 322.755707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 322.764182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 322.814505] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 322.824079] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 322.833821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 323.107991] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 323.116047] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 323.125588] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 323.654735] 8021q: adding VLAN 0 to HW filter on device team0 18:07:04 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x24, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], 0x0}, 0x48) [ 326.193116] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.199767] bridge0: port 2(bridge_slave_1) entered forwarding state [ 326.207134] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.213799] bridge0: port 1(bridge_slave_0) entered forwarding state [ 326.223405] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 326.230070] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 328.325396] 8021q: adding VLAN 0 to HW filter on device bond0 18:07:08 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) unshare(0x600) r1 = socket$inet6(0xa, 0x400000000000803, 0x800000000003) ioctl(r1, 0x400001000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000000)={r3, 0x0, 0x21000000000003}) [ 328.867318] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. [ 329.109176] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 329.617495] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 329.624159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 329.632720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 330.149255] 8021q: adding VLAN 0 to HW filter on device team0 [ 333.149524] 8021q: adding VLAN 0 to HW filter on device bond0 18:07:13 executing program 3: syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='fdinfo/3\x00') pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) eventfd(0x1) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$xdp(0x2c, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 333.630577] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 333.873027] hrtimer: interrupt took 55042 ns [ 334.121688] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 334.128375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 334.136891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 334.832790] 8021q: adding VLAN 0 to HW filter on device team0 18:07:16 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/wireless\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000147, 0x0) 18:07:16 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RSTATFS(r1, &(0x7f00000000c0)={0x43, 0x9, 0x2, {0x6, 0x2, 0x5, 0x1, 0x3f, 0x1, 0x8, 0x1f}}, 0x43) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket(0xa, 0x1, 0x0) getsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000040), &(0x7f0000013000)=0x4) mmap(&(0x7f0000000000/0xfe3000)=nil, 0xfe3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) close(r0) 18:07:16 executing program 5: r0 = request_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='selinux\x00', 0xfffffffffffffffe) r1 = add_key(&(0x7f00000000c0)='ceph\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)="1ba4d9b6dafbd48ef9160717a31ccce378ab854c7a34da9811365d84bdac924a76e8cd5fc429d7f895ab84eef958db00a2a1c184765ed84847fc98a07bcee91d547c988f694692df142c40233a9ea6894cc050c202646776d7f5f8b95067272d6f07aa2f5b90d3147ca4093f6d7ea94e6bd0a218633d681a4bfb9c34296dbc45ad98d6a61258d1f9492efe9c1972a31c58be5f37b8959097e03ea713f29e660f1913df3c0e8c0efa6a2fcee08b17335987df7eebb568d2458667ee7f266000e1d99e387da47fcde26f22e3a933d7187a572444", 0xd3, 0x0) keyctl$link(0x8, r0, r1) r2 = syz_open_dev$sndpcmp(&(0x7f00000004c0)='/dev/snd/pcmC#D#p\x00', 0x1ff, 0x0) connect$rds(r2, &(0x7f0000000500)={0x2, 0x4e21, @local}, 0x10) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000600)={0x0, 0x0, 0x0}, &(0x7f0000000640)=0xc) getresgid(&(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)=0x0) setresgid(r3, r5, r6) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r2, &(0x7f0000000740)={0x1}) keyctl$setperm(0x5, r0, 0x40210) ioctl$ASHMEM_GET_PIN_STATUS(r2, 0x7709, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000780)=@fragment={0x29, 0x0, 0x10001, 0x9, 0x0, 0x44b, 0x65}, 0x8) ptrace$setregs(0xd, r4, 0x9, &(0x7f00000007c0)="13ffe2de8aea374168e8e92880fb6edb8e1823c2cadc329d641937f26774106a970ba67c56d5a22f9b") fstat(r2, &(0x7f0000000800)) ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0x0) ioctl$RTC_UIE_ON(r2, 0x7003) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000880)='/dev/zero\x00', 0x200040, 0x0) syz_kvm_setup_cpu$x86(r2, r7, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000940)=[@text16={0x10, &(0x7f00000008c0)="3e2e0f009b0a00640fc7ab530066b9800000c00f326635000100000f3066b97402000066b8f4ffffff66baffffffff0f300f2385b8d1000f00d00f01cb660f07660ff8950001b868008ec0", 0x4b}], 0x1, 0x2, &(0x7f0000000980)=[@cr0={0x0, 0x40000}, @dstype3={0x7, 0xe}], 0x2) pivot_root(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00)='./file0\x00') getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, &(0x7f0000000a40)={0x0, @in={{0x2, 0x4e23, @multicast2}}}, &(0x7f0000000b00)=0x84) getsockopt$inet_sctp6_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f0000000b40)={r8, 0x8}, &(0x7f0000000b80)=0x8) getsockname$tipc(r2, &(0x7f0000000bc0)=@name, &(0x7f0000000c00)=0x10) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f0000000c40)={r7, 0x7, 0x9, "2e2c511b872a40b327961d699e1995e41714c66736506a514739db79cae6f4e783b82d4fa5e60f435b5423ff31d6f99bc38837805c4e4f6a0f072eddd14e969e7fea770dec9d786a"}) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000d00)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000cc0)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r7, &(0x7f0000000d40)={0x14, 0x88, 0xfa00, {r9, 0x1c, 0x0, @in6={0xa, 0x4e21, 0x6, @mcast1}}}, 0x90) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r7, 0x84, 0x20, &(0x7f0000000e00)=0x800, 0x4) uselib(&(0x7f0000000e40)='./file0\x00') getsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f0000000e80), 0x4) socket$tipc(0x1e, 0x2, 0x0) 18:07:16 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) unshare(0x600) lseek(r0, 0x0, 0x0) 18:07:16 executing program 1: socketpair$unix(0x1, 0x100000001, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @loopback}, 0x10) 18:07:16 executing program 3: syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='fdinfo/3\x00') pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) eventfd(0x1) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$xdp(0x2c, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 18:07:17 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000001c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, 0x0) 18:07:17 executing program 4: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r0, 0x4, 0x2000) 18:07:17 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={[], [], @remote}}, 0x1c) 18:07:17 executing program 0: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={0xffffffffffffffff, 0x0, &(0x7f0000000280)}, 0x20) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$sock_ifreq(r0, 0x89f6, &(0x7f0000000180)={'sit0\x00', @ifru_flags}) 18:07:17 executing program 2: write$9p(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000003c0)='asymmetric\x00', &(0x7f0000001ffb)={"050500"}, &(0x7f0000001fee)="520972637374e363257367725665783a4465", 0x0) syz_genetlink_get_family_id$ipvs(0x0) 18:07:17 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup2(r0, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setrlimit(0x7, &(0x7f0000a9cff8)) syz_execute_func(&(0x7f0000000080)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3196f") socket$packet(0x11, 0x3, 0x300) exit_group(0x0) write$P9_RXATTRCREATE(r2, 0x0, 0x0) 18:07:17 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f000060cff8)='/', 0x0, 0x0) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x8) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) stat(0x0, 0x0) 18:07:17 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, 0x0) [ 338.293418] IPVS: ftp: loaded support on port[0] = 21 [ 339.689851] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.696550] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.705001] device bridge_slave_0 entered promiscuous mode [ 339.782790] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.789322] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.797765] device bridge_slave_1 entered promiscuous mode [ 339.876269] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 339.952767] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 340.187353] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 340.268870] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 340.350044] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 340.357280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 340.434343] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 340.441362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 340.674877] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 340.683716] team0: Port device team_slave_0 added [ 340.760307] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 340.768524] team0: Port device team_slave_1 added [ 340.846598] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 340.929902] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 341.006968] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 341.014471] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 341.024047] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 341.102669] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 341.110056] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 341.119587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 341.978320] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.984864] bridge0: port 2(bridge_slave_1) entered forwarding state [ 341.991765] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.998450] bridge0: port 1(bridge_slave_0) entered forwarding state [ 342.006889] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 342.362204] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 345.159441] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.454546] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 345.742426] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 345.748740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 345.757509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 346.047636] 8021q: adding VLAN 0 to HW filter on device team0 18:07:28 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002c00)=""/125, 0x7d}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='syscall\x00') preadv(r1, &(0x7f00000017c0), 0x3ba, 0x0) 18:07:28 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendmmsg(r0, &(0x7f0000007240)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000940)="d0", 0x1}], 0x1}, 0x10000}], 0x1, 0x0) sendmmsg(r0, &(0x7f0000008e40)=[{{0x0, 0x0, &(0x7f0000008c40)=[{&(0x7f0000007980)="afa279b88ba87591ae67bc9842b6e0ff9e75a0ba19ee21e38ebe46624a16c5bf10b7674f8c55ceea7e6134eef64db71b287eb00dde009d95f720b509af05bb065ef6d51d3984ded8174739a2a8b9919378e4826a64cbfdfdafbf6b0f496c62f4485dfa2f704e0ad32daf02668a8fbad6cf3cbfeeff94ffce82a158bd2fc63d11119a18412f3b28d9d772b692a84e7d2c8adf3f2a7042726c5c711a8bcf056596205460492f5bf3aea8cb3d98a4a194aa02a33fa91c8f186c18feb082eada8f35678a8207f998d9f46bf51bb45c36640ab6c905a0bafe491a14ab66fccd06781be7d58153221f78d2bb100e1042178e7a2fd5364302929469b938510ac98a165fba1d3d586f7533511d9503bc2c020f5e7b5c4332e294d1c44885786d580ada9a227c6badf9f9960b1a12cbd4a19bdbd527a9ba86fdfe66b37fcd828424aeff7796e09472fd92ed74832c0e0d0f09bcad959ca65b848ffc8cb4cb461141419b11e8b2a8017f803d425553fab8160c0e1aad9554e579f775714d7c73043dd08526aca94974b84b6b72d8af4a7b31324341bdf1501e2d5f13034efa9a81f93e6d7929aa4f5b98f8d33fb624a623de906728d78ca05318a0e41e9f57c85d0623150564a057c987023c675243a57b5b732a1ba2a5b7b08529fe8a446335cffeac6e07c409442c3080eebd528011f5334357064f8952d14dcfdbfb33671fb7e19cae1c32ac20e857e4e674b909701c541e59e9eac285e0504985be61693f2e6b117796f63c94aa151a1807ee6bb597cac2dc0e0a109d34463c45318d3c1cd1a68a4d24456ec8f5eee48b315cc5c7677e2a4e56bda077567d1155db814ed4b668ae0e6b500e543103f921aaf3706488c822413a87896dc1f0a064cb019cb545cedccb1ed114e4e03b47e1f4d3826b6a52f4ecaea55db7277455e163928db9f981ed38a138930e8aa30c372b4a879c423a8bd2e55dab14b42796f683ff2134ef8f4185b086d1bc10a1237412cea2bd52ecc0f9e441238f575d87d0be08aa00d44199843bb5bbe7e7ebad02d6fcfbf5dd1e7cd8f9e60333b46ea2ec4b2e6c0ce1fa98d9785ab0d2822c417e83c77100c4597546b1c072563d776f50fe736a8c5bf7e453c0736cca7e79293ef0b37d1d9b65d01b2d60fcdc4fa95e352db35568829d43dec4e48c63c053be0f00429c4d5ee934057cf97cb2cb88834e456aadd091f2948a0973fbf8e6cbb0627371850a00b8780d8ac8934137c5d5bd692f6bdebc93a3bc63b6f33666bb87ac7eddcc7057e0aab2f3c78c9be2dfa2fa61c155079019516b828e39cfb5ba61c96490a19ac9023d9bcd3ddeee931a9f98ebf79099de84d69dbb9705ad943564d84bd7fada4afc9e5b3346dab736071795c28f42a6fa2372e7a68e8a9747a3c9f9a86e5326320684da422c06da1546ffb150d0977cef1c8bf602a3365fcbad42e2a36fd58fea7162c1b005fa03eb23105f1eda8fcf06e76e7aaa51183bdd3fb4d7a24118e5e7ce21fff6662b1c4fa778b48254e94c1c48d4d7df37a4290ccf981b87aec54a9bc5f54a2d4d365db0902fba436861542efa985137291a6409af6ef7074edbc925af4b7e74ccf8dc492f516ec4dcb0b37611300e04c75d3e5652deddacd4e403a97f70b2c77354277da300b839bbf99d16e12dcef862908289c76bd4562789bc85bb68a7292306904cc7103d4bb36457027811a9ebdb9210f28c3b4a8b5c5b196101c510244404c79d359930d9e88d3fa927c7bc2d472bbbf27de90b6845faadf8ef0f208c0346b20c9d842c8c35284ca71f3f2613d53b907e217d2afbd76ddab67aee7054aeb7ea8662a3c6e2c4a4c51f2bf7124882c10aa50f97232dc098e2bcc7e153bccee17098651072e04d42ed2680535cb4b24e1307fdaa4eb17d49c66a9921cdbee36a5997afbce34af3baa645349f6da4de1fb889f10eb282b56826ada4414911a97f57dc79ff6c6a71db36c109030cf2e0967756726e412241fa4c18462d5e6e00a3ace8b4870c90013d67a1ed5d349653d6147b3cb201fbd60858874be6aac874145b0a0d15b03e04f81aae1a45711a251ced5bfd2a83aed0bd64107a859c727f1dc9d6c74aa579f73a18ac04bd29c6187b6b8325e1170ea658e41f53d9bb84bae30d9a94774acdbd4c8ac6495b92aec6d3fc6c6d66e9bc2dd0f14fe5ba0d64f2c4ceaa1db969228c704c5e8d18a9075a5c4c1feb3aef9ddc9eefc1bd872a592239f711bca45ab26f6693052eaf87e147662913615eb8e1337474f4ab5b9589ba8c635907aefa1f48fa39e2f58f2470f5423606da915f531f83a418a8f650729fe20bdc9a502c8d11846f0d1b1feb9b29e45d969050a2ae8357c204e208f9731efce61fce27f0960b8d1795ec1e0d951329b07b80cf0eba564cd82c96378b82ccb187a5aaf7f6695d2a37521f9c1ed3e2d81d0b78041dff19ce1dcafa99b93e1301651dac6cee605f84347641898a63cfbd731cb5a4f77a5efbe4981cb6859d1a3ff90e84dd1bd208446fc64d22d11d153c6dd40668ce725679d2462ef185b5b55620c37cabb29d2085d269618fa6e9f702b65be66845c57ea5d24d249d3ced0b21fa81b81c14d72a1b4816897ab47284de2c75fbc80d9fac1c5f83154e3b8b28f973c6988eebee09801b9434d26e6bc44b0a84d731a9d18d22b1b4d065e4d228dfc998aaa07324f7e4a3d00fbb3ed234aa871a73bd7eed26f44037ee6edbba7c9a7dc2a60330f0f0717e43583ebdabc13104e3c91dd86ee0d2f8b1b6b9dcf0006dc1603763190274fc910ccb04dc69a1853b79b35d79abd183d7db9368aec75239b5970be56f8fda4f8f26cd068b99d58a58d78bee8e305bac9d7ba39ff88b077ba627a3c235f8b7c59cd1f6514dd8742fba35c185d9f1db60cbbbadf7ea453170467aeab6a7d36a7128ed8ba00caad1a2b21dee0059835a85964deffd012506c1d97da68be23d009752d70a4e64546977a51f63d02abb300f3a9bef44ff6e559179c1ed4595caec37e3a9dea8fd025e2466e12d824a18befbcf014f4136603092f6283e40543642d9813ecc7a6d3e2f74ffb5d3993d4fc3e6a561573914610c2cbc44bfce6fee54bafa6fe676502321a5adde215fe564646465299eedc87838248b0b91c33c206919b4ee41da2ad23336739cf197b7398519153a021b777b4bad61d5cae0ea8b304191f2fb7f03d8acb0cf46e8ad93f3e69d54712fc679aa96bba926fe7c859abe73418a99b0340cb4b8f726f7b27c8b448ff2330981d3198afbd4652cb8ee361b13b2ea57cccbcc1e4f7bbf7f08b6c0a1873b228644df1fac37c05f89dc61b9078ffbd7d77961d0e379dd8f229d054038e42f6f8e8feb7f94628529fd7ea332ff9fd688bdc06214abc3667f2abbb8ec44be7d129a635db3597fe8e28cdf1f6b9d91643090f52b2d63e6eddc908306d2dc1526a6db0868795f2af6b8d1e871686b0bfd2edb0bab983f39a1b70ccc6d1c0bb33d0fbd2202781d956b466d0c4defe480f999fc0d598cc443a9623d3b95c9431acd855425ad52", 0x9d0}, {0x0}], 0x2}, 0xe99}], 0x1, 0x0) 18:07:28 executing program 2: write$9p(0xffffffffffffffff, 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f0000000380), 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, &(0x7f0000000200)) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000003c0)='asymmetric\x00', &(0x7f0000001ffb)={"050500"}, &(0x7f0000001fee)="520972637374e363257367725665783a4465", 0x0) 18:07:28 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv4_newrule={0x20, 0x20, 0x401}, 0x20}}, 0x0) 18:07:28 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 18:07:28 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x3, 0x0, @ipv4}, 0x1c) listen(r0, 0x43) r1 = socket$inet6_sctp(0xa, 0x4000000000000001, 0x84) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0x6c, &(0x7f0000000180), &(0x7f0000000000)=0xfc7b) 18:07:28 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8000000004) getgid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 348.039743] netlink: 4 bytes leftover after parsing attributes in process `syz-executor3'. [ 348.158061] sctp: failed to load transform for md5: -2 18:07:28 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_pts(r0, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xffffff7e) ioctl$TCSETSF(r1, 0x5414, &(0x7f0000000040)={0x17}) 18:07:28 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQFD(r1, 0x4008ae6a, &(0x7f0000000080)) memfd_create(0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0x40085112, 0x0) 18:07:28 executing program 5: socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r0, 0x0, [0x305f, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14]}, 0x2c) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) 18:07:28 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 18:07:28 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendmmsg(r0, &(0x7f0000007240)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000940)="d0", 0x1}], 0x1}, 0x10000}], 0x1, 0x0) sendmmsg(r0, &(0x7f0000008e40)=[{{0x0, 0x0, &(0x7f0000008c40)=[{&(0x7f0000007980)="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", 0x9d0}, {0x0}], 0x2}, 0xe99}], 0x1, 0x0) 18:07:29 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x80002, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, &(0x7f0000000040)='%d') perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000009000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000"], 0x0}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x1800000000000006, 0xe, 0x0, &(0x7f0000000000)="b90703e69ebf08bb64879e100800", 0x0, 0x69}, 0x28) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='rdma.current\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000280)="9c6e2065769413cfbfa37bc10dc050c91bba3f5e50f917ab5328f3b81eb5dc7d2a529164e468c1b567443802b65f71263bd4784523864ccf6c37232910b3a8958eba33deb8a1b5e316b996ea2fc3830fbda06f661e97a532517a35fa785b9bf33780b161ff548e51995f9ee2a7f7b1344706fdc41f2a88701d9be556d1fd78ee239dfd553f6bfe9f7f94926e5025ab31ecdd0f305f8eba1f5590b198218716c100"}, 0x10) socketpair(0xa, 0x5, 0x5, &(0x7f00000000c0)) 18:07:29 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = socket$inet6(0xa, 0x3, 0x84) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="0000000000000000a1d89a8f96e4b28d15c65fbfb927d3df000000000000000000001c0000e5ff0010000000000000494f7801743205aaf3003122f74845e5ef07990ad1dd2b4a4547abea13ac909142ed3451340c2c1a1ec6d8340300000021288e1f0862a18e3e03b05dbe1cbda1fd5b7f9ed7e8f7fbbc14fb05ce175af7"], 0x7f) 18:07:29 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000200)=ANY=[], 0xfffffde0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x20000000003, 0x0) 18:07:29 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() io_setup(0x10000000ffff, &(0x7f0000000100)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2a) wait4(r0, 0x0, 0x0, 0x0) 18:07:29 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000001c0)='veth1\x00', 0xb4) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x4000000000013, &(0x7f0000000180), 0x3b2) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000680)='2', 0x1}], 0x1}}], 0x1, 0x4000001) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) 18:07:29 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c0000002100010300000000000000000a0000000000000000000000"], 0x1}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x17, &(0x7f0000000100)}], 0x49249249249293a, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") 18:07:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000280)={0x77, 0x0, [0x4b564d03, 0x1]}) ioctl$KVM_GET_NESTED_STATE(r3, 0x4188aea7, &(0x7f0000000300)={0x0, 0x0, 0x2080}) 18:07:29 executing program 3: write$9p(0xffffffffffffffff, 0x0, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f0000000040)=ANY=[]) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f00000008c0), 0xffffffffffffffff) request_key(&(0x7f00000003c0)='asymmetric\x00', &(0x7f0000001ffb)={"050500"}, &(0x7f0000001fee)="520972637374e363257367725665783a4465", 0x0) 18:07:30 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c58023c126285718070") socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x7e, &(0x7f0000000140)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4029, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 18:07:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000280)={0x77, 0x0, [0x4b564d03, 0x1]}) ioctl$KVM_GET_NESTED_STATE(r3, 0x8188aea6, &(0x7f0000000300)={0x0, 0x0, 0x2080}) 18:07:30 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) 18:07:30 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000200)=ANY=[], 0xfffffde0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x20000000003, 0x0) 18:07:30 executing program 1: clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) syz_execute_func(&(0x7f00000002c0)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3196f") execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/11, 0x7) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) r1 = creat(&(0x7f0000000080)="e91f7189591e9233614b00", 0x109) r2 = dup2(r0, r1) execve(&(0x7f00000000c0)="e91f7189591e9233614b00", 0x0, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x841, 0x0) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) 18:07:30 executing program 0: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x14363, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x80000fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0xfffffffffffffffc, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000001680)={'security\x00'}, &(0x7f0000000000)=0x54) 18:07:30 executing program 2: ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80003, 0x2) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x10) recvmmsg(r0, &(0x7f00000004c0)=[{{&(0x7f0000000400)=@ethernet={0x0, @dev}, 0x6a, &(0x7f0000000480)}, 0x6}], 0x6fded0, 0x22, 0x0) 18:07:30 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() io_setup(0x10000000ffff, &(0x7f0000000100)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x19) wait4(0x0, 0x0, 0x0, 0x0) 18:07:30 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getpid() getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) getgid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xaf9232572864daca) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) gettid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1000000000000006, 0xffffffffffffffff) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) socket$unix(0x1, 0x1000001000080, 0x0) sendmsg$nl_route(r0, 0x0, 0x10) bind$unix(0xffffffffffffffff, 0x0, 0x0) listen(r3, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) sendto$packet(r2, &(0x7f00000000c0)="52b00c69905d7984b9fe3c5e9c603670ebfa8987edfe9c9322296cc52beba13c0700000073e02ea83fe04e8a4766270d641b64f3d7", 0x35, 0x4000001, 0x0, 0x0) 18:07:31 executing program 3: r0 = socket(0x200000000000011, 0x4000000000080002, 0xdd86) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000080)=',', 0x1}, {0x0}], 0x2) 18:07:31 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xb564, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f00000000c0)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, 'pids'}]}, 0x6) [ 351.293170] ================================================================== [ 351.300740] BUG: KMSAN: uninit-value in vti6_tnl_xmit+0x540/0x28a0 [ 351.307095] CPU: 0 PID: 8763 Comm: syz-executor3 Not tainted 4.20.0-rc5+ #111 [ 351.314390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 351.323764] Call Trace: [ 351.326412] dump_stack+0x284/0x3b0 [ 351.330079] ? vti6_tnl_xmit+0x540/0x28a0 [ 351.334275] kmsan_report+0x12d/0x290 [ 351.338140] __msan_warning+0x76/0xc0 [ 351.342009] vti6_tnl_xmit+0x540/0x28a0 [ 351.346029] ? __msan_poison_alloca+0x1e0/0x270 [ 351.350798] ? vti6_dev_uninit+0x670/0x670 [ 351.355090] dev_hard_start_xmit+0x6a8/0xd80 [ 351.359568] __dev_queue_xmit+0x2e9d/0x3ad0 [ 351.364005] dev_queue_xmit+0x4b/0x60 [ 351.367832] ? __netdev_pick_tx+0x1390/0x1390 [ 351.372356] packet_sendmsg+0x83bb/0x9070 [ 351.376536] ? kmsan_memcpy_metadata+0xb/0x10 [ 351.381061] ? __msan_memcpy+0x61/0x70 [ 351.384990] ? do_iter_readv_writev+0x822/0xac0 [ 351.389688] ? __se_sys_writev+0x9b/0xb0 [ 351.393783] ? do_syscall_64+0xcd/0x110 [ 351.397789] ? finish_task_switch+0x1ed/0x400 [ 351.402351] ? __schedule+0x857/0x9e0 [ 351.406219] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 351.411638] ? aa_sk_perm+0x7ab/0x9e0 [ 351.415597] ? compat_packet_setsockopt+0x360/0x360 [ 351.420647] sock_write_iter+0x3f4/0x4f0 [ 351.424771] ? sock_read_iter+0x4e0/0x4e0 [ 351.428959] do_iter_readv_writev+0x822/0xac0 [ 351.433528] ? sock_read_iter+0x4e0/0x4e0 [ 351.437709] do_iter_write+0x302/0xd80 [ 351.441636] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 351.447155] ? import_iovec+0x41f/0x680 [ 351.451212] do_writev+0x397/0x860 [ 351.454830] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 351.460318] ? prepare_exit_to_usermode+0x137/0x460 [ 351.465371] ? syscall_return_slowpath+0x65/0x6f0 [ 351.470296] __se_sys_writev+0x9b/0xb0 [ 351.474238] __x64_sys_writev+0x4a/0x70 [ 351.478245] do_syscall_64+0xcd/0x110 [ 351.482095] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 351.487306] RIP: 0033:0x457679 [ 351.490521] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 351.509451] RSP: 002b:00007ffb6026bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 351.517198] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457679 [ 351.524491] RDX: 0000000000000002 RSI: 0000000020000200 RDI: 0000000000000004 [ 351.531787] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 351.539079] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffb6026c6d4 [ 351.546374] R13: 00000000004c3a08 R14: 00000000004dae58 R15: 00000000ffffffff [ 351.553686] [ 351.555332] Uninit was created at: [ 351.558905] kmsan_internal_poison_shadow+0x92/0x150 [ 351.564090] kmsan_kmalloc+0xa1/0x100 [ 351.567915] kmsan_slab_alloc+0xe/0x10 [ 351.571850] __kmalloc_node_track_caller+0xf72/0x1280 [ 351.577080] __alloc_skb+0x3f9/0xdf0 [ 351.580858] alloc_skb_with_frags+0x1c9/0xa80 [ 351.585417] sock_alloc_send_pskb+0xd49/0x1360 [ 351.590027] packet_sendmsg+0x66a9/0x9070 [ 351.594212] sock_write_iter+0x3f4/0x4f0 [ 351.598302] do_iter_readv_writev+0x822/0xac0 [ 351.602831] do_iter_write+0x302/0xd80 [ 351.606843] do_writev+0x397/0x860 [ 351.610411] __se_sys_writev+0x9b/0xb0 [ 351.614327] __x64_sys_writev+0x4a/0x70 [ 351.618322] do_syscall_64+0xcd/0x110 [ 351.622151] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 351.627383] ================================================================== [ 351.634761] Disabling lock debugging due to kernel taint [ 351.640240] Kernel panic - not syncing: panic_on_warn set ... [ 351.646162] CPU: 0 PID: 8763 Comm: syz-executor3 Tainted: G B 4.20.0-rc5+ #111 [ 351.654848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 351.664242] Call Trace: [ 351.666853] dump_stack+0x284/0x3b0 [ 351.670493] panic+0x533/0xb02 [ 351.673770] kmsan_report+0x290/0x290 [ 351.677608] __msan_warning+0x76/0xc0 [ 351.681455] vti6_tnl_xmit+0x540/0x28a0 [ 351.685500] ? __msan_poison_alloca+0x1e0/0x270 [ 351.690269] ? vti6_dev_uninit+0x670/0x670 [ 351.694562] dev_hard_start_xmit+0x6a8/0xd80 [ 351.699059] __dev_queue_xmit+0x2e9d/0x3ad0 [ 351.703469] dev_queue_xmit+0x4b/0x60 [ 351.707300] ? __netdev_pick_tx+0x1390/0x1390 [ 351.711830] packet_sendmsg+0x83bb/0x9070 [ 351.716012] ? kmsan_memcpy_metadata+0xb/0x10 [ 351.720549] ? __msan_memcpy+0x61/0x70 [ 351.724469] ? do_iter_readv_writev+0x822/0xac0 [ 351.729162] ? __se_sys_writev+0x9b/0xb0 [ 351.733247] ? do_syscall_64+0xcd/0x110 [ 351.737251] ? finish_task_switch+0x1ed/0x400 [ 351.741787] ? __schedule+0x857/0x9e0 [ 351.745632] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 351.751025] ? aa_sk_perm+0x7ab/0x9e0 [ 351.754950] ? compat_packet_setsockopt+0x360/0x360 [ 351.760007] sock_write_iter+0x3f4/0x4f0 [ 351.764124] ? sock_read_iter+0x4e0/0x4e0 [ 351.768309] do_iter_readv_writev+0x822/0xac0 [ 351.772872] ? sock_read_iter+0x4e0/0x4e0 [ 351.777055] do_iter_write+0x302/0xd80 [ 351.780996] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 351.786476] ? import_iovec+0x41f/0x680 [ 351.790511] do_writev+0x397/0x860 [ 351.794142] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 351.799630] ? prepare_exit_to_usermode+0x137/0x460 [ 351.804671] ? syscall_return_slowpath+0x65/0x6f0 [ 351.809571] __se_sys_writev+0x9b/0xb0 [ 351.813500] __x64_sys_writev+0x4a/0x70 [ 351.817504] do_syscall_64+0xcd/0x110 [ 351.821368] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 351.826580] RIP: 0033:0x457679 [ 351.830213] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 351.849141] RSP: 002b:00007ffb6026bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 351.856891] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457679 [ 351.864196] RDX: 0000000000000002 RSI: 0000000020000200 RDI: 0000000000000004 [ 351.871491] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 351.878786] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffb6026c6d4 [ 351.886111] R13: 00000000004c3a08 R14: 00000000004dae58 R15: 00000000ffffffff [ 351.894533] Kernel Offset: disabled [ 351.898253] Rebooting in 86400 seconds..