[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 38.921007] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 40.424125] random: sshd: uninitialized urandom read (32 bytes read) [ 40.865689] random: sshd: uninitialized urandom read (32 bytes read) [ 41.983691] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.1' (ECDSA) to the list of known hosts. [ 47.798707] random: sshd: uninitialized urandom read (32 bytes read) 2018/09/04 20:22:35 fuzzer started [ 49.226760] random: cc1: uninitialized urandom read (8 bytes read) 2018/09/04 20:22:38 dialing manager at 10.128.0.26:45707 2018/09/04 20:22:41 syscalls: 1 2018/09/04 20:22:41 code coverage: enabled 2018/09/04 20:22:41 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/09/04 20:22:41 setuid sandbox: enabled 2018/09/04 20:22:41 namespace sandbox: enabled 2018/09/04 20:22:41 fault injection: enabled 2018/09/04 20:22:41 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/09/04 20:22:41 net packed injection: enabled 2018/09/04 20:22:41 net device setup: enabled [ 57.674682] random: crng init done 20:24:57 executing program 0: r0 = socket$inet6(0xa, 0x100000002, 0x0) sendto$inet6(r0, &(0x7f0000000040), 0xfd90, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @remote}, 0x19) 20:24:57 executing program 1: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0xffffffffffffff78, &(0x7f0000000500)) 20:24:57 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=@gettclass={0x24, 0x2a, 0x301, 0x0, 0x0, {0x0, r1}}, 0x24}}, 0x0) 20:24:57 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000040)=""/73, 0xfffffffffffffed0}, {&(0x7f00000000c0)=""/8, 0x8}, {&(0x7f0000000280)=""/154, 0x9a}], 0x3) 20:24:57 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0xffbffffffffffff1, &(0x7f0000000380)={0x0, 0x20, 0x0, @thr={&(0x7f0000000080), &(0x7f0000000140)}}, &(0x7f0000000400)) clock_getres(0x0, &(0x7f0000000100)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f00000003c0)={{}, {0x0, r0}}, 0x0) 20:24:57 executing program 2: r0 = socket(0x15, 0x80005, 0x0) getsockopt(r0, 0x114, 0x2721, &(0x7f0000af0fe7)=""/13, &(0x7f000033bffc)=0x3e3) 20:24:57 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a26c8079a613c6e715070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000415fc8)={&(0x7f000034c000), 0xc, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1}, {@in6=@loopback, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff}, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x13c}}, 0x0) 20:24:57 executing program 6: [ 190.651504] IPVS: ftp: loaded support on port[0] = 21 [ 190.673964] IPVS: ftp: loaded support on port[0] = 21 [ 190.692108] IPVS: ftp: loaded support on port[0] = 21 [ 190.700276] IPVS: ftp: loaded support on port[0] = 21 [ 190.714249] IPVS: ftp: loaded support on port[0] = 21 [ 190.739178] IPVS: ftp: loaded support on port[0] = 21 [ 190.765994] IPVS: ftp: loaded support on port[0] = 21 [ 190.809230] IPVS: ftp: loaded support on port[0] = 21 [ 193.153915] ip (4944) used greatest stack depth: 53304 bytes left [ 195.707703] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.714208] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.759992] device bridge_slave_0 entered promiscuous mode [ 195.809171] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.815744] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.856624] device bridge_slave_0 entered promiscuous mode [ 195.872341] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.878846] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.905394] device bridge_slave_0 entered promiscuous mode [ 195.922617] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.929159] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.951889] device bridge_slave_0 entered promiscuous mode [ 195.977889] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.984425] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.013873] device bridge_slave_0 entered promiscuous mode [ 196.034741] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.041277] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.058554] device bridge_slave_0 entered promiscuous mode [ 196.080584] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.087078] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.107816] device bridge_slave_0 entered promiscuous mode [ 196.123580] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.130057] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.145833] device bridge_slave_0 entered promiscuous mode [ 196.158475] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.164969] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.190272] device bridge_slave_1 entered promiscuous mode [ 196.205705] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.212198] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.226002] device bridge_slave_1 entered promiscuous mode [ 196.245930] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.252438] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.290427] device bridge_slave_1 entered promiscuous mode [ 196.305267] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.311778] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.327261] device bridge_slave_1 entered promiscuous mode [ 196.354185] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.360708] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.382975] device bridge_slave_1 entered promiscuous mode [ 196.410042] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.416613] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.454440] device bridge_slave_1 entered promiscuous mode [ 196.482376] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 196.490973] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.497476] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.527048] device bridge_slave_1 entered promiscuous mode [ 196.547055] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 196.555297] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.561781] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.597276] device bridge_slave_1 entered promiscuous mode [ 196.631084] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 196.643447] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 196.655434] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 196.672233] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 196.752660] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 196.807773] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 196.853801] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 196.878748] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 196.942048] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 196.995810] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 197.004357] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 197.044859] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 197.175019] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 197.187948] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 197.611724] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 197.750903] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 197.834595] ip (5185) used greatest stack depth: 53240 bytes left [ 197.903514] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 197.914664] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 197.969294] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 197.996031] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 198.052216] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 198.070014] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 198.108683] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 198.142865] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 198.270584] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 198.286904] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 198.296372] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 198.309488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 198.357200] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 198.374422] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 198.394218] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 198.401309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 198.431145] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 198.505490] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 198.578000] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 198.585160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 198.619084] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 198.626206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 198.663136] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 198.671736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 198.701152] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 198.711408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 198.727812] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 198.741729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 198.783811] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 198.790851] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 198.820807] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 198.827879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 198.883923] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 198.890976] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 198.904884] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 198.918658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 198.991266] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 198.999005] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 199.054618] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 199.061691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 199.102413] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 199.109461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 199.162034] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 199.169568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 199.289283] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 199.296421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 199.718170] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 199.738925] team0: Port device team_slave_0 added [ 199.796350] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 199.821203] team0: Port device team_slave_0 added [ 199.834932] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 199.855719] team0: Port device team_slave_0 added [ 199.955823] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 199.985855] team0: Port device team_slave_0 added [ 200.016765] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 200.043748] team0: Port device team_slave_1 added [ 200.058764] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 200.090261] team0: Port device team_slave_0 added [ 200.128009] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 200.159692] team0: Port device team_slave_1 added [ 200.168985] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 200.181121] team0: Port device team_slave_1 added [ 200.214351] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 200.234982] team0: Port device team_slave_0 added [ 200.284590] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 200.294999] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 200.322049] team0: Port device team_slave_0 added [ 200.348060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 200.372219] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 200.398816] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 200.414009] team0: Port device team_slave_0 added [ 200.432213] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 200.453640] team0: Port device team_slave_1 added [ 200.487910] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 200.495985] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 200.508817] team0: Port device team_slave_1 added [ 200.530055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 200.542971] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 200.581129] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 200.588167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 200.602446] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 200.639921] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 200.658681] team0: Port device team_slave_1 added [ 200.673048] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 200.680267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 200.702131] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 200.746427] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 200.761440] team0: Port device team_slave_1 added [ 200.782982] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 200.790944] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 200.799564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 200.833800] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 200.853015] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 200.877182] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 200.900976] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 200.913722] team0: Port device team_slave_1 added [ 200.933615] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 200.945560] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 200.956278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 200.984071] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 201.014480] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 201.026041] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 201.066918] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 201.074764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 201.088052] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 201.131932] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 201.139642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 201.155682] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 201.175112] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 201.185246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 201.199694] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 201.230763] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 201.238075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 201.249692] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 201.276380] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 201.286740] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 201.305982] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 201.328464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 201.355091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 201.377047] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 201.403146] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 201.414047] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 201.450387] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 201.471288] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 201.492664] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 201.506265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 201.515969] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 201.523080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 201.545722] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 201.572966] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 201.586322] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 201.595875] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 201.602806] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 201.642960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 201.669406] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 201.694872] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 201.719585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 201.730290] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 201.741089] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 201.749191] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 201.759769] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 201.788965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 201.806872] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 201.823084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 201.872884] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 201.880363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 201.889949] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 201.902803] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 201.914405] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 201.928426] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 201.940748] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 201.948753] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 201.956587] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 201.997857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 202.050559] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 202.089122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 202.124624] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 202.156906] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 202.186437] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 202.198159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 202.206208] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 202.214942] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 202.267965] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 202.281622] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 202.302635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 202.318775] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 202.343798] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 202.359888] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 202.402002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 202.439407] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 202.486735] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 202.633650] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 202.641209] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 202.658864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 205.002433] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.008961] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.016077] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.022608] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.084786] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 205.093660] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 205.460708] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.467227] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.474150] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.480631] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.568362] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 205.577476] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.584001] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.590881] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.597452] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.649463] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 205.671014] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.677562] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.684418] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.690882] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.723414] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 205.770157] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.776664] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.783637] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.790141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.865006] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 205.871802] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.878290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.885205] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.891705] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.932678] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 205.981958] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.988466] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.995388] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.001869] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.102227] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 206.112335] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.118841] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.125846] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.132345] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.193817] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 206.201852] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 206.212623] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 206.224942] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 206.234225] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 206.243890] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 206.254129] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 206.264146] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 218.043651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.412832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.543743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.600379] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.710250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.814419] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.859023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.939829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.253272] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 219.551187] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 219.817584] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 219.877873] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 219.890761] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 220.001692] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 220.099695] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 220.171789] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 220.460409] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 220.467216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 220.483574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 220.883170] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 220.889634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 220.902419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 221.015169] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 221.021601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 221.038036] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 221.075226] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 221.086092] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 221.103790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 221.168935] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 221.175244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 221.188107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 221.281456] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 221.287828] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 221.301449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 221.343404] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 221.350402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 221.375653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 221.475312] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 221.481678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 221.494123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 221.751888] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.140843] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.300328] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.344661] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.437901] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.514327] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.542165] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.722354] 8021q: adding VLAN 0 to HW filter on device team0 20:25:37 executing program 6: 20:25:37 executing program 7: 20:25:37 executing program 6: 20:25:38 executing program 4: 20:25:38 executing program 3: 20:25:38 executing program 7: 20:25:38 executing program 0: 20:25:38 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @loopback, @multicast1}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x0, {{0x2, 0x0, @multicast2}}}, 0x90) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000008000)=""/144, &(0x7f0000000000)=0x90) 20:25:38 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$TIOCLINUX6(r0, 0x541c, &(0x7f0000000100)={0x6, 0x1789}) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000000)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x40080, 0x0) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) sendfile(r3, r2, &(0x7f0000000180), 0x100000001) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) fcntl$getown(r0, 0x9) 20:25:38 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x1, 0x400400) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e21, @multicast1}}}, &(0x7f0000000140)=0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000180)={r2, @in={{0x2, 0x4e22, @rand_addr=0xfff}}}, &(0x7f0000000240)=0x84) sendmsg$nl_route(r0, &(0x7f0000000640)={&(0x7f0000000000), 0xfffffffffffffdbf, &(0x7f0000000600)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000010000000000000000000000000092a59e72bfa8884e2465abc97e89c1e185e0d4068a4b0636cb44d7e2033de9ea32dfaeb467b96be391133d94ab19707d65130c0253e441962e946e16b36688d603", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010067726574617000000c0002000800030000000000"], 0xf2}}, 0x0) syz_open_dev$mice(&(0x7f0000000280)='/dev/input/mice\x00', 0x0, 0x20000) 20:25:38 executing program 1: seccomp(0x1, 0x0, &(0x7f0000001980)={0x2, &(0x7f0000000580)=[{0x25}, {0x6}]}) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x2) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={{0x7, 0x0, 0x8, 0x9, 0x401, 0x7}, 0x8001}) setsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000040)="b9f91f98eed086e60c3c46bcc283dec982ce8f7c7d0815120444147a4cb43d999ec0c5380c3382cd53fb2eadf62ade1378", 0x31) syncfs(r0) 20:25:38 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc8078100315f85715078e404d8138a227498dfa340f164f00236540889ba8fb989df86de948d8b2879341dccf60dfde162744e20d9d216cd358e75a5d43be180cd13463c8ccfeb578dd3efe7e4449dfe67c9281abb4ddcfc02a305aa399b7c3b8a8b5b89155dd475c5750284dddabb89a8e208aea146c2d5") r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='^cgroup\x00'}, 0x10) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000340)={{0x3, 0x3, 0x4, 0x2, 0xffff}, 0xec, 0x4}) sendmsg$nl_xfrm(r1, &(0x7f0000000500)={&(0x7f0000000240), 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)=@flushpolicy={0xf4, 0x1d, 0x200, 0x70bd28, 0x25dfdbff, "", [@mark={0xc, 0x15, {0x35075a, 0x100000001}}, @output_mark={0x8, 0x1d, 0xfffffffffffffffd}, @tfcpad={0x8, 0x16, 0x7}, @algo_comp={0xc8, 0x3, {{'deflate\x00'}, 0x400, "feb43cade543c6eadc912d0ea323c6439bf81054c5d95423bc17871ff17a3ec6557546e533b83129cbaca99bf138f9f86476dda3ed9ca88c881bfa51e8f8b87c1524e507b70cfd979543befebd4171ad0e82bb9b527676065b68d5abf27b9c859f175c1cd06f0c9986e30814d4529c294fad491359a0cdbfcc58b9de470421e0"}}]}, 0xf4}, 0x1, 0x0, 0x0, 0x20000084}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r3 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_LEAVE_GROUP(r2, 0x0, 0x14, &(0x7f0000000280)={0x0, {{0x2, 0x0, @loopback}}}, 0x88) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f00000001c0)=0x9e6) 20:25:38 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000000)=@srh, 0x8) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x10b801, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0), 0x117, 0x6}}, 0x20) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, &(0x7f0000000240)) close(r1) getsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000100)=""/193, &(0x7f0000000040)=0xc1) 20:25:38 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080), 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x3}, 0x1c) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={0x0, 0xbf89}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={r1, 0x10000}, 0x8) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 20:25:38 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x400000, 0x0) bind$unix(r0, &(0x7f0000000140)=@abs={0x1, 0x0, 0x100000001}, 0x6e) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f00000001c0)="0a5cc80700315f85715070") r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r2, 0x8000008010500d, &(0x7f00000000c0)=0x400000000000000) getsockname$inet(r2, &(0x7f0000000040), &(0x7f0000000080)=0x10) 20:25:38 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85795070") r1 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x2) ppoll(&(0x7f0000000080)=[{r1}], 0x1, &(0x7f00000000c0)={0x0, 0x1c9c380}, &(0x7f0000000140), 0x8) r2 = syz_open_pts(0xffffffffffffffff, 0x80) ioctl$TIOCCONS(r2, 0x541d) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = accept$inet(r3, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000180)=0x9, 0x4) 20:25:38 executing program 3: r0 = socket(0x12, 0x4, 0xfffffffffffffffe) getsockopt(r0, 0x5, 0x2716, &(0x7f0000000080)=""/13, &(0x7f0000000040)=0xd) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0x8, 0x6, 0xff}, 0xc) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x4401, 0x0) [ 230.889658] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 20:25:39 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000100)="19", 0x1, 0xfffffffffffffffc, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, 0x3}, 0x1c) r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f00000001c0)={{0x47e16d21, 0xc00000000}, 'port1\x00', 0x44, 0xe, 0xc93, 0x2, 0x4, 0x1, 0x6, 0x0, 0x4, 0x8d}) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x229bc3a6, 0x200000) r3 = openat(r2, &(0x7f0000000280)='./file0\x00', 0x21c000, 0x91) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f00000002c0)={0x0, 0xa6, "a6186cd43d4f91b970b81409fe3db722e46fd1cb0af91b35a1008058bd048e86f4e670bd089392e4f458ffc166acc9768d6dca07cd1dacbe893387e13bf1b1a43316b41f191489793167b5d29cf35a1338167b64b66551ba3f36a35d3c98ba10019ee3feb4a3672320cdb201871999fde3ef5b04df1d86a0deb20d4f415f5ee51e0d69e593e915104a1bf888d8134c15fcd255db774b962e84627097f38d9e00836869458d9a"}, &(0x7f0000000040)=0xae) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000380)={0x0, 0x7, 0x4, 0x4, 0xf1, 0x3, 0x7, 0x2, r4}, 0x20) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000080)=""/71) 20:25:39 executing program 6: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000018000)=0x1, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2}, @in={0x2, 0x4e23, @broadcast}], 0x20) [ 230.946101] audit: type=1326 audit(1536092738.956:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=6960 comm="syz-executor1" exe="/root/syz-executor1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x457099 code=0x0 20:25:39 executing program 7: openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x802, 0x0) unshare(0x10000000) pselect6(0x40, &(0x7f0000000000)={0x8}, &(0x7f0000000040), &(0x7f0000000300), &(0x7f0000000340)={0x0, 0x1c9c380}, &(0x7f00000003c0)={&(0x7f0000000380), 0x8}) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mixer\x00', 0x4000, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000180)=[0xf8, 0x7ff]) r1 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x6, 0x200) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e22, 0x3, @local, 0xfc}], 0x1c) socket$inet6_dccp(0xa, 0x6, 0x0) 20:25:39 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000240)={0x6, 0x118, 0xfa00, {{0x7279, 0x5, "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", 0x1, 0x0, 0x0, 0x97ac, 0x8}, r1}}, 0x120) clone(0x1000100, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000100), 0x2) mknod(&(0x7f00000056c0)='./file0\x00', 0xbfc, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000480)) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000380), &(0x7f00000001c0)) r2 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x0, 0x2000) getsockname$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000003c0)=0x1c) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f00000000c0), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f00000004c0)=[@in6={0xa, 0x4e24, 0x2, @loopback, 0xca07}, @in={0x2, 0x4e23, @multicast1}, @in6={0xa, 0x4e23, 0x6, @remote, 0x3c}, @in6={0xa, 0x4e20, 0x3, @mcast2, 0x4}], 0x64) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) accept4$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000580)=0x1c, 0x71cae23874d7b4d1) 20:25:39 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = accept4(r0, &(0x7f0000000140)=@pptp={0x18, 0x2, {0x0, @multicast2}}, &(0x7f0000000000)=0x80, 0x800) accept4$vsock_stream(r1, &(0x7f00000000c0)={0x28, 0x0, 0x0, @host}, 0x10, 0x80000) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) io_setup(0x1000, &(0x7f0000000040)=0x0) io_submit(r2, 0x1, &(0x7f0000000240)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000080)="060000008cf46cfde19a4e3bcfbdbedee32e68b3a251fd2cfd09684d9c7afae320bbf22a2ce3cb58fa63c42a238cb85f1023fa813c9a0e46", 0x38}]) 20:25:39 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = fcntl$dupfd(r0, 0x0, r1) r3 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x1, 0x0) mmap$xdp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x12, r3, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r3, 0x0, 0x82, &(0x7f0000000040)={'filter\x00'}, &(0x7f00000000c0)=0x78) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="bb00000018033f66ca22ae724f276c5b2dd18be3f4f836b1f978f4b44dde2db94a5c2360d1d2caaa17aaf403f82da369877bbd4b08e9a36fbfefb8921f7657"], &(0x7f00000001c0)=0x43) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000200)={0xff, 0x7f, 0x0, 0x10001, 0x3, 0x1, 0x65b1, 0x5, r4}, &(0x7f0000000240)=0x20) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r3, 0x4008af23, &(0x7f0000000100)={0x0, 0x68}) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f00000002c0)=0x7, &(0x7f0000000300)=0x4) r6 = socket$kcm(0x29, 0x5, 0x0) fchmod(r6, 0x50) 20:25:39 executing program 0: sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0xfffffffffffffdc2}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000184000)={0x2, 0xd, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000700)='/dev/zero\x00', 0x10000, 0x0) ioctl$NBD_SET_BLKSIZE(r1, 0xab01, 0x7ff) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='&vboxnet1eth1@]-trusted])posix_acl_access\x00'}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000200)=@security={'security\x00', 0xe, 0x4, 0x430, 0x2a0, 0x2a0, 0x0, 0x0, 0x2a0, 0x398, 0x398, 0x398, 0x398, 0x398, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@unspec=@cgroup0={0x28, 'cgroup\x00', 0x0, {0x80000000}}, @common=@unspec=@statistic={0x38, 'statistic\x00', 0x0, {0x0, 0x1, 0x0, 0x9, 0xffffffff, 0x9}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz1\x00', 0x2}}}, {{@uncond, 0x0, 0xf0, 0x160, 0x0, {}, [@common=@icmp={0x28, 'icmp\x00', 0x0, {0x10, 0xffffffffffffffff, 0x7fffffff}}, @common=@ah={0x30, 'ah\x00', 0x0, {0xfffffffffffff001, 0x633d909}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x3, 0x5, 0x1, 0x1, 0x0, "8fafd7b051c66e77523258f778026f34e954d28fb4a32827043a89b71e0bf47365a7b136f382b948ba4f20c46f6879a8f2d06ddaa168650285f3788bdd7764d5"}}}, {{@ip={@rand_addr=0xd, @local, 0xff, 0xffffff00, 'ipddp0\x00', 'veth0_to_team\x00', {}, {0xff}, 0x0, 0x2, 0x18}, 0x0, 0x98, 0xf8}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={[], 0xb}, 0x4298, 0x8, [0x1a, 0x3c, 0x10, 0x12, 0x25, 0x8, 0x5, 0x4, 0x2e, 0x14, 0x26, 0xfffffffeffffffff, 0x23, 0x3d, 0x24, 0x36], 0x3, 0x5, 0x8}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x490) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRESOCT], 0x402}}, 0x0) fanotify_mark(r2, 0x95, 0x20, r2, &(0x7f00000006c0)='./file0\x00') sendmmsg(r0, &(0x7f0000000180), 0x400000000000117, 0x0) 20:25:39 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000040), 0x0, 0x400c000, &(0x7f000083b000)={0x2, 0x4e20}, 0x10) connect(r1, &(0x7f0000000100)=@nl=@unspec, 0x80) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/udp\x00') write$P9_RAUTH(r2, &(0x7f0000000040)={0x14, 0x67, 0x1, {0x84, 0x0, 0x6}}, 0x14) sendfile(r1, r2, &(0x7f0000000000), 0x100000001) 20:25:39 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x1, 0xc, 0x2ed3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r0, &(0x7f0000000200), &(0x7f0000000080)}, 0x20) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000240)) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/167}, 0x18) sched_yield() r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x2, 0x0) ioctl$sock_bt(r1, 0x100000000000004, &(0x7f0000000340)="affae23f71934e6d166f210bdb48b68d77ca2f1b38041334d1c9faff9b89fdab384eb48304354646ff18c102005e0f1ea103226c739ef738ca0827cf4c426f6ed19815a406e4bb60300e2dc949bd5afd642975adcd00790ee1e9524f72cbcb83e40e3e3c27fe983f96a0893e815bf1c046beaf81f975ce05e1413e47d1d38668bcaec1d939a2ff244d24a3f100105fbbd7b8e7080c2a6f6b763290bf152b10d903e86ac9d3a7f46b9af9f487af25c2fd8a78671e79648b7a901fe49a9cb779c9d58e475fab0617558cd379d4c3967a339ed19f8014bed7606650e125c1bdf0") ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000140)={r1, 0x0, 0x8, 0x1, 0x80}) 20:25:39 executing program 5: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x2) unlinkat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) clone(0x0, &(0x7f0000000240), &(0x7f0000000480), &(0x7f0000000340), &(0x7f00000003c0)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000000)) 20:25:39 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000001780)=[{0x400b1, 0x0, 0x0, 0xfffffffffffffffe}, {0x6}]}, 0x10) r2 = getpgid(0xffffffffffffffff) sched_setparam(r2, &(0x7f0000000040)=0x6) sendmmsg(r0, &(0x7f0000003040)=[{{&(0x7f00000018c0)=@ipx={0x4, 0x0, 0x0, "982a5c276750"}, 0x80, &(0x7f0000002f80), 0x0, 0x0, 0x0, 0x2}}], 0x1, 0x10) 20:25:39 executing program 7: r0 = socket(0x15, 0x800, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000000)={'bridge_slave_1\x00', 0x95}) getsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000280)=""/4096, &(0x7f0000000040)=0x1000) 20:25:39 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x1000000080000) ioctl$KDADDIO(r1, 0x4b34, 0xbfd) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x0, 0x30}, 0xc) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="be6404b2bc2c2f8c9bd62a5f99233fe1a28386359b8d187e646ff71cf6a3c185a2f83e92994c41066db69ffd4cb9dea32affa3dcb67b28e96ee2e166496cae9a171419d682ae54b61d81a84f510086b4c3338ea3364200000000000000c73c23cbe126ffeea95212b352f0716a57faac5dbcce4b1add3a8ec69d5fcbd435b56a387eb9d4ed02f8b4ae12c258c5c1a8234935bfebd46bd59d8afb69846dea7aa18f01ec0b6e02e32350a2dfb10000000000000000"], 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000180), 0xc) write$binfmt_misc(r2, &(0x7f0000000240)={'syz1'}, 0x34000) r3 = fcntl$dupfd(r2, 0x0, r0) write$eventfd(r3, &(0x7f0000000000), 0x8) 20:25:39 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000300)=ANY=[@ANYBLOB="8d59cd415b5e77958a0431ec78852ae254c8c433c1b738bb36f94172d54fd27b18159533a7d7dae9e30b6ca8b58d8f2d079e4d4d5034c5923fa86bb714019d570842b6de9a907cd33d9a742f46629b917e102794c98fe27887078f005ef3780f2fb480f4a01d031b8ffeb2243c7d1f89b2e5284e41d3d666e4e79958947b8b17b5e7dd45afa5a4179be51984e34cf0bf6995430a4a5892435307b940c86053965e4f82806c2f7f6d73e51631ad68967f7098bcba98ca81bee631", @ANYRES16=r0, @ANYRESDEC=r0, @ANYPTR64=&(0x7f0000000040)=ANY=[@ANYRESOCT=r0], @ANYRES64=r0, @ANYPTR64], 0x6) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x3, 0x4) sendto$inet6(r0, &(0x7f0000001040), 0x1ee, 0x0, &(0x7f0000001100)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffff9c, 0x84, 0x66, &(0x7f00000000c0)={0x0, 0x1}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000140)={r2, @in6={{0xa, 0x4e22, 0x4, @local}}, 0x5, 0x7}, 0x90) 20:25:39 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x1, 0xc, 0x2ed3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r0, &(0x7f0000000200), &(0x7f0000000080)}, 0x20) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000240)) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/167}, 0x18) sched_yield() r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x2, 0x0) ioctl$sock_bt(r1, 0x100000000000004, &(0x7f0000000340)="affae23f71934e6d166f210bdb48b68d77ca2f1b38041334d1c9faff9b89fdab384eb48304354646ff18c102005e0f1ea103226c739ef738ca0827cf4c426f6ed19815a406e4bb60300e2dc949bd5afd642975adcd00790ee1e9524f72cbcb83e40e3e3c27fe983f96a0893e815bf1c046beaf81f975ce05e1413e47d1d38668bcaec1d939a2ff244d24a3f100105fbbd7b8e7080c2a6f6b763290bf152b10d903e86ac9d3a7f46b9af9f487af25c2fd8a78671e79648b7a901fe49a9cb779c9d58e475fab0617558cd379d4c3967a339ed19f8014bed7606650e125c1bdf0") ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000140)={r1, 0x0, 0x8, 0x1, 0x80}) 20:25:39 executing program 7: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x5, 0x20000) getpeername$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$pppoe(0x18, 0x1, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={&(0x7f0000000100), 0x12f, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffff}}, 0xb8}}, 0x0) [ 231.803222] sctp: failed to load transform for md5: -2 20:25:39 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$assume_authority(0x10, r1) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioperm(0x3, 0x3, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000080)={{}, 'syz1\x00'}) read(r0, &(0x7f0000000100), 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x2040, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000340)={&(0x7f0000000180), 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newaddr={0xb0, 0x14, 0xc02, 0x70bd25, 0x25dfdbfb, {0x2, 0x80, 0x680, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @broadcast}, @IFA_LABEL={0x14, 0x3, 'yam0\x00'}, @IFA_LABEL={0x14, 0x3, 'syzkaller0\x00'}, @IFA_LABEL={0x14, 0x3, 'bpq0\x00'}, @IFA_ADDRESS={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x10}}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_LABEL={0x14, 0x3, 'veth1_to_bond\x00'}, @IFA_LOCAL={0x8, 0x2, @rand_addr}, @IFA_LABEL={0x14, 0x3, 'veth1_to_bond\x00'}, @IFA_LABEL={0x14, 0x3, 'rose0\x00'}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) 20:25:39 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000007, 0x1) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000040)=0xffffffffffffff72) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0xa}) write$P9_RSYMLINK(r0, &(0x7f0000000000)={0x14, 0x11, 0x1, {0x82, 0x4, 0x5}}, 0x14) 20:25:40 executing program 5: r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000014c0)={&(0x7f0000000000), 0x6}, 0x20) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000001500)) r1 = socket$inet6(0xa, 0x3, 0x79) ioctl(r1, 0x4000008914, &(0x7f00000015c0)="025ee1311f16f477671070") r2 = socket(0x8, 0x0, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000200), &(0x7f00000002c0)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000300), 0x8) pread64(0xffffffffffffffff, &(0x7f0000000380)=""/4096, 0x1000, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000001380)={0x0, @in={{0x2, 0x0, @multicast2}}}, 0x88) sendto$inet(0xffffffffffffffff, &(0x7f0000001540)="d8dcb4c49b24759ddd2253a929a7", 0xe, 0x4, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000), &(0x7f0000000080)=0x10) socket$inet6_dccp(0xa, 0x6, 0x0) socketpair$inet(0x2, 0x0, 0x0, &(0x7f0000000140)) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f0000000180)={0x0}, &(0x7f00000001c0)=0x8) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000001480)={0x28, 0x0, 0x0, @hyper}, 0x10) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000001480)=ANY=[], &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000016c0)) pselect6(0x40, &(0x7f0000001600), &(0x7f0000001640), &(0x7f0000001680), &(0x7f0000001700), &(0x7f0000001780)={&(0x7f0000001740), 0x8}) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @rand_addr}, 0x10) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) mkdirat(r0, &(0x7f00000017c0)='./file0\x00', 0x40) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) msync(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x7) socket$inet6(0xa, 0xb, 0x400000000000000) sendto$inet(r3, &(0x7f000099bf26), 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000280)={r4, 0x80}, 0x8) sendto$inet(r3, &(0x7f00000000c0)="9a", 0x1, 0x4008010, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000100), 0xfffffdef, 0x4008000, 0x0, 0xb4) 20:25:40 executing program 1: r0 = creat(&(0x7f00006e9ff8)='./file0\x00', 0x0) lsetxattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000faffe7)=@known='security.capability\x00', &(0x7f0000000240)="0000000201000000000000010400000000000000", 0x14, 0x0) lsetxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000040)=@known='security.ima\x00', &(0x7f0000000180)='security.', 0x9, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r1, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") write$P9_RREADLINK(r0, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) 20:25:40 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000007c0), &(0x7f0000000800)=0x8) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xfffffffffffffe14) r1 = accept4(r0, &(0x7f0000000340)=@alg, &(0x7f0000000040)=0x80, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_misc(r2, &(0x7f0000000000)={'syz1'}, 0x4) shutdown(r1, 0x0) write$binfmt_misc(r2, &(0x7f0000001b00)=ANY=[@ANYBLOB='l'], 0x1) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000001c0)={'syzkaller0\x00', &(0x7f0000000180)=@ethtool_modinfo={0x42, 0x10001, 0x4c2b, "018d28da7a6a6a05"}}) sendmsg$key(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000900)={0x2, 0x17, 0x0, 0x0, 0x2}, 0x10}}, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f00000000c0)={@broadcast, @dev, 0x0}, &(0x7f0000000100)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', r3}) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000200)) [ 232.031647] vhci_hcd: invalid port number 10 [ 232.036288] vhci_hcd: default hub control req: 0000 v0000 i000a l0 [ 232.053156] input: syz1 as /devices/virtual/input/input5 20:25:40 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/softnet_stat\x00') ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, 0xfffffffffffffffe) lseek(r0, 0x2, 0x0) 20:25:40 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={"6200e3ffffff004b6d30b300", 0x102}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) getpeername$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000180)=0x1c) setsockopt$inet6_udp_int(r2, 0x11, 0x1, &(0x7f0000000380)=0x4, 0x4) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000100)=0x7, 0x4) sendto$inet6(r2, &(0x7f0000000580), 0x339, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) setsockopt$inet6_udp_int(r2, 0x11, 0x1, &(0x7f0000000080), 0x4) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) close(r0) [ 232.160309] vhci_hcd: invalid port number 10 [ 232.165303] vhci_hcd: default hub control req: 0000 v0000 i000a l0 20:25:40 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) io_setup(0x9, &(0x7f0000000000)=0x0) dup2(r0, r1) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000340), 0x87}]) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000040)) [ 232.329190] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 20:25:40 executing program 2: syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x8, 0x80) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0xfffffffffffffffe) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000c80)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000240)={"98b327ff00", 0x2002}) accept4(r0, &(0x7f00000001c0)=@nl, &(0x7f0000000080)=0x80, 0x80000) r3 = socket$packet(0x11, 0x3, 0x300) dup2(r3, r2) [ 232.440158] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 232.479813] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 232.492948] sctp: failed to load transform for md5: -2 20:25:40 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0xffffffffffffc37c, 0x0) getresuid(&(0x7f00000000c0)=0x0, &(0x7f0000000100), &(0x7f0000000140)) r3 = getegid() r4 = getuid() write$P9_RSTATu(r1, &(0x7f0000000180)={0x73, 0x7d, 0x1, {{0x0, 0x57, 0x4, 0x6, {0x0, 0x0, 0x1}, 0x41000000, 0xa2, 0x401, 0x81, 0xb, 'em0GPL\\proc', 0x1, '/', 0x4, 'self', 0x14, '}cpuset}securityuser'}, 0x7, 'cgroup^', r2, r3, r4}}, 0x73) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)={0x2, 0x400000000000004, 0x0, 0xfffffffffffffffb, 0xe, 0x0, 0x4, 0xfffffffffffffffc, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0x70}}, 0x0) 20:25:40 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = inotify_init() r2 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x1, 0x101002) futimesat(r2, &(0x7f00000000c0)='./file2\x00', &(0x7f0000000100)={{0x0, 0x2710}, {0x0, 0x7530}}) open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) inotify_add_watch(r1, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) rename(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='./file1\x00') 20:25:40 executing program 0: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000000c0)=@in6={0x4, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57]}}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000500)="f8303da7fc5ef902439acd466de4bb3bde4865d412b05c2b3086bff7c02b24555142e14ae27c32f947108c7d808d952ad9eac6531e0639c3acef3b9f43774c3ea6e6ad1cf4295765206fd6302396d94bc7793651147d270a167f083c0a05c00c62ef2ece791c234b6387e0e2062b2312ef94f96088a4b98d44877116429a82a0f76a4f55a36624115bb9c91445b7fa5a8a252afb5686061c2c3e927baaa61f3bb5cdcf117aadfe0d15536369df93e3c69dbcc8d5b6ee36ba43d1e974ecfbcf52ed3d6949350344", 0xc7}, {&(0x7f0000000600)="7dc536c82228554d24fd0bd3e01f901880eefec5e9d55b49264e3078cbe79e542b50c89abea9027ccd4c59a8a4b3e91aa3e8b654f3651147c74b6a0b14424a377a849bb1246d6450387f5edbf88a7e17d768ba9c2b1dd76fc6", 0x59}, {&(0x7f0000000680)="7aec0ea80ec786c08917ce617296cad71d4ffd63a08b30a4ca134a639cac7b6d470c9913d423399b0bc7c9be9b95fa39d9fc09380bbc49a87a263c87e3cb941ec87f9c59d210f54bce2060f94d7d50fa8853cbd1fbc6f838d98ca86f05911c423c830e026ea2a3b06308f6e6f07a592ade7055a4b07319a22e3fe4ec02eb7e72815921e99286f96f682480a977b6fac85d5ac33148a693c37baf1911f8af662bd9d97fbf1e46", 0xa6}, {&(0x7f0000000740)="8975ef696031d4d82ae37c6ce9ca42ae906f420fa5cc2e1a068dd55292e882311dd690d8a790ce52ee93369e7c7438b772d30c62ff6cac876cd4c52fa96c9231a15dabb6d63e57fad0b1b692a915e65fb703088dca041ff47b8068e4b0d909cc91ef5dda0c7f2b0c13", 0x69}, {&(0x7f0000000440)="35b0e0f08bcc0524e793a6e64e0fdaad4cc90827e4d3f7805a7088f2ec477643ce33a56304f7076697f3f33c1c97d7", 0x2f}, {&(0x7f00000007c0)="04e3586ea15bf67cf14af8065c50923c19a12063414330fa82f4d063584f7b548e63b3766fc323975605e9734aa2b219efef0aefa302e4a3b08ffee02bd4d309f3eef5b81a3e1668a57c97d82a259d8bb97ccb14af77f1d21e13c0e2a4144fd1b7d66b44137180531fb81e61f0d661e1d05061f4c5440dc656e633e3ad91b1a1c49c38b6993d662bd24b46451f51fc3908bee6eba5a252558fdb6842f6a07d0f57", 0xa1}, {&(0x7f0000000880)="9be118eda266cb3dbd391ba53be41edec7f4ebd98251f4292e7cc871370eb4052806989ee53f85930157e275c3de", 0x2e}], 0x7, &(0x7f0000000380)}, 0x0) r0 = socket$kcm(0x11, 0x2, 0x0) r1 = gettid() ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000000)=r1) sendmsg$kcm(r0, &(0x7f00000004c0)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86, {0x9}}, 0x80, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x4000004}, 0x0) [ 232.730117] ================================================================== [ 232.737560] BUG: KMSAN: uninit-value in ip6_tnl_start_xmit+0x64d/0x1ec0 [ 232.744379] CPU: 0 PID: 7110 Comm: syz-executor0 Not tainted 4.19.0-rc1+ #40 [ 232.751588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 232.760963] Call Trace: [ 232.763581] dump_stack+0x14b/0x190 [ 232.767251] kmsan_report+0x183/0x2b0 [ 232.771086] __msan_warning+0x70/0xc0 [ 232.774924] ip6_tnl_start_xmit+0x64d/0x1ec0 [ 232.779382] ? dev_queue_xmit_nit+0x118f/0x1260 [ 232.784110] ? ip6_tnl_dev_uninit+0x740/0x740 [ 232.788641] dev_hard_start_xmit+0x5df/0xc20 [ 232.793121] __dev_queue_xmit+0x2f35/0x3ab0 [ 232.797492] ? packet_sendmsg+0x6599/0x8c60 [ 232.801891] dev_queue_xmit+0x4b/0x60 [ 232.805728] ? __netdev_pick_tx+0x12e0/0x12e0 [ 232.810272] packet_sendmsg+0x80ff/0x8c60 [ 232.814592] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 232.820069] ___sys_sendmsg+0xe70/0x1290 [ 232.824182] ? compat_packet_setsockopt+0x360/0x360 [ 232.829281] __se_sys_sendmsg+0x2a3/0x3d0 [ 232.833518] __x64_sys_sendmsg+0x4a/0x70 [ 232.837623] do_syscall_64+0xb8/0x100 [ 232.841461] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 232.846678] RIP: 0033:0x457099 [ 232.849898] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 232.868823] RSP: 002b:00007fef33145c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 232.876587] RAX: ffffffffffffffda RBX: 00007fef331466d4 RCX: 0000000000457099 [ 232.883901] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000003 [ 232.891202] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 232.898503] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 232.905802] R13: 00000000004d47d0 R14: 00000000004c8e63 R15: 0000000000000000 [ 232.913377] [ 232.915019] Uninit was created at: [ 232.918612] kmsan_internal_poison_shadow+0xb8/0x1b0 [ 232.923745] kmsan_kmalloc+0x98/0x100 [ 232.927577] kmsan_slab_alloc+0x10/0x20 [ 232.931585] __kmalloc_node_track_caller+0x9e7/0x1160 [ 232.936810] __alloc_skb+0x2f5/0x9e0 [ 232.940555] alloc_skb_with_frags+0x1d0/0xac0 [ 232.945075] sock_alloc_send_pskb+0xb47/0x1170 [ 232.949684] packet_sendmsg+0x6599/0x8c60 [ 232.953865] ___sys_sendmsg+0xe70/0x1290 [ 232.957957] __se_sys_sendmsg+0x2a3/0x3d0 [ 232.962133] __x64_sys_sendmsg+0x4a/0x70 [ 232.966230] do_syscall_64+0xb8/0x100 [ 232.970074] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 232.975289] ================================================================== [ 232.982687] Disabling lock debugging due to kernel taint [ 232.988156] Kernel panic - not syncing: panic_on_warn set ... [ 232.988156] [ 232.995553] CPU: 0 PID: 7110 Comm: syz-executor0 Tainted: G B 4.19.0-rc1+ #40 [ 233.004151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 233.013535] Call Trace: [ 233.016166] dump_stack+0x14b/0x190 [ 233.019832] panic+0x35d/0x8cb [ 233.023101] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 233.028594] kmsan_report+0x2a8/0x2b0 [ 233.032447] __msan_warning+0x70/0xc0 [ 233.036284] ip6_tnl_start_xmit+0x64d/0x1ec0 [ 233.040721] ? dev_queue_xmit_nit+0x118f/0x1260 [ 233.045442] ? ip6_tnl_dev_uninit+0x740/0x740 [ 233.049998] dev_hard_start_xmit+0x5df/0xc20 [ 233.054495] __dev_queue_xmit+0x2f35/0x3ab0 [ 233.058861] ? packet_sendmsg+0x6599/0x8c60 [ 233.063273] dev_queue_xmit+0x4b/0x60 [ 233.067103] ? __netdev_pick_tx+0x12e0/0x12e0 [ 233.071630] packet_sendmsg+0x80ff/0x8c60 [ 233.075840] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 233.081476] ___sys_sendmsg+0xe70/0x1290 [ 233.085668] ? compat_packet_setsockopt+0x360/0x360 [ 233.090761] __se_sys_sendmsg+0x2a3/0x3d0 [ 233.094968] __x64_sys_sendmsg+0x4a/0x70 [ 233.099070] do_syscall_64+0xb8/0x100 [ 233.102896] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 233.108098] RIP: 0033:0x457099 [ 233.111307] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 233.130234] RSP: 002b:00007fef33145c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 233.137977] RAX: ffffffffffffffda RBX: 00007fef331466d4 RCX: 0000000000457099 [ 233.145271] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000003 [ 233.152556] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 233.159864] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 233.167154] R13: 00000000004d47d0 R14: 00000000004c8e63 R15: 0000000000000000 [ 233.174816] Dumping ftrace buffer: [ 233.178367] (ftrace buffer empty) [ 233.182121] Kernel Offset: disabled [ 233.185745] Rebooting in 86400 seconds..