Warning: Permanently added '10.128.10.44' (ECDSA) to the list of known hosts. 2018/11/15 10:23:27 fuzzer started 2018/11/15 10:23:32 dialing manager at 10.128.0.26:43625 2018/11/15 10:23:32 syscalls: 1 2018/11/15 10:23:32 code coverage: enabled 2018/11/15 10:23:32 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/11/15 10:23:32 setuid sandbox: enabled 2018/11/15 10:23:32 namespace sandbox: enabled 2018/11/15 10:23:32 Android sandbox: /sys/fs/selinux/policy does not exist 2018/11/15 10:23:32 fault injection: enabled 2018/11/15 10:23:32 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/11/15 10:23:32 net packed injection: enabled 2018/11/15 10:23:32 net device setup: enabled 10:26:39 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000200)={0x18, 0x2, {0x0, @remote}}, 0x1e) syzkaller login: [ 272.691248] IPVS: ftp: loaded support on port[0] = 21 [ 275.130167] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.136742] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.145672] device bridge_slave_0 entered promiscuous mode [ 275.290685] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.297331] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.306100] device bridge_slave_1 entered promiscuous mode [ 275.444479] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 275.582610] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 276.022591] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 276.173610] bond0: Enslaving bond_slave_1 as an active interface with an up link 10:26:44 executing program 1: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000000140)) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) fchdir(r1) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socket$inet_tcp(0x2, 0x1, 0x0) r4 = creat(&(0x7f0000000540)='./file0\x00', 0x0) r5 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r5, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000180)) signalfd(0xffffffffffffffff, &(0x7f0000000340)={0xeb}, 0x8) r6 = getegid() fchown(r4, 0x0, r6) bind(0xffffffffffffffff, &(0x7f0000000280)=@nl, 0x80) munlockall() dup2(r2, r4) timerfd_gettime(r0, &(0x7f0000000180)) [ 276.555483] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 276.562880] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 276.997438] IPVS: ftp: loaded support on port[0] = 21 [ 277.187543] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 277.196261] team0: Port device team_slave_0 added [ 277.387160] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 277.395535] team0: Port device team_slave_1 added [ 277.636958] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 277.644248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 277.653288] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 277.871149] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 277.878588] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 277.887782] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 278.105262] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 278.113159] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 278.122625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 278.330910] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 278.338879] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 278.348539] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 280.807652] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.814465] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.823368] device bridge_slave_0 entered promiscuous mode [ 281.015031] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.021542] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.030489] device bridge_slave_1 entered promiscuous mode [ 281.283023] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 281.310859] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.317481] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.324685] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.331178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.340264] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 281.561471] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 281.772450] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 282.430506] bond0: Enslaving bond_slave_0 as an active interface with an up link 10:26:50 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000040), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) syz_execute_func(&(0x7f0000000300)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3196f") setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000080), 0x357) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f00000001c0), 0xc) [ 282.699001] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 282.894613] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 282.912684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 283.225771] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 283.233082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 283.589934] IPVS: ftp: loaded support on port[0] = 21 [ 284.023012] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 284.031239] team0: Port device team_slave_0 added [ 284.376726] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 284.385075] team0: Port device team_slave_1 added [ 284.550670] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 284.559921] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 284.569041] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 284.784383] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 285.012777] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 285.020433] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 285.030098] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 285.359174] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 285.367007] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 285.376614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 288.504543] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.511026] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.520113] device bridge_slave_0 entered promiscuous mode [ 288.776372] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.783079] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.791826] device bridge_slave_1 entered promiscuous mode [ 288.855006] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.861505] bridge0: port 2(bridge_slave_1) entered forwarding state [ 288.868634] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.875318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 288.885429] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 289.001395] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 289.134849] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 289.233286] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 290.154340] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 290.446291] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 290.779950] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 290.787298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 291.044349] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 291.051523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 10:26:59 executing program 3: clone(0x200, &(0x7f0000000280), &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000280)) mknod(&(0x7f0000000040)='./file0\x00', 0x8000001040, 0x0) execve(&(0x7f0000000340)='./file0\x00', &(0x7f0000000300), &(0x7f0000000440)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/11, 0xb9) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) syz_execute_func(&(0x7f00000002c0)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3196f") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000580)='./file0/file0\x00', &(0x7f0000000300), &(0x7f0000000480), 0x1800) ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000380)) open$dir(&(0x7f0000000240)='./file0\x00', 0x841, 0x0) [ 291.981878] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 291.989899] team0: Port device team_slave_0 added [ 292.388154] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 292.396542] team0: Port device team_slave_1 added [ 292.790991] IPVS: ftp: loaded support on port[0] = 21 [ 292.833338] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 292.879989] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 292.889239] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 293.084137] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 293.091241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 293.100256] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 293.339385] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.429293] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 293.437383] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 293.446641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 293.801541] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 293.809460] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 293.818780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 294.832684] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 296.049935] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 296.057003] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 296.065396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 297.507427] 8021q: adding VLAN 0 to HW filter on device team0 [ 297.989042] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.995647] bridge0: port 2(bridge_slave_1) entered forwarding state [ 298.002824] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.009323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.019264] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 298.382664] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 299.186287] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.193062] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.201604] device bridge_slave_0 entered promiscuous mode [ 299.567709] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.574305] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.583111] device bridge_slave_1 entered promiscuous mode [ 300.011374] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 300.331556] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 301.500869] bond0: Enslaving bond_slave_0 as an active interface with an up link 10:27:09 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) syz_execute_func(&(0x7f00000002c0)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3196f") flock(r0, 0x6) [ 301.940129] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 302.356591] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 302.363947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 302.726807] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 302.734281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 303.117599] IPVS: ftp: loaded support on port[0] = 21 [ 304.009339] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 304.017715] team0: Port device team_slave_0 added [ 304.460510] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.502313] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 304.510318] team0: Port device team_slave_1 added [ 304.877842] not chained 10000 origins [ 304.881722] CPU: 0 PID: 7408 Comm: ip Not tainted 4.20.0-rc2+ #85 [ 304.887966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 304.897343] Call Trace: [ 304.899967] dump_stack+0x32d/0x480 [ 304.903645] ? save_stack_trace+0xc6/0x110 [ 304.907925] kmsan_internal_chain_origin+0x222/0x240 [ 304.913105] ? kmsan_internal_chain_origin+0x136/0x240 [ 304.918404] ? __msan_chain_origin+0x6d/0xb0 [ 304.922843] ? __save_stack_trace+0x8be/0xc60 [ 304.927838] ? save_stack_trace+0xc6/0x110 [ 304.932101] ? kmsan_internal_chain_origin+0x136/0x240 [ 304.937408] ? kmsan_memcpy_origins+0x13d/0x190 [ 304.942100] ? __msan_memcpy+0x6f/0x80 [ 304.946016] ? nla_put+0x20a/0x2d0 [ 304.949577] ? bond_fill_info+0x35b/0x2780 [ 304.953841] ? rtnl_fill_ifinfo+0x55fd/0x6d80 [ 304.958359] ? rtnl_dump_ifinfo+0x18b5/0x2140 [ 304.962878] ? netlink_dump+0xc79/0x1c90 [ 304.966957] ? netlink_recvmsg+0xec2/0x19d0 [ 304.971310] ? sock_recvmsg+0x1d1/0x230 [ 304.975317] ? ___sys_recvmsg+0x444/0xae0 [ 304.979483] ? __se_sys_recvmsg+0x2fa/0x450 [ 304.983861] ? __x64_sys_recvmsg+0x4a/0x70 [ 304.988114] ? do_syscall_64+0xcf/0x110 [ 304.992126] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 304.997546] ? zone_statistics+0x26b/0x2f0 [ 305.001813] ? task_kmsan_context_state+0x51/0x90 [ 305.006710] ? __msan_get_context_state+0x9/0x20 [ 305.011528] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 305.017005] ? in_task_stack+0x12c/0x210 [ 305.021143] __msan_chain_origin+0x6d/0xb0 [ 305.025416] ? __x64_sys_recvmsg+0x4a/0x70 [ 305.029679] __save_stack_trace+0x8be/0xc60 [ 305.034078] ? __x64_sys_recvmsg+0x4a/0x70 [ 305.038346] save_stack_trace+0xc6/0x110 [ 305.042444] kmsan_internal_chain_origin+0x136/0x240 [ 305.047590] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 305.053065] ? kmsan_internal_chain_origin+0x136/0x240 [ 305.058370] ? kmsan_memcpy_origins+0x13d/0x190 [ 305.063061] ? __msan_memcpy+0x6f/0x80 [ 305.067004] ? nla_put+0x20a/0x2d0 [ 305.070565] ? bond_fill_info+0x35b/0x2780 [ 305.074843] ? rtnl_fill_ifinfo+0x55fd/0x6d80 [ 305.079364] ? rtnl_dump_ifinfo+0x18b5/0x2140 [ 305.083886] ? netlink_dump+0xc79/0x1c90 [ 305.087986] ? netlink_recvmsg+0xec2/0x19d0 [ 305.092332] ? sock_recvmsg+0x1d1/0x230 [ 305.096346] ? ___sys_recvmsg+0x444/0xae0 [ 305.100520] ? __se_sys_recvmsg+0x2fa/0x450 [ 305.104896] ? kmsan_memcpy_origins+0x111/0x190 [ 305.109637] ? kmsan_set_origin+0x7f/0x100 [ 305.113905] ? kmsan_internal_unpoison_shadow+0x83/0xd0 [ 305.119310] kmsan_memcpy_origins+0x13d/0x190 [ 305.123845] __msan_memcpy+0x6f/0x80 [ 305.127596] nla_put+0x20a/0x2d0 [ 305.131002] bond_fill_info+0x35b/0x2780 [ 305.135106] ? __msan_memcpy+0x19/0x80 [ 305.139031] ? bond_get_size+0x30/0x30 [ 305.142940] rtnl_fill_ifinfo+0x55fd/0x6d80 [ 305.147293] ? ironlake_get_pipe_config+0xfe7/0x1270 [ 305.152418] ? ironlake_get_pipe_config+0xfe7/0x1270 [ 305.157595] rtnl_dump_ifinfo+0x18b5/0x2140 [ 305.162058] ? kmsan_internal_unpoison_shadow+0x83/0xd0 [ 305.167457] ? rtnl_getlink+0xec0/0xec0 [ 305.171455] netlink_dump+0xc79/0x1c90 [ 305.175402] netlink_recvmsg+0xec2/0x19d0 [ 305.179637] sock_recvmsg+0x1d1/0x230 [ 305.183515] ? netlink_sendmsg+0x1440/0x1440 [ 305.187954] ___sys_recvmsg+0x444/0xae0 [ 305.191973] ? __msan_poison_alloca+0x1e0/0x270 [ 305.196704] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 305.202089] ? __fdget+0x23c/0x440 [ 305.205681] __se_sys_recvmsg+0x2fa/0x450 [ 305.209878] __x64_sys_recvmsg+0x4a/0x70 [ 305.213957] do_syscall_64+0xcf/0x110 [ 305.217798] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 305.223004] RIP: 0033:0x7f6eab255210 [ 305.226734] Code: 31 d2 48 29 c2 64 89 11 48 83 c8 ff eb ea 90 90 90 90 90 90 90 90 90 90 90 90 83 3d e5 d3 2a 00 00 75 10 b8 2f 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 31 c3 48 83 ec 08 e8 6e bb 00 00 48 89 04 24 [ 305.245657] RSP: 002b:00007fff31e41e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 305.253392] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6eab255210 [ 305.260680] RDX: 0000000000000000 RSI: 00007fff31e41ed0 RDI: 0000000000000003 [ 305.268013] RBP: 0000000000000ac0 R08: 00007f6eab4feec8 R09: 00007f6eab29b800 [ 305.275299] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006395c0 [ 305.282596] R13: 00007fff31e45f60 R14: 0000000000000ac0 R15: 00007fff31e429d0 [ 305.289901] Uninit was stored to memory at: [ 305.294254] kmsan_internal_chain_origin+0x136/0x240 [ 305.299381] __msan_chain_origin+0x6d/0xb0 [ 305.303672] __save_stack_trace+0x8be/0xc60 [ 305.308013] save_stack_trace+0xc6/0x110 [ 305.312097] kmsan_internal_chain_origin+0x136/0x240 [ 305.317231] kmsan_memcpy_origins+0x13d/0x190 [ 305.321747] __msan_memcpy+0x6f/0x80 [ 305.325502] nla_put+0x20a/0x2d0 [ 305.328884] bond_fill_info+0x35b/0x2780 [ 305.332960] rtnl_fill_ifinfo+0x55fd/0x6d80 [ 305.337315] rtnl_dump_ifinfo+0x18b5/0x2140 [ 305.341672] netlink_dump+0xc79/0x1c90 [ 305.345575] netlink_recvmsg+0xec2/0x19d0 [ 305.349760] sock_recvmsg+0x1d1/0x230 [ 305.353691] ___sys_recvmsg+0x444/0xae0 [ 305.357679] __se_sys_recvmsg+0x2fa/0x450 [ 305.361843] __x64_sys_recvmsg+0x4a/0x70 [ 305.365929] do_syscall_64+0xcf/0x110 [ 305.369750] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 305.374944] [ 305.376578] Uninit was stored to memory at: [ 305.380928] kmsan_internal_chain_origin+0x136/0x240 [ 305.386055] __msan_chain_origin+0x6d/0xb0 [ 305.390327] __save_stack_trace+0x8be/0xc60 [ 305.394690] save_stack_trace+0xc6/0x110 [ 305.398775] kmsan_internal_chain_origin+0x136/0x240 [ 305.403903] kmsan_memcpy_origins+0x13d/0x190 [ 305.408435] __msan_memcpy+0x6f/0x80 [ 305.412165] nla_put+0x20a/0x2d0 [ 305.415552] bond_fill_info+0x35b/0x2780 [ 305.419654] rtnl_fill_ifinfo+0x55fd/0x6d80 [ 305.423990] rtnl_dump_ifinfo+0x18b5/0x2140 [ 305.428329] netlink_dump+0xc79/0x1c90 [ 305.432256] netlink_recvmsg+0xec2/0x19d0 [ 305.436441] sock_recvmsg+0x1d1/0x230 [ 305.440258] ___sys_recvmsg+0x444/0xae0 [ 305.444257] __se_sys_recvmsg+0x2fa/0x450 [ 305.448423] __x64_sys_recvmsg+0x4a/0x70 [ 305.452516] do_syscall_64+0xcf/0x110 [ 305.456338] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 305.461540] [ 305.463179] Uninit was stored to memory at: [ 305.467559] kmsan_internal_chain_origin+0x136/0x240 [ 305.472685] __msan_chain_origin+0x6d/0xb0 [ 305.476957] __save_stack_trace+0x8be/0xc60 [ 305.481296] save_stack_trace+0xc6/0x110 [ 305.485391] kmsan_internal_chain_origin+0x136/0x240 [ 305.490533] kmsan_memcpy_origins+0x13d/0x190 [ 305.495044] __msan_memcpy+0x6f/0x80 [ 305.498796] nla_put+0x20a/0x2d0 [ 305.502200] bond_fill_info+0x35b/0x2780 [ 305.506290] rtnl_fill_ifinfo+0x55fd/0x6d80 [ 305.510631] rtnl_dump_ifinfo+0x18b5/0x2140 [ 305.514973] netlink_dump+0xc79/0x1c90 [ 305.518886] netlink_recvmsg+0xec2/0x19d0 [ 305.523060] sock_recvmsg+0x1d1/0x230 [ 305.526881] ___sys_recvmsg+0x444/0xae0 [ 305.530869] __se_sys_recvmsg+0x2fa/0x450 [ 305.535034] __x64_sys_recvmsg+0x4a/0x70 [ 305.539119] do_syscall_64+0xcf/0x110 [ 305.542965] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 305.548177] [ 305.549817] Uninit was stored to memory at: [ 305.554167] kmsan_internal_chain_origin+0x136/0x240 [ 305.559327] __msan_chain_origin+0x6d/0xb0 [ 305.563587] __save_stack_trace+0x8be/0xc60 [ 305.567931] save_stack_trace+0xc6/0x110 [ 305.572026] kmsan_internal_chain_origin+0x136/0x240 [ 305.577149] kmsan_memcpy_origins+0x13d/0x190 [ 305.581660] __msan_memcpy+0x6f/0x80 [ 305.585396] nla_put+0x20a/0x2d0 [ 305.588784] bond_fill_info+0x35b/0x2780 [ 305.592869] rtnl_fill_ifinfo+0x55fd/0x6d80 [ 305.597214] rtnl_dump_ifinfo+0x18b5/0x2140 [ 305.601569] netlink_dump+0xc79/0x1c90 [ 305.605479] netlink_recvmsg+0xec2/0x19d0 [ 305.609659] sock_recvmsg+0x1d1/0x230 [ 305.613529] ___sys_recvmsg+0x444/0xae0 [ 305.617516] __se_sys_recvmsg+0x2fa/0x450 [ 305.621697] __x64_sys_recvmsg+0x4a/0x70 [ 305.625782] do_syscall_64+0xcf/0x110 [ 305.629606] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 305.634802] [ 305.636435] Uninit was stored to memory at: [ 305.640794] kmsan_internal_chain_origin+0x136/0x240 [ 305.645918] __msan_chain_origin+0x6d/0xb0 [ 305.650194] __save_stack_trace+0x8be/0xc60 [ 305.654567] save_stack_trace+0xc6/0x110 [ 305.658652] kmsan_internal_chain_origin+0x136/0x240 [ 305.663794] kmsan_memcpy_origins+0x13d/0x190 [ 305.668312] __msan_memcpy+0x6f/0x80 [ 305.672044] nla_put+0x20a/0x2d0 [ 305.675442] bond_fill_info+0x35b/0x2780 [ 305.679554] rtnl_fill_ifinfo+0x55fd/0x6d80 [ 305.683903] rtnl_dump_ifinfo+0x18b5/0x2140 [ 305.688247] netlink_dump+0xc79/0x1c90 [ 305.692156] netlink_recvmsg+0xec2/0x19d0 [ 305.696323] sock_recvmsg+0x1d1/0x230 [ 305.700141] ___sys_recvmsg+0x444/0xae0 [ 305.704134] __se_sys_recvmsg+0x2fa/0x450 [ 305.708303] __x64_sys_recvmsg+0x4a/0x70 [ 305.712386] do_syscall_64+0xcf/0x110 [ 305.716207] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 305.721412] [ 305.723069] Uninit was stored to memory at: [ 305.727412] kmsan_internal_chain_origin+0x136/0x240 [ 305.732561] __msan_chain_origin+0x6d/0xb0 [ 305.736825] __save_stack_trace+0x8be/0xc60 [ 305.741194] save_stack_trace+0xc6/0x110 [ 305.745288] kmsan_internal_chain_origin+0x136/0x240 [ 305.750415] kmsan_memcpy_origins+0x13d/0x190 [ 305.754932] __msan_memcpy+0x6f/0x80 [ 305.758680] nla_put+0x20a/0x2d0 [ 305.762069] bond_fill_info+0x35b/0x2780 [ 305.766156] rtnl_fill_ifinfo+0x55fd/0x6d80 [ 305.770524] rtnl_dump_ifinfo+0x18b5/0x2140 [ 305.774867] netlink_dump+0xc79/0x1c90 [ 305.778772] netlink_recvmsg+0xec2/0x19d0 [ 305.782974] sock_recvmsg+0x1d1/0x230 [ 305.786794] ___sys_recvmsg+0x444/0xae0 [ 305.790787] __se_sys_recvmsg+0x2fa/0x450 [ 305.794952] __x64_sys_recvmsg+0x4a/0x70 [ 305.799035] do_syscall_64+0xcf/0x110 [ 305.802876] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 305.808102] [ 305.809748] Uninit was stored to memory at: [ 305.814092] kmsan_internal_chain_origin+0x136/0x240 [ 305.819241] __msan_chain_origin+0x6d/0xb0 [ 305.823515] __save_stack_trace+0x8be/0xc60 [ 305.827871] save_stack_trace+0xc6/0x110 [ 305.831956] kmsan_internal_chain_origin+0x136/0x240 [ 305.837081] kmsan_memcpy_origins+0x13d/0x190 [ 305.841601] __msan_memcpy+0x6f/0x80 [ 305.845338] nla_put+0x20a/0x2d0 [ 305.848751] bond_fill_info+0x35b/0x2780 [ 305.852828] rtnl_fill_ifinfo+0x55fd/0x6d80 [ 305.857181] rtnl_dump_ifinfo+0x18b5/0x2140 [ 305.861562] netlink_dump+0xc79/0x1c90 [ 305.865478] netlink_recvmsg+0xec2/0x19d0 [ 305.870176] sock_recvmsg+0x1d1/0x230 [ 305.874005] ___sys_recvmsg+0x444/0xae0 [ 305.877995] __se_sys_recvmsg+0x2fa/0x450 [ 305.882158] __x64_sys_recvmsg+0x4a/0x70 [ 305.886245] do_syscall_64+0xcf/0x110 [ 305.890084] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 305.895278] [ 305.896919] Local variable description: ----old.addr.i.i.i@should_fail [ 305.903607] Variable was created at: [ 305.907371] should_fail+0x123/0x13c0 [ 305.911193] __alloc_pages_nodemask+0x6f7/0x64d0 [ 305.943747] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 305.950989] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 305.960064] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 306.370571] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 306.378055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 306.386929] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 306.771615] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 306.779653] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 306.789135] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 307.142608] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 307.150295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 307.159524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready 10:27:16 executing program 0: clone(0x200, &(0x7f0000000380), &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000300)) mknod(&(0x7f0000000040)='./file0\x00', 0x8000001040, 0x0) execve(&(0x7f0000000340)='./file0\x00', &(0x7f0000000300), &(0x7f0000000200)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000300)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) syz_execute_func(&(0x7f00000002c0)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3196f") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000700), &(0x7f0000000300), 0x80000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000180)) open$dir(&(0x7f0000000240)='./file0\x00', 0x841, 0x0) [ 308.922136] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready 10:27:17 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r1 = getpgrp(0x0) ptrace$setregs(0xd, r1, 0x71c, &(0x7f0000000040)="467291c1f603f24a2521c12274ca525bdd42d4c615208b32be976f7da9766c6f28c287a40b87c55196ce735dc3fee66c3ee8c76ce2381699ac292c45e0fde0eea510f67135506cc51f5e2b2647182006393a2c8eca8033157775b5063dad") fcntl$setstatus(r0, 0x4, 0x2000) 10:27:18 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x6, 0x100) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0xfffffffffffffffa, 0x0, 0x1, 0x101}) ioctl$DRM_IOCTL_AGP_UNBIND(r1, 0x40106437, &(0x7f0000000080)={r2, 0x80}) sendmmsg(r0, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)="b5bbf39620e885ec2f4950e91f5f87cabc68da9c9286bcecfaf9edcfd64f217c", 0x20}], 0x1, &(0x7f0000000280), 0x0, 0x44000}, 0x9}, {{&(0x7f0000000580)=@generic={0x0, "76f20418ad1d08f08250f02ab96e532d7e7a0045ce1c044c3668aa56efe6ecf020b4579e0fa9ba178efcf494a3683b412c91e2ac1788ea882615730db29f20af0467d1cb677b02435bcd6af89e88f334cf444870654ce182bdcb35a417e1b50383c7f8868c2a46440ebaa69beb3a5ca82c8be4989beca1af39c979b4883d"}, 0x80, &(0x7f0000000740), 0x0, &(0x7f0000000780), 0x0, 0x20000000}, 0x8001}], 0x2, 0x810) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f0000000100)={r3, 0x20}) 10:27:18 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@multicast2, @rand_addr}, 0x4) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000240)=ANY=[@ANYBLOB="6e6174000001581eb3cd000000000000010000000000000000df45ad7fb898078c1d56c90a00000000000000a66f1b00000005000000d80330020000301994ee6ec30e32aa0645921b9b020000d0030000d00300d0"], 0x1) socketpair(0xa, 0x6, 0x3, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r3, 0xc08c5334, &(0x7f0000000140)={0x6, 0x4, 0x5, 'queue1\x00', 0x6}) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup3(r0, r1, 0x0) [ 310.709946] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 310.716504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 310.724578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 10:27:19 executing program 0: r0 = socket$inet6(0x10, 0x80002, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000480)='/dev/vhci\x00', 0x40000, 0x0) read$FUSE(r1, &(0x7f00000004c0), 0x1000) r2 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x6, 0x109002) ioctl$EVIOCGID(r2, 0x80084502, &(0x7f0000000380)=""/245) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000180)=@nl, 0x80, &(0x7f0000000000)=[{&(0x7f0000000040)="5500000018007f5300fe01b2a4a280930a6000fdff2843687500000039000500fe800000000000dc1338d5440000c43bb8220000060cec4fab91d4000000000000000000dc302cfe27147000000000000000000000", 0x55}], 0x1, &(0x7f0000000100)}, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000100)={0xc, 0x8, 0xfa00, {&(0x7f0000000200)}}, 0x10) [ 311.588169] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.595031] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.603725] device bridge_slave_0 entered promiscuous mode [ 311.954636] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.961149] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.970356] device bridge_slave_1 entered promiscuous mode [ 312.098533] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.105218] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.112278] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.118784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.127599] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 312.247899] 8021q: adding VLAN 0 to HW filter on device team0 [ 312.284642] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 312.412958] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 10:27:20 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffefffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000000), 0x1) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f00000000c0)={{0x3b, @remote, 0x4e22, 0x1, 'wlc\x00', 0xbe1b887a0f6db85a, 0x4, 0x13}, {@loopback, 0x4e20, 0x10000, 0x4, 0x2, 0x7f}}, 0x44) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x200, 0x0) ioctl$RTC_PLL_SET(r3, 0x40207012, &(0x7f00000001c0)={0x1, 0x9, 0xfff, 0xc56, 0x0, 0x1, 0x2}) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x0, 0x30}, 0xc) [ 312.756194] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready 10:27:20 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001380)='/dev/vhost-vsock\x00', 0x2, 0x0) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000013c0)='cgroup.subtree_control\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001400)={0xffffffffffffffff}) r4 = syz_open_dev$usbmon(&(0x7f0000001440)='/dev/usbmon#\x00', 0x1, 0x210901) r5 = syz_open_dev$sndseq(&(0x7f0000001480)='/dev/snd/seq\x00', 0x0, 0x400) r6 = openat$urandom(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/urandom\x00', 0x2, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000001500)={0x0, 0x0}) fstat(0xffffffffffffff9c, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00000015c0), &(0x7f0000001600), &(0x7f0000001640)=0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000016c0)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0xd, &(0x7f0000001680)='%..wlan1user\x00', 0xffffffffffffffff}, 0x30) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000001700)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/fuse\x00', 0x2, 0x0) r14 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000001780)='syz0\x00', 0x200002, 0x0) r15 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000) r16 = openat(0xffffffffffffff9c, &(0x7f0000002d40)='./file0\x00', 0x145000, 0x80) socketpair$inet(0x2, 0x4, 0x1, &(0x7f0000002d80)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000002dc0)={0xffffffffffffffff}) r19 = epoll_create1(0x80000) r20 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000002e00)='/dev/dlm-control\x00', 0x80802, 0x0) r21 = syz_open_dev$sndctrl(&(0x7f0000002e40)='/dev/snd/controlC#\x00', 0x3, 0x20200) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000002e80)=0x0) r23 = geteuid() r24 = getgid() r25 = gettid() lstat(&(0x7f0000002ec0)='./file0\x00', &(0x7f0000002f00)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000002f80)='./file0\x00', &(0x7f0000002fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r0, &(0x7f0000003140)={&(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001300)=[{&(0x7f00000000c0)="952cb38049eca16643e28f38de8b7b86cd1f7841ca4c75682be605641152d243d5fa9db1719e0d8347851d77f2b6c4eefb4f20aebb47962b49dc8186aa078dc283df31516a7564b6ed6b39b05d901bb6f02b3aa2e66b8455d1b366ac5f8d6fb42d8a41a640042d449ae1458f03eeb4abe43c2a4c464cd1e0b83773f3dcdac6bcfbb4ea5c1d64e27bebe8f59b0b461589ba5da9ccee6825573f", 0x99}, {&(0x7f0000000180)="65b1a4c77c446437502b199cb088acc02e41f7769339bf00f283dab81e3e2577a2699a6c70660d26ade6268f4ffa8ced0ea5b35cdd7f2942484e3077cd26c52a1d22972ee01d8d342cdf18e6093c69e33e1d397b99035808b2a17c", 0x5b}, {&(0x7f0000000200)='W', 0x1}, {&(0x7f0000000240)="1e6a26917f1a55ca45b537228617b2383f77ba29417f3a3de10cb3e7e44a5de5f8557c86617804f5df99dff869833dfa81aaf9744ca9a79f7276523a77841ae23d06dbbe54ffbe37dc506ae32d32a1d934a73289068268fd65f601b622fea320169f6005520e9502cd285bd53b008d6155767948348fa5d2bd0dcaef14552dcfac2680e1ea426105c3ba36409f6b55ab91ab401406cb15139fd62eea41c8301dfa943ccd21f5b2969a6866a27e70ffbf99aa", 0xb2}, {&(0x7f0000000300)="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", 0x1000}], 0x5, &(0x7f0000003040)=[@rights={0x28, 0x1, 0x1, [r1, r2, r3, r4, r5]}, @rights={0x18, 0x1, 0x1, [r6, r7]}, @cred={0x20, 0x1, 0x2, r8, r9, r10}, @rights={0x18, 0x1, 0x1, [r11, r12]}, @rights={0x38, 0x1, 0x1, [r13, r14, r15, r16, r17, r18, r19, r20, r21]}, @cred={0x20, 0x1, 0x2, r22, r23, r24}, @cred={0x20, 0x1, 0x2, r25, r26, r27}], 0xf0, 0x80}, 0x4000000) fsetxattr$security_capability(r1, &(0x7f0000003180)='security.capability\x00', &(0x7f00000031c0)=@v1={0x1000000, [{0x0, 0x6}]}, 0xc, 0x1) 10:27:21 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="18060000030000dc0000000063e5d296e7684fb7b9d1ff2a"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000002c0)={r0, r1}) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000040)={r0}) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x42) write$P9_RFLUSH(r3, &(0x7f0000000040)={0x7, 0x6d, 0x2}, 0x7) ppoll(&(0x7f0000000040), 0x0, &(0x7f0000000080), &(0x7f00000000c0)={0x4}, 0x8) signalfd(r1, &(0x7f0000000100)={0xffff}, 0x8) rt_sigreturn() write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)}}, 0x20) [ 313.552478] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 313.655772] PANIC: double fault, error_code: 0x0 [ 313.660635] CPU: 0 PID: 7608 Comm: syz-executor0 Not tainted 4.20.0-rc2+ #85 [ 313.667866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 313.680289] ================================================================== [ 313.680299] BUG: KMSAN: uninit-value in do_raw_spin_lock+0x130/0x410 [ 313.680308] CPU: 0 PID: 7608 Comm: syz-executor0 Not tainted 4.20.0-rc2+ #85 [ 313.680318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 313.680324] Call Trace: [ 313.680330] <#DF> [ 313.680338] dump_stack+0x32d/0x480 [ 313.680345] ? do_raw_spin_lock+0x130/0x410 [ 313.680367] kmsan_report+0x19f/0x300 [ 313.680375] kmsan_internal_check_memory+0x35b/0x3b0 [ 313.680383] ? __msan_poison_alloca+0x1e0/0x270 [ 313.680405] kmsan_check_memory+0xd/0x10 [ 313.680413] do_raw_spin_lock+0x130/0x410 [ 313.680422] ? kmsan_internal_unpoison_shadow+0x83/0xd0 [ 313.680429] _raw_spin_lock+0x27/0x30 [ 313.680437] vprintk_emit+0x1d9/0x8a0 [ 313.680444] vprintk_default+0x90/0xa0 [ 313.680467] vprintk_func+0x26b/0x2a0 [ 313.680475] printk+0x1a3/0x1f0 [ 313.680483] ? kmsan_get_origin_address+0x212/0x360 [ 313.680492] ? kmsan_get_shadow_origin_ptr+0x2c0/0x410 [ 313.680501] show_iret_regs+0x13c/0x540 [ 313.680510] ? kmsan_get_origin_address+0x212/0x360 [ 313.680519] ? __show_regs+0xb2/0x1350 [ 313.680527] ? show_regs+0xaf/0x170 [ 313.680535] __show_regs+0xc9/0x1350 [ 313.680543] ? get_cpu_entry_area+0xc/0x30 [ 313.680552] ? kmsan_get_shadow_origin_ptr+0x2c0/0x410 [ 313.680559] show_regs+0xaf/0x170 [ 313.680567] df_debug+0x86/0xb0 [ 313.680575] do_double_fault+0x362/0x480 [ 313.680583] double_fault+0x1e/0x30 [ 313.680605] RIP: 0010:kmsan_get_origin_address+0x212/0x360 [ 313.680625] Code: 2d 01 00 00 e9 fe 00 00 00 65 44 8b 34 25 20 a1 02 00 48 b8 00 00 00 00 00 02 00 00 48 01 d8 48 3d ff 0f e8 00 77 38 44 89 f7 19 30 4a ff 48 89 d9 48 29 c1 85 c9 78 26 48 63 c1 48 3d ff 9f [ 313.680634] RSP: 0018:fffffe0000002000 EFLAGS: 00010093 [ 313.680649] RAX: 0000000000002150 RBX: fffffe0000002150 RCX: 000000000000002e [ 313.680660] RDX: 0000000000000001 RSI: 0000000000000088 RDI: 0000000000000000 [ 313.680670] RBP: fffffe0000002038 R08: 0000000000000000 R09: 0000000000000000 [ 313.680696] R10: 0000000000000000 R11: 0000000000000000 R12: 0000778000000000 [ 313.680706] R13: 0000000000000000 R14: 0000000000000000 R15: fffffe0080002150 [ 313.680728] [ 313.680735] [ 313.680743] kmsan_memmove_origins+0xbd/0x1c0 [ 313.680752] ? kmsan_memmove_shadow+0xad/0xd0 [ 313.680761] __msan_memmove+0x6c/0x80 [ 313.680769] fixup_bad_iret+0x63/0xc0 [ 313.680776] error_entry+0xad/0xc0 [ 313.680803] RIP: 0000: (null) [ 313.680810] Code: Bad RIP value. [ 313.680833] RSP: a3fb7f:00007effc9de19c0 EFLAGS: 00000000 ORIG_RAX: 0000000000000000 [ 313.680864] RAX: 0000000000000000 RBX: ffffffff8b000e58 RCX: 000000000040393c [ 313.680874] RDX: 927507098f9bb600 RSI: 0000000000000000 RDI: 0000000000000000 [ 313.680900] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000072bf08 [ 313.680910] R10: 000000000072bf00 R11: 000000000072bf0c R12: 0000000000000000 [ 313.680920] R13: 000000000072bf08 R14: 000000000072bf00 R15: 000000000072bf0c [ 313.680928] ? general_protection+0x8/0x30 [ 313.680937] ? general_protection+0x8/0x30 [ 313.680945] [ 313.680952] [ 313.680962] Local variable description: ----v.addr.i.i@do_raw_spin_lock [ 313.680970] Variable was created at: [ 313.680978] do_raw_spin_lock+0x62/0x410 [ 313.680986] _raw_spin_lock+0x27/0x30 [ 313.681007] [ 313.681016] Bytes 0-7 of 8 are uninitialized [ 313.681025] Memory access of size 8 starts at fffffe00000099f8 [ 313.681035] ================================================================== [ 313.681044] Disabling lock debugging due to kernel taint [ 313.681053] Kernel panic - not syncing: panic_on_warn set ... [ 313.681065] CPU: 0 PID: 7608 Comm: syz-executor0 Tainted: G B 4.20.0-rc2+ #85 [ 313.681076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 313.681083] Call Trace: [ 313.681090] <#DF> [ 313.681097] dump_stack+0x32d/0x480 [ 313.681104] panic+0x624/0xc08 [ 313.681112] kmsan_report+0x300/0x300 [ 313.681120] kmsan_internal_check_memory+0x35b/0x3b0 [ 313.681128] ? __msan_poison_alloca+0x1e0/0x270 [ 313.681136] kmsan_check_memory+0xd/0x10 [ 313.681144] do_raw_spin_lock+0x130/0x410 [ 313.681152] ? kmsan_internal_unpoison_shadow+0x83/0xd0 [ 313.681174] _raw_spin_lock+0x27/0x30 [ 313.681182] vprintk_emit+0x1d9/0x8a0 [ 313.681189] vprintk_default+0x90/0xa0 [ 313.681196] vprintk_func+0x26b/0x2a0 [ 313.681203] printk+0x1a3/0x1f0 [ 313.681211] ? kmsan_get_origin_address+0x212/0x360 [ 313.681220] ? kmsan_get_shadow_origin_ptr+0x2c0/0x410 [ 313.681236] show_iret_regs+0x13c/0x540 [ 313.681245] ? kmsan_get_origin_address+0x212/0x360 [ 313.681253] ? __show_regs+0xb2/0x1350 [ 313.681261] ? show_regs+0xaf/0x170 [ 313.681269] __show_regs+0xc9/0x1350 [ 313.681277] ? get_cpu_entry_area+0xc/0x30 [ 313.681285] ? kmsan_get_shadow_origin_ptr+0x2c0/0x410 [ 313.681293] show_regs+0xaf/0x170 [ 313.681300] df_debug+0x86/0xb0 [ 313.681308] do_double_fault+0x362/0x480 [ 313.681315] double_fault+0x1e/0x30 [ 313.681325] RIP: 0010:kmsan_get_origin_address+0x212/0x360 [ 313.681342] Code: 2d 01 00 00 e9 fe 00 00 00 65 44 8b 34 25 20 a1 02 00 48 b8 00 00 00 00 00 02 00 00 48 01 d8 48 3d ff 0f e8 00 77 38 44 89 f7 19 30 4a ff 48 89 d9 48 29 c1 85 c9 78 26 48 63 c1 48 3d ff 9f [ 313.681350] RSP: 0018:fffffe0000002000 EFLAGS: 00010093 [ 313.681365] RAX: 0000000000002150 RBX: fffffe0000002150 RCX: 000000000000002e [ 313.681375] RDX: 0000000000000001 RSI: 0000000000000088 RDI: 0000000000000000 [ 313.681385] RBP: fffffe0000002038 R08: 0000000000000000 R09: 0000000000000000 [ 313.681395] R10: 0000000000000000 R11: 0000000000000000 R12: 0000778000000000 [ 313.681404] R13: 0000000000000000 R14: 0000000000000000 R15: fffffe0080002150 [ 313.681411] [ 313.681418] [ 313.681426] kmsan_memmove_origins+0xbd/0x1c0 [ 313.681434] ? kmsan_memmove_shadow+0xad/0xd0 [ 313.681442] __msan_memmove+0x6c/0x80 [ 313.681449] fixup_bad_iret+0x63/0xc0 [ 313.681456] error_entry+0xad/0xc0 [ 313.681464] RIP: 0000: (null) [ 313.681471] Code: Bad RIP value. [ 313.681479] RSP: a3fb7f:00007effc9de19c0 EFLAGS: 00000000 ORIG_RAX: 0000000000000000 [ 313.681494] RAX: 0000000000000000 RBX: ffffffff8b000e58 RCX: 000000000040393c [ 313.681503] RDX: 927507098f9bb600 RSI: 0000000000000000 RDI: 0000000000000000 [ 313.681513] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000072bf08 [ 313.681522] R10: 000000000072bf00 R11: 000000000072bf0c R12: 0000000000000000 [ 313.681531] R13: 000000000072bf08 R14: 000000000072bf00 R15: 000000000072bf0c [ 313.681539] ? general_protection+0x8/0x30 [ 313.681546] ? general_protection+0x8/0x30 [ 313.681553] [ 313.682507] Kernel Offset: disabled