[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 32.400076] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 35.210101] random: sshd: uninitialized urandom read (32 bytes read) [ 35.577531] random: sshd: uninitialized urandom read (32 bytes read) [ 36.703356] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.21' (ECDSA) to the list of known hosts. [ 42.454149] random: sshd: uninitialized urandom read (32 bytes read) 2018/09/09 12:32:56 fuzzer started [ 43.912737] random: cc1: uninitialized urandom read (8 bytes read) 2018/09/09 12:32:59 dialing manager at 10.128.0.26:44893 2018/09/09 12:32:59 syscalls: 1 2018/09/09 12:32:59 code coverage: enabled 2018/09/09 12:32:59 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/09/09 12:32:59 setuid sandbox: enabled 2018/09/09 12:32:59 namespace sandbox: enabled 2018/09/09 12:32:59 fault injection: enabled 2018/09/09 12:32:59 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/09/09 12:32:59 net packed injection: enabled 2018/09/09 12:32:59 net device setup: enabled [ 47.603700] random: crng init done 12:35:00 executing program 0: clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f00000000c0)={{0x0, 0x0, 0x0, 0x3}}) 12:35:00 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000200)) sendto$inet6(r1, &(0x7f00000000c0), 0x1100000000000000, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2}, 0x2000011c) 12:35:00 executing program 7: clone(0x210007fa, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000000)) syslog(0x3, 0xfffffffffffffffe, 0x248) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000000c0)) open(&(0x7f0000000040)='./file0\x00', 0x400000, 0x0) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000000140)=""/89) 12:35:00 executing program 4: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$UHID_CREATE(r0, &(0x7f0000000440)={0x0, 'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000280)=""/107, 0x6b, 0x3, 0x0, 0x7}, 0x120) fcntl$setstatus(r2, 0x4, 0x6100) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) 12:35:00 executing program 2: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x28a, &(0x7f0000000000)}, 0x0) recvmsg$kcm(r1, &(0x7f0000001480)={&(0x7f0000000000)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000000100), 0x0, &(0x7f0000001380)=""/247, 0xf7}, 0x0) close(r1) close(r0) 12:35:00 executing program 3: clone(0x8002102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000140)) rt_sigqueueinfo(0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffffffffffc}) 12:35:00 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8910, &(0x7f0000000000)={"626f6e645f736c6176655f3000fd00", {0x2, 0x0, @local}}) 12:35:00 executing program 6: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000280)="83369d639c327574ae5cae529a7c3cab79f2098d197c218d8035f8c3826e17c85932a7274b225ce857362fbeed6dea5965896f7d78ce0f780234402ac21c0c93147c3763e404523c", 0x48}], 0x1, &(0x7f0000004500)=[{0x10}], 0x10, 0x4}, 0x0) recvmsg(r1, &(0x7f00000024c0)={&(0x7f00000000c0)=@in6, 0x80, &(0x7f0000001340)=[{&(0x7f00000014c0)=""/4096, 0x1000}], 0x1}, 0x0) [ 168.045892] IPVS: ftp: loaded support on port[0] = 21 [ 168.077631] IPVS: ftp: loaded support on port[0] = 21 [ 168.110486] IPVS: ftp: loaded support on port[0] = 21 [ 168.117839] IPVS: ftp: loaded support on port[0] = 21 [ 168.119544] IPVS: ftp: loaded support on port[0] = 21 [ 168.132216] IPVS: ftp: loaded support on port[0] = 21 [ 168.143092] IPVS: ftp: loaded support on port[0] = 21 [ 168.146395] IPVS: ftp: loaded support on port[0] = 21 [ 170.647522] ip (4465) used greatest stack depth: 53880 bytes left [ 170.736989] ip (4469) used greatest stack depth: 53752 bytes left [ 172.131331] ip (4551) used greatest stack depth: 53240 bytes left [ 172.592512] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.599024] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.624908] device bridge_slave_0 entered promiscuous mode [ 172.902522] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.909033] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.949883] device bridge_slave_1 entered promiscuous mode [ 173.072983] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.079474] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.118920] device bridge_slave_0 entered promiscuous mode [ 173.184600] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.191153] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.237310] device bridge_slave_0 entered promiscuous mode [ 173.266069] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.272559] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.293242] device bridge_slave_0 entered promiscuous mode [ 173.307292] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 173.320529] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.327004] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.349965] device bridge_slave_0 entered promiscuous mode [ 173.374355] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.380820] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.419936] device bridge_slave_0 entered promiscuous mode [ 173.439827] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.446286] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.465883] device bridge_slave_1 entered promiscuous mode [ 173.483031] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.489504] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.504383] device bridge_slave_0 entered promiscuous mode [ 173.527663] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.534149] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.564859] device bridge_slave_0 entered promiscuous mode [ 173.585956] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.592451] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.610277] device bridge_slave_1 entered promiscuous mode [ 173.624435] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.630941] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.651213] device bridge_slave_1 entered promiscuous mode [ 173.670460] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.676983] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.712105] device bridge_slave_1 entered promiscuous mode [ 173.729368] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 173.742537] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.749012] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.783258] device bridge_slave_1 entered promiscuous mode [ 173.804799] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 173.817497] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.823964] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.863193] device bridge_slave_1 entered promiscuous mode [ 173.882441] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.888940] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.925133] device bridge_slave_1 entered promiscuous mode [ 173.943753] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 173.974509] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 173.986443] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 174.012765] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 174.107536] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 174.115440] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 174.208526] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 174.247798] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 174.268013] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 174.314472] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 174.329604] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 174.365190] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 174.578594] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 174.592600] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 174.962252] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 175.066157] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 175.084992] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 175.231032] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 175.243080] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 175.250039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 175.295337] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 175.346354] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 175.358158] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 175.409368] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 175.429341] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 175.459110] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 175.540152] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 175.547128] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 175.567584] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 175.595639] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 175.665508] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 175.676462] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 175.718328] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 175.725336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 175.755025] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 175.763454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 175.807030] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 175.903372] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 175.913371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 175.939016] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 175.945986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 175.985409] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 175.992442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 176.025196] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 176.032195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 176.074316] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 176.083376] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 176.090303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 176.102034] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 176.152812] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 176.162987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 176.268330] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 176.275348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 176.297002] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 176.304182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 176.340469] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 176.347470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 176.407015] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 176.414027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 176.444921] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 176.452221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 176.604422] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 176.633461] team0: Port device team_slave_0 added [ 176.925889] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 176.959086] team0: Port device team_slave_1 added [ 177.098478] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 177.120560] team0: Port device team_slave_0 added [ 177.131009] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 177.156910] team0: Port device team_slave_0 added [ 177.181050] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 177.200114] team0: Port device team_slave_0 added [ 177.216141] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 177.248060] team0: Port device team_slave_0 added [ 177.259268] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 177.281858] team0: Port device team_slave_0 added [ 177.318356] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 177.326384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 177.340927] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 177.389155] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 177.407413] team0: Port device team_slave_0 added [ 177.426237] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 177.449190] team0: Port device team_slave_0 added [ 177.463646] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 177.485021] team0: Port device team_slave_1 added [ 177.511075] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 177.525918] team0: Port device team_slave_1 added [ 177.547244] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 177.571563] team0: Port device team_slave_1 added [ 177.589273] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 177.599815] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 177.624360] team0: Port device team_slave_1 added [ 177.645847] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 177.663963] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 177.684176] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 177.702003] team0: Port device team_slave_1 added [ 177.731321] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 177.747646] team0: Port device team_slave_1 added [ 177.773447] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 177.805366] team0: Port device team_slave_1 added [ 177.826808] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 177.835802] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 177.847414] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 177.877828] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 177.886558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 177.901407] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 177.939231] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 177.947955] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 177.960398] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 177.994029] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 178.002179] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 178.034629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 178.070235] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 178.077228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 178.089086] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 178.108478] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 178.120637] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 178.131037] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 178.139395] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 178.147502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 178.188669] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 178.226040] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 178.258517] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 178.281105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 178.310439] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 178.328524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 178.341276] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 178.356798] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 178.371388] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 178.393828] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 178.416580] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 178.436997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 178.455643] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 178.472115] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 178.483588] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 178.502114] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 178.521372] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 178.532563] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 178.543861] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 178.554037] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 178.561807] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 178.588250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 178.630280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 178.655349] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 178.687025] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 178.711805] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 178.734300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 178.743798] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 178.758103] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 178.766452] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 178.776626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 178.802956] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 178.810075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 178.819858] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 178.856162] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 178.874436] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 178.885134] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 178.892633] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 178.916613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 178.947566] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 178.980135] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 179.013624] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 179.039278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 179.057371] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 179.066306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 179.078785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 179.106547] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 179.118940] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 179.147956] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 179.172424] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 179.187087] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 179.197794] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 179.209820] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 179.228048] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 179.264645] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 179.305947] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 179.346974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 179.379927] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 179.409181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 179.436063] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 179.457143] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 179.476149] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 179.494404] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 179.506596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 179.549135] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 179.556610] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 179.588807] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 179.639840] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 179.660282] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 179.706267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 181.727695] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.734235] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.741126] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.747578] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.802035] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 181.808599] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 182.419193] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.425776] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.433128] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.439631] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.484924] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 182.644851] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.651376] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.658243] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.665001] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.711494] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 182.739031] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.745522] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.752408] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.758875] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.774279] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 182.783592] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.790055] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.796961] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.803411] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.845123] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 182.869996] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 182.902766] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 182.928020] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 182.954682] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 183.125670] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.132212] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.139117] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.145581] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.200420] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 183.233080] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.239562] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.246425] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.252875] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.282082] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 183.289264] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.295795] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.302644] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.309144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.352650] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 183.893477] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 183.912656] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 183.925321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 194.486638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.046857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.093799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.144724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.264642] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.664254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.718010] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.885376] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 195.962368] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.405291] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 196.459953] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 196.507297] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 196.648231] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 196.858451] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 196.930342] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 197.068118] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 197.074452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 197.087634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 197.182299] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 197.506339] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 197.515507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 197.527492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 197.569064] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 197.579642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 197.602165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 197.682535] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 197.688871] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 197.705205] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 197.960173] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 197.966488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 197.977784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 198.033550] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 198.039994] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 198.066934] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 198.148499] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 198.155003] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 198.179894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 198.429013] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.461534] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 198.474736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 198.491266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 198.716854] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.898053] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.964059] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.087554] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.357450] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.410878] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.576454] 8021q: adding VLAN 0 to HW filter on device team0 12:35:40 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000200)) sendto$inet6(r1, &(0x7f00000000c0), 0x1100000000000000, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2}, 0x2000011c) 12:35:40 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000200)) sendto$inet6(r1, &(0x7f00000000c0), 0x1100000000000000, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2}, 0x2000011c) 12:35:40 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1_mb\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f00000000c0), 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, &(0x7f00000002c0), 0x10000000000443) add_key$user(&(0x7f0000002cc0)='user\x00', &(0x7f0000002c80), &(0x7f0000000280), 0x3e4, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f00002eaffc), 0x4) 12:35:40 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000200)) sendto$inet6(r1, &(0x7f00000000c0), 0x1100000000000000, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2}, 0x2000011c) 12:35:40 executing program 6: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000100)={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000340)={r1}, &(0x7f0000000380)=0x8) pipe2(&(0x7f0000000040), 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000580)=0x401) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x22e, &(0x7f0000000280)}, 0xfffffffffffffe82) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='stack\x00') preadv(r2, &(0x7f0000000480), 0x1000000000000156, 0x0) keyctl$revoke(0x3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000480)={0x0, @in6={{0xa, 0x0, 0x3, @remote, 0x1}}, 0x9, 0x9}, 0x90) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x0) 12:35:40 executing program 0: semget$private(0x0, 0x8, 0x0) 12:35:40 executing program 1: utime(&(0x7f00000001c0)='./file0\x00', 0xfffffffffffffffd) 12:35:40 executing program 7: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000f6bfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x730000}, 0x200000}) r1 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x15) 12:35:40 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000100)={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000340)={r2, 0xfff}, &(0x7f0000000380)=0x8) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x22e, &(0x7f0000000280)}, 0xfffffffffffffe82) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='stack\x00') preadv(r3, &(0x7f0000000480), 0x1000000000000156, 0x0) timerfd_gettime(r1, &(0x7f0000000540)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000480)={0x0, @in6={{0xa, 0x4e20, 0x3, @remote, 0x1}}, 0x9, 0x9}, 0x90) keyctl$assume_authority(0x10, 0x0) 12:35:40 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000029002d080000000000000000010000000c0000ed000b400000000000"], 0x1}}, 0x0) 12:35:41 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x9) setreuid(0x0, 0x0) setreuid(0x0, r2) [ 207.072516] hrtimer: interrupt took 32727 ns 12:35:41 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000800)}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="0600a30dbfe95b817f"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) perf_event_open(&(0x7f0000001280)={0x40000000000002, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x5, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x12, &(0x7f0000000440)=ANY=[@ANYBLOB="b4000000ff00000000000000000000000000009500000000000000b80446f6f790c050a4010300a2c75c11bbf09a3051144fb6db5124707d165f71f8f6355f59135b6a22fe1df72e70f6ca90023fa55f9be81d272915ac287cf92ade732e00142e7926440db32ab8089ec2970dbdd56da16f17559ab3a383bee674e3b5b645dd0cd40273b044eeb01800000000000000000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0xffffffffffffffff}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xf, 0x0, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)="47104c00", 0x0, 0xb3, &(0x7f0000000340)=""/251, 0x0, 0x1}, 0x48) socketpair(0x1, 0x1, 0x1000000000, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$kcm(0x11, 0x2, 0x0) recvmsg$kcm(r2, &(0x7f000000b180)={&(0x7f0000009dc0)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f000000b100)=[{&(0x7f0000009e40)=""/35, 0x23}, {&(0x7f0000009e80)=""/71, 0x47}, {&(0x7f0000009f00)=""/46, 0x2e}, {&(0x7f0000009f40)=""/69, 0x45}, {&(0x7f0000009fc0)=""/12, 0xc}, {&(0x7f000000a000)=""/4096, 0x1000}, {&(0x7f000000b000)=""/213, 0xd5}], 0x7, 0x0, 0x0, 0x4e}, 0x10003) sendmsg$kcm(r3, &(0x7f000000b3c0)={&(0x7f000000b1c0)=@ll={0x11, 0x1f, r4, 0x1, 0x1, 0x6, @remote}, 0x80, &(0x7f000000b380)=[{&(0x7f000000b2c0)="fe98513ecb6a4750b9db082ab6b5b03a7f2b5865144b0af8645213e64a36fe0f87a195752ccda37e39394230514580e33291091490533abe69e0e55f4b998324663e54b8a7ee588f706c20f59aee8a0518d5a7cbf900d630c1c63039511e2f540f312cfaf32238a808e392c8e55f7cb5af79f5c93d5580ea26593b3261ec51f52673a4dd", 0x84}], 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = gettid() r6 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x1, 0x38000000000, 0x0, 0xd4, 0x0, 0x748e, 0x22000, 0x2, 0x8, 0x9, 0x200, 0x2, 0x9, 0x3ff, 0x100000000, 0xffffffffffffffff, 0xffff, 0xfffffffffffffff1, 0x3ff, 0x9, 0xc476, 0xd52, 0x1, 0x3d18, 0xfffffffffffffff7, 0x8001, 0x44ec5958, 0x2dd, 0x40, 0xfffffffffffffffa, 0x1b680, 0x5, 0x100000001, 0x3, 0x6d, 0x8, 0x0, 0x8, 0x2, @perf_bp={&(0x7f0000000140), 0x1}, 0x8, 0x7, 0x10000, 0x6, 0xa08, 0x0, 0x8}, r5, 0x10, r0, 0x8) setsockopt$sock_attach_bpf(r3, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r3, &(0x7f0000001940)={&(0x7f0000001440)=@in6={0xa, 0x0, 0x2, @mcast2}, 0x80, &(0x7f00000018c0)}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000580)='ip6_vti0\x00') r7 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) sendmsg$kcm(r1, &(0x7f00000006c0)={&(0x7f00000002c0)=@hci={0x1f, r4, 0x3}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000780)="0f2256add9625ef60af5ab7f60702a8e4f10298dc5953a85a255295bda20a882cbfbd49c63c20cd7e656b7bb1a4a26dba258cf13c8eadfb1079738605f6d010337ce8a8bc617b90fc8230bcb0c96c63b7d1937f4d7b53fe9a322a1e512fefc1ef5a01ec24ee307cba09d838e7fb1604716f4699f49e5e6b4e97742d4ef4464cc1da7ef7e6228d75a6f5bdd1782f20adf566fed33138d1b1c8ac8d9e9bf58ae0e1bb713aa8a72c3a3d4140fb72e41c5493ffad0e74001b0442242d53ae8d835407720b75d98d28fadca89e1fdc62f80d32702f87f475192c946e2a00d6d1e0209166bf6116bc4b6c0af7a4efe5a68796cdf", 0xf1}], 0x1, &(0x7f0000000880), 0x0, 0x40}, 0x4000000) perf_event_open(&(0x7f0000000a00)={0x0, 0x70, 0x7f, 0x1, 0x1f, 0x4, 0x0, 0x1, 0x9820, 0x4, 0x8000, 0x7ff, 0x45, 0x4, 0x7, 0x3, 0x3f, 0x5, 0x4000000, 0x8, 0x8, 0x7f, 0x5, 0xffffffff, 0x4f, 0x100000000, 0x5, 0x435b5357, 0x10000, 0x3, 0x7, 0x7d92, 0x4, 0xfe0, 0x7, 0x4, 0x0, 0x7582, 0x0, 0x200, 0x7, @perf_config_ext={0xff}, 0x20100, 0x1, 0x3, 0x1, 0x5eb5, 0xbac, 0xf5}, r5, 0xd, 0xffffffffffffff9c, 0x8) close(r7) socket$kcm(0x2, 0x7, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x2400, 0x4d7d) 12:35:41 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="953f6234658dd25d766070") sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[]}}, 0x0) shmget(0xffffffffffffffff, 0xfffffffffeffffff, 0x78000a38, &(0x7f0000ffb000/0x3000)=nil) 12:35:41 executing program 6: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f00000000c0)=0x2000000, 0x10000000000447) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x3, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @broadcast}, 0x2, {0x2, 0x0, @broadcast}, 'erspan0\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000580)={@mcast1, 0x0}, &(0x7f0000000400)=0xfffffffffffffffe) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000300)=0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000480)=0xc) kcmp(r6, r7, 0x1, r3, r1) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r3, &(0x7f0000000000)=0xfffffffffffffffe, 0x4b5) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r8) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x88000000, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r5, 0x4b32, 0x0) open(&(0x7f0000000340)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r9 = open(&(0x7f0000000500)='./bus\x00', 0x14103e, 0x0) ftruncate(r5, 0x5) sendfile(r5, r9, &(0x7f0000d83ff8), 0x8000fffffffe) 12:35:41 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev, 0x81dc}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) 12:35:41 executing program 3: keyctl$search(0x2, 0x0, &(0x7f0000000080)='pkcs7_test\x00', &(0x7f00000000c0), 0x0) 12:35:41 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, &(0x7f000001a000)) r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmsg$key(r1, &(0x7f0000000040)={0x20480, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in=@broadcast, @in=@local}]}, 0x38}}, 0x0) 12:35:41 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000006c0)={0x1, {{0x2, 0x0, @multicast1}}}, 0x88) [ 207.668700] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 12:35:41 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @hyper}, 0x10) 12:35:41 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)="696f2e6d617800e3c6a1bc1694706052fb71636dab87f6b67931756f4718d4c82a523684fbfb553c6430fbc7b94142e83351f1daed56ac269c9286207493b4a58dbdb53c1a90a355b97bba99df289a25ef0e4f35cdbfe70a13c32b283c02837c5330ed0f393ac8b5a0220078e91fe9ee17882519e39d9d7c502cb52b84aa1c5a64b1666adec7f0d844af01018e958358b9f54ab00b0f43d38e9de11e3a217ca325d2404d1bf3fef194ff6c7e18ed", 0x2, 0x0) r2 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r2, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") r3 = openat$cgroup_ro(r0, &(0x7f0000000300)='io.stat\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x7ffff000) [ 207.722900] raw_sendmsg: syz-executor4 forgot to set AF_INET. Fix it! 12:35:41 executing program 5: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000594000)="1f0000000104ff0ffd4354c007110000f305010008000100020423dcffdf00", 0x1f) 12:35:41 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)="696f2e6d617800e3c6a1bc1694706052fb71636dab87f6b67931756f4718d4c82a523684fbfb553c6430fbc7b94142e83351f1daed56ac269c9286207493b4a58dbdb53c1a90a355b97bba99df289a25ef0e4f35cdbfe70a13c32b283c02837c5330ed0f393ac8b5a0220078e91fe9ee17882519e39d9d7c502cb52b84aa1c5a64b1666adec7f0d844af01018e958358b9f54ab00b0f43d38e9de11e3a217ca325d2404d1bf3fef194ff6c7e18ed", 0x2, 0x0) r2 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r2, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x0, 0x0) r3 = openat$cgroup_ro(r0, &(0x7f0000000300)='io.stat\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x4) 12:35:41 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) write(r1, &(0x7f0000000400)="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", 0x200) [ 207.934601] netlink: 3 bytes leftover after parsing attributes in process `syz-executor5'. [ 207.987581] netlink: 3 bytes leftover after parsing attributes in process `syz-executor5'. 12:35:42 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x5}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0xfff}, &(0x7f0000000380)=0x8) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000580)) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x22e, &(0x7f0000000280)}, 0xfffffffffffffe82) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='stack\x00') preadv(r2, &(0x7f0000000480), 0x1000000000000156, 0x0) timerfd_gettime(r0, &(0x7f0000000540)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000480)={r1, @in6={{0xa, 0x4e20, 0x3, @remote, 0x1}}, 0x0, 0x9}, 0x90) keyctl$assume_authority(0x10, 0x0) 12:35:42 executing program 6: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000002740)={@mcast2, @empty, @mcast1, 0x1ff, 0xfff, 0xf04610a000000000, 0x500, 0x7ff, 0x1}) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000002e80), 0xffffffffffffffff) getpid() ioctl(r0, 0x627, &(0x7f0000000100)="6a2482a24144f32e7f986bfdc3f7b02188f3cfacde7b56d76fccf53a2cc92c034138bbec2b293381fbf36f9f72046e884ec894caeb7e6744e51d110afa01c3ed0469774b9e97f295a2bfe2250836fe48271407f1a88f64928f785272fafec880643874401c897b19cfa69167e0979a74ee21f066bd61bd7d884f85f8bc60aa19682b02715ef34bfb50e7923da4d2fb95808efbf812825d9dfa385d278d5dac27eecf293f671b2674cc62cf5a56f3ef72ea8615e7a1e772716d5bb3") clock_getres(0x7, &(0x7f0000000080)) r1 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$VHOST_GET_FEATURES(r1, 0x8008af00, &(0x7f0000000000)) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x8010550e) [ 208.061599] netlink: 3 bytes leftover after parsing attributes in process `syz-executor5'. [ 208.062067] netlink: 3 bytes leftover after parsing attributes in process `syz-executor5'. 12:35:42 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000f6bfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x730000}, 0x200000}) 12:35:42 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000380)=0x4, 0x4) sendto$inet6(r0, &(0x7f0000000640), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c) write$binfmt_elf32(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="7f454c4600000000000000000000000000000000000000000000000038000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x56) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000080), 0x4) 12:35:42 executing program 4: 12:35:42 executing program 7: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) chmod(&(0x7f0000000040)='./file0\x00', 0x0) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={0x73, 0x79, 0x7a, 0xffffffffffffffff, 0x6c000000}, &(0x7f0000001fee)="520972757374e363757367725665783a4465", 0x0) 12:35:42 executing program 2: 12:35:42 executing program 5: 12:35:42 executing program 6: 12:35:42 executing program 7: 12:35:42 executing program 3: 12:35:42 executing program 2: clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) chmod(&(0x7f0000000040)='./file0\x00', 0x0) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={0x73, 0x79, 0x7a, 0xffffffffffffffff, 0x6c000000}, &(0x7f0000001fee)="520972757374e363757367725665783a4465", 0x0) 12:35:42 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xa) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x9) setreuid(0x0, r2) setreuid(r2, r3) 12:35:42 executing program 1: 12:35:42 executing program 2: 12:35:42 executing program 5: 12:35:43 executing program 0: 12:35:43 executing program 6: 12:35:43 executing program 7: 12:35:43 executing program 3: 12:35:43 executing program 4: 12:35:43 executing program 1: 12:35:43 executing program 5: 12:35:43 executing program 2: 12:35:43 executing program 2: 12:35:43 executing program 4: 12:35:43 executing program 1: 12:35:43 executing program 3: 12:35:43 executing program 6: 12:35:43 executing program 5: 12:35:43 executing program 0: 12:35:43 executing program 7: 12:35:43 executing program 1: 12:35:43 executing program 4: 12:35:43 executing program 5: 12:35:43 executing program 3: 12:35:43 executing program 6: 12:35:43 executing program 0: 12:35:43 executing program 7: 12:35:43 executing program 2: 12:35:44 executing program 5: 12:35:44 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) gettid() r0 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x4, 0x608401) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000280)=ANY=[@ANYBLOB="77938f9f64a824b84d3aa678f77d1b2a35af9a56a08755efd8b01e307a36a73049d56f69eac8006dedd205db1d2cea06bd"], &(0x7f0000000040)=0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000240)={"626f6e645f736c6176655f30000e00", {0x2, 0x0, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x400080, 0x0) 12:35:44 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f00000000c0), 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) recvfrom(0xffffffffffffffff, &(0x7f0000000480)=""/116, 0x74, 0x0, &(0x7f0000000500)=@ethernet={0x6, @local}, 0x80) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x0, 0x0) r3 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x5, 0x400000) r4 = getpgrp(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f00000001c0)={{0x6, 0x1, 0x0, 0x8000, 'syz1\x00', 0x7f}, 0x0, 0x102, 0x0, r4, 0x0, 0x0, 'syz0\x00', &(0x7f0000000100), 0x0, [], [0x0, 0x0, 0xffffffffffffffe8, 0x3ff]}) sendmmsg(0xffffffffffffffff, &(0x7f0000004340)=[{{&(0x7f0000003fc0)=@llc={0x1a, 0x0, 0x0, 0x2840, 0x0, 0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x80, &(0x7f0000004100), 0x0, &(0x7f0000004140), 0x0, 0x20000000}, 0x3}], 0x1, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)) setpriority(0x0, 0x0, 0x80000001) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000004400)=@add_del={0x3, &(0x7f00000043c0)="73797a6b616c6c657230140300"}) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r5, &(0x7f00000002c0)=0xe0e, 0x1000007ffff000) syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local, @dev={0xac, 0x14, 0x14, 0xe1fd}, {[@timestamp={0x44, 0x14, 0x0, 0x0, 0x0, [{[@rand_addr]}, {}, {}]}]}}}}}}}, &(0x7f0000000100)) 12:35:44 executing program 0: syz_emit_ethernet(0x32, &(0x7f0000000200)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x200000000000011, 0x0, @rand_addr, @multicast1}, @dccp={{0x0, 0x1, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d70502", 0x0, "f53475"}}}}}}, 0x0) 12:35:44 executing program 6: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xa) setreuid(0x0, r2) setreuid(0x0, 0x0) 12:35:44 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f00000000c0), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$l2tp(0xffffffffffffffff, &(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x26) recvfrom(0xffffffffffffffff, &(0x7f0000000480)=""/116, 0x74, 0x0, &(0x7f0000000500)=@ethernet={0x0, @local}, 0x80) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x0, 0x0) syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x5, 0x400000) getpgrp(0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000004340)=[{{&(0x7f0000003fc0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x3, 0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x80, &(0x7f0000004100), 0x0, &(0x7f0000004140), 0x0, 0x20000000}}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000680)={0x0, 0x2d83}, 0x8) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000004400)=@add_del={0x3, &(0x7f00000043c0)="73797a6b616c6c657230140300"}) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, &(0x7f00000002c0)=0xe00, 0x1000007ffff000) 12:35:44 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8980, &(0x7f0000000240)={"626f6e645f736c6176655f30000e00", {0x2, 0x0, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}}) 12:35:44 executing program 7: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0x14, 0x1a, 0x201}, 0x14}}, 0x0) 12:35:44 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0x36e) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r2, &(0x7f0000000180)={0x90000001}) epoll_wait(r2, &(0x7f00000000c0)=[{}], 0x1, 0x47) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac8e}], 0x1, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100008}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0xc4, r3, 0x401, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xef1}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}, @IPVS_DEST_ATTR_ADDR={0x14}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x10000}]}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9536}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xca2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40}, 0x40000) [ 358.585676] watchdog: BUG: soft lockup - CPU#0 stuck for 122s! [syz-executor4:6660] [ 358.593547] Modules linked in: [ 358.596793] CPU: 0 PID: 6660 Comm: syz-executor4 Not tainted 4.19.0-rc1+ #42 [ 358.603996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 358.613411] RIP: 0010:msan_get_shadow_origin_ptr+0x1f9/0x2e0 [ 358.619243] Code: 05 48 be 00 b0 aa aa aa aa aa aa 48 0f af c6 4c 09 e8 48 01 d0 74 6d 41 81 e7 fc 0f 00 00 48 03 4f 48 48 c1 e9 05 48 0f af ce <48> 01 d1 49 89 c6 4c 01 f9 48 89 cb 75 4c 0f 0b eb fe 4c 89 ff e8 [ 358.638799] RSP: 0018:ffff88012a21f8f0 EFLAGS: 00000a07 ORIG_RAX: ffffffffffffff13 [ 358.646570] RAX: ffff88012a22f9d8 RBX: ffffffff8a544000 RCX: 000000012832f000 [ 358.653878] RDX: ffff880000000000 RSI: aaaaaaaaaaaab000 RDI: ffffea0006fccba0 [ 358.661169] RBP: ffff88012a21f940 R08: 0000000000000000 R09: 0000000000000002 [ 358.668460] R10: 0000000000000000 R11: ffffffff81179950 R12: 0000000000000004 [ 358.675780] R13: 00000000000009d8 R14: ffffffff8a543000 R15: 00000000000009d8 [ 358.683084] FS: 0000000000e7f940(0000) GS:ffff88021fc00000(0000) knlGS:0000000000000000 [ 358.691345] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 358.697258] CR2: 0000000020400000 CR3: 00000001a4e6a000 CR4: 00000000001406f0 [ 358.704578] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 358.711976] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 358.719264] Call Trace: [ 358.721929] ? smp_call_function_single+0x365/0x4e0 [ 358.726982] __msan_metadata_ptr_for_load_4+0x10/0x20 [ 358.732225] smp_call_function_single+0x373/0x4e0 [ 358.737148] ? event_function+0x4b0/0x4b0 [ 358.741338] ? event_function+0x4b0/0x4b0 [ 358.745564] ? event_function_call+0x9b/0x6f0 [ 358.750142] ? perf_event_release_kernel+0x7d6/0x19e0 [ 358.755406] event_function_call+0x2cb/0x6f0 [ 358.759851] ? local_clock+0x40/0x40 [ 358.763651] ? local_clock+0x40/0x40 [ 358.767405] ? event_function_call+0x6f0/0x6f0 [ 358.772073] perf_event_release_kernel+0x7d6/0x19e0 [ 358.777132] perf_release+0x5d/0x90 [ 358.780812] ? perf_mmap+0x2210/0x2210 [ 358.784729] __fput+0x4cf/0xc20 [ 358.788073] ? fput+0x2e0/0x2e0 [ 358.791404] ____fput+0x37/0x40 [ 358.794767] task_work_run+0x22e/0x2b0 [ 358.798726] prepare_exit_to_usermode+0x33e/0x410 [ 358.803607] syscall_return_slowpath+0xdb/0x700 [ 358.808352] ? __close_fd+0x465/0x4c0 [ 358.812200] ? __se_sys_close+0x72/0x140 [ 358.816301] do_syscall_64+0xde/0x100 [ 358.820142] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 358.825356] RIP: 0033:0x410c51 [ 358.828587] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 34 19 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 358.847512] RSP: 002b:0000000000a3fdc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 358.855263] RAX: 0000000000000000 RBX: 0000000000000007 RCX: 0000000000410c51 [ 358.862570] RDX: 0000000000000000 RSI: 0000000000732fa0 RDI: 0000000000000006 [ 358.869858] RBP: 0000000000000000 R08: 0000000000000140 R09: ffffffffffffffff [ 358.877149] R10: 00000000009301e0 R11: 0000000000000293 R12: 0000000000000000 [ 358.884439] R13: 000000000003337f R14: 0000000000000007 R15: badc0ffeebadface [ 358.891752] Sending NMI from CPU 0 to CPUs 1: [ 358.896334] ------------[ cut here ]------------ [ 358.901104] kernel BUG at mm/kmsan/kmsan_entry.c:81! [ 358.906228] invalid opcode: 0000 [#1] SMP PTI [ 358.910744] CPU: 1 PID: 6661 Comm: syz-executor4 Not tainted 4.19.0-rc1+ #42 [ 358.917924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 358.927300] RIP: 0010:kmsan_nmi_enter+0x42/0x70 [ 358.931974] Code: 00 74 27 65 8b 04 25 40 92 03 00 83 c0 01 83 f8 08 7d 27 65 89 04 25 40 92 03 00 65 c6 04 25 d5 6f 0b 00 ff c3 0f 0b 90 eb fe <0f> 0b 66 90 66 2e 0f 1f 84 00 00 00 00 00 eb fe 0f 0b 66 90 66 2e [ 358.950885] RSP: 0018:fffffe0000049ea8 EFLAGS: 00010046 [ 358.956258] RAX: 0000000000000200 RBX: 0000000000000001 RCX: 00000000c0000101 [ 358.963538] RDX: 00000000ffff8802 RSI: ffffffff8900136c RDI: ffffffff8a545000 [ 358.970820] RBP: fffffe0000049ef9 R08: 0000000000000000 R09: 0000000000000000 [ 358.978095] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 358.985368] R13: 0000000000000000 R14: 00000001a4e6a000 R15: 0000000000000000 [ 358.992647] FS: 00007f086caed700(0000) GS:ffff88021fd00000(0000) knlGS:0000000000000000 [ 359.000878] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 359.006758] CR2: 00007fff8cac94d9 CR3: 00000001a4e6a000 CR4: 00000000001406e0 [ 359.014032] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 359.021319] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 359.028588] Call Trace: [ 359.031171] [ 359.033336] ? end_repeat_nmi+0x19/0x8e [ 359.037325] ? end_repeat_nmi+0x7/0x8e [ 359.041237] ? __memmove+0x170/0x1a0 [ 359.044958] ? __memmove+0x170/0x1a0 [ 359.048681] ? __memmove+0x170/0x1a0 [ 359.052393] [ 359.054646] ? kmsan_memmove_shadow+0xad/0xe0 [ 359.059162] ? __msan_memmove+0xaa/0x130 [ 359.063235] ? widen_string+0x580/0x6c0 [ 359.067229] ? string+0x32a/0x340 [ 359.070707] ? vsnprintf+0x10aa/0x31a0 [ 359.074626] ? seq_printf+0x2cb/0x460 [ 359.078453] ? seq_puts+0x23c/0x2a0 [ 359.082106] ? ipv6_route_seq_show+0x431/0x520 [ 359.086716] ? seq_read+0x1404/0x1e80 [ 359.090535] ? ipv6_route_seq_stop+0x400/0x400 [ 359.095136] ? ipv6_route_seq_next+0x11d0/0x11d0 [ 359.099917] ? seq_open+0x390/0x390 [ 359.103556] ? proc_reg_read+0x296/0x3c0 [ 359.107644] ? do_iter_read+0xb87/0xe20 [ 359.111633] ? proc_reg_llseek+0x320/0x320 [ 359.115895] ? vfs_readv+0x1d9/0x250 [ 359.119652] ? default_file_splice_read+0xaa0/0x1120 [ 359.124813] ? __ia32_sys_tee+0x160/0x160 [ 359.128968] ? splice_direct_to_actor+0x4af/0xfb0 [ 359.133815] ? do_splice_direct+0x540/0x540 [ 359.138173] ? do_splice_direct+0x332/0x540 [ 359.142522] ? do_sendfile+0x1070/0x1d80 [ 359.146625] ? __se_sys_sendfile64+0x1c2/0x380 [ 359.151228] ? __x64_sys_sendfile64+0x56/0x70 [ 359.155734] ? do_syscall_64+0xb8/0x100 [ 359.159714] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 359.165086] Modules linked in: [ 359.168311] Dumping ftrace buffer: [ 359.171846] (ftrace buffer empty) [ 359.175566] ---[ end trace 8966a2b27dad929e ]--- [ 359.180326] RIP: 0010:kmsan_nmi_enter+0x42/0x70 [ 359.184999] Code: 00 74 27 65 8b 04 25 40 92 03 00 83 c0 01 83 f8 08 7d 27 65 89 04 25 40 92 03 00 65 c6 04 25 d5 6f 0b 00 ff c3 0f 0b 90 eb fe <0f> 0b 66 90 66 2e 0f 1f 84 00 00 00 00 00 eb fe 0f 0b 66 90 66 2e [ 359.203909] RSP: 0018:fffffe0000049ea8 EFLAGS: 00010046 [ 359.209280] RAX: 0000000000000200 RBX: 0000000000000001 RCX: 00000000c0000101 [ 359.216563] RDX: 00000000ffff8802 RSI: ffffffff8900136c RDI: ffffffff8a545000 [ 359.223836] RBP: fffffe0000049ef9 R08: 0000000000000000 R09: 0000000000000000 [ 359.231640] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 359.238903] R13: 0000000000000000 R14: 00000001a4e6a000 R15: 0000000000000000 [ 359.246438] FS: 00007f086caed700(0000) GS:ffff88021fd00000(0000) knlGS:0000000000000000 [ 359.254667] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 359.260552] CR2: 00007fff8cac94d9 CR3: 00000001a4e6a000 CR4: 00000000001406e0 [ 359.267825] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 359.275095] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 359.282367] Kernel panic - not syncing: Fatal exception in interrupt [ 360.780908] Shutting down cpus with NMI [ 360.785022] ------------[ cut here ]------------ [ 360.789818] kernel BUG at mm/kmsan/kmsan_entry.c:81! [ 360.794971] invalid opcode: 0000 [#2] SMP PTI [ 360.799507] CPU: 0 PID: 6660 Comm: syz-executor4 Tainted: G D 4.19.0-rc1+ #42 [ 360.800652] Dumping ftrace buffer: [ 360.808123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 360.811671] (ftrace buffer empty) [ 360.821066] RIP: 0010:kmsan_nmi_enter+0x42/0x70 [ 360.824732] Kernel Offset: disabled [ [ 3 3606.08.3833032042]4] R eRbeoobototinign gi ni n8 68460400 0 sescecoonnddss.... 92 03 00 83 c0 01 83 f8 08 7d 27 65 89 04 25 40 92 03 00 65 c6 04 25 d5 6f 0b 00 ff c3 0f 0b 90 eb fe <0f> 0b 66 90 66 2e 0f 1f 84 00 00 00 00 00 eb fe 0f 0b 66 90 66 2e [ 360.855923] RSP: 0018:fffffe000000eea8 EFLAGS: 00010046 [ 360.861337] RAX: 0000000000010000 RBX: 0000000000000001 RCX: 00000000c0000101 [ 360.868645] RDX: 00000000ffff8802 RSI: ffffffff8900136c RDI: 00000000002317a9 [ 360.875940] RBP: fffffe000000eef9 R08: 0000000000000000 R09: 0000000000000000 [ 360.883237] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 360.891239] R13: 0000000000000000 R14: 00000001a4e6a000 R15: 0000000000000000 [ 360.898566] FS: 0000000000e7f940(0000) GS:ffff88021fc00000(0000) knlGS:0000000000000000 [ 360.906821] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 360.912747] CR2: 0000000020400000 CR3: 00000001a4e6a000 CR4: 00000000001406f0 [ 360.920040] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 360.927336] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 360.934628] Call Trace: [ 360.937279] [ 360.939490] ? end_repeat_nmi+0x19/0x8e [ 360.943501] ? end_repeat_nmi+0x7/0x8e [ 360.947431] ? delay_loop+0x50/0x50 [ 360.951094] ? delay_tsc+0xb2/0xe0 [ 360.954671] ? delay_tsc+0xb2/0xe0 [ 360.958246] ? delay_tsc+0xb2/0xe0 [ 360.961810] [ 360.964060] [ 360.966248] ? delay_loop+0x50/0x50 [ 360.969955] ? __const_udelay+0xb2/0xe0 [ 360.974011] ? nmi_trigger_cpumask_backtrace+0x2c9/0x460 [ 360.979855] ? arch_trigger_cpumask_backtrace+0x40/0x40 [ 360.985301] ? arch_trigger_cpumask_backtrace+0x2c/0x40 [ 360.990757] ? watchdog_timer_fn+0x737/0x810 [ 360.995216] ? proc_watchdog_cpumask+0x200/0x200 [ 361.000010] ? __hrtimer_run_queues+0xbfc/0x15b0 [ 361.004818] ? hrtimer_interrupt+0x458/0x13d0 [ 361.009359] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 361.014855] ? __msan_poison_alloca+0x173/0x1f0 [ 361.019577] ? hrtimer_init+0x5b0/0x5b0 [ 361.023601] ? local_apic_timer_interrupt+0x6b/0x250 [ 361.028766] ? smp_apic_timer_interrupt+0x5a/0x90 [ 361.033645] ? apic_timer_interrupt+0xf/0x20 [ 361.038063] [ 361.040357] ? native_apic_mem_read+0x60/0x60 [ 361.044896] ? msan_get_shadow_origin_ptr+0x1f9/0x2e0 [ 361.050128] ? smp_call_function_single+0x365/0x4e0 [ 361.055182] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 361.060586] ? smp_call_function_single+0x373/0x4e0 [ 361.065712] ? event_function+0x4b0/0x4b0 [ 361.069900] ? event_function+0x4b0/0x4b0 [ 361.074136] ? event_function_call+0x9b/0x6f0 [ 361.078710] ? perf_event_release_kernel+0x7d6/0x19e0 [ 361.083984] ? event_function_call+0x2cb/0x6f0 [ 361.088608] ? local_clock+0x40/0x40 [ 361.092393] ? local_clock+0x40/0x40 [ 361.096163] ? event_function_call+0x6f0/0x6f0 [ 361.100826] ? perf_event_release_kernel+0x7d6/0x19e0 [ 361.106061] ? perf_release+0x5d/0x90 [ 361.109925] ? perf_mmap+0x2210/0x2210 [ 361.113850] ? __fput+0x4cf/0xc20 [ 361.117383] ? fput+0x2e0/0x2e0 [ 361.120725] ? ____fput+0x37/0x40 [ 361.124253] ? task_work_run+0x22e/0x2b0 [ 361.128404] ? prepare_exit_to_usermode+0x33e/0x410 [ 361.133466] ? syscall_return_slowpath+0xdb/0x700 [ 361.138389] ? __close_fd+0x465/0x4c0 [ 361.142248] ? __se_sys_close+0x72/0x140 [ 361.146372] ? do_syscall_64+0xde/0x100 [ 361.150393] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 361.155777] Modules linked in: [ 361.159004] Dumping ftrace buffer: [ 361.162564] (ftrace buffer empty) [ 361.166316] ---[ end trace 8966a2b27dad929f ]--- [ 361.171124] RIP: 0010:kmsan_nmi_enter+0x42/0x70 [ 361.175834] Code: 00 74 27 65 8b 04 25 40 92 03 00 83 c0 01 83 f8 08 7d 27 65 89 04 25 40 92 03 00 65 c6 04 25 d5 6f 0b 00 ff c3 0f 0b 90 eb fe <0f> 0b 66 90 66 2e 0f 1f 84 00 00 00 00 00 eb fe 0f 0b 66 90 66 2e [ 361.194777] RSP: 0018:fffffe0000049ea8 EFLAGS: 00010046 [ 361.200197] RAX: 0000000000000200 RBX: 0000000000000001 RCX: 00000000c0000101 [ 361.207498] RDX: 00000000ffff8802 RSI: ffffffff8900136c RDI: ffffffff8a545000 [ 361.214883] RBP: fffffe0000049ef9 R08: 0000000000000000 R09: 0000000000000000 [ 361.222179] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 361.229475] R13: 0000000000000000 R14: 00000001a4e6a000 R15: 0000000000000000 [ 361.237304] FS: 0000000000e7f940(0000) GS:ffff88021fc00000(0000) knlGS:0000000000000000 [ 361.245565] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 361.251475] CR2: 0000000020400000 CR3: 00000001a4e6a000 CR4: 00000000001406f0 [ 361.258771] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 361.266070] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400