[ 58.267566] sshd (6052) used greatest stack depth: 53392 bytes left [....] Starting OpenBSD Secure Shell server: sshd[ 58.440547] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 61.688226] random: sshd: uninitialized urandom read (32 bytes read) [ 61.979941] sshd (6125) used greatest stack depth: 53184 bytes left [ 62.014522] random: sshd: uninitialized urandom read (32 bytes read) [ 64.355990] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.81' (ECDSA) to the list of known hosts. [ 70.162611] random: sshd: uninitialized urandom read (32 bytes read) 2018/10/06 20:21:45 fuzzer started [ 74.621692] random: cc1: uninitialized urandom read (8 bytes read) 2018/10/06 20:21:49 dialing manager at 10.128.0.26:36867 2018/10/06 20:21:49 syscalls: 1 2018/10/06 20:21:49 code coverage: enabled 2018/10/06 20:21:49 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/10/06 20:21:49 setuid sandbox: enabled 2018/10/06 20:21:49 namespace sandbox: enabled 2018/10/06 20:21:49 Android sandbox: /sys/fs/selinux/policy does not exist 2018/10/06 20:21:49 fault injection: enabled 2018/10/06 20:21:49 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/10/06 20:21:49 net packed injection: enabled 2018/10/06 20:21:49 net device setup: enabled [ 79.162727] random: crng init done 20:23:55 executing program 0: perf_event_open(&(0x7f0000940000)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$read_default(0x2, &(0x7f0000000040)=""/40, 0x28) [ 203.717238] IPVS: ftp: loaded support on port[0] = 21 [ 206.076037] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.082611] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.091238] device bridge_slave_0 entered promiscuous mode [ 206.229757] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.236338] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.244802] device bridge_slave_1 entered promiscuous mode [ 206.379604] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 206.516434] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 206.946308] bond0: Enslaving bond_slave_0 as an active interface with an up link 20:24:00 executing program 1: syz_emit_ethernet(0x106e, &(0x7f0000000440)={@local, @remote, [], {@ipv4={0x800, {{0x13, 0x4, 0x0, 0x0, 0x1060, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @multicast1, {[@noop, @lsrr={0x83, 0x13, 0x4, [@dev={0xac, 0x14, 0x14, 0xf}, @remote, @loopback, @local]}, @noop, @end, @rr={0x7, 0x1f, 0x6, [@remote, @loopback, @local, @remote, @remote, @loopback, @dev={0xac, 0x14, 0x14, 0x10}]}]}}, @udp={0x4e21, 0x4e24, 0x1014, 0x0, [@guehdr={0x2, 0x4, 0x1, 0xfffffffffffffff8, 0x100, [0x80]}, @guehdr={0x1, 0x9, 0x1f, 0x2}], "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"}}}}}, &(0x7f00000014c0)={0x0, 0x3, [0xbc5, 0x7e9, 0x1, 0x833]}) [ 207.088275] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 207.490640] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 207.497777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 207.798912] IPVS: ftp: loaded support on port[0] = 21 [ 208.199297] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 208.207683] team0: Port device team_slave_0 added [ 208.484030] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 208.492410] team0: Port device team_slave_1 added [ 208.654638] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 208.661691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 208.670785] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 208.907892] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 208.915119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 208.924133] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 209.137469] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 209.146287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 209.155476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 209.321469] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 209.329330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 209.338551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 211.604917] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.611397] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.620452] device bridge_slave_0 entered promiscuous mode [ 211.896962] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.904223] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.912787] device bridge_slave_1 entered promiscuous mode [ 212.016771] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.023379] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.030309] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.036908] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.045762] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 212.073561] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 212.296792] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 212.572291] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 20:24:05 executing program 2: [ 213.098117] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 213.431839] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 213.622104] IPVS: ftp: loaded support on port[0] = 21 [ 213.773129] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 213.780199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 214.056111] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 214.063320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 214.914494] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 214.922775] team0: Port device team_slave_0 added [ 215.228858] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 215.237107] team0: Port device team_slave_1 added [ 215.583769] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 215.612548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 215.621429] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 215.875863] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 215.883043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 215.892069] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 216.185969] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 216.193761] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 216.202792] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 216.511367] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 216.519127] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 216.528019] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 218.630738] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.637398] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.645971] device bridge_slave_0 entered promiscuous mode [ 218.928118] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.934760] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.943216] device bridge_slave_1 entered promiscuous mode [ 219.254998] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 219.499276] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 219.748687] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.755264] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.762276] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.768727] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.777720] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 220.222227] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 220.371548] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 220.581828] bond0: Enslaving bond_slave_1 as an active interface with an up link 20:24:13 executing program 3: [ 221.025610] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 221.032838] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 221.386101] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 221.393481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 221.748140] IPVS: ftp: loaded support on port[0] = 21 [ 222.484234] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 222.492906] team0: Port device team_slave_0 added [ 222.810359] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 222.818596] team0: Port device team_slave_1 added [ 223.233681] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 223.240807] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 223.249874] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 223.538790] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 223.546061] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 223.554925] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 223.948560] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 223.956289] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 223.965446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 224.238872] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 224.246785] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 224.256023] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 224.709286] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.045755] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 227.287841] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 227.294335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 227.302381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 227.607070] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.613921] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.622648] device bridge_slave_0 entered promiscuous mode [ 227.936740] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.943415] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.952195] device bridge_slave_1 entered promiscuous mode [ 228.306009] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 228.535621] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.542160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.549062] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.555642] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.564521] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 228.689488] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 228.792842] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.853674] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 229.718790] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 230.145125] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 230.458531] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 230.465753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 230.718380] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 230.725695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 20:24:24 executing program 4: [ 231.896628] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 231.905413] team0: Port device team_slave_0 added [ 232.293719] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 232.298386] IPVS: ftp: loaded support on port[0] = 21 [ 232.301606] team0: Port device team_slave_1 added [ 232.730565] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 232.737785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 232.746900] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 233.148804] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 233.156125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 233.164901] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 233.608796] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 233.616475] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 233.625730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 234.121211] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 234.129013] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 234.138296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 235.370036] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.118469] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 238.754347] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 238.760727] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 238.768660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 238.993599] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.000096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.007153] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.013692] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.022449] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 239.132772] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 20:24:32 executing program 0: [ 239.244910] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.251428] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.259900] device bridge_slave_0 entered promiscuous mode 20:24:32 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x10000, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}}, &(0x7f0000000280)=0x98) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={r1, 0x1f, 0x30}, 0xc) [ 239.774647] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.781157] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.789781] device bridge_slave_1 entered promiscuous mode 20:24:33 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000000240)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000c2d4734a939aa4dc4085000100000000000000000000000000000000000000000a0000000000000040049ad4d076050020c52d763e999b3339a2d7a346244452c094ed1509ac2794815353a75142d241cce561f4d672e78f7999f98df1f76bcd6ca5a0a0ad98ceefae1eb3a349700279c04e7a6d24466aa49058eecdb0c757f3fe6df0b8adcec6b1f600c2e5476ecbccc78165b7f2c97abccd60d0b413a48a335dd01eea975d3ef12cd6144b7a5ff95ecacedff4292db6b9e2a552df7c86c973eb9085ec3e788f2f79ed65dc945c3277cb67388edc714010d4d21e46794aaa747228822dd5416714da1d21d92e9d31568afe482c55e90bd00fea8022afef62c13696a12312f86f490b0ae511f7fdc35f360b10cc98d90e3a02d7eaacd7e04b4d072ccc534cc6434a392874e24d9204ce3b33420689c8", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xb8}}, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000100)={0xffffffffffffffff, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108) [ 240.205943] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 240.386828] 8021q: adding VLAN 0 to HW filter on device team0 20:24:33 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f4634418dd25d766070") r1 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r1, &(0x7f0000f6fff0)={0x2, 0x0, @dev}, 0x10) r2 = open(&(0x7f0000000000)='./file0\x00', 0x800, 0xd55465dfff1c20f0) write$P9_RFSYNC(r2, &(0x7f00000000c0)={0x7, 0x33, 0x2}, 0x7) listen(r1, 0x11000000000b) accept$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, &(0x7f0000000080)=0x10) [ 240.666735] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready 20:24:34 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000000100)=0x8004, 0x4) bind$inet6(r1, &(0x7f0000d1a000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000140)={@in={{0x2, 0x4e24, @loopback}}, 0x7, 0x0, 0x200, "98487363b38d15679b195a8f6039e4c232fccddf37eb4604e32829fc743d6baa0d544d953b8241610995dab9e36c1f00e6c35ad357304bca893e553c7f8f0c3d8737eab658b3682fbce4855344964c4a"}, 0xd8) sendto$inet6(r1, &(0x7f0000000040), 0x0, 0xfffffefffffffffe, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='lo\x00', 0x6) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x4000000000000002, &(0x7f00000000c0)=0x8, 0x4) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/qat_adf_ctl\x00', 0x410802, 0x0) bind$inet6(r3, &(0x7f0000ff1000)={0xa, 0x4e20}, 0x1c) sendto$inet6(r3, &(0x7f0000000040), 0x0, 0x20040000, &(0x7f0000f62fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) [ 241.655057] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 241.982877] bond0: Enslaving bond_slave_0 as an active interface with an up link 20:24:35 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180)=0xffffffff, 0x4c00b970f6b27222) r1 = syz_open_procfs(0x0, &(0x7f0000000100)="2f65786500000000000489004bddd9de91be10eebf000ee91e18f0c76fbb232a07424ae1e901d2da75af1f0200f5ab26d7e071fb35331ce39c5a0000") bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)='.\x00'}, 0x30) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0c0583b, &(0x7f0000000040)) 20:24:35 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) syz_execute_func(&(0x7f0000000000)="cd49f2420f9fa90b0000003e593e4498c4e381786572a340d22cd4c4e2a8f35f30c4c220f309c421d9d0f22641de6e1b") fcntl$addseals(r0, 0x409, 0x4) connect$vsock_dgram(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @my}, 0x10) r1 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x40, 0x100) write$UHID_CREATE(r1, &(0x7f0000000240)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/164, 0xa4, 0x40, 0x7fffffff, 0x1f, 0x8, 0x80000000}, 0x120) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @host}, 0x10) [ 242.450646] bond0: Enslaving bond_slave_1 as an active interface with an up link 20:24:35 executing program 0: r0 = socket(0x10, 0x802, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) faccessat(r1, &(0x7f0000000000)='./file0\x00', 0x10, 0x900) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") write(r0, &(0x7f0000000680)="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", 0xfc) [ 242.920140] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 242.927424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 242.953702] netlink: 224 bytes leftover after parsing attributes in process `syz-executor0'. [ 242.995386] netlink: 224 bytes leftover after parsing attributes in process `syz-executor0'. [ 243.367835] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 243.375056] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 244.354516] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 244.362745] team0: Port device team_slave_0 added [ 244.749179] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 244.757595] team0: Port device team_slave_1 added [ 245.027339] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 245.034955] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 245.043821] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 245.331483] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.349655] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 245.356829] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 245.365653] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 245.584302] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 245.592140] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 245.600830] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 245.901658] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 245.909653] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 245.918625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 246.418525] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 247.537774] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 247.544222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 247.552146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 248.608357] 8021q: adding VLAN 0 to HW filter on device team0 20:24:41 executing program 1: [ 249.290280] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.296844] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.303869] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.310334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.319285] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 249.325974] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 251.609145] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.475016] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 253.257638] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 253.264385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 253.272290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 20:24:46 executing program 2: [ 254.051963] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.792340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.299226] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready 20:24:50 executing program 3: [ 257.788365] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 257.794701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 257.803536] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 258.100051] 8021q: adding VLAN 0 to HW filter on device team0 20:24:53 executing program 4: 20:24:53 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0xc0000, 0x0) ioctl$SG_GET_TIMEOUT(r0, 0x2202, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000040)={0x8, 0x8008, 0xff, 0xffff, 0x0}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000000c0)={r1, 0x59, 0x76, "614cb46b1ccee4c2c738b70d80c7b31104389e83af773f6d145464c73571659d6826be52ccbfd60c6149e67be9345df6879a966c5a975bfe3118c0ff1c48251526c0b7cb462becd63604bb0d5b6e08feaf701d9dc352716e7a42b45238a62dfcc32b5a2c43d5386dd9677e3eec5a04f8db6acead3f88"}, 0x7e) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000140)={r1, @in6={{0xa, 0x4e20, 0x3, @empty, 0x5}}}, 0x84) ftruncate(r0, 0x40) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000200)=""/84) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000280)={{0xa, 0x4e22, 0x5, @mcast1, 0x7ff}, {0xa, 0x4e20, 0x7, @local, 0x4}, 0x9, [0x9, 0x3, 0x7fffffff, 0x2, 0x100, 0x7, 0x8, 0x2]}, 0x5c) write$P9_RMKDIR(r0, &(0x7f0000000300)={0x14, 0x49, 0x2, {0x20, 0x2, 0x6}}, 0x14) rt_sigprocmask(0x1, &(0x7f0000000340)={0x4}, &(0x7f0000000380), 0x8) getpeername$unix(r0, &(0x7f00000003c0), &(0x7f0000000440)=0x6e) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000006c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000680)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000700)={0x13, 0x10, 0xfa00, {&(0x7f0000000480), r2}}, 0x18) sendmsg$xdp(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000740)="2a22b94062cb16c3f01d003a2a7a2b202404f60d6fa49143c65d835dbba2c10ef319517a494f6d29a6a61887bb1009edcf5c1d4efca8230bf0a8baf5c0cdcfad26d50329fd718980", 0x48}, {&(0x7f00000007c0)="ca0e2210377d234460495992b48e0ae624c447be5214abe8041cf517f77a25954aa82213e69591cec03e08c0e2bda9afa9b2cfcd715cc089669d3057c0b64edc254a1d0a3fe89055589e0e805ba2a6c623b2c72ecafcfbf2706259bb59b9a497179d2df3066e8ce40c9f6f782960d2698a53fd0a4906b70dd0a09b9e04d4567b37c25b5d86a64933574de2bd0660b56ec017f4fda86b861b1959f9d97d5934c92cfc4a0a1cfa26269750956ad976978fbf7231eb334ce326d2067d58387be3c32f46db90b3", 0xc5}, {&(0x7f00000008c0)="58c4124256300571650160eb91be8c2bb5603c63675027a76ad8a4d71f047ab4e8e6a3e7c827d8bed986d8582e03f61cd51a42d30fe227ad75021c3cd7abd64521c7c0c4faeeb04f7a1c47c83d34404e9e8c8c2fcb2167716562b1", 0x5b}, {&(0x7f0000000940)}, {&(0x7f0000000980)="b15c7e5b60f2220e9a1589f32ef779aaa52966178aba11d8c238909acedf981d6c20fe6b755727f05d700c9491cc50a9decf2de48fe606fac4e5609a8852175263a42775cc7b6c2d63f8195c6033b23fd6bd0a2be418bbf968477a5702ae48359a089bf7961c3f18889f448ea0865146af9057400bf743629d0859afd0a82e10584fc6ac0845b2b04fd67d52e74026cbb09dd17f3b1f407e00f92ed5b599da19216c5a777294ceabf29c4bd55e3e616f14e2900fb1e0", 0xb6}], 0x5}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000b00)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast1}}, &(0x7f0000000c00)=0xe8) fstat(r0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000cc0)={{{@in6=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@dev}}, &(0x7f0000000dc0)=0xe8) write$P9_RSTATu(r0, &(0x7f0000000e00)={0x88, 0x7d, 0x1, {{0x0, 0x63, 0xee, 0x200, {0x0, 0x3, 0x7}, 0x10000, 0x6, 0x7, 0x7, 0x1, '+', 0x10, '/dev/sequencer2\x00', 0x10, '/dev/sequencer2\x00', 0xf, 'nodevlovboxnet1'}, 0x10, '/dev/sequencer2\x00', r3, r4, r5}}, 0x88) fsetxattr$security_evm(r0, &(0x7f0000000ec0)='security.evm\x00', &(0x7f0000000f00)=@v2={0x5, 0x2, 0xa, 0x9, 0x15, "e665f1c8514672418a3692de2c1ef5dfef552fecf9"}, 0x1f, 0x1) read(r0, &(0x7f0000000f40)=""/169, 0xa9) getsockopt$inet_opts(r0, 0x0, 0x0, &(0x7f0000001000)=""/41, &(0x7f0000001040)=0x29) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000001080)={0x3e, 0x1f51, 0x25}) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000010c0)={r1, 0x8, 0x3, 0xfffffffffffffff7}, &(0x7f0000001100)=0x10) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000001140)=""/248) ioctl$RTC_EPOCH_SET(r0, 0x4008700e, 0x6) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000001240)) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000001280), 0x4) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f00000012c0)={0x2, 0x4, 0x8, 0x3, 0x1, 0x7ff}) epoll_pwait(r0, &(0x7f0000001300)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0xa, 0x5, &(0x7f0000001380)={0x1}, 0x8) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f00000013c0)) 20:24:53 executing program 2: 20:24:53 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x8912, &(0x7f00000000c0)="00d193916200000000001f0000000069d0ef1f6af11ad92ff1c26c8c8af7e81ef1c08632ac452f501ccd48bdf6ed8321b58e78d5f00a9046320327ff0fc2146604a85c4479e20773a8ff72a9355352d739545a063995ba1e0e43b39886c6c2") r1 = open(&(0x7f0000000200)='./file0\x00', 0x200, 0x80) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) socketpair$inet6(0xa, 0x6, 0x8001, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000140)=0x10000, 0x4) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={0x0, {0x2, 0x0, @multicast2}, {0x2, 0x0, @multicast2}, {0x2, 0x0, @broadcast}, 0x42}) r4 = dup2(r2, r0) getpeername$netlink(r4, &(0x7f0000000180), &(0x7f00000001c0)=0xc) 20:24:53 executing program 1: 20:24:53 executing program 3: 20:24:53 executing program 2: 20:24:53 executing program 3: 20:24:53 executing program 4: syz_emit_ethernet(0x642, &(0x7f0000000100)={@local, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x223, 0x8906, 0x0, @local={0xfe, 0x8a00, [0x0, 0x0, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x634]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 20:24:53 executing program 1: fstat(0xffffffffffffffff, &(0x7f0000000800)) getgroups(0x0, &(0x7f0000000880)) bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x0, 0x8, 0x4, 0x1, 0x0, 0x1}, 0x2c) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) 20:24:53 executing program 0: socket$rds(0x15, 0x5, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x2a}, &(0x7f0000000200)={0x0, r2+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) write$P9_RSTAT(r1, &(0x7f0000000340)=ANY=[], 0x254) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 20:24:53 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000480)='/dev/nullb0\x00', 0x80004002, 0x0) io_setup(0x20000000000006, &(0x7f0000000180)=0x0) io_submit(r1, 0x111, &(0x7f0000001540)=[&(0x7f0000000140)={0x0, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) [ 260.766102] hrtimer: interrupt took 51267 ns 20:24:53 executing program 4: prctl$seccomp(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xfffffffffffffffc}]}) clock_adjtime(0x0, &(0x7f0000000040)) [ 261.088892] kauditd_printk_skb: 3 callbacks suppressed [ 261.089008] audit: type=1326 audit(1538857494.130:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7516 comm="syz-executor4" exe="/root/syz-executor4" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3da code=0xffff0000 [ 261.582743] IPVS: ftp: loaded support on port[0] = 21 [ 261.784052] audit: type=1326 audit(1538857494.830:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7516 comm="syz-executor4" exe="/root/syz-executor4" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3da code=0xffff0000 [ 263.077482] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.084004] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.091524] device bridge_slave_0 entered promiscuous mode [ 263.170555] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.177128] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.185269] device bridge_slave_1 entered promiscuous mode [ 263.263449] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 263.340834] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 263.577241] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 263.658610] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 263.808762] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 263.816120] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 264.049855] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 264.057580] team0: Port device team_slave_0 added [ 264.136973] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 264.144652] team0: Port device team_slave_1 added [ 264.222618] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 264.303898] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 264.384571] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 264.392122] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 264.401022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 264.474760] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 264.482465] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 264.491332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 265.381636] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.388112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.395069] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.401476] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.410071] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 265.791439] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 268.564638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.866091] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 269.160646] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 269.167023] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 269.175087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 269.470913] 8021q: adding VLAN 0 to HW filter on device team0 20:25:04 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000440), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000001040)="c340", 0x2, 0x1, &(0x7f0000e66000)={0x2, 0x0, @multicast2}, 0x10) recvmmsg(r0, &(0x7f0000002940)=[{{&(0x7f0000002200)=@hci, 0x80, &(0x7f0000002440)=[{&(0x7f0000002380)=""/133, 0x85}], 0x1, &(0x7f0000002480)=""/112, 0x70}}], 0x1, 0x0, &(0x7f0000002a80)={0x0, 0x989680}) r1 = dup2(r0, r0) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x40001) 20:25:04 executing program 3: r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xe78f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)) 20:25:04 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x400, 0x4) 20:25:04 executing program 2: 20:25:04 executing program 0: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x85a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f00000002c0), &(0x7f00000003c0)}}, &(0x7f0000044000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x2) fcntl$dupfd(r1, 0x0, r1) dup3(r2, r1, 0x0) write(r1, &(0x7f0000c34fff), 0xffffff0b) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f00000000c0)) tkill(r0, 0x1000000000016) 20:25:04 executing program 4: 20:25:04 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0xfffffeb3) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000002a00)={0x0, &(0x7f00000029c0)}, 0x8) lseek(r2, 0x0, 0x3) 20:25:04 executing program 4: io_setup(0x1, &(0x7f0000000240)=0x0) io_submit(r0, 0x1, &(0x7f00000004c0)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)="ae", 0x1, 0x7ffe}]) 20:25:04 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x5, 0xd, 0x4000000000000800, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000040), &(0x7f00000000c0)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r0, &(0x7f0000000040), &(0x7f0000001180)=""/4096}, 0x18) 20:25:04 executing program 5: perf_event_open(&(0x7f0000aaa000)={0x0, 0x70, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000240), 0x1, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[], 0x0) clock_gettime(0x0, &(0x7f00000001c0)) r0 = socket$inet6(0xa, 0x3, 0x6) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000440)=0x4c47) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x10, r0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x88d9, @loopback}, 0x1c) 20:25:05 executing program 1: open(&(0x7f0000000000)='./file0\x00', 0x95ce87ccd10d5fe5, 0x0) io_setup(0x55, &(0x7f0000000040)=0x0) io_submit(r0, 0x1, &(0x7f00000006c0)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000003c0)}]) 20:25:05 executing program 0: 20:25:05 executing program 4: 20:25:05 executing program 2: 20:25:05 executing program 3: 20:25:05 executing program 5: 20:25:05 executing program 2: 20:25:05 executing program 1: 20:25:05 executing program 0: 20:25:05 executing program 4: 20:25:06 executing program 3: 20:25:06 executing program 1: 20:25:06 executing program 5: 20:25:06 executing program 2: 20:25:06 executing program 0: 20:25:06 executing program 5: 20:25:06 executing program 1: 20:25:06 executing program 2: 20:25:06 executing program 3: 20:25:06 executing program 4: 20:25:06 executing program 0: 20:25:06 executing program 1: 20:25:06 executing program 3: 20:25:07 executing program 0: 20:25:07 executing program 4: 20:25:07 executing program 2: 20:25:07 executing program 5: 20:25:07 executing program 3: 20:25:07 executing program 1: 20:25:07 executing program 5: 20:25:07 executing program 2: 20:25:07 executing program 4: 20:25:07 executing program 0: 20:25:07 executing program 3: 20:25:07 executing program 5: 20:25:08 executing program 2: 20:25:08 executing program 1: 20:25:08 executing program 0: 20:25:08 executing program 4: 20:25:08 executing program 2: 20:25:08 executing program 5: 20:25:08 executing program 3: 20:25:08 executing program 0: 20:25:08 executing program 1: 20:25:08 executing program 4: 20:25:08 executing program 2: 20:25:08 executing program 0: 20:25:08 executing program 3: 20:25:09 executing program 5: 20:25:09 executing program 1: 20:25:09 executing program 4: 20:25:09 executing program 0: 20:25:09 executing program 2: 20:25:09 executing program 3: 20:25:09 executing program 5: 20:25:09 executing program 1: 20:25:09 executing program 4: 20:25:09 executing program 0: 20:25:09 executing program 5: 20:25:09 executing program 0: 20:25:09 executing program 2: 20:25:10 executing program 3: 20:25:10 executing program 1: 20:25:10 executing program 4: 20:25:10 executing program 5: 20:25:10 executing program 0: 20:25:10 executing program 2: 20:25:10 executing program 4: 20:25:10 executing program 1: 20:25:10 executing program 3: 20:25:10 executing program 5: 20:25:10 executing program 0: 20:25:10 executing program 2: 20:25:11 executing program 4: 20:25:11 executing program 1: 20:25:11 executing program 3: 20:25:11 executing program 0: 20:25:11 executing program 5: 20:25:11 executing program 2: 20:25:11 executing program 4: 20:25:11 executing program 3: 20:25:11 executing program 1: 20:25:11 executing program 0: 20:25:11 executing program 5: 20:25:11 executing program 4: 20:25:12 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) sendto$inet6(r1, &(0x7f0000000280), 0xa5, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) close(r0) 20:25:12 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000000)={'exec ', '&&\x00'}, 0x8) 20:25:12 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={&(0x7f0000de2ff4), 0xc, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000000301ffff000000150000000000000000080015000000000008000800"], 0x20}, 0x1, 0x0, 0x0, 0x2}, 0x0) 20:25:12 executing program 0: r0 = socket(0x40000000015, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setresuid(0x0, r2, r2) setuid(0x0) 20:25:12 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f00000001c0)={0x0, 0x1, 0x6, @dev={[], 0x10}}, 0x10) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000240)={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x1d}, 0x2}, {0xa, 0x4e24, 0x6, @loopback}, 0xc0c9, [0x0, 0x0, 0x5ef, 0x84a6, 0xffff, 0x6f80, 0x7ff]}, 0x5c) [ 279.182749] ================================================================== [ 279.190225] BUG: KMSAN: uninit-value in aa_fqlookupn_profile+0x32d/0x720 [ 279.197097] CPU: 1 PID: 8000 Comm: syz-executor3 Not tainted 4.19.0-rc4+ #63 [ 279.204306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 279.213678] Call Trace: [ 279.216294] dump_stack+0x306/0x460 [ 279.219961] ? _raw_spin_lock_irqsave+0x227/0x340 [ 279.224836] ? aa_fqlookupn_profile+0x32d/0x720 [ 279.229558] kmsan_report+0x1a3/0x2d0 [ 279.233419] __msan_warning+0x7c/0xe0 [ 279.237262] aa_fqlookupn_profile+0x32d/0x720 [ 279.241798] ? __msan_warning+0x61/0xe0 [ 279.245817] aa_label_strn_parse+0x171e/0x1e30 [ 279.250467] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 279.255872] ? refcount_inc_not_zero_checked+0x5bb/0x6d0 [ 279.261380] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 279.266794] aa_label_parse+0x11f/0x130 [ 279.270806] aa_change_profile+0x827/0x3cc0 [ 279.275172] ? task_kmsan_context_state+0x6b/0x120 [ 279.280144] ? INIT_INT+0xc/0x30 [ 279.283547] ? task_kmsan_context_state+0x6b/0x120 [ 279.288543] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 279.293943] ? strcmp+0x83/0x160 [ 279.297372] apparmor_setprocattr+0x1258/0x12f0 [ 279.302146] ? apparmor_getprocattr+0x630/0x630 [ 279.306875] security_setprocattr+0x139/0x210 [ 279.311466] proc_pid_attr_write+0x3f9/0x4e0 [ 279.315932] ? proc_pid_attr_read+0x500/0x500 [ 279.320465] __vfs_write+0x1f4/0xb70 [ 279.324229] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 279.329621] ? __sb_start_write+0xf8/0x230 [ 279.333896] vfs_write+0x495/0x8e0 [ 279.337509] __se_sys_write+0x183/0x370 [ 279.341531] __x64_sys_write+0x4a/0x70 [ 279.345458] do_syscall_64+0xbe/0x100 [ 279.349300] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 279.354522] RIP: 0033:0x457579 [ 279.357749] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 20:25:12 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f00000000c0)=0x4e, 0x4) sendmmsg(r2, &(0x7f0000000000), 0x33, 0x0) recvfrom(r1, &(0x7f00000002c0)=""/4096, 0x1000, 0x0, &(0x7f0000000000)=@pppoe={0x18, 0x0, {0x0, @link_local, 'veth1_to_bridge\x00'}}, 0x80) [ 279.376701] RSP: 002b:00007fed8c40cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 279.384451] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457579 [ 279.391747] RDX: 0000000000000008 RSI: 0000000020000000 RDI: 0000000000000003 [ 279.399049] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 279.406356] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fed8c40d6d4 [ 279.413677] R13: 00000000004c5502 R14: 00000000004d8e08 R15: 00000000ffffffff [ 279.420993] [ 279.422646] Local variable description: ----ns_name@aa_fqlookupn_profile [ 279.429495] Variable was created at: [ 279.433264] aa_fqlookupn_profile+0x79/0x720 [ 279.437749] aa_label_strn_parse+0x171e/0x1e30 [ 279.442346] ================================================================== [ 279.449740] Disabling lock debugging due to kernel taint [ 279.455221] Kernel panic - not syncing: panic_on_warn set ... [ 279.455221] [ 279.462629] CPU: 1 PID: 8000 Comm: syz-executor3 Tainted: G B 4.19.0-rc4+ #63 [ 279.471227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 279.480612] Call Trace: [ 279.483241] dump_stack+0x306/0x460 [ 279.487121] panic+0x54c/0xafa [ 279.490412] kmsan_report+0x2cd/0x2d0 [ 279.494269] __msan_warning+0x7c/0xe0 [ 279.498148] aa_fqlookupn_profile+0x32d/0x720 [ 279.502696] ? __msan_warning+0x61/0xe0 [ 279.506724] aa_label_strn_parse+0x171e/0x1e30 [ 279.511374] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 279.516802] ? refcount_inc_not_zero_checked+0x5bb/0x6d0 [ 279.522313] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 279.527728] aa_label_parse+0x11f/0x130 [ 279.531762] aa_change_profile+0x827/0x3cc0 [ 279.536135] ? task_kmsan_context_state+0x6b/0x120 [ 279.541109] ? INIT_INT+0xc/0x30 [ 279.544517] ? task_kmsan_context_state+0x6b/0x120 [ 279.549536] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 279.554945] ? strcmp+0x83/0x160 [ 279.558369] apparmor_setprocattr+0x1258/0x12f0 [ 279.563122] ? apparmor_getprocattr+0x630/0x630 [ 279.567821] security_setprocattr+0x139/0x210 [ 279.572364] proc_pid_attr_write+0x3f9/0x4e0 [ 279.576832] ? proc_pid_attr_read+0x500/0x500 20:25:12 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = semget(0x1, 0x7, 0x9) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0xc) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000380)={{{@in6=@mcast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f0000000480)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000004c0)={0x0, 0x0, 0x0}, &(0x7f0000000500)=0xc) semctl$IPC_SET(r2, 0x0, 0x1, &(0x7f0000000540)={{0x97fe, r3, r4, r5, r6, 0x44, 0x20}, 0x2, 0x4, 0x7fff}) openat$cgroup_int(r0, &(0x7f0000000600)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) r7 = open(&(0x7f00000000c0)='./bus\x00', 0x101002, 0x0) getsockopt$inet6_tcp_int(r7, 0x6, 0x1b, &(0x7f0000000140), &(0x7f0000000180)=0x4) open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) fallocate(r7, 0x0, 0x0, 0x120000) [ 279.581361] __vfs_write+0x1f4/0xb70 [ 279.585142] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 279.590536] ? __sb_start_write+0xf8/0x230 [ 279.594813] vfs_write+0x495/0x8e0 [ 279.598416] __se_sys_write+0x183/0x370 [ 279.602449] __x64_sys_write+0x4a/0x70 [ 279.606384] do_syscall_64+0xbe/0x100 [ 279.610236] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 279.615456] RIP: 0033:0x457579 [ 279.618678] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 279.637617] RSP: 002b:00007fed8c40cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 279.645365] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457579 [ 279.652672] RDX: 0000000000000008 RSI: 0000000020000000 RDI: 0000000000000003 [ 279.659971] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 279.667271] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fed8c40d6d4 [ 279.674568] R13: 00000000004c5502 R14: 00000000004d8e08 R15: 00000000ffffffff [ 279.683072] Kernel Offset: disabled [ 279.686743] Rebooting in 86400 seconds..