[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 32.289940] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 36.746072] random: sshd: uninitialized urandom read (32 bytes read) [ 37.512246] random: sshd: uninitialized urandom read (32 bytes read) [ 38.952714] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.21' (ECDSA) to the list of known hosts. [ 44.633061] random: sshd: uninitialized urandom read (32 bytes read) 2018/06/08 21:12:57 fuzzer started [ 46.162388] random: cc1: uninitialized urandom read (8 bytes read) 2018/06/08 21:13:00 dialing manager at 10.128.0.26:42821 [ 71.307643] can: request_module (can-proto-0) failed. [ 71.319368] can: request_module (can-proto-0) failed. 2018/06/08 21:13:26 kcov=true, comps=false 21:13:32 executing program 0: 21:13:32 executing program 1: 21:13:32 executing program 7: 21:13:32 executing program 2: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xfffffffffffffc51, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 21:13:32 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0xb2, 0x300) 21:13:32 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0xb2, 0x300) 21:13:32 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$IPC_INFO(0x0, 0x0, 0x3, &(0x7f0000000040)=""/8) 21:13:32 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x7, 0x0) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f00000002c0)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) [ 80.021511] IPVS: ftp: loaded support on port[0] = 21 [ 80.089324] IPVS: ftp: loaded support on port[0] = 21 [ 80.189316] IPVS: ftp: loaded support on port[0] = 21 [ 80.205695] IPVS: ftp: loaded support on port[0] = 21 [ 80.217785] IPVS: ftp: loaded support on port[0] = 21 [ 80.221446] IPVS: ftp: loaded support on port[0] = 21 [ 80.247780] IPVS: ftp: loaded support on port[0] = 21 [ 80.260378] IPVS: ftp: loaded support on port[0] = 21 [ 81.953011] ip (4738) used greatest stack depth: 54440 bytes left [ 82.185514] ip (4758) used greatest stack depth: 54152 bytes left [ 82.436784] ip (4773) used greatest stack depth: 54136 bytes left [ 83.531591] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.538158] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.557646] device bridge_slave_0 entered promiscuous mode [ 83.673473] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.679995] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.717627] device bridge_slave_0 entered promiscuous mode [ 83.794544] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.801206] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.844327] device bridge_slave_0 entered promiscuous mode [ 83.866251] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.872878] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.912833] device bridge_slave_1 entered promiscuous mode [ 83.928744] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.935262] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.955215] device bridge_slave_1 entered promiscuous mode [ 83.977515] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.984132] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.004807] device bridge_slave_0 entered promiscuous mode [ 84.013800] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.020303] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.036954] device bridge_slave_0 entered promiscuous mode [ 84.045976] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.052523] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.075251] device bridge_slave_0 entered promiscuous mode [ 84.088583] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.095125] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.105864] device bridge_slave_0 entered promiscuous mode [ 84.118160] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.124721] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.151469] device bridge_slave_0 entered promiscuous mode [ 84.175686] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 84.184765] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 84.194858] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.201716] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.245440] device bridge_slave_1 entered promiscuous mode [ 84.278457] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.285011] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.312016] device bridge_slave_1 entered promiscuous mode [ 84.335404] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.341913] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.350629] device bridge_slave_1 entered promiscuous mode [ 84.365721] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 84.378313] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 84.385588] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.392148] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.432318] device bridge_slave_1 entered promiscuous mode [ 84.451693] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.458248] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.478248] device bridge_slave_1 entered promiscuous mode [ 84.491384] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 84.498713] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.505290] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.534654] device bridge_slave_1 entered promiscuous mode [ 84.560812] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 84.584667] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 84.592569] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 84.600547] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 84.619788] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 84.747969] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 84.803260] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 84.830646] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 84.840667] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 84.851625] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 84.969369] ip (4947) used greatest stack depth: 54056 bytes left [ 84.980498] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 85.045520] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 85.174473] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 85.282657] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 85.362259] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 85.397209] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 85.468740] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 85.526735] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 85.564213] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 85.590751] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 85.614778] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 85.649407] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 85.656587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 85.693449] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 85.702133] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 85.709275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 85.735382] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 85.793910] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 85.824487] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 85.854243] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 85.873093] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 85.880330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 85.897643] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 85.913316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 85.949858] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 85.996362] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 86.003636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 86.052826] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 86.059988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 86.088780] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 86.095935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 86.114950] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 86.122267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 86.175712] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 86.183552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 86.210335] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 86.218331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 86.300550] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 86.308291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 86.328290] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 86.342743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 86.370294] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 86.377483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 86.401944] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 86.416956] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 86.445428] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 86.452752] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 86.510241] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 86.555188] team0: Port device team_slave_0 added [ 86.648752] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 86.676530] team0: Port device team_slave_0 added [ 86.782223] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 86.802002] team0: Port device team_slave_1 added [ 86.887528] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 86.920759] team0: Port device team_slave_1 added [ 86.967670] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 86.980589] team0: Port device team_slave_0 added [ 87.007637] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 87.015794] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 87.031424] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 87.065931] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 87.083697] team0: Port device team_slave_0 added [ 87.104826] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 87.119469] team0: Port device team_slave_0 added [ 87.148388] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 87.169332] team0: Port device team_slave_0 added [ 87.190650] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 87.204926] team0: Port device team_slave_0 added [ 87.212820] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 87.231254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 87.254883] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 87.280743] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 87.295362] team0: Port device team_slave_1 added [ 87.301865] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 87.309544] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 87.327142] team0: Port device team_slave_0 added [ 87.356610] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 87.377665] team0: Port device team_slave_1 added [ 87.392699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 87.408309] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 87.449214] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 87.459193] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 87.473238] team0: Port device team_slave_1 added [ 87.479857] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 87.498967] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 87.514242] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 87.529098] team0: Port device team_slave_1 added [ 87.538676] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 87.546658] team0: Port device team_slave_1 added [ 87.568490] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 87.598155] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 87.607626] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 87.616520] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 87.643697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 87.669137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 87.696295] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 87.710396] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 87.718475] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 87.726962] team0: Port device team_slave_1 added [ 87.733831] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 87.751313] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 87.760737] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 87.768162] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 87.785672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 87.812975] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 87.839152] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 87.864412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 87.883857] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 87.894472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 87.902741] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 87.916700] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 87.935379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 87.944727] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 87.957516] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 87.967489] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 87.975781] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 87.985317] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 87.995523] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 88.005253] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 88.012437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 88.037523] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 88.062549] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 88.099473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 88.132352] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 88.153353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 88.171910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 88.180750] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 88.188807] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 88.197198] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 88.205122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 88.213376] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 88.226741] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 88.246300] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 88.254810] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 88.266014] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 88.274986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 88.284652] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 88.296753] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 88.313573] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 88.330004] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 88.341541] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 88.357762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 88.415162] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 88.435523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 88.463553] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 88.486503] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 88.496981] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 88.511053] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 88.533693] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 88.544874] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 88.559996] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 88.575408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 88.596513] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 88.608926] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 88.618099] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 88.637647] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 88.655350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 88.684990] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 88.699389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 88.713912] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 88.727887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 88.738536] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 88.751306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 88.775883] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 88.802416] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 88.815684] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 88.835091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 88.856473] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 88.872889] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 88.894250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 88.908613] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 88.918239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 88.938317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 90.741619] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.748179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.755134] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.761668] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.811914] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 90.820412] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 90.882431] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.888955] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.895851] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.902323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.948504] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 91.011976] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.018517] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.025468] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.031988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.065164] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 91.269666] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.276174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.283103] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.289607] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.303958] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 91.330246] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.336775] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.343660] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.350155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.359801] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 91.366867] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.373336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.380227] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.386712] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.423163] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 91.443384] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.449865] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.456716] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.463195] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.493851] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 91.527314] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.533791] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.540672] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.547152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.598154] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 91.871310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 91.890333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 91.926735] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 91.946774] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 91.966847] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 91.974766] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 91.982916] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 99.870128] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.090826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.198450] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.257710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.329133] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.385116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.434693] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.582580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.729995] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 100.927094] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 101.088510] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 101.102014] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 101.163061] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 101.229638] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 101.249307] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 101.441168] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 101.533502] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 101.544278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 101.556185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 101.815009] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 101.821533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 101.832855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 101.888898] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 101.901166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 101.917893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 101.960206] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 101.966599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 101.978442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 102.029566] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 102.037351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 102.050133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 102.132403] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 102.138864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 102.150249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 102.288212] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 102.294645] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 102.312001] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 102.332549] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 102.345593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 102.357538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 102.478643] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.705470] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.744752] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.877316] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.944921] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.971373] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.190160] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.220800] 8021q: adding VLAN 0 to HW filter on device team0 21:14:01 executing program 0: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$ipx_IPX_TYPE(0xffffffffffffffff, 0x100, 0x1, &(0x7f00000000c0), 0x4) futimesat(0xffffffffffffffff, &(0x7f0000000080)='/\x00', &(0x7f0000000200)={{0x77359400}, {0x0, 0x7530}}) 21:14:01 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8, &(0x7f0000000140)="0200700000000000000000") r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000002c0)={'lo\x00@\x00', 0xf9}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r0) 21:14:01 executing program 2: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xfffffffffffffc51, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 21:14:01 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000030c0)={'team0\x00'}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000003c00)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000003bc0)={&(0x7f0000001500)=ANY=[@ANYBLOB="60005e6802f75651adb8cb1e29fae7eae5c0f245154d39b690063db621a33be4bef3bd358755568a739ae22f41eb638cb0bd92d874ef8d32ad3b6ba61e648854afb0f3a392ac6474e91f910d575bd092d54704060e7fb3fc6964e4f74c21b35c4ef8ffbf3ac0ffc6c992eb59dcefd5182d8f887581125447f7646698d9d48db31c2e39d4a949012f8f887caa40a8025509be901652e4960f34", @ANYBLOB="075e00000000000000000100000008000100", @ANYBLOB="4400020040000100240001006c625f686173685f737461747300000000000000000000800000000000000000089b64000000000008000400000000000800070000000000"], 0x3}, 0x1}, 0x0) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f0000d4b000)=0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') syz_genetlink_get_family_id$team(&(0x7f0000001340)='team\x00') pipe2(&(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f00000014c0)="6aa50a4d0c55d669b593bad6e605e989", 0x10) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000001300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000012c0)={&(0x7f0000000240)={0x74, r2, 0x20, 0x70bd29, 0x25dfdbfc, {0x2}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x70d62c3a39f27c7}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local={0xac, 0x14, 0x14, 0xaa}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback=0x7f000001}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1={0xff, 0x1, [], 0x1}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xffffffffffffff01}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x0) fcntl$dupfd(r0, 0x0, r0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f00000002c0)=""/4096) 21:14:01 executing program 3: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$rdma_cm(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYRES32=0xffffffff, @ANYBLOB="08000000a94a4adb49b54dcab6d66d52302ccc7b8e382f51316d9a7b8aad9d86d47976daef2722004a0354"], 0x2f) ioprio_get$pid(0x0, 0x0) 21:14:01 executing program 5: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000000d40)=@create_id={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000d00)={0xffffffff}, 0x13f, 0x1009}}, 0x20) write$rdma_cm(r0, &(0x7f0000002940)=@migrate_id={0x12, 0x10, 0xfa00, {&(0x7f0000000040), r1, r0}}, 0x18) 21:14:01 executing program 4: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(0xffffffffffffffff, &(0x7f00000007c0)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000780)}}, 0x20) write$rdma_cm(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="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", @ANYBLOB='\x00\x00\x00\x00'], 0x124) 21:14:01 executing program 6: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="81864e9417a4a6a027de39252b7fac3c0389f394c0dd0f3aaa553f2a9449070d2c60d2c2c114fcf93beb9041a40ee44625a7c4f8bb6a0c73fd60f34209a33d3fe15a728e3770977b7c9be8417d1a22631fa4f65a8137e7d53b1e362e6bddf48fa2ff83a582bc9b41c2ce8ad2e47999cb64c004e2da69"], 0x76) write$rdma_cm(r0, &(0x7f0000003280)=@reject={0x9, 0x108, 0xfa00, {0xffffffff, 0x0, "25451a", "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"}}, 0x110) 21:14:01 executing program 4: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f00000014c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x6, @local={0xfe, 0x80, [], 0xaa}}, {0xa, 0x4e22, 0x5, @local={0xfe, 0x80, [], 0xaa}}, 0xffffffff, 0x7}}, 0x2d5) 21:14:01 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xffffffffffffffff, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000240)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000014c0)={'team0\x00', 0x0}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000200)=0xffff, 0x4) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000004fc0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000004f80)={&(0x7f0000000280)={0x58, r2, 0x1, 0x0, 0x0, {0x4001}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4}}}]}}]}, 0x58}, 0x1}, 0x0) dup3(r0, r0, 0x0) 21:14:01 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) 21:14:01 executing program 2: sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xdb52) r0 = semget$private(0x0, 0x4, 0x0) semop(r0, &(0x7f0000000000)=[{0x0, 0xffffffff}], 0x1) semop(r0, &(0x7f0000000040)=[{0x0, 0x7fff}], 0x1) 21:14:01 executing program 7: keyctl$join(0x1, &(0x7f0000000040)={0x73, 0x79, 0x7a}) 21:14:01 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0xa29e0dcdcdf67d6b, &(0x7f0000000300), &(0x7f0000000040), &(0x7f0000000280), &(0x7f0000000180)) 21:14:01 executing program 0: r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1=0xe0000001}}}, 0x80, &(0x7f0000000640), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000084000000000000000000000000000000"], 0x18}, 0x0) 21:14:02 executing program 4: socket$packet(0x11, 0x3, 0x300) r0 = socket(0x11, 0x80002, 0x0) bind$packet(r0, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xfffffdf7, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) shutdown(r2, 0x1) 21:14:02 executing program 7: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000000280)=""/243, 0xf3) 21:14:02 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0xfa) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b0001020000000000410000000000"], 0x10}, 0x1}, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000000f00)=[{{&(0x7f00000003c0)=@rc, 0x80, &(0x7f0000000540), 0x0, &(0x7f0000000580)=""/30, 0x1e}}, {{&(0x7f00000005c0)=@in6, 0x80, &(0x7f0000000700), 0x0, &(0x7f0000000740)=""/186, 0xba}}, {{&(0x7f0000000800), 0x80, &(0x7f0000000e80), 0x0, &(0x7f0000002340)=""/4096, 0x1000}}], 0x3, 0x0, &(0x7f0000001000)={0x77359400}) 21:14:02 executing program 0: request_key(&(0x7f0000000180)='id_resolver\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a}, &(0x7f00000002c0)='/dev/uinput\x00', 0x0) 21:14:02 executing program 3: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000900)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1}, 0x1}, 0x0) 21:14:02 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0xa29e0dcdcdf67d6b, &(0x7f0000000300), &(0x7f0000000040), &(0x7f0000000280), &(0x7f0000000180)) 21:14:02 executing program 2: sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xdb52) r0 = semget$private(0x0, 0x4, 0x0) semop(r0, &(0x7f0000000000)=[{0x0, 0xffffffff}], 0x1) semop(r0, &(0x7f0000000040)=[{0x0, 0x7fff}], 0x1) 21:14:02 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000f36000)={&(0x7f0000000000)=ANY=[@ANYBLOB="020300090c000000ffffffffffffffff02001300020000000000000000000000030006000000002002004e20e0000001000000000000002402000100f8ffffff0000000200000000030005000000000002004e20e08000010000000000000000f188702b9957f9d70a5b799569ddd6bb1db2ec2facebbc3b400cde0cd5474be6b19b82b6bda319b892013961b2b9cfc6b049fa6b78d83997a9eaa01e76e9e8c54478c7701a591b2a73748609309314a541974d9f6aff49b838276248ce9d490242992fd9d5e8a3c3871622588398200e377427a5bbcfdcdfb79e88c231e31d024d89dbf4f12aa26b48626e793e6fda44bf18821a8f"], 0xf5}, 0x1}, 0x0) [ 109.444793] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 21:14:02 executing program 3: perf_event_open(&(0x7f0000000200)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) pwritev(r1, &(0x7f0000000100)=[{&(0x7f0000000040)='0', 0x1}], 0x1, 0x0) 21:14:02 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0xa29e0dcdcdf67d6b, &(0x7f0000000300), &(0x7f0000000040), &(0x7f0000000280), &(0x7f0000000180)) 21:14:02 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x2003e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, 0x4000}, &(0x7f00000000c0)=0x10) 21:14:02 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000300)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) write$vnet(r0, &(0x7f0000000280)={0x1, {&(0x7f00000003c0)=""/4096, 0x1000, &(0x7f00000013c0)=""/4096, 0x0, 0x2}}, 0x68) 21:14:02 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x100000803, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000300)) 21:14:02 executing program 5: r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioprio_set$pid(0x2, r0, 0x0) 21:14:02 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [], 0xaa}}]}, 0x2c}, 0x1}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@dev={0xfe, 0x80, [], 0x1f}, 0x6f, r2}) [ 110.460171] ================================================================== [ 110.468204] BUG: KMSAN: kernel-infoleak in _copy_to_iter+0x45f/0x2800 [ 110.474781] CPU: 1 PID: 6774 Comm: syz-executor1 Not tainted 4.17.0+ #5 [ 110.481516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 110.490859] Call Trace: [ 110.493453] dump_stack+0x185/0x1d0 [ 110.497064] kmsan_report+0x188/0x2a0 [ 110.500888] kmsan_internal_check_memory+0x138/0x1f0 [ 110.506019] kmsan_copy_to_user+0x7a/0x160 [ 110.510252] ? _copy_to_iter+0x92/0x2800 [ 110.514304] _copy_to_iter+0x45f/0x2800 [ 110.518264] ? finish_wait+0x10a/0x3e0 [ 110.522143] vhost_chr_read_iter+0x7b3/0xc30 [ 110.526536] ? init_wait_entry+0x1a0/0x1a0 [ 110.530768] vhost_net_chr_read_iter+0xf6/0x130 [ 110.535426] ? vhost_net_exit+0x30/0x30 [ 110.539401] do_iter_readv_writev+0x81c/0xa20 [ 110.543898] ? vhost_net_exit+0x30/0x30 [ 110.547863] do_iter_read+0x303/0xd80 [ 110.551652] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 110.557088] do_readv+0x295/0x5f0 [ 110.560543] __x64_sys_readv+0xe1/0x120 [ 110.564508] ? vfs_readv+0x260/0x260 [ 110.568227] do_syscall_64+0x15b/0x230 [ 110.572137] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 110.577343] RIP: 0033:0x4559f9 [ 110.580545] RSP: 002b:00007ff92a064c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 110.588260] RAX: ffffffffffffffda RBX: 00007ff92a0656d4 RCX: 00000000004559f9 [ 110.595518] RDX: 0000000000000001 RSI: 0000000020000040 RDI: 0000000000000013 [ 110.602875] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 110.610153] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 110.617422] R13: 00000000004c0533 R14: 00000000004cfd58 R15: 0000000000000000 [ 110.624695] [ 110.626307] Uninit was created at: [ 110.629867] kmsan_internal_poison_shadow+0xb8/0x1b0 [ 110.634962] kmsan_kmalloc+0x94/0x100 [ 110.638764] __kmalloc+0x13a/0x350 [ 110.642326] translate_desc+0xbef/0x1120 [ 110.646388] vhost_update_used_flags+0x469/0x8d0 [ 110.651147] vhost_vq_init_access+0x173/0xa20 [ 110.655644] vhost_net_ioctl+0x2217/0x3450 [ 110.659892] do_vfs_ioctl+0xcbd/0x24b0 [ 110.663774] __x64_sys_ioctl+0x280/0x320 [ 110.667861] do_syscall_64+0x15b/0x230 [ 110.671754] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 110.676928] [ 110.678542] Bytes 4-7 of 72 are uninitialized [ 110.683020] Memory access starts at ffff880130eeb420 [ 110.688118] ================================================================== [ 110.695460] Disabling lock debugging due to kernel taint [ 110.700912] Kernel panic - not syncing: panic_on_warn set ... [ 110.700912] [ 110.708286] CPU: 1 PID: 6774 Comm: syz-executor1 Tainted: G B 4.17.0+ #5 [ 110.716418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 110.725769] Call Trace: [ 110.728361] dump_stack+0x185/0x1d0 [ 110.731990] panic+0x3d0/0x990 [ 110.735186] kmsan_report+0x29e/0x2a0 [ 110.738976] kmsan_internal_check_memory+0x138/0x1f0 [ 110.744085] kmsan_copy_to_user+0x7a/0x160 [ 110.748316] ? _copy_to_iter+0x92/0x2800 [ 110.752387] _copy_to_iter+0x45f/0x2800 [ 110.756367] ? finish_wait+0x10a/0x3e0 [ 110.760271] vhost_chr_read_iter+0x7b3/0xc30 [ 110.764675] ? init_wait_entry+0x1a0/0x1a0 [ 110.768912] vhost_net_chr_read_iter+0xf6/0x130 [ 110.773592] ? vhost_net_exit+0x30/0x30 [ 110.777576] do_iter_readv_writev+0x81c/0xa20 [ 110.782075] ? vhost_net_exit+0x30/0x30 [ 110.786046] do_iter_read+0x303/0xd80 [ 110.789843] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 110.795295] do_readv+0x295/0x5f0 [ 110.798789] __x64_sys_readv+0xe1/0x120 [ 110.802758] ? vfs_readv+0x260/0x260 [ 110.806469] do_syscall_64+0x15b/0x230 [ 110.810379] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 110.815565] RIP: 0033:0x4559f9 [ 110.818758] RSP: 002b:00007ff92a064c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 110.826471] RAX: ffffffffffffffda RBX: 00007ff92a0656d4 RCX: 00000000004559f9 [ 110.833740] RDX: 0000000000000001 RSI: 0000000020000040 RDI: 0000000000000013 [ 110.841002] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 110.848276] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 110.855543] R13: 00000000004c0533 R14: 00000000004cfd58 R15: 0000000000000000 [ 110.863360] Dumping ftrace buffer: [ 110.866913] (ftrace buffer empty) [ 110.870648] Kernel Offset: disabled [ 110.874299] Rebooting in 86400 seconds..