[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 33.231721] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 37.339206] random: sshd: uninitialized urandom read (32 bytes read) [ 37.782417] random: sshd: uninitialized urandom read (32 bytes read) [ 39.341477] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.62' (ECDSA) to the list of known hosts. [ 44.890921] random: sshd: uninitialized urandom read (32 bytes read) 2018/07/10 06:01:05 fuzzer started [ 46.330609] random: cc1: uninitialized urandom read (8 bytes read) 2018/07/10 06:01:07 dialing manager at 10.128.0.26:42717 2018/07/10 06:01:09 syscalls: 1589 2018/07/10 06:01:09 code coverage: enabled 2018/07/10 06:01:09 comparison tracing: ioctl(KCOV_TRACE_CMP) failed: errno 524 2018/07/10 06:01:09 setuid sandbox: enabled 2018/07/10 06:01:09 namespace sandbox: enabled 2018/07/10 06:01:09 fault injection: enabled 2018/07/10 06:01:09 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/07/10 06:01:09 net packed injection: enabled [ 53.116329] random: crng init done 06:02:29 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x0, &(0x7f00000002c0)=0x6, 0x3) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100), 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r1) 06:02:29 executing program 2: ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x2284, &(0x7f0000000300)=ANY=[]) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r1) 06:02:29 executing program 1: socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000001c0)=ANY=[@ANYRES64], 0x1) 06:02:29 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) rt_sigprocmask(0x0, &(0x7f00000000c0), &(0x7f0000000180), 0x8) close(r1) 06:02:29 executing program 3: ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x2284, &(0x7f0000000300)=ANY=[]) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100), 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) alarm(0x0) sendto$inet6(r2, &(0x7f0000000280), 0xffffffee, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) close(r1) 06:02:29 executing program 5: write(0xffffffffffffffff, &(0x7f00000002c0), 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="000000000000000000000000000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30544d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6287c64dbea37a", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f00000009c0)="1f", 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) sendfile(r0, r0, &(0x7f0000000000), 0x20000102000007) 06:02:29 executing program 6: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000a8eff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000ac5000), 0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) close(r0) 06:02:29 executing program 4: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='}vboxnet1}:$7ppp1[\x00'}, 0x10) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) fallocate(r1, 0x10, 0x0, 0x5ee9) [ 130.709241] IPVS: ftp: loaded support on port[0] = 21 [ 130.712345] IPVS: ftp: loaded support on port[0] = 21 [ 130.739848] IPVS: ftp: loaded support on port[0] = 21 [ 130.764484] IPVS: ftp: loaded support on port[0] = 21 [ 130.780887] IPVS: ftp: loaded support on port[0] = 21 [ 130.815014] IPVS: ftp: loaded support on port[0] = 21 [ 130.833975] IPVS: ftp: loaded support on port[0] = 21 [ 130.866302] IPVS: ftp: loaded support on port[0] = 21 [ 134.439021] ip (4844) used greatest stack depth: 53232 bytes left [ 134.978357] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.984864] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.046895] device bridge_slave_0 entered promiscuous mode [ 135.062117] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.068572] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.086202] device bridge_slave_0 entered promiscuous mode [ 135.106416] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.112888] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.134404] device bridge_slave_0 entered promiscuous mode [ 135.156841] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.163286] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.185165] device bridge_slave_0 entered promiscuous mode [ 135.218914] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.225386] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.266248] device bridge_slave_0 entered promiscuous mode [ 135.295845] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.302284] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.338310] device bridge_slave_1 entered promiscuous mode [ 135.361010] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.367497] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.402346] device bridge_slave_1 entered promiscuous mode [ 135.427900] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.434350] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.456187] device bridge_slave_1 entered promiscuous mode [ 135.476261] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.482701] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.500199] device bridge_slave_0 entered promiscuous mode [ 135.517104] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.523580] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.537067] device bridge_slave_0 entered promiscuous mode [ 135.547156] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.553614] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.581134] device bridge_slave_1 entered promiscuous mode [ 135.604648] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 135.617940] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 135.625386] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.631833] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.678863] device bridge_slave_1 entered promiscuous mode [ 135.687373] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.693799] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.726776] device bridge_slave_0 entered promiscuous mode [ 135.754924] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 135.762108] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.768552] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.819914] device bridge_slave_1 entered promiscuous mode [ 135.835458] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 135.845766] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 135.854272] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.860706] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.904489] device bridge_slave_1 entered promiscuous mode [ 135.930707] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 135.951725] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 135.962687] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.969152] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.001970] device bridge_slave_1 entered promiscuous mode [ 136.025470] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 136.050300] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 136.129993] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 136.158799] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 136.192481] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 136.256003] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 136.315732] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 136.459536] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 136.547768] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 136.781179] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 136.793520] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 136.838391] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 136.931231] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 136.956716] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 136.976642] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 137.037709] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 137.121195] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 137.136315] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 137.218127] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 137.228154] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 137.238905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 137.275725] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 137.286158] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 137.320699] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 137.327665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 137.381400] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 137.407995] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 137.442537] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 137.449977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 137.488786] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 137.495795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 137.522461] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 137.529437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 137.557856] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 137.564837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 137.582905] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 137.631213] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 137.638600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 137.671263] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 137.680527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 137.713233] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 137.728148] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 137.736135] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 137.797386] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 137.804403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 137.874970] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 137.882094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 137.899094] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 137.906123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 138.005223] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 138.012163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 138.045503] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 138.052751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 138.152287] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 138.159252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 138.329770] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 138.339082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 138.371723] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 138.412154] team0: Port device team_slave_0 added [ 138.566489] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 138.583741] team0: Port device team_slave_0 added [ 138.594715] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 138.605835] team0: Port device team_slave_0 added [ 138.658444] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 138.674662] team0: Port device team_slave_0 added [ 138.714425] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 138.732401] team0: Port device team_slave_1 added [ 138.764493] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 138.790159] team0: Port device team_slave_0 added [ 138.821683] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 138.840739] team0: Port device team_slave_0 added [ 138.849908] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 138.865593] team0: Port device team_slave_1 added [ 138.915883] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 138.942880] team0: Port device team_slave_1 added [ 138.958563] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 138.980343] team0: Port device team_slave_1 added [ 139.009559] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 139.016557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 139.031096] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 139.056702] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 139.070760] team0: Port device team_slave_0 added [ 139.096757] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 139.124921] team0: Port device team_slave_1 added [ 139.138723] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 139.148518] team0: Port device team_slave_1 added [ 139.156739] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 139.164734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 139.192215] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 139.233190] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 139.247671] team0: Port device team_slave_0 added [ 139.265285] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 139.272279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 139.301722] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 139.333820] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 139.340806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 139.370343] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 139.390104] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 139.400958] team0: Port device team_slave_1 added [ 139.415369] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 139.434701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 139.447931] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 139.464895] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 139.472592] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 139.479941] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 139.499873] team0: Port device team_slave_1 added [ 139.524722] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 139.532657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 139.549943] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 139.571151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 139.600684] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 139.626711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 139.642140] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 139.673154] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 139.680443] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 139.687855] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 139.710873] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 139.722831] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 139.731730] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 139.743609] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 139.757615] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 139.764587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 139.803490] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 139.821358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 139.837559] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 139.855396] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 139.865806] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 139.875166] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 139.887548] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 139.899158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 139.920705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 139.934747] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 139.954878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 139.976409] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 139.993950] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 140.002449] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 140.015670] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 140.027335] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 140.036555] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 140.046468] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 140.080184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 140.111442] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 140.144755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 140.181268] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 140.196205] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 140.207016] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 140.216760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 140.225809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 140.234774] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 140.258693] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 140.270223] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 140.282407] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 140.293296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 140.308948] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 140.326814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 140.357339] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 140.365417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 140.379782] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 140.396291] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 140.407164] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 140.419243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 140.440926] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 140.455716] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 140.470118] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 140.478973] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 140.497197] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 140.549308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 140.590584] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 140.623873] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 140.667283] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 140.700268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 140.716519] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 140.725216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 140.740339] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 140.749954] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 140.760781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 140.813747] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 140.824747] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 140.832616] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 140.847706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 140.908402] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 140.941962] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 141.081376] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 141.088910] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 141.108507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 143.224963] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.231437] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.238279] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.244718] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.267480] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 143.275301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 143.310420] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.316874] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.323662] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.330114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.373594] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 143.399712] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.406141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.412943] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.419366] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.478490] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 143.490422] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.496838] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.503578] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.509988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.531185] ip (5340) used greatest stack depth: 53216 bytes left [ 143.556464] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 143.706494] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.712955] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.719751] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.726166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.778177] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 144.057328] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.063865] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.070627] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.077079] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.088852] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 144.096791] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.103214] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.110055] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.116486] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.147985] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 144.165143] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.171587] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.178366] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.184798] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.278390] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 144.290282] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 144.299995] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 144.321472] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 144.330363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 144.339416] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 144.359168] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 144.367469] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 154.234881] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.313810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.495360] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.638204] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.698095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.111898] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.190586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.229106] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 155.276676] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 155.316749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.494458] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 155.681340] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 155.744194] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 156.125728] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 156.225153] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 156.266019] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 156.287150] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 156.295298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 156.320870] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 156.353078] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 156.370531] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 156.402897] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 156.544470] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 156.550812] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 156.565910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 156.686609] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 156.692900] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 156.710461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 156.885341] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 156.891623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 156.904581] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 157.236264] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 157.243960] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 157.254871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 157.302735] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 157.319627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 157.331959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 157.373415] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 157.390137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 157.409564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 157.444439] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.459927] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.581843] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.791441] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.969815] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.172936] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.353842] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.401963] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.620620] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 163.647819] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 06:03:04 executing program 1: r0 = socket$inet_tcp(0x2, 0x3, 0x6) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) sendmsg(r0, &(0x7f0000000500)={&(0x7f0000000080)=@in={0x2, 0x0, @multicast1=0xe0000001}, 0x80, &(0x7f0000000280), 0x0, &(0x7f0000000040)}, 0x8000) write$binfmt_misc(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="030ce9005ee65d276aa4971feeec83c508000000"], 0x14) [ 164.270300] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 164.401094] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 06:03:04 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x11, r0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='limits\x00') 06:03:04 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000005700)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000400)=@setlink={0x34, 0x13, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_IFNAME={0x14, 0x3, 'veth1\x00'}]}, 0x34}, 0x1}, 0x0) 06:03:04 executing program 5: 06:03:04 executing program 4: 06:03:04 executing program 7: 06:03:04 executing program 5: 06:03:04 executing program 1: 06:03:04 executing program 7: [ 164.910625] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 06:03:05 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0), 0x0) 06:03:05 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) accept4(r1, &(0x7f00000000c0)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000f5effc)=0x80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x6, 0x4, 0x7fff, 0x3f, 0x0, 0x1, 0x0, [0x24000000000002, 0xe000000, 0x0, 0x0, 0x0, 0x0, 0x34000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32000]}, 0x2c) 06:03:05 executing program 4: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'trans=fd,'}, 0x2c}, {@cache_none='cache=none', 0x2c}]}}) [ 165.666146] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 06:03:05 executing program 7: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x5, 0x7e, 0x1, 0x4, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f00000000c0), &(0x7f00000001c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r0, &(0x7f00000000c0)}, 0x10) 06:03:05 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ptrace$poke(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x0) 06:03:05 executing program 1: r0 = socket$inet(0x2, 0x3, 0x7) recvfrom(r0, &(0x7f00000004c0)=""/188, 0xbc, 0x0, &(0x7f00000006c0)=@pppoe={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2}, 'bridge_slave_1\x00'}}, 0x80) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f00000000c0)=0x7f, 0x4) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000200)="92", 0x1) sendto$inet(r0, &(0x7f0000004000), 0x33f, 0x0, &(0x7f0000002000)={0x2}, 0x10) 06:03:05 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f0000c95ffd), 0x49b8, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) 06:03:05 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(r0, &(0x7f00000001c0)="ed", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x4}, 0x1c) listen(r0, 0x9) r1 = accept4(r0, &(0x7f00000003c0)=@in={0x0, 0x0, @multicast1}, &(0x7f0000000ac0)=0x80, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2}}, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x98) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) 06:03:05 executing program 0: 06:03:05 executing program 4: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rmdir(&(0x7f000015dff6)='./control\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000200)='./control/file0\x00') close(r0) 06:03:05 executing program 6: 06:03:05 executing program 7: syz_emit_ethernet(0x46, &(0x7f0000000700)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "c22df7", 0x10, 0x2c, 0x0, @dev={0xfe, 0x80}, @local={0xfe, 0x80, [], 0xaa}, {[], @dccp={{0x2c00, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "0087ae", 0x0, "ca8345"}}}}}}}, &(0x7f0000000040)) 06:03:05 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local={0xfe, 0x80, [], 0xaa}}, 0x1c) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="0035680c2190069770e6c99be374281e36c6fed7780788ad4c16ad89467e5713f27fe91adeaa19d06c1ffe2ff67d1735cde7f38a2b36fd1ad275db3ee166345a95679afd07"], 0x45) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) read(r0, &(0x7f00000004c0)=""/165, 0x404) 06:03:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000003480)=[{{&(0x7f00000000c0)=@in={0x0, 0x0, @loopback}, 0x80, &(0x7f0000000480)}}, {{&(0x7f0000000500)=@pppoe={0x0, 0x0, {0x0, @local}}, 0x80, &(0x7f0000001900)=[{&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001800)=""/246, 0xf6}], 0x2, &(0x7f0000001980)=""/11, 0xb}}], 0x2, 0x0, &(0x7f0000003600)={0x77359400}) sendmsg$nl_route(r0, &(0x7f00003e4000)={&(0x7f0000e87000)={0x10}, 0xc, &(0x7f0000a3bff8)={&(0x7f0000000400)=@getlink={0x20, 0x12, 0x209}, 0x20}, 0x1}, 0x0) clock_gettime(0x0, &(0x7f0000007280)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000007080)=[{{&(0x7f0000000000)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f00000029c0)=[{&(0x7f0000000140)=""/229, 0xe5}, {&(0x7f0000000240)=""/187, 0xbb}, {&(0x7f0000000300)=""/143, 0x8f}, {&(0x7f00000019c0)=""/4096, 0x1000}], 0x4, &(0x7f0000002a40)=""/145, 0x91}}, {{&(0x7f0000002b00)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000002d40), 0x0, &(0x7f0000002d80)=""/66, 0x42}}, {{&(0x7f0000002e00)=@pppoe={0x0, 0x0, {0x0, @local}}, 0x80, &(0x7f0000002f80), 0x0, &(0x7f0000002fc0)=""/202, 0xca}}, {{&(0x7f00000030c0)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f00000032c0), 0x0, &(0x7f0000003300)=""/4, 0x4}}, {{0x0, 0x0, &(0x7f00000057c0)=[{&(0x7f0000003640)=""/4096, 0x1000}, {&(0x7f0000003340)=""/165, 0xa5}, {&(0x7f0000004640)=""/4096, 0x1000}, {&(0x7f0000003400)=""/76, 0x4c}, {&(0x7f0000003500)=""/96, 0x60}, {&(0x7f0000003580)=""/81, 0x51}, {&(0x7f0000005640)=""/69, 0x45}, {&(0x7f00000056c0)=""/235, 0xeb}], 0x8, &(0x7f0000005840)=""/4096, 0x1000}}, {{&(0x7f0000006d00)=@sco, 0x80, &(0x7f0000007040)}}], 0x6, 0x0, &(0x7f00000072c0)={0x0, r1+10000000}) [ 165.876725] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 06:03:05 executing program 6: r0 = socket(0xa, 0x5, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000200)={0x1, 'bridge_slave_1\x00'}, 0x18) [ 165.973266] ================================================================== [ 165.980693] BUG: KMSAN: uninit-value in ipv6_skip_exthdr+0x156/0x910 [ 165.987195] CPU: 1 PID: 6747 Comm: syz-executor7 Not tainted 4.18.0-rc4+ #23 [ 165.994379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 166.003746] Call Trace: [ 166.006351] dump_stack+0x185/0x1e0 [ 166.009998] kmsan_report+0x195/0x2c0 [ 166.013821] __msan_warning_32+0x7d/0xe0 [ 166.017899] ipv6_skip_exthdr+0x156/0x910 [ 166.022077] ipv6_get_l4proto+0x1be/0x2f0 [ 166.026247] nf_conntrack_in+0x54a/0x2070 [ 166.030436] ? ipv6_invert_tuple+0xf0/0xf0 [ 166.034694] ipv6_conntrack_in+0xc3/0xf0 [ 166.038771] ? ipv6_hooks_unregister+0x200/0x200 [ 166.041952] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 166.043536] nf_hook_slow+0x15d/0x3e0 [ 166.043563] ipv6_rcv+0x1df5/0x2250 [ 166.043599] ? local_bh_enable+0x40/0x40 [ 166.043624] __netif_receive_skb_core+0x4a7a/0x4fc0 [ 166.043652] ? ip6_rcv_finish+0x6e0/0x6e0 [ 166.043681] netif_receive_skb_internal+0x475/0x660 [ 166.043706] netif_receive_skb+0x246/0x270 [ 166.043739] tun_get_user+0x80f6/0x89c0 [ 166.089436] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_1, syncid = 0, id = 0 [ 166.091146] tun_chr_write_iter+0x1d4/0x330 [ 166.091172] ? tun_chr_read_iter+0x460/0x460 [ 166.091190] do_iter_readv_writev+0x81a/0xac0 [ 166.091220] ? tun_chr_read_iter+0x460/0x460 [ 166.091239] do_iter_write+0x30d/0xd50 [ 166.091259] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 166.091285] ? import_iovec+0x3e0/0x640 [ 166.135466] do_writev+0x3d8/0x860 [ 166.139032] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 166.144421] __x64_sys_writev+0xe1/0x120 [ 166.148493] ? __ia32_sys_readv+0x120/0x120 [ 166.152819] do_syscall_64+0x15b/0x230 [ 166.156717] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 166.161910] RIP: 0033:0x455ce1 06:03:06 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_triestat\x00') pread64(r0, &(0x7f00000000c0)=""/53, 0x5, 0x0) 06:03:06 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local={0xfe, 0x80, [], 0xaa}}, 0x1c) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="0035680c2190069770e6c99be374281e36c6fed7780788ad4c16ad89467e5713f27fe91adeaa19d06c1ffe2ff67d1735cde7f38a2b36fd1ad275db3ee166345a95679afd07"], 0x45) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) read(r0, &(0x7f00000004c0)=""/165, 0x404) [ 166.165091] Code: 75 14 b8 14 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 54 bb fb ff c3 48 83 ec 08 e8 da 2c 00 00 48 89 04 24 b8 14 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 23 2d 00 00 48 89 d0 48 83 c4 08 48 3d 01 [ 166.184425] RSP: 002b:00007fc8a6a40ba0 EFLAGS: 00000293 ORIG_RAX: 0000000000000014 [ 166.192142] RAX: ffffffffffffffda RBX: 0000000000000046 RCX: 0000000000455ce1 [ 166.199422] RDX: 0000000000000001 RSI: 00007fc8a6a40bf0 RDI: 00000000000000fc [ 166.206698] RBP: 0000000020000700 R08: 00000000000000fc R09: 0000000000000000 [ 166.213972] R10: 0000000000000046 R11: 0000000000000293 R12: 00000000ffffffff [ 166.221247] R13: 00000000004c2440 R14: 00000000004d3ca0 R15: 0000000000000000 [ 166.228529] [ 166.230153] Uninit was stored to memory at: [ 166.234482] kmsan_internal_chain_origin+0x13c/0x240 [ 166.239592] kmsan_memcpy_origins+0x11d/0x170 [ 166.244095] __msan_memcpy+0xe7/0x150 [ 166.247900] skb_copy_bits+0x1f9/0xd80 [ 166.251792] ipv6_get_l4proto+0x105/0x2f0 [ 166.255945] nf_conntrack_in+0x54a/0x2070 [ 166.260097] ipv6_conntrack_in+0xc3/0xf0 [ 166.264160] nf_hook_slow+0x15d/0x3e0 [ 166.267964] ipv6_rcv+0x1df5/0x2250 [ 166.271603] __netif_receive_skb_core+0x4a7a/0x4fc0 [ 166.276630] netif_receive_skb_internal+0x475/0x660 [ 166.281663] netif_receive_skb+0x246/0x270 [ 166.285925] tun_get_user+0x80f6/0x89c0 [ 166.289899] tun_chr_write_iter+0x1d4/0x330 [ 166.294224] do_iter_readv_writev+0x81a/0xac0 [ 166.298728] do_iter_write+0x30d/0xd50 [ 166.302618] do_writev+0x3d8/0x860 [ 166.306169] __x64_sys_writev+0xe1/0x120 [ 166.310235] do_syscall_64+0x15b/0x230 [ 166.314129] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 166.319308] [ 166.320929] Uninit was stored to memory at: [ 166.325252] kmsan_internal_chain_origin+0x13c/0x240 [ 166.330357] kmsan_memcpy_origins+0x11d/0x170 [ 166.334863] kmsan_memmove_origins+0x9/0x10 [ 166.339196] __msan_memmove+0xe7/0x150 [ 166.343087] nf_ct_frag6_gather+0x436a/0x5870 [ 166.347594] ipv6_defrag+0x501/0x5c0 [ 166.351311] nf_hook_slow+0x15d/0x3e0 [ 166.355116] ipv6_rcv+0x1df5/0x2250 [ 166.358742] __netif_receive_skb_core+0x4a7a/0x4fc0 [ 166.363761] netif_receive_skb_internal+0x475/0x660 [ 166.368779] netif_receive_skb+0x246/0x270 06:03:06 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local={0xfe, 0x80, [], 0xaa}}, 0x1c) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="0035680c2190069770e6c99be374281e36c6fed7780788ad4c16ad89467e5713f27fe91adeaa19d06c1ffe2ff67d1735cde7f38a2b36fd1ad275db3ee166345a95679afd07"], 0x45) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) read(r0, &(0x7f00000004c0)=""/165, 0x404) [ 166.373016] tun_get_user+0x80f6/0x89c0 [ 166.376995] tun_chr_write_iter+0x1d4/0x330 [ 166.381319] do_iter_readv_writev+0x81a/0xac0 [ 166.385820] do_iter_write+0x30d/0xd50 [ 166.389705] do_writev+0x3d8/0x860 [ 166.393247] __x64_sys_writev+0xe1/0x120 [ 166.397311] do_syscall_64+0x15b/0x230 [ 166.401234] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 166.406409] [ 166.408031] Uninit was created at: [ 166.411579] kmsan_internal_alloc_meta_for_pages+0x157/0x730 [ 166.417382] kmsan_alloc_page+0x80/0xe0 [ 166.421371] __alloc_pages_nodemask+0x105b/0x6320 [ 166.426223] alloc_pages_current+0x6b1/0x970 [ 166.430639] skb_page_frag_refill+0x3be/0x5f0 [ 166.435136] tun_get_user+0xede/0x89c0 [ 166.439037] tun_chr_write_iter+0x1d4/0x330 [ 166.443363] do_iter_readv_writev+0x81a/0xac0 [ 166.447873] do_iter_write+0x30d/0xd50 [ 166.451763] do_writev+0x3d8/0x860 [ 166.455310] __x64_sys_writev+0xe1/0x120 [ 166.459374] do_syscall_64+0x15b/0x230 [ 166.463274] entry_SYSCALL_64_after_hwframe+0x63/0xe7 06:03:06 executing program 6: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='}vboxnet1}:$7ppp1[\x00'}, 0x10) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f0000000140)=""/132) r2 = creat(&(0x7f0000000100)='./file1\x00', 0x0) fallocate(r2, 0x10, 0x0, 0x5ee9) [ 166.468454] ================================================================== [ 166.475808] Disabling lock debugging due to kernel taint [ 166.481258] Kernel panic - not syncing: panic_on_warn set ... [ 166.481258] [ 166.488638] CPU: 1 PID: 6747 Comm: syz-executor7 Tainted: G B 4.18.0-rc4+ #23 [ 166.497210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 166.506562] Call Trace: [ 166.509159] dump_stack+0x185/0x1e0 [ 166.512804] panic+0x3d0/0x9b0 [ 166.516022] kmsan_report+0x2bf/0x2c0 [ 166.519838] __msan_warning_32+0x7d/0xe0 [ 166.523912] ipv6_skip_exthdr+0x156/0x910 [ 166.528083] ipv6_get_l4proto+0x1be/0x2f0 [ 166.532247] nf_conntrack_in+0x54a/0x2070 [ 166.536428] ? ipv6_invert_tuple+0xf0/0xf0 [ 166.540683] ipv6_conntrack_in+0xc3/0xf0 [ 166.544757] ? ipv6_hooks_unregister+0x200/0x200 [ 166.549519] nf_hook_slow+0x15d/0x3e0 [ 166.553340] ipv6_rcv+0x1df5/0x2250 [ 166.556988] ? local_bh_enable+0x40/0x40 [ 166.561062] __netif_receive_skb_core+0x4a7a/0x4fc0 [ 166.566095] ? ip6_rcv_finish+0x6e0/0x6e0 [ 166.570266] netif_receive_skb_internal+0x475/0x660 [ 166.575301] netif_receive_skb+0x246/0x270 [ 166.579552] tun_get_user+0x80f6/0x89c0 [ 166.583580] tun_chr_write_iter+0x1d4/0x330 [ 166.587922] ? tun_chr_read_iter+0x460/0x460 [ 166.592337] do_iter_readv_writev+0x81a/0xac0 [ 166.596858] ? tun_chr_read_iter+0x460/0x460 [ 166.601279] do_iter_write+0x30d/0xd50 [ 166.605181] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 166.610636] ? import_iovec+0x3e0/0x640 [ 166.614633] do_writev+0x3d8/0x860 [ 166.618201] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 166.623586] __x64_sys_writev+0xe1/0x120 [ 166.627667] ? __ia32_sys_readv+0x120/0x120 [ 166.631998] do_syscall_64+0x15b/0x230 [ 166.635903] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 166.641092] RIP: 0033:0x455ce1 [ 166.644279] Code: 75 14 b8 14 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 54 bb fb ff c3 48 83 ec 08 e8 da 2c 00 00 48 89 04 24 b8 14 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 23 2d 00 00 48 89 d0 48 83 c4 08 48 3d 01 [ 166.663589] RSP: 002b:00007fc8a6a40ba0 EFLAGS: 00000293 ORIG_RAX: 0000000000000014 [ 166.671309] RAX: ffffffffffffffda RBX: 0000000000000046 RCX: 0000000000455ce1 [ 166.678581] RDX: 0000000000000001 RSI: 00007fc8a6a40bf0 RDI: 00000000000000fc [ 166.685857] RBP: 0000000020000700 R08: 00000000000000fc R09: 0000000000000000 [ 166.693133] R10: 0000000000000046 R11: 0000000000000293 R12: 00000000ffffffff [ 166.700413] R13: 00000000004c2440 R14: 00000000004d3ca0 R15: 0000000000000000 [ 166.708180] Dumping ftrace buffer: [ 166.711705] (ftrace buffer empty) [ 166.715397] Kernel Offset: disabled [ 166.719027] Rebooting in 86400 seconds..