[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 27.967867] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. [ 28.567930] random: sshd: uninitialized urandom read (32 bytes read) [ 28.776069] random: sshd: uninitialized urandom read (32 bytes read) Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 30.006302] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.34' (ECDSA) to the list of known hosts. [ 35.478362] random: sshd: uninitialized urandom read (32 bytes read) 2018/06/07 20:26:52 fuzzer started [ 36.413593] random: cc1: uninitialized urandom read (8 bytes read) 2018/06/07 20:26:53 dialing manager at 10.128.0.26:42401 [ 60.258680] can: request_module (can-proto-0) failed. [ 60.269670] can: request_module (can-proto-0) failed. 2018/06/07 20:27:19 kcov=true, comps=false 20:27:24 executing program 0: 20:27:24 executing program 1: 20:27:24 executing program 7: 20:27:24 executing program 2: 20:27:24 executing program 3: 20:27:24 executing program 4: 20:27:24 executing program 5: 20:27:24 executing program 6: [ 68.213770] IPVS: ftp: loaded support on port[0] = 21 [ 68.283129] IPVS: ftp: loaded support on port[0] = 21 [ 68.301057] IPVS: ftp: loaded support on port[0] = 21 [ 68.317886] IPVS: ftp: loaded support on port[0] = 21 [ 68.321833] IPVS: ftp: loaded support on port[0] = 21 [ 68.326345] IPVS: ftp: loaded support on port[0] = 21 [ 68.336246] IPVS: ftp: loaded support on port[0] = 21 [ 68.359125] IPVS: ftp: loaded support on port[0] = 21 [ 69.929309] ip (4644) used greatest stack depth: 54352 bytes left [ 70.908214] ip (4728) used greatest stack depth: 54328 bytes left [ 71.411165] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.417749] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.447955] device bridge_slave_0 entered promiscuous mode [ 71.653662] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.660220] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.683314] device bridge_slave_1 entered promiscuous mode [ 71.702930] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.709420] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.726217] device bridge_slave_0 entered promiscuous mode [ 71.762238] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.768740] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.796581] device bridge_slave_0 entered promiscuous mode [ 71.820592] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.827167] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.835359] device bridge_slave_0 entered promiscuous mode [ 71.848833] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.855305] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.883319] device bridge_slave_0 entered promiscuous mode [ 71.904441] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.910967] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.921921] device bridge_slave_0 entered promiscuous mode [ 71.934220] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 71.945594] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.952095] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.974203] device bridge_slave_0 entered promiscuous mode [ 71.992940] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.999436] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.023010] device bridge_slave_1 entered promiscuous mode [ 72.037449] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.043905] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.060389] device bridge_slave_0 entered promiscuous mode [ 72.070413] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.076882] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.098372] device bridge_slave_1 entered promiscuous mode [ 72.114739] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.121219] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.129387] device bridge_slave_1 entered promiscuous mode [ 72.150728] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 72.158442] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.164877] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.185297] device bridge_slave_1 entered promiscuous mode [ 72.206079] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.212549] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.239913] device bridge_slave_1 entered promiscuous mode [ 72.247492] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.253951] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.267597] device bridge_slave_1 entered promiscuous mode [ 72.275005] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 72.286845] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 72.297717] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.304203] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.325916] device bridge_slave_1 entered promiscuous mode [ 72.347841] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 72.366394] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 72.454759] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 72.462569] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 72.478402] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 72.488893] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 72.526839] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 72.535193] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 72.566900] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 72.662339] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 72.683738] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 72.787928] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 72.799882] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 72.975208] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 73.101626] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 73.117870] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 73.161563] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 73.226338] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 73.235823] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 73.246632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.291132] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 73.328510] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 73.339454] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 73.364661] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 73.391746] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 73.432213] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 73.485552] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 73.499519] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 73.506571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.555679] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 73.571250] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 73.607706] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 73.614746] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.632079] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 73.640815] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.674973] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 73.698603] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 73.705590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.759550] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 73.766584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.790432] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 73.799230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.817208] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 73.824244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.883162] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 73.890161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.916147] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 73.946991] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 73.954158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.970769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.016498] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 74.023565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.058783] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 74.068480] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 74.086506] team0: Port device team_slave_0 added [ 74.113981] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.131789] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 74.140739] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 74.198395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.218332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.307498] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 74.336724] team0: Port device team_slave_1 added [ 74.386578] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 74.420777] team0: Port device team_slave_0 added [ 74.574458] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 74.581470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.599081] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.635640] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 74.652102] team0: Port device team_slave_0 added [ 74.672171] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 74.688309] team0: Port device team_slave_0 added [ 74.702708] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 74.718239] team0: Port device team_slave_0 added [ 74.723905] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 74.740949] team0: Port device team_slave_1 added [ 74.754484] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 74.766764] team0: Port device team_slave_0 added [ 74.781696] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 74.798415] team0: Port device team_slave_0 added [ 74.809620] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 74.821853] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.837788] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.856466] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 74.869858] team0: Port device team_slave_0 added [ 74.889195] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 74.907352] team0: Port device team_slave_1 added [ 74.919111] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 74.943513] team0: Port device team_slave_1 added [ 74.960391] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 74.972232] team0: Port device team_slave_1 added [ 75.001283] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 75.009757] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 75.020800] team0: Port device team_slave_1 added [ 75.026949] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.044343] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.063792] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 75.071281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.079758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.100660] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 75.116418] team0: Port device team_slave_1 added [ 75.123466] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 75.134226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.152193] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.179398] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 75.186648] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 75.200093] team0: Port device team_slave_1 added [ 75.227655] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 75.235274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.254811] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.274614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.299816] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.310485] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 75.317516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.326276] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.343901] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 75.353091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.371054] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.399069] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 75.406580] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 75.415270] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 75.422202] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.445674] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.472679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.498267] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.511757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.519757] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.528112] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 75.535902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.544612] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.553389] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 75.573802] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 75.585445] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 75.592979] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 75.600882] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 75.622251] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.652329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.680572] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.709764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.723593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.735706] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.743745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.751670] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.759445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.767456] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.776675] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 75.783976] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.792991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.806165] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 75.828464] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 75.838144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.849623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.857702] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.867459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.886226] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 75.896865] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 75.904923] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 75.923284] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 75.931437] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.949013] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.985426] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.019605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.046611] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.056971] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.065987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.073809] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.082769] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 76.090415] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.098841] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.115286] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 76.127792] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 76.145188] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 76.157856] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 76.166166] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.181138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.217338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.237133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.262305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.275703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.286436] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.295566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.305795] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 76.337511] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 76.346893] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.385329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.421951] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.471464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 78.219378] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.225847] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.232681] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.239108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.276487] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 78.283793] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 78.309946] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.316404] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.323214] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.329642] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.343372] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 78.550390] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.556860] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.563650] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.570096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.582126] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 78.596082] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.602521] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.609319] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.615737] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.648798] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 78.656783] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.663235] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.670065] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.676488] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.686741] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 78.694382] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.700797] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.707514] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.713937] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.721654] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 78.729917] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.736341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.743158] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.749581] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.766539] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 78.793656] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.800125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.806919] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.813340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.916194] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 79.327593] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.349335] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.366967] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.382480] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.390712] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.399923] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.409365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 86.805255] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.901650] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.948826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.013623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.090469] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.142591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.200812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.354222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.536113] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 87.710282] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 87.798201] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 87.819525] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 87.838666] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 87.910914] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 88.056261] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 88.158083] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 88.325066] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 88.331391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 88.339503] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 88.458666] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 88.465084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 88.478740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 88.579339] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 88.585680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 88.594342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 88.618930] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 88.632073] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 88.638699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 88.651317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 88.690823] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 88.714322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 88.758160] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 88.765709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 88.774536] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 88.971324] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 88.977612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 88.989172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 89.032786] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 89.039476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 89.051337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 89.249177] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.318307] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.438762] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.464355] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.495449] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.630414] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.687236] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.814926] 8021q: adding VLAN 0 to HW filter on device team0 20:27:51 executing program 5: 20:27:51 executing program 0: 20:27:51 executing program 7: 20:27:51 executing program 5: 20:27:51 executing program 3: 20:27:51 executing program 1: 20:27:51 executing program 6: 20:27:51 executing program 2: 20:27:51 executing program 4: 20:27:51 executing program 3: r0 = getpgid(0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x1) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') syz_fuse_mount(&(0x7f0000000300)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 20:27:51 executing program 7: r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f00000000c0)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x80, &(0x7f0000000200)}, 0x8000) sendmsg(r0, &(0x7f0000000340)={&(0x7f0000000040)=@un=@abs, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000480)="6af8a9bba3539ed9fdc711ff0ddbc72e", 0x10}], 0x1, &(0x7f0000000380)}, 0x0) 20:27:51 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x5) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x82000060) open$dir(&(0x7f0000000100)='./file0\x00', 0x220101, 0x0) 20:27:51 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f000000affc)) syz_open_dev$sndpcmc(&(0x7f00006a6fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x40400) [ 94.814337] raw_sendmsg: syz-executor7 forgot to set AF_INET. Fix it! 20:27:52 executing program 4: r0 = getpgid(0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x1) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') syz_fuse_mount(&(0x7f0000000300)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 20:27:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000001340)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000001400)={&(0x7f0000001300)={0x10}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x1c, r1, 0x221, 0x0, 0x0, {0x3}, [@FOU_ATTR_PORT={0x8, 0x1, 0x4e22}]}, 0x1c}, 0x1}, 0x0) 20:27:52 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000040)='team0\x00') sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0x31298f553e76f020, &(0x7f0000000100)={&(0x7f00000001c0)=@dellink={0x34, 0x11, 0x201, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'team0\x00'}]}, 0x34}, 0x1}, 0x0) 20:27:52 executing program 6: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) perf_event_open(&(0x7f0000002900)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2}}, 0x14) sendmmsg$inet_sctp(r0, &(0x7f0000871fc8)=[{&(0x7f000086c000)=@in6={0xa, 0x0, 0x2}, 0x1c, &(0x7f0000d1e000), 0x0, &(0x7f0000dda000)}], 0x492492492492510, 0x0) 20:27:52 executing program 7: r0 = socket$inet6(0xa, 0x3, 0x7) ioctl(r0, 0x4000008912, &(0x7f00000000c0)="295ed277a4200100360070") r1 = socket(0x1e, 0x1000000000001, 0x0) sendmsg(r1, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f000016cf61)}, 0x0) r2 = epoll_create1(0x0) poll(&(0x7f0000000080)=[{r1}, {r2}, {r2}], 0x3, 0x0) 20:27:52 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x5) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x82000060) open$dir(&(0x7f0000000100)='./file0\x00', 0x220101, 0x0) 20:27:52 executing program 3: r0 = getpgid(0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x1) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') syz_fuse_mount(&(0x7f0000000300)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 20:27:52 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000180)=ANY=[], 0x0) [ 95.744243] netlink: 'syz-executor2': attribute type 1 has an invalid length. 20:27:52 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x5) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x82000060) open$dir(&(0x7f0000000100)='./file0\x00', 0x220101, 0x0) [ 95.791094] netlink: 'syz-executor2': attribute type 1 has an invalid length. [ 95.814011] team0 (unregistering): Port device team_slave_0 removed 20:27:52 executing program 0: r0 = socket(0x40000000015, 0x5, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) ioctl(r1, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f760070") getsockopt(r0, 0x114, 0x2715, &(0x7f0000000080)=""/13, &(0x7f000033bffc)=0xd) 20:27:52 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798007439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a36dca30d55e4fda59435fe1fd4262d165a6ccb3f75372e1842ce015e10aad2f3479389f8ec7abe08a38776073709fb20b39b17e9fec21147cdd6390442436826385cb97f04dadc3393024b97b203b3e121d3c67c593ee9f0787a405a1d3ec1935bee8a24cb2123e4a0b98b88796b1311ea4c0dc94e61fcf4a1090f4c360818abd0dd134ae391fe99cf200991798d0cc90367c4ee08ae49075dd74dad19937e51e0812cefa80333d3ad38d5cf07a63513") setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000100)=ANY=[@ANYRES32], 0x1) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb138}, 0x10) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0c0583b, &(0x7f0000000080)) [ 95.854388] team0 (unregistering): Port device team_slave_1 removed 20:27:52 executing program 7: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='9', 0x1}], 0x1, 0x881806) sendfile(r0, r0, &(0x7f0000000080), 0x102000004) sync() 20:27:53 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x5) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x82000060) open$dir(&(0x7f0000000100)='./file0\x00', 0x220101, 0x0) 20:27:53 executing program 5: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000500)=ANY=[], &(0x7f00000000c0)) perf_event_open(&(0x7f0000002900)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2}}, 0x14) sendmmsg$inet_sctp(r0, &(0x7f0000871fc8)=[{&(0x7f000086c000)=@in6={0xa, 0x0, 0x2}, 0x1c, &(0x7f0000d1e000), 0x0, &(0x7f0000dda000)}], 0x492492492492510, 0x0) 20:27:53 executing program 0: r0 = socket(0x40000000015, 0x5, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) ioctl(r1, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f760070") getsockopt(r0, 0x114, 0x2715, &(0x7f0000000080)=""/13, &(0x7f000033bffc)=0xd) 20:27:53 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r2 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='9', 0x1}], 0x1, 0x881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r1, &(0x7f0000000080), 0x102000004) sync() 20:27:53 executing program 7: 20:27:53 executing program 0: r0 = socket(0x40000000015, 0x5, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) ioctl(r1, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f760070") getsockopt(r0, 0x114, 0x2715, &(0x7f0000000080)=""/13, &(0x7f000033bffc)=0xd) 20:27:53 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000500)='/dev/input/event#\x00', 0x0, 0x0) r1 = dup(r0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000000100)=""/234, 0xea) ioctl$TIOCSBRK(r1, 0x40044591) 20:27:53 executing program 3: r0 = getpgid(0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x1) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') syz_fuse_mount(&(0x7f0000000300)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 20:27:53 executing program 6: r0 = socket$inet6(0xa, 0x3, 0x9) ioctl(r0, 0x8912, &(0x7f00000000c0)="295ed277a4200100360070") r1 = socket(0x10, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f02acc7edbcd7a071fb35331ce39c5a") fcntl$setstatus(r2, 0x4, 0x4000) sendfile(r1, r2, &(0x7f00000000c0), 0x80000002) 20:27:53 executing program 5: 20:27:53 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x5) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) inotify_init() open$dir(&(0x7f0000000100)='./file0\x00', 0x220101, 0x0) 20:27:53 executing program 4: 20:27:53 executing program 4: 20:27:53 executing program 7: 20:27:53 executing program 5: 20:27:53 executing program 0: r0 = socket(0x40000000015, 0x5, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) ioctl(r1, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f760070") getsockopt(r0, 0x114, 0x2715, &(0x7f0000000080)=""/13, &(0x7f000033bffc)=0xd) 20:27:53 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x5) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) inotify_init() open$dir(&(0x7f0000000100)='./file0\x00', 0x220101, 0x0) 20:27:53 executing program 5: 20:27:53 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) mremap(&(0x7f0000c61000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000a0b000/0x2000)=nil) mremap(&(0x7f0000a94000/0x1000)=nil, 0x1000, 0xe000, 0x3, &(0x7f0000b18000/0xe000)=nil) clone(0x0, &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000140), &(0x7f00000001c0)) mlock2(&(0x7f0000b20000/0x2000)=nil, 0x2000, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x64, r1, 0x0, 0x70bd28, 0x25dfdbfb, {0x11}, [@IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bridge\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote={0xfe, 0x80, [], 0xbb}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x20}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x200440c0}, 0x10) 20:27:53 executing program 7: mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) recvfrom(r0, &(0x7f0000000000)=""/170, 0xaa, 0x40000100, &(0x7f00000000c0)=@pptp={0x18, 0x2, {0x1, @local={0xac, 0x14, 0x14, 0xaa}}}, 0x80) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000400), 0x0) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000140)={'veth1_to_bridge\x00', 0x8}) 20:27:54 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x5) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) inotify_init() open$dir(&(0x7f0000000100)='./file0\x00', 0x220101, 0x0) [ 97.187965] ================================================================== [ 97.195430] BUG: KMSAN: uninit-value in netlink_rcv_skb+0x3e9/0x600 [ 97.201847] CPU: 0 PID: 6678 Comm: syz-executor6 Not tainted 4.17.0+ #3 [ 97.208599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 97.217949] Call Trace: [ 97.220543] dump_stack+0x185/0x1d0 [ 97.224175] ? netlink_rcv_skb+0x3e9/0x600 [ 97.228415] kmsan_report+0x149/0x260 [ 97.232223] __msan_warning_32+0x6e/0xc0 [ 97.236284] netlink_rcv_skb+0x3e9/0x600 [ 97.240343] ? rtnetlink_bind+0x120/0x120 [ 97.244497] rtnetlink_rcv+0x50/0x60 [ 97.248215] netlink_unicast+0x1680/0x1750 [ 97.252461] ? rtnetlink_net_exit+0xa0/0xa0 [ 97.256791] netlink_sendmsg+0x104f/0x1350 [ 97.261041] ? netlink_getsockopt+0xc60/0xc60 [ 97.265542] kernel_sendmsg+0x22a/0x2d0 [ 97.269531] sock_no_sendpage+0x1c8/0x250 [ 97.273696] ? sock_no_mmap+0x30/0x30 [ 97.277560] sock_sendpage+0x1ef/0x2e0 [ 97.281460] pipe_to_sendpage+0x321/0x440 [ 97.285609] ? sock_fasync+0x2b0/0x2b0 [ 97.289507] ? generic_pipe_buf_get+0xf0/0xf0 [ 97.294011] __splice_from_pipe+0x4a5/0xf50 [ 97.298342] ? generic_splice_sendpage+0x2a0/0x2a0 [ 97.303291] generic_splice_sendpage+0x1c6/0x2a0 [ 97.308061] ? iter_file_splice_write+0x1710/0x1710 [ 97.313093] direct_splice_actor+0x19e/0x200 [ 97.317519] splice_direct_to_actor+0x767/0x1040 [ 97.322289] ? do_splice_direct+0x540/0x540 [ 97.326718] do_splice_direct+0x335/0x540 [ 97.330866] ? security_file_permission+0x240/0x480 [ 97.335870] do_sendfile+0x107b/0x1e40 [ 97.339749] __x64_sys_sendfile64+0x218/0x390 [ 97.344230] ? __ia32_sys_sendfile+0x160/0x160 [ 97.348802] do_syscall_64+0x15b/0x230 [ 97.352696] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 97.357876] RIP: 0033:0x4559f9 [ 97.361058] RSP: 002b:00007f25cb91cc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 97.368755] RAX: ffffffffffffffda RBX: 00007f25cb91d6d4 RCX: 00000000004559f9 [ 97.376013] RDX: 00000000200000c0 RSI: 0000000000000015 RDI: 0000000000000014 [ 97.383272] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 97.390534] R10: 0000000080000002 R11: 0000000000000246 R12: 00000000ffffffff [ 97.397785] R13: 00000000004c088c R14: 00000000004d0048 R15: 0000000000000000 [ 97.405049] [ 97.406667] Uninit was stored to memory at: [ 97.410986] kmsan_internal_chain_origin+0x12b/0x210 [ 97.416090] kmsan_memcpy_origins+0x11d/0x170 [ 97.420581] __msan_memcpy+0x109/0x160 [ 97.424461] _copy_from_iter_full+0xe06/0x1440 [ 97.429034] netlink_sendmsg+0xdf9/0x1350 [ 97.433174] kernel_sendmsg+0x22a/0x2d0 [ 97.437132] sock_no_sendpage+0x1c8/0x250 [ 97.441268] sock_sendpage+0x1ef/0x2e0 [ 97.445154] pipe_to_sendpage+0x321/0x440 [ 97.449283] __splice_from_pipe+0x4a5/0xf50 [ 97.453592] generic_splice_sendpage+0x1c6/0x2a0 [ 97.458335] direct_splice_actor+0x19e/0x200 [ 97.462723] splice_direct_to_actor+0x767/0x1040 [ 97.467459] do_splice_direct+0x335/0x540 [ 97.471592] do_sendfile+0x107b/0x1e40 [ 97.475467] __x64_sys_sendfile64+0x218/0x390 [ 97.479963] do_syscall_64+0x15b/0x230 [ 97.483847] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 97.489020] Uninit was created at: [ 97.492553] kmsan_alloc_meta_for_pages+0x161/0x3a0 [ 97.497549] kmsan_alloc_page+0x82/0xe0 [ 97.501512] __alloc_pages_nodemask+0xf7b/0x5cc0 [ 97.506275] alloc_pages_current+0x6b1/0x970 [ 97.510681] push_pipe+0x680/0xca0 [ 97.514644] iov_iter_get_pages+0x1357/0x1810 [ 97.519132] __blockdev_direct_IO+0x1a5f/0x65e0 [ 97.524393] ext4_direct_IO+0xed1/0x2850 [ 97.528448] generic_file_read_iter+0x3c6d/0x44d0 [ 97.533290] ext4_file_read_iter+0x30f/0x520 [ 97.537688] generic_file_splice_read+0x5d7/0x900 [ 97.542527] splice_direct_to_actor+0x4cb/0x1040 [ 97.547271] do_splice_direct+0x335/0x540 [ 97.551407] do_sendfile+0x107b/0x1e40 [ 97.555279] __x64_sys_sendfile64+0x218/0x390 [ 97.559850] do_syscall_64+0x15b/0x230 [ 97.563725] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 97.568888] ================================================================== [ 97.576841] Disabling lock debugging due to kernel taint [ 97.582270] Kernel panic - not syncing: panic_on_warn set ... [ 97.582270] [ 97.589618] CPU: 0 PID: 6678 Comm: syz-executor6 Tainted: G B 4.17.0+ #3 [ 97.597738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 97.607079] Call Trace: [ 97.609677] dump_stack+0x185/0x1d0 [ 97.613304] panic+0x3d0/0x990 [ 97.616502] ? netlink_rcv_skb+0x3e9/0x600 [ 97.620739] kmsan_report+0x260/0x260 [ 97.624520] __msan_warning_32+0x6e/0xc0 [ 97.628562] netlink_rcv_skb+0x3e9/0x600 [ 97.632618] ? rtnetlink_bind+0x120/0x120 [ 97.636748] rtnetlink_rcv+0x50/0x60 [ 97.640443] netlink_unicast+0x1680/0x1750 [ 97.644661] ? rtnetlink_net_exit+0xa0/0xa0 [ 97.648969] netlink_sendmsg+0x104f/0x1350 [ 97.653192] ? netlink_getsockopt+0xc60/0xc60 [ 97.657671] kernel_sendmsg+0x22a/0x2d0 [ 97.661628] sock_no_sendpage+0x1c8/0x250 [ 97.665768] ? sock_no_mmap+0x30/0x30 [ 97.669561] sock_sendpage+0x1ef/0x2e0 [ 97.673432] pipe_to_sendpage+0x321/0x440 [ 97.677559] ? sock_fasync+0x2b0/0x2b0 [ 97.681435] ? generic_pipe_buf_get+0xf0/0xf0 [ 97.685913] __splice_from_pipe+0x4a5/0xf50 [ 97.690220] ? generic_splice_sendpage+0x2a0/0x2a0 [ 97.695149] generic_splice_sendpage+0x1c6/0x2a0 [ 97.699895] ? iter_file_splice_write+0x1710/0x1710 [ 97.704909] direct_splice_actor+0x19e/0x200 [ 97.709320] splice_direct_to_actor+0x767/0x1040 [ 97.714070] ? do_splice_direct+0x540/0x540 [ 97.718397] do_splice_direct+0x335/0x540 [ 97.722562] ? security_file_permission+0x240/0x480 [ 97.727579] do_sendfile+0x107b/0x1e40 [ 97.731453] __x64_sys_sendfile64+0x218/0x390 [ 97.735932] ? __ia32_sys_sendfile+0x160/0x160 [ 97.740493] do_syscall_64+0x15b/0x230 [ 97.744370] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 97.749542] RIP: 0033:0x4559f9 [ 97.752734] RSP: 002b:00007f25cb91cc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 97.760430] RAX: ffffffffffffffda RBX: 00007f25cb91d6d4 RCX: 00000000004559f9 [ 97.767683] RDX: 00000000200000c0 RSI: 0000000000000015 RDI: 0000000000000014 [ 97.774938] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 97.782201] R10: 0000000080000002 R11: 0000000000000246 R12: 00000000ffffffff [ 97.791286] R13: 00000000004c088c R14: 00000000004d0048 R15: 0000000000000000 [ 97.798999] Dumping ftrace buffer: [ 97.802536] (ftrace buffer empty) [ 97.806222] Kernel Offset: disabled [ 97.809824] Rebooting in 86400 seconds..