[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 33.861263] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 38.447919] random: sshd: uninitialized urandom read (32 bytes read) [ 39.113264] random: sshd: uninitialized urandom read (32 bytes read) [ 40.727891] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.56' (ECDSA) to the list of known hosts. [ 46.281235] random: sshd: uninitialized urandom read (32 bytes read) 2018/07/17 17:48:52 fuzzer started [ 47.750928] random: cc1: uninitialized urandom read (8 bytes read) 2018/07/17 17:48:54 dialing manager at 10.128.0.26:45973 2018/07/17 17:48:56 syscalls: 1605 2018/07/17 17:48:56 code coverage: enabled 2018/07/17 17:48:56 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/07/17 17:48:56 setuid sandbox: enabled 2018/07/17 17:48:56 namespace sandbox: enabled 2018/07/17 17:48:56 fault injection: enabled 2018/07/17 17:48:56 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/07/17 17:48:56 net packed injection: enabled 2018/07/17 17:48:56 net device setup: enabled [ 52.362903] random: crng init done 17:50:22 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000080)=0x80000001, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}}, 0x1c) listen(r1, 0x0) 17:50:22 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x2}, 0x1c) 17:50:22 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2=0xe0000002, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) close(r0) 17:50:22 executing program 1: r0 = socket(0x10, 0x802, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000002c0)={'team0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={"7465616d300000ffffffc000", 0x4bfd}) 17:50:22 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003bc0), 0x0, 0x0) recvmmsg(r0, &(0x7f0000002f40), 0x0, 0x0, &(0x7f0000003000)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c00)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_newneigh={0x28, 0x1c, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, r2}, [@NDA_DST_MAC={0xc, 0x1, @link_local={0x1, 0x80, 0xc2}}]}, 0x28}, 0x1}, 0x0) memfd_create(&(0x7f000000e000)='\x00 ', 0x0) syz_open_dev$sndseq(&(0x7f0000000380)='/dev/snd/seq\x00', 0x0, 0x101801) 17:50:22 executing program 4: r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd, 0x0, 0x800, 0x0, 0x0, 0x400000000000000, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xfffffffffffffffc, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0xfffffffffffffffd, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) flistxattr(r0, &(0x7f0000000800)=""/4096, 0x1000) get_robust_list(0x0, &(0x7f0000000780)=&(0x7f0000000580)={&(0x7f0000000180)={&(0x7f0000000140)}, 0x0, &(0x7f0000000700)={&(0x7f0000000280)}}, &(0x7f00000007c0)=0x18) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) r2 = syz_open_procfs(r1, &(0x7f00000000c0)='net/raw6\x00') setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x111, 0x2, 0x0, 0x4) preadv(r2, &(0x7f0000000700)=[{&(0x7f0000000600)=""/246, 0xf6}], 0x1, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000040)) 17:50:22 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0x40085112, &(0x7f0000b18000)={{0xffffff94}}) 17:50:22 executing program 5: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, r0, 0x0) time(&(0x7f00000000c0)) unshare(0x60000000) pipe2(&(0x7f0000000080), 0x800) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000040)=0x9, 0x4) sched_rr_get_interval(0x0, &(0x7f0000000200)) preadv(r1, &(0x7f00000001c0)=[{&(0x7f00000003c0)=""/117, 0x75}], 0x1, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="ac140800000000000000a800050000ed000080000000f68b8d5f1414800000000000000000000000000000000000e190db7e0c8c73ccc50d5d0bb5d980cf665db306561e7be3358f851821d65cb710c5a22e4144103b49d48ceaa926b46dc8e1a37bcc52682e511df8"], 0x1) writev(0xffffffffffffffff, &(0x7f00000000c0), 0x0) semget$private(0x0, 0x3, 0x0) [ 137.909769] IPVS: ftp: loaded support on port[0] = 21 [ 137.958801] IPVS: ftp: loaded support on port[0] = 21 [ 137.997273] IPVS: ftp: loaded support on port[0] = 21 [ 138.000827] IPVS: ftp: loaded support on port[0] = 21 [ 138.006487] IPVS: ftp: loaded support on port[0] = 21 [ 138.038713] IPVS: ftp: loaded support on port[0] = 21 [ 138.059591] IPVS: ftp: loaded support on port[0] = 21 [ 138.060333] IPVS: ftp: loaded support on port[0] = 21 [ 140.142433] ip (4751) used greatest stack depth: 53584 bytes left [ 141.702639] ip (4851) used greatest stack depth: 53232 bytes left [ 142.306543] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.313135] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.353268] device bridge_slave_0 entered promiscuous mode [ 142.397828] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.404306] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.438253] device bridge_slave_0 entered promiscuous mode [ 142.468453] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.474928] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.502253] device bridge_slave_0 entered promiscuous mode [ 142.522863] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.529430] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.559241] device bridge_slave_0 entered promiscuous mode [ 142.588344] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.594908] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.618252] device bridge_slave_0 entered promiscuous mode [ 142.634846] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.641357] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.662935] device bridge_slave_0 entered promiscuous mode [ 142.671639] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.678179] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.689927] device bridge_slave_0 entered promiscuous mode [ 142.706232] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.712812] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.745365] device bridge_slave_1 entered promiscuous mode [ 142.761746] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.768256] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.789914] device bridge_slave_0 entered promiscuous mode [ 142.802587] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.809105] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.847329] device bridge_slave_1 entered promiscuous mode [ 142.865141] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.871613] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.887009] device bridge_slave_1 entered promiscuous mode [ 142.903775] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.910277] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.927358] device bridge_slave_1 entered promiscuous mode [ 142.945860] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.952379] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.964379] device bridge_slave_1 entered promiscuous mode [ 142.971349] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.977830] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.005952] device bridge_slave_1 entered promiscuous mode [ 143.023806] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.030431] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.053620] device bridge_slave_1 entered promiscuous mode [ 143.069495] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.075959] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.087329] device bridge_slave_1 entered promiscuous mode [ 143.117718] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 143.129872] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 143.142841] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 143.164652] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 143.196429] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 143.214262] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 143.272460] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 143.348229] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 143.380313] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 143.391175] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 143.414237] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 143.460252] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 143.491743] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 143.519433] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 143.548408] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 143.647642] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 144.115926] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 144.203667] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 144.245146] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 144.266197] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 144.280577] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 144.357408] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 144.387095] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 144.411660] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 144.448971] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 144.501605] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 144.525344] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 144.563247] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 144.583863] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 144.620896] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 144.653667] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 144.661262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 144.686999] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 144.752007] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 144.813453] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 144.821557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 144.836562] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 144.845899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 144.887501] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 144.901624] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 144.909669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 144.928121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 144.954847] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 144.962539] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 144.969555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 144.986194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 145.031567] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 145.039769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 145.091403] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 145.098484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 145.132969] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 145.141571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 145.163274] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 145.170467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 145.208557] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 145.215642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 145.254593] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 145.261666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 145.294552] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 145.302010] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 145.348218] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 145.355376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 145.371568] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 145.378688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 145.785850] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 145.822492] team0: Port device team_slave_0 added [ 145.911371] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 145.942411] team0: Port device team_slave_0 added [ 146.015846] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 146.040753] team0: Port device team_slave_0 added [ 146.073673] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 146.095550] team0: Port device team_slave_0 added [ 146.120519] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 146.139719] team0: Port device team_slave_0 added [ 146.155735] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 146.166012] team0: Port device team_slave_0 added [ 146.190665] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 146.207287] team0: Port device team_slave_1 added [ 146.213718] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 146.224945] team0: Port device team_slave_0 added [ 146.247100] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 146.271615] team0: Port device team_slave_1 added [ 146.295405] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 146.320943] team0: Port device team_slave_1 added [ 146.345740] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 146.377533] team0: Port device team_slave_0 added [ 146.402743] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 146.421599] team0: Port device team_slave_1 added [ 146.438614] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 146.449834] team0: Port device team_slave_1 added [ 146.457734] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 146.478403] team0: Port device team_slave_1 added [ 146.491289] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 146.500158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 146.523704] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 146.552167] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 146.569563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 146.598838] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 146.614534] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 146.621596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 146.636232] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 146.659706] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 146.669654] team0: Port device team_slave_1 added [ 146.695742] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 146.708659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 146.721263] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 146.743532] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 146.758180] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 146.769695] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 146.791352] team0: Port device team_slave_1 added [ 146.805209] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 146.812740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 146.834600] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 146.879319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 146.903303] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 146.937892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 146.951254] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 146.965775] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 146.978902] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 146.993873] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 147.005595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 147.027217] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 147.046746] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 147.070567] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 147.085824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 147.100835] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 147.116726] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 147.128961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 147.138735] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 147.148086] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 147.155538] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 147.164536] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 147.189702] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 147.199523] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 147.208498] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 147.217664] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 147.228231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 147.256416] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 147.291764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 147.323320] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 147.358779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 147.372915] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 147.384548] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 147.393134] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 147.409400] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 147.416720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 147.427866] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 147.449684] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 147.460618] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 147.471660] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 147.486520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 147.512472] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 147.529306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 147.557496] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 147.569253] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 147.586291] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 147.598864] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 147.606534] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 147.615464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 147.637975] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 147.654890] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 147.671862] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 147.692250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 147.709968] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 147.725747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 147.743884] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 147.753564] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 147.762247] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 147.775877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 147.784537] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 147.793846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 147.819983] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 147.834494] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 147.856324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 147.888942] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 147.902873] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 147.911238] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 147.937840] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 147.976802] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 148.007617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 148.028413] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 148.035768] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 148.061804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 148.086625] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 148.105956] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 148.114238] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 148.133427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 148.146610] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 148.160408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 148.176159] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 148.205245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 148.237576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 150.160078] ip (5309) used greatest stack depth: 53216 bytes left [ 150.719353] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.725866] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.732758] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.739251] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.793400] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 150.800119] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 150.838568] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.845098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.851933] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.858407] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.867935] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 150.877316] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.883776] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.890586] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.897126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.938103] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 150.946281] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.952749] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.959563] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.966076] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.033663] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 151.068494] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.074977] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.081818] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.088279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.109572] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 151.124002] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.130502] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.137963] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.144424] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.201822] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 151.372465] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.378976] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.385843] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.392346] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.459431] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 151.484612] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.491122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.498015] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.504511] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.576949] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 151.840576] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 151.855688] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 151.864783] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 151.872983] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 151.881133] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 151.890382] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 151.898425] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 161.797866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.968261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.017133] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.111413] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.145719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.176356] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.523885] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.805445] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.834844] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 163.031857] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 163.084881] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 163.099252] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 163.138160] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 163.248067] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 163.540056] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 163.792472] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 163.798846] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 163.811201] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 163.879630] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 164.097621] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 164.107687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 164.116169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 164.143311] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 164.154455] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 164.160935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 164.186490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 164.217370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 164.242205] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 164.284169] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 164.290532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 164.313442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 164.416534] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 164.422882] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 164.434127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 164.722134] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 164.733217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 164.748940] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 164.876215] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.061526] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.101689] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.136264] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 165.142816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 165.171845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 165.243059] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.505340] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.529012] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.830896] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.232914] 8021q: adding VLAN 0 to HW filter on device team0 17:50:57 executing program 2: r0 = socket$inet6(0xa, 0x1000000000003, 0x2) ioctl(r0, 0x8912, &(0x7f00000001c0)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x803, 0x3) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000e5bef8)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}}, 0x108) syz_emit_ethernet(0x66, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2}, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0x30, 0x3a, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@pkt_toobig={0xffffff80, 0xfffffff5, 0x0, 0x0, {0x0, 0x6, "0a07ec", 0x0, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0xff, 0xff], @dev={0xac, 0x14}}}}}}}}}, &(0x7f00000016c0)) 17:50:57 executing program 7: syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) 17:50:57 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 17:50:57 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:50:57 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) read$FUSE(r2, &(0x7f0000000280), 0x1000) 17:50:57 executing program 2: mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x6, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00006ee000)='/dev/rfkill\x00', 0x0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e53fe8)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) getresgid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) readv(r0, &(0x7f00001f2ff0)=[{&(0x7f0000001fb2)=""/1, 0x1}], 0x1) ppoll(&(0x7f0000db7fd0)=[{r0}], 0x1, &(0x7f0000542000), &(0x7f0000181000), 0x8) read(r0, &(0x7f0000000000)=""/197, 0xc5) ioctl$UFFDIO_UNREGISTER(r1, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) 17:50:57 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003bc0), 0x0, 0x0) recvmmsg(r0, &(0x7f0000002f40), 0x0, 0x0, &(0x7f0000003000)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c00)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_newneigh={0x28, 0x1c, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, r2}, [@NDA_DST_MAC={0xc, 0x1, @link_local={0x1, 0x80, 0xc2}}]}, 0x28}, 0x1}, 0x0) memfd_create(&(0x7f000000e000)='\x00 ', 0x0) syz_open_dev$sndseq(&(0x7f0000000380)='/dev/snd/seq\x00', 0x0, 0x101801) 17:50:57 executing program 4: syz_emit_ethernet(0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="0180c2001500aaaaaa28aabb86dd60093a0600083a00fe80000000000000000000004e1eb4000000bbff02000000a785000000000000000008ef01000093000000089078"], &(0x7f0000000100)) 17:50:58 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) clone(0x0, &(0x7f0000001480), &(0x7f0000001300), &(0x7f0000000100), &(0x7f00000013c0)) mount(&(0x7f0000001440)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f00000012c0)='proc\x00', 0x0, &(0x7f0000000100)) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000002c0)=""/4096, 0x1000) wait4(0x0, &(0x7f0000000180), 0xa0000000, &(0x7f00000001c0)) 17:50:58 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) fsetxattr(r0, &(0x7f0000000100)=@known='security.capability\x00', &(0x7f00000000c0)="000000037970652700000004000000070000204500000000", 0x18, 0x3) 17:50:58 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0xffffffffffffffff, 0x6, 0x0, @buffer={0x0, 0x40, &(0x7f0000000000)=""/64}, &(0x7f0000000080)="9d6a966adae3", &(0x7f00000000c0)=""/93, 0x0, 0x0, 0x0, &(0x7f0000000140)}) [ 172.267444] IPVS: ftp: loaded support on port[0] = 21 [ 172.651855] device team0 entered promiscuous mode [ 172.656986] device team_slave_0 entered promiscuous mode [ 172.662796] device team_slave_1 entered promiscuous mode [ 172.687170] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.707609] device team0 left promiscuous mode [ 172.712400] device team_slave_0 left promiscuous mode [ 172.717956] device team_slave_1 left promiscuous mode [ 172.733383] device team0 entered promiscuous mode [ 172.738457] device team_slave_0 entered promiscuous mode [ 172.744263] device team_slave_1 entered promiscuous mode [ 172.753150] 8021q: adding VLAN 0 to HW filter on device team0 17:50:58 executing program 1: r0 = socket(0x10, 0x802, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000002c0)={'team0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={"7465616d300000ffffffc000", 0x4bfd}) 17:50:58 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xa}, 'lo\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000005b40)=[{{&(0x7f0000001b40)=@in={0x2, 0x0, @multicast1=0xe0000001}, 0x80, &(0x7f0000001cc0), 0x0, &(0x7f0000002340)}}, {{&(0x7f0000002740)=@in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}}, 0x80, &(0x7f0000005b00)}}], 0x2, 0x0) 17:50:58 executing program 7: r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000001540)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000140)="c10800000000ffffff881fe4ac141411", 0x10}], 0x1}, 0x0) 17:50:58 executing program 3: perf_event_open(&(0x7f00000000c0)={0x800000000002, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_create1(0x0) 17:50:58 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) write$binfmt_elf32(r1, &(0x7f0000000b40)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20}, [{}], "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", [[], [], [], [], [], [], [], [], []]}, 0xe55) 17:50:58 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="18000000030000e200000000000000819500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) syz_genetlink_get_family_id$ipvs(&(0x7f0000000540)='IPVS\x00') r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f000031aff8)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000280)={0xffffffffffffffff}) sendto$inet(r0, &(0x7f0000000500)="cb", 0x1, 0x0, &(0x7f0000000040)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x14, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x14}, 0x1}, 0x0) 17:50:58 executing program 6: r0 = socket$inet6(0xa, 0x1000000000001, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x11}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_getres(0x0, &(0x7f0000000040)) [ 172.961220] ================================================================== [ 172.968657] BUG: KMSAN: uninit-value in ip_tunnel_xmit+0x63a/0x3b10 [ 172.975075] CPU: 1 PID: 6733 Comm: syz-executor7 Not tainted 4.18.0-rc4+ #27 [ 172.982273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 172.991633] Call Trace: [ 172.994239] dump_stack+0x185/0x1e0 [ 172.997912] kmsan_report+0x195/0x2c0 [ 173.001728] __msan_warning+0x7d/0xe0 [ 173.005548] ip_tunnel_xmit+0x63a/0x3b10 [ 173.009620] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 173.015016] ? gre_build_header+0x5ab/0xaa0 [ 173.019370] ipgre_xmit+0xe16/0xef0 [ 173.023024] ? ipgre_close+0x230/0x230 [ 173.026924] dev_hard_start_xmit+0x60f/0xcc0 [ 173.031373] __dev_queue_xmit+0x3060/0x3c70 [ 173.035731] dev_queue_xmit+0x4b/0x60 [ 173.039544] ? __netdev_pick_tx+0xb60/0xb60 [ 173.043890] packet_sendmsg+0x8469/0x9010 [ 173.048046] ? kmsan_internal_unpoison_shadow+0x83/0xe0 [ 173.053516] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 173.058984] ? rw_copy_check_uvector+0x630/0x710 [ 173.063788] ? copy_msghdr_from_user+0x75e/0x8c0 [ 173.068571] ? compat_packet_setsockopt+0x360/0x360 [ 173.073596] ___sys_sendmsg+0xed9/0x1350 [ 173.077687] ? __msan_poison_alloca+0x183/0x220 [ 173.082365] ? __fdget+0x4e/0x60 [ 173.085750] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 173.091780] ? __fget_light+0x6e6/0x760 [ 173.095779] __x64_sys_sendmsg+0x3b0/0x520 [ 173.100037] ? ___sys_sendmsg+0x1350/0x1350 [ 173.104365] do_syscall_64+0x15b/0x230 [ 173.108274] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 173.113468] RIP: 0033:0x455ab9 [ 173.116649] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 173.136004] RSP: 002b:00007fb96d2a0c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 173.143731] RAX: ffffffffffffffda RBX: 00007fb96d2a16d4 RCX: 0000000000455ab9 [ 173.151020] RDX: 0000000000000000 RSI: 0000000020001540 RDI: 0000000000000013 [ 173.158298] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 173.165624] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 173.172928] R13: 00000000004c1066 R14: 00000000004d16c8 R15: 0000000000000000 [ 173.180212] [ 173.181866] Uninit was created at: [ 173.185414] kmsan_internal_poison_shadow+0xc8/0x1d0 [ 173.191042] kmsan_kmalloc+0xa1/0x120 [ 173.194850] kmsan_slab_alloc+0x10/0x20 [ 173.198833] __kmalloc_node_track_caller+0xb48/0x11d0 [ 173.204030] __alloc_skb+0x2cb/0x9e0 [ 173.207748] alloc_skb_with_frags+0x1e6/0xb80 [ 173.212247] sock_alloc_send_pskb+0xb59/0x11e0 [ 173.216839] packet_sendmsg+0x68cb/0x9010 [ 173.220989] ___sys_sendmsg+0xed9/0x1350 [ 173.225053] __x64_sys_sendmsg+0x3b0/0x520 [ 173.229293] do_syscall_64+0x15b/0x230 [ 173.233186] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 173.238369] ================================================================== [ 173.245728] Disabling lock debugging due to kernel taint [ 173.251180] Kernel panic - not syncing: panic_on_warn set ... [ 173.251180] [ 173.258826] CPU: 1 PID: 6733 Comm: syz-executor7 Tainted: G B 4.18.0-rc4+ #27 [ 173.267409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 173.276771] Call Trace: [ 173.279380] dump_stack+0x185/0x1e0 [ 173.283026] panic+0x3d0/0x9b0 [ 173.286247] kmsan_report+0x2bf/0x2c0 [ 173.290066] __msan_warning+0x7d/0xe0 [ 173.293883] ip_tunnel_xmit+0x63a/0x3b10 [ 173.297954] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 173.303337] ? gre_build_header+0x5ab/0xaa0 [ 173.307678] ipgre_xmit+0xe16/0xef0 [ 173.311322] ? ipgre_close+0x230/0x230 [ 173.315222] dev_hard_start_xmit+0x60f/0xcc0 [ 173.319658] __dev_queue_xmit+0x3060/0x3c70 [ 173.324011] dev_queue_xmit+0x4b/0x60 [ 173.327823] ? __netdev_pick_tx+0xb60/0xb60 [ 173.332157] packet_sendmsg+0x8469/0x9010 [ 173.336312] ? kmsan_internal_unpoison_shadow+0x83/0xe0 [ 173.341712] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 173.347176] ? rw_copy_check_uvector+0x630/0x710 [ 173.351972] ? copy_msghdr_from_user+0x75e/0x8c0 [ 173.356754] ? compat_packet_setsockopt+0x360/0x360 [ 173.361785] ___sys_sendmsg+0xed9/0x1350 [ 173.365864] ? __msan_poison_alloca+0x183/0x220 [ 173.370538] ? __fdget+0x4e/0x60 [ 173.373921] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 173.379293] ? __fget_light+0x6e6/0x760 [ 173.383296] __x64_sys_sendmsg+0x3b0/0x520 [ 173.387554] ? ___sys_sendmsg+0x1350/0x1350 [ 173.391881] do_syscall_64+0x15b/0x230 [ 173.395788] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 173.400980] RIP: 0033:0x455ab9 [ 173.404167] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 173.423522] RSP: 002b:00007fb96d2a0c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 173.431245] RAX: ffffffffffffffda RBX: 00007fb96d2a16d4 RCX: 0000000000455ab9 [ 173.438528] RDX: 0000000000000000 RSI: 0000000020001540 RDI: 0000000000000013 [ 173.445807] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 173.453085] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 173.460364] R13: 00000000004c1066 R14: 00000000004d16c8 R15: 0000000000000000 [ 173.468293] Dumping ftrace buffer: [ 173.471851] (ftrace buffer empty) [ 173.475549] Kernel Offset: disabled [ 173.479159] Rebooting in 86400 seconds..