[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 37.342488] random: sshd: uninitialized urandom read (32 bytes read) [ 37.440920] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. [ 37.912305] random: sshd: uninitialized urandom read (32 bytes read) Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 39.253062] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.37' (ECDSA) to the list of known hosts. [ 45.029967] random: sshd: uninitialized urandom read (32 bytes read) 2018/09/03 16:20:08 fuzzer started [ 46.210193] random: cc1: uninitialized urandom read (8 bytes read) 2018/09/03 16:20:10 dialing manager at 10.128.0.26:45707 2018/09/03 16:20:12 syscalls: 1 2018/09/03 16:20:12 code coverage: enabled 2018/09/03 16:20:12 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/09/03 16:20:12 setuid sandbox: enabled 2018/09/03 16:20:12 namespace sandbox: enabled 2018/09/03 16:20:12 fault injection: enabled 2018/09/03 16:20:12 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/09/03 16:20:12 net packed injection: enabled 2018/09/03 16:20:12 net device setup: enabled [ 51.494729] random: crng init done 16:22:08 executing program 0: 16:22:08 executing program 1: 16:22:08 executing program 2: 16:22:08 executing program 7: 16:22:08 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfffffffffffff4ff}) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)) 16:22:08 executing program 3: socket(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={"73797a5f74756e001000", &(0x7f0000000080)=@ethtool_coalesce={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}) 16:22:08 executing program 5: mknod(&(0x7f0000000700)='./file0\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000480)=0xc) pipe2(&(0x7f0000000240), 0x0) 16:22:08 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0xfffffe0e) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) [ 167.023801] IPVS: ftp: loaded support on port[0] = 21 [ 167.023929] IPVS: ftp: loaded support on port[0] = 21 [ 167.036014] IPVS: ftp: loaded support on port[0] = 21 [ 167.044141] IPVS: ftp: loaded support on port[0] = 21 [ 167.056860] IPVS: ftp: loaded support on port[0] = 21 [ 167.088942] IPVS: ftp: loaded support on port[0] = 21 [ 167.099499] IPVS: ftp: loaded support on port[0] = 21 [ 167.110862] IPVS: ftp: loaded support on port[0] = 21 [ 169.620516] ip (4846) used greatest stack depth: 53752 bytes left [ 170.230784] ip (4880) used greatest stack depth: 53720 bytes left [ 171.473931] ip (4948) used greatest stack depth: 53496 bytes left [ 172.126858] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.133385] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.173276] device bridge_slave_0 entered promiscuous mode [ 172.235526] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.242048] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.277338] device bridge_slave_0 entered promiscuous mode [ 172.294795] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.301253] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.331082] device bridge_slave_0 entered promiscuous mode [ 172.379818] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.386309] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.428094] device bridge_slave_0 entered promiscuous mode [ 172.450340] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.456837] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.477047] device bridge_slave_0 entered promiscuous mode [ 172.496076] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.502644] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.535811] device bridge_slave_0 entered promiscuous mode [ 172.568635] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.575178] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.589070] device bridge_slave_1 entered promiscuous mode [ 172.600415] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.606885] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.619411] device bridge_slave_1 entered promiscuous mode [ 172.628161] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.634634] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.666971] device bridge_slave_0 entered promiscuous mode [ 172.682843] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.689302] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.727104] device bridge_slave_0 entered promiscuous mode [ 172.745551] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.752062] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.781033] device bridge_slave_1 entered promiscuous mode [ 172.809813] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.816275] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.857494] device bridge_slave_1 entered promiscuous mode [ 172.873804] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.880288] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.899229] device bridge_slave_1 entered promiscuous mode [ 172.912659] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.919126] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.949984] device bridge_slave_1 entered promiscuous mode [ 172.971642] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 172.982745] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.989207] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.000847] device bridge_slave_1 entered promiscuous mode [ 173.008220] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 173.021956] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 173.030213] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.036698] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.088160] device bridge_slave_1 entered promiscuous mode [ 173.114210] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 173.149120] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 173.219811] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 173.279146] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 173.303506] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 173.313038] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 173.356775] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 173.410770] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 173.443418] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 173.454933] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 173.517132] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 173.613616] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 173.723387] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 174.188849] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 174.232536] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 174.332248] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 174.400386] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 174.434555] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 174.473886] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 174.520007] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 174.579737] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 174.590839] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 174.657774] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 174.668667] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 174.733229] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 174.779895] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 174.834147] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 174.849251] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 174.856296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 174.902700] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 174.909747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 174.937104] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 174.983797] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 175.036540] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 175.043699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 175.060789] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 175.067825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 175.107655] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 175.114938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 175.178055] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 175.185237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 175.209395] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 175.219734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 175.242821] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 175.257296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 175.301993] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 175.308957] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 175.339997] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 175.352517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 175.379272] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 175.386628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 175.437954] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 175.444952] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 175.479813] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 175.486811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 175.512373] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 175.519319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 175.648770] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 175.655833] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 175.708253] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 175.715254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 176.133347] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 176.173916] team0: Port device team_slave_0 added [ 176.288288] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 176.312789] team0: Port device team_slave_0 added [ 176.339731] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 176.364741] team0: Port device team_slave_0 added [ 176.448449] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 176.492750] team0: Port device team_slave_1 added [ 176.510637] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 176.529736] team0: Port device team_slave_0 added [ 176.548900] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 176.574770] team0: Port device team_slave_0 added [ 176.603742] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 176.636101] team0: Port device team_slave_1 added [ 176.657813] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 176.669226] team0: Port device team_slave_0 added [ 176.700316] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 176.716734] team0: Port device team_slave_0 added [ 176.752349] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 176.768863] team0: Port device team_slave_0 added [ 176.786467] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 176.816180] team0: Port device team_slave_1 added [ 176.836342] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 176.853989] team0: Port device team_slave_1 added [ 176.875813] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 176.882785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 176.917749] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 176.942010] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 176.961943] team0: Port device team_slave_1 added [ 176.987916] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 177.001313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 177.013813] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 177.037478] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 177.051047] team0: Port device team_slave_1 added [ 177.075807] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 177.115214] team0: Port device team_slave_1 added [ 177.143612] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 177.156898] team0: Port device team_slave_1 added [ 177.179239] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 177.186229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 177.205127] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 177.250973] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 177.257950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 177.277090] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 177.307397] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 177.315147] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 177.326148] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 177.333190] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 177.346085] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 177.392673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 177.423967] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 177.439468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 177.459474] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 177.490447] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 177.497440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 177.510428] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 177.538810] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 177.549388] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 177.557355] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 177.565885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 177.601013] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 177.612013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 177.630973] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 177.647933] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 177.668754] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 177.695862] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 177.709356] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 177.720369] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 177.732989] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 177.768537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 177.779856] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 177.794088] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 177.801183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 177.814247] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 177.829869] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 177.839024] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 177.870868] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 177.897384] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 177.920279] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 177.934355] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 177.945960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 177.984137] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 177.994083] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 178.005042] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 178.013006] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 178.029851] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 178.040295] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 178.053716] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 178.064647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 178.122279] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 178.157816] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 178.194352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 178.220470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 178.247892] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 178.267777] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 178.277420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 178.293439] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 178.306655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 178.354607] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 178.363889] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 178.373034] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 178.394881] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 178.420397] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 178.441203] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 178.463819] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 178.471682] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 178.491414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 178.520992] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 178.529749] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 178.549135] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 178.561642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 178.588802] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 178.605063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 178.624771] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 178.633177] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 178.658073] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 178.680095] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 178.717137] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 178.734548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 178.756378] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 178.767882] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 178.786789] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 178.809974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 178.840474] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 178.872007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 178.923644] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 178.931275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 178.945280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 181.684474] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.690992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.697924] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.704368] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.720097] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 181.736832] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 182.066615] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.073126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.080035] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.086506] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.114863] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 182.149853] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.156324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.163179] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.169649] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.254458] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 182.263646] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.270152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.277039] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.283526] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.337052] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 182.379150] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.385664] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.392613] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.399083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.407879] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 182.415200] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.421673] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.428850] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.435309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.448045] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 182.458352] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.464819] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.471880] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.478339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.556782] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 182.564119] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.570649] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.577601] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.584218] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.640203] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 182.740852] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 182.752798] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 182.781829] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 182.812327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 182.838465] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 182.870421] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 182.906831] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 188.049141] ip (5770) used greatest stack depth: 53464 bytes left [ 194.692774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.157457] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.230682] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.348484] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.388513] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.441897] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.485996] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.943111] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 195.981320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.343203] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 196.482446] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 196.490677] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 196.596504] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 196.656532] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 196.670452] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 197.186510] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 197.192887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 197.201549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 197.253651] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 197.606657] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 197.617999] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 197.644977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 197.708988] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 197.719022] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 197.739677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 197.794807] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 197.801105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 197.814370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 197.893096] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 197.899392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 197.910728] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 197.949185] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 197.958723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 197.971081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 198.031799] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 198.038429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 198.058056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 198.502935] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.569991] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 198.576350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 198.588751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 198.950617] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.983077] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.043311] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.076084] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.335795] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.386524] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.729798] 8021q: adding VLAN 0 to HW filter on device team0 16:22:49 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x100082) pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000880)="17", 0x1}], 0x1, 0x0) 16:22:49 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bond0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @dev}, 0x10) 16:22:49 executing program 5: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) clone(0x210007fa, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) execve(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000280)) chmod(&(0x7f0000000000)='./file0\x00', 0x0) 16:22:49 executing program 5: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) clone(0x210007fa, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) execve(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000280)) chmod(&(0x7f0000000000)='./file0\x00', 0x0) 16:22:49 executing program 4: r0 = socket$inet6(0xa, 0x100000002, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x9, &(0x7f0000000100)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0a5c2d0252756285717070") sendto$inet6(r0, &(0x7f0000000300), 0xfd90, 0x400806e, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, 0x1c) [ 206.861756] device bond_slave_0 entered promiscuous mode [ 206.867451] device bond_slave_1 entered promiscuous mode 16:22:49 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x102) write$binfmt_elf32(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="7f454c468f0528e0070000000000000003000600b40f000018000000380000009001000007000000ff002000020000000900030000000000030000000200000001000000e20000000100000003000000180000000100008002000000050000000600000000000000000100000104000001000080ba030000"], 0x78) 16:22:49 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6c50400aeb995298992ea5400c2", 0x10) socket$inet6(0xa, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f0000000400)={&(0x7f00000002c0)=@delqdisc={0x24}, 0x24}}, 0x8000) accept$alg(r1, 0x0, 0x0) 16:22:49 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="07005a5c4f0f0256103ddad6ea2ab32e0000001a01290fc6228476"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) r0 = socket$kcm(0x2, 0x6, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)=@nfc={0x27, 0x0, 0x2}, 0x80, &(0x7f0000000180)}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x890b, &(0x7f0000000000)) [ 206.954283] device bond_slave_0 left promiscuous mode [ 206.959654] device bond_slave_1 left promiscuous mode [ 207.038332] device bond_slave_0 entered promiscuous mode [ 207.043971] device bond_slave_1 entered promiscuous mode [ 207.074327] device bond_slave_0 left promiscuous mode [ 207.079656] device bond_slave_1 left promiscuous mode 16:22:50 executing program 5: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) clone(0x210007fa, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) execve(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000280)) chmod(&(0x7f0000000000)='./file0\x00', 0x0) 16:22:50 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x20, 0x0, 0x0, 0xfffffffffffff4ff}) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)) 16:22:50 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x80000, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) fcntl$getflags(r0, 0x40a) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000000300)={0x0, 0xfffffffffffffffc, 0x5}) fcntl$setown(r0, 0x8, r1) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xb, &(0x7f0000000040), &(0x7f0000000200)=0x4) 16:22:50 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/protocols\x00') readv(r0, &(0x7f0000001340)=[{&(0x7f0000000000)=""/221, 0xdd}, {&(0x7f0000000140)=""/136, 0x88}], 0x2) 16:22:50 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x5, 0x0, 0x0, 0x0, 0x0, 0x80, 0x81}, &(0x7f0000000100)={0xff, 0x0, 0x0, 0x8}, &(0x7f0000000140)={0x8}, &(0x7f0000000200)={0x0, r2+30000000}, &(0x7f0000000300)={&(0x7f00000002c0)={0x9}, 0x8}) sendto$unix(r1, &(0x7f0000000340)="ceca8b7f1f14409e11ed267526e3d0b4567494dc2f7c5ca442929c6a9b870d8a05fc8f828e50bfe7ccce63fb99ea669be29d2f1809d82009d94f2f06b0cf7aa7f23a5ff13b4387b49161678c812afa339a15f688740a830e8be0afde6e757d06d28a5767c62be82d4d75724b023a857c1eeb758e1855a8caad92182d7419d5e23ab03ec9900f91e7a0bd879708da6a4b15978b284728b8896f9165837b3394aefdcdd4719010018fd86d5793bde97f057d4fa3ea7ca6df446cb4f16c40af4c3f2662ad2b3f9b2e14f96f59a3b3f889297ac932a80339374e2eacda44663a0a4aab6591bd344caf54145873c01d2d365f3746bc276d4a27c14601f20a197bf9f1dc7e83c6d7e448b924a1c3c80b47f868762805645b4d55a9ff3be741265bd815a50c67393de86a9a45a11430aa9eb9c22e496ece3376da36533d9918c7789ff4f8cf73811d27c306e2f364b50ec35f35343b7d7f492da8b2392865002adce650732441b7d9609a54552d3726edc180fbe5099743fafb6a4ad5bde25f63f989d1776ce93950f90a0a3b4725ff8579d8eea48146c981738623b7ab3d903bab665985b6c2da9879de2f940f5f726ac07a5a4db36a3ff75f21fdd3e16fdd575d71ddadb20039f5c0733da7aa46570652034b038ced7b33b6d07d5dd35ec437ddac1b4f7f3d2672f4391b1bbfd65d9009e933d5a7cc7757ffc1433048bab20f27854b14588654e557f7e2c7fd98e56ac140d15b73689a88f56f24afe4354194de8547e1f6a7bf8906d2698b86a8e4adccad6c9dc6f111887326cd961bc06b80579ce10164613f11835f89af661781f9c047786dfd8c0d766d624bfc539f5cb9212b2dffbfbb9d948acbb99f5f9e8ce4fb913cc5070170343504dde7f198d2adfa4b86f7758c2594bae2361938b97b4aca946b6fa784f2127003e3596b4dd6ce0020ca280373820d092818851f37bfba36de016f7b3f36e51c876a1044eecee8e7c74ce5a41b306adf8c6f73452d7217dcd98fc82240198e9d8b20d0bfd8bb70db343efb42567d8ac49d713ae46a669fa128c1b3daa7844e2a7ea8ac8042519024b7e700aa195c87598e99b187dc779c8e2d039bb74202fbc49b6496b969d994b6016734089ea836b70968940988e8391d070011139eaaf9c155001665ca0f1eb71759d12f84255e38c83a2509dbdd99b6b7d428be8bcf893844a58ba27130fdf3b124f6f0c364f2be2787edc01baaa3b18aa156052416eae933cbf487a1c5e7bc1036482d413e599ed04a7efb22427067bc7acf6544bf9c6ef13674b35181f4e9bf8c3be228a21ad676e6d7bd215b992e355406a583bdafb5bb6140ea1f629ba0875225b03318977f70dd98476bdb8f68e3ac557ce8152cd42a612d55a5916ba1ae51fcb15c911398a8c668f6bf5e3449c9d8c0420bd7f011e8551c7874a61205faae7875b540fe2c5a13b70bf3ad120a7f059a6ae910bba957627b206433d40d6cdab59cf038c36f01430fdd106f2b980204f42184d25e0635663cf2cdbfc5e539567f4e39119f32dc70bfecc35a1907ebec019da6dc251f7cf883dfbceb051e02cc2cae137026811a0ca32387dbf23ec40d975f8b4c5962e3d76b2201b08929f86b97fdc4ae1dbc52be519d6b4e919528adfd3a3ecab2806c66663e67a29a0d48bede31a45543fbf8a09c8c354a413b622c8ac7f09e107c2173397719da7dc45c3514c14217477b6e5bc1de77035d2ddd4d5a2721674d9c5c57cf301918d6dbefda21e1a27cd00e0b439ae6d0ef5cff0d1df881a46e01167c0132b5cc8d5e5414f1dc34c419e018296d7454382edcf1066a2ab7ac9a5c86976a57a6d9dc95d95764a9b59b53f04819caa7a8937c10ae9d34fdf5b57fd64e8fd202e798814b60d6fe474a9e0f97fb786f4aa7596d60eea7ed3127d3873c1dda89f1023e537fd1efeb971afa2e35b4b92d805f56597933219d846fb10e35c2e5b1c50cfd1c91f3a5f8153507c10462cb77e0f30a3bce9029097e36a8bd6f73bd69241bad8a06a8effadc81609d027abb9270411c005851e1707c6a002e8d87a183420ebc323ef25f581d4e2ce35d38030f345521bd8b0766b33a39d82c007b4763e362a45ec06d63267a9b657b061ee6db53f1728a809256be4066a13febc1457ff6eb67c4d91b8c48002023be4578fc54be531166bc93a91a975ff174ce9c7a6a5893b6d3cf63432c1a5dcf4319cd642fb1c28169457886ade191cbc7281baa461f4c39fe1ebe0099e65986c9187e15f8c8c146cdcb1538964052218f217f5194e7be4d6c725b9c1f62e667d2b497309295e5af505effd68a56802ab6d78d16344ee5932b67e60ed73975a8747d3705f48ed67b29b594f89a1a9a0866c839c9076aaeb2d02007e7a858b74847ef4be47c56e776c692f195f098825d85bd7f733e712d2c221f5a1e0e1f90db27b0a89344a7cae9ae7102fff6b8a89a8545400f6f323506abe68373fdb0fee7f6e9533a98004eb135f3e91a6161b96518fb73854c19ba930c97c85134f0e5bbe43be362e20b2b35a8003b471610f0bf333a67ec36cbd82d8e2a18c9bedcd97638ef3df73b49cf971301adb19d543bc51ddf7525335fcbdb57453453a78e830e9bd6335e442cf03c95fe2bdbf91a8ac888df958048ad944fa422df0715ca046b02a74becc5e820ed2a5d79c5c6d70e81c4594c0188386fc2442ab5638040f2d41bfef057bedde162a3d9051b0bcdeff47fc30d0908dc2757c7898b923fe4b8aa9f6241a913aec31b13bec8f418d02b3f8465c9d4d67f943bf59881dd2d0a93b0933976acf39ec886a65540f8a27ed09e10ea955a5951a4e67ba217fb152cc06a9fe810b8f0623d70d43b108df13459bc566aa6bc5eb4aed9b8dee2e3f7e2c1576892b605f68e36bbec5e7939ce9ff014496cdd66a4f0c85e739b5f9464643dd41c6c3e76208ced95b99691cb03f7b50676b336a1db9eed2d578165d42b39bab6cc3cc6517924d2555cea9bf3940d30c3f95d1bb3552f94b515b18a74db193e490d01dce93e9bbefa0b38cbfa9e74bc793a9e22b644589ff4bd8ea1a5df24a6529a92bd7bb34bb9d807bcb06245120bb9fd36a837760a17e08061da9e016554b80cfed905d1c923f423dcc222d2910647cb1eb3d591d2fb2f8e6f5be757ff38fef41b955c6abc2ee599f46f0b33ae3549882050abfad932f4ed8c6418321727441c47ef8ae82fcdcd9b0f9ab115b0342633d8b117229f150d91dc23b9e5a97ca0aba24e2312462b756ba974d37c7a3f4714e706f57723bb59da477c88595e7a18c4f100210e6fda77d0769b564d0dffc2195c7bada85592987c3d098e7c02deacf0c9eecfa129502321409bc635e59ed2b13fc1136b33b8deed243cd0e379c915feddbffebf81653cb550f8a185ccd9728474ed13b417c94d25240189d778eaf46878965eff13f0b3f56b3f3ef91beac43110b7f0db7f27111e3b1058f1c921a7903095ed636746addeab3dd3b98c2edc98a17e21b36619c81602e3d7edd7fd08ef160b78beb1bf268d083522bf6680fc57401d1e94d97e730f4f58f04b2583504879770e89db3bd5cef2a86fe5210ca6082a51f8671086945727a1d995ce5ad4887481c4c6e5bb29cc5ad03b8910e90105757724a2a781210dec86a2dd0f2bd3818b93fa943faa62af1b401f0629fd8b025a4c5973b2565519e771b1830d789eab2a146c10e5c666d48ccafbc3d5be351696864d8450030802042493a8f73c07646845b8a2a1efa53d665e0a6fd38d1281db4464ee88dfd9d815e55d06c2a0f5dec2eb0e9fa2ad82e4b6ef05818d7f61a89f1971fced4047345a3f6a78b3d1b700f8613014add483fcba2ea466228c1b04ace4ea1cf71c5c5e692019edf8d53cde758bbdbd72612401e2fd824ba95038a712cc4fd15ea57db42eae154665b81b8e14bcd16a4eb28530c0b19d0357df8087f1b0ee19a0bbbb37a891a9d539da19a4e12f23c28a04a970194a746a9b1625f33c4a1297c21549982741283ac10fdd1d9bd2e1e1d18c1b157df8ba501259b3f3d1368dd3c63398ef133372372d6e1ad2f2e434884080f265b3988762b734ab775c42370b25f35842f745afa440766ad764ba9893afc56eb277d7a00de83e50ef6a5ebcdc5dfac9ecbaeeb769e9eb520481fd52d3c800b04f746b326b0585ba525a709363313b29bfee456c075f396f2a976fbb9b4d116287d0207450178683f7c20ccc64cd8cc1a8388a111d2f378af8c4aaa36b8134d1ad570aa5e5c66a5ab0cc8840d486c08748026cd4fa369eb9b03e70cc62c1119ae8f36da8303129ea2b460597519160d0c04018a36724ff6fb11cde14555f4e9a67747b4b36031673bb2302e389db521bac54f0374b68a4063cfeb409c356e8a252ce49008ebabe661e3bba66ba5f459c6a6e6d44e0d363a22d6bdfc0690f9c028b9783189344d4764424ea4b450fd5d719078d2e55bc8cbd20f921081cc64fbfb21333cfc08d417be04e895d4015d0d35a3919b4b038bbbfdb8364f3fb86bfaae42ddaf5e06674edac50db7004291e1997c126ee3fe3a430e467c680792a980fb68ae90941c6954f06b0e4f30b9e551366ac63c86b8c1eebec3c7aae6e5372c9280743fae5ab41b8663c28982b4b5a0de692b5106886bc491c9cda28e28109a43d3808ed617a974758caaf6cbaa30845f4275ee55c01e82ae28d771a4425155c8aefe57fc5f33f031c9507fa0b72bcac03888e68430c40f4e846e0bf55eaff53fdaad63ce19ca14b18094d866768d49cd000e3906646d54d7bdb0d24b56ce5755c1c0c709bbf53ea93de5af86025cbd3aa1d4058526e5d79587447acd649b945f0647bf7ca6be27ff96a0cb8ca3110e8e7f43b6e90cf6b5f17b22f6a2ecc31e65053f369c70aecaf91121138b92f1faebd189f11234f8047e0918563b1851b83cd304888a6738f1c8c269ed2a66c83db07fb398e49b7316cb3c14977a2d00c078a3d4d71b1aadd0e564af8560c691d5f8417beace3d0fe463a638ffc612cfbaa8252c52016ed400fa38d303e5a1eaac99383a4104d9aeac2dec8854bbacb069015149caefce285dfecef5adbe7d0e7bd95150002aefc7e37c8c639727c404469040d2e742fae66f1c07187b44615714856697ed1737f55528988d5b0477803bc8f3da813c19031019380725eb5153da5b675c073959a2f050671f2b058afbf33482569775c68e1199c5b57d0872864669ae19bc7606e711e7eae73cf0fb3d462b631f5ca294e36899ad119eaca73699c54be97d33d2aac1a1a70d27a475631ab4640303355f8c6c46bcaddca73865c358a5a5e9e453331af15ae2fbb98f52c35ef3bcbf91b8b3311bb3d1e8a8d73a36740a4f2fdaa6c6ab991ba3df4ddcc13018c5e0c9f1258beaa9615d494267f46936ba8410504bb1d24766a0da968f22d60537c8de6d6e2eaf173c2bb91ea0fdf6c3d79dd083b1bcd711c669dc82f599a0fc4d80fe6aef0b5e474f05f65bed64d2afcba1e96faebf7838d9b9969364fbaaf805e57e04b0ac7ae1c39f5905450bef7e4ee220415aaba148f0a9ab784cb72c8959bf48567d49e4b9a0d6cfe22145cc2bbd68ead839d5dca5f7c1badbb877c6210701e7d6301ba8928cc34db38e34fa46299c15c11ff9cb164a8f5ce56afe9c5b8612e329391153ff87469339f122adbc8879983a1", 0xfc0, 0x4004004, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e23}, 0x6e) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 16:22:50 executing program 5: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) clone(0x210007fa, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) execve(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000280)) chmod(&(0x7f0000000000)='./file0\x00', 0x0) 16:22:50 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_STATUS(r2, 0x80605414, &(0x7f0000000000)=""/42) [ 207.761965] hrtimer: interrupt took 34308 ns 16:22:51 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0xfffffe0e) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) 16:22:51 executing program 7: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) pipe2(&(0x7f0000000140), 0x84802) 16:22:51 executing program 0: dup(0xffffffffffffffff) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x3) request_key(&(0x7f0000000340)='blacklist\x00', &(0x7f0000000380), &(0x7f0000000700)='keyring\x00', 0xfffffffffffffffd) request_key(&(0x7f0000000100)='user\x00', &(0x7f00000006c0), &(0x7f00000001c0)="d13ff3d776", 0x0) 16:22:51 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x15) 16:22:51 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000300)={0xfff, {{0xa, 0x4e20, 0x2, @ipv4={[], [], @multicast2}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) 16:22:51 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0xfd, &(0x7f00000000c0)=0x0) eventfd2(0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000001800)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x7, 0x0, r0, &(0x7f0000000480)="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", 0x401}]) 16:22:51 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$seccomp(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0xfffffffffffffff9}]}) setitimer(0x0, &(0x7f0000000400)={{}, {0x0, 0x7530}}, &(0x7f0000000440)) 16:22:51 executing program 0: dup(0xffffffffffffffff) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x3) request_key(&(0x7f0000000340)='blacklist\x00', &(0x7f0000000380), &(0x7f0000000700)='keyring\x00', 0xfffffffffffffffd) request_key(&(0x7f0000000100)='user\x00', &(0x7f00000006c0), &(0x7f00000001c0)="d13ff3d776", 0x0) 16:22:51 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0xfffffe0e) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) 16:22:51 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f00000045c0)=[{{0x0, 0x0, &(0x7f0000004580)}}], 0x1, 0x0, &(0x7f0000004700)={0x0, 0x989680}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) finit_module(r1, &(0x7f0000000000)='\x00', 0x1) ioctl(r1, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x34000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x10, 0x701, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) [ 208.393548] audit: type=1326 audit(1535991771.403:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=6898 comm="syz-executor3" exe="/root/syz-executor3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x457099 code=0xffff0000 16:22:51 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x8}, 0x1c) sendmsg(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)}], 0x1, &(0x7f0000003500)=[{0x10}], 0x10}, 0x400000000000c100) 16:22:51 executing program 0: dup(0xffffffffffffffff) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x3) request_key(&(0x7f0000000340)='blacklist\x00', &(0x7f0000000380), &(0x7f0000000700)='keyring\x00', 0xfffffffffffffffd) request_key(&(0x7f0000000100)='user\x00', &(0x7f00000006c0), &(0x7f00000001c0)="d13ff3d776", 0x0) 16:22:51 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0a5c2d0252926285717070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000e11ff0)=[{&(0x7f0000000140)="580000001400add427323b470c458c5602067fffffff81004e220000ac1414aa0b4824ca945f64009400050028925aa80000000000000080000efffeffe809000000fff5dd00000010000100090a1000410400000000fcff", 0x58}], 0x1) 16:22:51 executing program 4: clone(0x210007fa, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) writev(0xffffffffffffffff, &(0x7f0000000080), 0x0) 16:22:51 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x3) request_key(&(0x7f0000000340)='blacklist\x00', &(0x7f0000000380), &(0x7f0000000700)='keyring\x00', 0xfffffffffffffffd) request_key(&(0x7f0000000100)='user\x00', &(0x7f00000006c0), &(0x7f00000001c0)="d13ff3d776", 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000100)=0x535) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000240)=0xc) 16:22:51 executing program 0: dup(0xffffffffffffffff) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x3) request_key(&(0x7f0000000340)='blacklist\x00', &(0x7f0000000380), &(0x7f0000000700)='keyring\x00', 0xfffffffffffffffd) request_key(&(0x7f0000000100)='user\x00', &(0x7f00000006c0), &(0x7f00000001c0)="d13ff3d776", 0x0) [ 209.125175] audit: type=1326 audit(1535991772.134:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=6898 comm="syz-executor3" exe="/root/syz-executor3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x457099 code=0xffff0000 16:22:52 executing program 6: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000040)={0xffffffffffffff9c}) close(r0) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000006000)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x1000, &(0x7f0000008000)=""/4096}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000840)="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", 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080), 0x4255b) 16:22:52 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 16:22:52 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/protocols\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pread64(r0, &(0x7f0000000240)=""/200, 0xc8, 0x0) 16:22:52 executing program 0: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/cgroup\x00') setns(r0, 0x0) 16:22:52 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f000001cfb0)={0x0, 0x1, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 16:22:52 executing program 1: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x0, 0x0) syz_emit_ethernet(0xda, &(0x7f0000000040)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "2c731f", 0x8, 0x2b, 0x0, @ipv4={[], [], @local}, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) 16:22:52 executing program 3: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000500)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x3, r0}]) 16:22:52 executing program 7: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) keyctl$session_to_parent(0x12) 16:22:52 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) keyctl$negate(0xd, 0x0, 0x0, 0x0) 16:22:52 executing program 1: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x0, 0x0) syz_emit_ethernet(0xda, &(0x7f0000000040)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "2c731f", 0x8, 0x2b, 0x0, @ipv4={[], [], @local}, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) 16:22:52 executing program 3: clock_gettime(0xfffdfffffffffff3, &(0x7f0000000080)) 16:22:52 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000006000)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x1000, &(0x7f0000008000)=""/4096}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000840)="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", 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080), 0x4255b) 16:22:52 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f000000dff6)='./control\x00', 0x0) open(&(0x7f00000001c0)='./control\x00', 0x0, 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0) rmdir(&(0x7f0000000080)='./control\x00') 16:22:52 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c) connect$inet6(r0, &(0x7f000000cfe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000040), 0x0, 0x4008000, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="a2"], 0x1) r1 = socket$inet(0x2, 0x2, 0x2000000088) sendto$inet(r1, &(0x7f0000e7c000), 0x0, 0x8084, &(0x7f0000319ff0)={0x2, 0x4e20}, 0x10) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0a5c2d0252926285717070") sendto$inet(r1, &(0x7f0000000000)="dd", 0x1, 0x0, &(0x7f000082dff0)={0x2, 0x0, @local}, 0x10) 16:22:52 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x857, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000001c0)) 16:22:53 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="7a0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000bd120000000000008500000006000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0xa}, 0x48) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)={r1, r0, 0x10000000000a, 0x2}, 0x48) [ 210.024987] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 16:22:53 executing program 6: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000580)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) write$binfmt_script(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="2321202edd74249af0ee271df9b62f627573202e2f6367726f75702e63707500202e2f6367726f75702e63707500202e2f6367726f75702e637075000a4ff4775ab2675a1208cf4c0a7c690f84d3c5c8c333ea4ccd709b1e0077367c6606e836697c6c768cd5ff02c84698497f9bb6f34e785d2ddec3ac6856b4166131a1567f5afeaee84fb60e95cb"], 0x89) write$binfmt_misc(r0, &(0x7f0000000400)={'syz0', "acfb0c2e6beccd9607167c508f23bb8007676c4ae842d1cf9d6092748161613fae3715280a5c8826dddf95ae36bd3b108b2d87f23b5db4ca3d999f1e2044a4319b270fb4aae1d9a37a8146fe38073353de18d63a2539a436d119d9b1ad7a80b0c701ffbaddc83cd3f4487f785dffa9bded411ff75223ab24765e39a786a0916e1bdeca3541e5394e6478d7923aa7ad7aa8688efcc14cd305b77cd9660f5e485d31d8045fa3e02bd8f938cdef967f41a83d01773daa5e1ecf94bda8fe24b8597e069d22de51e12fa05203b185b5c126de22d442c6a900"}, 0xda) r2 = open(&(0x7f0000000000)='./bus\x00', 0x4000, 0x0) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) 16:22:53 executing program 3: socket$packet(0x11, 0x3, 0x300) r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ptype\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000003) 16:22:53 executing program 1: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x0, 0x0) syz_emit_ethernet(0xda, &(0x7f0000000040)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "2c731f", 0x8, 0x2b, 0x0, @ipv4={[], [], @local}, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) 16:22:53 executing program 2: r0 = inotify_init1(0x0) clone(0x0, &(0x7f0000000080), &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000002100)={0x0, 0x0}) syz_open_procfs(0x0, &(0x7f0000000100)='net/wireless\x00') socketpair(0x0, 0x0, 0x0, &(0x7f0000000280)) ptrace$setopts(0x4206, r1, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) waitid(0x0, 0x0, &(0x7f0000003ff8), 0xa0000003, 0x0) 16:22:53 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) r1 = epoll_create(0x7e) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)) ppoll(&(0x7f0000000140)=[{r1, 0x1}], 0x1, &(0x7f0000000000)={0x77359400}, &(0x7f0000000080), 0x8) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f00000000c0)={0x6000001c}) 16:22:53 executing program 4: r0 = socket$kcm(0xa, 0x122000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f0000001340), 0x4) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000003840)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000000)="d90d0000768606681d012f629c75adfa4208d5febf524a024aface6a6ac7d846ed2fa163e15ffb50", 0x28}], 0x1}, 0x0) 16:22:53 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0xc362e63b3f31ba5f}, 0x20}}, 0x0) 16:22:53 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000240)="2f65786500000000000489004bddd9de91be10eebf000ee91e18f0c76fbb232a07424ae1e901d2da75af1f0200f5ab26d7e071fb35331ce39c5a0000") flistxattr(r0, &(0x7f0000000100)=""/175, 0xaf) 16:22:53 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8910, &(0x7f0000000800)=@buf={0x37, &(0x7f0000000740)="eccd852601c129587a89b4e88f0fb822c4e3fb333ab73330391615e6e71775c7c5c209a0c4bc1eb80dc9d2288ce292c45116d51c4d911f"}) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='net/bnep\x00') ioctl$TCXONC(r1, 0x540a, 0x9) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x8) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f00000002c0), &(0x7f0000000300)=0x8) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000040)={0x0, 0x0, 0x7fffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={"00ac720000000000ec973f820f7c4000", 0x102}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x30a) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={&(0x7f0000000080), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) close(r2) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, &(0x7f0000000700)) 16:22:53 executing program 3: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/net/pfkey\x00', 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) fcntl$lock(r0, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x4, 0x4}) ioctl$TIOCCONS(r0, 0x541d) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) socketpair$inet(0x2, 0x0, 0x0, &(0x7f0000000080)) 16:22:53 executing program 1: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x0, 0x0) syz_emit_ethernet(0xda, &(0x7f0000000040)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "2c731f", 0x8, 0x2b, 0x0, @ipv4={[], [], @local}, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) 16:22:53 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in6=@remote, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r0, &(0x7f00000000c0), 0x1c) 16:22:53 executing program 7: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) r1 = accept$packet(r0, &(0x7f0000000240), &(0x7f0000000280)=0x14) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) pread64(r3, &(0x7f00000002c0)=""/196, 0xc4, 0x0) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000000)) shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ffa000/0x4000)=nil) prctl$seccomp(0x16, 0x0, &(0x7f00000001c0)={0x2, &(0x7f0000000140)=[{0x4, 0x9858, 0x1}, {0x0, 0x7fffffff, 0x0, 0xfffffffffffffffc}]}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000400)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000080)='nr0\x00') process_vm_writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000540)=""/166, 0xa6}, {&(0x7f0000000680)=""/163, 0xa3}], 0x2, &(0x7f0000001840)=[{&(0x7f0000000600)=""/30, 0x1e}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)=""/200, 0xc8}], 0x3, 0x0) fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f00000004c0)) 16:22:53 executing program 3: request_key(&(0x7f0000000100)='user\x00', &(0x7f00000006c0), &(0x7f00000001c0)="d13ff3d776", 0x0) 16:22:53 executing program 0: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000080)=@nl, 0x80, &(0x7f0000002000)=[{&(0x7f0000000280)="5500000018007f8500fe01b2a4a280930a06000000a84308910000003900090035000c00060000001900150000000000000000dc1338d54400009b84136ef75afb83fb448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000080)}, 0x0) 16:22:53 executing program 4: clock_gettime(0xfffffffffffffff8, &(0x7f0000000280)) [ 210.916808] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 210.989780] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 16:22:54 executing program 1: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xda, &(0x7f0000000040)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "2c731f", 0x8, 0x2b, 0x0, @ipv4={[], [], @local}, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) 16:22:54 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x80045432, &(0x7f0000000000)) 16:22:54 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) semget(0x0, 0x0, 0x0) 16:22:54 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x856, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f00000002c0)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f0000010100000001000000e1000002dbcb7d9dc1ffc6f626132f1de7257115c29d3ed454abcc457d85926172035db7bac47cb6a37b90e389d0880ce99344fe1d592e1e"], 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f00003fdff5)={@multicast2, @loopback, @rand_addr}, 0xc) 16:22:54 executing program 7: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001580)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000001740)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000040)={0x39, 0x6, 0x0, {0x0, 0x0, 0x7, 0x0, '^eth1{bdev\\bdev%'}}, 0x39) 16:22:54 executing program 4: socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000040)="6c6f00966fd651b959a9c84a2c00d2970403dc0d") ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000680)="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") sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)=@ax25={0x3, {"b8738e610d62ed"}}, 0x45a, &(0x7f0000000340)}, 0x8080) 16:22:54 executing program 5: r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fchmod(r0, 0x0) 16:22:54 executing program 1: syz_emit_ethernet(0xda, &(0x7f0000000040)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "2c731f", 0x8, 0x2b, 0x0, @ipv4={[], [], @local}, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) [ 211.645168] ================================================================== [ 211.652627] BUG: KMSAN: uninit-value in memcmp+0x11d/0x180 [ 211.658290] CPU: 1 PID: 7060 Comm: syz-executor6 Not tainted 4.19.0-rc1+ #40 [ 211.665517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 211.674886] Call Trace: [ 211.677540] dump_stack+0x14b/0x190 [ 211.681214] kmsan_report+0x183/0x2b0 [ 211.685054] __msan_warning+0x70/0xc0 [ 211.688891] memcmp+0x11d/0x180 [ 211.692215] __dev_mc_del+0x169/0x6c0 [ 211.696077] dev_mc_del+0x6d/0x80 [ 211.699606] igmp6_group_dropped+0x2c5/0x12e0 [ 211.704125] ? kmsan_set_origin_inline+0x6b/0x120 [ 211.709061] ipv6_mc_down+0xc8/0x360 [ 211.712813] addrconf_ifdown+0x21bb/0x2670 [ 211.717141] addrconf_notify+0x2ac/0x5be0 [ 211.721337] ? kmsan_set_origin_inline+0x6b/0x120 [ 211.726209] ? __msan_poison_alloca+0x173/0x1f0 [ 211.730913] ? tls_dev_event+0x81/0x1310 [ 211.735017] ? raw_notifier_call_chain+0x13e/0x240 [ 211.740002] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 211.745422] ? dev_forward_change+0xb70/0xb70 [ 211.749953] raw_notifier_call_chain+0x13e/0x240 [ 211.754777] dev_close_many+0x627/0x9e0 [ 211.758996] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 211.764408] rollback_registered_many+0x9eb/0x2040 [ 211.769357] ? kmsan_set_origin_inline+0x6b/0x120 [ 211.774222] ? __list_add_valid+0xb8/0x450 [ 211.778500] unregister_netdevice_queue+0x547/0xa40 [ 211.783564] __tun_detach+0x220c/0x2c70 [ 211.787601] tun_chr_close+0xda/0x1c0 [ 211.791427] ? tun_chr_open+0x750/0x750 [ 211.795428] __fput+0x4cf/0xc20 [ 211.798767] ? fput+0x2e0/0x2e0 [ 211.802074] ____fput+0x37/0x40 [ 211.805388] task_work_run+0x22e/0x2b0 [ 211.809339] prepare_exit_to_usermode+0x33e/0x410 [ 211.814220] syscall_return_slowpath+0xdb/0x700 [ 211.818924] ? __close_fd+0x465/0x4c0 [ 211.822775] ? __se_sys_close+0x72/0x140 [ 211.826863] do_syscall_64+0xde/0x100 [ 211.830696] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 211.835915] RIP: 0033:0x457099 [ 211.839134] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 211.858057] RSP: 002b:00007fe1750bcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 211.865795] RAX: 0000000000000000 RBX: 00007fe1750bd6d4 RCX: 0000000000457099 [ 211.873083] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 211.880355] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 211.887631] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 211.894909] R13: 00000000004cb8c0 R14: 00000000004ee8f2 R15: 0000000000000000 [ 211.902232] [ 211.903880] Local variable description: ----buf@igmp6_group_dropped [ 211.910282] Variable was created at: [ 211.914011] igmp6_group_dropped+0x49/0x12e0 [ 211.918444] ipv6_mc_down+0xc8/0x360 [ 211.922167] ================================================================== [ 211.929533] Disabling lock debugging due to kernel taint [ 211.935011] Kernel panic - not syncing: panic_on_warn set ... [ 211.935011] [ 211.942441] CPU: 1 PID: 7060 Comm: syz-executor6 Tainted: G B 4.19.0-rc1+ #40 [ 211.951034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 211.960400] Call Trace: [ 211.963009] dump_stack+0x14b/0x190 [ 211.966666] panic+0x35d/0x8cb [ 211.969916] ? ipv6_mc_down+0xc8/0x360 [ 211.973839] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 211.979317] kmsan_report+0x2a8/0x2b0 [ 211.983151] __msan_warning+0x70/0xc0 [ 211.986999] memcmp+0x11d/0x180 [ 211.990314] __dev_mc_del+0x169/0x6c0 [ 211.994149] dev_mc_del+0x6d/0x80 [ 211.997626] igmp6_group_dropped+0x2c5/0x12e0 [ 212.002137] ? kmsan_set_origin_inline+0x6b/0x120 [ 212.007022] ipv6_mc_down+0xc8/0x360 [ 212.010807] addrconf_ifdown+0x21bb/0x2670 [ 212.015100] addrconf_notify+0x2ac/0x5be0 [ 212.019270] ? kmsan_set_origin_inline+0x6b/0x120 [ 212.024115] ? __msan_poison_alloca+0x173/0x1f0 [ 212.028819] ? tls_dev_event+0x81/0x1310 [ 212.032899] ? raw_notifier_call_chain+0x13e/0x240 [ 212.037859] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 212.043255] ? dev_forward_change+0xb70/0xb70 [ 212.047762] raw_notifier_call_chain+0x13e/0x240 [ 212.052843] dev_close_many+0x627/0x9e0 [ 212.056858] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 212.062257] rollback_registered_many+0x9eb/0x2040 [ 212.067224] ? kmsan_set_origin_inline+0x6b/0x120 [ 212.072095] ? __list_add_valid+0xb8/0x450 [ 212.076397] unregister_netdevice_queue+0x547/0xa40 [ 212.081455] __tun_detach+0x220c/0x2c70 [ 212.085511] tun_chr_close+0xda/0x1c0 [ 212.089331] ? tun_chr_open+0x750/0x750 [ 212.093327] __fput+0x4cf/0xc20 [ 212.096673] ? fput+0x2e0/0x2e0 [ 212.099988] ____fput+0x37/0x40 [ 212.103293] task_work_run+0x22e/0x2b0 [ 212.107202] prepare_exit_to_usermode+0x33e/0x410 [ 212.112043] syscall_return_slowpath+0xdb/0x700 [ 212.116714] ? __close_fd+0x465/0x4c0 [ 212.120558] ? __se_sys_close+0x72/0x140 [ 212.124639] do_syscall_64+0xde/0x100 [ 212.128439] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 212.133637] RIP: 0033:0x457099 [ 212.136868] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 212.155786] RSP: 002b:00007fe1750bcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 212.163520] RAX: 0000000000000000 RBX: 00007fe1750bd6d4 RCX: 0000000000457099 [ 212.170791] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 212.178057] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 212.185317] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 212.192590] R13: 00000000004cb8c0 R14: 00000000004ee8f2 R15: 0000000000000000 [ 212.200250] Dumping ftrace buffer: [ 212.203786] (ftrace buffer empty) [ 212.207486] Kernel Offset: disabled [ 212.211107] Rebooting in 86400 seconds..