[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting OpenBSD Secure Shell server: sshd[   31.071752] random: sshd: uninitialized urandom read (32 bytes read)
[?25l[?1c7[ ok 8[?25h[?0c.
[   31.940021] random: sshd: uninitialized urandom read (32 bytes read)
[   32.382179] random: sshd: uninitialized urandom read (32 bytes read)

Debian GNU/Linux 7 syzkaller ttyS0

syzkaller login: [   33.705068] random: sshd: uninitialized urandom read (32 bytes read)
Warning: Permanently added '10.128.10.34' (ECDSA) to the list of known hosts.
[   39.361912] random: sshd: uninitialized urandom read (32 bytes read)
2018/06/27 18:07:09 fuzzer started
[   40.850882] random: cc1: uninitialized urandom read (8 bytes read)
2018/06/27 18:07:11 dialing manager at 10.128.0.26:39373
2018/06/27 18:07:13 syscalls: 1517
2018/06/27 18:07:13 code coverage: enabled
2018/06/27 18:07:13 comparison tracing: ioctl(KCOV_TRACE_CMP) failed: errno 524
2018/06/27 18:07:13 setuid sandbox: enabled
2018/06/27 18:07:13 namespace sandbox: enabled
2018/06/27 18:07:13 fault injection: enabled
2018/06/27 18:07:13 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2018/06/27 18:07:13 net packed injection: enabled
[   44.731343] random: crng init done
18:08:26 executing program 0:
r0 = getpid()
sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
read(r1, &(0x7f0000000000)=""/105, 0x69)
readv(r1, &(0x7f0000001500)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc))
readv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/64, 0x40}], 0x1)
r2 = syz_open_pts(r1, 0x2)
dup3(r2, r1, 0x0)
write(r1, &(0x7f0000c34fff), 0x1000002c1)

18:08:26 executing program 1:
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_emit_ethernet(0x6e, &(0x7f0000101000)={@random="cd390c081bf2", @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x3a, 0x0, @mcast2={0xff, 0x2, [], 0x1}, @dev={0xfe, 0x80}, [], "802a08000000006b"}}}}}}}, 0x0)

18:08:26 executing program 7:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000279ffc)=0x7fff, 0x4)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x4, &(0x7f0000e4d000)=0x77a1, 0x4)

18:08:26 executing program 2:
msgrcv(0x0, &(0x7f0000745000)=ANY=[], 0x0, 0xffffffffffdffffc, 0x0)

18:08:26 executing program 3:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = dup2(r1, r0)
getsockname(r2, &(0x7f00000000c0)=@rc, &(0x7f0000000140)=0x80)

18:08:26 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000400)={{0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x0, {0x2, 0x0, @multicast2=0xe0000002}, 'syzkaller0\x00'})

18:08:26 executing program 5:
r0 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'bridge_slave_1\x00', 0x3})

18:08:26 executing program 6:
r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000000))

[  116.949659] IPVS: ftp: loaded support on port[0] = 21
[  116.966312] IPVS: ftp: loaded support on port[0] = 21
[  116.970996] IPVS: ftp: loaded support on port[0] = 21
[  117.065512] IPVS: ftp: loaded support on port[0] = 21
[  117.080393] IPVS: ftp: loaded support on port[0] = 21
[  117.088880] IPVS: ftp: loaded support on port[0] = 21
[  117.124026] IPVS: ftp: loaded support on port[0] = 21
[  117.131296] IPVS: ftp: loaded support on port[0] = 21
[  118.763465] ip (4646) used greatest stack depth: 54352 bytes left
[  119.264718] ip (4682) used greatest stack depth: 54344 bytes left
[  119.960260] ip (4741) used greatest stack depth: 54328 bytes left
[  120.411383] bridge0: port 1(bridge_slave_0) entered blocking state
[  120.417920] bridge0: port 1(bridge_slave_0) entered disabled state
[  120.439490] device bridge_slave_0 entered promiscuous mode
[  120.504077] bridge0: port 1(bridge_slave_0) entered blocking state
[  120.510581] bridge0: port 1(bridge_slave_0) entered disabled state
[  120.535869] device bridge_slave_0 entered promiscuous mode
[  120.583282] bridge0: port 1(bridge_slave_0) entered blocking state
[  120.589779] bridge0: port 1(bridge_slave_0) entered disabled state
[  120.626265] device bridge_slave_0 entered promiscuous mode
[  120.655525] bridge0: port 1(bridge_slave_0) entered blocking state
[  120.662024] bridge0: port 1(bridge_slave_0) entered disabled state
[  120.683271] device bridge_slave_0 entered promiscuous mode
[  120.693807] bridge0: port 2(bridge_slave_1) entered blocking state
[  120.700296] bridge0: port 2(bridge_slave_1) entered disabled state
[  120.722796] device bridge_slave_1 entered promiscuous mode
[  120.732365] bridge0: port 1(bridge_slave_0) entered blocking state
[  120.738976] bridge0: port 1(bridge_slave_0) entered disabled state
[  120.749938] device bridge_slave_0 entered promiscuous mode
[  120.771011] bridge0: port 1(bridge_slave_0) entered blocking state
[  120.777704] bridge0: port 1(bridge_slave_0) entered disabled state
[  120.787987] device bridge_slave_0 entered promiscuous mode
[  120.800541] bridge0: port 2(bridge_slave_1) entered blocking state
[  120.807178] bridge0: port 2(bridge_slave_1) entered disabled state
[  120.817778] device bridge_slave_1 entered promiscuous mode
[  120.825823] bridge0: port 1(bridge_slave_0) entered blocking state
[  120.832302] bridge0: port 1(bridge_slave_0) entered disabled state
[  120.857808] device bridge_slave_0 entered promiscuous mode
[  120.874191] bridge0: port 2(bridge_slave_1) entered blocking state
[  120.880721] bridge0: port 2(bridge_slave_1) entered disabled state
[  120.898428] device bridge_slave_1 entered promiscuous mode
[  120.914740] bridge0: port 1(bridge_slave_0) entered blocking state
[  120.921237] bridge0: port 1(bridge_slave_0) entered disabled state
[  120.943171] device bridge_slave_0 entered promiscuous mode
[  120.956973] bridge0: port 2(bridge_slave_1) entered blocking state
[  120.963485] bridge0: port 2(bridge_slave_1) entered disabled state
[  120.980864] device bridge_slave_1 entered promiscuous mode
[  120.995181] bridge0: port 2(bridge_slave_1) entered blocking state
[  121.001745] bridge0: port 2(bridge_slave_1) entered disabled state
[  121.019907] device bridge_slave_1 entered promiscuous mode
[  121.029252] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  121.037003] bridge0: port 2(bridge_slave_1) entered blocking state
[  121.043502] bridge0: port 2(bridge_slave_1) entered disabled state
[  121.068180] device bridge_slave_1 entered promiscuous mode
[  121.081109] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  121.091422] bridge0: port 2(bridge_slave_1) entered blocking state
[  121.097925] bridge0: port 2(bridge_slave_1) entered disabled state
[  121.124788] device bridge_slave_1 entered promiscuous mode
[  121.151220] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  121.161615] bridge0: port 2(bridge_slave_1) entered blocking state
[  121.168128] bridge0: port 2(bridge_slave_1) entered disabled state
[  121.205229] device bridge_slave_1 entered promiscuous mode
[  121.233568] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  121.241933] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  121.257173] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  121.266698] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  121.277403] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  121.345409] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  121.353731] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  121.404174] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  121.447102] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  121.454799] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  121.492135] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  121.568804] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  121.622217] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  121.916984] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  121.988174] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  122.039028] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  122.066905] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  122.120517] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  122.144515] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  122.165703] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  122.211423] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  122.234951] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  122.283713] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  122.304033] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  122.325903] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  122.364188] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[  122.371287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  122.387249] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  122.399443] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  122.462461] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  122.472719] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[  122.479728] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  122.521665] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[  122.535796] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  122.543698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  122.590643] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[  122.597729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  122.621577] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[  122.629151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  122.674024] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[  122.682841] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  122.708310] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[  122.717226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  122.733553] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[  122.745099] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[  122.757766] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[  122.764894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  122.791195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  122.813885] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  122.842925] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[  122.850009] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  122.863201] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[  122.870260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  122.882937] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[  122.899265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  123.005483] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[  123.012545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  123.024778] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[  123.057732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  123.089524] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[  123.096626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  123.347407] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  123.359958] team0: Port device team_slave_0 added
[  123.435569] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  123.445939] team0: Port device team_slave_0 added
[  123.457572] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  123.481371] team0: Port device team_slave_0 added
[  123.502364] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  123.523904] team0: Port device team_slave_0 added
[  123.558108] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  123.594864] team0: Port device team_slave_0 added
[  123.629323] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  123.649993] team0: Port device team_slave_0 added
[  123.660193] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  123.670818] team0: Port device team_slave_1 added
[  123.677829] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  123.691905] team0: Port device team_slave_1 added
[  123.718236] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  123.738697] team0: Port device team_slave_1 added
[  123.758630] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  123.779848] team0: Port device team_slave_1 added
[  123.796517] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  123.816551] team0: Port device team_slave_0 added
[  123.826737] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  123.844145] team0: Port device team_slave_1 added
[  123.875160] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[  123.882422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  123.896002] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  123.928705] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[  123.936390] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  123.945766] team0: Port device team_slave_1 added
[  123.960945] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  123.977865] team0: Port device team_slave_0 added
[  123.992070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  124.006375] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  124.044267] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  124.059745] team0: Port device team_slave_1 added
[  124.074077] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[  124.083173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  124.097538] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  124.116588] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[  124.127529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  124.149809] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  124.175840] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[  124.183903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  124.197480] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  124.208293] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[  124.215362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  124.224486] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  124.234516] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  124.245548] team0: Port device team_slave_1 added
[  124.257994] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[  124.265624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  124.295522] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  124.326379] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[  124.333514] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  124.355325] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  124.381412] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[  124.389484] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[  124.396613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  124.406943] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  124.430704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  124.453232] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  124.480326] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  124.494858] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[  124.509912] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  124.523535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  124.532234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  124.540709] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  124.562806] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[  124.570496] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[  124.581358] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[  124.591149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  124.601933] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  124.633374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  124.649392] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  124.666151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  124.680777] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  124.689759] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[  124.697870] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  124.715776] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  124.725956] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  124.752702] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  124.761647] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  124.769825] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  124.785706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  124.805724] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  124.835107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  124.857714] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  124.870973] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  124.893796] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  124.901930] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  124.911246] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  124.934517] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  124.942912] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  124.961286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  124.988696] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  125.008547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  125.024356] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  125.039951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  125.047889] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  125.056351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  125.067791] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  125.075765] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[  125.100711] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  125.109318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  125.118166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  125.127166] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  125.142231] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  125.152860] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  125.161544] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  125.171072] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  125.187545] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  125.229641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  125.274718] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  125.297192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  125.311777] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  125.328406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  125.337442] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  125.345946] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  125.376726] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  125.384631] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  125.401866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  125.456471] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  125.463937] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  125.481576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  125.545828] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  125.554601] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  125.571695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  127.330791] bridge0: port 2(bridge_slave_1) entered blocking state
[  127.337411] bridge0: port 2(bridge_slave_1) entered forwarding state
[  127.344324] bridge0: port 1(bridge_slave_0) entered blocking state
[  127.350815] bridge0: port 1(bridge_slave_0) entered forwarding state
[  127.391659] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[  127.399592] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  127.429213] bridge0: port 2(bridge_slave_1) entered blocking state
[  127.435836] bridge0: port 2(bridge_slave_1) entered forwarding state
[  127.442682] bridge0: port 1(bridge_slave_0) entered blocking state
[  127.449141] bridge0: port 1(bridge_slave_0) entered forwarding state
[  127.494971] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[  127.521837] bridge0: port 2(bridge_slave_1) entered blocking state
[  127.528330] bridge0: port 2(bridge_slave_1) entered forwarding state
[  127.535220] bridge0: port 1(bridge_slave_0) entered blocking state
[  127.541693] bridge0: port 1(bridge_slave_0) entered forwarding state
[  127.558071] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[  127.681165] bridge0: port 2(bridge_slave_1) entered blocking state
[  127.687662] bridge0: port 2(bridge_slave_1) entered forwarding state
[  127.694488] bridge0: port 1(bridge_slave_0) entered blocking state
[  127.700968] bridge0: port 1(bridge_slave_0) entered forwarding state
[  127.727547] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[  127.760865] bridge0: port 2(bridge_slave_1) entered blocking state
[  127.767351] bridge0: port 2(bridge_slave_1) entered forwarding state
[  127.774227] bridge0: port 1(bridge_slave_0) entered blocking state
[  127.780682] bridge0: port 1(bridge_slave_0) entered forwarding state
[  127.824804] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[  127.831482] bridge0: port 2(bridge_slave_1) entered blocking state
[  127.837955] bridge0: port 2(bridge_slave_1) entered forwarding state
[  127.844752] bridge0: port 1(bridge_slave_0) entered blocking state
[  127.851196] bridge0: port 1(bridge_slave_0) entered forwarding state
[  127.868969] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[  127.877227] bridge0: port 2(bridge_slave_1) entered blocking state
[  127.883663] bridge0: port 2(bridge_slave_1) entered forwarding state
[  127.890460] bridge0: port 1(bridge_slave_0) entered blocking state
[  127.896902] bridge0: port 1(bridge_slave_0) entered forwarding state
[  127.908242] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[  128.259221] bridge0: port 2(bridge_slave_1) entered blocking state
[  128.265706] bridge0: port 2(bridge_slave_1) entered forwarding state
[  128.272523] bridge0: port 1(bridge_slave_0) entered blocking state
[  128.278976] bridge0: port 1(bridge_slave_0) entered forwarding state
[  128.293426] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[  128.415239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  128.423953] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  128.455265] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  128.484846] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  128.509974] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  128.521331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  128.528677] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  136.076507] 8021q: adding VLAN 0 to HW filter on device bond0
[  136.161863] 8021q: adding VLAN 0 to HW filter on device bond0
[  136.186087] 8021q: adding VLAN 0 to HW filter on device bond0
[  136.242191] 8021q: adding VLAN 0 to HW filter on device bond0
[  136.465548] 8021q: adding VLAN 0 to HW filter on device bond0
[  136.494473] 8021q: adding VLAN 0 to HW filter on device bond0
[  136.575633] 8021q: adding VLAN 0 to HW filter on device bond0
[  136.828851] 8021q: adding VLAN 0 to HW filter on device bond0
[  136.892309] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  136.921407] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  136.996998] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  137.067335] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  137.327875] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  137.335708] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  137.418636] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  137.573629] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  137.677378] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  137.683747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  137.698406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  137.770804] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  137.777236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  137.807970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  137.851930] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  137.858328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  137.870138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  137.902454] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  137.925262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  137.933300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  138.152494] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  138.158872] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  138.174253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  138.220068] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  138.226400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  138.239881] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  138.385123] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  138.391478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  138.405123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  138.466818] 8021q: adding VLAN 0 to HW filter on device team0
[  138.537408] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  138.543822] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  138.554847] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  138.638312] 8021q: adding VLAN 0 to HW filter on device team0
[  138.678215] 8021q: adding VLAN 0 to HW filter on device team0
[  138.728749] 8021q: adding VLAN 0 to HW filter on device team0
[  139.061772] 8021q: adding VLAN 0 to HW filter on device team0
[  139.113249] 8021q: adding VLAN 0 to HW filter on device team0
[  139.227926] 8021q: adding VLAN 0 to HW filter on device team0
[  139.343587] 8021q: adding VLAN 0 to HW filter on device team0
18:08:53 executing program 3:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000000000002, 0x0)
sendto$inet(r0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0)
close(r0)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x6}, 0xc)

18:08:53 executing program 5:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(&(0x7f00000002c0)=0x1, 0x8, 0x0, &(0x7f0000000300), &(0x7f0000000340), 0x0)

18:08:53 executing program 2:
socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000100))
sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}}, 0x80, &(0x7f0000000380), 0x0, &(0x7f0000000d00)}, 0x0)
mmap(&(0x7f000053b000/0x2000)=nil, 0x2000, 0x0, 0x84132, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000100))
umount2(&(0x7f0000000200)='./file0\x00', 0x4)
unshare(0x60000000)
umount2(&(0x7f0000000040)='./file0\x00', 0x4)

18:08:53 executing program 3:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000000)=""/28, 0x1c)
r1 = getpid()
sched_setaffinity(r1, 0x8, &(0x7f0000d4b000)=0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000100)={0xc1})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x80045300, &(0x7f0000000280))
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000180))
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x0, 0x0)

[  143.834618] IPVS: ftp: loaded support on port[0] = 21
18:08:53 executing program 5:
r0 = socket$inet6(0xa, 0x1, 0x0)
ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070")
sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000540)=@can={0x1d}, 0x80, &(0x7f0000000380), 0x0, &(0x7f00000005c0), 0x0, 0x20040004}, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xffffff78)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc))
r2 = syz_open_pts(r1, 0x0)
readv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/90, 0x5a}], 0x1)

18:08:54 executing program 7:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000279ffc)=0x7fff, 0x4)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x4, &(0x7f0000e4d000)=0x77a1, 0x4)

18:08:54 executing program 4:
r0 = socket$inet(0x2, 0x2, 0x0)
recvmsg(r0, &(0x7f0000001780)={&(0x7f0000000280)=@xdp, 0x80, &(0x7f0000000700), 0x0, &(0x7f0000000780)=""/4096, 0x1000}, 0x0)
bind$inet(r0, &(0x7f000000f000)={0x2, 0x3, @loopback=0x7f000001}, 0x10)
setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f00000000c0)=0x8, 0xa193026f64dde39a)
sendto$inet(r0, &(0x7f0000004000), 0x33f, 0x0, &(0x7f0000002000)={0x2, 0x3}, 0x10)

[  144.194974] IPVS: ftp: loaded support on port[0] = 21
18:08:54 executing program 7:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/mixer\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000200))

18:08:54 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCGPTPEER(r0, 0x5441, 0x0)

18:08:54 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000100)="2f65786500000000000409004bddd9de91be10eebf000e0e281ab42fb897c0d554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a984237d092ef1c00b517026f8bd7f2b0436a4c40960ab3f6bc482809f6bd82caa34799193b35445293b992ab5e44573eef5fd0f423a5cfb386f9cc996c6effde7e603fdeab448671b63bec6e9395aabab4d045f1ad982a2a897fafa710be9e681f3c6a45db03d9e6cb58fbec3d8397005f17d6f7afa102ded1837bcb805600000000000000000000")
pread64(r0, &(0x7f0000000080), 0x0, 0x0)

18:08:54 executing program 7:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='/exe\x00\x00\x00\x00\x00\x00')
r1 = socket$inet6(0xa, 0x3, 0x5)
ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070")
perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x910, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$fiemap(r0, 0x40086602, &(0x7f0000000100)=ANY=[@ANYBLOB='N;\n'])

18:08:54 executing program 6:
syz_emit_ethernet(0x66, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, @mcast2={0xff, 0x10, [], 0x1}, {[], @icmpv6=@time_exceed={0x21, 0x0, 0x0, 0x0, [], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}}}}}}}, 0x0)

18:08:54 executing program 1:
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x5, 0x0, 0x0, 0x0, 0x0, 0x80ffffff}], {0x95}}, &(0x7f0000000000)="73010080001e000000", 0x6, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48)

18:08:54 executing program 7:
getpgrp(0x0)
r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
readv(r0, &(0x7f0000000140)=[{&(0x7f0000006f07)=""/249, 0xff50}], 0x333)
fcntl$setstatus(r0, 0x4, 0x20000000800)
readv(r0, &(0x7f0000a6fff0)=[{&(0x7f0000000180)=""/110, 0xfffffec7}], 0x1000000000000258)
ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8))

18:08:54 executing program 6:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = dup2(r1, r0)
ioctl$sock_FIOGETOWN(r2, 0x8982, &(0x7f0000000000))

18:08:54 executing program 0:
mknod(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8)={0xaa})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000cd8ff4))
epoll_wait(r2, &(0x7f00000000c0)=[{}], 0x1, 0x0)
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000007000))
ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000})

18:08:54 executing program 3:
r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0)
sendfile(r0, r2, &(0x7f0000000000), 0x1f)
dup3(r1, r2, 0x0)

18:08:55 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='/exe\x00\x00\x00\x00\x00\x00')
r1 = socket$inet6(0xa, 0x3, 0x5)
ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070")
perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x910, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$fiemap(r0, 0x40086602, &(0x7f0000000100)=ANY=[@ANYBLOB='N;\n'])

18:08:55 executing program 2:
r0 = socket$inet6(0xa, 0x1, 0x0)
ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070")
request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={0x73, 0x79, 0x7a, 0xffffffffffffffff, 0x7400000000000000}, &(0x7f0000001fee)="520972757374e363757367725669643a4465", 0x0)

18:08:55 executing program 3:
r0 = socket$inet(0x2, 0x6000000000000001, 0x0)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10)
sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10)
sendto$inet(r0, &(0x7f00000000c0)='c', 0x1, 0x0, 0x0, 0x0)

18:08:55 executing program 1:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x5, 0xb, 0x3ff, 0x10000000000001}, 0x2c)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000000), &(0x7f0000000180), 0x2}, 0x20)

18:08:55 executing program 6:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x20000000000002, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0x104)

18:08:55 executing program 4:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x5, 0xb, 0x3ff, 0x10000000000001}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000000), &(0x7f0000000180), 0x100000000000000}, 0x20)

18:08:55 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='/exe\x00\x00\x00\x00\x00\x00')
preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/126, 0x7e}], 0x1, 0x0)

18:08:55 executing program 7:
r0 = socket$inet6(0xa, 0x1, 0x0)
ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070")
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2ca75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d964e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb4316cceb5bae136654e58499da7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470a8")
fcntl$setstatus(r1, 0x4, 0x4000)
preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=""/65, 0x41}], 0x1, 0x0)

18:08:55 executing program 0:
bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x194}, 0x2c)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x5, 0x0, 0x9}], {0x95}}, &(0x7f0000000000)="73010080001e000000", 0x6, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48)

18:08:56 executing program 7:

18:08:56 executing program 5:

18:08:56 executing program 1:

18:08:56 executing program 6:

18:08:56 executing program 4:

18:08:56 executing program 3:

18:08:56 executing program 2:

18:08:56 executing program 5:
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xe78f}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000004, 0x400000000032, 0xffffffffffffffff, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000040), 0x4)

18:08:56 executing program 0:

18:08:56 executing program 7:

18:08:56 executing program 1:

18:08:56 executing program 3:

18:08:56 executing program 6:

18:08:56 executing program 4:

18:08:56 executing program 2:

18:08:56 executing program 7:

18:08:56 executing program 0:

18:08:56 executing program 3:

18:08:56 executing program 6:

18:08:56 executing program 5:

18:08:56 executing program 2:

18:08:56 executing program 1:

18:08:56 executing program 4:

18:08:56 executing program 7:

18:08:56 executing program 0:
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0xffffffffffffffff)
syz_fuse_mount(&(0x7f0000000000)='./file0\x00', 0x1002, 0x0, 0x0, 0x0, 0x0)
open$dir(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0)
write$tun(r0, &(0x7f0000000340)={@val, @val, @mpls={[], @ipv6={0x0, 0x6, "28d0f5", 0x30, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @remote={0xfe, 0x80, [], 0xbb}, {[], @icmpv6=@param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "0cdc1d", 0x0, 0x0, 0x0, @dev={0xfe, 0x80}, @local={0xfe, 0x80, [], 0xaa}}}}}}}, 0x66)

18:08:56 executing program 3:
r0 = socket$inet6(0xa, 0x1, 0x0)
ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070")
r1 = inotify_init()
mkdir(&(0x7f0000000240)='./control\x00', 0x0)
inotify_add_watch(r1, &(0x7f000003a000)='./control\x00', 0x80000d50)
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./control\x00', 0x105000, 0x40)

18:08:56 executing program 6:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = dup2(r1, r0)
ioctl$sock_FIOGETOWN(r2, 0x8982, &(0x7f0000000000))

18:08:56 executing program 2:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x5, 0xb, 0x3ff, 0x10000000000001}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f00000002c0), &(0x7f0000000200)}, 0x20)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000000), &(0x7f0000000180)}, 0x20)

18:08:56 executing program 1:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000000)={{0x7ffffffe}})

18:08:56 executing program 5:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)={0xaa})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
r1 = gettid()
process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f00007a9000)=""/1, 0x1}], 0x1, 0x0)
close(r0)

18:08:56 executing program 4:

18:08:56 executing program 7:

18:08:57 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0x80dc5521, &(0x7f0000000000))

18:08:57 executing program 1:
r0 = socket$inet6(0xa, 0x1, 0x0)
ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070")
r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x0, 0x0)
ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000200))

18:08:57 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x10000000006, 0x4, 0x42, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x6]}, 0x2c)

18:08:57 executing program 2:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = dup2(r1, r0)
getpeername$packet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000100)=0x14)

18:08:57 executing program 6:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='/exe\x00\x00\x00\x00\x00\x00')
ioctl$fiemap(r0, 0x40086602, &(0x7f0000000100)=ANY=[@ANYBLOB='N;\n'])

18:08:57 executing program 3:
r0 = socket$inet6(0xa, 0x1, 0x0)
ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070")
r1 = memfd_create(&(0x7f00000000c0)='#em1#+\x00', 0x0)
write(r1, &(0x7f0000000040)="0600", 0x2)
sendfile(r1, r1, &(0x7f0000001000), 0xfffd)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000007, 0x11, r1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f000002eff0)={0x4fb, &(0x7f0000000000)=[{}]}, 0x10)

18:08:57 executing program 7:
r0 = socket$inet6(0xa, 0x1, 0x0)
ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070")
r1 = memfd_create(&(0x7f00000000c0)='#em1#+\x00', 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x10, r1, 0x0)

18:08:57 executing program 0:
r0 = memfd_create(&(0x7f00000000c0)='#em1#+\x00', 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x13, r0, 0x0)

18:08:57 executing program 4:

18:08:57 executing program 2:

18:08:57 executing program 1:

18:08:57 executing program 6:

18:08:57 executing program 7:

18:08:57 executing program 5:

18:08:57 executing program 0:

18:08:57 executing program 4:

18:08:57 executing program 2:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000000)={{0x7fffffff, 0x3}})

18:08:57 executing program 1:

18:08:57 executing program 7:

18:08:57 executing program 6:

18:08:57 executing program 4:

[  148.014211] ------------[ cut here ]------------
[  148.019030] •
[  148.019113] WARNING: CPU: 1 PID: 6815 at mm/kmsan/kmsan.c:1363 kmsan_get_shadow_address+0xa3/0x1f0
[  148.029927] Kernel panic - not syncing: panic_on_warn set ...
[  148.029927] 
[  148.039579] CPU: 1 PID: 6815 Comm: syz-executor3 Not tainted 4.17.0+ #9
[  148.046335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  148.055712] Call Trace:
[  148.058310]  dump_stack+0x185/0x1d0
[  148.061947]  panic+0x3d0/0x990
[  148.065148]  ? disable_trace_on_warning+0x18/0xd0
[  148.070004]  __warn+0x40f/0x580
[  148.073285]  ? kmsan_get_shadow_address+0xa3/0x1f0
[  148.078218]  report_bug+0x72a/0x880
[  148.081854]  ? kmsan_get_shadow_address+0xa3/0x1f0
[  148.086790]  ? kmsan_get_shadow_address+0xa3/0x1f0
[  148.091728]  do_error_trap+0x1c1/0x620
[  148.095622]  ? vprintk_func+0x517/0x700
[  148.099601]  ? __msan_get_context_state+0x20/0xf0
[  148.104461]  do_invalid_op+0x46/0x50
[  148.108181]  invalid_op+0x14/0x20
[  148.111639] RIP: 0010:kmsan_get_shadow_address+0xa3/0x1f0
[  148.117168] RSP: 0018:ffff8801ab41f450 EFLAGS: 00010082
[  148.122554] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000000
[  148.129821] RDX: ffffc900039a9000 RSI: 0000000000007dad RDI: 0000000000007dae
[  148.137089] RBP: ffff8801ab41f468 R08: 00000022769f2956 R09: 0000000000000000
[  148.144359] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc900127d7070
[  148.151631] R13: ffff88013ee657c0 R14: 0000000000000000 R15: 0000000000004f90
[  148.158923]  __msan_memmove+0x97/0x130
[  148.162822]  bpf_patch_insn_single+0x34c/0x4a0
[  148.167418]  bpf_jit_blind_constants+0x1e7e/0x2200
[  148.172353]  ? kmsan_set_origin_inline+0x6b/0x120
[  148.177199]  ? __msan_poison_alloca+0x15c/0x1d0
[  148.181880]  bpf_int_jit_compile+0x142/0x9670
[  148.186381]  ? __msan_poison_alloca+0x15c/0x1d0
[  148.191060]  ? bpf_convert_filter+0x3803/0x3a10
[  148.195731]  ? kfree+0xcb/0x29e0
[  148.199117]  ? kfree+0x735/0x29e0
[  148.202576]  ? kmsan_set_origin+0x9e/0x160
[  148.206821]  ? bpf_convert_filter+0x3803/0x3a10
[  148.211501]  ? __msan_metadata_ptr_for_load_4+0x10/0x20
[  148.216872]  ? bpf_convert_filter+0x3851/0x3a10
[  148.221551]  ? __bpf_prog_run_args512+0x2d0/0x2d0
[  148.226391]  ? __bpf_prog_run_args512+0x2d0/0x2d0
[  148.231237]  bpf_prog_select_runtime+0x2a5/0xa20
[  148.236005]  bpf_prepare_filter+0x1c4e/0x1cc0
[  148.240507]  __get_filter+0x5b7/0x7d0
[  148.244313]  sk_attach_filter+0x72/0x2e0
[  148.248376]  sock_setsockopt+0x35c1/0x47c0
[  148.252615]  ? __msan_metadata_ptr_for_load_1+0x10/0x20
[  148.257992]  __sys_setsockopt+0x339/0x540
[  148.262144]  __x64_sys_setsockopt+0x15c/0x1c0
[  148.266644]  ? __ia32_sys_recv+0x180/0x180
[  148.270880]  do_syscall_64+0x15b/0x230
[  148.274776]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  148.279967] RIP: 0033:0x455a99
[  148.283153] RSP: 002b:00007f9f69792c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  148.290878] RAX: ffffffffffffffda RBX: 00007f9f697936d4 RCX: 0000000000455a99
[  148.298148] RDX: 000000000000001a RSI: 0000000000000001 RDI: 0000000000000016
[  148.305415] RBP: 000000000072bf48 R08: 0000000000000010 R09: 0000000000000000
[  148.312698] R10: 000000002002eff0 R11: 0000000000000246 R12: 00000000ffffffff
[  148.320055] R13: 00000000004c113d R14: 00000000004d12b0 R15: 0000000000000001
[  148.327846] Dumping ftrace buffer:
[  148.331396]    (ftrace buffer empty)
[  148.335087] Kernel Offset: disabled
[  148.338694] Rebooting in 86400 seconds..