[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 37.987743] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 41.083014] random: sshd: uninitialized urandom read (32 bytes read) [ 41.481924] random: sshd: uninitialized urandom read (32 bytes read) [ 42.653942] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.20' (ECDSA) to the list of known hosts. [ 48.329284] random: sshd: uninitialized urandom read (32 bytes read) 2018/08/17 10:59:02 fuzzer started [ 49.815178] random: cc1: uninitialized urandom read (8 bytes read) 2018/08/17 10:59:05 dialing manager at 10.128.0.26:45509 2018/08/17 10:59:07 syscalls: 1 2018/08/17 10:59:07 code coverage: enabled 2018/08/17 10:59:07 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/08/17 10:59:07 setuid sandbox: enabled 2018/08/17 10:59:07 namespace sandbox: enabled 2018/08/17 10:59:07 fault injection: enabled 2018/08/17 10:59:07 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/08/17 10:59:07 net packed injection: enabled 2018/08/17 10:59:07 net device setup: enabled [ 55.420438] random: crng init done 11:00:46 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x1}, 0x1, 0x0, 0x0, 0x1}, 0x2) 11:00:46 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab0a1c79", 0x4) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)="2f02726f75702e7374617000", 0x2761, 0x0) r2 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) write$cgroup_int(r2, &(0x7f00000002c0), 0x12) sendfile(r1, r2, &(0x7f0000000240), 0xfdef) 11:00:46 executing program 4: 11:00:46 executing program 1: 11:00:46 executing program 5: 11:00:46 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) truncate(&(0x7f00000002c0)='./bus\x00', 0xa00) ioctl$FS_IOC_RESVSP(r1, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x3) sendfile(r1, r2, &(0x7f0000000040), 0x8000fffffffe) 11:00:46 executing program 6: perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$sock_attach_bpf(r0, 0x29, 0x23, &(0x7f0000000280), 0xcc) sendmsg$kcm(r0, &(0x7f0000000b00)={&(0x7f00000007c0)=@in6={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x19}}}, 0x80, &(0x7f0000000a80)}, 0x0) 11:00:46 executing program 3: syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x200, 0x83) syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x20, 0x8000000002) [ 153.260372] IPVS: ftp: loaded support on port[0] = 21 [ 153.340390] IPVS: ftp: loaded support on port[0] = 21 [ 153.340407] IPVS: ftp: loaded support on port[0] = 21 [ 153.370824] IPVS: ftp: loaded support on port[0] = 21 [ 153.414520] IPVS: ftp: loaded support on port[0] = 21 [ 153.442660] IPVS: ftp: loaded support on port[0] = 21 [ 153.491708] IPVS: ftp: loaded support on port[0] = 21 [ 153.494711] IPVS: ftp: loaded support on port[0] = 21 [ 155.781291] ip (4627) used greatest stack depth: 53712 bytes left [ 157.574784] ip (4732) used greatest stack depth: 53688 bytes left [ 157.800469] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.807013] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.860752] device bridge_slave_0 entered promiscuous mode [ 158.145657] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.152142] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.202414] device bridge_slave_1 entered promiscuous mode [ 158.310847] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.317334] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.354900] device bridge_slave_0 entered promiscuous mode [ 158.386881] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.393360] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.434658] device bridge_slave_0 entered promiscuous mode [ 158.484700] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.491278] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.519414] device bridge_slave_0 entered promiscuous mode [ 158.547474] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 158.555435] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.561982] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.596704] device bridge_slave_0 entered promiscuous mode [ 158.621115] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.627630] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.672384] device bridge_slave_0 entered promiscuous mode [ 158.690569] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.697107] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.711312] device bridge_slave_0 entered promiscuous mode [ 158.736139] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.742633] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.779619] device bridge_slave_0 entered promiscuous mode [ 158.787983] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.794445] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.822375] device bridge_slave_1 entered promiscuous mode [ 158.840663] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.847137] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.863256] device bridge_slave_1 entered promiscuous mode [ 158.871360] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.877812] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.889217] device bridge_slave_1 entered promiscuous mode [ 158.909466] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 158.932401] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.938893] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.977134] device bridge_slave_1 entered promiscuous mode [ 158.993953] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.000421] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.015863] device bridge_slave_1 entered promiscuous mode [ 159.029582] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.036115] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.062631] device bridge_slave_1 entered promiscuous mode [ 159.075672] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.082137] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.099264] device bridge_slave_1 entered promiscuous mode [ 159.123501] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 159.133737] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 159.141886] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 159.217846] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 159.250311] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 159.275005] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 159.428102] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 159.451569] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 159.504492] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 159.521296] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 159.530178] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 159.538543] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 159.610288] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 159.655425] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 159.750743] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 160.057774] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 160.303541] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 160.360425] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 160.368602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 160.399127] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 160.414659] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 160.493370] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 160.503570] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 160.520497] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 160.556927] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 160.598364] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 160.685076] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 160.692261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 160.723027] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 160.735769] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 160.835662] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 160.857660] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 160.872812] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 160.918180] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 160.927859] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 160.934958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 161.020091] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 161.027968] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 161.068494] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 161.075451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 161.130723] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 161.137723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 161.183679] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 161.190677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 161.211999] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 161.220892] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 161.227854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 161.268248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 161.308554] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 161.315543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 161.343468] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 161.353754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 161.417134] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 161.426863] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 161.490431] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 161.497403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 161.554776] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 161.563535] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 161.570502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 161.586502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 161.667860] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 161.683537] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 161.699832] ip (4935) used greatest stack depth: 53432 bytes left [ 161.707339] team0: Port device team_slave_0 added [ 161.733803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 162.069803] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 162.109304] team0: Port device team_slave_1 added [ 162.218140] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 162.257965] team0: Port device team_slave_0 added [ 162.291571] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 162.324340] team0: Port device team_slave_0 added [ 162.342655] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 162.360198] team0: Port device team_slave_0 added [ 162.419568] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 162.438268] team0: Port device team_slave_0 added [ 162.459150] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 162.473694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 162.504619] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 162.546960] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 162.566612] team0: Port device team_slave_0 added [ 162.574920] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 162.588330] team0: Port device team_slave_1 added [ 162.612442] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 162.621587] team0: Port device team_slave_0 added [ 162.654945] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 162.662164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 162.680205] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 162.719398] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 162.733011] team0: Port device team_slave_1 added [ 162.754875] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 162.767465] team0: Port device team_slave_1 added [ 162.821135] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 162.831661] team0: Port device team_slave_0 added [ 162.854091] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 162.870588] team0: Port device team_slave_1 added [ 162.878907] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 162.892440] team0: Port device team_slave_1 added [ 162.906948] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 162.923850] team0: Port device team_slave_1 added [ 162.948108] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 162.955477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 162.982025] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 163.018824] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 163.028451] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 163.073438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 163.102605] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 163.111915] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 163.118890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 163.149368] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 163.174339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 163.197298] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 163.229526] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 163.239636] team0: Port device team_slave_1 added [ 163.268633] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 163.276998] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 163.284401] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 163.291384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 163.301460] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 163.319955] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 163.347757] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 163.364414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 163.384339] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 163.400414] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 163.417325] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 163.431294] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 163.441707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 163.458272] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 163.504017] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 163.534755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 163.554240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 163.583560] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 163.599797] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 163.625134] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 163.637985] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 163.672811] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 163.690319] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 163.699984] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 163.707114] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 163.715849] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 163.749461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 163.768342] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 163.797090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 163.826488] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 163.854981] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 163.862844] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 163.870677] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 163.883188] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 163.898063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 163.926484] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 163.956532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 163.974189] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 163.992282] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 164.009948] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 164.024495] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 164.050830] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 164.078632] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 164.087983] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 164.107573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 164.129442] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 164.151202] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 164.168402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 164.191423] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 164.200577] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 164.213338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 164.237875] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 164.259214] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 164.269562] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 164.280655] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 164.307413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 164.334910] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 164.368630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 164.394264] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 164.412499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 164.455475] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 164.482300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 164.506468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 164.519369] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 164.535613] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 164.543840] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 164.553909] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 164.578554] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 164.634553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 164.672409] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 164.696629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 164.739352] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 164.762488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 164.789938] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 164.803512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 164.894908] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 164.903020] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 164.920863] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 167.021236] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.027726] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.034610] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.041179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.133619] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 167.140723] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 167.762863] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.769356] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.776254] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.782707] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.848328] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 167.870108] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.876593] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.883481] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.889987] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.937571] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 167.955949] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.962414] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.969327] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.975794] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.025877] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 168.053221] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.059682] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.066521] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.072963] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.155464] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 168.171226] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 168.190223] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 168.206117] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 168.227444] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 168.251705] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.258150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.264959] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.271404] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.280305] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 168.306604] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.313105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.319936] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.326366] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.387947] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 168.398636] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.405109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.411946] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.418424] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.513992] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 169.195297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 169.219660] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 169.251217] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 179.834775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.234694] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.308151] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.335119] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.381435] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.425590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.456443] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.994580] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 181.297803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.354310] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 181.411212] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 181.433193] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 181.495592] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 181.618651] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 181.633100] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 182.128753] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 182.135006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 182.146329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 182.314670] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 182.515918] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 182.522233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 182.537144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 182.578865] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 182.589829] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 182.604511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 182.640696] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 182.659306] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 182.665522] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 182.711074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 182.735760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 182.765298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 182.816977] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 182.824786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 182.837964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 182.878532] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 182.892448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 182.927503] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 183.444156] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.559601] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 183.565900] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 183.582668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 183.712385] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.768551] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.834756] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.896878] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.933202] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.016015] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.846198] 8021q: adding VLAN 0 to HW filter on device team0 11:01:24 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000480)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(cast5)\x00'}, 0x58) r2 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="ad56b6c504", 0x5) sendmsg$rds(r2, &(0x7f0000001ac0)={&(0x7f0000000080)={0x2, 0x0, @dev}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1, &(0x7f0000001980)}, 0x0) recvfrom(r2, &(0x7f00000001c0)=""/124, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=@nfc, 0x70c000) 11:01:25 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f00000001c0)=ANY=[], 0x0) 11:01:25 executing program 2: r0 = socket(0x40000000002, 0x2000000000000003, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='gre0\x00', 0x10) getsockname(0xffffffffffffffff, &(0x7f0000000800)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000880)=0x80) sendto$unix(r0, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) [ 191.271858] raw_sendmsg: syz-executor2 forgot to set AF_INET. Fix it! 11:01:25 executing program 5: r0 = socket$kcm(0x11, 0x8000002000000003, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="c14380000000400000871fe4ac14140eeb", 0x11}], 0x1}, 0x0) 11:01:25 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000480)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(cast5)\x00'}, 0x58) r2 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="ad56b6c504", 0x5) sendmsg$rds(r2, &(0x7f0000001ac0)={&(0x7f0000000080)={0x2, 0x0, @dev}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000500)=""/4096, 0xc51}], 0x1, &(0x7f0000001980)}, 0x0) recvfrom(r2, &(0x7f00000001c0)=""/124, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=@nfc, 0x70c000) 11:01:25 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) 11:01:25 executing program 2: syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x806, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000100)={0x1, 0x1}) 11:01:25 executing program 1: r0 = epoll_create1(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000a7eff4)) epoll_wait(r0, &(0x7f0000b70000)=[{}], 0x1, 0x800) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000e8c000)={0x7}) 11:01:25 executing program 7: 11:01:26 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={"626f6e643000000000000000bba400", &(0x7f0000000080)=ANY=[@ANYBLOB="01"]}) 11:01:26 executing program 5: syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000100)={0x1}) 11:01:26 executing program 3: 11:01:26 executing program 2: 11:01:26 executing program 1: 11:01:26 executing program 6: 11:01:26 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score\x00') getsockopt$packet_buf(r1, 0x107, 0x16, &(0x7f0000000280)=""/173, &(0x7f0000000080)=0xad) mkdir(&(0x7f000000dff6)='./control\x00', 0x0) 11:01:26 executing program 7: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c2d0252926285717070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) r2 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad56b6c50400aeb995298992ea5400c2", 0x10) sendmmsg$unix(r2, &(0x7f00000000c0)=[{&(0x7f0000003fc0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000640)=[{&(0x7f0000000440)}], 0x1, &(0x7f0000006600)}], 0x1, 0x0) 11:01:26 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x1f1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) 11:01:26 executing program 2: 11:01:26 executing program 1: 11:01:26 executing program 5: 11:01:26 executing program 0: [ 192.508706] input: syz1 as /devices/virtual/input/input5 11:01:26 executing program 5: 11:01:26 executing program 2: [ 192.562198] input: syz1 as /devices/virtual/input/input6 11:01:26 executing program 0: 11:01:26 executing program 6: 11:01:26 executing program 1: 11:01:26 executing program 4: 11:01:26 executing program 5: 11:01:26 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x1f1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) 11:01:26 executing program 2: 11:01:26 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r0, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10) 11:01:27 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'veth1Tto_bond\x00', 0x3805}) close(r0) 11:01:27 executing program 0: mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(&(0x7f0000001600)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000015c0)='ramfs\x00', 0x0, &(0x7f0000001640)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000000c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='msdos\x00', 0x1000, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='tmpfs\x00', 0x0, 0x0) 11:01:27 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000340)="636c6561725f7265667300250d9888ebb88d0f3d45d8000000000000000147138dafbdf4b8cffb4462802699d423796badc105676384e8be07e5cc03000000934984844b574c16025c9f80f90936ffa5ab43accaa6fab334bf5645c42aea1c798c4d1d7474701a36d0f7ec6eb1a2a605000000329b4e6c3f8f9d5082b96cfad4ad0f152beb66db8cd2cd3561108bc2628b4ebe053b4629439855a363d3fffeffff06cbccfb4e3997cc2ac6ae2d7bb820123b0000000000000000000000000000066132445dde9eab8e0f908cd56d74d9814a31c64d9b9f9ad74e1cd6cc1ad009642c50ab40b0f0f65e281a8e609381b90000000000009e9d47a03eacf9f06fef20da3be8dd766615ff3e000000000000000000000000") r1 = syz_open_procfs(0x0, &(0x7f00000001c0)="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") sendfile(r0, r1, &(0x7f00000000c0), 0x1) [ 193.118209] input: syz1 as /devices/virtual/input/input7 11:01:27 executing program 4: r0 = socket$inet6(0xa, 0x1000000000005, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={&(0x7f0000018ff4), 0xc, &(0x7f0000000140)={&(0x7f0000000480)={0x1c, 0x28, 0x1, 0x0, 0x0, {0x1}, [@nested={0x8, 0x0, [@generic="0180"]}]}, 0x1c}}, 0x0) [ 193.163684] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 11:01:27 executing program 5: 11:01:27 executing program 2: [ 193.368593] ================================================================== [ 193.376040] BUG: KMSAN: uninit-value in tipc_nl_compat_doit+0x40b/0x9c0 [ 193.382828] CPU: 1 PID: 6725 Comm: syz-executor4 Not tainted 4.18.0-rc8+ #34 [ 193.390044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 193.399422] Call Trace: [ 193.402044] dump_stack+0x17c/0x1c0 [ 193.405736] kmsan_report+0x188/0x2a0 [ 193.409576] __msan_warning+0x70/0xc0 [ 193.413416] tipc_nl_compat_doit+0x40b/0x9c0 [ 193.417876] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 193.423380] tipc_nl_compat_recv+0x119a/0x2700 [ 193.428007] ? tipc_nl_net_dump+0xc50/0xc50 [ 193.432359] ? tipc_nl_compat_node_dump+0x5a0/0x5a0 [ 193.437429] ? tipc_netlink_compat_stop+0x40/0x40 [ 193.442312] genl_rcv_msg+0x16b1/0x1840 [ 193.446365] netlink_rcv_skb+0x36e/0x5f0 [ 193.450467] ? genl_unbind+0x350/0x350 [ 193.454402] genl_rcv+0x63/0x80 [ 193.457718] netlink_unicast+0x1492/0x1740 [ 193.461999] ? genl_pernet_exit+0x90/0x90 [ 193.466219] netlink_sendmsg+0x114c/0x1350 [ 193.470515] ___sys_sendmsg+0xe32/0x1250 [ 193.474614] ? netlink_getsockopt+0x11c0/0x11c0 [ 193.479330] ? __fget_light+0x53/0x700 [ 193.483259] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 193.488647] ? __fget_light+0x6a3/0x700 [ 193.492671] __x64_sys_sendmsg+0x32d/0x460 [ 193.496958] ? ___sys_sendmsg+0x1250/0x1250 [ 193.500598] input: syz1 as /devices/virtual/input/input8 [ 193.501310] do_syscall_64+0x15b/0x220 [ 193.501345] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 193.501383] RIP: 0033:0x457089 [ 193.519115] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 193.538632] RSP: 002b:00007f21ac7ffc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 193.546375] RAX: ffffffffffffffda RBX: 00007f21ac8006d4 RCX: 0000000000457089 [ 193.553666] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 193.560960] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 193.568252] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 193.575546] R13: 00000000004d4088 R14: 00000000004c8ab0 R15: 0000000000000000 [ 193.582850] [ 193.584501] Uninit was created at: [ 193.588067] kmsan_internal_poison_shadow+0xb8/0x1b0 [ 193.593213] kmsan_kmalloc+0x98/0x100 [ 193.597036] kmsan_slab_alloc+0x10/0x20 [ 193.601038] __kmalloc_node_track_caller+0xb4c/0x11d0 [ 193.606257] __alloc_skb+0x2ce/0x9b0 [ 193.609988] netlink_sendmsg+0x776/0x1350 [ 193.614163] ___sys_sendmsg+0xe32/0x1250 [ 193.618267] __x64_sys_sendmsg+0x32d/0x460 [ 193.622521] do_syscall_64+0x15b/0x220 [ 193.626435] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 193.631637] ================================================================== [ 193.639008] Disabling lock debugging due to kernel taint [ 193.644472] Kernel panic - not syncing: panic_on_warn set ... [ 193.644472] [ 193.651907] CPU: 1 PID: 6725 Comm: syz-executor4 Tainted: G B 4.18.0-rc8+ #34 [ 193.660500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 11:01:27 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x1f1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) 11:01:27 executing program 6: 11:01:27 executing program 6: 11:01:27 executing program 6: [ 193.669874] Call Trace: [ 193.672497] dump_stack+0x17c/0x1c0 [ 193.676156] panic+0x3c3/0x9a0 [ 193.679427] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 193.684915] kmsan_report+0x29e/0x2a0 [ 193.688760] __msan_warning+0x70/0xc0 [ 193.692599] tipc_nl_compat_doit+0x40b/0x9c0 [ 193.697039] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 193.702537] tipc_nl_compat_recv+0x119a/0x2700 [ 193.707145] ? tipc_nl_net_dump+0xc50/0xc50 [ 193.711510] ? tipc_nl_compat_node_dump+0x5a0/0x5a0 11:01:27 executing program 6: [ 193.716571] ? tipc_netlink_compat_stop+0x40/0x40 [ 193.721438] genl_rcv_msg+0x16b1/0x1840 [ 193.725496] netlink_rcv_skb+0x36e/0x5f0 [ 193.729593] ? genl_unbind+0x350/0x350 [ 193.733521] genl_rcv+0x63/0x80 [ 193.736831] netlink_unicast+0x1492/0x1740 [ 193.741112] ? genl_pernet_exit+0x90/0x90 [ 193.745302] netlink_sendmsg+0x114c/0x1350 [ 193.749592] ___sys_sendmsg+0xe32/0x1250 [ 193.753689] ? netlink_getsockopt+0x11c0/0x11c0 [ 193.758396] ? __fget_light+0x53/0x700 [ 193.762317] ? __msan_metadata_ptr_for_load_1+0x10/0x20 11:01:27 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x11, 0x3, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xf, 0xffffffc7}}, &(0x7f0000000040)='GPL\x00', 0x1, 0x99, &(0x7f0000000180)=""/153}, 0x48) [ 193.767889] ? __fget_light+0x6a3/0x700 [ 193.771917] __x64_sys_sendmsg+0x32d/0x460 [ 193.776219] ? ___sys_sendmsg+0x1250/0x1250 [ 193.780567] do_syscall_64+0x15b/0x220 [ 193.784487] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 193.789692] RIP: 0033:0x457089 [ 193.792896] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 193.812403] RSP: 002b:00007f21ac7ffc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 193.820146] RAX: ffffffffffffffda RBX: 00007f21ac8006d4 RCX: 0000000000457089 [ 193.827453] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 193.834819] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 193.842115] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 193.849410] R13: 00000000004d4088 R14: 00000000004c8ab0 R15: 0000000000000000 [ 193.857091] Dumping ftrace buffer: [ 193.860636] (ftrace buffer empty) [ 193.864341] Kernel Offset: disabled [ 193.867968] Rebooting in 86400 seconds..