[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 35.326233] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 36.937369] random: sshd: uninitialized urandom read (32 bytes read) [ 37.389965] random: sshd: uninitialized urandom read (32 bytes read) [ 38.664546] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.54' (ECDSA) to the list of known hosts. [ 44.341987] random: sshd: uninitialized urandom read (32 bytes read) 2018/09/12 22:29:07 fuzzer started [ 45.861157] random: cc1: uninitialized urandom read (8 bytes read) 2018/09/12 22:29:10 dialing manager at 10.128.0.26:33143 2018/09/12 22:29:10 syscalls: 1 2018/09/12 22:29:10 code coverage: enabled 2018/09/12 22:29:10 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/09/12 22:29:10 setuid sandbox: enabled 2018/09/12 22:29:10 namespace sandbox: enabled 2018/09/12 22:29:10 fault injection: enabled 2018/09/12 22:29:10 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/09/12 22:29:10 net packed injection: enabled 2018/09/12 22:29:10 net device setup: enabled [ 49.951924] random: crng init done 22:30:10 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@multicast2, @loopback, 0x0, 0x1, [@dev]}, 0x14) setsockopt$inet_msfilter(r0, 0x0, 0x24, &(0x7f0000000080)={@multicast2, @loopback}, 0x10) 22:30:10 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000000)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000480)=@ethernet={0x307, @remote}, 0x80, &(0x7f0000000280), 0x0, &(0x7f00000013c0)=ANY=[], 0x0, 0x24008055}, 0x20000080) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000380)="6e7230010060a19ef9d2c673d9a1571cb9e1369bcd61ef7e49793ae18712eceb1daa769497800b7fbbd35b170c10751d39aeb660d863e49b8c4f3b3cad48902b5b2d6cfd0abd372c63bcf5d70df3fd4d2e8d443c88c60fd7140fbc0e5637dd82fc3435bed4de5d693c9a781c863e05d8a6f8689a5be29216061f3ff53f8b6b396678e7ba155ef9152d7e43b1eccb2331eb8eb1ed5586dcf8b3b0b999361a44ff2c22c2abbef42dd24eabe6723346a6e46c0499a21442d8d00dcb57f013ff7595edd0ff076930de3675d34117a44eb0e4f832936da44e") r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socket$kcm(0x29, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x801}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x308) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001880)={0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f00000005c0)=""/9, 0x9}, {&(0x7f0000000600)=""/117, 0x75}, {&(0x7f00000006c0)=""/229, 0xe5}], 0x3, &(0x7f0000001840)=""/33, 0x21}, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x2161f870, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='memory.stat\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x4, 0x70, 0x6, 0xbf, 0x7fffffff, 0x4, 0x0, 0x8, 0x18109, 0x8, 0x0, 0x3, 0x84, 0x9, 0x1, 0x3, 0x9, 0x20, 0x3, 0x6, 0x4, 0x7fff, 0xfffffffffffffffc, 0x7fffffff, 0x0, 0x2400, 0x7, 0x7, 0x0, 0x4, 0x0, 0x20, 0x1, 0x0, 0xa0, 0x0, 0xfff, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x4}, 0x4000, 0xfffffffffffffff8, 0x74, 0x3, 0xfff, 0x451, 0x6}, r3, 0x5, r0, 0x5) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.net/syz1\x00', 0x200002, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f0000000300), &(0x7f0000000280)}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={0xffffffffffffffff, 0x3, 0x0, 0xfffffffffffeffff, &(0x7f0000000340)=[0x0], 0x1}, 0x20) 22:30:10 executing program 0: utimes(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000140), 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300), 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) getpid() openat$null(0xffffffffffffff9c, &(0x7f0000000400)='/dev/null\x00', 0x0, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080), 0x10) seccomp(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x58fe4}]}) getpid() stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) getresgid(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000480)) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000c40), 0x14) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000004c0)) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'team0\x00'}) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000200)={{{@in=@local, @in=@loopback}}, {{@in=@broadcast}, 0x0, @in6}}, 0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in=@loopback, @in6=@remote}}, {{@in=@multicast1}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) getresuid(&(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)) getegid() ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000005c0)) getuid() setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000c00), 0x14) syz_execute_func(&(0x7f0000000040)="428055a0876969ef69dc00d9ce41ff0f1837370f38211ac4c19086d9f28fc9410feefa4e2179fbe5e54175450f2e1ac4010d64ac1e5d31a3b706e2989f7f") ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) keyctl$search(0xa, 0x0, &(0x7f0000000040)='keyring\x00', &(0x7f0000000000), 0x0) 22:30:10 executing program 2: ioprio_set$uid(0x3, 0x0, 0x0) fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) seccomp(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x58fe4}]}) syz_execute_func(&(0x7f0000000340)="42805da0690fef69dc0f01ee0dce41ff0fc4a33d062900370f38211ac4410feefa6b2179a6e5e54175450f2e1ac4010d64ac1e5d31a3b770989f7f") ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, &(0x7f00000000c0)) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0), 0x0, 0x0, 0xfffffffffffffffc) syz_emit_ethernet(0x66, &(0x7f0000000640)={@broadcast, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @local}, @gre}}}}, &(0x7f0000000080)) syz_emit_ethernet(0x0, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)) seccomp(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x58fe4}]}) openat$full(0xffffffffffffff9c, &(0x7f0000000480)='/dev/full\x00', 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs, 0x6e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='%*posix_acl_access\x00'}, 0x10) dup(0xffffffffffffffff) add_key(&(0x7f00000001c0)='cifs.idmap\x00', &(0x7f0000000200), &(0x7f0000000240), 0x0, 0xfffffffffffffffe) alarm(0x0) keyctl$setperm(0x5, 0x0, 0x0) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) syz_execute_func(&(0x7f00000005c0)="428055a0aa878769ef69dc00d9ce8441ff0f1837370f38211ac4c19086fbd9f28fc9c90feefa4e2179fbc6f8fe237532c6c62e1a55010d64ac1e5da358b706b7989f7f") ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000240)) geteuid() getresgid(&(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)) add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000400), &(0x7f0000000440), 0x0, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380), 0xc) seccomp(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x58fe4}]}) socketpair(0x0, 0x0, 0x0, &(0x7f0000000280)) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) syz_execute_func(&(0x7f00000001c0)="42805da0c60fef69dc0f01eece73fe19fa380f38211af3f081768cc8000000c481b5e5bc2b0000002167f00fbab204000000ca6b2179dae5e54175450f2e1ac4010d64ac1e5d31a3b744dbe271fb0703") 22:30:10 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp\x00') ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 22:30:10 executing program 4: futex(&(0x7f0000000380), 0x5, 0x0, &(0x7f00000003c0)={0x77359400}, &(0x7f00000005c0), 0x0) seccomp(0x0, 0x0, &(0x7f0000000300)) openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$KDGKBLED(0xffffffffffffffff, 0x4b64, &(0x7f0000000140)) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f00000001c0)=0x4) pipe(&(0x7f0000000200)) fstat(0xffffffffffffffff, &(0x7f0000000800)) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000480), 0x4) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000f00), 0x0, 0x0, &(0x7f0000003280)) clock_gettime(0x0, &(0x7f0000000380)) futex(&(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000300), &(0x7f00000001c0), 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/fuse\x00', 0x2, 0x0) splice(0xffffffffffffffff, &(0x7f0000000340), 0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x0) seccomp(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4000000000058fe4}]}) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000040)) syz_execute_func(&(0x7f0000002440)="428055a0726969ef69dc00d99069203737c3397c2a060f38211a40a564a70f157a9e400f01efe5e5417545c462010d42002e1a1a3ef0f6585501ee31a3b786e2989fc4227992749f55") syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') munlock(&(0x7f0000fea000/0x14000)=nil, 0x14000) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x4) memfd_create(&(0x7f0000000240)='posix_acl_accessmime_typekeyring\x00', 0x0) accept4$inet(0xffffffffffffffff, &(0x7f00000014c0)={0x2, 0x0, @remote}, &(0x7f0000001500)=0x10, 0x0) dup(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000140)) fstat(0xffffffffffffffff, &(0x7f00000002c0)) [ 108.306518] IPVS: ftp: loaded support on port[0] = 21 [ 108.320708] IPVS: ftp: loaded support on port[0] = 21 [ 108.398893] IPVS: ftp: loaded support on port[0] = 21 [ 108.420393] IPVS: ftp: loaded support on port[0] = 21 [ 108.420436] IPVS: ftp: loaded support on port[0] = 21 [ 108.476718] IPVS: ftp: loaded support on port[0] = 21 [ 110.508746] ip (4438) used greatest stack depth: 53912 bytes left [ 110.645413] ip (4448) used greatest stack depth: 53768 bytes left [ 111.151621] ip (4475) used greatest stack depth: 53752 bytes left [ 111.582253] ip (4502) used greatest stack depth: 53496 bytes left [ 112.157403] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.163939] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.180733] device bridge_slave_0 entered promiscuous mode [ 112.225268] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.231863] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.261590] device bridge_slave_0 entered promiscuous mode [ 112.275617] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.282090] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.315536] device bridge_slave_0 entered promiscuous mode [ 112.343330] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.349902] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.381945] device bridge_slave_0 entered promiscuous mode [ 112.402426] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.408939] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.434702] device bridge_slave_1 entered promiscuous mode [ 112.455851] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.462339] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.478492] device bridge_slave_0 entered promiscuous mode [ 112.490633] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.497116] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.520210] device bridge_slave_0 entered promiscuous mode [ 112.548125] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.554623] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.578902] device bridge_slave_1 entered promiscuous mode [ 112.595504] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.602021] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.636345] device bridge_slave_1 entered promiscuous mode [ 112.660653] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.667181] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.696580] device bridge_slave_1 entered promiscuous mode [ 112.712706] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 112.732233] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.738710] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.769683] device bridge_slave_1 entered promiscuous mode [ 112.785438] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.791918] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.810890] device bridge_slave_1 entered promiscuous mode [ 112.843168] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 112.852889] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 112.860677] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 112.911158] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 113.013621] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 113.063736] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 113.071680] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 113.100052] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 113.144354] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 113.249969] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 113.296904] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 113.308905] ip (4583) used greatest stack depth: 53240 bytes left [ 113.537873] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 113.748362] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 113.792876] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 113.863905] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 113.876503] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 113.923032] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 114.046391] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 114.090428] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 114.125910] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 114.148679] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 114.163901] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 114.178808] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 114.187879] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 114.241269] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 114.248261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 114.269656] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 114.397289] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 114.405209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 114.436017] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 114.442982] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 114.472165] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 114.479184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 114.513488] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 114.520447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 114.539135] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 114.546142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 114.612233] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 114.619250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 114.644629] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 114.652446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 114.712910] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 114.719911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 114.794972] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 114.801989] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 115.012496] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 115.031084] team0: Port device team_slave_0 added [ 115.258979] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 115.287030] team0: Port device team_slave_1 added [ 115.324605] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 115.346166] team0: Port device team_slave_0 added [ 115.364743] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 115.374486] team0: Port device team_slave_0 added [ 115.403602] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 115.433081] team0: Port device team_slave_0 added [ 115.462182] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 115.476604] team0: Port device team_slave_0 added [ 115.487119] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 115.501571] team0: Port device team_slave_0 added [ 115.542461] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 115.560452] team0: Port device team_slave_1 added [ 115.570745] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 115.578908] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 115.600242] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 115.629245] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 115.648382] team0: Port device team_slave_1 added [ 115.679181] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 115.695931] team0: Port device team_slave_1 added [ 115.724252] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 115.745921] team0: Port device team_slave_1 added [ 115.787041] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 115.803210] team0: Port device team_slave_1 added [ 115.810609] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 115.825290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 115.852725] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 115.875875] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 115.883834] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 115.916153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 115.955552] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 115.964914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 115.979999] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 116.006182] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 116.013947] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 116.028392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 116.050254] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 116.065828] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 116.078359] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 116.107074] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 116.114234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 116.138610] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 116.158698] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 116.167074] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 116.191652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 116.207413] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 116.214362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 116.239236] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 116.297942] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 116.306895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 116.329301] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 116.344230] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 116.355875] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 116.378200] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 116.394727] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 116.417138] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 116.425369] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 116.433532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 116.461542] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 116.490548] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 116.506867] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 116.525945] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 116.541252] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 116.572716] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 116.585040] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 116.601328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 116.619527] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 116.634611] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 116.656182] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 116.663605] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 116.677191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 116.715701] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 116.727317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 116.744988] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 116.767337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 116.786169] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 116.826551] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 116.840064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 116.860743] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 116.869469] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 116.881385] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 116.906553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 116.930160] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 116.959991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 116.987403] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 117.005364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 117.018876] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 117.037891] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 117.046887] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 117.081471] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 117.127304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 117.162399] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 117.199903] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 119.298023] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.304547] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.311525] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.317998] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.365063] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 119.373521] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 119.399207] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.405684] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.412537] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.418985] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.440637] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 119.461854] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.468447] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.475420] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.481916] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.539352] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 119.618030] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.624558] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.631472] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.637958] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.701523] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 119.750531] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.757051] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.763983] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.770466] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.815064] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 120.063378] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.069886] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.076771] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.083282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.093012] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 120.404883] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 120.420967] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 120.450178] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 120.482126] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 120.502158] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 128.968851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.146085] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.197101] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.535614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.579439] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.848191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.901737] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 130.056103] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 130.129268] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 130.309022] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 130.451225] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 130.767933] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 130.813451] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 130.819744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 130.829453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 130.947844] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 130.954126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 130.965948] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 131.065640] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 131.071949] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 131.087072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 131.137642] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 131.144310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 131.157527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 131.428265] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 131.434601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 131.446847] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 131.588221] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 131.594565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 131.611223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 131.770643] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.894705] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.999127] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.168749] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.332055] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.483420] 8021q: adding VLAN 0 to HW filter on device team0 22:30:40 executing program 3: ioprio_set$uid(0x0, 0x0, 0x3) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000140)) set_robust_list(&(0x7f0000000580)={&(0x7f0000000540)={&(0x7f0000000500)}}, 0xfffffffffffffd9c) fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f00000001c0)={0x0, @broadcast, @multicast1}, &(0x7f0000000240)=0xc) gettid() seccomp(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x58fe4}]}) syz_execute_func(&(0x7f0000000300)="42805da0ca24a3a3ef69dc0f01ee0dce41cbc4c1965382be000000290028770f80a76be53d237342d85d096b2179660f38302fbae5e5e575440f2e581a010d64ac1e5d31a3b7e29873bb7f") 22:30:40 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@multicast2, @loopback, 0x0, 0x1, [@dev]}, 0x14) setsockopt$inet_msfilter(r0, 0x0, 0x24, &(0x7f0000000080)={@multicast2, @loopback}, 0x10) 22:30:40 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@multicast2, @loopback, 0x0, 0x1, [@dev]}, 0x14) setsockopt$inet_msfilter(r0, 0x0, 0x24, &(0x7f0000000080)={@multicast2, @loopback}, 0x10) 22:30:41 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@multicast2, @loopback, 0x0, 0x1, [@dev]}, 0x14) setsockopt$inet_msfilter(r0, 0x0, 0x24, &(0x7f0000000080)={@multicast2, @loopback}, 0x10) 22:30:41 executing program 5: futex(&(0x7f0000000380), 0x3, 0x0, &(0x7f00000003c0), &(0x7f00000005c0), 0x0) seccomp(0x0, 0x0, &(0x7f0000000300)) openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$KDGKBLED(0xffffffffffffffff, 0x4b64, &(0x7f0000000140)) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f00000001c0)=0x4) pipe(&(0x7f0000000200)) fstat(0xffffffffffffffff, &(0x7f0000000040)) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000480), 0x4) ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, &(0x7f00000006c0)) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x0, &(0x7f0000003280)) clock_gettime(0x0, &(0x7f0000000380)) futex(&(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000300), &(0x7f00000001c0), 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/fuse\x00', 0x2, 0x0) splice(0xffffffffffffffff, &(0x7f0000000340), 0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x0) seccomp(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4000000000058fe4}]}) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000040)) syz_execute_func(&(0x7f0000002440)="428055a0726969ef69dc00d99069203737c3397c2a060f38211a40a564a70f157a9e400f01efe5e5417545c462010d42002e1a1a3ef0f6585501ee31a3b786e2989fc4227992749f55") syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ppoll(&(0x7f00000004c0), 0x0, &(0x7f0000000500), &(0x7f0000000540), 0x8) syz_execute_func(&(0x7f0000000240)="428055a08e6969ef69dc00d990c841ff0f1837c4c3397c2a060f38211a40a5c19086d9f28fc9410feefae5e54175455d0f2e1a1a010d64ac1e5d31a3b786e2989f7f") 22:30:41 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x24, &(0x7f0000000080)={@multicast2, @loopback}, 0x10) 22:30:41 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x24, &(0x7f0000000080)={@multicast2, @loopback}, 0x10) 22:30:41 executing program 3: keyctl$set_reqkey_keyring(0x10, 0x1) seccomp(0x0, 0x0, &(0x7f0000000100)) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) openat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) dup(0xffffffffffffff9c) ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, &(0x7f0000000540)) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000600)=""/190) add_key$keyring(&(0x7f0000000500)='keyring\x00', &(0x7f00000005c0), 0x0, 0x0, 0xfffffffffffffffd) keyctl$read(0xb, 0x0, &(0x7f0000000480)=""/68, 0x44) add_key(&(0x7f0000000340)='cifs.spnego\x00', &(0x7f0000000380), &(0x7f00000007c0), 0x0, 0x0) request_key(&(0x7f0000000080)='rxrpc\x00', &(0x7f00000001c0), &(0x7f0000000700)='team0\x00', 0x0) seccomp(0x0, 0x0, &(0x7f0000000100)) set_tid_address(&(0x7f0000000440)) perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x199, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000140), 0x4) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000180)={'bcsf0\x00', @ifru_ivalue}) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000740)}, 0x10) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000280)) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000580), 0x4) seccomp(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x58fe4}]}) syz_execute_func(&(0x7f0000000840)="42805da0bd0fef69dc0f01eece73fe19fa380f38211af3f0817e768cc80000000081b5e5bc2b0000002167f00fbab204000000ca6b2179dae5e54175450f2e1ac4010d64ac1e5d31a3b74472e671fb0703") openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='memory.current\x00', 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000300)) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) mincore(&(0x7f0000ffe000/0x1000)=nil, 0x1000, &(0x7f0000000400)=""/35) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) getpgrp(0x0) getresuid(&(0x7f0000000a00), &(0x7f0000000a40), &(0x7f0000000a80)) fstat(0xffffffffffffffff, &(0x7f0000000ac0)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000b40)={{{@in=@rand_addr, @in6=@local}}, {{@in=@loopback}, 0x0, @in=@rand_addr}}, &(0x7f0000000c40)=0xe8) getresgid(&(0x7f0000000c80), &(0x7f0000000cc0), &(0x7f0000000d00)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000d40)={{{@in=@remote, @in6}}, {{@in=@rand_addr}, 0x0, @in6=@remote}}, &(0x7f0000000e40)=0xe8) stat(&(0x7f0000000e80)='\x00', &(0x7f0000000ec0)) fstat(0xffffffffffffffff, &(0x7f0000000f40)) fstat(0xffffffffffffffff, &(0x7f0000000fc0)) getuid() getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000004b40), &(0x7f0000004b80)=0xc) 22:30:41 executing program 0: utimes(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000140), 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300), 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) getpid() openat$null(0xffffffffffffff9c, &(0x7f0000000400)='/dev/null\x00', 0x0, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080), 0x10) seccomp(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x58fe4}]}) getpid() stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) getresgid(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000480)) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000c40), 0x14) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000004c0)) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'team0\x00'}) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000200)={{{@in=@local, @in=@loopback}}, {{@in=@broadcast}, 0x0, @in6}}, 0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in=@loopback, @in6=@remote}}, {{@in=@multicast1}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) getresuid(&(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)) getegid() ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000005c0)) getuid() setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000c00), 0x14) syz_execute_func(&(0x7f0000000040)="428055a0876969ef69dc00d9ce41ff0f1837370f38211ac4c19086d9f28fc9410feefa4e2179fbe5e54175450f2e1ac4010d64ac1e5d31a3b706e2989f7f") ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) keyctl$search(0xa, 0x0, &(0x7f0000000040)='keyring\x00', &(0x7f0000000000), 0x0) 22:30:41 executing program 5: renameat2(0xffffffffffffffff, &(0x7f0000001840)='./file0\x00', 0xffffffffffffffff, &(0x7f0000001900)='./file0\x00', 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000140)) r1 = eventfd(0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000001880)) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) 22:30:41 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x24, &(0x7f0000000080)={@multicast2, @loopback}, 0x10) 22:30:42 executing program 4: open(&(0x7f00000000c0)='./file0\x00', 0x80000000004d40, 0x1000000000040) setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)=@known='security.capability\x00', &(0x7f0000000140), 0x0, 0x0) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100), &(0x7f0000000300)) 22:30:42 executing program 2: ioprio_set$uid(0x3, 0x0, 0x0) fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) seccomp(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x58fe4}]}) syz_execute_func(&(0x7f0000000340)="42805da0690fef69dc0f01ee0dce41ff0fc4a33d062900370f38211ac4410feefa6b2179a6e5e54175450f2e1ac4010d64ac1e5d31a3b770989f7f") ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, &(0x7f00000000c0)) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0), 0x0, 0x0, 0xfffffffffffffffc) syz_emit_ethernet(0x66, &(0x7f0000000640)={@broadcast, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @local}, @gre}}}}, &(0x7f0000000080)) syz_emit_ethernet(0x0, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)) seccomp(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x58fe4}]}) openat$full(0xffffffffffffff9c, &(0x7f0000000480)='/dev/full\x00', 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs, 0x6e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='%*posix_acl_access\x00'}, 0x10) dup(0xffffffffffffffff) add_key(&(0x7f00000001c0)='cifs.idmap\x00', &(0x7f0000000200), &(0x7f0000000240), 0x0, 0xfffffffffffffffe) alarm(0x0) keyctl$setperm(0x5, 0x0, 0x0) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) syz_execute_func(&(0x7f00000005c0)="428055a0aa878769ef69dc00d9ce8441ff0f1837370f38211ac4c19086fbd9f28fc9c90feefa4e2179fbc6f8fe237532c6c62e1a55010d64ac1e5da358b706b7989f7f") ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000240)) geteuid() getresgid(&(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)) add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000400), &(0x7f0000000440), 0x0, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380), 0xc) seccomp(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x58fe4}]}) socketpair(0x0, 0x0, 0x0, &(0x7f0000000280)) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) syz_execute_func(&(0x7f00000001c0)="42805da0c60fef69dc0f01eece73fe19fa380f38211af3f081768cc8000000c481b5e5bc2b0000002167f00fbab204000000ca6b2179dae5e54175450f2e1ac4010d64ac1e5d31a3b744dbe271fb0703") 22:30:42 executing program 5: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace$peek(0x2, r1, &(0x7f00000000c0)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={"79616d300001178b00", 0x4013}) ptrace$setregset(0x4209, r1, 0x20000004, &(0x7f0000000100)={&(0x7f0000000040)}) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000800)=@broute={'broute\x00', 0x20, 0x6, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000140], 0x0, &(0x7f0000000040), &(0x7f0000000140)=ANY=[]}, 0x78) 22:30:42 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@multicast2, @loopback, 0x0, 0x1, [@dev]}, 0x14) setsockopt$inet_msfilter(r0, 0x0, 0x24, &(0x7f0000000080)={@multicast2, @loopback}, 0x10) [ 139.299623] ================================================================== [ 139.307072] BUG: KMSAN: kernel-infoleak in _copy_to_user+0x15d/0x1f0 [ 139.313590] CPU: 0 PID: 5960 Comm: syz-executor5 Not tainted 4.19.0-rc3+ #45 [ 139.320790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 139.330160] Call Trace: [ 139.332778] dump_stack+0x14b/0x190 [ 139.336448] kmsan_report+0x183/0x2b0 [ 139.340302] kmsan_internal_check_memory+0xfe/0x1f0 [ 139.345359] kmsan_copy_to_user+0x73/0xb0 [ 139.349541] _copy_to_user+0x15d/0x1f0 [ 139.353470] copy_siginfo_to_user+0x81/0x130 [ 139.357915] ptrace_request+0x2278/0x2680 [ 139.362086] ? __msan_poison_alloca+0x173/0x1f0 [ 139.366789] ? _raw_spin_lock_irqsave+0x41/0xe0 [ 139.371489] ? wait_task_inactive+0x397/0x990 [ 139.376029] ? kmsan_set_origin_inline+0x6b/0x120 [ 139.380939] arch_ptrace+0xbdd/0x11a0 [ 139.384775] ? ptrace_check_attach+0x182/0x5b0 [ 139.389388] __se_sys_ptrace+0x2a2/0x7e0 [ 139.393480] __x64_sys_ptrace+0x56/0x70 [ 139.397481] do_syscall_64+0xb8/0x100 [ 139.401300] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 139.406506] RIP: 0033:0x4572d9 [ 139.409711] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 139.428629] RSP: 002b:00007fd106967c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000065 [ 139.436355] RAX: ffffffffffffffda RBX: 00007fd1069686d4 RCX: 00000000004572d9 [ 139.443633] RDX: 0000000020000004 RSI: 0000000000000001 RDI: 0000000000004209 [ 139.450913] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 139.458191] R10: 0000000020000100 R11: 0000000000000246 R12: 00000000ffffffff [ 139.465466] R13: 00000000004d4478 R14: 00000000004c8d0b R15: 0000000000000000 [ 139.472762] [ 139.474401] Local variable description: ----kiov@ptrace_request [ 139.480459] Variable was created at: [ 139.484196] ptrace_request+0x19f/0x2680 [ 139.488271] arch_ptrace+0xbdd/0x11a0 [ 139.492069] [ 139.493704] Bytes 0-15 of 128 are uninitialized [ 139.498376] Memory access starts at ffff88014401fca0 [ 139.503474] ================================================================== [ 139.510834] Disabling lock debugging due to kernel taint [ 139.516290] Kernel panic - not syncing: panic_on_warn set ... [ 139.516290] [ 139.523678] CPU: 0 PID: 5960 Comm: syz-executor5 Tainted: G B 4.19.0-rc3+ #45 [ 139.532266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 139.541622] Call Trace: [ 139.544238] dump_stack+0x14b/0x190 [ 139.547922] panic+0x35d/0x8cb [ 139.551153] ? arch_ptrace+0xbdd/0x11a0 [ 139.555153] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 139.560624] kmsan_report+0x2a8/0x2b0 [ 139.564455] kmsan_internal_check_memory+0xfe/0x1f0 [ 139.569499] kmsan_copy_to_user+0x73/0xb0 [ 139.573666] _copy_to_user+0x15d/0x1f0 [ 139.577584] copy_siginfo_to_user+0x81/0x130 [ 139.582026] ptrace_request+0x2278/0x2680 [ 139.586199] ? __msan_poison_alloca+0x173/0x1f0 [ 139.590895] ? _raw_spin_lock_irqsave+0x41/0xe0 [ 139.595582] ? wait_task_inactive+0x397/0x990 [ 139.600103] ? kmsan_set_origin_inline+0x6b/0x120 [ 139.604994] arch_ptrace+0xbdd/0x11a0 [ 139.608820] ? ptrace_check_attach+0x182/0x5b0 [ 139.613433] __se_sys_ptrace+0x2a2/0x7e0 [ 139.617524] __x64_sys_ptrace+0x56/0x70 [ 139.621519] do_syscall_64+0xb8/0x100 [ 139.625344] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 139.630544] RIP: 0033:0x4572d9 [ 139.633750] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 139.652681] RSP: 002b:00007fd106967c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000065 [ 139.660415] RAX: ffffffffffffffda RBX: 00007fd1069686d4 RCX: 00000000004572d9 [ 139.667693] RDX: 0000000020000004 RSI: 0000000000000001 RDI: 0000000000004209 [ 139.674970] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 139.682266] R10: 0000000020000100 R11: 0000000000000246 R12: 00000000ffffffff [ 139.689546] R13: 00000000004d4478 R14: 00000000004c8d0b R15: 0000000000000000 [ 139.697147] Kernel Offset: disabled [ 139.700804] Rebooting in 86400 seconds..