[ 55.908883] audit: type=1800 audit(1538454360.896:27): pid=4562 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 57.072486] random: sshd: uninitialized urandom read (32 bytes read) [ 57.297009] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. [ 58.097555] random: sshd: uninitialized urandom read (32 bytes read) Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 59.880594] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.0' (ECDSA) to the list of known hosts. [ 65.806006] random: sshd: uninitialized urandom read (32 bytes read) 2018/10/02 04:26:11 fuzzer started [ 68.703081] random: cc1: uninitialized urandom read (8 bytes read) 2018/10/02 04:26:15 dialing manager at 10.128.0.26:44307 2018/10/02 04:26:15 syscalls: 1 2018/10/02 04:26:15 code coverage: enabled 2018/10/02 04:26:15 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/10/02 04:26:15 setuid sandbox: enabled 2018/10/02 04:26:15 namespace sandbox: enabled 2018/10/02 04:26:15 Android sandbox: /sys/fs/selinux/policy does not exist 2018/10/02 04:26:15 fault injection: enabled 2018/10/02 04:26:15 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/10/02 04:26:15 net packed injection: enabled 2018/10/02 04:26:15 net device setup: enabled [ 73.550746] random: crng init done 04:28:30 executing program 0: [ 206.366783] IPVS: ftp: loaded support on port[0] = 21 04:28:32 executing program 1: [ 208.483393] IPVS: ftp: loaded support on port[0] = 21 [ 209.494820] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.501406] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.511760] device bridge_slave_0 entered promiscuous mode [ 209.758432] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.764987] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.776749] device bridge_slave_1 entered promiscuous mode [ 209.988874] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 210.185464] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready 04:28:35 executing program 2: [ 211.003987] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 211.280058] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 211.580893] IPVS: ftp: loaded support on port[0] = 21 [ 211.640391] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 211.647555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 211.902406] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 211.912896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 212.907851] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 212.935406] team0: Port device team_slave_0 added [ 213.201508] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.208166] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.217319] device bridge_slave_0 entered promiscuous mode [ 213.311294] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 213.321061] team0: Port device team_slave_1 added [ 213.500007] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 213.509573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 213.524797] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 213.581316] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.587922] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.622151] device bridge_slave_1 entered promiscuous mode [ 213.764425] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 213.771750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 213.785784] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready 04:28:38 executing program 3: [ 213.924148] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 214.137518] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 214.145667] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 214.165734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 214.316863] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 214.565362] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 214.573175] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 214.590068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 215.256363] IPVS: ftp: loaded support on port[0] = 21 [ 215.546294] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 215.923456] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 216.299731] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 216.306935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 216.667736] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 216.674932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 217.664232] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.670795] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.705799] device bridge_slave_0 entered promiscuous mode [ 217.840107] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 217.858782] team0: Port device team_slave_0 added [ 218.097318] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.103872] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.153302] device bridge_slave_1 entered promiscuous mode [ 218.287948] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 218.317523] team0: Port device team_slave_1 added [ 218.476348] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready 04:28:43 executing program 4: [ 218.727222] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 218.734528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 218.761590] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 218.887042] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 218.931491] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.938099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.945160] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.951808] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.038861] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 219.259353] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 219.266783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 219.283991] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 219.653129] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 219.788863] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 219.796916] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 219.812943] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 220.180174] IPVS: ftp: loaded support on port[0] = 21 [ 220.225228] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 220.233278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 220.252889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 220.340608] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 220.889237] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 221.352087] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 221.359187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 221.815867] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 221.823014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 222.344679] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.351317] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.389382] device bridge_slave_0 entered promiscuous mode [ 222.839829] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.846369] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.880201] device bridge_slave_1 entered promiscuous mode [ 223.188927] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 223.211372] team0: Port device team_slave_0 added [ 223.292124] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 223.663523] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 223.682274] team0: Port device team_slave_1 added [ 223.720541] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 224.159174] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 224.168182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 224.190813] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 04:28:49 executing program 5: [ 224.616723] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 224.623896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 224.652379] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 225.107935] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 225.118541] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 225.134958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 225.219040] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 225.633727] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 225.641342] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 225.651364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 225.669346] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.675934] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.683003] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.689534] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.701586] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 225.716457] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 225.742151] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 226.026405] IPVS: ftp: loaded support on port[0] = 21 [ 226.176818] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 226.183909] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 226.613263] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 226.620441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 227.741224] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.747875] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.791995] device bridge_slave_0 entered promiscuous mode [ 228.043599] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 228.057566] team0: Port device team_slave_0 added [ 228.246103] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.252778] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.301501] device bridge_slave_1 entered promiscuous mode [ 228.459713] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 228.471376] team0: Port device team_slave_1 added [ 228.717813] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 228.965070] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 228.972169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 228.986593] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 229.169934] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 229.390259] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 229.397800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 229.411405] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 229.791468] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 229.799482] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 229.832038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 230.273832] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 230.281803] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 230.292495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 230.575348] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 231.008152] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.014774] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.021905] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.028953] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.080875] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 231.103398] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 231.545446] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 231.552879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 231.778984] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 232.052547] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 232.060278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 233.281549] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 233.301320] team0: Port device team_slave_0 added [ 233.760150] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 233.784448] team0: Port device team_slave_1 added [ 234.081891] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.088540] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.134216] device bridge_slave_0 entered promiscuous mode [ 234.226874] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 234.234142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 234.258884] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 234.489225] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.495855] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.510183] device bridge_slave_1 entered promiscuous mode [ 234.744249] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 234.751408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 234.768586] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 234.952428] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 235.110415] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 235.118799] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 235.141403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 235.474543] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 235.582417] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 235.590766] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 235.609672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 235.707585] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.714225] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.721289] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.727846] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.752013] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 235.821257] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 236.854796] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 237.314689] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 237.827200] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 237.834341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 238.064885] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.309773] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 238.316867] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 239.800458] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 239.822248] team0: Port device team_slave_0 added [ 239.860283] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 240.293210] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 240.318298] team0: Port device team_slave_1 added [ 240.735916] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 240.742999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 240.756703] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 240.862990] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.869564] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.876685] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.883204] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.950169] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 241.211130] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 241.218374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 241.229136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 241.631329] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 241.638012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 241.650418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 241.697057] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 241.709857] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 241.741078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 241.774560] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 242.194914] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 242.202844] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 242.221188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 243.510544] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.820544] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.519021] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 247.353567] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.360294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.367346] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.373868] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.450768] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 247.457591] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 248.360771] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 248.367290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 248.377470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 250.154033] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.307124] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.118039] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 253.970020] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 253.976395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 253.989267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 04:29:19 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r1, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x0, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000140)=[{{&(0x7f0000000200)=@can, 0x80, &(0x7f00000000c0)=[{&(0x7f0000002a40)=""/4096, 0x1000}], 0x1, &(0x7f0000003b00)=""/82, 0x52}}], 0x1, 0x0, &(0x7f0000000080)={0x77359400}) [ 254.571617] hrtimer: interrupt took 109708 ns [ 255.247933] 8021q: adding VLAN 0 to HW filter on device bond0 04:29:20 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ppoll(&(0x7f0000000140)=[{r0}], 0x1, &(0x7f00000001c0), &(0x7f0000000200), 0x8) [ 255.952885] 8021q: adding VLAN 0 to HW filter on device team0 04:29:21 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) 04:29:21 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000000)) setxattr$security_ima(&(0x7f0000000040)='./bus\x00', &(0x7f00000001c0)='security.ima\x00', &(0x7f0000000200)=@v2, 0xa, 0x1) r0 = open(&(0x7f0000000140)='./bus\x00', 0x40, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000100)="000000008c00000001000000008000", 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2) syz_genetlink_get_family_id$team(&(0x7f00000002c0)='team\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000001200)=""/4096, 0xfffffe19}], 0x1) accept$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000480)=0x14) 04:29:22 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f0000000080)) [ 257.243822] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready 04:29:22 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x200, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000040)=[0x4]) 04:29:23 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x0, @loopback}, {0x2, 0x0, @loopback}, {0x2, 0x0, @remote}, 0x27}) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x93, "cecfcacafc7f81e0c348518a1339bc903e8113f19d2700dd9762d5649b2f5659dded5bd0a5136a00c8d05fa4316e62997e8cadfd3224fac1c0d57d57cf347f8bc0f87cf343e67b84329ac208ddaa58fc15800e7783430e8fd69cdb47619d12df40f50a42537268c9ac0d83690d764a9af6a1ce86531d7e5dbd5acd16bbaa3955e04d34f27753c4ea65445d3e9c179ce5ad69f3"}, &(0x7f00000000c0)=0xb7) [ 259.109027] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 259.115529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 259.128298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 260.219680] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.644011] 8021q: adding VLAN 0 to HW filter on device team0 04:29:26 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000180), 0xc, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400060009000000fcffffff000000000000000014000100ff01000000000000000000000000000114000200ff020000000000000000000000000001"], 0x1}}, 0x0) [ 261.833818] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 262.892762] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 262.899326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 262.915011] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 264.209047] 8021q: adding VLAN 0 to HW filter on device team0 04:29:29 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)={0x400000000007, 0x80000001, 0x0, 0x0, 0x10}, 0x2c) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/syz0\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x7d4, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000ec0)={&(0x7f0000000e80)='./file0\x00'}, 0xffffffcb) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00'}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x3, 0x70, 0x8, 0x0, 0x81, 0x0, 0x0, 0x3, 0x0, 0xd, 0x0, 0xc, 0x0, 0x2, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7fffffff, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x81}, 0x0, 0x0, 0xffffffffffffffff, 0x0) gettid() r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0x297ef) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000340)) recvmsg$kcm(r0, &(0x7f0000005e00)={&(0x7f0000001500)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000005c80)=[{&(0x7f0000001680)=""/161, 0xa1}, {&(0x7f0000003a40)=""/212, 0xd4}, {&(0x7f0000001740)=""/27, 0x1b}, {&(0x7f0000003b40)=""/4096, 0x1000}, {&(0x7f0000004b40)=""/4096, 0x1000}, {&(0x7f0000005bc0)=""/45, 0x2d}, {&(0x7f0000005c00)=""/73, 0x49}], 0x7, &(0x7f0000005d40)=""/135, 0x87}, 0x0) [ 265.006110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.956395] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 266.833599] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 266.840193] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 266.853849] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 04:29:32 executing program 3: r0 = open$dir(&(0x7f0000001240)='./file0\x00', 0x400000002c2, 0x0) mlockall(0x2) r1 = dup(r0) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000540)='F', 0x1}], 0x1) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x10, r1, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3, 0x10, r1, 0x0) [ 267.753559] 8021q: adding VLAN 0 to HW filter on device team0 04:29:34 executing program 4: 04:29:35 executing program 5: 04:29:35 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)={0x400000000007, 0x80000001, 0x0, 0xe0ef, 0x10}, 0x2c) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000440)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x1, 0x3, 0x4, {0xa, 0x4e21, 0xffffffff, @mcast1}}}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000001bc0)=ANY=[]}, 0x40000) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0xf, 0x7, 0x0, 0x10001, 0x12}, 0x2c) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x400) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/syz0\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x7d4, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000ec0)={&(0x7f0000000e80)='./file0\x00'}, 0xffffffcb) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00'}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000500)="05b338fd590b904079afd6f1f9ccb39e64726113dc9bb9bed63d4f8a772ed8dada089f4580bc01affc679c03c1d1e852cd", &(0x7f0000000600)=""/83}, 0x18) perf_event_open(&(0x7f0000000300)={0x3, 0x70, 0x8, 0x0, 0x81, 0x0, 0x0, 0x3, 0x0, 0xd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x8, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) gettid() r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0x297ef) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x6, 0x8, 0x0, 0x0, 0x22}, 0x2c) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup/syz0\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000340)) recvmsg$kcm(r0, &(0x7f0000005e00)={&(0x7f0000001500)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000005c80)=[{&(0x7f0000001580)=""/163, 0xa3}, {&(0x7f0000001680)=""/161, 0xa1}, {&(0x7f0000003a40)=""/212, 0xd4}, {&(0x7f0000001740)=""/27, 0x1b}, {&(0x7f0000003b40)=""/4096, 0x1000}, {&(0x7f0000004b40)=""/4096, 0x1000}, {&(0x7f0000005bc0)=""/45, 0x2d}, {&(0x7f0000005c00)=""/73, 0x49}], 0x8, &(0x7f0000005d40)=""/135, 0x87}, 0x0) 04:29:35 executing program 2: ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f00000009c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x412}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x0) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000900)) 04:29:35 executing program 3: 04:29:35 executing program 4: 04:29:35 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="b702000008000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7030000000000006a0a00fe00000000850000001f000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r0, 0x0, 0xe, 0xd7, &(0x7f0000000080)="3c08000000f08b41637c2fee86dd", &(0x7f0000000380)=""/215, 0x7ff}, 0x28) 04:29:36 executing program 3: 04:29:36 executing program 5: 04:29:36 executing program 0: 04:29:36 executing program 4: 04:29:36 executing program 2: 04:29:36 executing program 1: 04:29:36 executing program 3: 04:29:36 executing program 4: 04:29:36 executing program 5: 04:29:36 executing program 1: 04:29:36 executing program 0: 04:29:37 executing program 2: 04:29:37 executing program 5: 04:29:37 executing program 4: 04:29:37 executing program 3: 04:29:37 executing program 1: 04:29:37 executing program 0: 04:29:37 executing program 2: 04:29:37 executing program 5: 04:29:37 executing program 3: 04:29:37 executing program 4: 04:29:37 executing program 0: 04:29:37 executing program 1: 04:29:38 executing program 2: 04:29:38 executing program 5: 04:29:38 executing program 3: 04:29:38 executing program 1: 04:29:38 executing program 0: 04:29:38 executing program 4: 04:29:38 executing program 2: 04:29:38 executing program 3: 04:29:38 executing program 5: 04:29:38 executing program 1: 04:29:39 executing program 4: 04:29:39 executing program 0: 04:29:39 executing program 2: 04:29:39 executing program 1: 04:29:39 executing program 3: 04:29:39 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw6\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 04:29:39 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$sock_timeval(r1, 0x1, 0xd, &(0x7f0000000100), 0x10) 04:29:39 executing program 2: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) r1 = gettid() r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x1, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000180)={{0x100000001, 0x0, 0xffff, 0x4}, "73797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cbe402a40d0fb25900"}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000380)={0x4}, 0x4) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000300)={0x0, 0x4}, 0xffffff21) perf_event_open(&(0x7f0000000140)={0x0, 0xfffffffffffffde3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38036181}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x8000000) r3 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x5}) mq_timedreceive(r3, &(0x7f0000000200)=""/244, 0xfffffff8, 0x0, 0x0) r4 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r4, 0x1000000000016) mq_timedsend(r3, &(0x7f0000000040), 0x0, 0x0, &(0x7f00000000c0)={0x77359400}) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r5, 0x660c) eventfd2(0xfffffffffffffffe, 0x80000) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000e60000)) tkill(r1, 0x15) 04:29:39 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x800000000000004) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d5c6070") r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) write$binfmt_aout(r1, &(0x7f00000002c0)={{0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}}, 0x5ac) 04:29:39 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) userfaultfd(0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000200)={0x0, 0x1, 0x6}, 0x10) [ 274.964415] ================================================================== [ 274.971997] BUG: KMSAN: uninit-value in _decode_session6+0x645/0x1650 [ 274.978623] CPU: 1 PID: 6420 Comm: syz-executor4 Not tainted 4.19.0-rc4+ #61 [ 274.985843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 274.995235] Call Trace: [ 274.997873] dump_stack+0x2f6/0x430 [ 275.001571] kmsan_report+0x183/0x2b0 [ 275.005439] __msan_warning+0x70/0xc0 [ 275.009289] _decode_session6+0x645/0x1650 [ 275.013596] __xfrm_decode_session+0x156/0x200 [ 275.018220] ? xfrm6_get_saddr+0x4b0/0x4b0 [ 275.022504] icmp6_send+0x2d01/0x3840 [ 275.026894] ? __msan_get_context_state+0x9/0x30 [ 275.031739] ? icmpv6_param_prob+0xc0/0xc0 [ 275.036018] icmpv6_send+0xe5/0x110 [ 275.039696] ip6_fragment+0xc6a/0x5200 [ 275.043621] ? ip6_make_skb+0xca0/0xca0 [ 275.047670] ? kmsan_set_origin_inline+0x6b/0x120 [ 275.052562] ? kmsan_set_origin_inline+0x6b/0x120 [ 275.057484] ip6_finish_output+0xacb/0xc70 [ 275.061796] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 275.067241] ip6_output+0x572/0x6a0 [ 275.070914] ? ip6_output+0x6a0/0x6a0 [ 275.074763] ? ac6_seq_show+0x200/0x200 [ 275.078784] ip6_local_out+0x164/0x1d0 [ 275.082740] ip6_push_pending_frames+0x218/0x4d0 [ 275.087559] rawv6_sendmsg+0x45f7/0x5680 [ 275.091728] ? aa_sk_perm+0xdaf/0x1050 [ 275.095722] ? compat_rawv6_ioctl+0x100/0x100 [ 275.100265] inet_sendmsg+0x4c5/0x7d0 [ 275.104141] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 275.109576] ? inet_getname+0x490/0x490 [ 275.113605] sock_write_iter+0x3b8/0x470 [ 275.117739] ? sock_read_iter+0x480/0x480 [ 275.121943] __vfs_write+0x7ae/0xa50 [ 275.125727] vfs_write+0x495/0x8e0 [ 275.129332] __se_sys_write+0x173/0x350 [ 275.133398] __x64_sys_write+0x4a/0x70 [ 275.137337] do_syscall_64+0xb8/0x100 [ 275.141211] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 275.146439] RIP: 0033:0x457579 [ 275.149673] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 275.169102] RSP: 002b:00007f858539ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 275.176872] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457579 [ 275.184183] RDX: 00000000000005ac RSI: 00000000200002c0 RDI: 0000000000000004 [ 275.191493] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 275.198800] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f858539f6d4 [ 275.206104] R13: 00000000004c5516 R14: 00000000004d8e20 R15: 00000000ffffffff [ 275.213432] [ 275.215082] Uninit was created at: [ 275.218674] kmsan_internal_poison_shadow+0xb8/0x1b0 [ 275.223824] kmsan_kmalloc+0x98/0x100 [ 275.227670] kmsan_slab_alloc+0x10/0x20 [ 275.231674] __kmalloc_node_track_caller+0xba6/0x13f0 [ 275.236887] __alloc_skb+0x40d/0xe50 [ 275.240628] __ip6_append_data+0x3c5e/0x51a0 [ 275.245078] ip6_append_data+0x3d8/0x670 [ 275.249171] rawv6_sendmsg+0x2ac7/0x5680 [ 275.253254] inet_sendmsg+0x4c5/0x7d0 [ 275.257078] sock_write_iter+0x3b8/0x470 [ 275.261176] __vfs_write+0x7ae/0xa50 [ 275.264957] vfs_write+0x495/0x8e0 [ 275.268527] __se_sys_write+0x173/0x350 [ 275.272544] __x64_sys_write+0x4a/0x70 [ 275.276453] do_syscall_64+0xb8/0x100 [ 275.280285] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 275.285489] ================================================================== [ 275.292861] Disabling lock debugging due to kernel taint [ 275.298332] Kernel panic - not syncing: panic_on_warn set ... [ 275.298332] [ 275.305782] CPU: 1 PID: 6420 Comm: syz-executor4 Tainted: G B 4.19.0-rc4+ #61 [ 275.314387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 275.323771] Call Trace: [ 275.326410] dump_stack+0x2f6/0x430 [ 275.330096] panic+0x54c/0xaf7 [ 275.333369] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 275.338878] kmsan_report+0x2a8/0x2b0 [ 275.342729] __msan_warning+0x70/0xc0 [ 275.346570] _decode_session6+0x645/0x1650 [ 275.350870] __xfrm_decode_session+0x156/0x200 [ 275.355488] ? xfrm6_get_saddr+0x4b0/0x4b0 [ 275.359762] icmp6_send+0x2d01/0x3840 04:29:40 executing program 0: seccomp(0x2, 0x0, &(0x7f0000001980)) r0 = socket$alg(0x26, 0x5, 0x0) r1 = dup(r0) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0x1b, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000000)={'bridge0\x00', 0x9}) 04:29:40 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='io.stat\x00', 0x0, 0x0) ioctl$UI_SET_MSCBIT(r1, 0x40045568, 0x1f) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0x3, 0x3) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz1\x00'}, 0x45c) syz_open_dev$usb(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) r3 = msgget$private(0x0, 0x2) msgctl$MSG_STAT(r3, 0xb, &(0x7f0000000200)=""/181) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000380)=0x1000) ioctl$UI_DEV_SETUP(r2, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$KDGKBENT(r2, 0x4b46, &(0x7f0000000000)={0xe2d9, 0x7fff, 0x200}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) read(r2, &(0x7f0000001d00)=""/4096, 0x1000) rt_sigtimedwait(&(0x7f0000000100), &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, 0x8) write$uinput_user_dev(r2, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000003c0)=[@in6={0xa, 0x0, 0x0, @mcast2, 0x5}], 0x1c) [ 275.363625] ? __msan_get_context_state+0x9/0x30 [ 275.368464] ? icmpv6_param_prob+0xc0/0xc0 [ 275.372735] icmpv6_send+0xe5/0x110 [ 275.376419] ip6_fragment+0xc6a/0x5200 [ 275.380338] ? ip6_make_skb+0xca0/0xca0 [ 275.384407] ? kmsan_set_origin_inline+0x6b/0x120 [ 275.389290] ? kmsan_set_origin_inline+0x6b/0x120 [ 275.394194] ip6_finish_output+0xacb/0xc70 [ 275.398468] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 275.403879] ip6_output+0x572/0x6a0 [ 275.407551] ? ip6_output+0x6a0/0x6a0 [ 275.411407] ? ac6_seq_show+0x200/0x200 [ 275.415425] ip6_local_out+0x164/0x1d0 [ 275.419360] ip6_push_pending_frames+0x218/0x4d0 [ 275.424181] rawv6_sendmsg+0x45f7/0x5680 [ 275.428319] ? aa_sk_perm+0xdaf/0x1050 [ 275.432298] ? compat_rawv6_ioctl+0x100/0x100 [ 275.436844] inet_sendmsg+0x4c5/0x7d0 [ 275.440688] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 275.446100] ? inet_getname+0x490/0x490 [ 275.450103] sock_write_iter+0x3b8/0x470 [ 275.454213] ? sock_read_iter+0x480/0x480 [ 275.458411] __vfs_write+0x7ae/0xa50 [ 275.462191] vfs_write+0x495/0x8e0 [ 275.465785] __se_sys_write+0x173/0x350 [ 275.469810] __x64_sys_write+0x4a/0x70 [ 275.473730] do_syscall_64+0xb8/0x100 [ 275.477567] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 275.482801] RIP: 0033:0x457579 [ 275.486020] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 275.504964] RSP: 002b:00007f858539ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 275.512715] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457579 [ 275.520024] RDX: 00000000000005ac RSI: 00000000200002c0 RDI: 0000000000000004 [ 275.527351] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 275.534673] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f858539f6d4 [ 275.541989] R13: 00000000004c5516 R14: 00000000004d8e20 R15: 00000000ffffffff [ 275.549729] Kernel Offset: disabled [ 275.553376] Rebooting in 86400 seconds..