[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 28.812720] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 30.199835] random: sshd: uninitialized urandom read (32 bytes read) [ 30.511570] random: sshd: uninitialized urandom read (32 bytes read) [ 31.880301] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.24' (ECDSA) to the list of known hosts. [ 37.379898] random: sshd: uninitialized urandom read (32 bytes read) 2018/06/11 23:10:15 fuzzer started [ 38.537484] random: cc1: uninitialized urandom read (8 bytes read) 2018/06/11 23:10:16 dialing manager at 10.128.0.26:45401 [ 62.842724] can: request_module (can-proto-0) failed. [ 62.853774] can: request_module (can-proto-0) failed. 2018/06/11 23:10:42 kcov=true, comps=false 23:10:48 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000080)="2957e1311f16f477671070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58) dup2(r0, r1) 23:10:48 executing program 1: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$setptracer(0x59616d61, 0x0) 23:10:49 executing program 7: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) pivot_root(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00') 23:10:49 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmctl$IPC_INFO(0x0, 0xe, &(0x7f0000000040)=""/171) 23:10:49 executing program 3: r0 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000100)=0x2, 0x4) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 23:10:49 executing program 5: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x80003, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='cmdline\x00') sendfile(r0, r1, &(0x7f00000000c0), 0x80000002) 23:10:49 executing program 4: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00') 23:10:49 executing program 6: r0 = socket(0x10, 0x2, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, &(0x7f0000000140)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000300)="29d7e1311f160577651070") r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r2, &(0x7f0000000000), 0x80000002) [ 71.882572] IPVS: ftp: loaded support on port[0] = 21 [ 71.884178] IPVS: ftp: loaded support on port[0] = 21 [ 71.891854] IPVS: ftp: loaded support on port[0] = 21 [ 71.911707] IPVS: ftp: loaded support on port[0] = 21 [ 71.916600] IPVS: ftp: loaded support on port[0] = 21 [ 71.943107] IPVS: ftp: loaded support on port[0] = 21 [ 71.977442] IPVS: ftp: loaded support on port[0] = 21 [ 71.983188] IPVS: ftp: loaded support on port[0] = 21 [ 73.906898] ip (4697) used greatest stack depth: 54536 bytes left [ 74.082643] ip (4709) used greatest stack depth: 54232 bytes left [ 74.667575] ip (4761) used greatest stack depth: 54040 bytes left [ 75.221968] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.228440] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.269010] device bridge_slave_0 entered promiscuous mode [ 75.359486] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.365956] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.394565] device bridge_slave_0 entered promiscuous mode [ 75.415353] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.421824] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.455229] device bridge_slave_0 entered promiscuous mode [ 75.479447] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.485933] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.501429] device bridge_slave_0 entered promiscuous mode [ 75.510685] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.517141] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.527745] device bridge_slave_1 entered promiscuous mode [ 75.543005] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.549520] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.565676] device bridge_slave_0 entered promiscuous mode [ 75.574367] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.580822] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.597103] device bridge_slave_0 entered promiscuous mode [ 75.622613] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.629108] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.649451] device bridge_slave_1 entered promiscuous mode [ 75.666972] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.674219] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.695579] device bridge_slave_0 entered promiscuous mode [ 75.711664] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.718136] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.726717] device bridge_slave_1 entered promiscuous mode [ 75.734581] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.741061] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.751692] device bridge_slave_0 entered promiscuous mode [ 75.763228] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 75.774849] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.781317] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.794275] device bridge_slave_1 entered promiscuous mode [ 75.810695] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.817210] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.831808] device bridge_slave_1 entered promiscuous mode [ 75.851198] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 75.859588] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.866107] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.891992] device bridge_slave_1 entered promiscuous mode [ 75.908866] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.915343] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.945898] device bridge_slave_1 entered promiscuous mode [ 75.973084] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 75.980819] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 75.989141] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.995585] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.012286] device bridge_slave_1 entered promiscuous mode [ 76.024114] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 76.034747] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 76.053052] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 76.105633] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 76.118626] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 76.220160] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 76.243276] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 76.262806] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 76.285664] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 76.296405] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 76.308013] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 76.547810] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 76.612451] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 76.643921] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 76.839371] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 76.863840] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 76.885294] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 76.917283] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 76.926773] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 76.942578] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 76.989250] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 77.065404] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 77.075605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 77.098206] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 77.129777] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 77.148609] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 77.158116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 77.189221] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 77.198583] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 77.209461] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 77.224343] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 77.332584] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 77.342439] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 77.349778] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 77.419877] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 77.427323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 77.445877] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 77.453390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 77.490262] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 77.497368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 77.521487] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 77.544325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 77.585827] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 77.592887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 77.610175] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 77.617346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 77.653619] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 77.660618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 77.681496] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 77.688523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 77.739566] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 77.746590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 77.764602] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 77.772232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 77.850843] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 77.871197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 78.082109] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 78.101919] team0: Port device team_slave_0 added [ 78.114433] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 78.136499] team0: Port device team_slave_0 added [ 78.204947] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 78.239645] team0: Port device team_slave_0 added [ 78.257147] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 78.277120] team0: Port device team_slave_1 added [ 78.313059] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 78.335828] team0: Port device team_slave_1 added [ 78.365302] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 78.379084] team0: Port device team_slave_0 added [ 78.402656] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 78.425151] team0: Port device team_slave_0 added [ 78.439436] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 78.451206] team0: Port device team_slave_0 added [ 78.486416] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 78.493723] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 78.508370] team0: Port device team_slave_0 added [ 78.527700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 78.545749] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 78.561541] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 78.574302] team0: Port device team_slave_1 added [ 78.580526] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 78.595760] team0: Port device team_slave_0 added [ 78.601939] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 78.609786] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 78.630502] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 78.652146] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 78.667278] team0: Port device team_slave_1 added [ 78.685328] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 78.701668] team0: Port device team_slave_1 added [ 78.715077] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 78.729362] team0: Port device team_slave_1 added [ 78.740657] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 78.748242] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 78.766783] team0: Port device team_slave_1 added [ 78.782426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 78.796089] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 78.820603] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 78.832548] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 78.840010] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 78.854117] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 78.878950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 78.901831] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 78.917822] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 78.926152] team0: Port device team_slave_1 added [ 78.940370] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 78.947485] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 78.956192] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 78.978247] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 78.987751] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 78.996344] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 79.004381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.031561] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.059250] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.074816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.101367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.116841] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.127243] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 79.143183] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 79.154713] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 79.167556] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 79.174453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.200365] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.222138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.248168] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.266754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.274683] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.282463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.290434] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.304802] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 79.312394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.322598] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.341115] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 79.349007] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.357687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.368895] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 79.376950] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 79.385758] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 79.394631] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 79.407152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.431396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.462104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.485949] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.510726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.524407] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.532450] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.540785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.551149] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 79.559628] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 79.573501] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 79.586343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.607733] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.625157] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.643316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.658689] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.667890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.680136] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 79.690984] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 79.704186] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 79.721758] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 79.729273] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.743909] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.782174] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.805139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.822609] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.838944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.852715] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.860712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.870518] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 79.877808] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.886240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.894991] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 79.920225] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 79.927891] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.936955] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.947868] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.962060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.973160] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 79.983135] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.998014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.029464] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 80.050627] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.102124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.147589] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 80.158697] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.194394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.989351] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.995821] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.002670] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.009105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.052919] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 82.067199] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.103587] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.110094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.116901] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.123327] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.181114] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 82.203641] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.210117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.216935] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.223452] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.262663] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 82.280064] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.286525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.293344] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.299796] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.313727] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 82.327660] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.334107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.340936] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.347461] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.389938] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 82.400675] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.407127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.413935] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.420366] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.469393] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 82.510978] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.517449] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.524258] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.530681] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.544560] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 82.569142] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.575594] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.582409] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.588858] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.658625] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 83.103211] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.114881] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.143251] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.162805] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.188787] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.206421] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.219643] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 90.563306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.749016] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.787004] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.820110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.035349] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.086349] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.113921] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.313315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.367897] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 91.537162] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 91.549544] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 91.603401] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 91.762464] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 91.857582] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 91.955828] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 92.155877] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 92.173905] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 92.180600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 92.194222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 92.338648] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 92.345016] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 92.355787] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 92.414826] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 92.421318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 92.433194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 92.455977] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 92.462374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 92.481835] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 92.619152] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 92.629271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 92.641869] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 92.708901] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 92.715255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 92.728826] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 92.917938] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 92.924317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 92.939282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 92.967703] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 92.977717] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 92.985788] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 93.059543] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.194422] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.237330] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.293755] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.494277] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.650327] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.698358] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.807260] 8021q: adding VLAN 0 to HW filter on device team0 23:11:16 executing program 5: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x80003, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='cmdline\x00') sendfile(r0, r1, &(0x7f00000000c0), 0x80000002) 23:11:16 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") dup2(0xffffffffffffffff, r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x208200) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000140)={0x8000002, 0x14d, 0x40120718, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f0000005f00)={'filter\x00', 0x2}, 0x68) symlinkat(&(0x7f0000008ff8)='./file1\x00', 0xffffffffffffffff, &(0x7f0000012ff8)='./file0\x00') r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 23:11:16 executing program 3: 23:11:16 executing program 7: 23:11:16 executing program 7: modify_ldt$write(0x1, &(0x7f0000000000), 0x10) clone(0x0, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f0000804000)) 23:11:16 executing program 3: futex(&(0x7f000000cffc)=0x100000000000004, 0x0, 0x4, &(0x7f0000edfff0)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x4, 0x1, &(0x7f0000cc3ff0)={0x77359400}, &(0x7f000044b000), 0x0) 23:11:16 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, &(0x7f0000003000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x1, 0x15}}, 0x2e) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'sit0\x00'}) 23:11:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge0\x00'}) [ 98.647370] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.654237] bridge0: port 1(bridge_slave_0) entered disabled state 23:11:20 executing program 0: 23:11:20 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge0\x00'}) 23:11:20 executing program 7: r0 = memfd_create(&(0x7f0000000140)='#em1#+\x00', 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x10, r0, 0x0) 23:11:20 executing program 2: 23:11:20 executing program 4: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00') 23:11:20 executing program 6: 23:11:20 executing program 3: 23:11:20 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x4000000004002) r1 = dup3(0xffffffffffffffff, r0, 0x80000) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000001640)='nv\x00', 0x3) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x13, 0x1b, 0x18, "4329fe9855e2190461bf1a0c5aef9ea13ec411ece2af706a1f9ded7b41c9f9aab165a54a5ea9cceaf4f7e58320a3098589be802d193e05ea06cb73ef77321816", "bb0a0622d1cc7ccc45ca684bffda7faddf72be0ed690f6dca8b877e5c181d96640252bf30ef40b61f32e4528aa142f1352d485cfa338b7919cf99be104bddfa7", "02ea49c6c78f29bb7a53368acdfe336bcedb92e82256bc17695b3fc8d0b09ad3", [0x7, 0x9]}) 23:11:21 executing program 0: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, &(0x7f0000000140)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in=@remote}}, {{@in6=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000100)=0xe8) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysinfo(&(0x7f0000000680)) socket(0x0, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f00000002c0)='U', 0x1, 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) 23:11:21 executing program 3: 23:11:21 executing program 1: 23:11:21 executing program 2: 23:11:21 executing program 7: r0 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x20000100002) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'eql\x00', 0x5003}) write$tun(r0, &(0x7f0000000480)={@void, @val, @ipv4={{0x5, 0x4, 0x0, 0x0, 0xfde5, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @multicast1=0xe0000001}, @igmp={0x0, 0x0, 0x0, @multicast1=0xe0000001}}}, 0xfdef) 23:11:21 executing program 5: 23:11:21 executing program 6: clock_adjtime(0x0, &(0x7f0000000280)) 23:11:21 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}, 0x3a) r1 = dup(r0) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000000)=""/50) 23:11:21 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r2}], 0x1, 0xfffffffffffffffa) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x0) dup3(r3, r2, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 23:11:21 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x2) dup3(r1, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) 23:11:21 executing program 6: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x105086) r1 = memfd_create(&(0x7f0000000040)="0009e0ffffffffffffff05000000000400000000", 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000140), 0x4) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f00000000c0)='S', 0x1}], 0x1, 0x4081003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000680)=ANY=[], 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)={@broadcast=0xffffffff, @remote={0xac, 0x14, 0x14, 0xbb}, @multicast1=0xe0000001}, 0xc) fallocate(r0, 0x11, 0x0, 0x100000001) 23:11:21 executing program 5: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0xfffffffffffffffa) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x2) dup3(r2, r1, 0x0) write(r1, &(0x7f0000c34fff), 0xffffff0b) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r0, 0x1000000000016) 23:11:21 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") r1 = socket(0x10, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f02acc7edbcd7a071fb35331ce39c5a") fcntl$setstatus(r2, 0x4, 0x4000) sendfile(r1, r2, &(0x7f00000000c0), 0x80000002) 23:11:21 executing program 4: syz_emit_ethernet(0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd6050a09c00080000fe8000000400000000000000ead17ae6e1e1e1"], &(0x7f0000000040)) r0 = socket(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'veth1_to_team\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="ffff000000000089b423968e450400000000000060"]}) setsockopt$inet_int(r0, 0x0, 0x40, &(0x7f0000000080), 0x4) 23:11:21 executing program 7: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0xa, 0x0, 0x9, 0x2}, 0x10}, 0x1}, 0x0) 23:11:21 executing program 2: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000600)='dns_resolver\x00', &(0x7f0000000580)={0x73, 0x79, 0x7a}, &(0x7f00000005c0)="e8aae5f0f569510a657872dc1ca699657fcb302edcfcd49ebcc38cf366defd4295883ddd117dc50c6e42c8618f02d486fada593988d0c05e0700", 0x3a, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000180)="c6a34e987940ea478d9bd365b9e4621e334652733324b7773a3df8a7504d9e18e2e4a839fcd9030000000000000028945d12a9caae603ff81c4dc32ed3d70fb5d4c5b866305249060000005277822d0e0616a2e5b74c48e38b9936f298c6feec95ad327c724ec507bd34b94e99623f014bf81ea54900ac54a99aa04e1a7f000000e8d3bfa2f3abce9736aac3e0b19d5a697bc438cd49bc1cf3af72c2180bbee78e9a7237c02e10ac77e3a4fd8a6e2bdca6a9a1d7da1a3e559fdafb6703c73b3c4c10865302fb324f16327996273625d9f0a54ef16bdb08f22ed11fd80b74eb861aebe51b0912c0f79486c25c49524ffe4f00", 0xf2, r0) [ 104.142233] ================================================================== [ 104.149656] BUG: KMSAN: uninit-value in netlink_rcv_skb+0x3e9/0x600 [ 104.156083] CPU: 0 PID: 6697 Comm: syz-executor3 Not tainted 4.17.0+ #6 [ 104.163010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 104.172370] Call Trace: [ 104.174969] dump_stack+0x185/0x1d0 [ 104.178599] kmsan_report+0x188/0x2a0 [ 104.182404] __msan_warning_32+0x70/0xc0 [ 104.186473] netlink_rcv_skb+0x3e9/0x600 [ 104.190540] ? rtnetlink_bind+0x120/0x120 [ 104.194776] rtnetlink_rcv+0x50/0x60 [ 104.198493] netlink_unicast+0x1680/0x1750 [ 104.202746] ? rtnetlink_net_exit+0xa0/0xa0 [ 104.207080] netlink_sendmsg+0x104f/0x1350 [ 104.211334] ? netlink_getsockopt+0xc60/0xc60 [ 104.215843] kernel_sendmsg+0x22a/0x2d0 [ 104.219826] sock_no_sendpage+0x1c8/0x250 [ 104.223982] ? sock_no_mmap+0x30/0x30 [ 104.227787] sock_sendpage+0x1ef/0x2e0 [ 104.231684] pipe_to_sendpage+0x321/0x440 [ 104.235834] ? sock_fasync+0x2b0/0x2b0 [ 104.239727] ? generic_pipe_buf_get+0xf0/0xf0 [ 104.244226] __splice_from_pipe+0x4a5/0xf50 [ 104.248558] ? generic_splice_sendpage+0x2a0/0x2a0 [ 104.253504] generic_splice_sendpage+0x1c6/0x2a0 [ 104.258272] ? iter_file_splice_write+0x1710/0x1710 [ 104.263302] direct_splice_actor+0x19e/0x200 [ 104.267720] splice_direct_to_actor+0x767/0x1040 [ 104.272480] ? do_splice_direct+0x540/0x540 [ 104.276812] do_splice_direct+0x335/0x540 [ 104.280964] ? security_file_permission+0x1e0/0x480 [ 104.285990] do_sendfile+0x107b/0x1e40 [ 104.289991] __x64_sys_sendfile64+0x218/0x390 [ 104.294756] ? __ia32_sys_sendfile+0x160/0x160 [ 104.299401] do_syscall_64+0x15b/0x230 [ 104.303302] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 104.308495] RIP: 0033:0x455b29 [ 104.311679] RSP: 002b:00007f9e9b7d8c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 104.319387] RAX: ffffffffffffffda RBX: 00007f9e9b7d96d4 RCX: 0000000000455b29 [ 104.326664] RDX: 00000000200000c0 RSI: 0000000000000015 RDI: 0000000000000014 [ 104.333955] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 104.341231] R10: 0000000080000002 R11: 0000000000000246 R12: 00000000ffffffff [ 104.348506] R13: 00000000004c0ac8 R14: 00000000004d0448 R15: 0000000000000000 [ 104.355781] [ 104.357408] Uninit was stored to memory at: [ 104.361744] kmsan_internal_chain_origin+0x12b/0x210 [ 104.366853] kmsan_memcpy_origins+0x11d/0x170 [ 104.371363] __msan_memcpy+0x109/0x160 [ 104.375251] _copy_from_iter_full+0xe06/0x1440 [ 104.379841] netlink_sendmsg+0xdf9/0x1350 [ 104.383993] kernel_sendmsg+0x22a/0x2d0 [ 104.387975] sock_no_sendpage+0x1c8/0x250 [ 104.392120] sock_sendpage+0x1ef/0x2e0 [ 104.396010] pipe_to_sendpage+0x321/0x440 [ 104.400162] __splice_from_pipe+0x4a5/0xf50 [ 104.404490] generic_splice_sendpage+0x1c6/0x2a0 [ 104.409247] direct_splice_actor+0x19e/0x200 [ 104.413657] splice_direct_to_actor+0x767/0x1040 [ 104.418412] do_splice_direct+0x335/0x540 [ 104.422561] do_sendfile+0x107b/0x1e40 [ 104.426457] __x64_sys_sendfile64+0x218/0x390 [ 104.430953] do_syscall_64+0x15b/0x230 [ 104.434841] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 104.440115] Uninit was created at: [ 104.443666] kmsan_alloc_meta_for_pages+0x161/0x3a0 [ 104.448683] kmsan_alloc_page+0x82/0xe0 [ 104.452654] __alloc_pages_nodemask+0xf7b/0x5cc0 [ 104.457408] alloc_pages_current+0x6b1/0x970 [ 104.461815] push_pipe+0x680/0xca0 [ 104.465360] iov_iter_get_pages+0x1357/0x1810 [ 104.469859] __blockdev_direct_IO+0x1a5f/0x65e0 [ 104.474532] ext4_direct_IO+0xed1/0x2850 [ 104.478601] generic_file_read_iter+0x3c6d/0x44d0 [ 104.483443] ext4_file_read_iter+0x30f/0x520 [ 104.487850] generic_file_splice_read+0x5d7/0x900 [ 104.492694] splice_direct_to_actor+0x4cb/0x1040 [ 104.497456] do_splice_direct+0x335/0x540 [ 104.501610] do_sendfile+0x107b/0x1e40 [ 104.505496] __x64_sys_sendfile64+0x218/0x390 [ 104.509988] do_syscall_64+0x15b/0x230 [ 104.513882] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 104.519061] ================================================================== [ 104.526410] Disabling lock debugging due to kernel taint [ 104.531858] Kernel panic - not syncing: panic_on_warn set ... [ 104.531858] [ 104.539233] CPU: 0 PID: 6697 Comm: syz-executor3 Tainted: G B 4.17.0+ #6 [ 104.547370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 104.556726] Call Trace: [ 104.559333] dump_stack+0x185/0x1d0 [ 104.562969] panic+0x3d0/0x990 [ 104.566173] kmsan_report+0x29e/0x2a0 [ 104.569977] __msan_warning_32+0x70/0xc0 [ 104.574053] netlink_rcv_skb+0x3e9/0x600 [ 104.578117] ? rtnetlink_bind+0x120/0x120 [ 104.582266] rtnetlink_rcv+0x50/0x60 [ 104.585979] netlink_unicast+0x1680/0x1750 [ 104.590223] ? rtnetlink_net_exit+0xa0/0xa0 [ 104.594550] netlink_sendmsg+0x104f/0x1350 [ 104.598795] ? netlink_getsockopt+0xc60/0xc60 [ 104.603295] kernel_sendmsg+0x22a/0x2d0 [ 104.607282] sock_no_sendpage+0x1c8/0x250 [ 104.611441] ? sock_no_mmap+0x30/0x30 [ 104.615241] sock_sendpage+0x1ef/0x2e0 [ 104.619140] pipe_to_sendpage+0x321/0x440 [ 104.623292] ? sock_fasync+0x2b0/0x2b0 [ 104.627367] ? generic_pipe_buf_get+0xf0/0xf0 [ 104.631866] __splice_from_pipe+0x4a5/0xf50 [ 104.636197] ? generic_splice_sendpage+0x2a0/0x2a0 [ 104.641138] generic_splice_sendpage+0x1c6/0x2a0 [ 104.645904] ? iter_file_splice_write+0x1710/0x1710 [ 104.650930] direct_splice_actor+0x19e/0x200 [ 104.655359] splice_direct_to_actor+0x767/0x1040 [ 104.660120] ? do_splice_direct+0x540/0x540 [ 104.664454] do_splice_direct+0x335/0x540 [ 104.668610] ? security_file_permission+0x1e0/0x480 [ 104.673639] do_sendfile+0x107b/0x1e40 [ 104.677542] __x64_sys_sendfile64+0x218/0x390 [ 104.682043] ? __ia32_sys_sendfile+0x160/0x160 [ 104.686632] do_syscall_64+0x15b/0x230 [ 104.690614] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 104.695797] RIP: 0033:0x455b29 [ 104.698978] RSP: 002b:00007f9e9b7d8c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 104.706684] RAX: ffffffffffffffda RBX: 00007f9e9b7d96d4 RCX: 0000000000455b29 [ 104.713954] RDX: 00000000200000c0 RSI: 0000000000000015 RDI: 0000000000000014 [ 104.721231] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 104.728504] R10: 0000000080000002 R11: 0000000000000246 R12: 00000000ffffffff [ 104.735776] R13: 00000000004c0ac8 R14: 00000000004d0448 R15: 0000000000000000 [ 104.743528] Dumping ftrace buffer: [ 104.747057] (ftrace buffer empty) [ 104.750741] Kernel Offset: disabled [ 104.754343] Rebooting in 86400 seconds..