[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 36.578326] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 41.234063] random: sshd: uninitialized urandom read (32 bytes read) [ 41.722983] random: sshd: uninitialized urandom read (32 bytes read) [ 43.342382] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.60' (ECDSA) to the list of known hosts. [ 48.923954] random: sshd: uninitialized urandom read (32 bytes read) 2018/07/07 01:56:37 fuzzer started [ 50.569192] random: cc1: uninitialized urandom read (8 bytes read) 2018/07/07 01:56:40 dialing manager at 10.128.0.26:46839 2018/07/07 01:56:44 syscalls: 1544 2018/07/07 01:56:44 code coverage: enabled 2018/07/07 01:56:44 comparison tracing: ioctl(KCOV_TRACE_CMP) failed: errno 524 2018/07/07 01:56:44 setuid sandbox: enabled 2018/07/07 01:56:44 namespace sandbox: enabled 2018/07/07 01:56:44 fault injection: enabled 2018/07/07 01:56:44 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/07/07 01:56:44 net packed injection: enabled [ 57.980292] random: crng init done 01:58:19 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='/group.stat\x00', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086607, 0x400023) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f00000008c0)}, 0x0) 01:58:19 executing program 1: r0 = socket$unix(0x2, 0x40000000002, 0x88) sendmsg(r0, &(0x7f0000002dc0)={&(0x7f0000000180)=@in={0x2, 0x4e22, @broadcast=0xffffffff}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="20000000000000000000000007000000440805030000e71601000000000000fe"], 0x20}, 0x0) 01:58:19 executing program 2: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) dup2(r0, r1) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000009c0)=@nat={'nat\x00', 0x19, 0x5, 0x90, [0x20000400, 0x0, 0x0, 0x20000590, 0x20000660], 0x0, &(0x7f0000000340), &(0x7f0000000400)=[{0x0, '\x00', 0x1}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x3}]}, 0x108) 01:58:19 executing program 7: openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") r1 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000000)={'ip6gre0\x00', @ifru_data=&(0x7f00000000c0)="a325d3c91116bf66fed2b246a94500aa6593352d29be1746fd84168b6ef37b32"}) 01:58:19 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) fcntl$setstatus(r0, 0x4, 0x0) 01:58:19 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000327f68)=ANY=[@ANYBLOB="0203000313000000000000000000000005000600000000000a0000000000000000000000000000005d000000000000000000000000000000050009007f0000000a00000000000100fe800000008b0000000000f2ff0000ff000000000000000002000100000000000000000d0000000005000500000000000a0000080000ddfffe0200000000000000000000000000010000000000000000"], 0x98}, 0x1}, 0x0) 01:58:19 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240)='/dev/hwrng\x00', 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x910, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$void(r1, 0x5450) 01:58:19 executing program 6: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001c0000/0x2000)=nil, 0x2000, 0x3, 0x6011, r0, 0x0) [ 152.531458] IPVS: ftp: loaded support on port[0] = 21 [ 152.558762] IPVS: ftp: loaded support on port[0] = 21 [ 152.605639] IPVS: ftp: loaded support on port[0] = 21 [ 152.610668] IPVS: ftp: loaded support on port[0] = 21 [ 152.639958] IPVS: ftp: loaded support on port[0] = 21 [ 152.673114] IPVS: ftp: loaded support on port[0] = 21 [ 152.677459] IPVS: ftp: loaded support on port[0] = 21 [ 152.691144] IPVS: ftp: loaded support on port[0] = 21 [ 155.095726] ip (4742) used greatest stack depth: 54352 bytes left [ 156.918123] ip (4847) used greatest stack depth: 54328 bytes left [ 157.066603] ip (4857) used greatest stack depth: 54040 bytes left [ 157.491597] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.498789] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.526506] device bridge_slave_0 entered promiscuous mode [ 157.546857] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.553387] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.581357] device bridge_slave_0 entered promiscuous mode [ 157.613876] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.620467] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.655860] device bridge_slave_0 entered promiscuous mode [ 157.665009] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.671613] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.699209] device bridge_slave_0 entered promiscuous mode [ 157.707639] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.714165] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.733463] device bridge_slave_0 entered promiscuous mode [ 157.751516] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.758087] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.780849] device bridge_slave_0 entered promiscuous mode [ 157.805617] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.812146] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.827754] device bridge_slave_0 entered promiscuous mode [ 157.836671] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.843565] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.873757] device bridge_slave_0 entered promiscuous mode [ 157.898664] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.905273] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.930242] device bridge_slave_1 entered promiscuous mode [ 157.946903] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.953433] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.967786] device bridge_slave_1 entered promiscuous mode [ 157.980322] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.987266] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.008571] device bridge_slave_1 entered promiscuous mode [ 158.035845] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.042432] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.077167] device bridge_slave_1 entered promiscuous mode [ 158.091915] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.098438] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.118212] device bridge_slave_1 entered promiscuous mode [ 158.125818] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.132327] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.156009] device bridge_slave_1 entered promiscuous mode [ 158.186844] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.193375] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.218235] device bridge_slave_1 entered promiscuous mode [ 158.239019] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.245638] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.263662] device bridge_slave_1 entered promiscuous mode [ 158.272541] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 158.284725] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 158.297563] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 158.326148] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 158.334413] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 158.416812] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 158.511867] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 158.535422] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 158.548674] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 158.572764] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 158.583414] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 158.596356] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 158.669837] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 158.684374] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 158.786423] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 158.850172] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 159.439610] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 159.452513] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 159.487418] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 159.525597] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 159.556295] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 159.604702] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 159.619416] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 159.697310] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 159.764700] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 159.792295] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 159.824845] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 159.838948] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 159.875834] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 159.928111] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 159.954934] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 160.026721] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 160.063619] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 160.078994] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 160.129279] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 160.138198] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 160.157766] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 160.169927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 160.210674] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 160.218105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 160.258367] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 160.265450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 160.304765] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 160.312935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 160.354206] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 160.362372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 160.390209] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 160.400498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 160.465533] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 160.475985] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 160.489237] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 160.499292] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 160.507549] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 160.519849] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 160.557119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 160.598113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 160.647284] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 160.654920] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 160.686621] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 160.694285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 160.721878] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 160.735790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 160.782918] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 160.800368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 161.389590] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 161.409452] team0: Port device team_slave_0 added [ 161.457734] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 161.475436] team0: Port device team_slave_0 added [ 161.532835] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 161.558880] team0: Port device team_slave_0 added [ 161.577587] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 161.607009] team0: Port device team_slave_0 added [ 161.630171] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 161.655424] team0: Port device team_slave_0 added [ 161.685470] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 161.713409] team0: Port device team_slave_0 added [ 161.723881] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 161.750104] team0: Port device team_slave_0 added [ 161.777788] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 161.802094] team0: Port device team_slave_1 added [ 161.830822] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 161.855167] team0: Port device team_slave_1 added [ 161.880772] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 161.895283] team0: Port device team_slave_0 added [ 161.918766] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 161.943425] team0: Port device team_slave_1 added [ 161.962855] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 161.993162] team0: Port device team_slave_1 added [ 162.010314] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 162.033139] team0: Port device team_slave_1 added [ 162.064920] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 162.085610] team0: Port device team_slave_1 added [ 162.112960] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 162.137703] team0: Port device team_slave_1 added [ 162.151741] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 162.159584] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 162.168869] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 162.200714] team0: Port device team_slave_1 added [ 162.217775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 162.233769] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 162.258664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 162.268162] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 162.304820] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 162.315419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 162.355015] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 162.370300] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 162.377993] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 162.399876] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 162.414405] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 162.428192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 162.437607] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 162.447278] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 162.456576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 162.481332] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 162.499401] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 162.509155] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 162.519522] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 162.529332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 162.549488] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 162.580208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 162.596390] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 162.608247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 162.617664] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 162.632609] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 162.643136] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 162.657171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 162.700466] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 162.721833] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 162.737804] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 162.761763] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 162.770408] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 162.780013] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 162.796308] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 162.811175] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 162.821152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 162.861208] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 162.895128] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 162.916639] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 162.947893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 162.977421] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 162.993377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 163.001891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 163.010317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 163.018747] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 163.029263] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 163.042838] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 163.054149] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 163.072815] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 163.085269] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 163.097268] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 163.117420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 163.142343] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 163.163936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 163.180961] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 163.204138] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 163.215494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 163.231790] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 163.239641] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 163.253544] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 163.287822] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 163.304160] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 163.316960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 163.337247] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 163.347273] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 163.378821] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 163.387442] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 163.399549] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 163.407088] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 163.449280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 163.486950] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 163.526473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 163.556014] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 163.577644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 163.598885] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 163.612712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 163.622491] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 163.632338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 163.650180] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 163.659824] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 163.669799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 163.719482] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 163.735898] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 163.759409] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 163.774773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 163.827478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 163.846841] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 163.883904] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 163.893519] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 163.905506] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 163.932415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 163.962963] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 163.982331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 166.726608] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.733115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.740010] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.746514] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.797287] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 166.805278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 166.838441] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.844939] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.851902] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.858371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.941327] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 166.956578] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.963122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.969927] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.976405] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.007745] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 167.052629] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.059135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.066015] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.072539] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.111763] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 167.120532] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.127004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.133863] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.140373] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.199563] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 167.209421] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.215884] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.222700] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.229143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.254321] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 167.274665] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.281152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.288006] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.294484] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.386622] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 167.398228] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.404964] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.411800] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.418242] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.434930] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 167.840371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 167.856241] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 167.897827] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 167.935960] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 167.956431] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 167.971631] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 167.979317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 178.047505] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.491457] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.543202] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.612218] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.713530] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.809825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.919661] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.241832] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 179.350950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.604915] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 179.675380] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 179.785649] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 179.848587] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 179.952230] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 180.079869] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 180.400849] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 180.410205] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 180.433691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 180.539482] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 180.762719] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 180.769431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 180.788400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 180.883615] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 180.890585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 180.905399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 181.025578] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 181.032006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 181.044110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 181.093376] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 181.099775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 181.113686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 181.207128] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 181.213632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 181.230976] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 181.278121] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 181.284566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 181.296301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 181.700522] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.779469] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 181.785975] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 181.799929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 181.966168] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.033958] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.164675] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.401956] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.474515] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.509456] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.980561] 8021q: adding VLAN 0 to HW filter on device team0 01:58:57 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={r0, 0x0, 0x1, 0x0, &(0x7f0000000040)=[0x0], 0x1}, 0x20) 01:58:57 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa000003fe, 0x0, 0xfffffffffffffff8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f00008deff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f000000a000)) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/net\x00') 01:58:57 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)="2e2f6367726f75702e63707500eac5bea7af575a45fddd5af3a7709295a69ee900000000000000c8ace908bec842141ca2a714ed0163d4e05556a93347d6a7430e03a5f2beb186f16bacf2e4dcdcf3b9ff1dd9dcfbb3321aa0de98fe471d9a0d81aca9791b345c49af36da8498423ad08788fcc9892a2487efcde7a649614b14ba1c184784ca814db32bca5202a39635cae614676e0595b94e5b227273696812352f96703ad505e45ec29a524ad4fd017715f8dabca3758427726eeff00ca50d6ba964df3e513869880d9c38e14782155561de1ff27d7a8f780a2f03cd1c70c9d09598e297b85d6dc53b4ec3d2cd43a26d916363e76f56b6e192131f925bd3579d1e7084b22488937b8c2ab8806060dd181a8d2182300ad427bdbe185f4129c7719bb715d52acc2acac74fce3073a1b0204d612de49df63883aed28c904cea1a2c0774f83b9e4bdce6c81865877f8576df24dd4c3e5061751036f98600000000000000005cc076eaaf831d3ffa9be6", 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r1) 01:58:57 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000280)="295ee1311f16f477671070") r1 = syz_open_procfs(0x0, &(0x7f0000001b40)='net/xfrm_stat\x00') lseek(r1, 0x41, 0x0) 01:58:57 executing program 6: timerfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000040), &(0x7f0000000080)=0x8) pwritev(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f00000013c0)}, {&(0x7f00000014c0)}], 0x2, 0x0) r0 = memfd_create(&(0x7f0000000180)="2e993f97e9100a2bec29d89b8bfcbc002c6210ffffff1ec6f35f8352a100751810dd53d4d389a821562b24f21f856aa94cfda35ea67335975463824ca734d8125f27e75cca4604a556c74f98c8effc42cdbbffcb07ff7c60b32b", 0x0) ftruncate(r0, 0x0) statx(0xffffffffffffffff, &(0x7f0000001700)='./file0\x00', 0x0, 0xfff, &(0x7f0000001740)) close(r0) 01:58:57 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) sendto$inet6(r1, &(0x7f0000000000)="8e", 0x1, 0xfffffffffffffdff, 0x0, 0x0) 01:58:57 executing program 0: clone(0x1006000, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000180), &(0x7f00000001c0)) 01:58:57 executing program 3: r0 = socket$kcm(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b7070000010000004870000029000000bf700000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000200)=r1, 0x4) dup3(r0, r1, 0x0) [ 189.904759] alg: No test for authenc(digest_null,rfc3686(ctr(aes))) (authenc(digest_null-generic,rfc3686(ctr(aes-fixed-time)))) 01:58:57 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(r0, &(0x7f0000000380)="2f007e574d000330809022cfde26555dc9ecfe1974406edad38364782d63b6612854b9e49dbdcaef718197e37e870a308b1e3a798fa788a46d3025ef933e51828ab675064e2adbe9126423b4a73d68fbe99c6db2f160d49cb6cce76c27289a4f9d097354aaa5860d2383df87526baa184d90bb7729366c17bc33d765e9bc2f882a13f3a9c1f60660bd4fd2fa31d2c0a775242289bce0460e991ba6b38962d10d24ded5406918a66b2c75c43fe1ff458ae5cd9fec63039ba5a7b66a60ede5ccdabc3ee77660ef2358ccdff02226021384b0c235f114ed9ade92767aecc256acdeb610df42e7169f240357f735ae5fe29017e51e27252f48b95bfbbb3a865535298bdc36d71db635f41c57771db77aeaff883fab3dc3cc24bd3c036e396ad3af37945058839e9f2270bc40901fa654e7cc3292a82fc80c3700000000000001ffe2528e4fdac32bcaefe910ebd3b948a3bfebef5fa8d82473c7fbf3ec", 0x0, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000002c0)) [ 189.973282] alg: No test for seqiv(authenc(digest_null,rfc3686(ctr(aes)))) (seqiv(authenc(digest_null-generic,rfc3686(ctr(aes-fixed-time))))) 01:58:58 executing program 7: 01:58:58 executing program 2: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x0, @broadcast=0xffffffff, 0x0, 0x0, 'wlc\x00'}, 0x2c) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000080), 0x10) 01:58:58 executing program 4: 01:58:58 executing program 6: 01:58:58 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x2}, 0x31) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 01:58:58 executing program 7: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) setsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f00000001c0)={@dev={0xfe, 0x80}}, 0x14) geteuid() 01:58:58 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000140), 0x4) 01:58:58 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) sendto$inet6(r1, &(0x7f0000000000)="8e", 0x1, 0xfffffffffffffdff, 0x0, 0x0) 01:58:58 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2=0xe0000002}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f0000004640)=[{{&(0x7f0000001300)=@generic={0x0, "9c149717b8bccff0d426aa04054aab8024807eff243cefcb60ece2d76b2f9f6e64d91ad8f7e281f1648352f76fb7ce151c9e0a937f8e4d270e3917372cfb7e68df420e48f0dd02eb5b2b3b77ed8bd2f7e212197239349a1931d769d870f8dfd649dde9cdb861cfafbc3fc950c6c69b62d91aea565c6be781c9b7a7a0b577"}, 0x80, &(0x7f00000012c0)=[{&(0x7f0000000140)="07444d06a9aaaa633ee8ab12d8a3e8b90bfa80ca7cc5c524366733c08d06ea8ad0b79c01d958f4659ac9a3734336c10adcd1447509a4df579e910bb203e67a79a3a6eeb7465b5a5dbebb6b34a30c39f69362106bacda76ce4e434057ca4303dd324f56663721e13fcd802890bc6977b44469952179e565c0b4ab610b77f094aae412b77422b73e7c50c4a291e6c8175a89bdbbfcd150cb74fadb9e21", 0x9c}, {&(0x7f0000001780)="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", 0x1009}], 0x2, &(0x7f0000002c80), 0x0, 0x4}, 0x1}], 0x1, 0x0) [ 190.706484] ================================================================== [ 190.713936] BUG: KMSAN: uninit-value in raw6_local_deliver+0x137/0x1fe0 [ 190.720715] CPU: 0 PID: 6745 Comm: syz-executor0 Not tainted 4.17.0+ #22 [ 190.727589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 190.736963] Call Trace: [ 190.739561] [ 190.741734] dump_stack+0x185/0x1d0 [ 190.745396] kmsan_report+0x188/0x2a0 [ 190.749232] __msan_warning_32+0x70/0xc0 [ 190.753321] ? ip6_input_finish+0x561/0x2260 [ 190.757752] ? ip6_input_finish+0x561/0x2260 [ 190.762198] raw6_local_deliver+0x137/0x1fe0 [ 190.766657] ip6_input_finish+0x561/0x2260 [ 190.770971] ip6_mc_input+0xa65/0x10a0 [ 190.774884] ? ip6_input+0x320/0x320 [ 190.778638] ? ip6_input_finish+0x2260/0x2260 [ 190.783153] ip6_rcv_finish+0x498/0x6e0 [ 190.787156] ipv6_rcv+0x1d6b/0x2360 [ 190.790810] ? local_bh_enable+0x40/0x40 [ 190.794923] __netif_receive_skb_core+0x47f3/0x4aa0 [ 190.799980] ? __msan_metadata_ptr_for_load_8+0x10/0x20 01:58:58 executing program 4: 01:58:58 executing program 1: 01:58:58 executing program 6: [ 190.805393] ? ip6_rcv_finish+0x6e0/0x6e0 [ 190.809577] process_backlog+0x62d/0xe20 [ 190.813671] ? rps_trigger_softirq+0x2f0/0x2f0 [ 190.818286] net_rx_action+0x766/0x1a80 [ 190.822306] ? net_tx_action+0xad0/0xad0 [ 190.826394] __do_softirq+0x592/0x979 [ 190.830252] do_softirq_own_stack+0x49/0x80 [ 190.834579] [ 190.836855] __local_bh_enable_ip+0x114/0x140 [ 190.841380] local_bh_enable+0x36/0x40 [ 190.845300] pppol2tp_sendmsg+0x7ae/0xc40 [ 190.849496] ? pppol2tp_getsockopt+0x10a0/0x10a0 [ 190.854285] ___sys_sendmsg+0xec8/0x1320 [ 190.858402] ? __fdget+0x4e/0x60 [ 190.861846] __sys_sendmmsg+0x490/0x850 [ 190.865852] ? syscall_return_slowpath+0xe9/0x710 [ 190.870865] ? prepare_exit_to_usermode+0x4a/0x3a0 [ 190.875819] ? syscall_return_slowpath+0xe9/0x710 [ 190.880709] __x64_sys_sendmmsg+0x11c/0x170 [ 190.885059] ? __sys_sendmmsg+0x850/0x850 [ 190.889233] do_syscall_64+0x15b/0x230 [ 190.893168] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 190.898571] RIP: 0033:0x455ba9 01:58:58 executing program 3: 01:58:58 executing program 7: [ 190.901768] RSP: 002b:00007f8bed525c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 190.909493] RAX: ffffffffffffffda RBX: 00007f8bed5266d4 RCX: 0000000000455ba9 [ 190.916777] RDX: 0000000000000001 RSI: 0000000020004640 RDI: 0000000000000015 [ 190.924095] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 190.931405] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 190.938705] R13: 00000000004c0dce R14: 00000000004d0e90 R15: 0000000000000000 [ 190.945998] [ 190.947635] Uninit was stored to memory at: [ 190.951993] kmsan_internal_chain_origin+0x12b/0x210 01:58:59 executing program 2: [ 190.957126] kmsan_memcpy_origins+0x11d/0x170 [ 190.961656] kmsan_memmove_origins+0x9/0x10 [ 190.966010] __msan_memmove+0xda/0x130 [ 190.969927] ipv6_frag_rcv+0x4ee9/0x6810 [ 190.974009] ip6_input_finish+0x1353/0x2260 [ 190.978388] ip6_mc_input+0xa65/0x10a0 [ 190.982315] ip6_rcv_finish+0x498/0x6e0 [ 190.986315] ipv6_rcv+0x1d6b/0x2360 [ 190.989970] __netif_receive_skb_core+0x47f3/0x4aa0 [ 190.995288] process_backlog+0x62d/0xe20 [ 190.999378] net_rx_action+0x766/0x1a80 [ 191.003381] __do_softirq+0x592/0x979 01:58:59 executing program 4: [ 191.007362] [ 191.008999] Uninit was created at: [ 191.012567] kmsan_internal_poison_shadow+0xb8/0x1b0 [ 191.017726] kmsan_kmalloc+0x94/0x100 [ 191.021568] kmsan_slab_alloc+0x10/0x20 [ 191.025569] __kmalloc_node_track_caller+0xb35/0x11b0 [ 191.030913] __alloc_skb+0x2cb/0x9e0 [ 191.034657] ip6_fragment+0x3cd9/0x5160 [ 191.038682] ip6_finish_output+0xa14/0xbb0 [ 191.042936] ip6_output+0x597/0x6c0 [ 191.046584] ip6_xmit+0x2067/0x2370 [ 191.050248] inet6_csk_xmit+0x35b/0x440 [ 191.054245] l2tp_xmit_skb+0x1afe/0x1f00 01:58:59 executing program 6: 01:58:59 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0) close(r0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000080)={'raw\x00'}, &(0x7f0000000100)=0x54) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000140)) [ 191.058329] pppol2tp_sendmsg+0x7a9/0xc40 [ 191.062507] ___sys_sendmsg+0xec8/0x1320 [ 191.066655] __sys_sendmmsg+0x490/0x850 [ 191.070674] __x64_sys_sendmmsg+0x11c/0x170 [ 191.075545] do_syscall_64+0x15b/0x230 [ 191.079502] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 191.085134] ================================================================== [ 191.092511] Disabling lock debugging due to kernel taint [ 191.097989] Kernel panic - not syncing: panic_on_warn set ... [ 191.097989] [ 191.105508] CPU: 0 PID: 6745 Comm: syz-executor0 Tainted: G B 4.17.0+ #22 [ 191.113841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 191.123243] Call Trace: [ 191.125847] [ 191.128032] dump_stack+0x185/0x1d0 [ 191.131880] panic+0x3d0/0x9b0 [ 191.135135] kmsan_report+0x29e/0x2a0 [ 191.139203] __msan_warning_32+0x70/0xc0 [ 191.143300] ? ip6_input_finish+0x561/0x2260 [ 191.147833] ? ip6_input_finish+0x561/0x2260 [ 191.152277] raw6_local_deliver+0x137/0x1fe0 [ 191.156752] ip6_input_finish+0x561/0x2260 [ 191.161040] ip6_mc_input+0xa65/0x10a0 [ 191.164948] ? ip6_input+0x320/0x320 [ 191.168707] ? ip6_input_finish+0x2260/0x2260 [ 191.173239] ip6_rcv_finish+0x498/0x6e0 [ 191.177241] ipv6_rcv+0x1d6b/0x2360 [ 191.180887] ? local_bh_enable+0x40/0x40 [ 191.184987] __netif_receive_skb_core+0x47f3/0x4aa0 [ 191.190038] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 191.195450] ? ip6_rcv_finish+0x6e0/0x6e0 [ 191.199634] process_backlog+0x62d/0xe20 [ 191.203820] ? rps_trigger_softirq+0x2f0/0x2f0 [ 191.208694] net_rx_action+0x766/0x1a80 [ 191.212712] ? net_tx_action+0xad0/0xad0 [ 191.216898] __do_softirq+0x592/0x979 [ 191.220735] do_softirq_own_stack+0x49/0x80 [ 191.225063] [ 191.227347] __local_bh_enable_ip+0x114/0x140 [ 191.231959] local_bh_enable+0x36/0x40 [ 191.235910] pppol2tp_sendmsg+0x7ae/0xc40 [ 191.240109] ? pppol2tp_getsockopt+0x10a0/0x10a0 [ 191.245078] ___sys_sendmsg+0xec8/0x1320 [ 191.249185] ? __fdget+0x4e/0x60 [ 191.252721] __sys_sendmmsg+0x490/0x850 01:58:59 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={r0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0x0], 0x1}, 0x20) 01:58:59 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) sendto$inet6(r1, &(0x7f0000000000)="8e", 0x1, 0xfffffffffffffdff, 0x0, 0x0) [ 191.256736] ? syscall_return_slowpath+0xe9/0x710 [ 191.261621] ? prepare_exit_to_usermode+0x4a/0x3a0 [ 191.266709] ? syscall_return_slowpath+0xe9/0x710 [ 191.271612] __x64_sys_sendmmsg+0x11c/0x170 [ 191.275978] ? __sys_sendmmsg+0x850/0x850 [ 191.280162] do_syscall_64+0x15b/0x230 [ 191.284102] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 191.289315] RIP: 0033:0x455ba9 [ 191.292516] RSP: 002b:00007f8bed525c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 191.300247] RAX: ffffffffffffffda RBX: 00007f8bed5266d4 RCX: 0000000000455ba9 [ 191.307534] RDX: 0000000000000001 RSI: 0000000020004640 RDI: 0000000000000015 [ 191.315777] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 191.323070] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 191.330472] R13: 00000000004c0dce R14: 00000000004d0e90 R15: 0000000000000000 [ 191.338575] Dumping ftrace buffer: [ 191.342132] (ftrace buffer empty) [ 191.345830] Kernel Offset: disabled [ 191.349456] Rebooting in 86400 seconds..