[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 40.688265] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. [ 41.524983] random: sshd: uninitialized urandom read (32 bytes read) [ 41.924140] random: sshd: uninitialized urandom read (32 bytes read) Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 43.216835] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.35' (ECDSA) to the list of known hosts. [ 48.821798] random: sshd: uninitialized urandom read (32 bytes read) 2018/08/17 09:44:35 fuzzer started [ 50.338965] random: cc1: uninitialized urandom read (8 bytes read) 2018/08/17 09:44:37 dialing manager at 10.128.0.26:45509 2018/08/17 09:44:40 syscalls: 1 2018/08/17 09:44:40 code coverage: enabled 2018/08/17 09:44:40 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/08/17 09:44:40 setuid sandbox: enabled 2018/08/17 09:44:40 namespace sandbox: enabled 2018/08/17 09:44:40 fault injection: enabled 2018/08/17 09:44:40 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/08/17 09:44:40 net packed injection: enabled 2018/08/17 09:44:40 net device setup: enabled [ 56.531801] random: crng init done 09:46:28 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") r1 = syz_open_dev$sndtimer(&(0x7f0000022ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f000000efcc)={{0x100000001, 0x0, 0x0, 0xfffffffffffffffe}}) 09:46:28 executing program 1: bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x28, &(0x7f0000000040)}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@link_local={0x1, 0x80, 0xc2, 0x4c000000}, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0xf0ffff, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x29, 0x0, @empty, @broadcast}, @udp={0x0, 0x0, 0x28}}}}}, &(0x7f0000000380)) 09:46:28 executing program 7: 09:46:28 executing program 2: 09:46:28 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r0, &(0x7f0000865000), 0xebce, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @loopback}, 0x10) 09:46:28 executing program 3: socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="0a5cc80700315f85714070") r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_type(r0, &(0x7f0000001340)='threaded\x00', 0xfffffd63) write$binfmt_elf64(r0, &(0x7f00000014c0)={{0x7f, 0x45, 0x4c, 0x46, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) close(r0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, r0, 0x5) 09:46:28 executing program 5: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) socket$kcm(0xa, 0x1, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x100000000400200) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002e40)={0x12, 0xf0, 0x4, 0x6c, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r1, &(0x7f00000001c0)="d1ce7c387df178dd", &(0x7f0000000140)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002d80)={r1, &(0x7f0000002c80), &(0x7f0000002cc0)=""/182}, 0x18) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000000200)) 09:46:28 executing program 6: r0 = gettid() perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x857, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) memfd_create(&(0x7f0000000000)='\x00', 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x2) fcntl$dupfd(r1, 0x0, r1) dup3(r2, r1, 0x0) write(r1, &(0x7f0000c34fff), 0xffffff0b) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r0, 0x1000000000016) [ 163.384797] IPVS: ftp: loaded support on port[0] = 21 [ 163.424215] IPVS: ftp: loaded support on port[0] = 21 [ 163.474870] IPVS: ftp: loaded support on port[0] = 21 [ 163.477866] IPVS: ftp: loaded support on port[0] = 21 [ 163.494235] IPVS: ftp: loaded support on port[0] = 21 [ 163.528445] IPVS: ftp: loaded support on port[0] = 21 [ 163.536811] IPVS: ftp: loaded support on port[0] = 21 [ 163.554574] IPVS: ftp: loaded support on port[0] = 21 [ 165.960442] ip (4679) used greatest stack depth: 53712 bytes left [ 166.012348] ip (4680) used greatest stack depth: 53696 bytes left [ 167.771222] ip (4782) used greatest stack depth: 53688 bytes left [ 168.412930] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.419535] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.486108] device bridge_slave_0 entered promiscuous mode [ 168.556912] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.563455] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.606714] device bridge_slave_0 entered promiscuous mode [ 168.633451] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.640014] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.667392] device bridge_slave_0 entered promiscuous mode [ 168.686957] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.693454] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.712469] device bridge_slave_0 entered promiscuous mode [ 168.728493] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.735026] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.759750] device bridge_slave_0 entered promiscuous mode [ 168.782810] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.789334] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.811898] device bridge_slave_0 entered promiscuous mode [ 168.823533] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.830015] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.842271] device bridge_slave_0 entered promiscuous mode [ 168.872381] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.878922] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.890791] device bridge_slave_1 entered promiscuous mode [ 168.899993] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.906500] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.930930] device bridge_slave_1 entered promiscuous mode [ 168.947287] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.953845] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.979345] device bridge_slave_0 entered promiscuous mode [ 168.995574] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.002172] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.024689] device bridge_slave_1 entered promiscuous mode [ 169.034817] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.041311] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.072091] device bridge_slave_1 entered promiscuous mode [ 169.103401] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.109911] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.136787] device bridge_slave_1 entered promiscuous mode [ 169.156794] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.163317] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.187640] device bridge_slave_1 entered promiscuous mode [ 169.196841] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 169.204175] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.210662] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.240797] device bridge_slave_1 entered promiscuous mode [ 169.274319] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 169.282370] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 169.294417] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.300970] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.352641] device bridge_slave_1 entered promiscuous mode [ 169.379247] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 169.388843] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 169.443747] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 169.485755] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 169.562266] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 169.588405] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 169.603549] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 169.659211] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 169.687797] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 169.716374] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 169.834124] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 169.862869] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 169.950334] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 170.481710] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 170.565706] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 170.634635] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 170.646099] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 170.658675] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 170.697683] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 170.785706] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 170.813865] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 170.912143] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 170.925263] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 170.964657] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 171.002314] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 171.023155] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 171.064706] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 171.088582] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 171.115717] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 171.138508] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 171.145562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 171.253247] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 171.297175] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 171.304265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 171.338016] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 171.353808] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 171.360902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 171.388154] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 171.397281] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 171.407524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 171.420145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 171.447341] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 171.460200] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 171.467260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 171.515115] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 171.654553] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 171.662127] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 171.669286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 171.678897] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 171.731511] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 171.740761] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 171.747853] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 171.779334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 171.814827] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 171.823114] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 171.867791] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 171.875173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 171.915983] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 171.923377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 172.020506] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 172.027584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 172.522770] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 172.551274] team0: Port device team_slave_0 added [ 172.613780] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 172.644699] team0: Port device team_slave_0 added [ 172.671351] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 172.704877] team0: Port device team_slave_0 added [ 172.751619] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 172.774210] team0: Port device team_slave_0 added [ 172.796224] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 172.823205] team0: Port device team_slave_0 added [ 172.843616] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 172.873380] team0: Port device team_slave_0 added [ 172.907312] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 172.931748] team0: Port device team_slave_1 added [ 172.952263] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 172.982128] team0: Port device team_slave_0 added [ 172.996786] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 173.035440] team0: Port device team_slave_1 added [ 173.069395] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 173.100341] team0: Port device team_slave_1 added [ 173.120213] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 173.132705] team0: Port device team_slave_1 added [ 173.148464] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 173.162265] team0: Port device team_slave_1 added [ 173.176373] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 173.189218] team0: Port device team_slave_0 added [ 173.204189] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 173.232267] team0: Port device team_slave_1 added [ 173.287678] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 173.314590] team0: Port device team_slave_1 added [ 173.329603] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 173.337623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 173.360107] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 173.393640] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 173.410150] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 173.421120] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 173.429820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 173.487448] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 173.516323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 173.544365] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 173.567516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 173.586409] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 173.608647] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 173.616474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 173.628539] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 173.666764] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 173.679673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 173.694613] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 173.712937] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 173.722597] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 173.730269] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 173.741777] team0: Port device team_slave_1 added [ 173.767661] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 173.775024] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 173.784373] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 173.791817] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 173.808962] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 173.864761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 173.891705] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 173.921292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 173.960352] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 173.982462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 174.011298] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 174.023339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 174.032873] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 174.055791] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 174.078236] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 174.093539] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 174.112813] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 174.127598] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 174.137167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 174.147808] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 174.183835] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 174.208605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 174.232025] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 174.240469] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 174.248601] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 174.257135] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 174.265903] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 174.273588] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 174.302694] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 174.345636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 174.370514] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 174.405256] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 174.442364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 174.470104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 174.488402] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 174.499148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 174.508275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 174.521800] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 174.530214] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 174.553731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 174.609434] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 174.618642] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 174.626645] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 174.637124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 174.656438] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 174.669358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 174.680309] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 174.688734] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 174.698687] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 174.708638] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 174.720531] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 174.774489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 174.802255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 174.833563] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 174.864543] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 174.890495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 174.906274] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 174.922513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 174.937012] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 174.945799] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 174.955229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 174.987869] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 175.008239] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 175.020643] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 175.031259] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 175.045820] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 175.092615] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 175.131527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 175.152116] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 175.179443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 175.207133] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 175.215699] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 175.253426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 175.301161] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 175.311146] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 175.329389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 178.250339] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.256827] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.263724] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.270180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.348599] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 178.355397] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 178.388971] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.395475] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.402372] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.408841] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.421470] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 178.439961] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.446457] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.453365] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.459833] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.481963] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 178.488977] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.495451] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.502363] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.508860] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.561155] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 178.639175] ip (5280) used greatest stack depth: 53432 bytes left [ 178.690826] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.697348] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.704251] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.710705] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.774649] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 178.793902] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.800406] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.807329] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.813795] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.838492] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 178.860781] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.867270] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.874201] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.880663] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.964874] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 178.979273] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.985770] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.992636] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.999170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.056183] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 179.359722] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 179.380681] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 179.399374] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 179.412931] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 179.421616] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 179.430983] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 179.440417] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 191.002857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.155439] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.333212] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.373315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.416162] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.478178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.828286] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.865927] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.310479] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 192.351540] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 192.555847] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 192.564957] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 192.620802] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 192.666508] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 193.013245] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 193.163761] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 193.479647] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 193.485957] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 193.499296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 193.522623] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 193.531158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 193.546736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 193.678998] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 193.685260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 193.696860] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 193.908574] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 193.916272] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 193.925022] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 193.940395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 193.991372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 194.014742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 194.053995] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 194.060550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 194.078461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 194.278753] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 194.285119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 194.300912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 194.451712] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 194.458171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 194.466991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 194.710656] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.760806] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.077532] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.176833] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.199411] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.281312] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.541746] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.757566] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.067427] sit: non-ECT from 0.0.0.0 with TOS=0x3 09:47:08 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cuse\x00', 0x0, 0x0) r1 = socket(0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000080), 0x10) sendto$inet6(r1, &(0x7f0000000480), 0x37, 0x0, 0x0, 0x2a6) close(r0) 09:47:08 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)={&(0x7f0000000340)='./file0\x00'}, 0x1) [ 202.537481] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 09:47:08 executing program 1: openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz1\x00', 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)="1167726f75702e65761599b50329", 0x0, 0x0) mkdirat$cgroup(r0, &(0x7f0000000100)='syz1\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)="2f02726f75fd62457c26f9eac3702e7374617000", 0x2761, 0x0) write$cgroup_type(r1, &(0x7f0000000780)='threaded\x00', 0xfffffc81) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000040)='threaded\x00', 0x9) openat$cgroup_int(r1, &(0x7f0000000180)='cpuacct.usage\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0xc020660b, 0x0) 09:47:08 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x0, 0x0, &(0x7f0000000000)) mq_timedreceive(r0, &(0x7f00000000c0)=""/222, 0xde, 0x0, &(0x7f0000000280)={0x0, 0x1c9c380}) 09:47:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000100)={'gre0\x00', {0x2, 0x4e21, @broadcast}}) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x2}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x0) 09:47:08 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x2, 0x2000000088) bind(r1, &(0x7f0000000080)=@in={0x2, 0x4e20}, 0x7c) setsockopt$inet_udp_int(r1, 0x11, 0xa, &(0x7f0000000000)=0x1, 0x4) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000240), 0x80, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/255, 0xff}], 0x1, &(0x7f0000000440)=""/171, 0xab}, 0x0) sendto$inet(r1, &(0x7f0000000100)='X', 0x1, 0x0, &(0x7f0000000140)={0x2, 0x8004e20}, 0x10) 09:47:09 executing program 6: r0 = socket$inet(0x10, 0x3, 0x4) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000000080)="4c0000001300ff09fffd956fa283b70000ffff07000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 09:47:09 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000500)={0x84, @multicast1, 0x0, 0x1, 'none\x00'}, 0x2c) 09:47:09 executing program 0: 09:47:09 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={&(0x7f0000018ff4), 0xc, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000002800010000000000000000000100762cd5f4610aec280000"], 0x1}}, 0x0) 09:47:09 executing program 5: 09:47:09 executing program 7: 09:47:09 executing program 2: 09:47:10 executing program 3: 09:47:10 executing program 6: 09:47:10 executing program 7: 09:47:10 executing program 5: 09:47:10 executing program 2: 09:47:10 executing program 0: 09:47:10 executing program 4: 09:47:10 executing program 1: 09:47:10 executing program 2: 09:47:10 executing program 3: 09:47:10 executing program 5: 09:47:10 executing program 4: 09:47:10 executing program 7: 09:47:10 executing program 1: 09:47:10 executing program 0: 09:47:10 executing program 6: 09:47:10 executing program 2: 09:47:10 executing program 3: 09:47:10 executing program 7: 09:47:10 executing program 5: 09:47:10 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="7f504c460000000000000000000000000000000000000000000000004000000000000000000000525300"], 0x2a) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) read(r0, &(0x7f00000001c0)=""/196, 0xc4) 09:47:10 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"00ac720000000000ec973f820f7c4000", 0x102}) getsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0xb) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30a) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000080), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) close(r0) 09:47:10 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x400000000000002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"0000000000000000000000000200", 0x12}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000080)=0x80000001) write$binfmt_aout(r0, &(0x7f0000000240), 0x20) 09:47:10 executing program 0: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) close(r0) 09:47:11 executing program 2: r0 = eventfd(0x0) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xffffffffffffffe0) r1 = socket$inet6(0xa, 0x1, 0x0) io_setup(0x4, &(0x7f00000000c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000700)=[&(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000004c0), 0x0, 0x0, 0x0, 0x1, r0}]) 09:47:11 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$int_in(r4, 0x5452, &(0x7f00000003c0)=0x3) sendmmsg$unix(r4, &(0x7f00000bd000), 0x1e628281cc4f499f, 0x0) ppoll(&(0x7f0000000000)=[{r4, 0x8004}], 0x1, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000180), 0x8) readv(r3, &(0x7f0000000580)=[{&(0x7f0000000540)=""/52, 0x34}], 0x1) 09:47:11 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x4, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) close(r0) 09:47:11 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="7a0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000bd120000000000008500000006000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0xa}, 0x48) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)={r1, r0, 0xa, 0x3}, 0x10) 09:47:11 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e24, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x49) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") sendmmsg(r0, &(0x7f00000002c0), 0x4cc, 0x20007ffc) 09:47:11 executing program 0: socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010a07031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) [ 205.197568] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 205.234409] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 09:47:11 executing program 7: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x4000000000080003, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000180), 0x4) 09:47:11 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x402c5828, &(0x7f00000001c0)={0x0, 0x0, 0x400000200000001}) 09:47:11 executing program 0: r0 = socket(0x1000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e0007f1fff57f0200000000000000005307a33d6c390f0001454a", 0x1f) 09:47:11 executing program 7: close(0xffffffffffffffff) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) socket$kcm(0xa, 0x1, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000340)='team\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)={0x12, 0x4, 0x4, 0x2}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r0, &(0x7f0000000100)}, 0x10) mount(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0)="6365706800e9939d7656b741d1e0f62a0c9a60e76130f91c17a16f8a5437c9680aad3b4e45eddd76aab71a9e975d0177bc8f8d8bc8f9d30f9c55ced1150431a9b1a839bbf3fe67d3c0acde4e07a4ba536d54200f4e4dc3b02679197d7ba36309981462765060c41372bfb4f51c4a130a10ce0ac1731ce47f5ba461f37619f3ad2f00f19a93b6f27a14fbfbec7c5373c0ebc09635", 0x0, 0x0) 09:47:11 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0xe, &(0x7f0000000180), 0x4) [ 205.743241] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 205.772475] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 09:47:11 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x400000000000002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"0000000000000000000000000200", 0x12}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000080)) write$binfmt_aout(r0, &(0x7f0000000240), 0x20) 09:47:12 executing program 7: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)="2f02726f75702e7374617000", 0x2761, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x41, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40286608, 0x20000000) [ 206.136132] ================================================================== [ 206.143571] BUG: KMSAN: uninit-value in memcmp+0x11d/0x180 [ 206.149222] CPU: 1 PID: 6756 Comm: syz-executor1 Not tainted 4.18.0-rc8+ #34 [ 206.156424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 206.166279] Call Trace: [ 206.168907] dump_stack+0x17c/0x1c0 [ 206.172573] kmsan_report+0x188/0x2a0 [ 206.176425] __msan_warning+0x70/0xc0 [ 206.180255] memcmp+0x11d/0x180 [ 206.183579] __dev_mc_del+0x169/0x6c0 [ 206.187421] dev_mc_del+0x6d/0x80 [ 206.190907] igmp6_group_dropped+0x2c5/0x12a0 [ 206.195429] ? kmsan_set_origin_inline+0x6b/0x120 [ 206.200323] ipv6_mc_down+0xc8/0x360 [ 206.204083] addrconf_ifdown+0x21bb/0x2670 [ 206.208429] addrconf_notify+0x871/0x5be0 [ 206.212624] ? kmsan_set_origin_inline+0x6b/0x120 [ 206.217500] ? __msan_poison_alloca+0x173/0x200 [ 206.222209] ? tls_dev_event+0x81/0xfb0 [ 206.226255] ? dev_forward_change+0xb70/0xb70 [ 206.230784] raw_notifier_call_chain+0x13e/0x240 [ 206.235580] dev_close_many+0x627/0x9e0 [ 206.239587] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 206.245003] rollback_registered_many+0x9c2/0x1d40 [ 206.249962] ? kmsan_set_origin_inline+0x6b/0x120 [ 206.254853] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 206.260264] unregister_netdevice_queue+0x547/0xa40 [ 206.265322] __tun_detach+0x220c/0x2c70 [ 206.269355] tun_chr_close+0xda/0x1c0 [ 206.273195] __fput+0x458/0xa30 [ 206.276517] ? fput+0x2e0/0x2e0 [ 206.279821] ____fput+0x37/0x40 [ 206.283140] task_work_run+0x22e/0x2b0 [ 206.287066] prepare_exit_to_usermode+0x339/0x410 [ 206.291954] syscall_return_slowpath+0xdb/0x700 [ 206.296659] ? __close_fd+0x465/0x4c0 [ 206.300511] do_syscall_64+0x1ab/0x220 [ 206.304436] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 206.309648] RIP: 0033:0x457089 [ 206.312856] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 206.332392] RSP: 002b:00007f86c7899c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 206.340145] RAX: 0000000000000000 RBX: 00007f86c789a6d4 RCX: 0000000000457089 [ 206.347432] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 206.354722] RBP: 0000000000930140 R08: 0000000000000000 R09: 0000000000000000 [ 206.362009] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 206.369305] R13: 00000000004cb460 R14: 00000000004ee072 R15: 0000000000000001 [ 206.376616] [ 206.378253] Local variable description: ----buf@igmp6_group_dropped [ 206.384664] Variable was created at: [ 206.388401] igmp6_group_dropped+0x49/0x12a0 [ 206.392821] 0x1 [ 206.394816] ================================================================== [ 206.402195] Disabling lock debugging due to kernel taint [ 206.407665] Kernel panic - not syncing: panic_on_warn set ... [ 206.407665] [ 206.416022] CPU: 1 PID: 6756 Comm: syz-executor1 Tainted: G B 4.18.0-rc8+ #34 [ 206.424623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 206.434007] Call Trace: [ 206.436630] dump_stack+0x17c/0x1c0 [ 206.440306] panic+0x3c3/0x9a0 [ 206.443564] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 206.449055] kmsan_report+0x29e/0x2a0 [ 206.452907] __msan_warning+0x70/0xc0 [ 206.456745] memcmp+0x11d/0x180 [ 206.460067] __dev_mc_del+0x169/0x6c0 [ 206.463935] dev_mc_del+0x6d/0x80 [ 206.467432] igmp6_group_dropped+0x2c5/0x12a0 [ 206.471965] ? kmsan_set_origin_inline+0x6b/0x120 [ 206.476868] ipv6_mc_down+0xc8/0x360 [ 206.480628] addrconf_ifdown+0x21bb/0x2670 [ 206.484924] addrconf_notify+0x871/0x5be0 [ 206.489107] ? kmsan_set_origin_inline+0x6b/0x120 [ 206.493992] ? __msan_poison_alloca+0x173/0x200 [ 206.498699] ? tls_dev_event+0x81/0xfb0 [ 206.502713] ? dev_forward_change+0xb70/0xb70 [ 206.507224] raw_notifier_call_chain+0x13e/0x240 [ 206.512021] dev_close_many+0x627/0x9e0 [ 206.516032] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 206.521440] rollback_registered_many+0x9c2/0x1d40 [ 206.526396] ? kmsan_set_origin_inline+0x6b/0x120 [ 206.531275] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 206.536687] unregister_netdevice_queue+0x547/0xa40 [ 206.541745] __tun_detach+0x220c/0x2c70 [ 206.545776] tun_chr_close+0xda/0x1c0 [ 206.549625] __fput+0x458/0xa30 [ 206.552948] ? fput+0x2e0/0x2e0 [ 206.556259] ____fput+0x37/0x40 [ 206.559552] task_work_run+0x22e/0x2b0 [ 206.563459] prepare_exit_to_usermode+0x339/0x410 [ 206.568342] syscall_return_slowpath+0xdb/0x700 [ 206.573136] ? __close_fd+0x465/0x4c0 [ 206.576958] do_syscall_64+0x1ab/0x220 [ 206.580879] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 206.586093] RIP: 0033:0x457089 [ 206.589284] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 206.608701] RSP: 002b:00007f86c7899c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 206.616433] RAX: 0000000000000000 RBX: 00007f86c789a6d4 RCX: 0000000000457089 [ 206.623715] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 206.631007] RBP: 0000000000930140 R08: 0000000000000000 R09: 0000000000000000 [ 206.638394] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 206.645666] R13: 00000000004cb460 R14: 00000000004ee072 R15: 0000000000000001 [ 206.653270] Dumping ftrace buffer: [ 206.656805] (ftrace buffer empty) [ 206.660501] Kernel Offset: disabled [ 206.664119] Rebooting in 86400 seconds..