[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 31.461711] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 35.402693] random: sshd: uninitialized urandom read (32 bytes read) [ 35.829756] random: sshd: uninitialized urandom read (32 bytes read) [ 37.215551] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.10' (ECDSA) to the list of known hosts. [ 42.840505] random: sshd: uninitialized urandom read (32 bytes read) 2018/07/02 21:32:52 fuzzer started [ 44.299630] random: cc1: uninitialized urandom read (8 bytes read) 2018/07/02 21:32:55 dialing manager at 10.128.0.26:36811 2018/07/02 21:33:01 syscalls: 1518 2018/07/02 21:33:01 code coverage: enabled 2018/07/02 21:33:01 comparison tracing: ioctl(KCOV_TRACE_CMP) failed: errno 524 2018/07/02 21:33:01 setuid sandbox: enabled 2018/07/02 21:33:01 namespace sandbox: enabled 2018/07/02 21:33:01 fault injection: enabled 2018/07/02 21:33:01 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/07/02 21:33:01 net packed injection: enabled [ 52.961374] random: crng init done 21:34:22 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="b700000000000080bfa30000000000000703000020feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000016d4003000000000065000400018400002c04000000000000b7050000000000006a0a00fe00000000850000002e000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) 21:34:22 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000dec000)={0x2, 0x4, 0x1, 0x7}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f00000000c0)={r1, &(0x7f0000000080), &(0x7f000089b000)}, 0x18) 21:34:22 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f00000000c0)=0x1a, 0x7e6855bc) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x5, 0x5, 0x0, 0x2}) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000005bc0)) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000180)="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") msync(&(0x7f0000fee000/0x11000)=nil, 0x11000, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000005d00)=0x400) 21:34:22 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x9) timerfd_create(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x9, 0x8001}) 21:34:22 executing program 4: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) rt_sigqueueinfo(r1, 0x12, &(0x7f0000000080)={0x0, 0x0, 0xfffffffffffffff9}) ptrace(0x4208, r1) 21:34:22 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x4000c0, 0x0) getresgid(&(0x7f0000000000), &(0x7f0000000140), &(0x7f0000000340)) r2 = dup3(r0, r1, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x0, &(0x7f0000000200)={0x0, {{0x2, 0x0, @broadcast=0xffffffff}}, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x108) getpeername$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, @local}, &(0x7f0000000080)=0x10) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000003c0)="7965616800e879d3ae916fe5933819ec6ef15824947f0e24a391f827e37fd56de68566731d546f179bc2218dbbbc69283b1cabdaa6fedf8a59c8a2c54a33885aa826cfb11c5bf29ca9946f43a9ac234836b8d436ca134135", 0x3c) setsockopt$inet_tcp_int(r2, 0x6, 0x0, &(0x7f0000000100), 0x4) 21:34:22 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000780)={0x25, @time}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f00000000c0)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) 21:34:22 executing program 6: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x0) unlinkat(0xffffffffffffffff, &(0x7f00000000c0)="2f2f66696c65300200", 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000100)={0x0, 0x3}) mknodat(r0, &(0x7f0000000080)="2f2f66696c65300200", 0x0, 0x564d) [ 133.822678] IPVS: ftp: loaded support on port[0] = 21 [ 133.868373] IPVS: ftp: loaded support on port[0] = 21 [ 133.882003] IPVS: ftp: loaded support on port[0] = 21 [ 133.919254] IPVS: ftp: loaded support on port[0] = 21 [ 133.946397] IPVS: ftp: loaded support on port[0] = 21 [ 133.971301] IPVS: ftp: loaded support on port[0] = 21 [ 133.992497] IPVS: ftp: loaded support on port[0] = 21 [ 133.998486] IPVS: ftp: loaded support on port[0] = 21 [ 135.804850] ip (4676) used greatest stack depth: 54424 bytes left [ 135.880558] ip (4680) used greatest stack depth: 54216 bytes left [ 137.309630] ip (4783) used greatest stack depth: 54120 bytes left [ 137.691898] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.698422] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.754156] device bridge_slave_0 entered promiscuous mode [ 137.812907] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.819374] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.851585] device bridge_slave_0 entered promiscuous mode [ 137.879168] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.885616] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.932390] device bridge_slave_0 entered promiscuous mode [ 137.978009] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.984620] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.034241] device bridge_slave_0 entered promiscuous mode [ 138.061823] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.068315] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.110203] device bridge_slave_1 entered promiscuous mode [ 138.138661] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.145118] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.155382] device bridge_slave_1 entered promiscuous mode [ 138.186869] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.193349] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.202836] device bridge_slave_0 entered promiscuous mode [ 138.212801] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.219265] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.245539] device bridge_slave_0 entered promiscuous mode [ 138.269810] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.276315] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.301633] device bridge_slave_0 entered promiscuous mode [ 138.312388] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.318843] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.337119] device bridge_slave_0 entered promiscuous mode [ 138.356382] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.362886] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.382747] device bridge_slave_1 entered promiscuous mode [ 138.395291] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.401745] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.416580] device bridge_slave_1 entered promiscuous mode [ 138.428280] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.434740] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.449652] device bridge_slave_1 entered promiscuous mode [ 138.465423] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 138.475301] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 138.485298] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.491716] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.519974] device bridge_slave_1 entered promiscuous mode [ 138.540483] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.546964] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.565005] device bridge_slave_1 entered promiscuous mode [ 138.581346] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 138.589405] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.595862] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.627192] device bridge_slave_1 entered promiscuous mode [ 138.655940] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 138.667302] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 138.698316] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 138.724191] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 138.755706] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 138.798767] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 138.809817] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 138.884637] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 138.906923] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 138.915616] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 139.001779] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 139.056216] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 139.187760] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 139.393604] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 139.448671] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 139.550874] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 139.586652] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 139.627350] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 139.702365] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 139.718292] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 139.761550] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 139.812987] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 139.825247] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 139.851735] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 139.858736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 139.873004] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 139.930084] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 139.967786] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 139.974791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 139.986071] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 140.039169] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 140.076017] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 140.087907] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 140.094921] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 140.122496] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 140.129543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 140.158158] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 140.165294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 140.221395] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 140.231469] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 140.240440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 140.259846] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 140.269335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 140.287480] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 140.296609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 140.366553] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 140.373597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 140.386550] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 140.398735] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 140.444781] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 140.452162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 140.489989] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 140.497081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 140.518852] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 140.526121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 140.585881] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 140.592890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 140.652378] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 140.659379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 140.770802] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 140.777781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 140.889806] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 140.919277] team0: Port device team_slave_0 added [ 141.059733] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 141.085904] team0: Port device team_slave_0 added [ 141.115734] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 141.131683] team0: Port device team_slave_1 added [ 141.151272] ip (5013) used greatest stack depth: 54040 bytes left [ 141.195810] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 141.219932] team0: Port device team_slave_0 added [ 141.240736] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 141.268276] team0: Port device team_slave_0 added [ 141.296767] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 141.319192] team0: Port device team_slave_0 added [ 141.338774] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 141.354933] team0: Port device team_slave_1 added [ 141.365502] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 141.386062] team0: Port device team_slave_0 added [ 141.401700] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 141.413901] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 141.435732] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 141.464653] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 141.488589] team0: Port device team_slave_0 added [ 141.521765] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 141.544966] team0: Port device team_slave_1 added [ 141.557661] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 141.570878] team0: Port device team_slave_1 added [ 141.599338] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 141.610136] team0: Port device team_slave_1 added [ 141.623434] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 141.635730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 141.650598] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 141.679252] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 141.696121] team0: Port device team_slave_1 added [ 141.714671] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 141.724556] team0: Port device team_slave_1 added [ 141.744716] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 141.763388] team0: Port device team_slave_0 added [ 141.775698] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 141.785919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 141.811173] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 141.840663] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 141.850822] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 141.861860] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 141.890681] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 141.899952] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 141.908409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 141.928597] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 141.953851] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 141.980009] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 142.005362] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 142.012901] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 142.027568] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 142.050404] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 142.061739] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 142.070433] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 142.080641] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 142.088217] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 142.113782] team0: Port device team_slave_1 added [ 142.134837] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 142.143444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 142.162918] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 142.209148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 142.237202] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 142.253825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 142.273310] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 142.282303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 142.290616] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 142.298480] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 142.306762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 142.319601] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 142.326937] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 142.335799] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 142.351339] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 142.358718] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 142.368071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 142.393359] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 142.410472] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 142.418605] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 142.426970] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 142.456286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 142.485297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 142.515534] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 142.531774] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 142.540756] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 142.549917] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 142.557530] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 142.565837] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 142.583379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 142.601644] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 142.620139] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 142.645215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 142.660231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 142.675567] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 142.691387] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 142.701656] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 142.712531] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 142.725690] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 142.744630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 142.759745] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 142.783244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 142.799793] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 142.813806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 142.838873] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 142.848819] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 142.856483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 142.875357] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 142.893909] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 142.911188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 142.931371] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 142.943793] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 142.967123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 142.991488] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 142.998798] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 143.019605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 143.054257] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 143.067630] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 143.085414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 143.122192] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 143.129939] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 143.143471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 143.170276] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 143.180156] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 143.200176] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 143.222350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 143.265294] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 143.299307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 143.348430] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 143.357356] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 143.387102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 145.188334] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.194802] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.201584] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.208018] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.230572] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 145.239503] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 145.504698] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.511151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.517981] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.524412] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.579703] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 145.613535] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.619988] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.626743] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.633153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.670586] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 145.678766] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.685208] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.691976] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.698426] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.712135] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 145.815167] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.821626] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.828469] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.834905] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.921153] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 145.985991] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.992475] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.999284] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.005728] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.047290] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 146.053889] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.060340] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.067222] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.073660] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.113209] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 146.271213] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 146.291396] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 146.326917] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 146.345298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 146.360894] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 146.374860] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 146.409076] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.415522] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.422285] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.428792] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.439820] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 147.298716] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 155.327899] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.419145] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.476989] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.641523] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.697345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.016078] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.131625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.171957] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 156.308893] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 156.432508] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.490619] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 156.643397] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 156.698465] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 156.931814] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 156.995611] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 157.092000] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 157.098887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 157.114915] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 157.181194] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 157.187540] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 157.195186] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 157.417731] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 157.485300] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 157.493788] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 157.511831] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 157.615268] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 157.621814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 157.630232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 157.714820] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 157.721750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 157.736156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 157.936389] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 157.942734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 157.953001] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 158.015599] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.071679] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 158.079982] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.113541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 158.134193] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 158.390091] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 158.396422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 158.407897] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 158.484478] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.703967] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.753344] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.905614] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.039073] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.287509] 8021q: adding VLAN 0 to HW filter on device team0 21:34:53 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="b700000000000080bfa30000000000000703000020feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000016d4003000000000065000400018400002c04000000000000b7050000000000006a0a00fe00000000850000002e000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) 21:34:54 executing program 2: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x18032, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000040), 0x10) getsockname$inet6(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, @dev}, &(0x7f0000000080)=0x1c) 21:34:54 executing program 0: 21:34:54 executing program 0: 21:34:54 executing program 6: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x856, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000d36ff4)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000021ff4)) 21:34:54 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bond0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x10) close(r0) 21:34:54 executing program 4: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x856, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x200) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x0, &(0x7f0000000040), 0x8) [ 164.417355] device bond_slave_0 entered promiscuous mode [ 164.423071] device bond_slave_1 entered promiscuous mode 21:34:54 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) [ 164.463597] device bond_slave_0 left promiscuous mode [ 164.468966] device bond_slave_1 left promiscuous mode [ 164.539960] device bond_slave_0 entered promiscuous mode [ 164.545593] device bond_slave_1 entered promiscuous mode [ 164.562347] device bond_slave_0 left promiscuous mode [ 164.567723] device bond_slave_1 left promiscuous mode 21:34:54 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/arp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x3}) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev={0xac, 0x14, 0x14}}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x8, {0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 'syzkaller0\x00'}) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000240)=""/163, 0xa3}, {&(0x7f0000000300)=""/242, 0xf2}], 0x2) 21:34:54 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000100)=""/71, 0x47) 21:34:54 executing program 7: 21:34:55 executing program 1: 21:34:55 executing program 2: 21:34:55 executing program 0: 21:34:55 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") close(0xffffffffffffffff) clone(0xf11f00, &(0x7f0000000000), &(0x7f0000e32000), &(0x7f0000000040), &(0x7f0000000000)) 21:34:55 executing program 3: 21:34:55 executing program 6: 21:34:55 executing program 4: 21:34:55 executing program 7: 21:34:55 executing program 2: r0 = socket$inet(0x2, 0x3, 0x80000000009) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2=0xe0000002, @in=@multicast1=0xe0000001}}, {{@in6}, 0x0, @in6=@loopback={0x0, 0x1}}}, 0xe8) 21:34:55 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) clock_gettime(0x0, &(0x7f00000000c0)={0x0}) setitimer(0x0, &(0x7f0000000180)={{}, {r2}}, 0x0) getpeername(r1, &(0x7f0000001ec0)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000001f40)=0x80) 21:34:55 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x2000400) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000000c0)="295ee1311f16") r0 = timerfd_create(0x0, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f00000003c0)={'nat\x00'}, &(0x7f0000000080)=0x24) timerfd_settime(r0, 0x0, &(0x7f0000000000)={{0x2400000000000000}}, &(0x7f000000ffe0)) 21:34:55 executing program 4: 21:34:55 executing program 6: 21:34:55 executing program 3: 21:34:55 executing program 7: 21:34:55 executing program 2: 21:34:55 executing program 0: 21:34:55 executing program 1: 21:34:55 executing program 5: 21:34:55 executing program 3: 21:34:55 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') sendfile(r0, r1, &(0x7f0000000000), 0x10000) 21:34:55 executing program 6: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x52, r0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000000)) 21:34:55 executing program 4: r0 = socket(0x1, 0x1, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f0000000080)={0x0, {{0x2}}}, 0x29d) fcntl$getown(0xffffffffffffffff, 0x9) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000001, 0x13, r0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000540], 0x0, &(0x7f0000000000), &(0x7f0000000540)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {}, {0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x1, [{{{0x9, 0x8, 0x0, 'ip_vti0\x00', 'syzkaller1\x00', 'syzkaller0\x00', 'tunl0\x00', @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x1b}, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa0}}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}}]}]}, 0x1a8) openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x81, 0x0) 21:34:55 executing program 0: 21:34:55 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x0) poll(&(0x7f0000000240)=[{r0}], 0x1, 0x0) 21:34:55 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x4000c0, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000440)) getresgid(&(0x7f0000000000), &(0x7f0000000140), &(0x7f0000000340)) r2 = dup3(r0, r1, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x0, &(0x7f0000000200)={0x0, {{0x2, 0x0, @broadcast=0xffffffff}}, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x108) getpeername$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, @local}, &(0x7f0000000080)=0x10) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000003c0)="7965616800e879d3ae916fe5933819ec6ef15824947f0e24a391f827e37fd56de68566731d546f179bc2218dbbbc69283b1cabdaa6fedf8a59c8a2c54a33885aa826cfb11c5bf29ca9946f43a9ac234836b8d436ca134135", 0x3c) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f0000000380)={0x0, 'veth0\x00'}, 0x18) 21:34:55 executing program 5: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={"79616d300001178b00", 0x4014}) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) ptrace$setregset(0x4209, r1, 0x20000004, &(0x7f0000000100)={&(0x7f0000000140)}) 21:34:55 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000180)=0x7, 0x4) r1 = socket(0x10, 0x3, 0xc) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0xfffffffffffffcbf, &(0x7f00000000c0)=0x8000009) write(r1, &(0x7f0000000000)="130000001000ffdde200f49ff60f050000230a009d0000001100c53022e5f9ec364fe86bc337747a04cb1c24e175cc463437101101bd81dc3181ddd83f8d3d1f2c53e45fca5ab94018975d7db75411543e1226408e88cac1f2cbefbb693d8a0c8efc28ceb4ec3ff429592e5de7e4f28bca763acd06f40ad03226af559bf91efdb19a5faccffe8090d92237be9951be4bd7c2a1c1a2b5b2684ade4025622c962d916c000000000000000000000000000000", 0xb1) [ 165.910586] ================================================================== [ 165.918024] BUG: KMSAN: uninit-value in copy_siginfo_to_user+0x9cd/0x12c0 [ 165.924965] CPU: 0 PID: 6722 Comm: syz-executor5 Not tainted 4.17.0+ #16 [ 165.931794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 165.941143] Call Trace: [ 165.943735] dump_stack+0x185/0x1d0 [ 165.947368] kmsan_report+0x188/0x2a0 [ 165.951177] __msan_warning_32+0x70/0xc0 [ 165.955246] copy_siginfo_to_user+0x9cd/0x12c0 [ 165.959835] ? kmsan_internal_unpoison_shadow+0x83/0xe0 [ 165.965203] ptrace_request+0x1ec5/0x2270 [ 165.969358] ? wait_task_inactive+0x3a7/0x9c0 [ 165.973863] ? _raw_spin_lock_irqsave+0x45/0xf0 [ 165.978551] ? wait_task_inactive+0x3a7/0x9c0 [ 165.983052] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 165.988512] ? wait_task_inactive+0x80e/0x9c0 [ 165.993017] arch_ptrace+0xbcc/0x12c0 [ 165.996830] ? ptrace_check_attach+0x182/0x5e0 [ 166.001417] __se_sys_ptrace+0x309/0x850 [ 166.005482] __x64_sys_ptrace+0x11e/0x170 [ 166.009631] ? ptrace_regset+0x840/0x840 [ 166.013692] do_syscall_64+0x15b/0x230 [ 166.017591] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 166.022780] RIP: 0033:0x455ab9 [ 166.025964] RSP: 002b:00007f492f4e5c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000065 [ 166.033788] RAX: ffffffffffffffda RBX: 00007f492f4e66d4 RCX: 0000000000455ab9 [ 166.041057] RDX: 0000000020000004 RSI: 0000000000000001 RDI: 0000000000004209 [ 166.048324] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 166.055594] R10: 0000000020000100 R11: 0000000000000246 R12: 00000000ffffffff [ 166.062866] R13: 00000000004c07df R14: 00000000004d0300 R15: 0000000000000000 [ 166.070136] [ 166.071759] Local variable description: ----kiov@ptrace_request [ 166.077805] Variable was created at: [ 166.081528] ptrace_request+0x194/0x2270 [ 166.085589] arch_ptrace+0xbcc/0x12c0 [ 166.089376] ================================================================== [ 166.096725] Disabling lock debugging due to kernel taint [ 166.102166] Kernel panic - not syncing: panic_on_warn set ... [ 166.102166] [ 166.109533] CPU: 0 PID: 6722 Comm: syz-executor5 Tainted: G B 4.17.0+ #16 [ 166.117754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 166.127100] Call Trace: [ 166.129695] dump_stack+0x185/0x1d0 [ 166.133327] panic+0x3d0/0x990 [ 166.136539] kmsan_report+0x29e/0x2a0 [ 166.140350] __msan_warning_32+0x70/0xc0 [ 166.144413] copy_siginfo_to_user+0x9cd/0x12c0 [ 166.148997] ? kmsan_internal_unpoison_shadow+0x83/0xe0 [ 166.154370] ptrace_request+0x1ec5/0x2270 [ 166.158523] ? wait_task_inactive+0x3a7/0x9c0 [ 166.163026] ? _raw_spin_lock_irqsave+0x45/0xf0 [ 166.167702] ? wait_task_inactive+0x3a7/0x9c0 [ 166.172209] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 166.177666] ? wait_task_inactive+0x80e/0x9c0 [ 166.182206] arch_ptrace+0xbcc/0x12c0 [ 166.186012] ? ptrace_check_attach+0x182/0x5e0 [ 166.190602] __se_sys_ptrace+0x309/0x850 [ 166.194664] __x64_sys_ptrace+0x11e/0x170 [ 166.198819] ? ptrace_regset+0x840/0x840 [ 166.202900] do_syscall_64+0x15b/0x230 [ 166.206795] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 166.211975] RIP: 0033:0x455ab9 [ 166.215157] RSP: 002b:00007f492f4e5c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000065 [ 166.222865] RAX: ffffffffffffffda RBX: 00007f492f4e66d4 RCX: 0000000000455ab9 [ 166.230144] RDX: 0000000020000004 RSI: 0000000000000001 RDI: 0000000000004209 [ 166.237419] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 166.245574] R10: 0000000020000100 R11: 0000000000000246 R12: 00000000ffffffff [ 166.252846] R13: 00000000004c07df R14: 00000000004d0300 R15: 0000000000000000 [ 166.260735] Dumping ftrace buffer: [ 166.264260] (ftrace buffer empty) [ 166.267964] Kernel Offset: disabled [ 166.271567] Rebooting in 86400 seconds..