[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 38.906269] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 43.535817] random: sshd: uninitialized urandom read (32 bytes read) [ 43.875945] random: sshd: uninitialized urandom read (32 bytes read) [ 44.929604] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.28' (ECDSA) to the list of known hosts. [ 50.621173] random: sshd: uninitialized urandom read (32 bytes read) 2018/08/28 23:35:14 fuzzer started [ 51.817157] random: cc1: uninitialized urandom read (8 bytes read) 2018/08/28 23:35:16 dialing manager at 10.128.0.26:44383 2018/08/28 23:35:18 syscalls: 1 2018/08/28 23:35:18 code coverage: enabled 2018/08/28 23:35:18 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/08/28 23:35:18 setuid sandbox: enabled 2018/08/28 23:35:18 namespace sandbox: enabled 2018/08/28 23:35:18 fault injection: enabled 2018/08/28 23:35:18 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/08/28 23:35:18 net packed injection: enabled 2018/08/28 23:35:18 net device setup: enabled [ 56.981941] random: crng init done 23:37:13 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) fchdir(r0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000000)={{{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}}}, &(0x7f0000000100)=0xe8) getresgid(&(0x7f0000000140), &(0x7f0000000180)=0x0, &(0x7f00000001c0)) fchown(r0, r1, r2) r3 = accept(r0, &(0x7f0000000200)=@can, &(0x7f0000000280)=0x80) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f00000002c0), &(0x7f0000000300)=0x4) accept$inet6(r3, &(0x7f0000000340)={0xa, 0x0, 0x0, @local}, &(0x7f0000000380)=0x1c) r4 = syz_open_dev$usbmon(&(0x7f00000003c0)='/dev/usbmon#\x00', 0x4, 0x14df43) write$P9_RAUTH(r4, &(0x7f0000000400)={0x14, 0x67, 0x2, {0x82, 0x2, 0x7}}, 0x14) read(r4, &(0x7f0000000440)=""/69, 0x45) sendfile(r3, r4, &(0x7f00000004c0), 0x4) setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x0, 0x488, &(0x7f0000000500)={{0x84, @multicast2, 0x4e23, 0x3, 'dh\x00', 0x1, 0x6, 0x43}, {@empty, 0x4e21, 0x6, 0x3, 0x3, 0x2}}, 0x44) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000580)=0x3) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/rtc0\x00', 0x800, 0x0) write$P9_RSTAT(r5, &(0x7f0000000600)={0x51, 0x7d, 0x2, {0x0, 0x4a, 0x6, 0x4, {0x41, 0x1, 0x4}, 0x44080000, 0x80000001, 0x1, 0x2, 0x3, 'dh\x00', 0x0, "", 0x7, '{md5sum', 0xd, '/dev/usbmon#\x00'}}, 0x51) epoll_create1(0x80000) times(&(0x7f0000000680)) write$eventfd(r5, &(0x7f00000006c0)=0x100000001, 0x8) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r4, 0xc1205531, &(0x7f0000000700)={0x80, 0xfffffffffffffff9, 0x9, 0x3f, [], [], [], 0x7, 0x400, 0x1000, 0x523, "98cc64402a2b3035a8dfc534c2b80137"}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x4058534c, &(0x7f0000000840)={0x40, 0x9, 0xdd, 0x9e91, 0x7, 0x100}) ioctl$int_in(r3, 0x5421, &(0x7f00000008c0)=0xd6) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000900)={0x0, 0x1e, "ae4f7673f51e72fb1227e9ce3f354fa5f1e88868e20d112d711624aa1ff2"}, &(0x7f0000000940)=0x26) getsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000980)=@assoc_id=r6, &(0x7f00000009c0)=0x4) ioctl$sock_inet_SIOCDARP(r3, 0x8953, &(0x7f0000000a00)={{0x2, 0x4e21, @local}, {0x0, @random="75ff170295df"}, 0x30, {0x2, 0x4e24, @multicast2}, 'bond0\x00'}) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000000a80)="36f486b346d623a6f89d761e8443d5eb", 0x10) ioctl$PIO_SCRNMAP(r5, 0x4b41, &(0x7f0000000ac0)="73f5dd5413a257551fdd384456e6a9ba6494d7254d3e790705ea1b9c8c1e8684") syz_open_dev$mice(&(0x7f0000000b00)='/dev/input/mice\x00', 0x0, 0x60a203) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000b80)='fou\x00') sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x4010204}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x14, r7, 0x100, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20004084}, 0x40) 23:37:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000000000)={0xfff, {0x2, 0x4e21, @remote}, {0x2, 0x4e22, @multicast2}, {0x2, 0x4e21, @rand_addr=0x6}, 0x9, 0x1ff, 0x6, 0xffff, 0x7cb8, 0x0, 0x1, 0x9, 0x3a83}) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000080)={{0x2, 0x4e24, @rand_addr=0xa0}, {0x307, @remote}, 0x48, {0x2, 0x4e24}, 'lo\x00'}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000140)="3bf8b67cdb6fccae4958a9710f507ae7a7ce62f77e0278da5ff701d1446388f3a6e27be1f6c3d3988b8400ecbdb993323b0d5089deacd1ffb8f8c4622ca2475e6e410d04542cfc03da163ac399348127292c9644399467265b669bbd56eb1f16ec320d9194d6b6b9c0ba7e2e859d38006bfd8f0934c7c8469725b7c2602bc7d34402be3ffecca7425bdc7080b616766bcd4da8472fa6f470c0251f396a668ada31b8e6509b8f336550b6b3dcb6cb074137c446640cec13051329") setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='yam0\x00', 0x10) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f00000002c0)={0x0, 0x7a, &(0x7f0000000240)="9f4246f72c0d85f998deeafeb0341a31907cc56921d6a88416b362d20eb7a9923dedaf6a9c439fbd225294bd9d90932920567f38350e373a379fe47cc94f7add2659647a69bf99e4101ba5e788d24108a8fb87db45a2d75bea67a4981e4935df3cab63af837cc5b487529a6c2b2327097f18bf8b5ead6b0fe4ad"}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$unix(r1, &(0x7f0000000340), &(0x7f00000003c0)=0x6e) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000400)=0x7fff) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r2, 0xc0bc5310, &(0x7f0000000440)) r4 = memfd_create(&(0x7f0000000500)='/\x00', 0x1) pkey_alloc(0x0, 0x2) setsockopt$RDS_RECVERR(r3, 0x114, 0x5, &(0x7f0000000540)=0x1, 0x4) r5 = getpid() ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r5, 0x10, &(0x7f0000000580)={0x9}) getsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f00000005c0)={0x0, 0x7, 0x4, 0x52, 0x155, 0x9}, &(0x7f0000000600)=0x14) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000640)={r6, 0x4}, &(0x7f0000000680)=0x8) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f00000006c0)=0x101, 0x4) accept$packet(r2, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000800)=0x14) setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, &(0x7f0000000980)={@can={0x1d, r7}, {&(0x7f0000000840)=""/232, 0xe8}, &(0x7f0000000940), 0x8}, 0xa0) bind$bt_rfcomm(r1, &(0x7f0000000a40)={0x1f, {0x8001, 0x3, 0x5, 0x1000, 0x7, 0x2b}, 0x8000}, 0xa) ioctl$SG_GET_SCSI_ID(r4, 0x2276, &(0x7f0000000a80)) semget$private(0x0, 0x2, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r3, 0x401870cc, &(0x7f0000000ac0)={0x3f, 0x68, 0x5, 0xebb}) getresgid(&(0x7f0000000b00), &(0x7f0000000b40)=0x0, &(0x7f0000000b80)) ioctl$TUNSETGROUP(r3, 0x400454ce, r8) ioctl$PERF_EVENT_IOC_QUERY_BPF(r4, 0xc008240a, &(0x7f0000000bc0)={0x3, 0x0, [0x0, 0x0, 0x0]}) rt_sigqueueinfo(r5, 0x20, &(0x7f0000000c00)={0x3a, 0x81, 0x9, 0x8}) get_mempolicy(&(0x7f0000000c40), &(0x7f0000000c80), 0x4, &(0x7f0000ffc000/0x4000)=nil, 0x2) 23:37:13 executing program 1: semget(0x3, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000040), &(0x7f0000000080)=0xc) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x10000, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='\x00', r2}, 0x10) getpeername$unix(r2, &(0x7f0000000180)=@abs, &(0x7f0000000200)=0x6e) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/net/pfkey\x00', 0x2, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000000280)='/dev/snd/pcmC#D#p\x00', 0x101, 0x100) getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0x486, &(0x7f00000002c0), &(0x7f0000000300)=0xc) ioctl$SG_SET_COMMAND_Q(r3, 0x2271, &(0x7f0000000340)=0x1) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet6(r6, &(0x7f00000003c0)={0xa, 0x4e20, 0xffff, @mcast2, 0xc7d}, 0x1c) ioctl$sock_inet_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000400)={'\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x19}}}) ioctl$TCSBRK(r5, 0x5409, 0x1ff) getsockopt$inet6_mtu(r6, 0x29, 0x17, &(0x7f0000000440), &(0x7f0000000480)=0x4) bind$inet6(r7, &(0x7f00000004c0)={0xa, 0x4e24, 0x401, @mcast1, 0x2}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000500)={0x0, @in6={{0xa, 0x4e21, 0x81, @mcast2, 0x100000001}}, 0x101}, &(0x7f00000005c0)=0x90) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f0000000600)={r8, 0x6, 0x3}, &(0x7f0000000640)=0x8) fcntl$setsig(r6, 0xa, 0x31) getsockopt$IP_VS_SO_GET_INFO(r2, 0x0, 0x481, &(0x7f0000000680), &(0x7f00000006c0)=0xc) fstat(r1, &(0x7f0000000700)) ioctl$sock_FIOGETOWN(r7, 0x8903, &(0x7f0000000780)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r3, 0xc1105518, &(0x7f0000000800)={{0x4, 0x7, 0x101, 0x6, 'syz0\x00', 0x2}, 0x2, 0x220, 0x3, r9, 0x2, 0x2, 'syz0\x00', &(0x7f00000007c0)=[':\x00', '/dev/snd/pcmC#D#p\x00'], 0x14, [], [0xffffffff, 0x1, 0x7fffffff, 0x9]}) write$FUSE_OPEN(r5, &(0x7f0000000940)={0x20, 0x0, 0x2, {0x0, 0x4}}, 0x20) ioctl$SG_GET_REQUEST_TABLE(r3, 0x2286, &(0x7f0000000980)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0xc05c5340, &(0x7f0000000b00)={0x7, 0x100000001, 0x1, {0x0, 0x989680}, 0x78, 0x7}) ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f0000000b80)=""/4096) getsockopt$sock_buf(r0, 0x1, 0xa545e825ce49861, &(0x7f0000001b80)=""/20, &(0x7f0000001bc0)=0x14) ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x8905, &(0x7f0000001c00)) write$P9_RCREATE(r4, &(0x7f0000001c40)={0x18, 0x73, 0x1, {{0x20, 0x0, 0x4}, 0x3}}, 0x18) 23:37:13 executing program 3: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x2a0800, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000040)=0xf5) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f0000000080)) write$P9_RXATTRWALK(r0, &(0x7f00000000c0)={0xf, 0x1f, 0x2, 0x6}, 0xf) r1 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x4, 0x200000) ioctl$sock_proto_private(r0, 0x89eb, &(0x7f0000000140)="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") modify_ldt$write2(0x11, &(0x7f0000000240)={0x7, 0x20000800, 0x2000, 0x3, 0x20, 0x4, 0xa3a, 0x9, 0x7fffffff, 0x8}, 0x10) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000280), 0x4) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f00000002c0)=0x100, 0x4) write$P9_ROPEN(r1, &(0x7f0000000300)={0x18, 0x71, 0x2, {{0x0, 0x1, 0x6}, 0x80000000}}, 0x18) getsockopt$inet_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000000340)=""/61, &(0x7f0000000380)=0x3d) ioctl(r1, 0xda, &(0x7f00000003c0)="9c9dadf99117dd97723fc70926b3cb53aac7128d5f8f9aa70a9b3283d7e5bfb7b04be3e69b5151cca339bc6d1bfc462e656f792b6d2833bdd36078dfc2567c6350013933f8734cf95b4429b21cbad34136ca6a5cdaea248d91b9a040c66fcd2a58b4ead8c1410b33c904fcc73fd4046037ddfc1bd62afe28a0744153284c6b91ddaf02cd6869b8a09cb8cfeb8ad8bc686545b6be5a3a00ffdb9352dde10ebda922edfa5eb0fb4b0b93b509838e4f24f8f4") ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000480)=""/227) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000580)={0x0, 0x62, "081b1a7a06441dfac36361f4ad1ff4902c8eff88094411c3087808f058fbbca48df0ee2f972f09b17c96cde74ff1a687bff2e012604f28bbf2b5f39024eec28b10bd0e3daf001379c6900a845e18448eba482811212f90943fb18d060539f21f3749"}, &(0x7f0000000600)=0x6a) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000640)={r2, 0xad}, &(0x7f0000000680)=0x8) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000006c0), 0x10) fcntl$addseals(r0, 0x409, 0x2) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000700)={@mcast2, 0x0}, &(0x7f0000000740)=0x14) connect$packet(r0, &(0x7f0000000780)={0x11, 0x1a, r4, 0x1, 0x800, 0x6, @random="92b35a115f0f"}, 0x14) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000880)=0x0) perf_event_open(&(0x7f0000000800)={0x5, 0x70, 0x9, 0x4, 0x8, 0x2, 0x0, 0x8, 0x404, 0x5, 0x80000000, 0x5, 0x8, 0x6, 0x1000, 0x4, 0x1, 0x1f, 0xbd8, 0x7, 0x103, 0x1, 0x4, 0x7, 0x726, 0x8, 0x3, 0x4, 0x95, 0x3, 0xd9, 0xa45a, 0x4, 0x1ff, 0xcdd, 0x5, 0x8000, 0x100000001, 0x0, 0x8, 0x7, @perf_bp={&(0x7f00000007c0), 0x2}, 0x2, 0x7, 0x401, 0x1, 0xea, 0xfff, 0x5}, r5, 0x9, r1, 0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000008c0)={0x9, 0x6, 0x6, 0x40000000000000, 0x0, 0x7, 0x917, 0x7f, 0x7, 0x58f2, 0x100, 0x7}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000900)={r3, 0x1000}, 0x8) r6 = shmget(0x3, 0x2000, 0x10, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_INFO(r6, 0x3, &(0x7f0000000940)=""/4096) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000001940)={0x3, 0x9b3, 0x1, 0x200, 0x2, [{0x8, 0x8, 0x6}, {0x40, 0x0, 0x2, 0x0, 0x0, 0x80}]}) write$P9_RXATTRCREATE(r1, &(0x7f0000001a00)={0x7, 0x21, 0x2}, 0x7) ptrace$getsig(0x4202, r5, 0xff, &(0x7f0000001a40)) socket(0x0, 0xa, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001a80)='./cgroup.cpu/syz1\x00', 0x1ff) 23:37:13 executing program 7: personality(0x4000005) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000040)={0x4, 0xdae}) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f00000000c0)="e5c7a143fef6b587d0fbfcaf0a761a319cbb97142635d31df6042f7905dd22428e4ee83eb545a6c61fe756422f24e0fbf8c4502a3778ec46e4257a53feef67563626b19e1b0d1940304e0b031e136f8ea4b121edd4d72e123957bc009f413c0acfee4a588cd196d12d9526a06dacabe6") write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000140)={0x2, 0xd7}, 0x2) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000000180)="df2f1bbcdf7768dd245e854c0fc7a1a5300753810c4e6cce02903e881540f6c536ba") time(&(0x7f00000001c0)) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mixer\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000240)='/dev/cuse\x00', 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000000280)=""/125, &(0x7f0000000300)=0x7d) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r0, 0x28, &(0x7f0000000340)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={r4, 0x2cd, 0x18}, 0xc) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000000440)={0x9, &(0x7f0000000400)=[{0x40, 0x7}, {0x5, 0x2}, {0x0, 0x8000}, {0x0, 0x100000000}, {0x2, 0xfffffffffffeffff}, {0x5, 0x1d}, {0x3, 0x6}, {0x100000000, 0xfff}, {0x2, 0x80000000}]}) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x2) r5 = syz_genetlink_get_family_id$team(&(0x7f00000004c0)='team\x00') sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, r5, 0xa02, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x44080}, 0x0) r6 = getpgrp(0xffffffffffffffff) capset(&(0x7f00000005c0)={0x20080522, r6}, &(0x7f0000000600)={0xffffffffffffffff, 0xfffffffffffffffb, 0x1000, 0x5, 0x7ff, 0x7}) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000640)) write$P9_RRENAME(r0, &(0x7f0000000680)={0x7, 0x15, 0x1}, 0x7) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f00000006c0)={{&(0x7f0000002000/0x6000)=nil, 0x6000}, 0x1}) setsockopt$inet6_tcp_int(r2, 0x6, 0x1b, &(0x7f0000000700)=0xfff, 0x4) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000780)={{{@in6=@mcast2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000000880)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000900)={{{@in=@broadcast, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@rand_addr}}, &(0x7f0000000a00)=0xe8) getsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000a40)={@empty, @empty, 0x0}, &(0x7f0000000a80)=0xc) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000003d80)={@multicast2, @remote, 0x0}, &(0x7f0000003dc0)=0xc) getsockopt$inet6_mreq(r0, 0x29, 0x1f, &(0x7f0000003e00)={@mcast2, 0x0}, &(0x7f0000003e40)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000003e80)={'vcan0\x00', 0x0}) accept$packet(r0, &(0x7f0000003ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000003f00)=0x14) getpeername$packet(r3, &(0x7f0000003f40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000003f80)=0x14) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000003fc0)={'bond_slave_1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000004000)={'team_slave_1\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000006480)={{{@in6=@mcast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@ipv4}}, &(0x7f0000006580)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000006900)={{{@in6=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@dev}}, &(0x7f0000006a00)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000006a40)={'vcan0\x00', 0x0}) getsockname$packet(r0, &(0x7f0000006a80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000006ac0)=0x14) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000006b00)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}}}, &(0x7f0000006c00)=0xe8) getpeername$packet(r3, &(0x7f0000006c40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000006c80)=0x14) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000006e40)={@loopback, @dev, 0x0}, &(0x7f0000006e80)=0xc) sendmsg$TEAM_CMD_NOOP(r3, &(0x7f0000007480)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40000004}, 0xc, &(0x7f0000007440)={&(0x7f0000006ec0)={0x554, r5, 0x200, 0x70bd26, 0x25dfdbfc, {}, [{{0x8, 0x1, r7}, {0x1a0, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x80}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x7fff}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x7fffffff}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x10000}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x2}}}]}}, {{0x8, 0x1, r11}, {0xb0, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x4}}}]}}, {{0x8, 0x1, r13}, {0x4}}, {{0x8, 0x1, r14}, {0x44, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r15}}}]}}, {{0x8, 0x1, r16}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x6}}}]}}, {{0x8, 0x1, r17}, {0x140, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r18}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x1c, 0x4, [{0x401, 0x3, 0x4d, 0x2}, {0x0, 0x81, 0x40, 0x3f}, {0x7, 0x800, 0x0, 0x5}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r19}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x101}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r20}}}]}}, {{0x8, 0x1, r21}, {0xf4, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xff}}, {0x8, 0x6, r22}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x9b}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x800}}, {0x8, 0x6, r23}}}]}}]}, 0x554}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 23:37:13 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"00ac720000006c00ec973f820f8d4000", 0x102}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30a) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000080), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_extract_tcp_res(&(0x7f0000001980), 0x0, 0x0) close(r0) 23:37:13 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) pread64(r0, &(0x7f0000003c00)=""/4096, 0x200000, 0x0) 23:37:13 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000040)=""/25, 0x19}], 0x1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f00000001c0)) [ 170.757101] IPVS: ftp: loaded support on port[0] = 21 [ 170.767033] IPVS: ftp: loaded support on port[0] = 21 [ 170.809872] IPVS: ftp: loaded support on port[0] = 21 [ 170.849158] IPVS: ftp: loaded support on port[0] = 21 [ 170.867373] IPVS: ftp: loaded support on port[0] = 21 [ 170.867736] IPVS: ftp: loaded support on port[0] = 21 [ 170.875650] IPVS: ftp: loaded support on port[0] = 21 [ 170.907101] IPVS: ftp: loaded support on port[0] = 21 [ 173.843133] ip (4692) used greatest stack depth: 53960 bytes left [ 174.437155] ip (4722) used greatest stack depth: 53736 bytes left [ 175.342471] ip (4774) used greatest stack depth: 53480 bytes left [ 175.642502] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.649067] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.690614] device bridge_slave_0 entered promiscuous mode [ 175.845381] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.851916] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.898197] device bridge_slave_0 entered promiscuous mode [ 175.962330] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.968840] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.998618] device bridge_slave_0 entered promiscuous mode [ 176.022823] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.029337] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.039382] ip (4805) used greatest stack depth: 53224 bytes left [ 176.061434] device bridge_slave_0 entered promiscuous mode [ 176.073685] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.080179] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.114357] device bridge_slave_1 entered promiscuous mode [ 176.151820] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.158321] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.182440] device bridge_slave_0 entered promiscuous mode [ 176.191793] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.198299] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.223346] device bridge_slave_1 entered promiscuous mode [ 176.276423] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.282975] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.325275] device bridge_slave_1 entered promiscuous mode [ 176.342605] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.349104] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.372312] device bridge_slave_0 entered promiscuous mode [ 176.397215] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.403686] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.428055] device bridge_slave_1 entered promiscuous mode [ 176.456502] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.463032] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.475407] device bridge_slave_1 entered promiscuous mode [ 176.486262] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.492739] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.503930] device bridge_slave_0 entered promiscuous mode [ 176.529609] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 176.542541] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 176.550798] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.557279] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.621290] device bridge_slave_0 entered promiscuous mode [ 176.653905] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 176.662634] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 176.670095] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.676663] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.729308] device bridge_slave_1 entered promiscuous mode [ 176.761834] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 176.771020] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.777498] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.822782] device bridge_slave_1 entered promiscuous mode [ 176.867896] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 176.877121] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 176.938908] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 176.958946] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 176.979290] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 176.991162] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.997646] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.049707] device bridge_slave_1 entered promiscuous mode [ 177.083279] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 177.131796] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 177.252142] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 177.357785] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 177.425943] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 177.677302] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 177.786289] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 177.874172] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 177.931289] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 177.968858] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 178.081763] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 178.136137] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 178.147747] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 178.216619] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 178.254870] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 178.273500] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 178.365734] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 178.423418] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 178.446219] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 178.453207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 178.474361] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 178.546870] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 178.553884] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 178.591691] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 178.598708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 178.625447] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 178.632471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 178.703311] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 178.729076] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 178.763445] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 178.770651] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 178.798759] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 178.805700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 178.829743] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 178.840399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 178.877869] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 178.887794] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 178.958217] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 178.965266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 178.981897] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 178.989106] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 179.034057] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 179.041045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 179.121491] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 179.153634] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 179.160670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 179.224041] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 179.231076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 179.403353] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 179.414676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 179.444032] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 179.456829] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 179.708122] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 179.747762] team0: Port device team_slave_0 added [ 179.804260] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 179.827190] team0: Port device team_slave_0 added [ 179.841995] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 179.849311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 179.907130] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 179.925851] team0: Port device team_slave_0 added [ 180.003358] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 180.042192] team0: Port device team_slave_0 added [ 180.144613] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 180.168816] team0: Port device team_slave_1 added [ 180.203125] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 180.235706] team0: Port device team_slave_1 added [ 180.244693] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 180.266907] team0: Port device team_slave_0 added [ 180.284718] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 180.293313] team0: Port device team_slave_1 added [ 180.323509] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 180.340646] team0: Port device team_slave_0 added [ 180.371778] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 180.397124] team0: Port device team_slave_0 added [ 180.433329] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 180.450020] team0: Port device team_slave_1 added [ 180.526373] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 180.533492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 180.551074] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 180.577351] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 180.584818] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 180.595716] team0: Port device team_slave_1 added [ 180.626226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 180.659213] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 180.699697] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 180.717736] team0: Port device team_slave_1 added [ 180.738548] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 180.745696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 180.762221] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 180.812836] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 180.825304] team0: Port device team_slave_0 added [ 180.835396] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 180.842449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 180.867832] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 180.887276] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 180.895290] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 180.903260] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 180.918436] team0: Port device team_slave_1 added [ 180.941419] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 180.949103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 180.966100] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 181.013643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 181.054006] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 181.084853] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 181.117276] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 181.172297] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 181.182987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 181.205989] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 181.219747] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 181.230461] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 181.238326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 181.266056] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 181.282408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 181.299977] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 181.317404] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 181.326742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 181.343182] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 181.368100] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 181.379662] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 181.390329] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 181.404858] team0: Port device team_slave_1 added [ 181.423023] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 181.451281] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 181.479674] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 181.498632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 181.524005] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 181.535660] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 181.550018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 181.574478] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 181.584851] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 181.593112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 181.605516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 181.641148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 181.665431] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 181.682259] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 181.689767] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 181.698917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 181.739398] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 181.746878] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 181.756495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 181.783769] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 181.791103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 181.806103] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 181.837864] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 181.847651] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 181.863978] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 181.898495] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 181.906461] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 181.920990] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 181.931669] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 181.942647] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 181.965782] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 182.004190] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 182.032425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 182.062865] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 182.086516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 182.109512] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 182.129696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 182.165765] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 182.172810] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 182.182392] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 182.200090] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 182.210923] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 182.230503] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 182.251730] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 182.265512] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 182.273186] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 182.292919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 182.331665] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 182.364130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 182.402824] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 182.424787] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 182.465875] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 182.508740] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 182.516293] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 182.547701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 182.571789] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 182.582906] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 182.598332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 182.846465] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 182.855655] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 182.867243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 185.361545] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.368106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.375057] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.381513] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.451974] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 185.458517] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 185.585868] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.592388] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.599279] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.605763] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.646625] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 185.665793] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.672423] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.679288] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.685756] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.741203] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 185.793385] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.799817] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.806700] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.813233] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.895792] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 185.966366] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.972852] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.979744] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.986182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.050838] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 186.075990] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.082420] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.089241] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.095680] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.142012] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 186.179625] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.186071] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.192981] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.199415] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.262195] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 186.517483] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 186.531759] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 186.569863] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 186.584488] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 186.594139] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 186.609263] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 186.635064] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.641507] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.648358] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.654813] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.663018] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 187.543435] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 198.148419] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.284000] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.416063] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.615866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.769705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.824971] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.236378] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.294803] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 199.456809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.494248] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 199.548469] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 199.781251] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 199.976308] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 199.989877] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 200.418189] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 200.458223] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 200.464464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 200.477346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 200.621260] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 200.644945] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 200.651159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 200.665370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 200.752036] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 200.758809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 200.778896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 200.903189] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 200.909446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 200.919104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 201.081679] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 201.087986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 201.099431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 201.161897] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 201.168152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 201.195491] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 201.728306] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 201.734753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 201.752457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 201.823136] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.848624] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 201.860169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 201.891054] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 201.965300] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.006162] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.179366] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.204539] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.333669] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.957596] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.991668] 8021q: adding VLAN 0 to HW filter on device team0 23:37:53 executing program 1: r0 = socket$inet6(0xa, 0x20800a2, 0x6) ioctl(r0, 0x0, &(0x7f0000000200)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000f6bfe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r1, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x8150000}, 0x200000}) [ 209.428017] hrtimer: interrupt took 75444 ns 23:37:53 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) 23:37:53 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0xf4, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="040006000a00000000000000ff010000deffffffffffffff0000000100000000000000000020000000000000003b990000000000000000000000000000000000000000cd00000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006881a493a69ef48b83813e237c29856a3a3f3da6cf828872955adf8e7f3a964d692b9450063fa5c68ab6c5d3481dd7a4edcaf1873d0560e2b7ccefd210d8c26755e60ceaa54f574bd0bdc73f0bfcf800f558f7d5be8fbd015f694cc5313fbffd5c1846d5d0162163ea77ab"], 0x1) 23:37:53 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') fstat(r0, &(0x7f0000000140)) 23:37:53 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000001100)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) 23:37:53 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000f6bfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x8150000}, 0x200000}) 23:37:53 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000040)=""/25, 0x19}], 0x1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f00000001c0)) 23:37:53 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000400)) r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000440), 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000480)=r0, 0x4) socketpair$inet6_udplite(0xa, 0x2, 0x88, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000000c0)='\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x3, 0x2) getpid() bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) [ 209.755651] input: syz1 as /devices/virtual/input/input5 23:37:53 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/arp\x00') readlinkat(0xffffffffffffffff, &(0x7f0000000280)='\x00', &(0x7f00000002c0)=""/62, 0x3e) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000000200)) tkill(r0, 0x1000000000016) [ 209.838678] input: syz1 as /devices/virtual/input/input6 23:37:53 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) 23:37:54 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x3, 0x4, 0x80000000004, 0xe657}, 0x2c) close(r0) [ 210.119443] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 210.162236] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 23:37:54 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={r0, 0x2, 0x1, 0x100, &(0x7f0000000040)=[0x0], 0x1}, 0x20) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000240), 0xc) write$cgroup_pid(r2, &(0x7f0000000080), 0x12) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x0, 0x0) socket$kcm(0x2, 0x3, 0x2) [ 210.565642] ================================================================== [ 210.573083] BUG: KMSAN: uninit-value in memcmp+0x11d/0x180 [ 210.578742] CPU: 0 PID: 6679 Comm: syz-executor4 Not tainted 4.19.0-rc1+ #36 [ 210.585941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 210.595304] Call Trace: [ 210.597918] dump_stack+0x14b/0x190 [ 210.601599] kmsan_report+0x183/0x2b0 [ 210.605451] __msan_warning+0x70/0xc0 [ 210.609274] memcmp+0x11d/0x180 [ 210.612592] __dev_mc_del+0x169/0x6c0 [ 210.616428] dev_mc_del+0x6d/0x80 [ 210.619957] igmp6_group_dropped+0x2c5/0x12e0 [ 210.624501] ? __msan_poison_alloca+0x173/0x1f0 [ 210.629215] ipv6_mc_down+0xc8/0x360 [ 210.632973] addrconf_ifdown+0x21bb/0x2670 [ 210.637277] addrconf_notify+0x2ac/0x5be0 [ 210.641467] ? kmsan_set_origin_inline+0x6b/0x120 [ 210.646372] ? __msan_poison_alloca+0x173/0x1f0 [ 210.651069] ? rcu_all_qs+0x2e/0x1f0 [ 210.654813] ? tls_dev_event+0x81/0x1310 [ 210.658891] ? raw_notifier_call_chain+0x13e/0x240 [ 210.663857] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 210.669267] ? dev_forward_change+0xb70/0xb70 [ 210.673780] raw_notifier_call_chain+0x13e/0x240 [ 210.678563] dev_close_many+0x627/0x9e0 [ 210.682581] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 210.688010] rollback_registered_many+0x9eb/0x2040 [ 210.692967] ? kmsan_set_origin_inline+0x6b/0x120 [ 210.697830] ? __list_add_valid+0xb8/0x450 [ 210.702087] unregister_netdevice_queue+0x547/0xa40 [ 210.707123] __tun_detach+0x220c/0x2c70 [ 210.711137] tun_chr_close+0xda/0x1c0 [ 210.714968] ? tun_chr_open+0x750/0x750 [ 210.718971] __fput+0x48d/0xac0 [ 210.722314] ? fput+0x2e0/0x2e0 [ 210.725623] ____fput+0x37/0x40 [ 210.728938] task_work_run+0x22e/0x2b0 [ 210.732836] prepare_exit_to_usermode+0x33e/0x410 [ 210.737705] syscall_return_slowpath+0xdb/0x700 [ 210.742391] ? __close_fd+0x465/0x4c0 [ 210.746216] do_syscall_64+0x1ab/0x220 [ 210.750128] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 210.755332] RIP: 0033:0x457089 [ 210.758534] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 210.777461] RSP: 002b:00007feae3e93c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 210.785181] RAX: 0000000000000000 RBX: 00007feae3e946d4 RCX: 0000000000457089 [ 210.792467] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 210.799743] RBP: 00000000009301e0 R08: 0000000000000000 R09: 0000000000000000 [ 210.807026] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 210.814335] R13: 00000000004cb500 R14: 00000000004ee172 R15: 0000000000000002 [ 210.821660] [ 210.823312] Local variable description: ----buf@igmp6_group_dropped [ 210.829720] Variable was created at: [ 210.833513] igmp6_group_dropped+0x49/0x12e0 [ 210.837965] ipv6_mc_down+0xc8/0x360 [ 210.841727] ================================================================== [ 210.849085] Disabling lock debugging due to kernel taint [ 210.854520] Kernel panic - not syncing: panic_on_warn set ... [ 210.854520] [ 210.861900] CPU: 0 PID: 6679 Comm: syz-executor4 Tainted: G B 4.19.0-rc1+ #36 [ 210.870485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 210.879838] Call Trace: [ 210.882415] dump_stack+0x14b/0x190 [ 210.886066] panic+0x35d/0x8cb [ 210.889310] ? ipv6_mc_down+0xc8/0x360 [ 210.893192] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 210.898643] kmsan_report+0x2a8/0x2b0 [ 210.902457] __msan_warning+0x70/0xc0 [ 210.906280] memcmp+0x11d/0x180 [ 210.909600] __dev_mc_del+0x169/0x6c0 [ 210.913441] dev_mc_del+0x6d/0x80 [ 210.916920] igmp6_group_dropped+0x2c5/0x12e0 [ 210.921456] ? __msan_poison_alloca+0x173/0x1f0 [ 210.926147] ipv6_mc_down+0xc8/0x360 [ 210.929857] addrconf_ifdown+0x21bb/0x2670 [ 210.934122] addrconf_notify+0x2ac/0x5be0 [ 210.938286] ? kmsan_set_origin_inline+0x6b/0x120 [ 210.943155] ? __msan_poison_alloca+0x173/0x1f0 [ 210.947834] ? rcu_all_qs+0x2e/0x1f0 [ 210.951549] ? tls_dev_event+0x81/0x1310 [ 210.955649] ? raw_notifier_call_chain+0x13e/0x240 [ 210.960604] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 210.965991] ? dev_forward_change+0xb70/0xb70 [ 210.970526] raw_notifier_call_chain+0x13e/0x240 [ 210.975297] dev_close_many+0x627/0x9e0 [ 210.979267] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 210.984632] rollback_registered_many+0x9eb/0x2040 [ 210.989570] ? kmsan_set_origin_inline+0x6b/0x120 [ 210.994541] ? __list_add_valid+0xb8/0x450 [ 210.998808] unregister_netdevice_queue+0x547/0xa40 [ 211.003841] __tun_detach+0x220c/0x2c70 [ 211.007826] tun_chr_close+0xda/0x1c0 [ 211.011636] ? tun_chr_open+0x750/0x750 [ 211.015611] __fput+0x48d/0xac0 [ 211.018913] ? fput+0x2e0/0x2e0 [ 211.022188] ____fput+0x37/0x40 [ 211.025470] task_work_run+0x22e/0x2b0 [ 211.029362] prepare_exit_to_usermode+0x33e/0x410 [ 211.034226] syscall_return_slowpath+0xdb/0x700 [ 211.038935] ? __close_fd+0x465/0x4c0 [ 211.042770] do_syscall_64+0x1ab/0x220 [ 211.046679] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 211.051862] RIP: 0033:0x457089 [ 211.055062] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 211.073961] RSP: 002b:00007feae3e93c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 211.081671] RAX: 0000000000000000 RBX: 00007feae3e946d4 RCX: 0000000000457089 [ 211.088929] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 211.096193] RBP: 00000000009301e0 R08: 0000000000000000 R09: 0000000000000000 [ 211.103471] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 211.110727] R13: 00000000004cb500 R14: 00000000004ee172 R15: 0000000000000002 [ 211.118501] Dumping ftrace buffer: [ 211.122060] (ftrace buffer empty) [ 211.125758] Kernel Offset: disabled [ 211.129374] Rebooting in 86400 seconds..