[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 34.694200] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ 34.814865] random: sshd: uninitialized urandom read (32 bytes read) [ ok 8[?25h[?0c. [ 35.248531] random: sshd: uninitialized urandom read (32 bytes read) Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 36.826236] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.42' (ECDSA) to the list of known hosts. [ 42.417259] random: sshd: uninitialized urandom read (32 bytes read) 2018/07/09 18:50:24 fuzzer started [ 44.037243] random: cc1: uninitialized urandom read (8 bytes read) 2018/07/09 18:50:27 dialing manager at 10.128.0.26:42717 2018/07/09 18:50:29 syscalls: 1589 2018/07/09 18:50:29 code coverage: enabled 2018/07/09 18:50:29 comparison tracing: ioctl(KCOV_TRACE_CMP) failed: errno 524 2018/07/09 18:50:29 setuid sandbox: enabled 2018/07/09 18:50:29 namespace sandbox: enabled 2018/07/09 18:50:29 fault injection: enabled 2018/07/09 18:50:29 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/07/09 18:50:29 net packed injection: enabled [ 49.236202] random: crng init done 18:51:44 executing program 0: 18:51:44 executing program 1: 18:51:44 executing program 3: 18:51:44 executing program 7: 18:51:44 executing program 2: 18:51:44 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2=0xe0000002, @dev={0xac, 0x14, 0x14, 0xd}}, 0xc) pread64(r0, &(0x7f0000000140)=""/53, 0x35, 0x41) 18:51:44 executing program 4: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000000140)=""/117, 0x75) 18:51:44 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)="76530a7cee", 0x5) [ 123.774583] IPVS: ftp: loaded support on port[0] = 21 [ 123.775362] IPVS: ftp: loaded support on port[0] = 21 [ 123.845896] IPVS: ftp: loaded support on port[0] = 21 [ 123.857423] IPVS: ftp: loaded support on port[0] = 21 [ 123.898533] IPVS: ftp: loaded support on port[0] = 21 [ 123.902636] IPVS: ftp: loaded support on port[0] = 21 [ 123.930555] IPVS: ftp: loaded support on port[0] = 21 [ 123.934648] IPVS: ftp: loaded support on port[0] = 21 [ 127.727767] ip (4850) used greatest stack depth: 53232 bytes left [ 128.205393] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.211941] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.244343] device bridge_slave_0 entered promiscuous mode [ 128.272915] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.279438] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.289277] device bridge_slave_0 entered promiscuous mode [ 128.327260] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.333831] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.362462] device bridge_slave_0 entered promiscuous mode [ 128.389705] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.396169] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.429636] device bridge_slave_0 entered promiscuous mode [ 128.464160] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.470646] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.505356] device bridge_slave_0 entered promiscuous mode [ 128.530374] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.536880] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.566158] device bridge_slave_0 entered promiscuous mode [ 128.580755] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.587247] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.616175] device bridge_slave_1 entered promiscuous mode [ 128.634095] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.640540] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.667216] device bridge_slave_0 entered promiscuous mode [ 128.686418] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.692945] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.708855] device bridge_slave_1 entered promiscuous mode [ 128.725601] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.732113] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.754703] device bridge_slave_0 entered promiscuous mode [ 128.775319] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.781857] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.800415] device bridge_slave_1 entered promiscuous mode [ 128.818664] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.825178] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.844387] device bridge_slave_1 entered promiscuous mode [ 128.859108] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.865606] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.892281] device bridge_slave_1 entered promiscuous mode [ 128.910328] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.916806] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.953985] device bridge_slave_1 entered promiscuous mode [ 128.968123] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.974589] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.001698] device bridge_slave_1 entered promiscuous mode [ 129.010631] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 129.022185] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 129.036830] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 129.045899] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.052362] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.101682] device bridge_slave_1 entered promiscuous mode [ 129.124239] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 129.152659] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 129.161316] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 129.231205] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 129.256253] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 129.271603] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 129.321522] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 129.391792] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 129.400092] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 129.408233] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 129.428871] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 129.509767] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 129.686319] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 130.081760] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 130.106439] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 130.168440] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 130.183110] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 130.287219] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 130.298803] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 130.349675] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 130.396241] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 130.406929] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 130.430189] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 130.477188] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 130.540221] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 130.552121] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 130.566866] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 130.616985] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 130.647539] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 130.666959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 130.704173] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 130.711263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 130.745512] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 130.752497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 130.781524] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 130.793163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 130.832734] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 130.839724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 130.861707] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 130.883602] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 130.891094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 130.924414] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 130.931466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 130.978525] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 130.985620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 131.010837] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 131.027353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 131.059956] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 131.067100] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 131.102432] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 131.109819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 131.157812] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 131.176106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 131.207472] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 131.215229] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 131.223625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 131.234116] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 131.269982] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 131.279761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 131.492472] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 131.499530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 131.877415] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 131.902823] team0: Port device team_slave_0 added [ 131.929452] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 131.958909] team0: Port device team_slave_0 added [ 131.985484] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 132.014931] team0: Port device team_slave_0 added [ 132.031174] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 132.040625] team0: Port device team_slave_0 added [ 132.064351] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 132.085079] team0: Port device team_slave_0 added [ 132.099711] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 132.115408] team0: Port device team_slave_0 added [ 132.157710] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 132.185441] team0: Port device team_slave_1 added [ 132.204708] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 132.227680] team0: Port device team_slave_0 added [ 132.243747] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 132.265977] team0: Port device team_slave_1 added [ 132.301613] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 132.318652] team0: Port device team_slave_0 added [ 132.325087] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 132.346081] team0: Port device team_slave_1 added [ 132.360112] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 132.381591] team0: Port device team_slave_1 added [ 132.396271] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 132.422923] team0: Port device team_slave_1 added [ 132.451071] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 132.464641] team0: Port device team_slave_1 added [ 132.479198] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 132.487462] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 132.494392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 132.508375] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 132.555844] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 132.588899] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 132.630956] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 132.637990] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 132.651137] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 132.670204] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 132.679466] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 132.703723] team0: Port device team_slave_1 added [ 132.715778] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 132.729146] team0: Port device team_slave_1 added [ 132.754068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 132.770304] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 132.798294] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 132.805606] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 132.812754] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 132.839100] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 132.864682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 132.886690] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 132.902514] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 132.913833] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 132.930746] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 132.949714] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 132.960102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 132.970955] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 133.003958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 133.036717] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 133.061218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 133.084984] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 133.098544] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 133.107927] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 133.119481] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 133.126939] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 133.138787] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 133.162932] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 133.179128] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 133.189353] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 133.206157] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 133.218143] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 133.232136] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 133.239775] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 133.247721] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 133.257056] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 133.277916] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 133.289288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 133.306906] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 133.358482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 133.396417] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 133.434072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 133.460272] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 133.488174] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 133.498950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 133.508391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 133.516772] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 133.524630] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 133.533113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 133.541176] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 133.549690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 133.588276] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 133.598302] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 133.609483] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 133.620413] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 133.637145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 133.655080] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 133.671282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 133.687485] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 133.702187] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 133.718794] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 133.726782] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 133.735481] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 133.743385] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 133.759545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 133.803495] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 133.836491] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 133.852504] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 133.868764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 133.878516] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 133.897386] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 133.907796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 133.923615] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 133.934229] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 133.951233] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 133.959750] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 133.991220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 134.019910] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 134.043415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 134.075381] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 134.095335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 134.119194] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 134.128747] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 134.163318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 134.204140] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 134.212737] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 134.249342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 134.289195] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 134.304293] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 134.331940] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 135.820359] ip (5283) used greatest stack depth: 53216 bytes left [ 136.698397] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.704879] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.711765] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.718207] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.789470] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 136.797672] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 136.815739] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.822217] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.829093] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.835578] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.856076] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 136.890079] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.896565] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.903442] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.909893] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.999730] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 137.100929] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.107427] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.114292] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.120763] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.160912] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 137.186060] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.192544] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.199370] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.205937] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.244700] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 137.265848] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.272344] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.279198] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.285654] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.321292] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 137.335451] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.341947] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.348798] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.355355] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.366662] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 137.389897] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.396450] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.403318] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.409763] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.472325] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 137.823254] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 137.838314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 137.876162] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 137.905933] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 137.933623] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 137.950765] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 137.960977] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 147.927754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.224796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.376117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.429807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.468673] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.560354] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.666366] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.709377] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.001386] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 149.251983] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 149.458989] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 149.500384] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 149.528954] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 149.626901] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 149.772837] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 149.781251] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 150.147399] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 150.153798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 150.165881] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 150.277373] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 150.283728] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 150.296196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 150.519451] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 150.525760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 150.538893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 150.587626] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 150.600656] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 150.606945] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 150.623196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 150.641976] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 150.659638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 150.703573] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 150.711495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 150.726892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 150.755788] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 150.770673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 150.817346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 150.886459] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 150.892845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 150.906275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 151.332076] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.520314] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.581892] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.646663] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.736006] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.784130] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.825351] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.995972] 8021q: adding VLAN 0 to HW filter on device team0 18:52:19 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setrlimit(0x7, &(0x7f0000000000)) pipe(&(0x7f0000001140)) 18:52:20 executing program 6: r0 = socket$packet(0x11, 0x200000000000003, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'team_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000013000502000000000000000000000000", @ANYBLOB="00000000000000000800020000000000"], 0x2}, 0x1}, 0x0) 18:52:20 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2=0xe0000002, @dev={0xac, 0x14, 0x14, 0xd}}, 0xc) pread64(r0, &(0x7f0000000140)=""/53, 0x35, 0x41) 18:52:20 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000240)='configfs\x00', 0x0, &(0x7f0000000440)) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 18:52:20 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') umount2(&(0x7f0000000500)='./file0\x00', 0x0) 18:52:20 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x1f, 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000280)={{0x7, 0x2, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x87, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0xfffffffffffffffe, 0xb70, 0x0, 0x0, 0x0, 0x0, 0xe26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3838ec23, 0xfffffffffffffffc, 0x0, 0x0, 0xc5, 0x0, 0x0, 0xda, 0xfffffffffffff000, 0x0, 0x0, 0x0, 0x2195, 0x0, 0x5, 0x9, 0x0, 0x80000001, 0x61fe, 0x0, 0x0, 0x9, 0x96, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x3, 0xc63, 0x6, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x4a, 0x400, 0x80000001, 0x0, 0x8, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xda81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaeb9, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x3], {0x0, 0x1c9c380}}) 18:52:20 executing program 6: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000000500)='./file0\x00', 0x0) 18:52:20 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2=0xe0000002, @dev={0xac, 0x14, 0x14, 0xd}}, 0xc) pread64(r0, &(0x7f0000000140)=""/53, 0x35, 0x41) 18:52:20 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'irlan0\x00', 0x1}) ioctl$TUNSETOFFLOAD(r0, 0x800454e1, 0x0) 18:52:20 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mounts\x00') mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='hugetlbfs\x00', 0x0, 0x0) preadv(r0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1000000000000205, 0x0) 18:52:20 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80}, 0x0, 0x0, 0x3, 0x8, 0x9, 0x8, 0x7}, 0x20) 18:52:20 executing program 4: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}, {@debug={'debug', 0x3d}, 0x2c}, {@nodevmap='nodevmap', 0x2c}, {@access_client='access=client', 0x2c}, {@cache_loose='cache=loose', 0x2c}]}}) 18:52:20 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') umount2(&(0x7f0000000500)='./file0\x00', 0x0) 18:52:20 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") rt_sigprocmask(0x0, &(0x7f0000136000)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigprocmask(0x1, &(0x7f0000000100)={0x3}, &(0x7f00000000c0), 0x8) 18:52:20 executing program 6: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000000500)='./file0\x00', 0x0) 18:52:20 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2=0xe0000002, @dev={0xac, 0x14, 0x14, 0xd}}, 0xc) pread64(r0, &(0x7f0000000140)=""/53, 0x35, 0x41) 18:52:20 executing program 7: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) sendfile(r0, r0, &(0x7f00000000c0), 0x2) 18:52:20 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) write$binfmt_aout(r1, &(0x7f0000006240)={{0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000002c}, "11e08b1ad28900df9fcd3febd52d8d51a23c3f9f9c9bc02766e23cec01c85cca72b31de1e3645dde159fe13e404f26533245954c496ab78f9cc9287be91c9d76d75420b2b9fc1681e3133ad73c506440d77a925aa4d7849d6068a393fe7d8fa2e766e3c5a22ea8383249e5e68e38837016cb50f1d820b4b48a46662fec306c7048d606b3b874dae8a758ee22bc845010d0", [[], [], []]}, 0x3b1) 18:52:20 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) write$binfmt_aout(r0, &(0x7f0000006240)={{0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000002c}, "11e08b1ad28900df9fcd3febd52d8d51a23c3f9f9c9bc02766e23cec01c85cca72b31de1e3645dde159fe13e404f26533245954c496ab78f9cc9287be91c9d76d75420b2b9fc1681e3133ad73c506440d77a925aa4d7849d6068a393fe7d8fa2e766e3c5a22ea8383249e5e68e38837016cb50f1d820b4b48a46662fec306c7048d606b3b874dae8a758ee22bc845010d03fd0632fb8e511f03b833812", [[], [], [], []]}, 0x4bd) [ 159.012160] ================================================================== [ 159.019611] BUG: KMSAN: uninit-value in ipv6_skip_exthdr+0x156/0x910 [ 159.026129] CPU: 0 PID: 6726 Comm: syz-executor2 Not tainted 4.18.0-rc4+ #23 [ 159.033324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 159.042770] Call Trace: [ 159.045369] dump_stack+0x185/0x1e0 [ 159.049009] kmsan_report+0x195/0x2c0 [ 159.052824] __msan_warning_32+0x7d/0xe0 [ 159.056909] ipv6_skip_exthdr+0x156/0x910 18:52:21 executing program 4: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}, {@debug={'debug', 0x3d}, 0x2c}, {@nodevmap='nodevmap', 0x2c}, {@access_client='access=client', 0x2c}, {@cache_loose='cache=loose', 0x2c}]}}) 18:52:21 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) write$binfmt_aout(r1, &(0x7f00000002c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, "", [[], []]}, 0x220) [ 159.061083] ipv6_get_l4proto+0x1be/0x2f0 [ 159.065248] nf_conntrack_in+0x54a/0x2070 [ 159.069423] ? hidraw_send_report+0x5b2/0x900 [ 159.073924] ? ipv6_invert_tuple+0xf0/0xf0 [ 159.078175] ipv6_conntrack_local+0xc3/0xf0 [ 159.082511] ? ipv6_conntrack_in+0xf0/0xf0 [ 159.086761] nf_hook_slow+0x15d/0x3e0 [ 159.091339] __ip6_local_out+0x64c/0x770 [ 159.095425] ? __ip6_local_out+0x770/0x770 [ 159.099677] ip6_local_out+0xa4/0x1d0 [ 159.103497] ip6_push_pending_frames+0x218/0x4d0 [ 159.108281] rawv6_sendmsg+0x45f0/0x5410 [ 159.112380] ? do_futex+0x3b8/0x6c80 [ 159.116103] ? __se_sys_futex+0x626/0x800 [ 159.120276] ? compat_rawv6_ioctl+0x100/0x100 [ 159.124792] inet_sendmsg+0x3fc/0x760 [ 159.128624] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 159.134012] ? inet_getname+0x4a0/0x4a0 [ 159.138179] sock_write_iter+0x408/0x4d0 [ 159.142266] ? sock_read_iter+0x4f0/0x4f0 [ 159.146430] __vfs_write+0x87e/0xb90 [ 159.150180] vfs_write+0x467/0x8c0 [ 159.153750] __x64_sys_write+0x1cf/0x400 [ 159.157836] ? ksys_write+0x380/0x380 [ 159.161650] do_syscall_64+0x15b/0x230 [ 159.165576] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 159.170769] RIP: 0033:0x455e29 [ 159.173952] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 159.193310] RSP: 002b:00007f6678993c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 159.201030] RAX: ffffffffffffffda RBX: 00007f66789946d4 RCX: 0000000000455e29 18:52:21 executing program 4: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}, {@debug={'debug', 0x3d}, 0x2c}, {@nodevmap='nodevmap', 0x2c}, {@access_client='access=client', 0x2c}, {@cache_loose='cache=loose', 0x2c}]}}) 18:52:21 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) write$binfmt_aout(r1, &(0x7f00000002c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, "", [[], []]}, 0x220) [ 159.208307] RDX: 00000000000003b1 RSI: 0000000020006240 RDI: 0000000000000014 [ 159.215588] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 159.222866] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 159.230140] R13: 00000000004c2e19 R14: 00000000004d4be8 R15: 0000000000000000 [ 159.237448] [ 159.239073] Uninit was stored to memory at: [ 159.243415] kmsan_internal_chain_origin+0x13c/0x240 [ 159.248528] kmsan_memcpy_origins+0x11d/0x170 [ 159.253051] __msan_memcpy+0xe7/0x150 [ 159.256862] skb_copy_bits+0x1f9/0xd80 [ 159.260763] ipv6_get_l4proto+0x105/0x2f0 [ 159.264947] nf_conntrack_in+0x54a/0x2070 [ 159.269121] ipv6_conntrack_local+0xc3/0xf0 [ 159.273450] nf_hook_slow+0x15d/0x3e0 [ 159.277361] __ip6_local_out+0x64c/0x770 [ 159.281429] ip6_local_out+0xa4/0x1d0 [ 159.285266] ip6_push_pending_frames+0x218/0x4d0 [ 159.290056] rawv6_sendmsg+0x45f0/0x5410 [ 159.294136] inet_sendmsg+0x3fc/0x760 [ 159.297948] sock_write_iter+0x408/0x4d0 [ 159.302019] __vfs_write+0x87e/0xb90 [ 159.305745] vfs_write+0x467/0x8c0 [ 159.309295] __x64_sys_write+0x1cf/0x400 18:52:21 executing program 4: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}, {@debug={'debug', 0x3d}, 0x2c}, {@nodevmap='nodevmap', 0x2c}, {@access_client='access=client', 0x2c}, {@cache_loose='cache=loose', 0x2c}]}}) [ 159.313368] do_syscall_64+0x15b/0x230 [ 159.317260] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 159.322442] [ 159.324062] Uninit was stored to memory at: [ 159.328388] kmsan_internal_chain_origin+0x13c/0x240 [ 159.333497] kmsan_memcpy_origins+0x11d/0x170 [ 159.337997] kmsan_memmove_origins+0x9/0x10 [ 159.342325] __msan_memmove+0xe7/0x150 [ 159.346216] nf_ct_frag6_gather+0x436a/0x5870 [ 159.350734] ipv6_defrag+0x501/0x5c0 [ 159.354453] nf_hook_slow+0x15d/0x3e0 [ 159.358265] __ip6_local_out+0x64c/0x770 18:52:21 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) write$binfmt_aout(r1, &(0x7f00000002c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, "", [[], []]}, 0x220) [ 159.362334] ip6_local_out+0xa4/0x1d0 [ 159.366141] ip6_push_pending_frames+0x218/0x4d0 [ 159.370917] rawv6_sendmsg+0x45f0/0x5410 [ 159.375009] inet_sendmsg+0x3fc/0x760 [ 159.378819] sock_write_iter+0x408/0x4d0 [ 159.382897] __vfs_write+0x87e/0xb90 [ 159.386618] vfs_write+0x467/0x8c0 [ 159.390167] __x64_sys_write+0x1cf/0x400 [ 159.394232] do_syscall_64+0x15b/0x230 [ 159.398131] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 159.403418] [ 159.405040] Uninit was created at: [ 159.408596] kmsan_internal_poison_shadow+0xc8/0x1d0 [ 159.413706] kmsan_kmalloc+0xa1/0x120 [ 159.417520] kmsan_slab_alloc+0x10/0x20 [ 159.421508] __kmalloc_node_track_caller+0xb48/0x11d0 [ 159.426708] __alloc_skb+0x2cb/0x9e0 [ 159.430432] __ip6_append_data+0x3c45/0x5320 [ 159.434856] ip6_append_data+0x40e/0x6b0 [ 159.438925] rawv6_sendmsg+0x2909/0x5410 [ 159.443016] inet_sendmsg+0x3fc/0x760 [ 159.446825] sock_write_iter+0x408/0x4d0 [ 159.450900] __vfs_write+0x87e/0xb90 [ 159.454616] vfs_write+0x467/0x8c0 [ 159.458159] __x64_sys_write+0x1cf/0x400 18:52:21 executing program 4: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}, {@debug={'debug', 0x3d}, 0x2c}, {@nodevmap='nodevmap', 0x2c}, {@access_client='access=client', 0x2c}, {@cache_loose='cache=loose', 0x2c}]}}) [ 159.462223] do_syscall_64+0x15b/0x230 [ 159.466127] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 159.471311] ================================================================== [ 159.478665] Disabling lock debugging due to kernel taint [ 159.484112] Kernel panic - not syncing: panic_on_warn set ... [ 159.484112] [ 159.491487] CPU: 0 PID: 6726 Comm: syz-executor2 Tainted: G B 4.18.0-rc4+ #23 [ 159.500057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 159.509584] Call Trace: [ 159.512187] dump_stack+0x185/0x1e0 [ 159.515920] panic+0x3d0/0x9b0 [ 159.519143] kmsan_report+0x2bf/0x2c0 [ 159.522961] __msan_warning_32+0x7d/0xe0 [ 159.527041] ipv6_skip_exthdr+0x156/0x910 [ 159.531215] ipv6_get_l4proto+0x1be/0x2f0 [ 159.535382] nf_conntrack_in+0x54a/0x2070 [ 159.539569] ? hidraw_send_report+0x5b2/0x900 [ 159.544071] ? ipv6_invert_tuple+0xf0/0xf0 [ 159.548323] ipv6_conntrack_local+0xc3/0xf0 [ 159.552657] ? ipv6_conntrack_in+0xf0/0xf0 [ 159.556907] nf_hook_slow+0x15d/0x3e0 [ 159.560724] __ip6_local_out+0x64c/0x770 [ 159.564805] ? __ip6_local_out+0x770/0x770 [ 159.569144] ip6_local_out+0xa4/0x1d0 [ 159.572957] ip6_push_pending_frames+0x218/0x4d0 [ 159.577725] rawv6_sendmsg+0x45f0/0x5410 [ 159.581813] ? do_futex+0x3b8/0x6c80 [ 159.585535] ? __se_sys_futex+0x626/0x800 [ 159.589711] ? compat_rawv6_ioctl+0x100/0x100 [ 159.594212] inet_sendmsg+0x3fc/0x760 [ 159.598035] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 159.603417] ? inet_getname+0x4a0/0x4a0 [ 159.607404] sock_write_iter+0x408/0x4d0 [ 159.611488] ? sock_read_iter+0x4f0/0x4f0 [ 159.615644] __vfs_write+0x87e/0xb90 [ 159.619416] vfs_write+0x467/0x8c0 [ 159.622985] __x64_sys_write+0x1cf/0x400 [ 159.627065] ? ksys_write+0x380/0x380 [ 159.630873] do_syscall_64+0x15b/0x230 [ 159.634778] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 159.639969] RIP: 0033:0x455e29 [ 159.643155] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 159.662502] RSP: 002b:00007f6678993c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 159.670225] RAX: ffffffffffffffda RBX: 00007f66789946d4 RCX: 0000000000455e29 [ 159.677498] RDX: 00000000000003b1 RSI: 0000000020006240 RDI: 0000000000000014 [ 159.684768] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 159.692040] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 159.699318] R13: 00000000004c2e19 R14: 00000000004d4be8 R15: 0000000000000000 [ 159.707145] Dumping ftrace buffer: [ 159.710844] (ftrace buffer empty) [ 159.714544] Kernel Offset: disabled [ 159.718168] Rebooting in 86400 seconds..