[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 33.903420] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 38.813641] random: sshd: uninitialized urandom read (32 bytes read) [ 39.190270] random: sshd: uninitialized urandom read (32 bytes read) [ 40.725565] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.34' (ECDSA) to the list of known hosts. [ 46.282572] random: sshd: uninitialized urandom read (32 bytes read) 2018/07/16 21:20:55 fuzzer started [ 47.705106] random: cc1: uninitialized urandom read (8 bytes read) 2018/07/16 21:20:58 dialing manager at 10.128.0.26:44961 2018/07/16 21:21:00 syscalls: 1605 2018/07/16 21:21:00 code coverage: enabled 2018/07/16 21:21:00 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/07/16 21:21:00 setuid sandbox: enabled 2018/07/16 21:21:00 namespace sandbox: enabled 2018/07/16 21:21:00 fault injection: enabled 2018/07/16 21:21:00 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/07/16 21:21:00 net packed injection: enabled 2018/07/16 21:21:00 net device setup: enabled [ 54.657316] random: crng init done 21:22:30 executing program 0: readlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/91, 0x5b) mknod(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) clone(0x0, &(0x7f0000000080), &(0x7f0000000000), &(0x7f0000000140), &(0x7f0000000180)) lremovexattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=@known='system.posix_acl_access\x00') getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, &(0x7f00000002c0)=""/243, &(0x7f0000000200)=0xf3) 21:22:30 executing program 2: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4000) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r0, 0x0, 0x2) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x2) sendfile(r0, r1, &(0x7f0000000040), 0x8000fffffffe) truncate(&(0x7f0000000140)='./bus\x00', 0x0) 21:22:30 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local={0xac, 0x14, 0x14, 0xaa}, @rand_addr}, 0xc) setsockopt$inet_tcp_int(r3, 0x6, 0x4, &(0x7f0000000000)=0x2000, 0xaf) close(r3) dup3(r1, r2, 0x0) 21:22:30 executing program 3: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) 21:22:30 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000100)={&(0x7f0000000180)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000040)=[{&(0x7f00000016c0)=""/209, 0x20001791}], 0x1, &(0x7f00000017c0)=""/201, 0xc9}, 0x0) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, &(0x7f0000000000)={'bcsh0\x00'}) 21:22:30 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x0) 21:22:30 executing program 5: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, &(0x7f0000000140)) ptrace(0x4207, r1) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) ptrace$setregset(0x4209, r1, 0x20000008, &(0x7f0000000100)={&(0x7f00000004c0)}) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000380)=0x7) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000001200)={0x0, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) 21:22:30 executing program 6: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x1800000000000000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}, 0x1}, 0x0) [ 142.229350] IPVS: ftp: loaded support on port[0] = 21 [ 142.270808] IPVS: ftp: loaded support on port[0] = 21 [ 142.291518] IPVS: ftp: loaded support on port[0] = 21 [ 142.322306] IPVS: ftp: loaded support on port[0] = 21 [ 142.353160] IPVS: ftp: loaded support on port[0] = 21 [ 142.382591] IPVS: ftp: loaded support on port[0] = 21 [ 142.424614] IPVS: ftp: loaded support on port[0] = 21 [ 142.433677] IPVS: ftp: loaded support on port[0] = 21 [ 145.853696] ip (4828) used greatest stack depth: 53616 bytes left [ 146.165839] ip (4844) used greatest stack depth: 53360 bytes left [ 146.580660] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.587145] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.642158] device bridge_slave_0 entered promiscuous mode [ 146.699410] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.705876] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.735337] device bridge_slave_0 entered promiscuous mode [ 146.763848] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.770369] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.806897] device bridge_slave_0 entered promiscuous mode [ 146.822853] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.829392] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.853548] device bridge_slave_0 entered promiscuous mode [ 146.864681] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.871354] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.887697] device bridge_slave_0 entered promiscuous mode [ 146.936329] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.942878] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.955236] device bridge_slave_0 entered promiscuous mode [ 146.976740] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.983239] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.021091] device bridge_slave_1 entered promiscuous mode [ 147.041740] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.048241] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.084114] device bridge_slave_0 entered promiscuous mode [ 147.105988] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.112513] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.131325] device bridge_slave_1 entered promiscuous mode [ 147.156164] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.162646] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.185285] device bridge_slave_1 entered promiscuous mode [ 147.203647] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.210159] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.237972] device bridge_slave_0 entered promiscuous mode [ 147.252520] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.259136] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.270512] device bridge_slave_1 entered promiscuous mode [ 147.287713] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.294192] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.302551] device bridge_slave_1 entered promiscuous mode [ 147.324162] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.330660] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.359083] device bridge_slave_1 entered promiscuous mode [ 147.371198] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 147.378930] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 147.386667] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.393115] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.423553] device bridge_slave_1 entered promiscuous mode [ 147.468691] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 147.476999] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 147.484480] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 147.506930] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.513462] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.574239] device bridge_slave_1 entered promiscuous mode [ 147.599186] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 147.626847] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 147.643414] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 147.700989] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 147.713795] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 147.734824] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 147.779211] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 147.853647] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 147.870744] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 147.945553] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 148.165497] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 148.373702] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 148.519706] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 148.596345] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 148.615393] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 148.632343] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 148.646164] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 148.704656] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 148.788824] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 148.804232] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 148.900286] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 148.921118] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 148.932976] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 148.943234] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 148.964536] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 148.975631] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 148.982694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 149.067750] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 149.086098] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 149.093386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 149.202542] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 149.212163] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 149.222788] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 149.249791] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 149.266115] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 149.277276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 149.316685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 149.339395] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 149.348944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 149.367885] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 149.383270] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 149.390532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 149.411563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 149.469210] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 149.476628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 149.491228] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 149.510139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 149.552923] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 149.563176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 149.600931] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 149.608823] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 149.650603] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 149.657692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 149.673797] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 149.690279] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 149.697925] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 149.714239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 149.763880] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 149.770915] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 150.056261] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 150.080166] team0: Port device team_slave_0 added [ 150.357748] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 150.378206] team0: Port device team_slave_1 added [ 150.399747] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 150.427926] team0: Port device team_slave_0 added [ 150.452853] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 150.474533] team0: Port device team_slave_0 added [ 150.482055] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 150.503840] team0: Port device team_slave_0 added [ 150.519507] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 150.531171] team0: Port device team_slave_0 added [ 150.543295] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 150.571985] team0: Port device team_slave_0 added [ 150.584116] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 150.596744] team0: Port device team_slave_0 added [ 150.627328] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 150.653512] team0: Port device team_slave_0 added [ 150.669317] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 150.681909] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 150.705674] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 150.745392] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 150.761213] team0: Port device team_slave_1 added [ 150.779839] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 150.800156] team0: Port device team_slave_1 added [ 150.812902] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 150.834822] team0: Port device team_slave_1 added [ 150.858058] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 150.873085] team0: Port device team_slave_1 added [ 150.880485] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 150.901702] team0: Port device team_slave_1 added [ 150.914836] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 150.930769] team0: Port device team_slave_1 added [ 150.948822] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 150.976222] team0: Port device team_slave_1 added [ 151.005595] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 151.012675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 151.030151] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 151.061669] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 151.070898] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 151.080011] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 151.087943] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 151.151178] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 151.172679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 151.186242] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 151.199821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 151.209196] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 151.232571] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 151.247457] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 151.255713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 151.265284] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 151.302683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 151.312606] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 151.324977] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 151.332696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 151.349647] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 151.367267] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 151.379215] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 151.387702] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 151.400255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 151.409665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 151.432512] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 151.468800] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 151.478172] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 151.487670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 151.498688] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 151.538845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 151.573909] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 151.590551] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 151.597904] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 151.613217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 151.627121] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 151.639046] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 151.653858] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 151.674433] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 151.684605] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 151.706232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 151.732680] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 151.744508] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 151.755547] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 151.764171] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 151.789292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 151.804798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 151.825304] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 151.845970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 151.860104] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 151.878280] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 151.887775] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 151.895931] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 151.919640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 151.932238] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 151.942187] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 151.964647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 151.981961] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 151.999599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 152.034467] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 152.042619] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 152.053981] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 152.061962] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 152.086522] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 152.101642] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 152.128585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 152.144915] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 152.160426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 152.176287] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 152.202211] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 152.213270] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 152.220958] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 152.231922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 152.264932] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 152.287815] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 152.305607] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 152.326123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 152.337193] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 152.344643] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 152.354069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 152.377992] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 152.392548] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 152.408481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 152.438689] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 152.446525] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 152.454230] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 152.470360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 152.492385] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 152.502622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 152.518353] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 152.550211] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 152.574248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 155.095077] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.101589] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.108474] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.114955] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.174256] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 155.180922] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 155.257865] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.264363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.271274] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.277738] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.332514] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 155.345259] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.351752] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.358613] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.365165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.388630] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 155.400666] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.407124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.413896] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.420312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.439229] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 155.458105] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.464627] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.471461] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.477935] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.508585] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 155.522201] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.528676] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.535509] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.541985] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.558222] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 155.590309] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.596797] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.603648] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.610116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.667446] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 155.754801] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.761290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.768175] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.774679] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.863821] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 156.191858] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 156.223791] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 156.261087] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 156.288971] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 156.319977] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 156.328920] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 156.338226] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 162.286840] ip (5782) used greatest stack depth: 53216 bytes left [ 166.205367] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.310251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.413218] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.561146] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.623289] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.702378] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.726433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.057536] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.162932] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 167.401851] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 167.481160] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 167.615121] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 167.643531] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 167.691502] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 167.872217] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 168.107217] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 168.155287] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 168.164166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 168.185001] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 168.388133] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 168.394480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 168.412249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 168.501691] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 168.508091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 168.527276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 168.739358] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 168.747550] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 168.753829] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 168.778904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 168.813115] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 168.837010] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 168.861894] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 168.881326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 168.893006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 168.936902] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 168.945519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 168.961375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 169.301368] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.384901] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.416530] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 169.423230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 169.441514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 169.615539] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.769903] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.802623] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.849268] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.933673] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.494427] 8021q: adding VLAN 0 to HW filter on device team0 21:23:04 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") perf_event_open(&(0x7f0000c86f88)={0x0, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000240)={0x303, 0x33}, 0x3) getpgid(0x0) prctl$void(0x22) 21:23:05 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20048000, &(0x7f0000000080)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) readv(r0, &(0x7f00000012c0)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1) sendto$inet(r0, &(0x7f00000000c0), 0xfe32, 0x0, &(0x7f0000000000)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) 21:23:05 executing program 6: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x1800000000000000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}, 0x1}, 0x0) 21:23:05 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) 21:23:05 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x1000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x9, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0xffffff80], 0x1}}}]}, 0x70}, 0x1}, 0x0) 21:23:05 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000008c0)='net/ip_vs\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000600)=""/246, 0xf6}], 0x1, 0xfffffffc) 21:23:05 executing program 6: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x82) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/tcp\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, "e1d3f877e5eae453e55d7d64d00d4901baed21f7de92a8669b38ccd6260857dbf5ae46354569636517b50f805ae208258dba7d0abe8d208f0f1bcc885c8ba93c", "fe047b3177f4fc2eb04172daa8e7d1c4c4cf144a23173b7605afb988de9bba6df5fdc54d81bf6ba5629eef628582fba5bf4af44acfe05900", "ee42e3ef1d1772a9432c220303b70b708ad791137e2982fcce5d747a3131995a"}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 21:23:05 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 21:23:05 executing program 1: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$dupfd(r0, 0x0, r0) [ 176.988545] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 21:23:06 executing program 2: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4000) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r0, 0x0, 0x2) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x2) sendfile(r0, r1, &(0x7f0000000040), 0x8000fffffffe) truncate(&(0x7f0000000140)='./bus\x00', 0x0) 21:23:06 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(r0, &(0x7f00000001c0)="ed", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x4}, 0x1c) listen(r0, 0x9) r1 = accept4(r0, &(0x7f00000003c0)=@in={0x0, 0x0, @multicast1}, &(0x7f0000000ac0)=0x80, 0x0) sendmmsg(r1, &(0x7f0000007840)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000940)="eb", 0x1}], 0x1, &(0x7f00000009c0)}}, {{0x0, 0x0, &(0x7f00000076c0)=[{&(0x7f0000007400)="d3d3ecc405105ca807742657c7e4dba9517942d9bf8d619aed", 0x19}, {&(0x7f0000007640)="94f980f39e1ad80e6323ab7a5fd0143ff8c90554fbea3313e4c6675bf24540cac37ed09d79bbdd8e53b71fbef45f7ad8296989230896ca4bbb73595684abde581243a0995660f15d963e35574a666fc0c25d2bbfdd98a0ee62866e715ad7c96e2583873c8abbbd0a560bcc6d3d1cf34501", 0x71}], 0x2, &(0x7f0000007740), 0x0, 0x4000000}, 0x2}], 0x2, 0x80) 21:23:06 executing program 6: 21:23:06 executing program 3: 21:23:06 executing program 0: 21:23:06 executing program 1: 21:23:06 executing program 7: 21:23:06 executing program 4: 21:23:07 executing program 7: 21:23:07 executing program 6: 21:23:07 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6}, 0x14) sendmmsg$inet_sctp(r1, &(0x7f0000871fc8)=[{&(0x7f000086c000)=@in6={0xa, 0x0, 0x2}, 0x17, &(0x7f0000d1e000), 0x0, &(0x7f0000dda000)}], 0x492492492492510, 0x0) 21:23:07 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='map_files\x00') mkdir(&(0x7f00000000c0)='./file0\x00', 0x41) getdents64(r0, &(0x7f0000000580)=""/207, 0xfffffffffffffcb7) utime(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x1}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000140)=0x7ff, 0x11) sendto$inet6(r2, &(0x7f0000adb000), 0x0, 0x0, &(0x7f0000809000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) fanotify_init(0x32, 0xc00) fgetxattr(r0, &(0x7f0000000200)=@known='system.advise\x00', &(0x7f00000004c0)=""/82, 0x52) r3 = creat(&(0x7f0000000340)='./file0\x00', 0x40) getdents(r3, &(0x7f0000000380)=""/8, 0x8) getdents(r0, &(0x7f0000000000)=""/127, 0x7f) getresgid(&(0x7f0000000140), &(0x7f0000000540), &(0x7f00000001c0)) socket$inet(0x2, 0x3, 0x2) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r4, 0x0, 0xcd, &(0x7f0000000000), 0x3c) 21:23:07 executing program 0: syz_emit_ethernet(0x2a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @random="2234ea80815c", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0xffffff84, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @local={0xac, 0x14, 0x14, 0xaa}}, @igmp={0x0, 0x0, 0x0, @multicast1=0xe0000001}}}}}, &(0x7f0000000240)) 21:23:07 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000300)=0x2) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)) 21:23:07 executing program 7: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000)={0x7fffffff}, 0x8, 0x0) msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000080)) readv(r0, &(0x7f0000000040)=[{&(0x7f000004f000)=""/128, 0x80}], 0x1f6) timer_create(0x0, &(0x7f000004c000)={0x0, 0x16}, &(0x7f000004cffc)) timer_settime(0x0, 0x0, &(0x7f000004a000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f00000001c0)) [ 178.249550] ================================================================== [ 178.257005] BUG: KMSAN: uninit-value in ip_tunnel_xmit+0x63a/0x3b10 [ 178.263436] CPU: 0 PID: 6735 Comm: syz-executor3 Not tainted 4.18.0-rc4+ #27 [ 178.270634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 178.280006] Call Trace: [ 178.282627] dump_stack+0x185/0x1e0 [ 178.286309] kmsan_report+0x195/0x2c0 [ 178.290176] __msan_warning+0x7d/0xe0 [ 178.294014] ip_tunnel_xmit+0x63a/0x3b10 [ 178.298108] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 178.303509] ? gre_build_header+0x5ab/0xaa0 [ 178.307875] ipgre_xmit+0xe16/0xef0 [ 178.311539] ? ipgre_close+0x230/0x230 [ 178.315457] dev_hard_start_xmit+0x60f/0xcc0 [ 178.319907] __dev_queue_xmit+0x3060/0x3c70 [ 178.324276] dev_queue_xmit+0x4b/0x60 [ 178.328283] ? __netdev_pick_tx+0xb60/0xb60 [ 178.332632] packet_sendmsg+0x8469/0x9010 [ 178.336820] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 178.342438] ? rw_copy_check_uvector+0x630/0x710 [ 178.347291] ? copy_msghdr_from_user+0x75e/0x8c0 [ 178.352105] ? copy_msghdr_from_user+0x75e/0x8c0 [ 178.357084] ? compat_packet_setsockopt+0x360/0x360 [ 178.362143] ___sys_sendmsg+0xed9/0x1350 [ 178.366335] ? __msan_poison_alloca+0x183/0x220 [ 178.371053] ? _cond_resched+0x4c/0x100 [ 178.375081] ? rcu_all_qs+0x3f/0x210 [ 178.378813] ? _cond_resched+0x4c/0x100 [ 178.380400] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 21:23:07 executing program 6: syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x0, 0x0) [ 178.382825] ? rcu_all_qs+0x3f/0x210 [ 178.382844] ? _cond_resched+0x3b/0x100 [ 178.382865] ? __sys_sendmmsg+0x6ec/0x980 [ 178.382883] ? _cond_resched+0x4c/0x100 [ 178.382919] __sys_sendmmsg+0x547/0x980 [ 178.420246] __x64_sys_sendmmsg+0x11c/0x170 [ 178.424684] ? __sys_sendmmsg+0x980/0x980 [ 178.428860] do_syscall_64+0x15b/0x230 [ 178.432867] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 178.438071] RIP: 0033:0x455ab9 [ 178.441261] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 178.460603] RSP: 002b:00007fca62bc9c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 178.468357] RAX: ffffffffffffffda RBX: 00007fca62bca6d4 RCX: 0000000000455ab9 [ 178.475653] RDX: 0492492492492510 RSI: 0000000020871fc8 RDI: 0000000000000014 [ 178.482939] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 178.490225] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 178.497596] R13: 00000000004c0d98 R14: 00000000004d13c8 R15: 0000000000000000 [ 178.504881] [ 178.506512] Uninit was created at: [ 178.510072] kmsan_internal_poison_shadow+0xc8/0x1d0 [ 178.515191] kmsan_kmalloc+0xa1/0x120 [ 178.519011] kmsan_slab_alloc+0x10/0x20 [ 178.523004] __kmalloc_node_track_caller+0xb48/0x11d0 [ 178.528237] __alloc_skb+0x2cb/0x9e0 [ 178.531970] alloc_skb_with_frags+0x1e6/0xb80 [ 178.536479] sock_alloc_send_pskb+0xb59/0x11e0 [ 178.541194] packet_sendmsg+0x68cb/0x9010 [ 178.545358] ___sys_sendmsg+0xed9/0x1350 [ 178.549446] __sys_sendmmsg+0x547/0x980 [ 178.553461] __x64_sys_sendmmsg+0x11c/0x170 [ 178.557802] do_syscall_64+0x15b/0x230 [ 178.561711] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 178.566902] ================================================================== [ 178.574526] Disabling lock debugging due to kernel taint [ 178.580008] Kernel panic - not syncing: panic_on_warn set ... [ 178.580008] [ 178.587403] CPU: 0 PID: 6735 Comm: syz-executor3 Tainted: G B 4.18.0-rc4+ #27 [ 178.595992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 178.605363] Call Trace: [ 178.607998] dump_stack+0x185/0x1e0 [ 178.611653] panic+0x3d0/0x9b0 [ 178.614894] kmsan_report+0x2bf/0x2c0 [ 178.618717] __msan_warning+0x7d/0xe0 [ 178.622544] ip_tunnel_xmit+0x63a/0x3b10 [ 178.627491] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 178.632893] ? gre_build_header+0x5ab/0xaa0 [ 178.637252] ipgre_xmit+0xe16/0xef0 [ 178.641081] ? ipgre_close+0x230/0x230 [ 178.644987] dev_hard_start_xmit+0x60f/0xcc0 [ 178.649446] __dev_queue_xmit+0x3060/0x3c70 [ 178.653810] dev_queue_xmit+0x4b/0x60 [ 178.657628] ? __netdev_pick_tx+0xb60/0xb60 [ 178.661965] packet_sendmsg+0x8469/0x9010 [ 178.666254] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 178.671720] ? rw_copy_check_uvector+0x630/0x710 [ 178.676493] ? copy_msghdr_from_user+0x75e/0x8c0 [ 178.681288] ? copy_msghdr_from_user+0x75e/0x8c0 [ 178.686084] ? compat_packet_setsockopt+0x360/0x360 [ 178.691117] ___sys_sendmsg+0xed9/0x1350 [ 178.695300] ? __msan_poison_alloca+0x183/0x220 [ 178.699991] ? _cond_resched+0x4c/0x100 [ 178.703990] ? rcu_all_qs+0x3f/0x210 [ 178.707719] ? _cond_resched+0x4c/0x100 [ 178.711719] ? rcu_all_qs+0x3f/0x210 [ 178.715448] ? _cond_resched+0x3b/0x100 [ 178.719438] ? __sys_sendmmsg+0x6ec/0x980 [ 178.723604] ? _cond_resched+0x4c/0x100 [ 178.727599] __sys_sendmmsg+0x547/0x980 [ 178.731620] __x64_sys_sendmmsg+0x11c/0x170 [ 178.735966] ? __sys_sendmmsg+0x980/0x980 [ 178.740127] do_syscall_64+0x15b/0x230 [ 178.744035] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 178.749235] RIP: 0033:0x455ab9 [ 178.752452] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 178.771804] RSP: 002b:00007fca62bc9c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 178.779534] RAX: ffffffffffffffda RBX: 00007fca62bca6d4 RCX: 0000000000455ab9 [ 178.786821] RDX: 0492492492492510 RSI: 0000000020871fc8 RDI: 0000000000000014 [ 178.794101] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 178.801388] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 178.808668] R13: 00000000004c0d98 R14: 00000000004d13c8 R15: 0000000000000000 [ 178.816676] Dumping ftrace buffer: [ 178.820205] (ftrace buffer empty) [ 178.823898] Kernel Offset: disabled [ 178.827601] Rebooting in 86400 seconds..