[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 31.866757] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. [ 32.680360] random: sshd: uninitialized urandom read (32 bytes read) [ 33.012696] random: sshd: uninitialized urandom read (32 bytes read) Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 34.575289] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.32' (ECDSA) to the list of known hosts. [ 40.126490] random: sshd: uninitialized urandom read (32 bytes read) 2018/07/17 09:14:38 fuzzer started [ 41.509226] random: cc1: uninitialized urandom read (8 bytes read) 2018/07/17 09:14:41 dialing manager at 10.128.0.26:38229 2018/07/17 09:14:43 syscalls: 1605 2018/07/17 09:14:43 code coverage: enabled 2018/07/17 09:14:43 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/07/17 09:14:43 setuid sandbox: enabled 2018/07/17 09:14:43 namespace sandbox: enabled 2018/07/17 09:14:43 fault injection: enabled 2018/07/17 09:14:43 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/07/17 09:14:43 net packed injection: enabled 2018/07/17 09:14:43 net device setup: enabled [ 46.532066] random: crng init done 09:16:14 executing program 0: r0 = socket(0x10, 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RRENAME(r1, &(0x7f0000000040)={0x7, 0x15}, 0x7) 09:16:14 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, &(0x7f0000527ff8)=0x3, 0x1b, 0x0) get_mempolicy(&(0x7f0000000040), &(0x7f0000000000), 0x800, &(0x7f000083f000/0x3000)=nil, 0x2) 09:16:14 executing program 7: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000980)="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", 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fdatasync(r0) 09:16:14 executing program 3: r0 = socket(0x11, 0x4000000000080002, 0x0) setsockopt$packet_int(r0, 0x107, 0x12, &(0x7f0000000040), 0x4) 09:16:14 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0xa, 0x3, 0x10) setsockopt$netlink_NETLINK_RX_RING(r0, 0x29, 0x11, &(0x7f0000000ff0)={0x4}, 0x10) 09:16:14 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in=@multicast1=0xe0000001, @in=@dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x33}, 0xa, @in=@rand_addr, 0x0, 0x1}}, 0xe8) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0xffff, @loopback={0x0, 0x1}, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000000c0)}}, {{&(0x7f0000000580)=@in={0x2, 0x4e21, @multicast2=0xe0000002}, 0x80, &(0x7f00000004c0), 0x0, &(0x7f00000008c0)}}], 0x2, 0x0) 09:16:14 executing program 6: syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cdbf0e000084", @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@pkt_toobig={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x32, 0x0, @loopback={0x0, 0x1}, @dev={0xfe, 0x80}, [], "800000e77f000400"}}}}}}}, 0x0) 09:16:14 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x0, 0x0) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000005c0)={0x303, 0x33}, 0x4) [ 137.350696] IPVS: ftp: loaded support on port[0] = 21 [ 137.469624] IPVS: ftp: loaded support on port[0] = 21 [ 137.514593] IPVS: ftp: loaded support on port[0] = 21 [ 137.566525] IPVS: ftp: loaded support on port[0] = 21 [ 137.581270] IPVS: ftp: loaded support on port[0] = 21 [ 137.592966] IPVS: ftp: loaded support on port[0] = 21 [ 137.639257] IPVS: ftp: loaded support on port[0] = 21 [ 137.666614] IPVS: ftp: loaded support on port[0] = 21 [ 140.837477] ip (4771) used greatest stack depth: 53744 bytes left [ 140.964109] ip (4782) used greatest stack depth: 53504 bytes left [ 141.208641] ip (4793) used greatest stack depth: 53232 bytes left [ 141.531416] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.537891] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.556304] device bridge_slave_0 entered promiscuous mode [ 141.798713] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.805193] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.853229] device bridge_slave_0 entered promiscuous mode [ 141.876327] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.882808] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.891168] device bridge_slave_1 entered promiscuous mode [ 141.915259] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.921705] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.943187] device bridge_slave_0 entered promiscuous mode [ 141.972302] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.978776] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.996738] device bridge_slave_0 entered promiscuous mode [ 142.044726] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.051196] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.078576] device bridge_slave_0 entered promiscuous mode [ 142.106936] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.113479] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.145752] device bridge_slave_1 entered promiscuous mode [ 142.170235] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 142.186111] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.192614] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.237750] device bridge_slave_0 entered promiscuous mode [ 142.261260] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.267774] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.289554] device bridge_slave_1 entered promiscuous mode [ 142.308529] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.315097] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.333659] device bridge_slave_0 entered promiscuous mode [ 142.357586] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.364124] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.379133] device bridge_slave_1 entered promiscuous mode [ 142.387696] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.394226] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.412608] device bridge_slave_1 entered promiscuous mode [ 142.426911] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 142.441798] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 142.452639] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.459125] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.493260] device bridge_slave_0 entered promiscuous mode [ 142.519010] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.525495] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.548276] device bridge_slave_1 entered promiscuous mode [ 142.566723] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 142.589430] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.595980] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.639996] device bridge_slave_1 entered promiscuous mode [ 142.659882] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 142.673137] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 142.722303] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 142.732448] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.738907] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.798755] device bridge_slave_1 entered promiscuous mode [ 142.833732] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 142.853074] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 142.889896] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 142.905459] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 142.946398] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 143.056797] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 143.143887] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 143.160235] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 143.171521] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 143.296720] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 143.424562] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 143.454736] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 143.623097] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 143.712910] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 143.723356] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 143.730316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 143.776183] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 143.806551] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 143.920481] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 143.964560] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 143.980006] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 143.990285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 144.014604] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 144.021726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 144.066721] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 144.076419] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 144.092646] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 144.140664] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 144.220541] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 144.240834] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 144.247821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 144.273261] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 144.280242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 144.322528] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 144.329581] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 144.379790] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 144.413592] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 144.420625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 144.458720] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 144.472181] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 144.479210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 144.553527] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 144.560614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 144.633795] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 144.641313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 144.685595] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 144.693374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 144.715810] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 144.722798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 144.741736] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 144.752107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 144.897296] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 144.904316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 144.924142] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 144.941269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 144.954480] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 144.969694] team0: Port device team_slave_0 added [ 145.016157] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 145.025651] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 145.141960] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 145.180984] team0: Port device team_slave_0 added [ 145.234096] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 145.256142] team0: Port device team_slave_1 added [ 145.291349] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 145.306956] team0: Port device team_slave_0 added [ 145.394225] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 145.425996] team0: Port device team_slave_1 added [ 145.472789] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 145.479949] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 145.492181] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 145.576375] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 145.597276] team0: Port device team_slave_1 added [ 145.619052] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 145.645145] team0: Port device team_slave_0 added [ 145.719221] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 145.736797] team0: Port device team_slave_0 added [ 145.743754] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 145.758963] team0: Port device team_slave_0 added [ 145.769617] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 145.776578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 145.797998] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 145.842166] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 145.849801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 145.866987] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 145.891927] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 145.902172] team0: Port device team_slave_0 added [ 145.910154] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 145.923563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 145.945353] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 145.970301] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 145.979973] team0: Port device team_slave_1 added [ 145.991933] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 146.014361] team0: Port device team_slave_1 added [ 146.031192] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 146.042711] team0: Port device team_slave_0 added [ 146.073280] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 146.093415] team0: Port device team_slave_1 added [ 146.113509] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 146.126502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 146.150566] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 146.172868] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 146.182482] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 146.193406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 146.224511] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 146.247863] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 146.273017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 146.296187] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 146.323165] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 146.343280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 146.357776] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 146.374253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 146.392164] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 146.416791] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 146.426013] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 146.443267] team0: Port device team_slave_1 added [ 146.459465] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 146.469489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 146.485351] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 146.499725] team0: Port device team_slave_1 added [ 146.506588] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 146.517635] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 146.524887] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 146.535239] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 146.542156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 146.566269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 146.601184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 146.635126] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 146.675439] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 146.702061] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 146.720944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 146.741319] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 146.751203] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 146.766265] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 146.787196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 146.811270] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 146.820195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 146.829817] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 146.841382] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 146.849238] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 146.858656] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 146.866527] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 146.874577] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 146.882421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 146.925325] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 146.954856] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 146.982845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 147.010396] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 147.040861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 147.064209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 147.072746] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 147.080704] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 147.088797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 147.128554] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 147.141686] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 147.149118] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 147.164445] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 147.187865] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 147.212453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 147.233599] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 147.241445] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 147.251068] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 147.270427] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 147.327492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 147.360854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 147.393834] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 147.408635] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 147.417142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 147.439651] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 147.454860] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 147.483494] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 147.493801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 147.506705] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 147.526272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 147.554326] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 147.574808] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 147.602212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 147.631152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 147.675476] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 147.716379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 147.835523] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 147.842990] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 147.858312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 147.902442] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 147.911682] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 147.927986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 149.345356] ip (5237) used greatest stack depth: 53216 bytes left [ 149.928169] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.934676] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.941477] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.947902] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.001188] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 150.008346] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 150.044522] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.050994] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.057847] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.064293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.094932] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 150.199728] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.206194] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.213019] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.219460] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.280275] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 150.303783] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.310265] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.317115] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.323558] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.345741] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 150.357445] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.363901] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.370688] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.377120] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.438915] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 150.460208] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.466686] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.473508] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.479965] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.506265] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 150.986772] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.993255] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.000741] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.007188] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.036923] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 151.056304] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.062774] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.069556] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.075952] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.105257] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 151.115807] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 151.137859] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 151.158514] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 151.166361] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 151.174621] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 151.182928] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 151.190819] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 161.280175] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.323105] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.372229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.526565] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.614179] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.680665] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.813451] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.943632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.264847] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 162.272593] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 162.351111] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 162.624824] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 162.673604] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 162.718221] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 162.853879] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 162.949986] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 163.243302] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 163.249627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 163.259657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 163.338306] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 163.344685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 163.360973] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 163.397804] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 163.423135] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 163.440823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 163.711104] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 163.717454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 163.734948] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 163.768254] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 163.774675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 163.786966] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 163.843087] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 163.850816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 163.863933] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 163.930656] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 163.938235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 163.954966] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 163.989241] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 163.995789] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 164.006529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 164.349217] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.440264] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.577663] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.746822] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.873249] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.958652] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.981628] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.024501] 8021q: adding VLAN 0 to HW filter on device team0 09:16:48 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xfffffffffffffffc, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x80284504, &(0x7f0000000580)=[0x2f9]) 09:16:48 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x858, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000000080)) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000001c0)) 09:16:48 executing program 3: r0 = memfd_create(&(0x7f0000000000)='b\n\x00\x00\x00', 0x5) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x4d011, r0, 0x0) 09:16:48 executing program 0: r0 = socket(0x10, 0x802, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RRENAME(r1, &(0x7f0000000040)={0x0, 0x15}, 0xfffffffffffffc78) 09:16:49 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000140), &(0x7f0000000180)=0x40) 09:16:49 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$sock_timeval(r0, 0x1, 0x12, &(0x7f0000000240)={0x77359400}, 0x8) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739c9d, 0x0, 0x0, 0x35) 09:16:49 executing program 2: r0 = socket$kcm(0x2, 0xa, 0x0) sendmsg(r0, &(0x7f0000000180)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}}}}, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000000240)}, 0x0) 09:16:49 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="49f77087ee2c7957f8") r1 = memfd_create(&(0x7f0000000280)="02000000000000000000400018fe45620000", 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) r3 = dup2(r2, r1) perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) write$sndseq(r1, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000000)={0x186}) 09:16:49 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) getsockname(r0, &(0x7f0000000000)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @broadcast}}}, &(0x7f0000000080)=0x80) ioctl$sock_SIOCGIFINDEX(r1, 0x5450, &(0x7f0000000580)={'bridge0\x00'}) [ 171.352659] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 171.353784] syz-executor2 uses obsolete (PF_INET,SOCK_PACKET) 09:16:49 executing program 4: open(&(0x7f0000000080)='./file0\x00', 0x44, 0x0) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r0, 0x0) 09:16:49 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$inet_tcp_buf(r1, 0x6, 0x16, &(0x7f0000000080)="f3", 0x1) 09:16:49 executing program 6: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x857, 0x402}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="000000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000a00000000000000fe8000000000000000000000000000aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000ff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b10d55c7c6269ab02c6057e9c5822000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000ffffac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x1) 09:16:49 executing program 5: r0 = socket$inet6(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x5450, &(0x7f0000000580)={'veth0\x00'}) 09:16:49 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) 09:16:49 executing program 4: r0 = memfd_create(&(0x7f0000000000)='b\n\x00\x00\x00', 0x5) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) 09:16:49 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e13000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000000)=0x6, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000000140)='8', 0x1, 0x8000, 0x0, 0x0) close(r0) 09:16:49 executing program 2: r0 = socket$kcm(0x2, 0xa, 0x0) sendmsg(r0, &(0x7f0000000180)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}}}}, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000000240)}, 0x0) 09:16:49 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$inet_tcp_buf(r1, 0x6, 0x16, &(0x7f0000000080)="f3", 0x1) [ 171.846904] RDS: rds_bind could not find a transport for 255.255.255.255, load rds_tcp or rds_rdma? 09:16:49 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0x4e22, @broadcast=0xffffffff}, 0x10) [ 171.901750] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 171.930165] RDS: rds_bind could not find a transport for 255.255.255.255, load rds_tcp or rds_rdma? 09:16:49 executing program 2: [ 172.013622] RDS: rds_bind could not find a transport for 255.255.255.255, load rds_tcp or rds_rdma? 09:16:50 executing program 4: 09:16:50 executing program 3: 09:16:50 executing program 6: 09:16:50 executing program 1: 09:16:50 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) 09:16:50 executing program 0: 09:16:50 executing program 5: 09:16:50 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x100000001, 0x0, r0}, 0x2c) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x8, &(0x7f00000000c0)}, 0x299) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r1, &(0x7f0000000040), &(0x7f0000000100)=""/108}, 0x18) 09:16:50 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x380, 0x10}, 0x2c) r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0)='!', &(0x7f0000000100)}, 0x20) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000001c0), 0xdd) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x0, 0x80fe}, 0x314, &(0x7f00000001c0), 0x12f}, 0x0) [ 172.402834] RDS: rds_bind could not find a transport for 255.255.255.255, load rds_tcp or rds_rdma? 09:16:50 executing program 1: 09:16:50 executing program 5: 09:16:50 executing program 0: 09:16:50 executing program 6: 09:16:50 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x380, 0x10}, 0x2c) r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0)='!', &(0x7f0000000100)}, 0x20) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000001c0), 0xdd) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x0, 0x80fe}, 0x314, &(0x7f00000001c0), 0x12f}, 0x0) 09:16:50 executing program 4: 09:16:50 executing program 3: 09:16:50 executing program 7: [ 172.792736] ================================================================== [ 172.800173] BUG: KMSAN: uninit-value in __nf_conntrack_find_get+0xc15/0x2190 [ 172.807385] CPU: 0 PID: 6725 Comm: syz-executor2 Not tainted 4.18.0-rc4+ #27 [ 172.814569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 172.823922] Call Trace: [ 172.826520] dump_stack+0x185/0x1e0 [ 172.830160] kmsan_report+0x195/0x2c0 [ 172.833981] __msan_warning+0x7d/0xe0 [ 172.837793] __nf_conntrack_find_get+0xc15/0x2190 [ 172.842648] ? kmsan_set_origin_inline+0x6b/0x120 [ 172.847512] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 172.852888] ? hash_conntrack_raw+0x5f7/0x8c0 [ 172.857407] nf_conntrack_in+0x1674/0x2070 [ 172.861685] ipv6_conntrack_local+0xc3/0xf0 [ 172.866023] ? ipv6_conntrack_in+0xf0/0xf0 [ 172.870266] nf_hook_slow+0x15d/0x3e0 [ 172.874083] rawv6_sendmsg+0x4d06/0x5410 [ 172.878183] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 172.883642] ? import_iovec+0x3e0/0x640 [ 172.887630] ? raw6_getfrag+0x630/0x630 [ 172.891631] ? compat_rawv6_ioctl+0x100/0x100 [ 172.896141] inet_sendmsg+0x3fc/0x760 [ 172.899954] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 172.905339] ? inet_getname+0x4a0/0x4a0 [ 172.909381] ___sys_sendmsg+0xed9/0x1350 [ 172.913464] ? __msan_poison_alloca+0x183/0x220 [ 172.918150] ? __fdget+0x4e/0x60 [ 172.921535] ? __fget_light+0x67/0x760 [ 172.925429] ? __fdget+0x4e/0x60 [ 172.928812] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 172.934183] ? __fget_light+0x6e6/0x760 [ 172.938191] __x64_sys_sendmsg+0x3b0/0x520 [ 172.942454] ? ___sys_sendmsg+0x1350/0x1350 [ 172.946792] do_syscall_64+0x15b/0x230 [ 172.950709] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 172.955904] RIP: 0033:0x455ab9 [ 172.959087] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 172.978414] RSP: 002b:00007f8c14c8fc68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 172.986140] RAX: ffffffffffffffda RBX: 00007f8c14c906d4 RCX: 0000000000455ab9 09:16:50 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) sync_file_range(0xffffffffffffffff, 0x0, 0x7, 0x0) dup(r0) exit(0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 09:16:50 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2f, '0ids', 0x20}]}, 0x1) 09:16:50 executing program 5: set_mempolicy(0x8002, &(0x7f0000000640)=0xffffffff, 0x4) syslog(0x3, &(0x7f0000000000)=""/73, 0x49) 09:16:50 executing program 3: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000640)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000100)='.', &(0x7f00000001c0)='loefs\x00', 0x9004, 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) creat(&(0x7f0000000080)='./file0\x00', 0x0) 09:16:50 executing program 7: 09:16:50 executing program 4: 09:16:51 executing program 1: [ 172.993419] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000013 [ 173.000704] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 173.007987] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 173.015264] R13: 00000000004c1066 R14: 00000000004d16c8 R15: 0000000000000000 [ 173.022546] [ 173.024170] Uninit was stored to memory at: [ 173.028505] kmsan_internal_chain_origin+0x13c/0x240 [ 173.033622] __msan_chain_origin+0x76/0xd0 [ 173.037871] __nf_conntrack_confirm+0x2700/0x3f70 [ 173.042729] ipv6_confirm+0x573/0x740 [ 173.046539] nf_hook_slow+0x15d/0x3e0 [ 173.050349] ip6_output+0x37d/0x710 [ 173.053984] rawv6_sendmsg+0x4e06/0x5410 [ 173.058052] inet_sendmsg+0x3fc/0x760 [ 173.061867] ___sys_sendmsg+0xed9/0x1350 [ 173.065936] __x64_sys_sendmsg+0x3b0/0x520 [ 173.070177] do_syscall_64+0x15b/0x230 [ 173.074074] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 173.079257] [ 173.088767] Uninit was created at: [ 173.092342] kmsan_internal_poison_shadow+0xc8/0x1d0 [ 173.097626] kmsan_kmalloc+0xa1/0x120 [ 173.101441] kmem_cache_alloc+0xad2/0xbb0 [ 173.105598] __nf_conntrack_alloc+0x166/0x670 [ 173.110103] init_conntrack+0x635/0x2840 [ 173.114178] nf_conntrack_in+0x1812/0x2070 [ 173.118423] ipv6_conntrack_local+0xc3/0xf0 [ 173.122750] nf_hook_slow+0x15d/0x3e0 [ 173.126552] rawv6_sendmsg+0x4d06/0x5410 [ 173.130614] inet_sendmsg+0x3fc/0x760 [ 173.134430] ___sys_sendmsg+0xed9/0x1350 [ 173.138500] __x64_sys_sendmsg+0x3b0/0x520 [ 173.142740] do_syscall_64+0x15b/0x230 [ 173.146635] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 173.151823] ================================================================== [ 173.159176] Disabling lock debugging due to kernel taint [ 173.164624] Kernel panic - not syncing: panic_on_warn set ... [ 173.164624] [ 173.172005] CPU: 0 PID: 6725 Comm: syz-executor2 Tainted: G B 4.18.0-rc4+ #27 [ 173.180582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 173.190069] Call Trace: [ 173.192672] dump_stack+0x185/0x1e0 [ 173.196314] panic+0x3d0/0x9b0 [ 173.199531] kmsan_report+0x2bf/0x2c0 [ 173.203348] __msan_warning+0x7d/0xe0 [ 173.207169] __nf_conntrack_find_get+0xc15/0x2190 [ 173.212022] ? kmsan_set_origin_inline+0x6b/0x120 [ 173.216892] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 173.222267] ? hash_conntrack_raw+0x5f7/0x8c0 [ 173.226783] nf_conntrack_in+0x1674/0x2070 [ 173.231064] ipv6_conntrack_local+0xc3/0xf0 [ 173.235402] ? ipv6_conntrack_in+0xf0/0xf0 [ 173.239645] nf_hook_slow+0x15d/0x3e0 [ 173.243467] rawv6_sendmsg+0x4d06/0x5410 [ 173.247568] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 173.253032] ? import_iovec+0x3e0/0x640 [ 173.257023] ? raw6_getfrag+0x630/0x630 [ 173.261021] ? compat_rawv6_ioctl+0x100/0x100 [ 173.265528] inet_sendmsg+0x3fc/0x760 [ 173.269343] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 173.274721] ? inet_getname+0x4a0/0x4a0 [ 173.278705] ___sys_sendmsg+0xed9/0x1350 [ 173.282789] ? __msan_poison_alloca+0x183/0x220 [ 173.287468] ? __fdget+0x4e/0x60 [ 173.290843] ? __fget_light+0x67/0x760 [ 173.294730] ? __fdget+0x4e/0x60 [ 173.298110] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 173.303477] ? __fget_light+0x6e6/0x760 [ 173.307477] __x64_sys_sendmsg+0x3b0/0x520 [ 173.311733] ? ___sys_sendmsg+0x1350/0x1350 [ 173.316063] do_syscall_64+0x15b/0x230 [ 173.319964] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 173.325156] RIP: 0033:0x455ab9 [ 173.328347] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 173.347676] RSP: 002b:00007f8c14c8fc68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 173.355401] RAX: ffffffffffffffda RBX: 00007f8c14c906d4 RCX: 0000000000455ab9 [ 173.362680] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000013 [ 173.369955] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 173.377233] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 173.384508] R13: 00000000004c1066 R14: 00000000004d16c8 R15: 0000000000000000 [ 173.392277] Dumping ftrace buffer: [ 173.395819] (ftrace buffer empty) [ 173.399507] Kernel Offset: disabled [ 173.403130] Rebooting in 86400 seconds..