[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 33.447161] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 37.056231] random: sshd: uninitialized urandom read (32 bytes read) [ 37.543425] random: sshd: uninitialized urandom read (32 bytes read) [ 39.108496] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.44' (ECDSA) to the list of known hosts. [ 44.630155] random: sshd: uninitialized urandom read (32 bytes read) 2018/07/09 18:50:52 fuzzer started [ 46.067365] random: cc1: uninitialized urandom read (8 bytes read) 2018/07/09 18:50:55 dialing manager at 10.128.0.26:42717 2018/07/09 18:50:57 syscalls: 1589 2018/07/09 18:50:57 code coverage: enabled 2018/07/09 18:50:57 comparison tracing: ioctl(KCOV_TRACE_CMP) failed: errno 524 2018/07/09 18:50:57 setuid sandbox: enabled 2018/07/09 18:50:57 namespace sandbox: enabled 2018/07/09 18:50:57 fault injection: enabled 2018/07/09 18:50:57 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/07/09 18:50:57 net packed injection: enabled [ 51.245541] random: crng init done 18:52:11 executing program 0: 18:52:11 executing program 1: 18:52:11 executing program 7: 18:52:11 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)) ioctl$TCFLSH(r0, 0x540b, 0x0) 18:52:11 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'irlan0\x00', 0x1}) ioctl$TUNSETOFFLOAD(r0, 0x400454d8, 0x0) 18:52:11 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1, {0xfffffffffffffffe}}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 18:52:11 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') umount2(&(0x7f0000000500)='./file0\x00', 0x0) 18:52:11 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'irlan0\x00', 0x1}) ioctl$TUNSETOFFLOAD(r0, 0x400454de, 0x801302) [ 123.952273] IPVS: ftp: loaded support on port[0] = 21 [ 124.045496] IPVS: ftp: loaded support on port[0] = 21 [ 124.050785] IPVS: ftp: loaded support on port[0] = 21 [ 124.090608] IPVS: ftp: loaded support on port[0] = 21 [ 124.105536] IPVS: ftp: loaded support on port[0] = 21 [ 124.116744] IPVS: ftp: loaded support on port[0] = 21 [ 124.121786] IPVS: ftp: loaded support on port[0] = 21 [ 124.132081] IPVS: ftp: loaded support on port[0] = 21 [ 126.244125] ip (4740) used greatest stack depth: 53216 bytes left [ 128.110367] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.116939] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.157630] device bridge_slave_0 entered promiscuous mode [ 128.300355] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.306832] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.344309] device bridge_slave_0 entered promiscuous mode [ 128.469157] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.475636] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.510702] device bridge_slave_0 entered promiscuous mode [ 128.547288] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.553778] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.587021] device bridge_slave_0 entered promiscuous mode [ 128.607625] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.614090] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.631710] device bridge_slave_1 entered promiscuous mode [ 128.646150] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.652579] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.663948] device bridge_slave_0 entered promiscuous mode [ 128.679981] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.686434] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.697361] device bridge_slave_1 entered promiscuous mode [ 128.718067] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.724543] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.752151] device bridge_slave_0 entered promiscuous mode [ 128.766290] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.772747] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.797438] device bridge_slave_1 entered promiscuous mode [ 128.818897] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.825348] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.836695] device bridge_slave_0 entered promiscuous mode [ 128.844628] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.851122] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.862128] device bridge_slave_0 entered promiscuous mode [ 128.875474] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.881943] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.905369] device bridge_slave_1 entered promiscuous mode [ 128.931800] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 128.942941] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 128.958452] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.964943] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.000783] device bridge_slave_1 entered promiscuous mode [ 129.030489] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.037077] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.081680] device bridge_slave_1 entered promiscuous mode [ 129.105974] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.112449] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.138268] device bridge_slave_1 entered promiscuous mode [ 129.155946] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 129.166962] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 129.178520] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.184986] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.222886] device bridge_slave_1 entered promiscuous mode [ 129.242023] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 129.250811] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 129.269231] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 129.293204] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 129.358784] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 129.378802] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 129.473749] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 129.485333] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 129.513076] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 129.534656] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 129.626574] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 129.741593] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 130.106462] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 130.117488] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 130.136909] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 130.306929] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 130.318828] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 130.355474] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 130.366598] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 130.394692] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 130.418772] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 130.460571] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 130.571372] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 130.582113] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 130.593022] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 130.645772] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 130.668950] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 130.675973] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 130.713078] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 130.720767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 130.757490] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 130.764443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 130.783085] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 130.808875] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 130.816991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 130.849645] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 130.856639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 130.888667] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 130.949474] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 130.958182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 130.990788] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 130.997821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 131.013481] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 131.020797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 131.047435] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 131.054459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 131.083785] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 131.090804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 131.119476] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 131.126428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 131.162399] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 131.170474] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 131.177855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 131.187619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 131.234261] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 131.264002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 131.418720] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 131.428465] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 131.435844] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 131.456142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 131.809122] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 131.850083] team0: Port device team_slave_0 added [ 131.890160] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 131.917596] team0: Port device team_slave_0 added [ 131.938241] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 131.959595] team0: Port device team_slave_0 added [ 131.981612] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 132.001953] team0: Port device team_slave_0 added [ 132.052197] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 132.090962] team0: Port device team_slave_0 added [ 132.111809] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 132.123967] team0: Port device team_slave_0 added [ 132.146501] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 132.169945] team0: Port device team_slave_1 added [ 132.206330] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 132.218400] team0: Port device team_slave_1 added [ 132.244625] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 132.265468] team0: Port device team_slave_1 added [ 132.280333] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 132.306205] team0: Port device team_slave_1 added [ 132.335712] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 132.349082] team0: Port device team_slave_0 added [ 132.365258] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 132.390705] team0: Port device team_slave_1 added [ 132.398459] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 132.410538] team0: Port device team_slave_0 added [ 132.427804] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 132.434872] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 132.452411] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 132.491358] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 132.498871] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 132.514388] team0: Port device team_slave_1 added [ 132.535746] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 132.566407] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 132.608188] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 132.617817] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 132.640638] team0: Port device team_slave_1 added [ 132.652328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 132.673570] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 132.696495] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 132.704399] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 132.712965] team0: Port device team_slave_1 added [ 132.723726] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 132.730895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 132.744260] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 132.775822] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 132.792892] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 132.822492] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 132.832553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 132.844908] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 132.882952] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 132.892752] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 132.900756] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 132.908272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 132.923740] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 132.956896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 132.978649] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 132.994099] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 133.011611] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 133.032608] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 133.040335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 133.057301] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 133.084649] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 133.092629] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 133.100253] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 133.111409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 133.146328] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 133.166487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 133.186711] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 133.205207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 133.220148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 133.243472] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 133.251236] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 133.262845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 133.272074] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 133.293861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 133.309633] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 133.332966] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 133.345700] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 133.360892] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 133.373661] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 133.386183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 133.405799] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 133.424153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 133.439530] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 133.448393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 133.463646] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 133.471637] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 133.479360] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 133.492537] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 133.500471] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 133.508568] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 133.552336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 133.585618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 133.605143] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 133.633082] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 133.654183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 133.682542] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 133.693141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 133.701201] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 133.709328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 133.744096] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 133.753707] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 133.761398] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 133.769222] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 133.783742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 133.793186] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 133.808251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 133.825161] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 133.844948] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 133.862620] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 133.870333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 133.879357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 133.896459] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 133.904107] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 133.911813] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 133.931284] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 133.943822] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 133.986190] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 134.010340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 134.031809] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 134.042317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 134.056855] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 134.065455] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 134.074682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 134.406799] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 134.414585] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 134.432265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 136.744615] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.751118] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.757926] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.764358] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.830372] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 136.838576] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 136.863887] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.870331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.877170] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.883601] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.892101] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 136.904393] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.910839] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.917663] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.924115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.954921] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 136.962452] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.968894] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.975677] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.982130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.020244] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 137.033483] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.039925] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.046734] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.053171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.064229] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 137.083270] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.089690] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.096465] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.102922] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.124344] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 137.134642] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.141091] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.147916] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.154347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.215220] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 137.488993] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.495457] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.502303] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.508829] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.529806] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 137.888306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 137.913201] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 137.942959] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 137.974986] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 138.002395] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 138.027976] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 138.045753] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 147.696797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.924884] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.972777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.078262] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.161495] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.190671] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.324700] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.533495] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.750725] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 148.957710] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 149.005681] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 149.127929] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 149.142614] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 149.210162] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 149.319317] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 149.547469] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 149.830965] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 149.837732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 149.849326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 149.952628] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 149.958955] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 149.969851] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 150.080688] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 150.086979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 150.099998] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 150.172767] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 150.179145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 150.198480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 150.243153] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 150.251571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 150.269123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 150.304116] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 150.312778] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 150.333875] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 150.387877] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 150.399728] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 150.427265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 150.732919] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 150.739294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 150.750971] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 150.880856] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.066825] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.215922] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.267880] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.295686] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.337976] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.395296] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.866947] 8021q: adding VLAN 0 to HW filter on device team0 18:52:45 executing program 1: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1, {0xfffffffffffffffd}}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 18:52:45 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000001340)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000880)="24000000580007031dfffd946f61830020200a0009000000ff1c85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 18:52:45 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000000b000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00005a6ff0)={&(0x7f0000000040)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in6}, {@in=@loopback=0x7f000001, 0x0, 0x6c}, @in6=@loopback={0x0, 0x1}, {}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}, 0x1}, 0x0) [ 157.571751] netlink: 8 bytes leftover after parsing attributes in process `syz-executor7'. 18:52:45 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'irlan0\x00', 0x1}) ioctl$TUNSETOFFLOAD(r0, 0x400454de, 0x801302) 18:52:45 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000000b000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00005a6ff0)={&(0x7f0000000040)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6}, {@in=@loopback=0x7f000001, 0x0, 0x6c}, @in6=@loopback={0x0, 0x1}, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1}, 0x0) 18:52:45 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') umount2(&(0x7f0000000500)='./file0\x00', 0x0) 18:52:45 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f00000000c0)={{0x400000ffffff94}}) 18:52:45 executing program 7: r0 = creat(&(0x7f0000001600)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) lseek(r0, 0x0, 0x0) 18:52:46 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x401}, 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000740)='./file0\x00', &(0x7f0000000000)='9p\x00', 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 18:52:46 executing program 3: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000040)) llistxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x0) 18:52:46 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, &(0x7f0000000380)) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000000300), 0x1b5, &(0x7f0000000600)}}], 0x2, 0x0) 18:52:48 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000000080)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000000301ffff008f00003d88c004000000dd"], 0x14}, 0x1}, 0x0) 18:52:48 executing program 3: r0 = memfd_create(&(0x7f00000000c0)='dev ', 0x3) write(r0, &(0x7f0000000040)='\x00', 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xff) fcntl$addseals(r0, 0x409, 0xc) 18:52:48 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, &(0x7f0000000380)) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000000300), 0x1b5, &(0x7f0000000600)}}], 0x2, 0x0) 18:52:48 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x24200, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x80006, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000004c0)='bridge_slave_0\x00', 0x10) bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10) connect$unix(r2, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 18:52:48 executing program 0: r0 = open(&(0x7f0000000100)='./file0\x00', 0x4440, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x41, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x41, 0x0) write$binfmt_elf32(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000000000000380020000000000000000000000000000000000080000000000000000000000000"], 0x36) sendfile(r3, r2, &(0x7f0000000180), 0xffffffff000) sendfile(r1, r0, &(0x7f0000000180), 0xffffffff000) 18:52:48 executing program 2: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='\x00', 0xffffffffffffff9c}, 0x10) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000180)=[0x0, 0x6]) unshare(0x40000000) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x0, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000040)={'filter\x00'}, &(0x7f00000000c0)=0x44) unshare(0x0) 18:52:48 executing program 5: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = getegid() r1 = syz_fuse_mount(&(0x7f0000000000)='./file0\x00', 0xc000, 0x0, r0, 0x0, 0x8002) read(r1, &(0x7f0000003380)=""/4096, 0xf) 18:52:48 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$cgroup_int(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='n'], 0x1) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x8000}) fsync(r0) fallocate(r0, 0x10, 0x0, 0x10000) [ 160.645363] IPVS: ftp: loaded support on port[0] = 21 18:52:48 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000366000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f00000001c0)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) r2 = accept$unix(r1, &(0x7f00000000c0), &(0x7f0000000140)=0x6e) write$P9_RGETLOCK(r2, &(0x7f0000000280)=ANY=[], 0x0) 18:52:48 executing program 5: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = getegid() r1 = syz_fuse_mount(&(0x7f0000000000)='./file0\x00', 0xc000, 0x0, r0, 0x0, 0x8002) read(r1, &(0x7f0000003380)=""/4096, 0xf) 18:52:48 executing program 4: 18:52:48 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='io.stat\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000003, 0x7) ioctl(r2, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[@ANYBLOB="987967f00000000000000000db"], 0xd) preadv(r1, &(0x7f0000000240), 0x9b, 0x6700) 18:52:48 executing program 6: perf_event_open(&(0x7f0000000300)={0x800000000002, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000002c0)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x0) rename(&(0x7f00000001c0)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", &(0x7f0000000040)='./file0\x00') 18:52:48 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000366000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f00000001c0)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) r2 = accept$unix(r1, &(0x7f00000000c0), &(0x7f0000000140)=0x6e) write$P9_RGETLOCK(r2, &(0x7f0000000280)=ANY=[], 0x0) 18:52:49 executing program 5: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = getegid() r1 = syz_fuse_mount(&(0x7f0000000000)='./file0\x00', 0xc000, 0x0, r0, 0x0, 0x8002) read(r1, &(0x7f0000003380)=""/4096, 0xf) 18:52:49 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f0000001980)={0x2, &(0x7f0000000580)=[{0x2000000000005}, {0x6}]}) [ 161.094191] IPVS: ftp: loaded support on port[0] = 21 18:52:49 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='io.stat\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000003, 0x7) ioctl(r2, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[@ANYBLOB="987967f00000000000000000db"], 0xd) preadv(r1, &(0x7f0000000240), 0x9b, 0x6700) [ 161.168178] audit: type=1326 audit(1531162369.166:3): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=6763 comm="syz-executor4" exe="/root/syz-executor4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x455e29 code=0x0 18:52:49 executing program 6: syz_emit_ethernet(0x32, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @remote={0xac, 0x14, 0x24, 0xbb}, @local={0xac, 0x14, 0x14, 0xaa}}, @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0xc0ffffff, 0x0, 0x0, "e57044", 0x0, "cd98e8"}}}}}}, &(0x7f0000000100)) 18:52:49 executing program 1: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001280)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(cfb(twofish-asm),ghash-clmulni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000005900), 0x4924ccf, 0x0) 18:52:49 executing program 4: r0 = socket(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000ab2000)=0x1002, 0x4) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000040)=0xf4, 0x3) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000080)={0x2, 0x4e22}, 0x10) recvmsg(r0, &(0x7f0000000740)={&(0x7f00000000c0)=@nl=@unspec, 0x80, &(0x7f0000000640), 0x0, &(0x7f00000006c0)=""/110, 0x6e}, 0x40012021) [ 161.350335] dccp_invalid_packet: P.Data Offset(4) too small [ 161.453161] dccp_invalid_packet: P.Data Offset(4) too small 18:52:49 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x24200, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x80006, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000004c0)='bridge_slave_0\x00', 0x10) bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10) connect$unix(r2, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 18:52:49 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='io.stat\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000003, 0x7) ioctl(r2, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[@ANYBLOB="987967f00000000000000000db"], 0xd) preadv(r1, &(0x7f0000000240), 0x9b, 0x6700) 18:52:49 executing program 0: r0 = open(&(0x7f0000000100)='./file0\x00', 0x4440, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x41, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x41, 0x0) write$binfmt_elf32(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000000000000380020000000000000000000000000000000000080000000000000000000000000"], 0x36) sendfile(r3, r2, &(0x7f0000000180), 0xffffffff000) sendfile(r1, r0, &(0x7f0000000180), 0xffffffff000) 18:52:49 executing program 5: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = getegid() r1 = syz_fuse_mount(&(0x7f0000000000)='./file0\x00', 0xc000, 0x0, r0, 0x0, 0x8002) read(r1, &(0x7f0000003380)=""/4096, 0xf) 18:52:49 executing program 2: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='\x00', 0xffffffffffffff9c}, 0x10) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000180)=[0x0, 0x6]) unshare(0x40000000) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x0, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000040)={'filter\x00'}, &(0x7f00000000c0)=0x44) unshare(0x0) 18:52:49 executing program 4: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='\x00', 0xffffffffffffff9c}, 0x10) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000180)=[0x0, 0x6]) unshare(0x40000000) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x0, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000040)={'filter\x00'}, &(0x7f00000000c0)=0x44) unshare(0x0) 18:52:49 executing program 6: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, &(0x7f0000000fe0)) read$eventfd(r0, &(0x7f0000000280), 0x8) [ 161.840999] IPVS: ftp: loaded support on port[0] = 21 18:52:49 executing program 1: [ 161.874134] IPVS: ftp: loaded support on port[0] = 21 18:52:50 executing program 5: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = getegid() syz_fuse_mount(&(0x7f0000000000)='./file0\x00', 0xc000, 0x0, r0, 0x0, 0x8002) 18:52:50 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='io.stat\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000003, 0x7) ioctl(r2, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[@ANYBLOB="987967f00000000000000000db"], 0xd) preadv(r1, &(0x7f0000000240), 0x9b, 0x6700) 18:52:50 executing program 6: 18:52:50 executing program 1: 18:52:50 executing program 5: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) syz_fuse_mount(&(0x7f0000000000)='./file0\x00', 0xc000, 0x0, 0x0, 0x0, 0x8002) 18:52:50 executing program 6: 18:52:50 executing program 1: 18:52:50 executing program 2: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='\x00', 0xffffffffffffff9c}, 0x10) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000180)=[0x0, 0x6]) unshare(0x40000000) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x0, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000040)={'filter\x00'}, &(0x7f00000000c0)=0x44) unshare(0x0) 18:52:50 executing program 7: 18:52:50 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='io.stat\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000003, 0x7) ioctl(r2, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") preadv(r1, &(0x7f0000000240), 0x9b, 0x6700) [ 162.695865] IPVS: ftp: loaded support on port[0] = 21 18:52:50 executing program 0: 18:52:50 executing program 4: 18:52:50 executing program 1: 18:52:50 executing program 5: syz_fuse_mount(&(0x7f0000000000)='./file0\x00', 0xc000, 0x0, 0x0, 0x0, 0x8002) 18:52:50 executing program 6: 18:52:50 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='io.stat\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000003, 0x7) ioctl(r2, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") preadv(r1, &(0x7f0000000240), 0x9b, 0x6700) 18:52:50 executing program 7: 18:52:51 executing program 1: 18:52:51 executing program 4: 18:52:51 executing program 0: 18:52:51 executing program 6: 18:52:51 executing program 5: syz_fuse_mount(&(0x7f0000000000)='./file0\x00', 0xc000, 0x0, 0x0, 0x0, 0x8002) 18:52:51 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='io.stat\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000003, 0x7) ioctl(r2, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") preadv(r1, &(0x7f0000000240), 0x9b, 0x6700) 18:52:51 executing program 2: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='\x00', 0xffffffffffffff9c}, 0x10) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000180)=[0x0, 0x6]) unshare(0x40000000) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x0, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000040)={'filter\x00'}, &(0x7f00000000c0)=0x44) unshare(0x0) 18:52:51 executing program 7: 18:52:51 executing program 1: 18:52:51 executing program 0: 18:52:51 executing program 4: 18:52:51 executing program 6: 18:52:51 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='io.stat\x00', 0x0, 0x0) socket$inet6(0xa, 0x1000000000003, 0x7) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[@ANYBLOB="987967f00000000000000000db"], 0xd) preadv(r1, &(0x7f0000000240), 0x9b, 0x6700) 18:52:51 executing program 5: syz_fuse_mount(&(0x7f0000000000)='./file0\x00', 0xc000, 0x0, 0x0, 0x0, 0x8002) 18:52:51 executing program 7: 18:52:51 executing program 1: 18:52:51 executing program 0: [ 163.575020] IPVS: ftp: loaded support on port[0] = 21 18:52:51 executing program 4: 18:52:51 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x500000000001, 0x0) r2 = dup(r1) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000f98000), 0xfffffffffffffff3, 0x2000000c, &(0x7f00004a5fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='veth0\x00', 0x271) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x27ffe) sendfile(r2, r3, &(0x7f0000000040), 0x8080400001) 18:52:51 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) ioctl$KDSIGACCEPT(r0, 0x5393, 0x824ffe6) 18:52:51 executing program 7: 18:52:51 executing program 0: [ 163.944710] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 18:52:52 executing program 2: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='\x00', 0xffffffffffffff9c}, 0x10) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000180)=[0x0, 0x6]) unshare(0x40000000) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x0, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000040)={'filter\x00'}, &(0x7f00000000c0)=0x44) 18:52:52 executing program 5: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) syz_fuse_mount(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x8002) 18:52:52 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='io.stat\x00', 0x0, 0x0) socket$inet6(0xa, 0x1000000000003, 0x7) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[@ANYBLOB="987967f00000000000000000db"], 0xd) preadv(r1, &(0x7f0000000240), 0x9b, 0x6700) 18:52:52 executing program 4: 18:52:52 executing program 7: 18:52:52 executing program 0: 18:52:52 executing program 1: 18:52:52 executing program 6: 18:52:52 executing program 0: 18:52:52 executing program 7: [ 164.343746] IPVS: ftp: loaded support on port[0] = 21 18:52:52 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x6}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) poll(&(0x7f00000003c0)=[{r0}], 0x1, 0x6) 18:52:52 executing program 5: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) syz_fuse_mount(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x8002) 18:52:52 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x7, 0x4) sendto$inet6(r0, &(0x7f0000000080)="050105000500000000000000ffb25ba32f938207d903378c", 0x18, 0x0, &(0x7f0000000300)={0xa, 0x0, 0x2, @dev={0xfe, 0x80}}, 0x1c) 18:52:52 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='io.stat\x00', 0x0, 0x0) socket$inet6(0xa, 0x1000000000003, 0x7) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[@ANYBLOB="987967f00000000000000000db"], 0xd) preadv(r1, &(0x7f0000000240), 0x9b, 0x6700) 18:52:52 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@broadcast}}, {{@in6=@remote}, 0x0, @in=@rand_addr}}, &(0x7f0000000180)=0xe8) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080), &(0x7f00000000c0)=0x10) 18:52:52 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) write$binfmt_aout(r1, &(0x7f00000002c0)={{0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, "", [[], [], [], [], []]}, 0x520) [ 164.806222] ================================================================== [ 164.813657] BUG: KMSAN: uninit-value in ipv6_skip_exthdr+0x156/0x910 [ 164.820162] CPU: 1 PID: 6956 Comm: syz-executor0 Not tainted 4.18.0-rc4+ #23 [ 164.827359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 164.836713] Call Trace: [ 164.839318] dump_stack+0x185/0x1e0 [ 164.842963] kmsan_report+0x195/0x2c0 [ 164.846781] __msan_warning_32+0x7d/0xe0 [ 164.850863] ipv6_skip_exthdr+0x156/0x910 [ 164.855041] ipv6_get_l4proto+0x1be/0x2f0 [ 164.859221] nf_conntrack_in+0x54a/0x2070 [ 164.863401] ? ipv6_invert_tuple+0xf0/0xf0 [ 164.867654] ipv6_conntrack_local+0xc3/0xf0 [ 164.871991] ? ipv6_conntrack_in+0xf0/0xf0 [ 164.876233] nf_hook_slow+0x15d/0x3e0 [ 164.880061] __ip6_local_out+0x64c/0x770 [ 164.884148] ? __ip6_local_out+0x770/0x770 [ 164.888482] ip6_local_out+0xa4/0x1d0 [ 164.892301] ip6_push_pending_frames+0x218/0x4d0 [ 164.897081] rawv6_sendmsg+0x45f0/0x5410 [ 164.901182] ? do_futex+0x3b8/0x6c80 [ 164.904907] ? __se_sys_futex+0x626/0x800 [ 164.909082] ? compat_rawv6_ioctl+0x100/0x100 [ 164.913585] inet_sendmsg+0x3fc/0x760 [ 164.917423] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 164.922859] ? inet_getname+0x4a0/0x4a0 [ 164.926845] sock_write_iter+0x408/0x4d0 [ 164.930940] ? sock_read_iter+0x4f0/0x4f0 [ 164.935108] __vfs_write+0x87e/0xb90 [ 164.938851] vfs_write+0x467/0x8c0 [ 164.942423] __x64_sys_write+0x1cf/0x400 [ 164.946525] ? ksys_write+0x380/0x380 [ 164.950343] do_syscall_64+0x15b/0x230 [ 164.954251] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 164.959445] RIP: 0033:0x455e29 [ 164.962639] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 164.981974] RSP: 002b:00007f69c17f1c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 164.983183] IPVS: ftp: loaded support on port[0] = 21 [ 164.989690] RAX: ffffffffffffffda RBX: 00007f69c17f26d4 RCX: 0000000000455e29 [ 164.989702] RDX: 0000000000000520 RSI: 00000000200002c0 RDI: 0000000000000014 [ 164.989712] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 164.989721] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 164.989732] R13: 00000000004c2e19 R14: 00000000004d4be8 R15: 0000000000000000 [ 164.989749] [ 164.989754] Uninit was stored to memory at: [ 164.989779] kmsan_internal_chain_origin+0x13c/0x240 [ 164.989795] kmsan_memcpy_origins+0x11d/0x170 [ 164.989810] __msan_memcpy+0xe7/0x150 [ 164.989828] skb_copy_bits+0x1f9/0xd80 [ 164.989845] ipv6_get_l4proto+0x105/0x2f0 [ 164.989874] nf_conntrack_in+0x54a/0x2070 [ 165.063588] ipv6_conntrack_local+0xc3/0xf0 [ 165.067925] nf_hook_slow+0x15d/0x3e0 [ 165.071738] __ip6_local_out+0x64c/0x770 [ 165.075817] ip6_local_out+0xa4/0x1d0 [ 165.079627] ip6_push_pending_frames+0x218/0x4d0 [ 165.084396] rawv6_sendmsg+0x45f0/0x5410 [ 165.088460] inet_sendmsg+0x3fc/0x760 [ 165.092268] sock_write_iter+0x408/0x4d0 [ 165.096347] __vfs_write+0x87e/0xb90 [ 165.100080] vfs_write+0x467/0x8c0 [ 165.103661] __x64_sys_write+0x1cf/0x400 [ 165.107741] do_syscall_64+0x15b/0x230 [ 165.111669] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 165.116879] [ 165.118499] Uninit was stored to memory at: [ 165.122828] kmsan_internal_chain_origin+0x13c/0x240 [ 165.127937] kmsan_memcpy_origins+0x11d/0x170 [ 165.132438] kmsan_memmove_origins+0x9/0x10 [ 165.136769] __msan_memmove+0xe7/0x150 [ 165.140671] nf_ct_frag6_gather+0x436a/0x5870 [ 165.145174] ipv6_defrag+0x501/0x5c0 [ 165.148892] nf_hook_slow+0x15d/0x3e0 [ 165.152707] __ip6_local_out+0x64c/0x770 [ 165.156778] ip6_local_out+0xa4/0x1d0 [ 165.160583] ip6_push_pending_frames+0x218/0x4d0 [ 165.165347] rawv6_sendmsg+0x45f0/0x5410 [ 165.169419] inet_sendmsg+0x3fc/0x760 [ 165.173229] sock_write_iter+0x408/0x4d0 [ 165.177296] __vfs_write+0x87e/0xb90 [ 165.181116] vfs_write+0x467/0x8c0 [ 165.184668] __x64_sys_write+0x1cf/0x400 [ 165.188734] do_syscall_64+0x15b/0x230 [ 165.192641] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 165.197829] [ 165.199451] Uninit was created at: [ 165.203029] kmsan_internal_poison_shadow+0xc8/0x1d0 [ 165.208159] kmsan_kmalloc+0xa1/0x120 [ 165.211978] kmsan_slab_alloc+0x10/0x20 [ 165.215964] __kmalloc_node_track_caller+0xb48/0x11d0 [ 165.221163] __alloc_skb+0x2cb/0x9e0 [ 165.224883] __ip6_append_data+0x3c45/0x5320 [ 165.229306] ip6_append_data+0x40e/0x6b0 [ 165.233380] rawv6_sendmsg+0x2909/0x5410 [ 165.237455] inet_sendmsg+0x3fc/0x760 [ 165.241274] sock_write_iter+0x408/0x4d0 [ 165.245346] __vfs_write+0x87e/0xb90 [ 165.249109] vfs_write+0x467/0x8c0 [ 165.252666] __x64_sys_write+0x1cf/0x400 [ 165.256854] do_syscall_64+0x15b/0x230 [ 165.260758] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 165.265962] ================================================================== [ 165.273318] Disabling lock debugging due to kernel taint [ 165.278775] Kernel panic - not syncing: panic_on_warn set ... [ 165.278775] [ 165.286163] CPU: 1 PID: 6956 Comm: syz-executor0 Tainted: G B 4.18.0-rc4+ #23 [ 165.294832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 165.304190] Call Trace: [ 165.306800] dump_stack+0x185/0x1e0 [ 165.310450] panic+0x3d0/0x9b0 [ 165.313694] kmsan_report+0x2bf/0x2c0 [ 165.317514] __msan_warning_32+0x7d/0xe0 [ 165.321589] ipv6_skip_exthdr+0x156/0x910 [ 165.325791] ipv6_get_l4proto+0x1be/0x2f0 [ 165.329958] nf_conntrack_in+0x54a/0x2070 [ 165.334134] ? ipv6_invert_tuple+0xf0/0xf0 [ 165.338390] ipv6_conntrack_local+0xc3/0xf0 [ 165.342730] ? ipv6_conntrack_in+0xf0/0xf0 [ 165.346977] nf_hook_slow+0x15d/0x3e0 [ 165.350800] __ip6_local_out+0x64c/0x770 [ 165.354881] ? __ip6_local_out+0x770/0x770 [ 165.359127] ip6_local_out+0xa4/0x1d0 [ 165.362948] ip6_push_pending_frames+0x218/0x4d0 [ 165.367731] rawv6_sendmsg+0x45f0/0x5410 [ 165.371829] ? do_futex+0x3b8/0x6c80 [ 165.375554] ? __se_sys_futex+0x626/0x800 [ 165.379721] ? compat_rawv6_ioctl+0x100/0x100 [ 165.384231] inet_sendmsg+0x3fc/0x760 [ 165.388054] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 165.393437] ? inet_getname+0x4a0/0x4a0 [ 165.397422] sock_write_iter+0x408/0x4d0 [ 165.401511] ? sock_read_iter+0x4f0/0x4f0 [ 165.405676] __vfs_write+0x87e/0xb90 [ 165.409424] vfs_write+0x467/0x8c0 [ 165.413001] __x64_sys_write+0x1cf/0x400 [ 165.417095] ? ksys_write+0x380/0x380 [ 165.420902] do_syscall_64+0x15b/0x230 [ 165.424802] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 165.429996] RIP: 0033:0x455e29 [ 165.433186] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 165.452508] RSP: 002b:00007f69c17f1c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 165.460230] RAX: ffffffffffffffda RBX: 00007f69c17f26d4 RCX: 0000000000455e29 [ 165.467506] RDX: 0000000000000520 RSI: 00000000200002c0 RDI: 0000000000000014 [ 165.474786] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 165.482070] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 165.489347] R13: 00000000004c2e19 R14: 00000000004d4be8 R15: 0000000000000000 [ 165.497208] Dumping ftrace buffer: [ 165.500737] (ftrace buffer empty) [ 165.504426] Kernel Offset: disabled [ 165.508032] Rebooting in 86400 seconds..