[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 36.795659] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. [ 38.107761] random: sshd: uninitialized urandom read (32 bytes read) Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 38.424114] random: sshd: uninitialized urandom read (32 bytes read) [ 39.496331] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.27' (ECDSA) to the list of known hosts. [ 45.491733] random: sshd: uninitialized urandom read (32 bytes read) 2018/08/28 07:58:37 fuzzer started [ 46.936989] random: cc1: uninitialized urandom read (8 bytes read) 2018/08/28 07:58:40 dialing manager at 10.128.0.26:33873 2018/08/28 07:58:42 syscalls: 1 2018/08/28 07:58:42 code coverage: enabled 2018/08/28 07:58:42 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/08/28 07:58:42 setuid sandbox: enabled 2018/08/28 07:58:42 namespace sandbox: enabled 2018/08/28 07:58:42 fault injection: enabled 2018/08/28 07:58:42 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/08/28 07:58:42 net packed injection: enabled 2018/08/28 07:58:42 net device setup: enabled [ 52.312876] random: crng init done 08:00:27 executing program 0: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$BLKROGET(r0, 0x125e, &(0x7f0000000000)) clone(0x4000000, &(0x7f0000000040)="5f391a11b19f506f44e1da6d863c546bf6f1c7e464203339b5e7e37bd82265e11d31dc4dc5920195ecf079e7e15c869a4a478ca66a383f02e6f40f8e70b7027223fcea052467b25f869ebc869f2db386e9f154362c565ce940f5b258ea4daf2be6fcbd14ca0b08a3636af50a18b38344f5be330b4a4c79ad6e8ced3027541cb00d3ab4cf77e94e48e02335e58c95da18d1b4baa118bbb50313958ce557800de4ff848345791ec45870ee55cf9c23aaef909fe80e33a6cb71", &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) recvfrom$unix(r0, &(0x7f00000001c0)=""/104, 0x68, 0x10020, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e24}, 0x6e) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f00000002c0)) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r0, 0x40045731, &(0x7f0000000300)=0x15a) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000340)={0x29, 0x6, 0x0, {0x2, 0x2}}, 0x29) r1 = add_key(&(0x7f0000000380)='syzkaller\x00', &(0x7f00000003c0)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000400)="c1af88544e56e779c4b5916d577f0464f6c9b13be1bd735e7a4e89e159d328451576c0c768a3984caf45c720ca9baaa50e7522b027cb107e98ec67f63ed08b1d07a0998b31b4c8b9433faddbfe5cabf6878d29fca32495358c3080d681640fd46afcea0cfd097aa21f2a1b8fef078b3e9dc4be2c1706a0ba5810d365e01fe9f6ded1742b6fdee594", 0x88, 0xfffffffffffffff8) keyctl$update(0x2, r1, 0x0, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000003e40)={0x0, @multicast1, @remote}, &(0x7f0000003e80)=0xc) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000003ec0)={@loopback, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xf}}, @mcast1, 0x6, 0xab, 0x408, 0x400, 0x0, 0x100000, r2}) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000003f40), &(0x7f0000003f80)=0x4) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) accept4$unix(r0, &(0x7f0000003fc0), &(0x7f0000004040)=0x6e, 0x80800) getsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000004080)=""/225, &(0x7f0000004180)=0xe1) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f00000041c0)={0x2, 0x2, 0xfffffffffffffc00, 0x6}, 0x10) r3 = syz_open_dev$adsp(&(0x7f0000004200)='/dev/adsp#\x00', 0x10001, 0x4000) symlink(&(0x7f0000004240)='./file0\x00', &(0x7f0000004280)='./file0\x00') getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000042c0)={0x0, @in6={{0xa, 0x4e21, 0x100000000, @dev={0xfe, 0x80, [], 0xc}, 0x8}}}, &(0x7f0000004380)=0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000043c0)={0x23b, 0x0, 0x202, 0xfff, 0x5, 0x61d, 0x838, 0x7, r4}, 0x20) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000004400)) rename(&(0x7f0000004440)='./file0\x00', &(0x7f0000004480)='./file0\x00') getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r3, 0x84, 0x74, &(0x7f00000044c0)=""/144, &(0x7f0000004580)=0x90) setsockopt$inet6_dccp_buf(r3, 0x21, 0xd, &(0x7f00000045c0)="ad9d2b6eab485ee99853838651fbf4ebd44fac7777e3023a5f247cbf485c2ae093a422ec0ad5e0dd80990e520e28a048f8da3b1be57c86f948f2c47df2745122708f5cfaf71e922a3850cf97347912c837854d84c1d3d7f6aa932d68240c3526ea367739a2bf6b05f7caa18563955fcd757f1d496b25dfe712a6043b1f6cbb381c696235", 0x84) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000004680)=@sack_info={r4, 0x9, 0x1}, &(0x7f00000046c0)=0xc) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000004700)=0x0) move_pages(r6, 0x2, &(0x7f0000004740)=[&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil], 0x0, &(0x7f0000004780)=[0x0, 0x0, 0x0, 0x0], 0x4) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000047c0)=@sack_info={r5, 0x0, 0x66}, &(0x7f0000004800)=0xc) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000004840)={r4, 0x3}, &(0x7f0000004880)=0xc) flock(r0, 0xa) 08:00:27 executing program 2: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000080)="8008a5f14992eb281fa5a62cfeea77f3dc13b62c97fca349a1da10be9851e023dfc5b6dd1022f1f85b51f4b70baf03426724", 0x32, 0xfffffffffffffffb) keyctl$get_keyring_id(0x0, r0, 0x800) rt_sigsuspend(&(0x7f00000000c0)={0x4}, 0x8) r1 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x2, 0x101000) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000000140)) r2 = gettid() stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x2, &(0x7f0000000240)=[0x0, 0xee01]) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280)={r2, r3, r6}, 0xc) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0x2000, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000300)=@assoc_value={0x0, 0xffffffffffffffde}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r7, 0x84, 0x77, &(0x7f0000000380)={r8, 0x400, 0x4, [0x2, 0x3fffffff8000000, 0x0, 0x5]}, &(0x7f00000003c0)=0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000400)={r9, 0x1000}, &(0x7f0000000440)=0x8) setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, &(0x7f0000000480)={0x5, 0x87c1, 0x80000000, 0x34c7}, 0x10) r10 = shmget(0x0, 0x3000, 0x1421, &(0x7f0000ffc000/0x3000)=nil) shmctl$IPC_SET(r10, 0x1, &(0x7f00000004c0)={{0x7, r3, r5, r3, r4, 0x20, 0x2}, 0x2, 0xfff, 0x1f8400000, 0x9, r2, r2, 0x8}) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r7, 0x84, 0x15, &(0x7f0000000540)={0x1}, 0x1) recvmsg$kcm(r7, &(0x7f0000001cc0)={&(0x7f0000000580)=@pptp={0x18, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000000600)=""/35, 0x23}, {&(0x7f0000000640)=""/135, 0x87}, {&(0x7f0000000700)=""/205, 0xcd}, {&(0x7f0000000800)=""/156, 0x9c}, {&(0x7f00000008c0)=""/48, 0x30}, {&(0x7f0000000900)=""/48, 0x30}, {&(0x7f0000000940)=""/91, 0x5b}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/107, 0x6b}, {&(0x7f0000001a40)=""/239, 0xef}], 0xa, &(0x7f0000001c00)=""/132, 0x84, 0x100000001}, 0x100) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000001d00)={r9, 0x1, 0xfffffffffffffffb}, 0x8) write$cgroup_pid(r1, &(0x7f0000001d40)=r2, 0x12) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000001d80)=0x1) getsockname$packet(r7, &(0x7f0000001dc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001e00)=0x14) poll(&(0x7f0000001e40)=[{r1}, {r7, 0x8438}, {r1, 0xc0}, {r1, 0x80c2}], 0x4, 0x1) r11 = memfd_create(&(0x7f0000001e80)='^vboxnet0lo#self(:\x00', 0x0) readv(r1, &(0x7f0000003100)=[{&(0x7f0000001ec0)=""/4096, 0x1000}, {&(0x7f0000002ec0)=""/183, 0xb7}, {&(0x7f0000002f80)=""/155, 0x9b}, {&(0x7f0000003040)=""/150, 0x96}], 0x4) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000003140)=0x3f, 0x4) getsockname(r1, &(0x7f0000003180)=@pppol2tpin6, &(0x7f0000003200)=0x80) listxattr(&(0x7f0000003240)='./file0/file0\x00', &(0x7f0000003280)=""/124, 0x7c) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r11, 0x84, 0x77, &(0x7f0000003300)={r8, 0x5, 0x2, [0x6, 0x17]}, &(0x7f0000003340)=0xc) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r11, 0x84, 0x6b, &(0x7f0000003380)=[@in={0x2, 0x4e20, @rand_addr=0x4}, @in={0x2, 0x4e23, @broadcast}, @in6={0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, [], 0x1d}, 0x7dd}, @in6={0xa, 0x4e21, 0x3, @empty, 0xfffffffffffff000}, @in6={0xa, 0x4e24, 0xe6f, @loopback, 0x9}, @in6={0xa, 0x4e21, 0x30, @ipv4={[], [], @local}, 0x401}], 0x90) 08:00:27 executing program 7: getegid() r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x400000, 0x0) inotify_add_watch(r2, &(0x7f00000000c0)='./file0\x00', 0x10000040) ioctl$EVIOCGSND(r2, 0x8040451a, &(0x7f0000000100)=""/128) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000180)=0x1ff, 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2, 0xe) r4 = shmget$private(0x0, 0x4000, 0x4, &(0x7f0000ffa000/0x4000)=nil) shmctl$IPC_INFO(r4, 0x3, &(0x7f0000000200)=""/148) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e24, @loopback}}, [0x7, 0x7, 0x8001, 0x3f, 0x1, 0x9, 0x8001, 0xfffffffffffffffd, 0x8001, 0x0, 0x6f29, 0xc20, 0x0, 0xff, 0x5e8]}, &(0x7f00000003c0)=0x100) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000400)={r5, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x18}}}}, 0x84) getsockopt$inet_sctp_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f00000004c0)={r5, 0x100, 0x4, 0x1, 0x7, 0x2, 0xfff, 0xffff, {r5, @in6={{0xa, 0x4e24, 0x7fff, @mcast2, 0x2}}, 0x6, 0x1, 0x7, 0x8, 0x7fffffff}}, &(0x7f0000000580)=0xb0) socket$l2tp(0x18, 0x1, 0x1) ioctl$EVIOCGPROP(r2, 0x80404509, &(0x7f00000005c0)=""/124) getsockopt$inet_sctp_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000640), &(0x7f0000000680)=0xb) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0505405, &(0x7f00000006c0)={{0x3, 0x9996137cad42ab05, 0x90, 0x3, 0xc34}, 0x3, 0x2, 0x7cff}) ptrace$cont(0x20, r1, 0x4, 0x10001) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000740)=0xf, 0x4) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000780)=0xb167, 0x4) ioctl$BLKPBSZGET(r2, 0x127b, &(0x7f00000007c0)) socket$xdp(0x2c, 0x3, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000800)={r5, 0x93d0}, 0x8) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000880)={0x6, &(0x7f0000000840)=[{0x401, 0xfffffffffffffffa, 0x9, 0x9}, {0x7, 0x1, 0x3, 0x8}, {0xfffffffffffffffa, 0xfe, 0x0, 0x100000001}, {0x1, 0x7fffffff, 0xc91, 0x10000}, {0x100000000, 0xfffffffffffffffb, 0x10001, 0x80000}, {0xb2, 0x5, 0x7f, 0x7a}]}, 0x10) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f00000008c0)=@req3={0x5, 0x2, 0xd43, 0x81, 0x6, 0x2, 0x800}, 0x1c) r7 = socket$inet(0x2, 0x6, 0xffffffff) connect$l2tp(r2, &(0x7f0000000900)=@pppol2tpv3in6={0x18, 0x1, {0x0, r6, 0x2, 0x1, 0x1, 0x1, {0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, [], 0x1b}, 0xfffffffffffffff8}}}, 0x3a) setsockopt$inet_udp_int(r7, 0x11, 0x0, &(0x7f0000000940)=0x4, 0x4) utime(&(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)={0x400, 0xfffffffffffffc91}) 08:00:27 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) recvmmsg(r0, &(0x7f0000005a00)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/204, 0xcc}, {&(0x7f0000000180)=""/61, 0x3d}], 0x2, &(0x7f0000000200)=""/192, 0xc0, 0x2f1}, 0x1f}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)=""/34, 0x22}], 0x1, &(0x7f0000000340)=""/222, 0xde, 0x3}, 0x6}, {{&(0x7f0000000440)=@xdp, 0x80, &(0x7f0000000880)=[{&(0x7f00000004c0)=""/243, 0xf3}, {&(0x7f00000005c0)=""/216, 0xd8}, {&(0x7f00000006c0)=""/181, 0xb5}, {&(0x7f0000000780)=""/97, 0x61}, {&(0x7f0000000800)=""/115, 0x73}], 0x5, &(0x7f0000000900)=""/4096, 0x1000, 0x7}, 0x100000000}, {{&(0x7f0000001900)=@ethernet={0x0, @local}, 0x80, &(0x7f0000003b00)=[{&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000002980)=""/4096, 0x1000}, {&(0x7f0000003980)=""/158, 0x9e}, {&(0x7f0000003a40)=""/167, 0xa7}], 0x4, &(0x7f0000003b40)=""/7, 0x7, 0x6}, 0x400}, {{&(0x7f0000003b80)=@ax25, 0x80, &(0x7f0000004040)=[{&(0x7f0000003c00)=""/240, 0xf0}, {&(0x7f0000003d00)=""/82, 0x52}, {&(0x7f0000003d80)=""/244, 0xf4}, {&(0x7f0000003e80)=""/115, 0x73}, {&(0x7f0000003f00)=""/49, 0x31}, {&(0x7f0000003f40)=""/23, 0x17}, {&(0x7f0000003f80)=""/62, 0x3e}, {&(0x7f0000003fc0)=""/121, 0x79}], 0x8, &(0x7f00000040c0)=""/75, 0x4b}, 0x10000000000}, {{&(0x7f0000004140)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000004280)=[{&(0x7f00000041c0)=""/66, 0x42}, {&(0x7f0000004240)=""/25, 0x19}], 0x2, &(0x7f00000042c0)=""/193, 0xc1, 0xb2}, 0x40}, {{0x0, 0x0, &(0x7f0000005880)=[{&(0x7f00000043c0)=""/166, 0xa6}, {&(0x7f0000004480)=""/45, 0x2d}, {&(0x7f00000044c0)=""/168, 0xa8}, {&(0x7f0000004580)=""/4096, 0x1000}, {&(0x7f0000005580)=""/136, 0x88}, {&(0x7f0000005640)=""/77, 0x4d}, {&(0x7f00000056c0)=""/81, 0x51}, {&(0x7f0000005740)=""/187, 0xbb}, {&(0x7f0000005800)=""/47, 0x2f}, {&(0x7f0000005840)}], 0xa, &(0x7f0000005940)=""/146, 0x92, 0x100000000}, 0x26e544f}], 0x7, 0x40002101, &(0x7f0000005bc0)={0x0, 0x1c9c380}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000005c00)='/dev/sequencer2\x00', 0x8200, 0x0) ioctl$TIOCCONS(r1, 0x541d) fcntl$getownex(r1, 0x10, &(0x7f0000005c40)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000005c80)=0x9) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x43) write$UHID_CREATE2(r1, &(0x7f0000005cc0)={0xb, 'syz0\x00', 'syz0\x00', 'syz0\x00', 0xb0, 0x7, 0x3, 0x5, 0x1, 0x7, "841bb63650163d43915b84870d503a51a5758ebeb447a28dc735878f61a619d410740f2bbf48e999d801035951240887edd0007cdf7667f21d11998afc92cbdc3e3e1219a5310d83971b14f6ee9b9b0f8069838a094a047bbd2ac7d704fbd5ea1dcda83c95921970f074d6c5be03dcc0eabad22da70e8249b5c0b99254430e0406b12a66710c7d8c050fb8e0bc4ac465e2da10c15362671e772442f5add2551a2cc597b3264f1efa641666e97955010a"}, 0x1c8) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000005ec0)=""/86) r3 = getuid() ioctl$TUNSETOWNER(r1, 0x400454cc, r3) chmod(&(0x7f0000005f40)='./file0\x00', 0x20) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000005f80)={'yam0\x00', 0x1}) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r1, 0x800455d1, &(0x7f0000005fc0)) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000006000)) openat$userio(0xffffffffffffff9c, &(0x7f0000006040)='/dev/userio\x00', 0x800, 0x0) execveat(r1, &(0x7f0000006080)='./file0\x00', &(0x7f0000006180)=[&(0x7f00000060c0)='vmnet1!\x00', &(0x7f0000006100)='lo\x00', &(0x7f0000006140)=']+wlan1em1$bdev)selfvmnet0\\\\\x00'], &(0x7f0000006280)=[&(0x7f00000061c0)='/dev/userio\x00', &(0x7f0000006200)="ad2400", &(0x7f0000006240)='{:-\x00'], 0x500) userfaultfd(0x80000) fcntl$setownex(r0, 0xf, &(0x7f00000062c0)={0x3, r2}) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000006300)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_int(r4, 0x29, 0x5, &(0x7f0000006340)=0xfd, 0x4) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000063c0)={0x0, 0x0, 0x0}, &(0x7f0000006400)=0xc) chown(&(0x7f0000006380)='./file0/file0\x00', r3, r7) r8 = creat(&(0x7f0000006440)='./file0/file0\x00', 0x20) ioctl$SNDRV_TIMER_IOCTL_GINFO(r8, 0xc0f85403, &(0x7f0000006480)={{0x0, 0x0, 0x800, 0x2, 0x5}, 0xfffffffffffffffd, 0xcb, 'id1\x00', 'timer1\x00', 0x0, 0x7, 0x7, 0x10, 0x3f}) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r8, 0x810c5701, &(0x7f0000006580)) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000066c0)={0x57, 0x4, 0x200, {0x49b, 0x3}, {0xfed, 0xe07}, @ramp={0x6, 0x67, {0x6, 0x9, 0x8, 0x5}}}) ioctl$EVIOCGPROP(r8, 0x80404509, &(0x7f0000006700)=""/99) waitid(0x0, r6, &(0x7f0000006780), 0x20000000, &(0x7f00000067c0)) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000006880)={0x0}, &(0x7f00000068c0)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000006900)=@assoc_value={r9, 0x1}, 0x8) 08:00:27 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0xa, 0x82, 0xb, 0x200000080}, 0x2c) 08:00:27 executing program 3: socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)="0a5cc80700315f857150") openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x121000, 0x0) r0 = memfd_create(&(0x7f0000000180)="9ede7a8c5ae95e48000000000000c0322901b472a97f2cfef9dd1b7f0b014f74e649de5d1038c8d7530000000000000000000000000000000000000000000000", 0x3) r1 = syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x20005) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000037000)={0x0, 0x0, 0x0, "9ede7a8c5ae95e48000000000000007f4f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa0500000074dbcfa6dc4d"}) write$sndseq(r0, &(0x7f00000001c0)=[{0x22, 0x0, 0x0, 0x0, @tick, {}, {0x0, 0xfdffffff}, @ext={0x0, &(0x7f0000038ffe)}}], 0xfffffdc5) 08:00:27 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet6(0xa, 0x0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000006c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0xffffffffffffffe7) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="73797a319df349443725e1e6b4cd20ed59696e22ec2d8c6b8505877e5f39c66cd3fdba358f38c8faf67224ba07d73b8f80ad24b4502a63fc3ca8c58c5374ca37a699fa0418d6839a21688b7b955cf3f17934873f68a2"], 0x56) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) accept(0xffffffffffffffff, 0x0, &(0x7f0000000640)) 08:00:27 executing program 6: socket$unix(0x1, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r0 = gettid() timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r0, 0x1000000000016) [ 156.182394] IPVS: ftp: loaded support on port[0] = 21 [ 156.463130] IPVS: ftp: loaded support on port[0] = 21 [ 156.473561] IPVS: ftp: loaded support on port[0] = 21 [ 156.485850] IPVS: ftp: loaded support on port[0] = 21 [ 156.517858] IPVS: ftp: loaded support on port[0] = 21 [ 156.536527] IPVS: ftp: loaded support on port[0] = 21 [ 156.547626] IPVS: ftp: loaded support on port[0] = 21 [ 156.560690] IPVS: ftp: loaded support on port[0] = 21 [ 159.006219] ip (4628) used greatest stack depth: 53488 bytes left [ 160.996197] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.002707] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.036079] device bridge_slave_0 entered promiscuous mode [ 161.242406] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.248912] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.306127] device bridge_slave_0 entered promiscuous mode [ 161.361744] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.368234] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.395371] device bridge_slave_1 entered promiscuous mode [ 161.424478] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.430997] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.464477] device bridge_slave_0 entered promiscuous mode [ 161.478722] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.485205] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.505641] device bridge_slave_0 entered promiscuous mode [ 161.573891] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.580443] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.618300] device bridge_slave_0 entered promiscuous mode [ 161.642665] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.649171] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.677629] device bridge_slave_0 entered promiscuous mode [ 161.695309] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.701802] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.723924] device bridge_slave_1 entered promiscuous mode [ 161.739514] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.746103] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.762013] device bridge_slave_1 entered promiscuous mode [ 161.780123] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.786599] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.824708] device bridge_slave_0 entered promiscuous mode [ 161.843180] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.849670] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.867079] device bridge_slave_0 entered promiscuous mode [ 161.885504] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 161.893633] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.900115] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.940204] device bridge_slave_1 entered promiscuous mode [ 161.960256] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.966733] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.999147] device bridge_slave_1 entered promiscuous mode [ 162.014681] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.021211] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.049606] device bridge_slave_1 entered promiscuous mode [ 162.064192] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 162.079763] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.086230] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.111178] device bridge_slave_1 entered promiscuous mode [ 162.135512] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 162.144014] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.150553] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.202607] device bridge_slave_1 entered promiscuous mode [ 162.227009] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 162.235790] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 162.306113] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 162.314214] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 162.342793] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 162.381352] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 162.427518] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 162.480624] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 162.530218] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 162.585224] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 162.643159] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 162.686459] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 162.730204] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 163.141242] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 163.321247] ip (4854) used greatest stack depth: 53416 bytes left [ 163.337136] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 163.349275] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 163.439182] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 163.463649] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 163.487449] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 163.599830] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 163.619500] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 163.633258] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 163.659111] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 163.725545] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 163.749311] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 163.783777] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 163.815280] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 163.822247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 163.938892] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 163.951376] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 163.963112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 163.986432] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 163.995937] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 164.008118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 164.085275] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 164.094353] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 164.102372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 164.126916] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 164.136912] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 164.143872] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 164.172167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 164.235132] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 164.242148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 164.256115] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 164.269781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 164.343140] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 164.350177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 164.363576] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 164.373005] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 164.380720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 164.422138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 164.472696] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 164.479662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 164.498372] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 164.526766] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 164.561215] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 164.568214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 164.633565] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 164.640578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 164.778462] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 164.785447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 165.211612] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 165.236238] team0: Port device team_slave_0 added [ 165.253082] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 165.270153] team0: Port device team_slave_0 added [ 165.349157] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 165.373312] team0: Port device team_slave_0 added [ 165.447713] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 165.473939] team0: Port device team_slave_0 added [ 165.494755] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 165.522565] team0: Port device team_slave_1 added [ 165.540059] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 165.566230] team0: Port device team_slave_0 added [ 165.583202] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 165.596735] team0: Port device team_slave_0 added [ 165.644242] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 165.660733] team0: Port device team_slave_0 added [ 165.677248] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 165.689914] team0: Port device team_slave_1 added [ 165.734109] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 165.751181] team0: Port device team_slave_0 added [ 165.769183] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 165.792168] team0: Port device team_slave_1 added [ 165.815247] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 165.846366] team0: Port device team_slave_1 added [ 165.880157] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 165.907332] team0: Port device team_slave_1 added [ 165.935621] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 165.946925] team0: Port device team_slave_1 added [ 165.964667] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 165.971766] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 165.985502] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 166.002120] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 166.037200] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 166.044810] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 166.058525] team0: Port device team_slave_1 added [ 166.073717] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 166.101776] team0: Port device team_slave_1 added [ 166.126680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 166.148153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 166.185179] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 166.212335] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 166.236990] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 166.248359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 166.267878] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 166.302222] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 166.331776] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 166.344869] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 166.351879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 166.361628] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 166.371127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 166.380462] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 166.404158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 166.420487] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 166.443546] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 166.452790] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 166.461198] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 166.468232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 166.480224] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 166.527804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 166.558856] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 166.579435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 166.601918] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 166.628614] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 166.639927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 166.654278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 166.669115] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 166.682691] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 166.696767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 166.713151] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 166.729430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 166.738759] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 166.757133] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 166.768847] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 166.780943] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 166.789169] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 166.812379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 166.842337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 166.860211] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 166.871852] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 166.881940] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 166.893537] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 166.900813] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 166.923636] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 166.934276] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 166.943438] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 166.951003] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 166.965241] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 166.994935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 167.014322] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 167.036164] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 167.063776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 167.093944] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 167.123291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 167.149994] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 167.165358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 167.194314] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 167.207611] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 167.215068] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 167.227947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 167.239303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 167.250985] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 167.273226] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 167.283458] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 167.291658] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 167.299669] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 167.307901] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 167.316110] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 167.323852] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 167.346271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 167.375894] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 167.415316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 167.446938] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 167.477413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 167.495078] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 167.519404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 167.540011] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 167.556464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 167.567621] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 167.575920] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 167.614518] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 167.629125] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 167.641820] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 167.665680] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 167.677282] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 167.692849] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 167.716638] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 167.724405] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 167.739551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 170.452574] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.459120] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.466019] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.472486] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.557390] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 170.563934] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 170.648555] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.655108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.661920] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.668364] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.765887] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 170.830511] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.836989] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.843855] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.850309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.867665] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 170.886186] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.892638] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.899482] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.905924] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.956009] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 170.969712] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.976169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.983068] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.989532] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.030632] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 171.040475] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.046916] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.053762] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.060204] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.071774] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 171.103509] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.109965] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.116818] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.123257] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.144172] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 171.384500] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.390995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.397854] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.404306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.417529] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 171.616175] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 171.637329] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 171.669095] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 171.699940] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 171.708905] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 171.716787] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 171.724814] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 182.707117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.880069] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.959607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.037422] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.101293] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.446201] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.512248] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.700079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.813856] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 183.913651] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 184.110131] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 184.230917] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 184.240919] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 184.674451] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 184.714074] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 184.859067] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 184.919316] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 184.925589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 184.940233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 184.989598] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 184.995978] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 185.003922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 185.337688] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 185.345862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 185.358994] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 185.412634] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 185.418970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 185.430985] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 185.467683] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 185.473954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 185.489896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 185.873018] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 185.879336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 185.892723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 185.993170] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 185.999414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 186.007819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 186.082073] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 186.088438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 186.100518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 186.141346] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.210421] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.586569] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.612135] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.679009] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.028799] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.244258] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.273619] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.885940] ================================================================== [ 193.894059] BUG: KMSAN: uninit-value in __se_sys_waitid+0x338/0xaa0 [ 193.900497] CPU: 1 PID: 6555 Comm: syz-executor1 Not tainted 4.18.0-rc8+ #34 [ 193.907698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 193.917143] Call Trace: [ 193.919761] dump_stack+0x17c/0x1c0 [ 193.923418] kmsan_report+0x188/0x2a0 [ 193.927256] kmsan_internal_check_memory+0x17e/0x1f0 08:01:05 executing program 0: gettid() r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20842, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) [ 193.932379] ? kmsan_set_origin+0x93/0x150 [ 193.936647] kmsan_check_memory+0xb/0x10 [ 193.940731] __se_sys_waitid+0x338/0xaa0 [ 193.944829] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 193.950211] ? schedule+0x1e0/0x2d0 [ 193.953867] ? prepare_exit_to_usermode+0x13f/0x410 [ 193.958942] __x64_sys_waitid+0x15d/0x1b0 [ 193.963122] ? __wake_up_parent+0xb0/0xb0 [ 193.967288] do_syscall_64+0x15b/0x220 [ 193.971210] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 193.976420] RIP: 0033:0x457089 [ 193.979622] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 193.999190] RSP: 002b:00007fa6fee89c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000f7 [ 194.006934] RAX: ffffffffffffffda RBX: 00007fa6fee8a6d4 RCX: 0000000000457089 [ 194.014223] RDX: 0000000020006780 RSI: 0000000000000000 RDI: 0000000000000000 [ 194.021511] RBP: 00000000009300a0 R08: 00000000200067c0 R09: 0000000000000000 [ 194.028798] R10: 0000000020000000 R11: 0000000000000246 R12: 00000000ffffffff 08:01:06 executing program 0: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0xa, 0x82, 0xb, 0x200000080}, 0x2c) [ 194.036083] R13: 00000000004d6e58 R14: 00000000004ca1b6 R15: 0000000000000000 [ 194.043373] [ 194.045006] Local variable description: ----__pu_val131.i@__se_sys_waitid [ 194.051941] Variable was created at: [ 194.055677] __se_sys_waitid+0x15b/0xaa0 [ 194.059742] 0x2 [ 194.061718] [ 194.063352] Bytes 0-3 of 4 are uninitialized [ 194.067766] Memory access starts at ffff8801335bfd70 [ 194.072874] ================================================================== [ 194.080240] Disabling lock debugging due to kernel taint [ 194.085696] Kernel panic - not syncing: panic_on_warn set ... [ 194.085696] [ 194.093091] CPU: 1 PID: 6555 Comm: syz-executor1 Tainted: G B 4.18.0-rc8+ #34 [ 194.101670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 194.111034] Call Trace: [ 194.113649] dump_stack+0x17c/0x1c0 [ 194.117309] panic+0x3c3/0x9a0 [ 194.120556] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 194.126031] kmsan_report+0x29e/0x2a0 [ 194.129964] kmsan_internal_check_memory+0x17e/0x1f0 08:01:06 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) [ 194.135084] ? kmsan_set_origin+0x93/0x150 [ 194.139354] kmsan_check_memory+0xb/0x10 [ 194.143450] __se_sys_waitid+0x338/0xaa0 [ 194.147539] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 194.152933] ? schedule+0x1e0/0x2d0 [ 194.156587] ? prepare_exit_to_usermode+0x13f/0x410 [ 194.161658] __x64_sys_waitid+0x15d/0x1b0 [ 194.165846] ? __wake_up_parent+0xb0/0xb0 [ 194.170022] do_syscall_64+0x15b/0x220 [ 194.173962] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 194.179176] RIP: 0033:0x457089 [ 194.182374] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 194.201941] RSP: 002b:00007fa6fee89c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000f7 [ 194.209691] RAX: ffffffffffffffda RBX: 00007fa6fee8a6d4 RCX: 0000000000457089 [ 194.216974] RDX: 0000000020006780 RSI: 0000000000000000 RDI: 0000000000000000 [ 194.224263] RBP: 00000000009300a0 R08: 00000000200067c0 R09: 0000000000000000 [ 194.231727] R10: 0000000020000000 R11: 0000000000000246 R12: 00000000ffffffff [ 194.239010] R13: 00000000004d6e58 R14: 00000000004ca1b6 R15: 0000000000000000 [ 194.246652] Dumping ftrace buffer: [ 194.250180] (ftrace buffer empty) [ 194.253876] Kernel Offset: disabled [ 194.257490] Rebooting in 86400 seconds..