[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 30.660186] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. [ 31.667294] random: sshd: uninitialized urandom read (32 bytes read) Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 32.114819] random: sshd: uninitialized urandom read (32 bytes read) [ 33.374854] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.10' (ECDSA) to the list of known hosts. [ 38.859591] random: sshd: uninitialized urandom read (32 bytes read) 2018/06/08 08:06:41 fuzzer started [ 40.451905] random: cc1: uninitialized urandom read (8 bytes read) 2018/06/08 08:06:44 dialing manager at 10.128.0.26:43659 [ 64.702009] can: request_module (can-proto-0) failed. [ 64.712840] can: request_module (can-proto-0) failed. 2018/06/08 08:07:09 kcov=true, comps=false 08:07:14 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) munlockall() r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000200)="6c6f67696e7569640039dad3c444de4a35f0fd223db6aa1e2fdd63c9f35f389e4669e0af6522c225bbb645ae9e0f46c87cd44db4919c1a34ab1d00bb4157f79b23912e9b96566ebf23618dfdd331fcacfeccdb938974f48d420c49e5b37f94bdb651b9c102659034f4192f") sendfile(r0, r1, &(0x7f00000000c0), 0x1) 08:07:14 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x3f) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000240)="6e65742f7261773600a62d807c8658e05076d7104ca3f8a578d7c61219a134cf0d1bcf4cedceb57956303ed1fe1be9650ee0123cf7868fe461ac6242601b5d7ac1d260bbfa89e5efae6d39c00f604a08fda598dd470cc89d44c205ec05afb784e1f0a01fda3feafb3ce77bc52e6ca3c262c838db2fb92f87ab310a5593269fc173a2b7fc01e2061762304f2156ffefa23d40d2b23c12bb817e89237fe91afe2271709960a41fbb87337be1d0f9e98d") sendfile(r0, r1, &(0x7f0000000300), 0x8001) 08:07:14 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x6) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffffffffbff}) 08:07:14 executing program 3: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4}, 0x2c) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r2, 0x50, &(0x7f00000000c0)}, 0x10) 08:07:14 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='bond0\x00', 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 08:07:14 executing program 5: r0 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'bcsh0\x00', 0x2}) ioctl$TUNSETTXFILTER(r0, 0x8924, &(0x7f0000000040)=ANY=[@ANYBLOB="14072b4af20549ddfaad554293081ba50100005b"]) 08:07:14 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000002740)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000680)}}) r4 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000001300)=""/4096, 0x817) 08:07:14 executing program 1: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) [ 72.450171] IPVS: ftp: loaded support on port[0] = 21 [ 72.532836] IPVS: ftp: loaded support on port[0] = 21 [ 72.534851] IPVS: ftp: loaded support on port[0] = 21 [ 72.541866] IPVS: ftp: loaded support on port[0] = 21 [ 72.565481] IPVS: ftp: loaded support on port[0] = 21 [ 72.575379] IPVS: ftp: loaded support on port[0] = 21 [ 72.591171] IPVS: ftp: loaded support on port[0] = 21 [ 72.611973] IPVS: ftp: loaded support on port[0] = 21 [ 74.565261] ip (4697) used greatest stack depth: 54440 bytes left [ 74.921729] ip (4724) used greatest stack depth: 54344 bytes left [ 75.292783] ip (4758) used greatest stack depth: 54040 bytes left [ 75.816219] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.822724] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.866983] device bridge_slave_0 entered promiscuous mode [ 75.890346] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.896797] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.911897] device bridge_slave_0 entered promiscuous mode [ 75.946347] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.952812] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.975971] device bridge_slave_0 entered promiscuous mode [ 75.987526] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.993965] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.011796] device bridge_slave_0 entered promiscuous mode [ 76.023508] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.029957] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.047608] device bridge_slave_0 entered promiscuous mode [ 76.055845] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.062291] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.075945] device bridge_slave_0 entered promiscuous mode [ 76.098951] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.105432] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.139420] device bridge_slave_1 entered promiscuous mode [ 76.158152] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.164632] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.180986] device bridge_slave_0 entered promiscuous mode [ 76.190351] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.196772] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.217134] device bridge_slave_1 entered promiscuous mode [ 76.230730] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.237166] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.255002] device bridge_slave_1 entered promiscuous mode [ 76.272782] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.279244] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.298108] device bridge_slave_0 entered promiscuous mode [ 76.307527] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.313981] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.323907] device bridge_slave_1 entered promiscuous mode [ 76.334124] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 76.341908] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.348365] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.374289] device bridge_slave_1 entered promiscuous mode [ 76.398958] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.405392] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.415900] device bridge_slave_1 entered promiscuous mode [ 76.433874] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.440325] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.455434] device bridge_slave_1 entered promiscuous mode [ 76.463552] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.470094] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.494200] device bridge_slave_1 entered promiscuous mode [ 76.510696] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 76.518900] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 76.528987] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 76.545673] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 76.554686] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 76.580743] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 76.628906] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 76.657360] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 76.698056] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 76.741704] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 76.753742] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 76.774770] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 76.782790] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 76.859872] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 76.896493] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 77.221910] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 77.313239] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 77.324642] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 77.416198] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 77.427076] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 77.440555] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 77.479880] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 77.510575] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 77.523940] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 77.554158] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 77.564483] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 77.627930] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 77.646258] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 77.659220] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 77.674739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 77.725536] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 77.736748] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 77.770532] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 77.848433] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 77.856926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 77.874776] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 77.883165] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 77.890156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 77.902805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 77.965377] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 77.972327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 77.987531] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 77.994461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 78.014650] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 78.021871] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 78.028819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 78.037808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 78.081511] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 78.093396] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 78.100414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 78.137875] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 78.164515] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 78.174133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 78.242621] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 78.251948] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 78.281012] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 78.290219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 78.317144] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 78.337581] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 78.582106] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 78.605288] team0: Port device team_slave_0 added [ 78.674483] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 78.702958] team0: Port device team_slave_0 added [ 78.743102] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 78.764481] team0: Port device team_slave_0 added [ 78.772650] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 78.785751] team0: Port device team_slave_0 added [ 78.792714] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 78.807136] team0: Port device team_slave_0 added [ 78.836479] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 78.856959] team0: Port device team_slave_0 added [ 78.884244] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 78.903166] team0: Port device team_slave_1 added [ 78.927302] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 78.949553] team0: Port device team_slave_1 added [ 78.963772] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 78.980460] team0: Port device team_slave_1 added [ 78.996505] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 79.012564] team0: Port device team_slave_1 added [ 79.020272] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 79.035924] team0: Port device team_slave_0 added [ 79.059790] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 79.066733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.076874] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.108788] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 79.122274] team0: Port device team_slave_1 added [ 79.139759] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 79.152195] team0: Port device team_slave_1 added [ 79.157644] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 79.174182] team0: Port device team_slave_0 added [ 79.191920] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 79.199619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.209467] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.234170] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 79.243258] team0: Port device team_slave_1 added [ 79.248978] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 79.256538] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 79.274877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.294140] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.319577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.343566] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.364738] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 79.374431] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 79.385150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.399799] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.420504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.434711] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.442846] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 79.465377] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 79.474902] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 79.482355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.516237] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.530130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.556657] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.564599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.572754] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.581227] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 79.588814] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 79.596366] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 79.603541] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 79.611194] team0: Port device team_slave_1 added [ 79.628899] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 79.639128] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.660973] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.683647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.708739] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.725105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.741311] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.748983] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.756953] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.769703] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 79.776664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.784642] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.805262] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 79.816587] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 79.823844] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.839245] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.852687] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.873335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.890808] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 79.898316] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.911728] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.922229] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 79.931560] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 79.940015] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 79.949411] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 79.960704] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.974999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.994416] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.029790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.064671] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.076206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.084469] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.092723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.103397] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 80.111706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.119977] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.133367] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 80.154671] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 80.165450] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.178251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.206330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.219290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.230521] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 80.238265] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.246973] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.255763] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 80.263611] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 80.271659] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 80.292723] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 80.309508] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 80.320999] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 80.337949] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.367753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.403988] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.450133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.485648] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.505616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.513518] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.521745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.529532] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.537721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.545533] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.553679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.589537] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 80.616835] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.652384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.490547] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.497106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.504247] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.510706] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.554746] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 82.561345] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.577347] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.583792] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.590552] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.596988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.605267] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 82.649080] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.655526] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.662406] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.668821] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.743530] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 82.759351] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.765781] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.772568] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.778991] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.788818] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 82.803981] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.810405] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.817225] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.823733] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.853202] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 82.861151] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.867677] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.874464] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.880914] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.894606] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 82.931678] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.938120] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.944898] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.951314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.046926] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 83.102905] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.109414] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.116201] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.122605] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.163941] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 83.615206] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.626189] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.657392] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.689019] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.707877] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.716843] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.724594] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 90.670260] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.104328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.128422] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.159899] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.261555] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.314907] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.394543] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 91.515978] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.600262] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.902611] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 91.927975] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 91.986543] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 91.994493] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 92.110652] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 92.159834] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 92.167468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 92.179658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 92.385302] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 92.464920] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 92.681917] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 92.688522] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 92.699256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 92.760962] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 92.767421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 92.778933] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 92.808591] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 92.820611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 92.836403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 92.860807] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 92.868170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 92.888548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 92.916428] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.939951] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 92.948658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 92.971913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 93.236963] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 93.243242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 93.254892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 93.405427] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 93.412340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 93.427860] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 93.472575] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.589619] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.618875] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.714679] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.747001] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.074621] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.194259] 8021q: adding VLAN 0 to HW filter on device team0 08:07:40 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") fgetxattr(r0, &(0x7f0000000380)=@known='trusted.syz\x00', &(0x7f00000003c0)=""/86, 0x56) openat$zero(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/zero\x00', 0x40000, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) write$fuse(0xffffffffffffffff, &(0x7f00000000c0)={0x30, 0x0, 0x4, @fuse_notify_retrieve_out={0x0, 0x800, 0x9, 0xf9}}, 0x30) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) sendto(r1, &(0x7f0000000480)="ad", 0x1, 0x0, &(0x7f0000000580)=@pptp={0x18, 0x2, {0x0, @broadcast=0xffffffff}}, 0x80) sendto$inet(r1, &(0x7f0000000280)="b2d4269ac76a9c78207a8f1d16f5680cdfa286c1cd789faeb2723ba81e138fa243735490a95e99990d6efb0e74be96cf55f1c735e71b2b183b5c8c356fff9a015bb815b64d757b09721fe0dc127259a453cdffa3a6891d9998d85ab59ec67bfeb49f275f7844444b976b55ec576b9419be4d7207041ccd9c4a7a756280e2bc8dd1d7d2ae223fb9d7b105163feb4f5008b7649f0ec1fa57f24c9f0312a128ebb492a7d19afacd969482d8691be0f44495e3c49c14aecf3750604b1529890f7206f950c542e722dfb8", 0xc8, 0x0, &(0x7f0000000180)={0x2}, 0x10) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYRES16], 0x100c6) 08:07:41 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffefffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x2, 0x10}, 0xc) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) 08:07:41 executing program 2: socket$kcm(0x29, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x3, 0x402) write$binfmt_elf32(r0, &(0x7f0000000940)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1103, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20}, [{}]}, 0x147) read(r0, &(0x7f00000009c0)=""/4096, 0x1000) 08:07:41 executing program 1: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) 08:07:41 executing program 5: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) dup2(r1, r0) 08:07:41 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffefffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x2, 0x10}, 0xc) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) 08:07:41 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x4, 0x105080) r2 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/udp\x00') fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r3) ioctl$LOOP_SET_FD(r1, 0x4c00, r3) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) 08:07:41 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0xae1, &(0x7f0000000080)=0x0) io_destroy(r0) [ 99.032630] generic_make_request: Trying to write to read-only block-device loop4 (partno 0) 08:07:42 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) modify_ldt$write2(0x11, &(0x7f0000000480)={0x400}, 0x10) r0 = socket(0xa, 0x1, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="00a1b3466803ca201eff2ab1366300eb010000000a"]) ioctl(r0, 0x8916, &(0x7f0000000000)) ioctl(r0, 0x8936, &(0x7f0000000000)) 08:07:42 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000480), 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='ip6gre0\x00', 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2}, 0x6) 08:07:42 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00070f000000000000000007000000", @ANYBLOB="0000ff000a000200c7aabeec0000aaaa0000"], 0x2}, 0x1}, 0x0) 08:07:42 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x14, 0x42, 0x105}, 0x14}, 0x1}, 0x0) 08:07:42 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x3) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") r1 = socket(0x10, 0x80002, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c00)={'veth1_to_bond\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c000104000000000000000002000000", @ANYBLOB="800000000c0001000180c20000000000"], 0x2}, 0x1}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 08:07:42 executing program 3: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4}, 0x2c) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r2, 0x50, &(0x7f00000000c0)}, 0x10) 08:07:42 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") syz_emit_ethernet(0x142, &(0x7f00000002c0)={@link_local={0x1, 0x80, 0xc2}, @link_local={0x1, 0x80, 0xc2}, [{[], {0x8100}}], {@ipv6={0x86dd, {0x0, 0x6, '>![', 0x108, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @empty, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558, 0x0, "c53f9bc10b5218fbe6b21126ec5dfd4b51895eeabb8f1881b91980e74888ed41c49dc1d8bafc100ed78e3cc3b555dd235dba88b38388d4deb8c6d3795dcf58efc348b06d6b0f767c7520b7f6b0ca7326a75ba6ca9e1dadc8a4fecca66ad80f29bc3bb41a06f18c6f4f0b195587ebc281814d6457127854ef65964f36cbef44461b195c5e4c40fe1a57ae459fadf5b343cca1eeb3cdd0243195920ebeb7ebe99d397ef4d81cd3bca637aa32fbb0205fa83ce13b0277825ee8de7e55926a410d09a500e29e"}}}}}}}, &(0x7f0000001640)={0x0, 0x0, [0xeb6]}) 08:07:42 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x4, 0x105080) r2 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/udp\x00') fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r3) ioctl$LOOP_SET_FD(r1, 0x4c00, r3) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) 08:07:42 executing program 6: getpgrp(0x0) ioctl$DRM_IOCTL_MODESET_CTL(0xffffffffffffffff, 0x40086408, &(0x7f00000001c0)) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000f85000)={0x2, 0x1, 0x0, 0x2, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}}}]}, 0x60}, 0x1}, 0x0) [ 99.438697] generic_make_request: Trying to write to read-only block-device loop4 (partno 0) 08:07:42 executing program 7: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000006c0)=""/246) preadv(r0, &(0x7f0000000480)=[{&(0x7f00000005c0)=""/247, 0xf7}], 0x1, 0x0) 08:07:42 executing program 7: migrate_pages(0x0, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x9) 08:07:42 executing program 0: r0 = socket(0x10, 0x80002, 0x0) io_setup(0x6, &(0x7f0000000080)=0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) io_submit(r1, 0x0, &(0x7f0000001300)) ioctl(r2, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f660070") io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7, 0x0, r0, &(0x7f0000000100)="3c30f8212f64", 0x6}]) 08:07:42 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x4, 0x105080) r2 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/udp\x00') fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r3) ioctl$LOOP_SET_FD(r1, 0x4c00, r3) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) 08:07:42 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") syz_emit_ethernet(0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)) 08:07:42 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) memfd_create(&(0x7f0000000200)='securityproccgroup\x00', 0x1) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f0899d7be90734ac61bcc1c2fd6a66cc8685c1a13b494eb0b996ae48d2e65fad88d02f69de4b0e81ec57a56a279f2f10cefac692a0b7f8a23fb125244b6927cb", "60f54e052c70c9961f98c004c9ac6c2fb2c5f73352fa3100db514c52d408d10d"}) 08:07:42 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0xae1, &(0x7f0000000000)=0x0) io_destroy(r0) 08:07:42 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000480), 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='ip6gre0\x00', 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2}, 0x6) 08:07:42 executing program 6: getpgrp(0x0) ioctl$DRM_IOCTL_MODESET_CTL(0xffffffffffffffff, 0x40086408, &(0x7f00000001c0)) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000f85000)={0x2, 0x1, 0x0, 0x2, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}}}]}, 0x60}, 0x1}, 0x0) [ 99.829423] generic_make_request: Trying to write to read-only block-device loop4 (partno 0) 08:07:42 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f760070") r1 = socket$inet6(0xa, 0x1000000000002, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) flock(r3, 0x1) flock(r2, 0x2) dup2(r1, r2) flock(r3, 0xffffffffffeffffd) 08:07:42 executing program 7: perf_event_open(&(0x7f0000000280)={0x2, 0x1e0, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu\x00', 0x200002, 0x0) fstat(r0, &(0x7f0000000080)) 08:07:42 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = dup(r1) r3 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r2, &(0x7f0000000040)=[{&(0x7f0000000080)=""/4096, 0x6a8}], 0x1) close(r2) ioctl$int_in(r4, 0x5452, &(0x7f0000fc3000)=0x1) fcntl$setsig(r4, 0xa, 0x12) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv6_newaddr={0x18, 0x14, 0x835, 0x0, 0x0, {0xa}}, 0x18}, 0x1}, 0x0) poll(&(0x7f0000b2c000)=[{r5}], 0x1, 0xfffffffffffffff8) r7 = dup2(r4, r5) fcntl$setown(r7, 0x8, r3) tkill(r3, 0x16) 08:07:42 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r0, &(0x7f0000000080)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x13a) dup3(r1, r0, 0x0) 08:07:42 executing program 0: r0 = socket(0x10, 0x80002, 0x0) io_setup(0x6, &(0x7f0000000080)=0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) io_submit(r1, 0x0, &(0x7f0000001300)) ioctl(r2, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f660070") io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7, 0x0, r0, &(0x7f0000000100)="3c30f8212f64", 0x6}]) 08:07:43 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, &(0x7f0000001640)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000080)="81e02186ffde9ac19d7ce0b194fcbb1557f839ecd3d838824e18fd2672dd7038e6", &(0x7f0000000600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000001600)}) 08:07:43 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x4, 0x105080) r2 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/udp\x00') fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r3) ioctl$LOOP_SET_FD(r1, 0x4c00, r3) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) 08:07:43 executing program 0: r0 = socket(0x10, 0x80002, 0x0) io_setup(0x6, &(0x7f0000000080)=0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) io_submit(r1, 0x0, &(0x7f0000001300)) ioctl(r2, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f660070") io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7, 0x0, r0, &(0x7f0000000100)="3c30f8212f64", 0x6}]) 08:07:43 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5437, &(0x7f0000fd0ffc)) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)) 08:07:43 executing program 2: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000000004, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f00000000c0), 0x4) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6d300acda2ccda5e78522b8380cf0d0ba057cc76fd07a938d5ea9dfd000000000000000000000000d029d5ca35426f67e24f"], 0x3e) [ 100.189705] generic_make_request: Trying to write to read-only block-device loop4 (partno 0) 08:07:44 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000480), 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='ip6gre0\x00', 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2}, 0x6) 08:07:44 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = dup(r1) r3 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r2, &(0x7f0000000040)=[{&(0x7f0000000080)=""/4096, 0x6a8}], 0x1) close(r2) ioctl$int_in(r4, 0x5452, &(0x7f0000fc3000)=0x1) fcntl$setsig(r4, 0xa, 0x12) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv6_newaddr={0x18, 0x14, 0x835, 0x0, 0x0, {0xa}}, 0x18}, 0x1}, 0x0) poll(&(0x7f0000b2c000)=[{r5}], 0x1, 0xfffffffffffffff8) r7 = dup2(r4, r5) fcntl$setown(r7, 0x8, r3) tkill(r3, 0x16) 08:07:44 executing program 6: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000040), 0x4e9) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000000)={0x2, 0x0, @rand_addr}, 0x10) 08:07:44 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x80247008, &(0x7f00000000c0)) 08:07:44 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x4, 0x105080) r2 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/udp\x00') fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r3) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) 08:07:44 executing program 0: r0 = socket(0x10, 0x80002, 0x0) io_setup(0x6, &(0x7f0000000080)=0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) io_submit(r1, 0x0, &(0x7f0000001300)) ioctl(r2, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f660070") io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7, 0x0, r0, &(0x7f0000000100)="3c30f8212f64", 0x6}]) 08:07:44 executing program 7: syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/pid\x00') 08:07:44 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f760070") r1 = socket$inet6(0xa, 0x1000000000002, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) flock(r3, 0x1) flock(r2, 0x2) dup2(r1, r2) flock(r3, 0xffffffffffeffffd) [ 101.425304] BUG: unable to handle kernel NULL pointer dereference at 00000000000000f0 [ 101.434768] PGD 800000013aa0f067 P4D 800000013aa0f067 PUD 1c70f2067 PMD 0 [ 101.441887] Oops: 0000 [#1] SMP PTI [ 101.445571] Dumping ftrace buffer: [ 101.449221] (ftrace buffer empty) [ 101.452952] Modules linked in: [ 101.456199] CPU: 0 PID: 6763 Comm: syz-executor1 Not tainted 4.17.0+ #3 [ 101.462977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 101.472400] RIP: 0010:lo_ioctl+0x10e0/0x4450 [ 101.476826] RSP: 0018:ffff8801394ef870 EFLAGS: 00010246 [ 101.482231] RAX: ffff8801d37b3ef0 RBX: 00000000000000f0 RCX: ffff880000000000 [ 101.489534] RDX: ffff8801d37b5ef0 RSI: aaaaaaaaaaaab000 RDI: ffffea0000000000 [ 101.496839] RBP: ffff8801394efb00 R08: 0000000001080020 R09: 0000000000000002 [ 101.504141] R10: 0000000000000000 R11: ffffffff861c5f10 R12: 0000000000000000 [ 101.511441] R13: 000000000802001d R14: ffff8801d37b1ef0 R15: 0000000000000000 08:07:44 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f760070") r1 = socket$inet6(0xa, 0x1000000000002, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) flock(r3, 0x1) flock(r2, 0x2) dup2(r1, r2) flock(r3, 0xffffffffffeffffd) [ 101.518750] FS: 00007fdf58889700(0000) GS:ffff88021fc00000(0000) knlGS:0000000000000000 [ 101.527103] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 101.533007] CR2: 00000000000000f0 CR3: 00000001395f6000 CR4: 00000000001406f0 [ 101.540325] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 101.547639] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 101.554928] Call Trace: [ 101.557583] ? futex_wait_queue_me+0x681/0x710 [ 101.562251] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 101.567668] ? futex_wait+0x937/0xc20 [ 101.571548] blkdev_ioctl+0x2290/0x4f80 08:07:44 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) r1 = syz_open_pts(r0, 0x0) read(r1, &(0x7f00000000c0)=""/1, 0x1) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000100)) [ 101.575583] ? kmsan_set_origin_inline+0x6b/0x120 [ 101.580478] ? __msan_poison_alloca+0x15c/0x1d0 [ 101.585205] ? __se_sys_epoll_ctl+0x4313/0x5710 [ 101.589942] ? fput+0x44/0x2e0 [ 101.593194] ? kmsan_set_origin_inline+0x6b/0x120 [ 101.598105] block_ioctl+0x16f/0x1d0 [ 101.601897] ? block_llseek+0x190/0x190 [ 101.605917] do_vfs_ioctl+0xcbd/0x24b0 [ 101.609862] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 101.615262] ? __fget_light+0x6a3/0x700 [ 101.619306] ? security_file_ioctl+0x5e/0x200 [ 101.623867] __x64_sys_ioctl+0x280/0x320 [ 101.627974] ? ksys_ioctl+0x260/0x260 [ 101.631807] do_syscall_64+0x15b/0x230 [ 101.635744] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 101.640958] RIP: 0033:0x4559f9 [ 101.644182] RSP: 002b:00007fdf58888c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 101.651926] RAX: ffffffffffffffda RBX: 00007fdf588896d4 RCX: 00000000004559f9 [ 101.659220] RDX: 0000000000000014 RSI: 0000000000004c00 RDI: 0000000000000015 [ 101.666515] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 08:07:44 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000480), 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='ip6gre0\x00', 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2}, 0x6) [ 101.673810] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 101.681103] R13: 00000000004bdedc R14: 00000000004cbcf8 R15: 0000000000000000 [ 101.688403] Code: 00 4d 85 e4 0f 85 15 01 00 00 49 8b 1e b8 f0 00 00 00 48 01 c3 4c 89 f7 e8 be 15 a4 fb 48 83 38 00 44 8b 6d 90 0f 85 01 01 00 00 <4c> 8b 3b 48 89 df e8 a5 15 a4 fb 48 83 38 00 0f 85 f8 00 00 00 [ 101.708087] RIP: lo_ioctl+0x10e0/0x4450 RSP: ffff8801394ef870 [ 101.713993] CR2: 00000000000000f0 [ 101.717761] ---[ end trace 46005952ca5dfbac ]--- [ 101.722633] Kernel panic - not syncing: Fatal exception [ 101.729193] Dumping ftrace buffer: [ 101.732735] (ftrace buffer empty) [ 101.736443] Kernel Offset: disabled [ 101.740067] Rebooting in 86400 seconds..