[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 28.923298] kauditd_printk_skb: 8 callbacks suppressed [ 28.923311] audit: type=1800 audit(1544356060.591:29): pid=5902 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 28.949358] audit: type=1800 audit(1544356060.591:30): pid=5902 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 31.661738] sshd (6042) used greatest stack depth: 15744 bytes left Warning: Permanently added '10.128.10.1' (ECDSA) to the list of known hosts. 2018/12/09 11:47:50 fuzzer started 2018/12/09 11:47:52 dialing manager at 10.128.0.26:38851 2018/12/09 11:47:55 syscalls: 1 2018/12/09 11:47:55 code coverage: enabled 2018/12/09 11:47:55 comparison tracing: enabled 2018/12/09 11:47:55 setuid sandbox: enabled 2018/12/09 11:47:55 namespace sandbox: enabled 2018/12/09 11:47:55 Android sandbox: /sys/fs/selinux/policy does not exist 2018/12/09 11:47:55 fault injection: enabled 2018/12/09 11:47:55 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/12/09 11:47:55 net packet injection: enabled 2018/12/09 11:47:55 net device setup: enabled 11:48:56 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000200008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0xc09, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @ipip={{0xc, 0x1, 'ipip\x00'}, {0x4}}}]}, 0x34}}, 0x0) [ 104.848627] IPVS: ftp: loaded support on port[0] = 21 11:48:56 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") socket$inet6(0xa, 0x80003, 0x800000000000006) r1 = socket$netlink(0x10, 0x3, 0x4) read(r1, &(0x7f0000000300)=""/136, 0x88) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x48, 0x15, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x600}, [@generic="667e279639a91d7b7f0000017daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f42360500000015739d53d5"]}, 0x48}}, 0x0) [ 105.144272] IPVS: ftp: loaded support on port[0] = 21 11:48:56 executing program 2: r0 = socket(0xa, 0x80005, 0x0) ioctl(r0, 0x20000000008912, &(0x7f0000000240)="0a5c2d0240316285717070") bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x6, 0x7ffd, 0xff}, 0x2c) [ 105.478612] IPVS: ftp: loaded support on port[0] = 21 11:48:57 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) connect$llc(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = getuid() setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000000c0)={{{@in6=@loopback, @in=@local, 0x4e24, 0x2dac, 0x4e24, 0x0, 0xa, 0x80, 0x80, 0x0, r1, r2}, {0x87, 0x0, 0x3, 0x2, 0x0, 0x6, 0x0, 0x6}, {0x7, 0x0, 0x20, 0x9bd7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in=@multicast2, 0x4d5}, 0xa, @in=@multicast1, 0x3503, 0x2, 0x3, 0x2, 0x0, 0x20, 0x8c36}}, 0xe8) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x300000a, 0x2012, r0, 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000f44000/0x4000)=nil, 0x4007, 0x1000007, 0x2013, r0, 0x0) [ 105.931283] IPVS: ftp: loaded support on port[0] = 21 [ 106.282109] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.289015] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.305768] device bridge_slave_0 entered promiscuous mode 11:48:58 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'bond_slave_0\x00', &(0x7f0000002fc0)=@ethtool_per_queue_op={0x33}}) [ 106.428882] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.465674] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.488801] device bridge_slave_1 entered promiscuous mode [ 106.627320] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 106.648808] IPVS: ftp: loaded support on port[0] = 21 [ 106.749972] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 106.977825] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.987318] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.010373] device bridge_slave_0 entered promiscuous mode 11:48:58 executing program 5: r0 = socket$kcm(0xa, 0x3, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f0000000100), 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000140)=@nl=@unspec={0x0, 0x3f000000, 0x3000000, 0x80fe}, 0x80, &(0x7f0000000340)=[{&(0x7f0000001680)="235db863768606681d012f629c75adfa4208d51e67688d024aface6a6ac7d846ed2fa163e15ffb509de80565b82752e0fffeffc0d4f83047fda99590d719ccb4f47bcd84c8f41a85a8446446bb4178740a8bd45ff8a106da98c21372", 0x5c}], 0x1}, 0x0) [ 107.148901] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.179668] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.187044] device bridge_slave_1 entered promiscuous mode [ 107.238816] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 107.339114] IPVS: ftp: loaded support on port[0] = 21 [ 107.379388] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 107.395265] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 107.544330] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 107.701598] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.719354] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.726743] device bridge_slave_0 entered promiscuous mode [ 107.852233] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.864838] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.876108] device bridge_slave_1 entered promiscuous mode [ 107.893751] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 107.995073] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 108.041045] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 108.087605] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 108.110795] team0: Port device team_slave_0 added [ 108.118044] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 108.205889] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 108.224095] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.232771] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.246050] device bridge_slave_0 entered promiscuous mode [ 108.266126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 108.291594] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 108.299035] team0: Port device team_slave_1 added [ 108.350557] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 108.358008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 108.379596] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.392935] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.409765] device bridge_slave_1 entered promiscuous mode [ 108.422989] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 108.438907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 108.456385] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 108.515697] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 108.580156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 108.635775] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 108.652664] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 108.680972] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 108.700147] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 108.708179] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 108.755589] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 108.775117] team0: Port device team_slave_0 added [ 108.794699] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 108.881563] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 108.888751] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 108.897328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 108.931744] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 108.947150] team0: Port device team_slave_1 added [ 108.974917] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 108.999843] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 109.016841] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 109.031703] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.038077] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.055484] device bridge_slave_0 entered promiscuous mode [ 109.105346] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 109.128445] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 109.159946] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 109.176867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 109.199985] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 109.212025] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 109.223309] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.230038] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.237567] device bridge_slave_1 entered promiscuous mode [ 109.272726] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 109.288200] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 109.303698] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 109.322500] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 109.348103] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 109.367686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 109.393411] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 109.426750] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 109.444018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 109.497692] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 109.513370] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 109.539728] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 109.563320] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 109.579940] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 109.590243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 109.607138] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 109.630108] team0: Port device team_slave_0 added [ 109.749697] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 109.769183] team0: Port device team_slave_1 added [ 109.786720] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.807553] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.820860] device bridge_slave_0 entered promiscuous mode [ 109.870762] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 109.910915] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 109.964750] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.973772] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.981490] device bridge_slave_1 entered promiscuous mode [ 109.991345] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 110.013974] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 110.040468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 110.060430] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 110.073027] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 110.081111] team0: Port device team_slave_0 added [ 110.104342] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 110.124601] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 110.150254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 110.173005] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 110.186272] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 110.211547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 110.227004] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 110.242790] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 110.262225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 110.303455] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 110.320022] team0: Port device team_slave_1 added [ 110.327267] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 110.367369] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 110.380128] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 110.499617] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 110.508915] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 110.534190] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 110.619591] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 110.626497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 110.640072] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 110.671787] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 110.779692] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 110.790388] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.796852] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.803931] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.810358] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.821480] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 110.852307] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 110.880791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 110.889736] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 110.907461] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 110.925714] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 110.948793] team0: Port device team_slave_0 added [ 110.963824] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 110.985489] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 111.002103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 111.065497] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 111.082918] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 111.100178] team0: Port device team_slave_1 added [ 111.105566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 111.188325] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 111.199405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 111.259610] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 111.266512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 111.276232] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 111.293877] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.300307] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.306954] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.313356] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.328458] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 111.419588] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 111.427062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 111.440011] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 111.609178] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 111.633353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 111.661082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 111.670041] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 111.677388] team0: Port device team_slave_0 added [ 111.750481] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 111.759938] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 111.767922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 111.825585] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 111.842038] team0: Port device team_slave_1 added [ 111.926300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 111.945675] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.952085] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.958757] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.965188] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.973658] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 111.984521] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 112.007954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 112.040465] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 112.127206] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 112.155749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 112.175737] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 112.312940] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 112.346887] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 112.357429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 112.470300] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 112.477482] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 112.486132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 112.513784] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.520237] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.526926] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.533343] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.547437] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 112.960845] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 112.972208] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 113.256017] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.262484] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.269155] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.275587] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.290222] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 113.853792] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.860245] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.866904] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.873332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.888776] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 113.979721] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 113.987035] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 115.974733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.439893] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 116.717719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.894737] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 116.907146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 116.914922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 117.279966] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 117.310439] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.369946] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.775798] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 117.796406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 117.806514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 117.833161] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 117.981781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.244096] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 118.263053] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.269926] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 118.285624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 118.425695] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.458116] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 118.690914] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.885542] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 118.941489] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 118.947793] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 118.961829] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 119.100763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.368762] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 119.400010] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 119.407145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 119.456682] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.582527] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 119.788823] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.004063] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 120.017778] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 120.025422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 11:49:12 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000200008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0xc09, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @ipip={{0xc, 0x1, 'ipip\x00'}, {0x4}}}]}, 0x34}}, 0x0) [ 120.502904] 8021q: adding VLAN 0 to HW filter on device team0 11:49:12 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000200008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0xc09, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @ipip={{0xc, 0x1, 'ipip\x00'}, {0x4}}}]}, 0x34}}, 0x0) 11:49:12 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000200008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0xc09, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @ipip={{0xc, 0x1, 'ipip\x00'}, {0x4}}}]}, 0x34}}, 0x0) 11:49:13 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={&(0x7f0000000040), 0xc, &(0x7f0000000640)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ip6gre={{0xc, 0x1, 'ip6gre\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_OKEY={0x8, 0x3, 0x835}]]}}}]}, 0x3c}}, 0x0) 11:49:13 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") socket$inet6(0xa, 0x80003, 0x800000000000006) r1 = socket$netlink(0x10, 0x3, 0x4) read(r1, &(0x7f0000000300)=""/136, 0x88) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x48, 0x15, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x600}, [@generic="667e279639a91d7b7f0000017daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f42360500000015739d53d5"]}, 0x48}}, 0x0) [ 121.633005] netlink: 'syz-executor0': attribute type 3 has an invalid length. 11:49:13 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={&(0x7f0000000040), 0xc, &(0x7f0000000640)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ip6gre={{0xc, 0x1, 'ip6gre\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_OKEY={0x8, 0x3, 0x835}]]}}}]}, 0x3c}}, 0x0) 11:49:13 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") socket$inet6(0xa, 0x80003, 0x800000000000006) r1 = socket$netlink(0x10, 0x3, 0x4) read(r1, &(0x7f0000000300)=""/136, 0x88) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x48, 0x15, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x600}, [@generic="667e279639a91d7b7f0000017daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f42360500000015739d53d5"]}, 0x48}}, 0x0) [ 121.787943] netlink: 'syz-executor0': attribute type 3 has an invalid length. 11:49:13 executing program 2: r0 = socket(0xa, 0x80005, 0x0) ioctl(r0, 0x20000000008912, &(0x7f0000000240)="0a5c2d0240316285717070") bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x6, 0x7ffd, 0xff}, 0x2c) 11:49:13 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={&(0x7f0000000040), 0xc, &(0x7f0000000640)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ip6gre={{0xc, 0x1, 'ip6gre\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_OKEY={0x8, 0x3, 0x835}]]}}}]}, 0x3c}}, 0x0) [ 122.012110] netlink: 'syz-executor0': attribute type 3 has an invalid length. 11:49:14 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={&(0x7f0000000040), 0xc, &(0x7f0000000640)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ip6gre={{0xc, 0x1, 'ip6gre\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_OKEY={0x8, 0x3, 0x835}]]}}}]}, 0x3c}}, 0x0) 11:49:14 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") socket$inet6(0xa, 0x80003, 0x800000000000006) r1 = socket$netlink(0x10, 0x3, 0x4) read(r1, &(0x7f0000000300)=""/136, 0x88) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x48, 0x15, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x600}, [@generic="667e279639a91d7b7f0000017daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f42360500000015739d53d5"]}, 0x48}}, 0x0) 11:49:14 executing program 2: r0 = socket(0xa, 0x80005, 0x0) ioctl(r0, 0x20000000008912, &(0x7f0000000240)="0a5c2d0240316285717070") bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x6, 0x7ffd, 0xff}, 0x2c) 11:49:14 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'bond_slave_0\x00', &(0x7f0000002fc0)=@ethtool_per_queue_op={0x33}}) 11:49:14 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) connect$llc(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = getuid() setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000000c0)={{{@in6=@loopback, @in=@local, 0x4e24, 0x2dac, 0x4e24, 0x0, 0xa, 0x80, 0x80, 0x0, r1, r2}, {0x87, 0x0, 0x3, 0x2, 0x0, 0x6, 0x0, 0x6}, {0x7, 0x0, 0x20, 0x9bd7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in=@multicast2, 0x4d5}, 0xa, @in=@multicast1, 0x3503, 0x2, 0x3, 0x2, 0x0, 0x20, 0x8c36}}, 0xe8) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x300000a, 0x2012, r0, 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000f44000/0x4000)=nil, 0x4007, 0x1000007, 0x2013, r0, 0x0) 11:49:14 executing program 5: r0 = socket$kcm(0xa, 0x3, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f0000000100), 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000140)=@nl=@unspec={0x0, 0x3f000000, 0x3000000, 0x80fe}, 0x80, &(0x7f0000000340)=[{&(0x7f0000001680)="235db863768606681d012f629c75adfa4208d51e67688d024aface6a6ac7d846ed2fa163e15ffb509de80565b82752e0fffeffc0d4f83047fda99590d719ccb4f47bcd84c8f41a85a8446446bb4178740a8bd45ff8a106da98c21372", 0x5c}], 0x1}, 0x0) [ 122.975534] netlink: 'syz-executor0': attribute type 3 has an invalid length. 11:49:14 executing program 5: r0 = socket$kcm(0xa, 0x3, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f0000000100), 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000140)=@nl=@unspec={0x0, 0x3f000000, 0x3000000, 0x80fe}, 0x80, &(0x7f0000000340)=[{&(0x7f0000001680)="235db863768606681d012f629c75adfa4208d51e67688d024aface6a6ac7d846ed2fa163e15ffb509de80565b82752e0fffeffc0d4f83047fda99590d719ccb4f47bcd84c8f41a85a8446446bb4178740a8bd45ff8a106da98c21372", 0x5c}], 0x1}, 0x0) 11:49:14 executing program 2: r0 = socket(0xa, 0x80005, 0x0) ioctl(r0, 0x20000000008912, &(0x7f0000000240)="0a5c2d0240316285717070") bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x6, 0x7ffd, 0xff}, 0x2c) 11:49:14 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) connect$llc(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = getuid() setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000000c0)={{{@in6=@loopback, @in=@local, 0x4e24, 0x2dac, 0x4e24, 0x0, 0xa, 0x80, 0x80, 0x0, r1, r2}, {0x87, 0x0, 0x3, 0x2, 0x0, 0x6, 0x0, 0x6}, {0x7, 0x0, 0x20, 0x9bd7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in=@multicast2, 0x4d5}, 0xa, @in=@multicast1, 0x3503, 0x2, 0x3, 0x2, 0x0, 0x20, 0x8c36}}, 0xe8) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x300000a, 0x2012, r0, 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000f44000/0x4000)=nil, 0x4007, 0x1000007, 0x2013, r0, 0x0) 11:49:14 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) setsockopt$sock_int(r1, 0x1, 0xb, &(0x7f0000000000)=0x8, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 11:49:14 executing program 5: r0 = socket$kcm(0xa, 0x3, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f0000000100), 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000140)=@nl=@unspec={0x0, 0x3f000000, 0x3000000, 0x80fe}, 0x80, &(0x7f0000000340)=[{&(0x7f0000001680)="235db863768606681d012f629c75adfa4208d51e67688d024aface6a6ac7d846ed2fa163e15ffb509de80565b82752e0fffeffc0d4f83047fda99590d719ccb4f47bcd84c8f41a85a8446446bb4178740a8bd45ff8a106da98c21372", 0x5c}], 0x1}, 0x0) 11:49:15 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'bond_slave_0\x00', &(0x7f0000002fc0)=@ethtool_per_queue_op={0x33}}) 11:49:15 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto(r0, &(0x7f0000000340)="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", 0x479, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000880)="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", 0x150, 0x0, 0x0, 0x0) 11:49:15 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f0000000100)=0xfffffffffffffffd, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) sendto$inet(r0, &(0x7f00006fd000)="c3401c344654f3c7d9b41ba48c8e319aa4eedc3d6bd8ebd65c856a27d61154adc2b2a9763ae0001c0d32e11f38e9dd18c58f6bd779650fc30f93653bdaecf323c9f6502ceab47e58114347b289546465a5eb278de12b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d08d4154004997e317b79", 0x82, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 11:49:15 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto(r0, &(0x7f0000000340)="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", 0x479, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000880)="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", 0x150, 0x0, 0x0, 0x0) 11:49:15 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f0000000100)=0xfffffffffffffffd, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) sendto$inet(r0, &(0x7f00006fd000)="c3401c344654f3c7d9b41ba48c8e319aa4eedc3d6bd8ebd65c856a27d61154adc2b2a9763ae0001c0d32e11f38e9dd18c58f6bd779650fc30f93653bdaecf323c9f6502ceab47e58114347b289546465a5eb278de12b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d08d4154004997e317b79", 0x82, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 11:49:15 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) connect$llc(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = getuid() setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000000c0)={{{@in6=@loopback, @in=@local, 0x4e24, 0x2dac, 0x4e24, 0x0, 0xa, 0x80, 0x80, 0x0, r1, r2}, {0x87, 0x0, 0x3, 0x2, 0x0, 0x6, 0x0, 0x6}, {0x7, 0x0, 0x20, 0x9bd7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in=@multicast2, 0x4d5}, 0xa, @in=@multicast1, 0x3503, 0x2, 0x3, 0x2, 0x0, 0x20, 0x8c36}}, 0xe8) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x300000a, 0x2012, r0, 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000f44000/0x4000)=nil, 0x4007, 0x1000007, 0x2013, r0, 0x0) 11:49:15 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) setsockopt$sock_int(r1, 0x1, 0xb, &(0x7f0000000000)=0x8, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 11:49:15 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f0000000100)=0xfffffffffffffffd, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) sendto$inet(r0, &(0x7f00006fd000)="c3401c344654f3c7d9b41ba48c8e319aa4eedc3d6bd8ebd65c856a27d61154adc2b2a9763ae0001c0d32e11f38e9dd18c58f6bd779650fc30f93653bdaecf323c9f6502ceab47e58114347b289546465a5eb278de12b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d08d4154004997e317b79", 0x82, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 11:49:15 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto(r0, &(0x7f0000000340)="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", 0x479, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000880)="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", 0x150, 0x0, 0x0, 0x0) 11:49:15 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) connect$llc(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = getuid() setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000000c0)={{{@in6=@loopback, @in=@local, 0x4e24, 0x2dac, 0x4e24, 0x0, 0xa, 0x80, 0x80, 0x0, r1, r2}, {0x87, 0x0, 0x3, 0x2, 0x0, 0x6, 0x0, 0x6}, {0x7, 0x0, 0x20, 0x9bd7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in=@multicast2, 0x4d5}, 0xa, @in=@multicast1, 0x3503, 0x2, 0x3, 0x2, 0x0, 0x20, 0x8c36}}, 0xe8) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x300000a, 0x2012, r0, 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000f44000/0x4000)=nil, 0x4007, 0x1000007, 0x2013, r0, 0x0) 11:49:15 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'bond_slave_0\x00', &(0x7f0000002fc0)=@ethtool_per_queue_op={0x33}}) 11:49:15 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f0000000100)=0xfffffffffffffffd, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) sendto$inet(r0, &(0x7f00006fd000)="c3401c344654f3c7d9b41ba48c8e319aa4eedc3d6bd8ebd65c856a27d61154adc2b2a9763ae0001c0d32e11f38e9dd18c58f6bd779650fc30f93653bdaecf323c9f6502ceab47e58114347b289546465a5eb278de12b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d08d4154004997e317b79", 0x82, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 11:49:15 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto(r0, &(0x7f0000000340)="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", 0x479, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000880)="c5a6d2d4e04475cabfb02baa601242bc843ae72fcaaf337225312ed0cbaeb0a811c04effb3415eb6a5433ca3ceacfc7f88d1462dc3eb2fa33f7b225d0a6bf4a770b1a848267f4b97c46f647b944189d8227da264fd3e1636990ba0df88383e59df722092bf4c2805714b09731b5122a71c5d152c827665beec6026f6712c68921fb4843cb6a7c401eb58dda43ac02f5ca6aa16710f81d924880ec6804332b08299078a9779377c55b3d6636e572892359418ca7cbc779fb6d11face495328832587461bf69c78596b9b0a35a209baf089c3f1220cfb361421095af96f524addd3d57b04217d8142751e0eb6c73f63d1800f218017d4dd2190948e2957e841e3fcb46cb6c56dd244460f0de9c3616bcc07182b1011069fe648a59ea270a2995f5a471398aafd4c7b3c985fc6fd839c285c6dcbe83aa6fc4e1fbb9e835055bf519b3aace303d18b3097792d0ec0c036e1d", 0x150, 0x0, 0x0, 0x0) 11:49:15 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) setsockopt$sock_int(r1, 0x1, 0xb, &(0x7f0000000000)=0x8, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 11:49:16 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f0000000100)=0xfffffffffffffffd, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) sendto$inet(r0, &(0x7f00006fd000)="c3401c344654f3c7d9b41ba48c8e319aa4eedc3d6bd8ebd65c856a27d61154adc2b2a9763ae0001c0d32e11f38e9dd18c58f6bd779650fc30f93653bdaecf323c9f6502ceab47e58114347b289546465a5eb278de12b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d08d4154004997e317b79", 0x82, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 11:49:16 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) setsockopt$sock_int(r1, 0x1, 0xb, &(0x7f0000000000)=0x8, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 11:49:16 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f0000000100)=0xfffffffffffffffd, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) sendto$inet(r0, &(0x7f00006fd000)="c3401c344654f3c7d9b41ba48c8e319aa4eedc3d6bd8ebd65c856a27d61154adc2b2a9763ae0001c0d32e11f38e9dd18c58f6bd779650fc30f93653bdaecf323c9f6502ceab47e58114347b289546465a5eb278de12b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d08d4154004997e317b79", 0x82, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 11:49:16 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) connect$llc(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = getuid() setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000000c0)={{{@in6=@loopback, @in=@local, 0x4e24, 0x2dac, 0x4e24, 0x0, 0xa, 0x80, 0x80, 0x0, r1, r2}, {0x87, 0x0, 0x3, 0x2, 0x0, 0x6, 0x0, 0x6}, {0x7, 0x0, 0x20, 0x9bd7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in=@multicast2, 0x4d5}, 0xa, @in=@multicast1, 0x3503, 0x2, 0x3, 0x2, 0x0, 0x20, 0x8c36}}, 0xe8) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x300000a, 0x2012, r0, 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000f44000/0x4000)=nil, 0x4007, 0x1000007, 0x2013, r0, 0x0) 11:49:16 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="7f"], 0x1) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x10000) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x3ff800) sendto$inet6(r0, &(0x7f0000000040)="88fa2ca8bed52e9d329214d8dcc9b9d4e24b1da2f07993cae9ff96ec", 0x1c, 0x10, 0x0, 0x0) 11:49:16 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f0000000100)=0xfffffffffffffffd, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) sendto$inet(r0, &(0x7f00006fd000)="c3401c344654f3c7d9b41ba48c8e319aa4eedc3d6bd8ebd65c856a27d61154adc2b2a9763ae0001c0d32e11f38e9dd18c58f6bd779650fc30f93653bdaecf323c9f6502ceab47e58114347b289546465a5eb278de12b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d08d4154004997e317b79", 0x82, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 11:49:16 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) setsockopt$sock_int(r1, 0x1, 0xb, &(0x7f0000000000)=0x8, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) [ 125.230216] syz-executor4 (7767) used greatest stack depth: 14560 bytes left 11:49:16 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) connect$llc(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = getuid() setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000000c0)={{{@in6=@loopback, @in=@local, 0x4e24, 0x2dac, 0x4e24, 0x0, 0xa, 0x80, 0x80, 0x0, r1, r2}, {0x87, 0x0, 0x3, 0x2, 0x0, 0x6, 0x0, 0x6}, {0x7, 0x0, 0x20, 0x9bd7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in=@multicast2, 0x4d5}, 0xa, @in=@multicast1, 0x3503, 0x2, 0x3, 0x2, 0x0, 0x20, 0x8c36}}, 0xe8) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x300000a, 0x2012, r0, 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000f44000/0x4000)=nil, 0x4007, 0x1000007, 0x2013, r0, 0x0) 11:49:16 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) setsockopt$sock_int(r1, 0x1, 0xb, &(0x7f0000000000)=0x8, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 11:49:16 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000003c0)={0x0, @in={{0x2, 0x0, @rand_addr=0xc46}}}, &(0x7f0000000080)=0x84) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000480)=r1, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="aa"], 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfffffcbe) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) close(r0) 11:49:16 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="7f"], 0x1) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x10000) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x3ff800) sendto$inet6(r0, &(0x7f0000000040)="88fa2ca8bed52e9d329214d8dcc9b9d4e24b1da2f07993cae9ff96ec", 0x1c, 0x10, 0x0, 0x0) 11:49:17 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) setsockopt$sock_int(r1, 0x1, 0xb, &(0x7f0000000000)=0x8, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) [ 125.475067] audit: type=1804 audit(1544356157.141:31): pid=7783 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor5" name="/root/syzkaller-testdir242564682/syzkaller.jHwMSE/11/memory.events" dev="sda1" ino=16539 res=1 [ 125.534141] audit: type=1804 audit(1544356157.201:32): pid=7775 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor5" name="/root/syzkaller-testdir242564682/syzkaller.jHwMSE/11/memory.events" dev="sda1" ino=16539 res=1 11:49:17 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="7f"], 0x1) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x10000) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x3ff800) sendto$inet6(r0, &(0x7f0000000040)="88fa2ca8bed52e9d329214d8dcc9b9d4e24b1da2f07993cae9ff96ec", 0x1c, 0x10, 0x0, 0x0) [ 125.706197] audit: type=1804 audit(1544356157.371:33): pid=7783 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor5" name="/root/syzkaller-testdir242564682/syzkaller.jHwMSE/11/memory.events" dev="sda1" ino=16539 res=1 11:49:17 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000003c0)={0x0, @in={{0x2, 0x0, @rand_addr=0xc46}}}, &(0x7f0000000080)=0x84) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000480)=r1, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="aa"], 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfffffcbe) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) close(r0) 11:49:17 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000003c0)={0x0, @in={{0x2, 0x0, @rand_addr=0xc46}}}, &(0x7f0000000080)=0x84) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000480)=r1, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="aa"], 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfffffcbe) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) close(r0) 11:49:17 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="7f"], 0x1) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x10000) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x3ff800) sendto$inet6(r0, &(0x7f0000000040)="88fa2ca8bed52e9d329214d8dcc9b9d4e24b1da2f07993cae9ff96ec", 0x1c, 0x10, 0x0, 0x0) 11:49:17 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="7f"], 0x1) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x10000) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x3ff800) sendto$inet6(r0, &(0x7f0000000040)="88fa2ca8bed52e9d329214d8dcc9b9d4e24b1da2f07993cae9ff96ec", 0x1c, 0x10, 0x0, 0x0) [ 126.076923] audit: type=1804 audit(1544356157.741:34): pid=7805 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor5" name="/root/syzkaller-testdir242564682/syzkaller.jHwMSE/12/memory.events" dev="sda1" ino=16563 res=1 [ 126.177297] audit: type=1804 audit(1544356157.841:35): pid=7806 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor2" name="/root/syzkaller-testdir742927695/syzkaller.zSXqfJ/11/memory.events" dev="sda1" ino=16566 res=1 [ 126.310471] [ 126.312265] list_add corruption. next->prev should be prev (ffff8881daf2d798), but was ffff8881d9b4a508. (next=ffff8881d9b4a4f0). [ 126.312556] ------------[ cut here ]------------ [ 126.312563] kernel BUG at lib/list_debug.c:25! [ 126.312582] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 126.312596] CPU: 1 PID: -1962176152 Comm: ksoftirqd/1 Not tainted 4.20.0-rc4+ #335 [ 126.312604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 126.312627] RIP: 0010:__list_add_valid.cold.2+0xf/0x2a [ 126.312652] Code: d8 60 88 e8 a1 fd d1 fd 0f 0b 48 89 de 48 c7 c7 e0 d7 60 88 e8 90 fd d1 fd 0f 0b 48 89 d9 48 c7 c7 a0 d8 60 88 e8 7f fd d1 fd <0f> 0b 48 89 f1 48 c7 c7 20 d9 60 88 48 89 de e8 6b fd d1 fd 0f 0b [ 126.312659] RSP: 0018:ffff8881daf07330 EFLAGS: 00010082 [ 126.312669] RAX: 0000000000000075 RBX: ffff8881d9b4a4f0 RCX: 0000000000000000 [ 126.312676] RDX: 0000000000000000 RSI: ffffffff8165eae5 RDI: 0000000000000005 [ 126.312684] RBP: ffff8881daf07348 R08: ffff8881d9b4a440 R09: ffffed103b5e5020 [ 126.312693] R10: ffffed103b5e5020 R11: ffff8881daf28107 R12: ffff8881d7e4a6b0 [ 126.312701] R13: 1ffff1103b5e0e6e R14: ffff8881daf073d0 R15: ffff8881d7e4a6b0 [ 126.312712] FS: 0000000000000000(0000) GS:ffff8881daf00000(0000) knlGS:0000000000000000 [ 126.312720] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 126.312729] CR2: 0000001b30538000 CR3: 00000001d78fa000 CR4: 00000000001406e0 [ 126.312740] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 126.312748] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 126.312752] Call Trace: [ 126.312757] [ 126.312772] ? __cpu_to_node+0x7d/0xa0 [ 126.312787] account_entity_enqueue+0x3a3/0x660 [ 126.312801] ? active_load_balance_cpu_stop+0x1230/0x1230 [ 126.312818] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 126.312833] ? check_preemption_disabled+0x48/0x280 [ 126.312847] enqueue_entity+0x2af/0x20a0 [ 126.312859] ? select_task_rq_fair+0x65f/0x32f0 [ 126.312874] ? save_stack+0x40/0xd0 [ 126.312887] ? put_prev_task_fair+0x80/0x80 [ 126.312900] ? __cpu_to_node+0x7d/0xa0 [ 126.312912] ? account_entity_enqueue+0x3a3/0x660 [ 126.312929] ? switched_from_fair+0x10/0x10 [ 126.312941] ? enqueue_entity+0x34b/0x20a0 [ 126.312955] ? __lock_acquire+0x62f/0x4c20 [ 126.312971] ? invoke_rcu_core+0x26/0x30 [ 126.312984] ? put_prev_task_fair+0x80/0x80 [ 126.312997] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 126.313011] ? check_preemption_disabled+0x48/0x280 [ 126.313028] ? mark_held_locks+0x130/0x130 [ 126.313044] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 126.313061] enqueue_task_fair+0x24d/0xa50 [ 126.313074] ? activate_task+0x1b4/0x470 [ 126.313087] ? enqueue_entity+0x20a0/0x20a0 [ 126.313101] ? kvm_clock_read+0x18/0x30 [ 126.313128] ? kvm_sched_clock_read+0x9/0x20 [ 126.313140] ? sched_clock+0x31/0x50 [ 126.313153] ? sched_clock_cpu+0x1b/0x1b0 [ 126.313176] ? record_times+0x1e/0x590 [ 126.313190] ? pvclock_read_flags+0x160/0x160 [ 126.313203] ? psi_task_change+0x370/0x5f0 [ 126.313216] ? update_dl_rq_load_avg+0x840/0x840 [ 126.313229] activate_task+0x208/0x470 [ 126.313242] ttwu_do_activate+0xd5/0x1f0 [ 126.313254] try_to_wake_up+0xa51/0x1490 [ 126.313268] ? migrate_swap_stop+0x8a0/0x8a0 [ 126.313279] ? lock_downgrade+0x900/0x900 [ 126.313289] ? do_raw_spin_unlock+0xa7/0x330 [ 126.313303] ? trace_hardirqs_off+0xb8/0x310 [ 126.313313] ? kasan_check_read+0x11/0x20 [ 126.313323] ? do_raw_spin_unlock+0xa7/0x330 [ 126.313334] ? trace_hardirqs_on+0x310/0x310 [ 126.313346] ? __hrtimer_run_queues+0x3b0/0x10d0 [ 126.313360] ? trace_hardirqs_off+0xb8/0x310 [ 126.313370] ? kasan_check_read+0x11/0x20 [ 126.313380] ? do_raw_spin_unlock+0xa7/0x330 [ 126.313396] ? timerqueue_del+0x86/0x150 [ 126.313407] wake_up_process+0x10/0x20 [ 126.313417] hrtimer_wakeup+0x48/0x60 [ 126.313428] __hrtimer_run_queues+0x41c/0x10d0 [ 126.313440] ? clock_was_set_work+0x30/0x30 [ 126.313452] ? hrtimer_start_range_ns+0xe00/0xe00 [ 126.313465] ? pvclock_read_flags+0x160/0x160 [ 126.313476] ? trace_hardirqs_on+0x310/0x310 [ 126.313505] ? __local_bh_enable+0xf6/0x140 [ 126.313518] ? kvm_clock_read+0x18/0x30 [ 126.313530] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 126.313542] ? ktime_get_update_offsets_now+0x3b3/0x540 [ 126.313555] ? do_timer+0x50/0x50 [ 126.313565] ? rwlock_bug.part.2+0x90/0x90 [ 126.313576] ? trace_hardirqs_on+0x310/0x310 [ 126.313586] ? rcu_softirq_qs+0x20/0x20 [ 126.313601] hrtimer_interrupt+0x313/0x780 [ 126.313620] smp_apic_timer_interrupt+0x1a1/0x760 [ 126.313643] ? smp_reschedule_interrupt+0x109/0x650 [ 126.313657] ? smp_call_function_single_interrupt+0x650/0x650 [ 126.313668] ? interrupt_entry+0xb5/0xc0 [ 126.313679] ? trace_hardirqs_off_caller+0xbb/0x310 [ 126.313691] ? trace_hardirqs_off_caller+0xbb/0x310 [ 126.313705] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 126.313717] ? trace_hardirqs_on_caller+0x310/0x310 [ 126.313728] ? trace_hardirqs_on_caller+0x310/0x310 [ 126.313739] ? task_prio+0x50/0x50 [ 126.313752] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 126.313765] ? check_preemption_disabled+0x48/0x280 [ 126.313780] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 126.313794] apic_timer_interrupt+0xf/0x20 [ 126.313799] [ 126.313802] Modules linked in: [ 126.313819] ---[ end trace b2dd7728bea7a677 ]--- [ 126.313833] RIP: 0010:__list_add_valid.cold.2+0xf/0x2a [ 126.313845] Code: d8 60 88 e8 a1 fd d1 fd 0f 0b 48 89 de 48 c7 c7 e0 d7 60 88 e8 90 fd d1 fd 0f 0b 48 89 d9 48 c7 c7 a0 d8 60 88 e8 7f fd d1 fd <0f> 0b 48 89 f1 48 c7 c7 20 d9 60 88 48 89 de e8 6b fd d1 fd 0f 0b [ 126.313851] RSP: 0018:ffff8881daf07330 EFLAGS: 00010082 [ 126.313860] RAX: 0000000000000075 RBX: ffff8881d9b4a4f0 RCX: 0000000000000000 [ 126.313867] RDX: 0000000000000000 RSI: ffffffff8165eae5 RDI: 0000000000000005 [ 126.313874] RBP: ffff8881daf07348 R08: ffff8881d9b4a440 R09: ffffed103b5e5020 [ 126.313882] R10: ffffed103b5e5020 R11: ffff8881daf28107 R12: ffff8881d7e4a6b0 [ 126.313889] R13: 1ffff1103b5e0e6e R14: ffff8881daf073d0 R15: ffff8881d7e4a6b0 [ 126.313898] FS: 0000000000000000(0000) GS:ffff8881daf00000(0000) knlGS:0000000000000000 [ 126.313906] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 126.313913] CR2: 0000001b30538000 CR3: 00000001d78fa000 CR4: 00000000001406e0 [ 126.313923] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 126.313930] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 126.313937] Kernel panic - not syncing: Fatal exception in interrupt [ 126.314965] Kernel Offset: disabled [ 126.923098] Rebooting in 86400 seconds..