[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 33.357463] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 37.342584] random: sshd: uninitialized urandom read (32 bytes read) [ 37.696158] random: sshd: uninitialized urandom read (32 bytes read) [ 39.295778] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.57' (ECDSA) to the list of known hosts. [ 44.904485] random: sshd: uninitialized urandom read (32 bytes read) 2018/07/17 09:12:36 fuzzer started [ 46.299518] random: cc1: uninitialized urandom read (8 bytes read) 2018/07/17 09:12:38 dialing manager at 10.128.0.26:38229 2018/07/17 09:12:42 syscalls: 1605 2018/07/17 09:12:42 code coverage: enabled 2018/07/17 09:12:42 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/07/17 09:12:42 setuid sandbox: enabled 2018/07/17 09:12:42 namespace sandbox: enabled 2018/07/17 09:12:42 fault injection: enabled 2018/07/17 09:12:42 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/07/17 09:12:42 net packed injection: enabled 2018/07/17 09:12:42 net device setup: enabled [ 52.947569] random: crng init done 09:14:11 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000004c0)) r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000380)="000000000000000100000001000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30544d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6201004dbea37aabd3eb9888c4c629419f50937a6848e0d281dbee568c4de9a036c26f1922f64971d4df97fbab04e8ce4938b31dcf259b4bc60901e18661fab8fb2988cd2bc260c2f572353e6bb0a002fc164d4f189b068062d10100000000000000400c0c4ca57b546b9430172ea5362ee0141b3df06ad235e815d89eead3d9473409c09c2e27a952337a24f20188c013123cc0316a33d8b443453773e4a09edd8031124dee13ce9c75288f2ec833c7e66af5b19a00000000000000", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000400}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r2, 0x201, 0x70bd27, 0x25dfdbfe, {0x5}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x100000001}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8011}, 0x80) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) fallocate(r0, 0x10, 0x0, 0x400) 09:14:11 executing program 2: socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) 09:14:11 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") msgrcv(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000029a0a23574f1ca5e96"], 0x1, 0x0, 0xa4a3ad41a879dde0) 09:14:11 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000000)=0x7, 0x4) sendto$inet6(r0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x1, @loopback={0x0, 0x1}}, 0x1c) 09:14:11 executing program 7: openat$ptmx(0xffffffffffffff9c, &(0x7f0000a61000)='/dev/ptmx\x00', 0x0, 0x0) 09:14:11 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f00000e5000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) 09:14:11 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f000090bff7), 0x0) 09:14:11 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") getsockopt$inet_tcp_int(r0, 0x6, 0x15, &(0x7f00000015c0), &(0x7f00000000c0)=0x2) [ 141.545626] IPVS: ftp: loaded support on port[0] = 21 [ 141.581476] IPVS: ftp: loaded support on port[0] = 21 [ 141.617451] IPVS: ftp: loaded support on port[0] = 21 [ 141.621216] IPVS: ftp: loaded support on port[0] = 21 [ 141.662254] IPVS: ftp: loaded support on port[0] = 21 [ 141.670402] IPVS: ftp: loaded support on port[0] = 21 [ 141.711169] IPVS: ftp: loaded support on port[0] = 21 [ 141.731798] IPVS: ftp: loaded support on port[0] = 21 [ 144.519690] ip (4787) used greatest stack depth: 53744 bytes left [ 145.170741] ip (4833) used greatest stack depth: 53504 bytes left [ 145.751165] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.757623] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.796284] device bridge_slave_0 entered promiscuous mode [ 145.851071] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.857573] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.894987] device bridge_slave_0 entered promiscuous mode [ 145.936879] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.943376] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.975247] device bridge_slave_0 entered promiscuous mode [ 145.999774] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.006215] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.035367] device bridge_slave_0 entered promiscuous mode [ 146.043962] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.050456] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.061922] device bridge_slave_0 entered promiscuous mode [ 146.084867] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.091326] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.110687] device bridge_slave_0 entered promiscuous mode [ 146.133981] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.140442] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.160291] device bridge_slave_0 entered promiscuous mode [ 146.178246] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.184692] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.198682] device bridge_slave_1 entered promiscuous mode [ 146.205892] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.212356] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.241923] device bridge_slave_0 entered promiscuous mode [ 146.250616] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.257107] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.282777] device bridge_slave_1 entered promiscuous mode [ 146.300313] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.306735] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.325241] device bridge_slave_1 entered promiscuous mode [ 146.350512] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.356942] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.377857] device bridge_slave_1 entered promiscuous mode [ 146.389393] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 146.397360] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.403828] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.423984] device bridge_slave_1 entered promiscuous mode [ 146.444693] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.451137] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.485345] device bridge_slave_1 entered promiscuous mode [ 146.514943] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.521429] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.549284] device bridge_slave_1 entered promiscuous mode [ 146.565216] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 146.572651] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.579124] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.612101] device bridge_slave_1 entered promiscuous mode [ 146.628974] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 146.636766] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 146.650513] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 146.661501] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 146.689434] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 146.785194] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 146.817366] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 146.906214] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 146.913898] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 146.931526] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 146.938961] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 146.954827] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 147.023708] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 147.171164] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 147.376516] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 147.490558] ip (4962) used greatest stack depth: 53232 bytes left [ 147.547781] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 147.654177] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 147.713183] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 147.723400] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 147.780530] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 147.823290] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 147.840495] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 147.861380] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 147.933503] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 147.966589] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 147.989674] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 147.996653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 148.017537] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 148.041541] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 148.083308] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 148.090251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 148.125579] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 148.168550] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 148.208425] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 148.215429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 148.260708] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 148.272889] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 148.280379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 148.299855] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 148.306786] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 148.333210] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 148.342128] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 148.384903] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 148.391900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 148.410708] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 148.417722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 148.456627] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 148.463907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 148.515559] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 148.522548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 148.578892] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 148.585889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 148.607399] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 148.615574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 148.638766] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 148.645810] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 148.715551] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 148.724781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 148.749371] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 148.756359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 148.866206] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 148.873226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 149.167866] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 149.193583] team0: Port device team_slave_0 added [ 149.254387] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 149.273660] team0: Port device team_slave_0 added [ 149.322620] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 149.348785] team0: Port device team_slave_0 added [ 149.365094] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 149.386914] team0: Port device team_slave_0 added [ 149.437497] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 149.458979] team0: Port device team_slave_0 added [ 149.487355] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 149.512918] team0: Port device team_slave_1 added [ 149.533459] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 149.556088] team0: Port device team_slave_0 added [ 149.564272] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 149.584080] team0: Port device team_slave_1 added [ 149.616790] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 149.642165] team0: Port device team_slave_1 added [ 149.653602] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 149.672501] team0: Port device team_slave_0 added [ 149.693828] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 149.715437] team0: Port device team_slave_1 added [ 149.738577] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 149.767299] team0: Port device team_slave_1 added [ 149.810831] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 149.818954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 149.831955] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 149.868188] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 149.875832] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 149.886200] team0: Port device team_slave_0 added [ 149.901780] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 149.933625] team0: Port device team_slave_1 added [ 149.957261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 149.968957] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 150.002732] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 150.010674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 150.034962] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 150.055831] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 150.065279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 150.081710] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 150.094398] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 150.103306] team0: Port device team_slave_1 added [ 150.113086] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 150.120187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 150.142132] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 150.170442] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 150.181707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 150.202977] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 150.230858] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 150.239667] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 150.257417] team0: Port device team_slave_1 added [ 150.269465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 150.283673] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 150.300192] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 150.315795] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 150.326899] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 150.334726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 150.353154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 150.376174] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 150.402325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 150.423847] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 150.437787] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 150.468113] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 150.481536] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 150.489417] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 150.498915] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 150.505957] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 150.524522] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 150.543276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 150.563281] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 150.590265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 150.612648] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 150.640892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 150.653176] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 150.671077] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 150.681183] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 150.700811] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 150.715641] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 150.729239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 150.749743] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 150.765187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 150.784317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 150.800085] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 150.813341] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 150.822850] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 150.832158] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 150.840671] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 150.848545] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 150.857397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 150.875308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 150.896203] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 150.910953] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 150.926211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 150.940585] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 150.957712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 150.968020] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 150.990880] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 151.000929] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 151.010860] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 151.026691] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 151.035385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 151.058382] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 151.075949] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 151.103508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 151.133272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 151.152351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 151.167817] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 151.184193] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 151.195119] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 151.204274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 151.213622] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 151.223147] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 151.234228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 151.265137] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 151.275377] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 151.287810] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 151.303562] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 151.319409] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 151.374378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 151.413851] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 151.466445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 151.484835] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 151.501962] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 151.517806] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 151.528332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 151.562667] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 151.574650] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 151.590672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 153.990429] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.996915] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.003715] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.010141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.038761] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 154.045365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 154.069668] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.076108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.082851] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.089299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.097735] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 154.121368] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.127793] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.134602] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.141015] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.196748] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 154.207473] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.213905] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.220725] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.227143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.291511] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 154.318206] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.324666] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.331472] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.337907] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.406166] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 154.420401] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.426837] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.433637] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.440084] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.476380] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 154.483444] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.489854] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.496618] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.503027] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.513987] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 154.790604] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.797128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.803922] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.810374] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.878749] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 155.103203] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 155.121974] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 155.134655] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 155.142968] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 155.150924] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 155.158799] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 155.166622] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 161.014570] ip (5782) used greatest stack depth: 53216 bytes left [ 164.597821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.782914] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.938479] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.025500] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.064982] ip (6046) used greatest stack depth: 53072 bytes left [ 165.105446] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.244803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.411295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.622420] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 165.756471] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 165.821963] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.937456] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 166.037985] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 166.118108] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 166.264457] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 166.406119] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 166.621135] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 166.627400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 166.637943] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 166.734249] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 166.740558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 166.756960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 166.831412] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 166.949593] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 166.963436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 166.976570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 167.085370] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 167.091691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 167.104164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 167.146090] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 167.152362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 167.165876] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 167.269613] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 167.275907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 167.288229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 167.569113] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 167.575444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 167.588370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 167.681693] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.902018] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.940793] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 167.949949] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 167.997610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 168.063525] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.165444] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.216786] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.322018] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.627444] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.979263] 8021q: adding VLAN 0 to HW filter on device team0 09:14:44 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="025cc83d6d345f8f762070") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000498000)={&(0x7f0000d55000)={0x10}, 0xc, &(0x7f00008b7ff0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000000010100ba000000ffffffff02000000100002000c000100050006fa847b1268"], 0x24}, 0x1}, 0x0) 09:14:45 executing program 0: 09:14:45 executing program 3: 09:14:45 executing program 5: 09:14:45 executing program 6: 09:14:45 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) mknodat(r2, &(0x7f0000000280)='./file0\x00', 0xc100, 0x0) 09:14:45 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000200)=0x2, 0x4) sendto$inet(r0, &(0x7f00000001c0)="0e9bd3108928494a54c724fc8dc53d07792c8b6abe4eb7c72d25c7fa34d397b37e27a9ba805b2712d6a2455f28b8ed3fd5288f", 0x33, 0x3ffffff, &(0x7f0000000300)={0x2, 0x4e23}, 0x10) 09:14:45 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000d300000000028000007a0a00ffffffff006b0130"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000500)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xe, 0x5, &(0x7f0000000040)=@framed={{0x18}, [@jmp={0x5}], {0x95}}, &(0x7f0000000200)='syzkaller\x00', 0x80000001, 0xbb, &(0x7f0000000300)=""/187}, 0x48) 09:14:45 executing program 5: r0 = socket(0x2, 0x3, 0x40000000000000ff) sendmmsg$unix(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000300)=[{&(0x7f0000000240)="e5cc71a49c88a068ec857ab42067df040821f03c", 0x14}], 0x1}], 0x1, 0x0) 09:14:45 executing program 4: [ 174.761881] raw_sendmsg: syz-executor5 forgot to set AF_INET. Fix it! 09:14:46 executing program 1: 09:14:46 executing program 7: 09:14:46 executing program 6: 09:14:46 executing program 2: 09:14:46 executing program 0: 09:14:46 executing program 3: 09:14:46 executing program 5: 09:14:46 executing program 4: 09:14:46 executing program 1: 09:14:46 executing program 0: 09:14:46 executing program 1: 09:14:46 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) read(r0, &(0x7f0000000200)=""/11, 0xffffff51) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r3 = syz_open_pts(r0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)) dup2(r2, r3) 09:14:46 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x28, r1, 0x61f, 0x0, 0x0, {0xa}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4}]}]}, 0x28}, 0x1}, 0x0) 09:14:46 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f762070") perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}, 0xa00000400, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f00008deff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000000840)='nfs\x00', 0x0, &(0x7f000000a000)) 09:14:46 executing program 7: r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000040)={0x303, 0x33}, 0x4) 09:14:46 executing program 6: 09:14:46 executing program 2: 09:14:46 executing program 1: 09:14:46 executing program 0: [ 175.590267] rpcbind: RPC call returned error 22 09:14:46 executing program 7: [ 175.611562] rpcbind: RPC call returned error 22 09:14:46 executing program 2: 09:14:46 executing program 3: 09:14:46 executing program 6: 09:14:46 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="025cc83d6d345f8f762070") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000498000)={&(0x7f0000d55000)={0x10}, 0xc, &(0x7f00008b7ff0)={&(0x7f00003c0fdc)=ANY=[@ANYBLOB="240000000001010000000000ffffffff02000000100002000c0001000500020000000000"], 0x24}, 0x1}, 0x0) 09:14:46 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setitimer(0x1, &(0x7f0000000300)={{0x77359400}}, 0x0) 09:14:46 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x28001) write$evdev(r0, &(0x7f0000000180)=[{{0x0, 0x7530}, 0x0, 0x80000001}, {{0x77359400}}], 0x30) 09:14:46 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)="2f67726f1d562275702e7374cc7400", 0x2761, 0x0) write$cgroup_subtree(r0, &(0x7f00000001c0)=ANY=[], 0x10000006a) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffffffffffff77, &(0x7f0000000100), 0x0, &(0x7f00000015c0)=ANY=[]}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)) [ 176.029800] netlink: 'syz-executor5': attribute type 2 has an invalid length. 09:14:47 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) read(r0, &(0x7f0000000200)=""/11, 0xffffff51) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r3 = syz_open_pts(r0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)) dup2(r2, r3) 09:14:47 executing program 2: syz_emit_ethernet(0x25, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14}, @remote={0xac, 0x14, 0x223, 0xbb}, {[@rr={0x7, 0x3}]}}, @icmp=@timestamp_reply={0xe}}}}}, &(0x7f0000000100)) 09:14:47 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000740)) 09:14:47 executing program 6: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f0000000000)=0x80000000, 0x4) syz_emit_ethernet(0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="cd390b081bf200000000000086dd6002290f00383a0000000000000000000000ffff00000000ff020000000000000000000000000001000090780000cdda278f90734400000000000000ff020000000000fa0000000000000001f601929f106531aa"], 0x0) 09:14:47 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={&(0x7f0000000240)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000080)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0xc, [{0x4}]}]}, 0x28}, 0x1}, 0x0) 09:14:47 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)="390000001300064700bb61e1c3e4ffff0600000002000000450d00002000000019000a000d0000000000280f00000007fd17e1ffff06060400", 0x39}], 0x1) 09:14:47 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="025cc83d6d345f8f762070") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000498000)={&(0x7f0000d55000)={0x10}, 0xc, &(0x7f00008b7ff0)={&(0x7f00003c0fdc)=ANY=[@ANYBLOB="240000000001010000000000ffffffff02000000100002000c0001000500020000000000"], 0x24}, 0x1}, 0x0) 09:14:47 executing program 7: epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f000000dff4)) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)="6e65742f6970365f666c6f776c6162656c00526afb8ba033bd6fbf0983c0e8e6c7fafcf57cfd4ac49d087e1c4633e874b2e602984665e58b88fcdb034c36563aefc9e5cd7ad69bdf6088b524222bb66d588eb0bb831c47e436206adcf94c4eb4734f291d3489925772ac9454f79acdc18f3dbde74abcb604540bfbcbf6288ad9d0d86c1828659b") r1 = eventfd2(0x0, 0x80801) sendfile(r1, r0, &(0x7f0000000180), 0x10ed58) [ 176.464160] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.470727] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.517809] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.524349] bridge0: port 1(bridge_slave_0) entered forwarding state 09:14:47 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) read(r0, &(0x7f0000000200)=""/11, 0xffffff51) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r3 = syz_open_pts(r0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)) dup2(r2, r3) [ 176.567275] netlink: 'syz-executor5': attribute type 2 has an invalid length. 09:14:47 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000300)={0x0, {0x2}, {0x2, 0x0, @multicast2=0xe0000002}, {0x2}, 0xab852ebbeefbd631, 0x0, 0x0, 0x0, 0x1d, &(0x7f00000002c0)='syz_tun\x00', 0x9}) 09:14:47 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)="390000001300114700bb61e1c3e4ffff0600000002000000450d00002000000019000a000d0000000000280f00000007fd17e1ffff06060400", 0x39}], 0x1) 09:14:47 executing program 7: r0 = socket$inet6(0xa, 0x1008000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x0, &(0x7f0000000140)={0x2, &(0x7f0000000040)=[{0xc}, {0x6, 0x0, 0x0, 0xfffffffffffffffe}]}) gettid() 09:14:47 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x100000000002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x3}, 0x1c) sendto$inet6(r1, &(0x7f0000000300), 0xfd90, 0x400806e, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}, 0x1c) sendto$inet6(r1, &(0x7f00000001c0)="e21e30df98107e23b159f0d8068b96d03cbaa7c500b97173af2cf8b80601f2bcd0c8d032052f56da1a8b0035f3423449e9a31c4cc6c691e6fee3cd19baeed3d9cc7aee216cf5c45447e4b4c13d69457098e94968832cac59b7ac46f4ffb97f1f003b7bc336b3be0dcd2a796cf38bbe9d89a5bc285d6be4d15bd3af98bbc4e2786bf0ac070720351db5795dfb58e69459fb7c928348550344803748be441d5119cc5311ef4b165b9eb03198", 0xab, 0x0, &(0x7f0000000180)={0xa, 0x2, 0x0, @empty, 0x280}, 0x1c) 09:14:47 executing program 0: r0 = mq_open(&(0x7f0000000040)='eth0\x00', 0x42, 0x0, &(0x7f0000000000)) mq_timedsend(r0, &(0x7f0000000100)="bef7258e06", 0x5, 0x0, &(0x7f0000e0b000)) 09:14:47 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="025cc83d6d345f8f762070") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000498000)={&(0x7f0000d55000)={0x10}, 0xc, &(0x7f00008b7ff0)={&(0x7f00003c0fdc)=ANY=[@ANYBLOB="240000000001010000000000ffffffff02000000100002000c0001000500020000000000"], 0x24}, 0x1}, 0x0) [ 176.810312] netlink: 'syz-executor1': attribute type 10 has an invalid length. [ 176.829839] audit: type=1326 audit(1531818887.828:3): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=6795 comm="syz-executor7" exe="/root/syz-executor7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x455ab9 code=0xffff0000 09:14:47 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x2100000000000002, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000140)={{{@in=@rand_addr, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6, 0x0, 0x2b}, 0x0, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x3}}, 0xe8) sendto$inet6(r1, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @local={0xfe, 0x80, [], 0xaa}}, 0x1a) [ 176.971681] netlink: 'syz-executor5': attribute type 2 has an invalid length. [ 177.022183] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 09:14:48 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x800) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) accept(r1, &(0x7f0000000140)=@sco, &(0x7f00000001c0)=0xffffffe5) sendto$inet6(r2, &(0x7f0000000200)="06", 0x1, 0x2000012c, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty={[0xe00000000000000]}}, 0x1c) 09:14:48 executing program 3: 09:14:48 executing program 6: 09:14:48 executing program 1: 09:14:48 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="025cc83d6d345f8f762070") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000498000)={&(0x7f0000d55000)={0x10}, 0xc, &(0x7f00008b7ff0)={&(0x7f00003c0fdc)=ANY=[@ANYBLOB="240000000001010000000000ffffffff02000000100002000c0001000500020000000000"], 0x24}, 0x1}, 0x0) 09:14:48 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000000)={@rand_addr, @local={0xac, 0x14, 0x14, 0xaa}}, 0x8) 09:14:48 executing program 6: r0 = open(&(0x7f0000103ff8)='./file0\x00', 0x141042, 0x0) ftruncate(r0, 0x7ffe) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a61000)='/dev/ptmx\x00', 0x802, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0xffe, 0xfffffffc) [ 177.425551] netlink: 'syz-executor5': attribute type 2 has an invalid length. 09:14:48 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000780)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f0000000000)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=""/193, &(0x7f0000000280)=""/97, &(0x7f0000000300)=""/127}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000000040)=""/83, &(0x7f0000000380)=""/181, &(0x7f0000000440)=""/141}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)={0x2, 0x0, [{0x0, 0xac, &(0x7f00000007c0)=""/172}, {0x0, 0x4f, &(0x7f0000000500)=""/79}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) [ 177.534002] audit: type=1326 audit(1531818888.532:4): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=6795 comm="syz-executor7" exe="/root/syz-executor7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x455ab9 code=0xffff0000 09:14:48 executing program 2: 09:14:48 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000000c0)) 09:14:48 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="025cc83d6d345f8f762070") sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000498000)={&(0x7f0000d55000)={0x10}, 0xc, &(0x7f00008b7ff0)={&(0x7f00003c0fdc)=ANY=[@ANYBLOB="240000000001010000000000ffffffff02000000100002000c0001000500020000000000"], 0x24}, 0x1}, 0x0) 09:14:48 executing program 0: 09:14:48 executing program 7: 09:14:48 executing program 1: 09:14:48 executing program 7: 09:14:48 executing program 0: 09:14:49 executing program 4: 09:14:49 executing program 2: 09:14:49 executing program 3: 09:14:49 executing program 5: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={&(0x7f0000d55000)={0x10}, 0xc, &(0x7f00008b7ff0)={&(0x7f00003c0fdc)=ANY=[@ANYBLOB="240000000001010000000000ffffffff02000000100002000c0001000500020000000000"], 0x24}, 0x1}, 0x0) 09:14:49 executing program 1: 09:14:49 executing program 7: [ 178.406358] netlink: 'syz-executor5': attribute type 2 has an invalid length. 09:14:49 executing program 6: 09:14:49 executing program 0: 09:14:49 executing program 7: 09:14:49 executing program 2: 09:14:49 executing program 4: 09:14:49 executing program 1: 09:14:49 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x6}, 0x1c) sendto$inet6(r0, &(0x7f0000000300), 0xfd90, 0x0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) 09:14:49 executing program 5: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={&(0x7f0000d55000)={0x10}, 0xc, &(0x7f00008b7ff0)={&(0x7f00003c0fdc)=ANY=[@ANYBLOB="240000000001010000000000ffffffff02000000100002000c0001000500020000000000"], 0x24}, 0x1}, 0x0) 09:14:49 executing program 7: 09:14:49 executing program 1: 09:14:49 executing program 2: 09:14:49 executing program 0: 09:14:49 executing program 4: 09:14:49 executing program 6: [ 178.788337] netlink: 'syz-executor5': attribute type 2 has an invalid length. 09:14:49 executing program 3: r0 = socket$inet6(0xa, 0x1008000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x0, &(0x7f0000000140)={0x2, &(0x7f0000000040)=[{0xc}, {0x6, 0x0, 0x0, 0xfffffffffffffffe}]}) socket(0x0, 0x0, 0x0) 09:14:49 executing program 7: r0 = socket$inet6(0xa, 0x1040000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f762070") syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 09:14:49 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={&(0x7f00007a9000)={0x10}, 0xc, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000180001f4ffffff00000000000a800000000000080000000004000800"], 0x1}, 0x1}, 0x0) 09:14:50 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="b7000000000001b7bfa30000000000000703000028feffff7a0af0fff8ffffff71a4f0ff00000000b7060000000000012d400500000000003704000001ed00001704000000ffffffcd460000000000006b0a00fe000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) 09:14:50 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000200)) waitid(0x1, r0, &(0x7f0000000040), 0x4, 0x0) 09:14:50 executing program 4: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x44e23, @multicast2=0xe0000002}, 0x10) connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e23}, 0x10) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) 09:14:50 executing program 5: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={&(0x7f0000d55000)={0x10}, 0xc, &(0x7f00008b7ff0)={&(0x7f00003c0fdc)=ANY=[@ANYBLOB="240000000001010000000000ffffffff02000000100002000c0001000500020000000000"], 0x24}, 0x1}, 0x0) [ 178.976352] audit: type=1326 audit(1531818889.975:5): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=6912 comm="syz-executor3" exe="/root/syz-executor3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x455ab9 code=0xffff0000 09:14:50 executing program 6: 09:14:50 executing program 7: 09:14:50 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) write$P9_RGETLOCK(r0, &(0x7f0000000100)={0x88, 0x37, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6a, "a3732d427cc114fa75efb89b3c28c828dade8a7509d40e0d177b2f428dd35ce8b951e44831633a354c278fe893c19e9a04e72a4801b8b17ca37e1efa5bd7b4c209bf593777adaac3b415e79cd48a8c068295a1cb5bc9d665ebfed6356e714d7c3c330d43e902d276ed5a"}}, 0x88) 09:14:50 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7}}, 0x20}, 0x1}, 0x0) 09:14:50 executing program 6: socket$inet6(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)) r0 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000300)="646e735f7265736f6c766572006f3e2db223463eb6045723c8d4f9415898298e5ad0b0aa1f96a733f4334d953010b464f987b601f496688fd9b798bcc4e0040a11182bdb31d9149358e327f7fd0d3ab73acb5f72a49d39b54daec6cff813e974c3335b5f12d991125a6d65745c078a4a2fdb9c535d77f5ff598d1c73d9b188cb891746d1f0409f0997603b17c0abf5377fbcf07ef2fc593b8bbbe48b3a7991", &(0x7f0000000140)={0x73, 0x79, 0x7a}, &(0x7f0000000080), 0xfe30, r0) [ 179.245277] netlink: 'syz-executor5': attribute type 2 has an invalid length. 09:14:50 executing program 4: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x44e23, @multicast2=0xe0000002}, 0x10) connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e23}, 0x10) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) 09:14:50 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000000c0)={@multicast2=0xe0000002, @multicast1=0xe0000001, 0x2}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000180)={@multicast2=0xe0000002, @remote={0xac, 0x14, 0x14, 0xbb}}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast2=0xe0000002, @multicast1=0xe0000001}, 0xc) 09:14:50 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x0) write(0xffffffffffffffff, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCSETSF(r1, 0x5457, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xb106}) 09:14:50 executing program 5: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)="025cc83d6d345f8f762070") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={&(0x7f0000d55000)={0x10}, 0xc, &(0x7f00008b7ff0)={&(0x7f00003c0fdc)=ANY=[@ANYBLOB="240000000001010000000000ffffffff02000000100002000c0001000500020000000000"], 0x24}, 0x1}, 0x0) [ 179.534920] ------------[ cut here ]------------ [ 179.534929] precision 64413 too large [ 179.534942] WARNING: CPU: 1 PID: 6948 at lib/vsprintf.c:2164 vsnprintf+0x2e77/0x3450 [ 179.534951] Kernel panic - not syncing: panic_on_warn set ... [ 179.534955] [ 179.534965] CPU: 1 PID: 6948 Comm: syz-executor6 Not tainted 4.18.0-rc4+ #27 [ 179.534978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 179.534982] Call Trace: [ 179.534986] dump_stack+0x185/0x1e0 [ 179.534990] panic+0x3d0/0x9b0 [ 179.534994] __warn+0x40f/0x580 [ 179.534998] ? vsnprintf+0x2e77/0x3450 [ 179.535002] report_bug+0x72a/0x880 [ 179.535007] ? vsnprintf+0x2e77/0x3450 [ 179.535013] ? vsnprintf+0x2e77/0x3450 [ 179.535019] do_error_trap+0x1fe/0x710 [ 179.535026] ? vprintk+0x67/0x80 [ 179.535033] do_invalid_op+0x46/0x50 [ 179.535038] invalid_op+0x14/0x20 [ 179.535043] RIP: 0010:vsnprintf+0x2e77/0x3450 [ 179.535046] Code: 00 00 89 88 48 06 00 00 89 90 68 09 00 00 48 c7 80 80 0c 00 00 00 00 00 00 48 c7 c7 c8 09 ed 8a 31 c0 44 89 fe e8 b9 b4 ed f6 <0f> 0b 48 8b 45 c8 48 89 85 60 ff ff ff 48 8d 7d c8 e8 33 cc 90 f7 [ 179.535217] RSP: 0018:ffff8801b186f630 EFLAGS: 00010046 [ 179.535227] RAX: 2c4fb0d347574900 RBX: fb9d000000fb9d00 RCX: 2c4fb0d347574900 [ 179.535234] RDX: ffffc900027a0000 RSI: 0000000000000148 RDI: 0000000000000149 [ 179.535240] RBP: ffff8801b186f748 R08: ffffffff7fffffff R09: 0000000000000000 [ 179.535246] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff8ba0158a [ 179.535253] R13: fffffffffffffb9d R14: 0000000000000000 R15: 000000000000fb9d [ 179.535257] vscnprintf+0xc2/0x180 [ 179.535262] vprintk_emit+0x246/0x1120 [ 179.535267] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 179.535271] vprintk_default+0x90/0xa0 [ 179.535275] vprintk_func+0x132/0x170 [ 179.535280] printk+0x1f1/0x230 [ 179.535285] dns_resolver_preparse+0x10e6/0x1770 [ 179.535289] ? wimax_debugfs_rm+0x70/0x70 [ 179.535293] ? wimax_debugfs_rm+0x70/0x70 [ 179.535298] key_create_or_update+0x822/0x1ce0 [ 179.535302] __se_sys_add_key+0x760/0x9c0 [ 179.535307] __x64_sys_add_key+0x15d/0x1b0 [ 179.535312] ? keyring_detect_cycle_iterator+0x110/0x110 [ 179.535316] do_syscall_64+0x15b/0x230 [ 179.535321] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 179.535325] RIP: 0033:0x455ab9 [ 179.535328] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 179.535493] RSP: 002b:00007f76ab23bc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 179.535503] RAX: ffffffffffffffda RBX: 00007f76ab23c6d4 RCX: 0000000000455ab9 [ 179.535509] RDX: 0000000020000080 RSI: 0000000020000140 RDI: 0000000020000300 [ 179.535515] RBP: 000000000072bea0 R08: 00000000306b9819 R09: 0000000000000000 [ 179.535521] R10: 000000000000fe30 R11: 0000000000000246 R12: 00000000ffffffff [ 179.535527] R13: 00000000004bb527 R14: 00000000004c87a0 R15: 0000000000000000 [ 179.535531] Dumping ftrace buffer: [ 179.535535] (ftrace buffer empty) [ 179.535540] Kernel Offset: disabled