[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 16.064382] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 17.441538] random: sshd: uninitialized urandom read (32 bytes read) [ 17.713589] random: sshd: uninitialized urandom read (32 bytes read) [ 18.531627] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.37' (ECDSA) to the list of known hosts. [ 23.940382] random: sshd: uninitialized urandom read (32 bytes read) 2018/07/22 01:14:28 fuzzer started [ 25.354956] random: cc1: uninitialized urandom read (8 bytes read) 2018/07/22 01:14:31 dialing manager at 10.128.0.26:37193 2018/07/22 01:14:35 syscalls: 1808 2018/07/22 01:14:35 code coverage: enabled 2018/07/22 01:14:35 comparison tracing: enabled 2018/07/22 01:14:35 setuid sandbox: enabled 2018/07/22 01:14:35 namespace sandbox: enabled 2018/07/22 01:14:35 fault injection: enabled 2018/07/22 01:14:35 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/07/22 01:14:35 net packed injection: enabled 2018/07/22 01:14:35 net device setup: enabled [ 32.030341] random: crng init done 01:15:48 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x10, 0xf}, 0xc, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x22, 0x305, 0x0, 0x0, {0x3006}}, 0x14}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002f80)=[{{&(0x7f0000002c80)=@xdp, 0x80, &(0x7f0000002e80), 0x0, &(0x7f0000002ec0)=""/173, 0xad}}], 0x1, 0x0, &(0x7f0000003080)={0x0, 0x1c9c380}) 01:15:48 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCGETA(r0, 0x5456, &(0x7f0000000000)) 01:15:48 executing program 7: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="752f00090b33f42565"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffff9f}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 01:15:48 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000040)={0x7b, 0x0, [0x40000102]}) 01:15:48 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000000)) 01:15:48 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000180)) 01:15:48 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x7003, &(0x7f00000000c0)) close(r1) 01:15:48 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x4000000003, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000220007031dfffd946f6105000000000000007d21fe1c4095421ba3a20400ff7e280000001100ffffba16a0aa1ce208b3ef090000000000008e3141eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 104.288772] IPVS: ftp: loaded support on port[0] = 21 [ 104.292242] IPVS: ftp: loaded support on port[0] = 21 [ 104.332330] IPVS: ftp: loaded support on port[0] = 21 [ 104.332747] IPVS: ftp: loaded support on port[0] = 21 [ 104.367063] IPVS: ftp: loaded support on port[0] = 21 [ 104.367068] IPVS: ftp: loaded support on port[0] = 21 [ 104.384809] IPVS: ftp: loaded support on port[0] = 21 [ 104.392758] IPVS: ftp: loaded support on port[0] = 21 [ 105.968493] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.974926] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.996990] device bridge_slave_0 entered promiscuous mode [ 106.030483] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.036907] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.066724] device bridge_slave_0 entered promiscuous mode [ 106.092222] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.098736] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.122089] device bridge_slave_0 entered promiscuous mode [ 106.134494] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.140992] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.151401] device bridge_slave_1 entered promiscuous mode [ 106.159269] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.165663] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.181615] device bridge_slave_0 entered promiscuous mode [ 106.189639] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.196057] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.203322] device bridge_slave_0 entered promiscuous mode [ 106.211396] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.217805] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.225159] device bridge_slave_0 entered promiscuous mode [ 106.233416] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.239788] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.249333] device bridge_slave_1 entered promiscuous mode [ 106.258320] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 106.267745] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.274160] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.289608] device bridge_slave_1 entered promiscuous mode [ 106.295987] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.302496] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.313177] device bridge_slave_0 entered promiscuous mode [ 106.320764] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.327190] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.335749] device bridge_slave_1 entered promiscuous mode [ 106.342239] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.348646] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.356370] device bridge_slave_0 entered promiscuous mode [ 106.364897] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.371303] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.379514] device bridge_slave_1 entered promiscuous mode [ 106.394579] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 106.405037] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.411439] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.418938] device bridge_slave_1 entered promiscuous mode [ 106.425460] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.431881] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.442345] device bridge_slave_1 entered promiscuous mode [ 106.451192] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 106.458598] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 106.466580] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 106.476113] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.482499] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.514719] device bridge_slave_1 entered promiscuous mode [ 106.525550] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 106.533915] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 106.548867] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 106.558572] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 106.571112] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 106.584614] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 106.596396] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 106.608659] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 106.640169] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 106.676179] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 106.698080] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 106.736283] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 106.883651] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 106.902759] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 106.914282] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 106.931365] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 106.943657] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 106.981669] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 106.990917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 107.005633] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 107.016762] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 107.028834] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 107.047140] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 107.058130] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 107.067594] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 107.086452] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 107.122150] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 107.138810] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 107.149292] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 107.369419] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 107.389470] team0: Port device team_slave_0 added [ 107.510117] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 107.528508] team0: Port device team_slave_1 added [ 107.550126] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 107.567261] team0: Port device team_slave_0 added [ 107.578077] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 107.596132] team0: Port device team_slave_0 added [ 107.612895] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 107.620640] team0: Port device team_slave_0 added [ 107.626965] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 107.639825] team0: Port device team_slave_0 added [ 107.647439] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 107.657276] team0: Port device team_slave_0 added [ 107.664999] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 107.678768] team0: Port device team_slave_1 added [ 107.686515] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 107.693554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 107.706377] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 107.719761] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 107.734568] team0: Port device team_slave_1 added [ 107.741375] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 107.749366] team0: Port device team_slave_1 added [ 107.755215] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 107.763996] team0: Port device team_slave_1 added [ 107.773431] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 107.789265] team0: Port device team_slave_0 added [ 107.804816] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 107.811855] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 107.827337] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 107.843568] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 107.850612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 107.858457] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 107.867566] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 107.875254] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 107.884467] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 107.893286] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 107.910849] team0: Port device team_slave_1 added [ 107.921800] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 107.935684] team0: Port device team_slave_0 added [ 107.946557] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 107.957378] team0: Port device team_slave_1 added [ 107.963429] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 107.970554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 107.984086] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 107.997507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 108.005339] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 108.012762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 108.020549] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 108.028033] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 108.035594] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 108.044038] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 108.051291] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 108.059179] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 108.068753] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 108.077906] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 108.085081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 108.092994] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 108.100627] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 108.112596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 108.121874] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 108.130559] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 108.138802] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 108.145741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 108.157944] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 108.175425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 108.189506] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 108.196963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 108.204586] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 108.212226] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 108.219337] team0: Port device team_slave_1 added [ 108.227148] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 108.235760] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 108.245646] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 108.254051] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 108.262750] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 108.272066] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 108.280331] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 108.289485] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 108.298743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 108.337968] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 108.350110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 108.360326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 108.368045] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 108.375458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 108.383159] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 108.390571] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 108.398363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 108.406038] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 108.413714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 108.421421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 108.428970] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 108.437380] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 108.447646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 108.455483] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 108.474443] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 108.483596] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 108.491128] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 108.499101] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 108.524554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 108.532784] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 108.540674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 108.549832] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 108.558440] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 108.566741] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 108.575158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 108.599598] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 108.618498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 108.628243] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 108.638267] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 108.654222] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 108.661965] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 108.670011] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 108.690840] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 108.730403] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 108.740162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 108.747982] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 108.755914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 108.763556] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 108.771346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 108.793413] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 108.804544] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 108.818008] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 108.839566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 108.867411] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 108.877254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 109.543764] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.550190] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.556850] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.563221] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.595713] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 109.604554] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.610962] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.617602] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.623969] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.632639] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 109.654873] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 109.669302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 109.717858] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.724283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.730921] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.737282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.752213] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 109.760787] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.767196] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.773829] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.780187] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.788390] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 109.870720] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.878652] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.885285] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.891641] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.905648] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 109.938337] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.944765] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.951412] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.957803] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.994484] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 110.015270] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.021675] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.028283] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.034672] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.056954] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 110.069516] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.075929] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.082571] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.088960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.102924] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 110.688215] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 110.696292] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 110.716636] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 110.723865] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 110.731500] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 110.738831] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 113.624354] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.643520] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.704299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.731606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.836353] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.952843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.960920] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.974170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.995399] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 114.068166] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 114.091321] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 114.108046] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 114.157625] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 114.298891] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 114.344036] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 114.369474] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 114.397388] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 114.403936] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 114.414570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 114.441226] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 114.453336] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 114.462082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 114.470390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 114.503433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 114.517375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 114.530851] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 114.555953] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 114.567810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 114.599930] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 114.606607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 114.631443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 114.741361] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 114.747608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 114.761124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 114.792821] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 114.799154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 114.812170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 114.838139] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 114.844481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 114.852840] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 114.863976] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.874517] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.909853] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.986054] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.008480] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.115583] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.212107] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.234121] 8021q: adding VLAN 0 to HW filter on device team0 01:16:01 executing program 4: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000080)={'security\x00', 0x2, [{}, {}]}, 0x48) 01:16:01 executing program 2: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000140)=""/24, &(0x7f0000000240)=0x18) 01:16:01 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) setsockopt$sock_int(r1, 0x1, 0x1b, &(0x7f00000002c0), 0x4) 01:16:02 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='/exe\x00\x00\x00\x00\x00\x00') fcntl$setstatus(r0, 0x4, 0x46400) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x7, 0x0, 0x0, r0, &(0x7f0000000200), 0xfffffdcc}]) [ 117.142373] netlink: 8 bytes leftover after parsing attributes in process `syz-executor5'. 01:16:02 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x7fff) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000380)='yeah\x00', 0x5) shutdown(r0, 0x1) 01:16:02 executing program 2: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000080)={'mangle\x00'}, &(0x7f0000000100)=0x54) 01:16:02 executing program 5: r0 = socket$inet6(0xa, 0x2000000000001, 0x0) r1 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000687000)=0x5c802861, 0x4) bind$inet6(r1, &(0x7f0000402000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000000080), 0x0, 0xfffffefffffffffe, &(0x7f0000f62fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000687000)=0x9, 0x4) bind$inet6(r0, &(0x7f0000402000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") close(r1) sendto$inet6(r0, &(0x7f0000000080), 0x0, 0x20000000, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) 01:16:02 executing program 0: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$get_persistent(0x16, 0x0, r0) 01:16:02 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000080)='reno\x00', 0x5) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0x81a0ae8c, 0x0) [ 117.348823] syz-executor4 (6533) used greatest stack depth: 16016 bytes left [ 117.359592] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 01:16:02 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000480)='./control\x00', 0x82) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f00000003c0)='./control/file0\x00', &(0x7f0000000380)='./file0\x00') pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bind(0xffffffffffffffff, &(0x7f0000000280)=@pppoe={0x18, 0x0, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 'sit0\x00'}}, 0x80) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='btrfs\x00', 0x1000, &(0x7f0000000400)) umount2(&(0x7f0000000200)='./file0\x00', 0x0) creat(&(0x7f0000000040)='./control\x00', 0x0) getxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)=@random={'osx.', 'cpusetð0\x00'}, &(0x7f0000000400)=""/42, 0x2a) ioctl$TIOCLINUX2(r3, 0x541c, &(0x7f0000000440)={0x2, 0x0, 0x1f, 0xee80, 0x3ff, 0x1}) close(r1) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) ioctl$KVM_GET_PIT2(r0, 0x8070ae9f, &(0x7f0000000000)) 01:16:02 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f000088cff6)='/dev/ptmx\x00', 0x1000000000001, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b3fdc)) write(r1, &(0x7f000054bfba)="4f7ad0c9edb302486f1748144523c0c253773e00d49ba39063e2432e8de58f5930fd07000000dcf50bbc54b70c0ea17b4728dde5f9eedfc811ff1f75642558334444c9fe3d13", 0x46) r2 = syz_open_pts(r1, 0x2) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000400)="10", 0x1}], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000016) ioctl$TCSETS(r2, 0x5402, &(0x7f00000000c0)) 01:16:02 executing program 6: r0 = socket$inet6(0xa, 0x1000000000003, 0x7) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [], 0xaa}}]}, 0x2c}, 0x1}, 0x0) 01:16:02 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000440)=@fragment, 0x8) setsockopt$inet6_opts(r1, 0x29, 0x39, &(0x7f0000000080)=@fragment, 0x0) 01:16:02 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0xb}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc87d6d345f8f762070") syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff11, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}, {[], @udp={0x0, 0x4e20, 0x8}}}}}}, &(0x7f0000000040)) 01:16:02 executing program 5: r0 = socket$inet6(0xa, 0x2000000000001, 0x0) r1 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000687000)=0x5c802861, 0x4) bind$inet6(r1, &(0x7f0000402000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000000080), 0x0, 0xfffffefffffffffe, &(0x7f0000f62fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000687000)=0x9, 0x4) bind$inet6(r0, &(0x7f0000402000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") close(r1) sendto$inet6(r0, &(0x7f0000000080), 0x0, 0x20000000, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) 01:16:02 executing program 2: 01:16:02 executing program 2: r0 = openat$random(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDZAPENTCNT(r0, 0x5452, &(0x7f0000000040)) 01:16:02 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000000)={0x7b, 0x0, [0x40000071, 0x7fffffff]}) 01:16:02 executing program 3: [ 117.584374] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 01:16:02 executing program 2: 01:16:02 executing program 7: 01:16:02 executing program 4: 01:16:02 executing program 5: r0 = socket$inet6(0xa, 0x2000000000001, 0x0) r1 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000687000)=0x5c802861, 0x4) bind$inet6(r1, &(0x7f0000402000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000000080), 0x0, 0xfffffefffffffffe, &(0x7f0000f62fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000687000)=0x9, 0x4) bind$inet6(r0, &(0x7f0000402000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") close(r1) sendto$inet6(r0, &(0x7f0000000080), 0x0, 0x20000000, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) 01:16:02 executing program 3: 01:16:02 executing program 6: 01:16:03 executing program 6: shmctl$IPC_SET(0x0, 0xf, &(0x7f0000000280)) 01:16:03 executing program 1: 01:16:03 executing program 2: 01:16:03 executing program 4: 01:16:03 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@ipv6_getaddr={0x2c, 0x16, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}]}, 0x2c}, 0x1}, 0x0) 01:16:03 executing program 5: r0 = socket$inet6(0xa, 0x2000000000001, 0x0) r1 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000687000)=0x5c802861, 0x4) bind$inet6(r1, &(0x7f0000402000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000000080), 0x0, 0xfffffefffffffffe, &(0x7f0000f62fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000687000)=0x9, 0x4) bind$inet6(r0, &(0x7f0000402000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") close(r1) sendto$inet6(r0, &(0x7f0000000080), 0x0, 0x20000000, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) 01:16:03 executing program 0: 01:16:03 executing program 7: 01:16:03 executing program 2: 01:16:03 executing program 4: 01:16:03 executing program 0: 01:16:03 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000000)={0x1b504cd8}, 0x4) listen(r0, 0x40) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='\x00', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 01:16:03 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/fib_triestat\x00') sendfile(r0, r1, &(0x7f0000000040), 0x5d) 01:16:03 executing program 6: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000140), 0x4) 01:16:03 executing program 1: syz_emit_ethernet(0xffd1, &(0x7f000070aef1)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @broadcast=0xffffffff}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) 01:16:03 executing program 5: r0 = socket$inet6(0xa, 0x2000000000001, 0x0) r1 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000687000)=0x5c802861, 0x4) bind$inet6(r1, &(0x7f0000402000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000000080), 0x0, 0xfffffefffffffffe, &(0x7f0000f62fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000687000)=0x9, 0x4) bind$inet6(r0, &(0x7f0000402000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") sendto$inet6(r0, &(0x7f0000000080), 0x0, 0x20000000, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) 01:16:03 executing program 4: r0 = socket$inet6(0xa, 0x11000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f762070") r1 = syz_open_dev$evdev(&(0x7f0000000600)='/dev/input/event#\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000002, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000000000)=""/254) 01:16:03 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)=0x6, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x1d, r1}, 0x10, &(0x7f00000000c0)={&(0x7f0000000080)=@can={{}, 0x0, 0x0, 0x0, 0x0, "3066d0a718c59140"}, 0x10}, 0x1}, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x0, 0x0) listen(0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000), 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) 01:16:03 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x81000000000002, &(0x7f0000000000)=0x75, 0x4) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) getsockname$packet(0xffffffffffffff9c, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=@deltclass={0x68, 0x29, 0x0, 0x70bd28, 0x25dfdbff, {0x0, r2, {0xffff, 0xb}, {0xe, 0xf}, {0xf, 0xfff3}}, [@TCA_RATE={0x8, 0x5, {0xfa0, 0x7}}, @tclass_kind_options=@c_dsmark={{0xc, 0x1, 'dsmark\x00'}, {0xc, 0x2, @TCA_DSMARK_MASK={0x8, 0x4}}}, @tclass_kind_options=@c_dsmark={{0xc, 0x1, 'dsmark\x00'}, {0xc, 0x2, @TCA_DSMARK_MASK={0x8, 0x4, 0x7}}}, @tclass_kind_options=@c_htb={{0x8, 0x1, 'htb\x00'}, {0x4, 0x2}}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x4) sendto$inet(r1, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x921b527a62bfd8af) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], 0x1001) 01:16:03 executing program 6: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x37, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)="4550d4001f91eb2f57b73224433025039c3096b20c6b439348bf689c08608537d6223e63adc0624fbae2e109359dce6922324ccc13160b68cae6430697259dd52d1f73e16adc3592d02925dffae85e9cd2398c6c67c87fb5b12602f145b484be45912966e8b7e2f66069c56dd76c1dc112013c3a6b4de999cdcdc8855aee3437dcc87580cfbe546fbbfbc0eb56d8bbbea2904a7c73c2", 0x0, 0xc3, &(0x7f0000000000)=""/195}, 0x48) 01:16:03 executing program 1: 01:16:03 executing program 3: 01:16:03 executing program 5: r0 = socket$inet6(0xa, 0x2000000000001, 0x0) r1 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000687000)=0x5c802861, 0x4) bind$inet6(r1, &(0x7f0000402000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000000080), 0x0, 0xfffffefffffffffe, &(0x7f0000f62fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000687000)=0x9, 0x4) bind$inet6(r0, &(0x7f0000402000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) socket$inet6(0xa, 0x1000000000002, 0x0) close(r1) sendto$inet6(r0, &(0x7f0000000080), 0x0, 0x20000000, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) 01:16:03 executing program 4: 01:16:03 executing program 6: 01:16:03 executing program 1: 01:16:03 executing program 0: 01:16:03 executing program 7: 01:16:03 executing program 3: r0 = epoll_create1(0x0) r1 = inotify_init() dup2(r0, r1) epoll_wait(r1, &(0x7f0000000100), 0x0, 0x0) 01:16:03 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x5}) 01:16:03 executing program 6: 01:16:03 executing program 5: r0 = socket$inet6(0xa, 0x2000000000001, 0x0) r1 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000687000)=0x5c802861, 0x4) bind$inet6(r1, &(0x7f0000402000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000000080), 0x0, 0xfffffefffffffffe, &(0x7f0000f62fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000687000)=0x9, 0x4) bind$inet6(r0, &(0x7f0000402000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) socket$inet6(0xa, 0x1000000000002, 0x0) close(r1) sendto$inet6(r0, &(0x7f0000000080), 0x0, 0x20000000, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) 01:16:03 executing program 1: 01:16:03 executing program 0: 01:16:04 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x33, 0x0, @dev={0xac, 0x14, 0x14}, @remote={0xac, 0x14, 0x223, 0xbb}, {[@rr={0xffffff94, 0x3}]}}, @icmp=@timestamp_reply={0xe}}}}}, &(0x7f0000000100)) 01:16:04 executing program 0: 01:16:04 executing program 4: 01:16:04 executing program 1: 01:16:04 executing program 6: 01:16:04 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000080)='reno\x00', 0x5) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:16:04 executing program 3: r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f00000000c0)={0x0, 0x2710}, 0x254) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f00000001c0), &(0x7f0000000040)=0x10) 01:16:04 executing program 5: r0 = socket$inet6(0xa, 0x2000000000001, 0x0) r1 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000687000)=0x5c802861, 0x4) bind$inet6(r1, &(0x7f0000402000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000000080), 0x0, 0xfffffefffffffffe, &(0x7f0000f62fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000687000)=0x9, 0x4) bind$inet6(r0, &(0x7f0000402000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) socket$inet6(0xa, 0x1000000000002, 0x0) close(r1) sendto$inet6(r0, &(0x7f0000000080), 0x0, 0x20000000, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) 01:16:04 executing program 4: 01:16:04 executing program 0: 01:16:04 executing program 6: 01:16:04 executing program 1: 01:16:04 executing program 3: 01:16:04 executing program 2: openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001000), 0x1000) r0 = socket$inet6(0xa, 0x1000000000001, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mbind(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000040), 0x45, 0x2) write$binfmt_misc(r1, &(0x7f0000000440)={'syz1'}, 0x1ff00) 01:16:04 executing program 5: r0 = socket$inet6(0xa, 0x2000000000001, 0x0) r1 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000687000)=0x5c802861, 0x4) bind$inet6(r1, &(0x7f0000402000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000000080), 0x0, 0xfffffefffffffffe, &(0x7f0000f62fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000687000)=0x9, 0x4) bind$inet6(r0, &(0x7f0000402000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") close(r1) sendto$inet6(r0, &(0x7f0000000080), 0x0, 0x20000000, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) 01:16:04 executing program 6: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) r1 = dup2(r0, r0) getsockopt$inet_tcp_int(r1, 0x6, 0x0, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 01:16:04 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x140, &(0x7f0000000180)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x132, 0x0, 0x0, 0x0, 0x0, 0x0, @empty=0xac1414bb, @multicast1=0xac14140a}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) 01:16:04 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$random(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/urandom\x00', 0x0, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r1, r2) 01:16:04 executing program 7: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000300)={{{@in, @in6=@dev={0xfe, 0x80}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x80}}, {{@in6}, 0x0, @in=@local={0xac, 0x14, 0x14, 0xaa}}}, 0xe8) 01:16:04 executing program 0: unshare(0x2000400) r0 = timerfd_create(0x0, 0x0) timerfd_gettime(r0, &(0x7f0000000080)) 01:16:04 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000e80)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000e40)={&(0x7f00000008c0)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14}, @in6=@ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}, {@in=@broadcast=0xffffffff, 0x0, 0x2b}, @in6=@local={0xfe, 0x80, [], 0xaa}, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1}, 0x0) 01:16:04 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x81000000000002, &(0x7f0000000000)=0x75, 0x4) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=@deltclass={0x24, 0x29, 0x0, 0x0, 0x0, {0x0, 0x0, {0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendto$inet(r1, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x921b527a62bfd8af) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r1, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], 0x1001) 01:16:04 executing program 5: r0 = socket$inet6(0xa, 0x2000000000001, 0x0) r1 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000687000)=0x5c802861, 0x4) bind$inet6(r1, &(0x7f0000402000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000000080), 0x0, 0xfffffefffffffffe, &(0x7f0000f62fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000687000)=0x9, 0x4) bind$inet6(r0, &(0x7f0000402000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") close(r1) sendto$inet6(r0, &(0x7f0000000080), 0x0, 0x20000000, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) 01:16:04 executing program 1: prctl$setendian(0x14, 0x1) r0 = syz_open_dev$vcsn(&(0x7f0000000300)='/dev/vcs#\x00', 0xbe2c, 0x0) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000640)=0x20000000800) r1 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0xc00000000, 0x20400) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000004c0)={0x0, 0x5ed9}, &(0x7f0000000500)=0x8) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x6) ioctl$SG_GET_TIMEOUT(r1, 0x2202, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000002580)={0x8000, 0x4}) r3 = socket(0xa, 0x1, 0x0) getpeername$inet(r3, &(0x7f0000000280)={0x0, 0x0, @multicast1}, &(0x7f00000002c0)=0x3748) close(0xffffffffffffffff) ioctl$int_out(r0, 0x5462, &(0x7f0000000580)) ioctl(r3, 0x890b, &(0x7f0000000240)='\x00&&,') ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000380)) setsockopt$sock_timeval(r3, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x2710}, 0x10) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000440)=0x7fffffff, 0xffffffffffffffba) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000400)=r2, 0x4) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f00000005c0)={{0x25e, 0x8}, {0x3, 0x5}, 0x0, 0x2, 0x4}) r4 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000e00)={{{@in6=@mcast2, @in6=@mcast1}}, {{@in=@multicast1}}}, &(0x7f0000000f00)=0xe8) sendmmsg(r3, &(0x7f00000024c0)=[{{&(0x7f00000001c0)=@sco={0x1f, {0xffff, 0x6, 0x1, 0x5, 0x0, 0x400}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000680)="9f2941ba9a49afbb652d27f12573cf0bec0779268cdec108103c9acefb6c0ca765de2862573e1951ce7a4ec5592038045b6f545f3f11f8e764886fb58048789730a4aae995b07a93d3dcd559cad9bcc64fd2926d73a967b6df272b3a63f48d564e64f57e6325fa4a9ff0cb6ec63dd7071774163e0086b4f0576a2ba5468876a7a603a54a0052451831b782ae2fc4557cc011f34446129bd735ecdf6e5267536135e3eee4ab361153876e8bbde3f604438e105ed0829d06c338e1272abb6b15bfa06747cf6f484a268de67080186ce217c91001da5c47b49b46d98e0ea8876bbfa9865975047b8edf50b3d0a3e28193211e5e", 0xf2}], 0x1, 0x0, 0x0, 0x4}, 0x5}], 0x1, 0x20000000) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000dc0)) sendmsg$nl_generic(r4, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000840)=ANY=[@ANYBLOB="bc7e8a2b38ec7ba335e21d44f10993f8223f8b3dc8f96f9e4c2c00000079c07426022670d64a15bd5115fe1ced07a01a1140158a61f734ce05df814cdd185f88ebbfbd1cb0bf41206b98b0d7b271ee11c1696272b0255d735c664ab11f2695ff78fd65a06aa741d2c82e6bbc8b7e868f4927a6ea97a2c457febc2112c5ed57608f41f29a07dd"], 0x1}, 0x1}, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r3, 0x0, 0x61, &(0x7f0000000480)=ANY=[@ANYBLOB="66696c6065720000fbffffff00000040000000e7640e9adbc8cfe6259ae789c9373d70e605"], &(0x7f00000003c0)=0x1) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000540)=0x0) r6 = syz_open_procfs(r5, &(0x7f0000000100)='net/tcp\x00') r7 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r7, &(0x7f0000deb000)={0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendto$inet(r7, &(0x7f0000000000), 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) sendfile(r7, r6, &(0x7f0000000000)=0x10, 0x80000003) 01:16:04 executing program 7: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000080)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) 01:16:04 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0xa}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='syscall\x00') sendfile(r0, r1, &(0x7f00000000c0), 0x3412) 01:16:04 executing program 3: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) r1 = dup2(r0, r0) setsockopt$inet6_opts(r1, 0x29, 0x0, &(0x7f0000000080)=@routing, 0x8) 01:16:04 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCGETA(r0, 0x5407, &(0x7f0000000000)) 01:16:04 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000400)={0x0, 0x64, "f23fdab6c2e8af3f1d66c1341b7e3880c13a0c07a1851762255e7ce78a11cd632823bfc94eb9edc5c1ce0603ec66f4018c78a7a4749792099f62edc1bdef346b294c66e2de6affc53cbe5b6629fa95ecfaecc7b1151c5da5f241cfdcaf9de3ea620a2264"}, &(0x7f0000000380)=0x6c) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000003c0)={r2, 0x6}, 0x8) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000903000)={0x0, 0x0, &(0x7f0000000380)=ANY=[], &(0x7f0000000200)="73797a6b616c6c65722c493d6c2b78db01beb8234b8301e2918b8b33e703f173263d15127d1c5309a0593d0f6dbe9cd5434619dfff6e61ba74ed3776315503f2d22b3ecd7a62819bc2345afd348344bed224a114267fd4cd1e55f8cf69c16cfffd3a4dc7721aacdfb55e39d507f86531752d2affc30318f5da65be34374a24f6", 0x0, 0x1000, &(0x7f00009ab000)=""/4096}, 0x48) r3 = socket(0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00009da000), 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[]}, 0x1}, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000005c0)={@in6={{0xa, 0x4e23, 0x7, @remote={0xfe, 0x80, [], 0xbb}, 0x9}}, 0x588, 0x4, 0x4, "0bb80d7ab550d1589dcd3616518f777e7c12b4ecb974aa6abba052bcbb5d08b605c362b47c9813d3ad5ca8d7965760c1eab5f0de26c5784278accff26f7e3ee406d86ac2e26c27d929fa54b538150bd2"}, 0xd8) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)={&(0x7f00000000c0)='./file0\x00'}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000002c0)=""/96}, 0x18) sendto$inet6(r1, &(0x7f0000000180), 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback={0x0, 0x1}}, 0x1c) ioctl$int_out(0xffffffffffffffff, 0x0, &(0x7f0000000480)) setsockopt$inet6_int(r1, 0x29, 0x46, &(0x7f0000000580), 0x4) sendto$inet6(r1, &(0x7f0000000540)='\b', 0x1, 0x3fffffa, &(0x7f0000000500)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 01:16:04 executing program 7: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f00000000c0)=0x8000000000004, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x3}, 0x4) sendto$inet(r0, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @rand_addr}, 0x10) poll(&(0x7f0000000080)=[{r1}], 0xa2, 0x0) 01:16:04 executing program 5: r0 = socket$inet6(0xa, 0x2000000000001, 0x0) r1 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000687000)=0x5c802861, 0x4) bind$inet6(r1, &(0x7f0000402000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000000080), 0x0, 0xfffffefffffffffe, &(0x7f0000f62fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000687000)=0x9, 0x4) bind$inet6(r0, &(0x7f0000402000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") close(r1) sendto$inet6(r0, &(0x7f0000000080), 0x0, 0x20000000, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) 01:16:05 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @random="f8bf88df5b1b", @remote={0xac, 0x14, 0x14, 0xbb}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, @rand_addr}}}}, &(0x7f0000000100)) 01:16:05 executing program 4: 01:16:05 executing program 2: 01:16:05 executing program 5: r0 = socket$inet6(0xa, 0x2000000000001, 0x0) r1 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000687000)=0x5c802861, 0x4) bind$inet6(r1, &(0x7f0000402000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000000080), 0x0, 0xfffffefffffffffe, &(0x7f0000f62fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000687000)=0x9, 0x4) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") close(r1) sendto$inet6(r0, &(0x7f0000000080), 0x0, 0x20000000, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) 01:16:05 executing program 1: [ 120.172887] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 120.191336] IPv4: Oversized IP packet from 127.0.0.1 01:16:05 executing program 4: [ 120.287243] IPv4: Oversized IP packet from 127.0.0.1 01:16:05 executing program 6: 01:16:05 executing program 0: 01:16:05 executing program 4: 01:16:05 executing program 3: 01:16:05 executing program 1: 01:16:05 executing program 2: 01:16:05 executing program 5: r0 = socket$inet6(0xa, 0x2000000000001, 0x0) r1 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000687000)=0x5c802861, 0x4) bind$inet6(r1, &(0x7f0000402000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000000080), 0x0, 0xfffffefffffffffe, &(0x7f0000f62fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) bind$inet6(r0, &(0x7f0000402000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") close(r1) sendto$inet6(r0, &(0x7f0000000080), 0x0, 0x20000000, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) 01:16:05 executing program 7: 01:16:05 executing program 2: 01:16:05 executing program 3: 01:16:05 executing program 7: 01:16:05 executing program 4: 01:16:05 executing program 0: 01:16:05 executing program 6: 01:16:05 executing program 1: 01:16:05 executing program 5: r0 = socket$inet6(0xa, 0x2000000000001, 0x0) r1 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000687000)=0x5c802861, 0x4) bind$inet6(r1, &(0x7f0000402000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000687000)=0x9, 0x4) bind$inet6(r0, &(0x7f0000402000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") close(r1) sendto$inet6(r0, &(0x7f0000000080), 0x0, 0x20000000, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) 01:16:05 executing program 6: 01:16:05 executing program 3: 01:16:05 executing program 7: 01:16:05 executing program 1: 01:16:05 executing program 2: 01:16:05 executing program 4: 01:16:05 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000540)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x40086602, &(0x7f0000000100)={0x14000}) mknodat(r0, &(0x7f00000001c0)='./file0\x00', 0xc726, 0x0) 01:16:05 executing program 2: clock_adjtime(0x0, &(0x7f0000000000)={0x9}) 01:16:05 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000080), 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c}) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) 01:16:05 executing program 6: r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x600}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5f00fe01b2a4a280930a06000000a84306910000003900090035000c00060000001900150003000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 01:16:05 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r1, &(0x7f0000000100)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(r1, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) shutdown(r1, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x800000000004, 0x20011, r2, 0x0) seccomp(0x1, 0x0, &(0x7f0000000140)={0x0, &(0x7f0000000080)}) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x14, &(0x7f0000000340)={0x0, @in={{0x2, 0x0, @rand_addr}}}, &(0x7f0000000000)=0x2c2) 01:16:05 executing program 5: r0 = socket$inet6(0xa, 0x2000000000001, 0x0) r1 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000687000)=0x5c802861, 0x4) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000687000)=0x9, 0x4) bind$inet6(r0, &(0x7f0000402000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") close(r1) sendto$inet6(r0, &(0x7f0000000080), 0x0, 0x20000000, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) 01:16:05 executing program 7: userfaultfd(0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x1, 0x0, 0x1) 01:16:05 executing program 4: [ 121.112679] REISERFS warning (device loop0): sh-2021 reiserfs_fill_super: can not find reiserfs on loop0 01:16:06 executing program 2: [ 121.187153] netlink: 13 bytes leftover after parsing attributes in process `syz-executor6'. 01:16:06 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0xa, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x541b, &(0x7f0000000000)={"65727370616e3000000000000200"}) 01:16:06 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c}) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) 01:16:06 executing program 5: r0 = socket$inet6(0xa, 0x2000000000001, 0x0) r1 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000687000)=0x9, 0x4) bind$inet6(r0, &(0x7f0000402000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") close(r1) sendto$inet6(r0, &(0x7f0000000080), 0x0, 0x20000000, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) [ 121.239867] REISERFS warning (device loop0): sh-2021 reiserfs_fill_super: can not find reiserfs on loop0 01:16:06 executing program 0: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) r1 = dup2(r0, r0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80}}, &(0x7f00000000c0)=0x20) 01:16:06 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) clone(0x200, &(0x7f0000000180), &(0x7f0000000400), &(0x7f0000000000), &(0x7f0000001900)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000240)='./file0\x00', &(0x7f0000000400), &(0x7f0000000580)) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c}) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) 01:16:06 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) r2 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) write$binfmt_misc(r2, &(0x7f00000000c0)={'syz0'}, 0xffcc) [ 121.284177] syz-executor7 uses obsolete (PF_INET,SOCK_PACKET) 01:16:06 executing program 5: r0 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000687000)=0x9, 0x4) bind$inet6(r0, &(0x7f0000402000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") close(0xffffffffffffffff) sendto$inet6(r0, &(0x7f0000000080), 0x0, 0x20000000, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) 01:16:06 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0xa, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x541b, &(0x7f0000000000)={"65727370616e3000000000000200"}) 01:16:06 executing program 0: syz_emit_ethernet(0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60ae3d3e00085c0100000000000000000000ffff0000000000000000000000000000ffff7f0000010000000000089078"], &(0x7f0000000000)) [ 122.010117] ================================================================== [ 122.017562] BUG: KASAN: use-after-free in _copy_from_iter+0x9ea/0x1090 [ 122.024222] Read of size 21 at addr ffff880199ed94a0 by task kworker/0:0/5 [ 122.031231] [ 122.032852] CPU: 0 PID: 5 Comm: kworker/0:0 Not tainted 4.18.0-rc5-next-20180720+ #12 [ 122.040822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 122.050204] Workqueue: events p9_write_work [ 122.054515] Call Trace: [ 122.057099] dump_stack+0x1c9/0x2b4 [ 122.060744] ? dump_stack_print_info.cold.2+0x52/0x52 [ 122.065925] ? printk+0xa7/0xcf [ 122.069196] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 122.073981] ? _copy_from_iter+0x9ea/0x1090 [ 122.078304] print_address_description+0x6c/0x20b [ 122.083161] ? _copy_from_iter+0x9ea/0x1090 [ 122.087477] kasan_report.cold.7+0x242/0x30d [ 122.091886] check_memory_region+0x13e/0x1b0 [ 122.096295] memcpy+0x23/0x50 [ 122.099408] _copy_from_iter+0x9ea/0x1090 [ 122.103550] ? schedule+0xfb/0x450 [ 122.107084] ? __schedule+0x1ea0/0x1ea0 [ 122.111045] ? _copy_from_iter_nocache+0x1050/0x1050 [ 122.116137] ? insert_work+0x375/0x4f0 [ 122.120026] ? __queue_work+0x688/0x1410 [ 122.124085] copy_page_from_iter+0x576/0x890 [ 122.128505] ? mutex_lock_nested+0x16/0x20 [ 122.132737] ? pipe_wait+0x1ff/0x2c0 [ 122.136444] ? _copy_from_iter+0x1090/0x1090 [ 122.140854] pipe_write+0x235/0xeb0 [ 122.144489] __vfs_write+0x6af/0x9d0 [ 122.148192] ? kernel_read+0x120/0x120 [ 122.152093] ? lock_acquire+0x1e4/0x540 [ 122.156083] ? p9_poll_workfn+0x4cb/0x6d0 [ 122.160223] ? lock_acquire+0x1e4/0x540 [ 122.164184] ? p9_write_work+0x554/0xd50 [ 122.168236] ? rw_verify_area+0x118/0x360 [ 122.172373] vfs_write+0x1fc/0x560 [ 122.175921] kernel_write+0xab/0x120 [ 122.179636] p9_write_work+0x6f1/0xd50 [ 122.183514] ? p9_fd_create_tcp+0x8a0/0x8a0 [ 122.187825] ? lock_acquire+0x1e4/0x540 [ 122.191796] ? process_one_work+0xb9b/0x1ba0 [ 122.192666] 9pnet: Insufficient options for proto=fd [ 122.196204] ? kasan_check_read+0x11/0x20 [ 122.196219] ? lock_release+0xa30/0xa30 [ 122.196236] ? kasan_check_read+0x11/0x20 [ 122.213562] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 122.218179] ? read_word_at_a_time+0x20/0x20 [ 122.222592] ? do_raw_spin_lock+0xc1/0x200 [ 122.226828] process_one_work+0xc73/0x1ba0 [ 122.231051] ? trace_hardirqs_on+0x10/0x10 [ 122.235288] ? pwq_dec_nr_in_flight+0x4a0/0x4a0 [ 122.239963] ? lock_repin_lock+0x430/0x430 [ 122.244216] ? __sched_text_start+0x8/0x8 [ 122.248369] ? lock_acquire+0x1e4/0x540 [ 122.252354] ? __wake_up_common_lock+0x1d0/0x330 [ 122.257119] ? lock_downgrade+0x8f0/0x8f0 [ 122.261274] ? kasan_check_read+0x11/0x20 [ 122.265410] ? kasan_check_write+0x14/0x20 [ 122.269646] ? lock_acquire+0x1e4/0x540 [ 122.273621] ? worker_thread+0x3dc/0x13c0 [ 122.277767] ? lock_downgrade+0x8f0/0x8f0 [ 122.281902] ? lock_release+0xa30/0xa30 [ 122.285879] ? kasan_check_read+0x11/0x20 [ 122.290017] ? do_raw_spin_unlock+0xa7/0x2f0 [ 122.294426] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 122.299014] ? kasan_check_write+0x14/0x20 [ 122.303240] ? do_raw_spin_lock+0xc1/0x200 [ 122.307479] worker_thread+0x189/0x13c0 [ 122.311467] ? process_one_work+0x1ba0/0x1ba0 [ 122.315998] ? graph_lock+0x170/0x170 [ 122.319816] ? graph_lock+0x170/0x170 [ 122.323623] ? find_held_lock+0x36/0x1c0 [ 122.327674] ? find_held_lock+0x36/0x1c0 [ 122.331728] ? kasan_check_read+0x11/0x20 [ 122.335864] ? do_raw_spin_unlock+0xa7/0x2f0 [ 122.340278] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 122.345371] ? __kthread_parkme+0x58/0x1b0 [ 122.349601] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 122.353779] 9pnet: Insufficient options for proto=fd [ 122.354624] ? trace_hardirqs_on+0xd/0x10 [ 122.354644] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 122.369404] ? __kthread_parkme+0x106/0x1b0 [ 122.373712] kthread+0x345/0x410 [ 122.377063] ? process_one_work+0x1ba0/0x1ba0 [ 122.381538] ? kthread_bind+0x40/0x40 [ 122.385322] ret_from_fork+0x3a/0x50 [ 122.389030] [ 122.390649] Allocated by task 6974: [ 122.394269] save_stack+0x43/0xd0 [ 122.397718] kasan_kmalloc+0xc4/0xe0 [ 122.401426] __kmalloc+0x14e/0x760 [ 122.404950] p9_fcall_alloc+0x1e/0x90 [ 122.408744] p9_client_prepare_req.part.8+0x107/0xa00 [ 122.413914] p9_client_rpc+0x242/0x1330 [ 122.417870] p9_client_create+0xca4/0x1537 [ 122.422088] v9fs_session_init+0x21a/0x1a80 [ 122.426400] v9fs_mount+0x7c/0x900 [ 122.429930] legacy_get_tree+0x131/0x460 [ 122.433975] vfs_get_tree+0x1cb/0x5c0 [ 122.437763] do_mount+0x6f2/0x1e20 [ 122.441286] ksys_mount+0x12d/0x140 [ 122.444903] __x64_sys_mount+0xbe/0x150 [ 122.448863] do_syscall_64+0x1b9/0x820 [ 122.452736] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 122.457901] [ 122.459515] Freed by task 6974: [ 122.462782] save_stack+0x43/0xd0 [ 122.466226] __kasan_slab_free+0x11a/0x170 [ 122.470442] kasan_slab_free+0xe/0x10 [ 122.474224] kfree+0xd9/0x260 [ 122.477312] p9_free_req+0xb5/0x120 [ 122.480918] p9_client_rpc+0xa8e/0x1330 [ 122.484882] p9_client_create+0xca4/0x1537 [ 122.489114] v9fs_session_init+0x21a/0x1a80 [ 122.493428] v9fs_mount+0x7c/0x900 [ 122.496967] legacy_get_tree+0x131/0x460 [ 122.501028] vfs_get_tree+0x1cb/0x5c0 [ 122.504816] do_mount+0x6f2/0x1e20 [ 122.508362] ksys_mount+0x12d/0x140 [ 122.511999] __x64_sys_mount+0xbe/0x150 [ 122.515986] do_syscall_64+0x1b9/0x820 [ 122.519866] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 122.525046] [ 122.526659] The buggy address belongs to the object at ffff880199ed9480 [ 122.526659] which belongs to the cache kmalloc-16384 of size 16384 [ 122.539656] The buggy address is located 32 bytes inside of [ 122.539656] 16384-byte region [ffff880199ed9480, ffff880199edd480) [ 122.551604] The buggy address belongs to the page: [ 122.556519] page:ffffea000667b600 count:1 mapcount:0 mapping:ffff8801da802200 index:0x0 compound_mapcount: 0 [ 122.566561] flags: 0x2fffc0000010200(slab|head) [ 122.571226] raw: 02fffc0000010200 ffffea000668a608 ffffea0006662a08 ffff8801da802200 [ 122.579097] raw: 0000000000000000 ffff880199ed9480 0000000100000001 0000000000000000 [ 122.586975] page dumped because: kasan: bad access detected [ 122.592660] [ 122.594263] Memory state around the buggy address: [ 122.599178] ffff880199ed9380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 122.606517] ffff880199ed9400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 122.613857] >ffff880199ed9480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 122.621205] ^ [ 122.625599] ffff880199ed9500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 122.632938] ffff880199ed9580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 122.640277] ================================================================== [ 122.648826] Kernel panic - not syncing: panic_on_warn set ... [ 122.648826] [ 122.656335] CPU: 0 PID: 5 Comm: kworker/0:0 Tainted: G B 4.18.0-rc5-next-20180720+ #12 [ 122.665692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 122.675052] Workqueue: events p9_write_work [ 122.679359] Call Trace: [ 122.681946] dump_stack+0x1c9/0x2b4 [ 122.685570] ? dump_stack_print_info.cold.2+0x52/0x52 [ 122.690750] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 122.695493] panic+0x238/0x4e7 [ 122.698704] ? add_taint.cold.5+0x16/0x16 [ 122.702857] ? do_raw_spin_unlock+0xa7/0x2f0 [ 122.707434] ? do_raw_spin_unlock+0xa7/0x2f0 [ 122.711839] ? _copy_from_iter+0x9ea/0x1090 [ 122.716155] kasan_end_report+0x47/0x4f [ 122.720118] kasan_report.cold.7+0x76/0x30d [ 122.724427] check_memory_region+0x13e/0x1b0 [ 122.728831] memcpy+0x23/0x50 [ 122.731929] _copy_from_iter+0x9ea/0x1090 [ 122.736074] ? schedule+0xfb/0x450 [ 122.739607] ? __schedule+0x1ea0/0x1ea0 [ 122.743578] ? _copy_from_iter_nocache+0x1050/0x1050 [ 122.748662] ? insert_work+0x375/0x4f0 [ 122.752543] ? __queue_work+0x688/0x1410 [ 122.756588] copy_page_from_iter+0x576/0x890 [ 122.760986] ? mutex_lock_nested+0x16/0x20 [ 122.765226] ? pipe_wait+0x1ff/0x2c0 [ 122.768921] ? _copy_from_iter+0x1090/0x1090 [ 122.773322] pipe_write+0x235/0xeb0 [ 122.776944] __vfs_write+0x6af/0x9d0 [ 122.780642] ? kernel_read+0x120/0x120 [ 122.784519] ? lock_acquire+0x1e4/0x540 [ 122.788483] ? p9_poll_workfn+0x4cb/0x6d0 [ 122.792623] ? lock_acquire+0x1e4/0x540 [ 122.796590] ? p9_write_work+0x554/0xd50 [ 122.800634] ? rw_verify_area+0x118/0x360 [ 122.804766] vfs_write+0x1fc/0x560 [ 122.808305] kernel_write+0xab/0x120 [ 122.812029] p9_write_work+0x6f1/0xd50 [ 122.815904] ? p9_fd_create_tcp+0x8a0/0x8a0 [ 122.820225] ? lock_acquire+0x1e4/0x540 [ 122.824193] ? process_one_work+0xb9b/0x1ba0 [ 122.828622] ? kasan_check_read+0x11/0x20 [ 122.832761] ? lock_release+0xa30/0xa30 [ 122.836716] ? kasan_check_read+0x11/0x20 [ 122.840932] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 122.845510] ? read_word_at_a_time+0x20/0x20 [ 122.849900] ? do_raw_spin_lock+0xc1/0x200 [ 122.854117] process_one_work+0xc73/0x1ba0 [ 122.858336] ? trace_hardirqs_on+0x10/0x10 [ 122.862556] ? pwq_dec_nr_in_flight+0x4a0/0x4a0 [ 122.867208] ? lock_repin_lock+0x430/0x430 [ 122.871432] ? __sched_text_start+0x8/0x8 [ 122.875568] ? lock_acquire+0x1e4/0x540 [ 122.879536] ? __wake_up_common_lock+0x1d0/0x330 [ 122.884276] ? lock_downgrade+0x8f0/0x8f0 [ 122.888420] ? kasan_check_read+0x11/0x20 [ 122.892563] ? kasan_check_write+0x14/0x20 [ 122.896801] ? lock_acquire+0x1e4/0x540 [ 122.900777] ? worker_thread+0x3dc/0x13c0 [ 122.904910] ? lock_downgrade+0x8f0/0x8f0 [ 122.909053] ? lock_release+0xa30/0xa30 [ 122.913015] ? kasan_check_read+0x11/0x20 [ 122.917160] ? do_raw_spin_unlock+0xa7/0x2f0 [ 122.921562] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 122.926391] ? kasan_check_write+0x14/0x20 [ 122.930619] ? do_raw_spin_lock+0xc1/0x200 [ 122.934840] worker_thread+0x189/0x13c0 [ 122.938810] ? process_one_work+0x1ba0/0x1ba0 [ 122.943292] ? graph_lock+0x170/0x170 [ 122.947080] ? graph_lock+0x170/0x170 [ 122.950871] ? find_held_lock+0x36/0x1c0 [ 122.954916] ? find_held_lock+0x36/0x1c0 [ 122.958975] ? kasan_check_read+0x11/0x20 [ 122.963115] ? do_raw_spin_unlock+0xa7/0x2f0 [ 122.967518] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 122.972619] ? __kthread_parkme+0x58/0x1b0 [ 122.976838] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 122.981838] ? trace_hardirqs_on+0xd/0x10 [ 122.985982] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 122.991520] ? __kthread_parkme+0x106/0x1b0 [ 122.995833] kthread+0x345/0x410 [ 122.999193] ? process_one_work+0x1ba0/0x1ba0 [ 123.003682] ? kthread_bind+0x40/0x40 [ 123.007484] ret_from_fork+0x3a/0x50 [ 123.011767] Dumping ftrace buffer: [ 123.015315] (ftrace buffer empty) [ 123.019004] Kernel Offset: disabled [ 123.022621] Rebooting in 86400 seconds..