[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 31.424501] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 33.623673] random: sshd: uninitialized urandom read (32 bytes read) [ 33.939789] random: sshd: uninitialized urandom read (32 bytes read) [ 35.349434] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.14' (ECDSA) to the list of known hosts. [ 40.909416] random: sshd: uninitialized urandom read (32 bytes read) 2018/07/02 16:39:12 fuzzer started [ 42.446158] random: cc1: uninitialized urandom read (8 bytes read) 2018/07/02 16:39:14 dialing manager at 10.128.0.26:36811 2018/07/02 16:39:18 syscalls: 1518 2018/07/02 16:39:18 code coverage: enabled 2018/07/02 16:39:18 comparison tracing: ioctl(KCOV_TRACE_CMP) failed: errno 524 2018/07/02 16:39:18 setuid sandbox: enabled 2018/07/02 16:39:18 namespace sandbox: enabled 2018/07/02 16:39:18 fault injection: enabled 2018/07/02 16:39:18 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/07/02 16:39:18 net packed injection: enabled [ 49.075436] random: crng init done 16:40:36 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") get_mempolicy(&(0x7f0000000080), &(0x7f0000000100), 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x0) 16:40:36 executing program 1: r0 = socket(0xa, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x3c1, 0x1, 0x8, [0x20000600], 0x0, &(0x7f0000000140), &(0x7f0000000600)=ANY=[@ANYPTR=&(0x7f00000002c0)=ANY=[]]}, 0x80) 16:40:36 executing program 4: r0 = socket(0xa, 0x6, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc00455d0, &(0x7f0000000180)) 16:40:36 executing program 7: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$vnet(r0, &(0x7f0000000280)={0x1, {&(0x7f0000000000)=""/29, 0x1d, &(0x7f0000000180)=""/242}}, 0x68) 16:40:36 executing program 5: r0 = socket(0xa, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000440)=@nat={'nat\x00', 0x19, 0x1, 0x1e0, [0x20000c00, 0x0, 0x0, 0x20000c30, 0x20000c60], 0x0, &(0x7f00000004c0), &(0x7f0000000c00)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x9, 0x0, 0x0, 'dummy0\x00', 'bpq0\x00', 'team0\x00', 'syz_tun\x00', @random="31b508d91ff4", [], @link_local={0x1, 0x80, 0xc2}, [], 0xe0, 0x118, 0x150, [@rateest={'rateest\x00', 0x48, {{'ip6_vti0\x00', 'bond_slave_1\x00', 0x2a, 0x3}}}]}, [@snat={'snat\x00', 0x10, {{@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}}}]}, @snat={'snat\x00', 0x10, {{@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}}}}]}]}, 0x258) 16:40:36 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') fchdir(r0) syz_fuseblk_mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./0-/e0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 16:40:36 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00') preadv(r2, &(0x7f0000331000)=[{&(0x7f0000723f20)=""/127, 0x7f}], 0x1, 0x102) 16:40:36 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv6_delroute={0x28, 0x19, 0x111, 0x0, 0x0, {0xa}, [@RTA_PRIORITY={0x8, 0x6}, @RTA_METRICS={0x4, 0x8}]}, 0x28}, 0x1}, 0x0) [ 125.937795] IPVS: ftp: loaded support on port[0] = 21 [ 125.962352] IPVS: ftp: loaded support on port[0] = 21 [ 126.056053] IPVS: ftp: loaded support on port[0] = 21 [ 126.058579] IPVS: ftp: loaded support on port[0] = 21 [ 126.069003] IPVS: ftp: loaded support on port[0] = 21 [ 126.086170] IPVS: ftp: loaded support on port[0] = 21 [ 126.099110] IPVS: ftp: loaded support on port[0] = 21 [ 126.137720] IPVS: ftp: loaded support on port[0] = 21 [ 127.965362] ip (4665) used greatest stack depth: 54536 bytes left [ 128.158989] ip (4679) used greatest stack depth: 54424 bytes left [ 129.377523] ip (4765) used greatest stack depth: 54328 bytes left [ 129.776287] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.782768] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.804359] device bridge_slave_0 entered promiscuous mode [ 129.905808] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.912284] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.975265] device bridge_slave_0 entered promiscuous mode [ 130.004157] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.010659] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.051223] device bridge_slave_1 entered promiscuous mode [ 130.076657] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.083184] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.097579] device bridge_slave_0 entered promiscuous mode [ 130.110132] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.116664] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.152894] device bridge_slave_0 entered promiscuous mode [ 130.172962] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.179496] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.196631] device bridge_slave_0 entered promiscuous mode [ 130.214194] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.220649] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.234061] device bridge_slave_0 entered promiscuous mode [ 130.242884] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.249384] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.271612] device bridge_slave_0 entered promiscuous mode [ 130.287410] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 130.298103] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.304559] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.340784] device bridge_slave_1 entered promiscuous mode [ 130.357628] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.364103] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.377374] device bridge_slave_1 entered promiscuous mode [ 130.384195] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.390633] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.417095] device bridge_slave_0 entered promiscuous mode [ 130.441886] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.448436] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.479337] device bridge_slave_1 entered promiscuous mode [ 130.493461] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.499960] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.510080] device bridge_slave_1 entered promiscuous mode [ 130.518195] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.524673] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.533062] device bridge_slave_1 entered promiscuous mode [ 130.540784] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 130.554719] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 130.578005] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 130.585668] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.592158] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.632325] device bridge_slave_1 entered promiscuous mode [ 130.655360] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.661845] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.704103] device bridge_slave_1 entered promiscuous mode [ 130.732911] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 130.754653] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 130.768958] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 130.825605] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 130.842505] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 130.850958] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 130.952341] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 130.976939] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 130.984393] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 130.996010] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 131.040747] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 131.212355] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 131.237585] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 131.527319] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 131.539369] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 131.598014] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 131.678778] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 131.734407] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 131.757684] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 131.795452] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 131.804266] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 131.811208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 131.827992] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 131.841379] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 131.934596] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 131.970260] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 131.990299] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 132.015351] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 132.022329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 132.050820] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 132.081735] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 132.090829] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 132.097916] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 132.140291] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 132.147328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 132.188809] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 132.195937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 132.255574] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 132.262607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 132.290160] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 132.299646] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 132.315709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 132.346353] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 132.356163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 132.395867] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 132.406128] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 132.413433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 132.447515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 132.491976] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 132.499353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 132.562896] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 132.570406] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 132.577311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 132.601908] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 132.678730] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 132.685717] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 132.703903] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 132.756652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 132.779686] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 132.786670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 132.893662] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 132.921777] team0: Port device team_slave_0 added [ 132.991478] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 133.027256] team0: Port device team_slave_0 added [ 133.180086] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 133.205433] team0: Port device team_slave_0 added [ 133.217248] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 133.239556] team0: Port device team_slave_1 added [ 133.264289] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 133.284900] team0: Port device team_slave_1 added [ 133.336046] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 133.358861] team0: Port device team_slave_0 added [ 133.385824] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 133.409899] team0: Port device team_slave_0 added [ 133.431242] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 133.462371] team0: Port device team_slave_0 added [ 133.478455] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 133.499669] team0: Port device team_slave_1 added [ 133.511463] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 133.522754] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 133.540096] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 133.575850] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 133.582876] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 133.595953] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 133.622976] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 133.637304] team0: Port device team_slave_1 added [ 133.644231] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 133.657233] team0: Port device team_slave_1 added [ 133.662978] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 133.682777] team0: Port device team_slave_0 added [ 133.689531] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 133.707164] team0: Port device team_slave_0 added [ 133.732970] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 133.740757] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 133.768755] team0: Port device team_slave_1 added [ 133.786884] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 133.794208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 133.811951] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 133.845957] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 133.873256] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 133.896630] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 133.906403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 133.921685] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 133.936256] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 133.947872] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 133.967564] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 133.977969] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 133.994876] team0: Port device team_slave_1 added [ 134.014773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 134.031854] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 134.066495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 134.090258] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 134.106911] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 134.123512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 134.139998] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 134.147993] team0: Port device team_slave_1 added [ 134.157266] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 134.180379] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 134.188166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 134.218726] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 134.233741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 134.248413] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 134.269451] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 134.278955] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 134.289001] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 134.299670] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 134.310833] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 134.317721] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 134.344288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 134.373934] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 134.403980] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 134.428908] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 134.445980] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 134.454783] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 134.464770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 134.474252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 134.483087] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 134.504648] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 134.519725] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 134.528549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 134.537690] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 134.549264] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 134.558502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 134.569856] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 134.578754] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 134.591798] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 134.602426] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 134.611197] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 134.620524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 134.645526] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 134.669115] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 134.701401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 134.733214] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 134.763112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 134.777806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 134.786246] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 134.793927] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 134.802291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 134.811363] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 134.818972] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 134.828405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 134.867271] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 134.876239] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 134.884901] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 134.893674] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 134.901594] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 134.951440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 134.984710] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 135.010528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 135.039752] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 135.058192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 135.074940] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 135.083130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 135.091439] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 135.098791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 135.108361] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 135.144003] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 135.152912] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 135.166097] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 135.204436] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 135.212465] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 135.237982] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 135.286713] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 135.297531] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 135.346664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 135.548176] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 135.555822] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 135.573256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 137.296679] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.303135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.309894] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.316299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.339220] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 137.348400] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 137.383129] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.389587] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.396362] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.402790] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.471012] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 137.686612] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.693087] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.699898] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.706319] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.721740] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 137.756266] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.762730] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.769484] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.775895] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.809063] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 137.821896] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.828319] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.835175] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.841588] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.894575] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 138.127171] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.133633] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.140419] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.146835] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.155777] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 138.165756] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.172190] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.178957] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.185371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.222073] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 138.228907] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.235328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.242070] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.248477] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.276377] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 138.399489] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 138.410468] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 138.448407] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 138.483721] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 138.495862] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 138.509733] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 138.518888] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 144.437767] ip (5751) used greatest stack depth: 54120 bytes left [ 147.069358] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.359678] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.537362] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.654442] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.789568] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.823574] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.901114] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 147.916889] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.157424] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.269727] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 148.406811] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 148.484305] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 148.721298] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 148.744778] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 148.871982] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 148.878317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 148.886813] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 148.946772] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 149.007480] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 149.224190] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 149.230763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 149.242892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 149.394543] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 149.402086] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 149.415826] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 149.439448] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 149.452197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 149.464904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 149.704910] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 149.711179] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 149.728577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 149.784465] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 149.792788] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 149.810922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 149.861742] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.991195] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 149.998136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 150.012109] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 150.052289] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 150.060535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 150.097371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 150.152812] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.383705] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.409060] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.678650] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.733379] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.949651] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.011643] 8021q: adding VLAN 0 to HW filter on device team0 16:41:06 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") get_mempolicy(&(0x7f0000000080), &(0x7f0000000100), 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x0) [ 155.640292] kernel msg: ebtables bug: please report to author: EBT_ENTRY_OR_ENTRIES shouldn't be set in distinguisher 16:41:06 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket(0xa, 0x5, 0x0) getsockopt$inet6_int(r1, 0x29, 0x30, &(0x7f00000000c0), &(0x7f0000013000)=0xffffffffffffff27) close(r0) 16:41:06 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") get_mempolicy(&(0x7f0000000080), &(0x7f0000000100), 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x0) 16:41:07 executing program 7: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") fcntl$setstatus(r0, 0x4, 0x6000) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r0) 16:41:07 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") get_mempolicy(&(0x7f0000000080), &(0x7f0000000100), 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x0) 16:41:07 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)="2e2f6367726f75702e6370750086298d", 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000003c0)='cpuset.memory_spread_page\x00', 0x2, 0x0) r2 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f00000000c0)) 16:41:07 executing program 7: syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x2, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x2, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(0x0, 0x1000000000016) dup2(r1, r0) 16:41:07 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x1, 0x5, 0x9}, 0x14) r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x5, 0x4, 0x100000001, 0x0, r0}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r1, &(0x7f0000000000), &(0x7f0000000140)=""/129}, 0x18) 16:41:07 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003c1000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000300)}}, {{&(0x7f00000003c0)=@l2={0x1f}, 0x80, &(0x7f0000000340), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="d8000000000000001901000009000000366576a16d34a5cbbcc2321cb365f8600916fb02f85bfadc90cd6dfdd007d3ff3fb797864ba6b08b847f68cbfe5e581b7b95108e3704f418b143d6b89cee8fbf61d464d35ed598710500b3ac4cf28deae60489ebca7289e3af7c1acb5aafd116ce3a09d48ca7dabf92e1ff6f6b8e74570892be3a24e4639be1c80f61ccc591b4881c99083a22c361b11aa571f205d1dc881b7f452c22f4544f35604d628077551b8dc8417c24e47cda07287186967ffff9ffc812917a580818579a75518f6da54c152d51217721080000000000000000000040008df20000"], 0xe8}}], 0x2, 0x0) 16:41:07 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$eventfd(r1, &(0x7f0000000100), 0xfffffffffffffeb0) 16:41:07 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x1, 0x5, 0x9}, 0x14) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xd, 0xb, 0x4, 0x100000001, 0x0, r0}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r1, &(0x7f0000000000), &(0x7f0000000140)=""/129}, 0x18) 16:41:07 executing program 3: r0 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f0000000180)=0x10) 16:41:07 executing program 7: syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x2, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x2, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(0x0, 0x1000000000016) dup2(r1, r0) 16:41:07 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_ifreq(r0, 0x8932, &(0x7f0000000000)={"623a6964622630000000f5ff004000", @ifru_data=&(0x7f0000000080)="c18735c4b2c4ca6f335f84e2d139c3822fc8c711372baf1025073f3a44d0ca75"}) 16:41:07 executing program 6: r0 = socket(0x40000000015, 0x5, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x0, 0x0, 0x0, 0x0, {0xc}}, 0x14}, 0x1}, 0x4000000) 16:41:07 executing program 5: socket$inet6(0xa, 0x10000000000000, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000140), 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x0) 16:41:07 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x0, 0x0) read(r2, &(0x7f0000000180)=""/4096, 0x1000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000f2cff4)={0x40002014}) ppoll(&(0x7f0000000080)=[{r1}], 0x1, &(0x7f0000000100), &(0x7f0000000140), 0x8) 16:41:07 executing program 1: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='net/anycast6\x00') setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000080)={0x303, 0x33}, 0x4) 16:41:08 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000773fc8)={&(0x7f0000450ff4)={0x10}, 0xc, &(0x7f0000ad0ff0)={&(0x7f0000b2b000)=@updsa={0xf8, 0x1a, 0x401, 0x0, 0x0, {{@in6, @in6=@mcast1={0xff, 0x1, [], 0x1}}, {@in6=@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x0, 0x3c}, @in=@multicast1=0xe0000001, {}, {}, {}, 0x0, 0x0, 0xa}, [@tfcpad={0x8, 0x16}]}, 0xf8}, 0x1}, 0x0) 16:41:08 executing program 3: r0 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f0000000180)=0x10) 16:41:08 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/28, 0x33e) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000000c0)={0x27, @time}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f00000001c0)={{0x80}, 'port1\x00'}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) 16:41:08 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002680)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000002640)={&(0x7f0000000080)=ANY=[@ANYBLOB="04010000180001010000000000000000fe8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00150000000000000000007267cffa7c8ec56dacdcb6"], 0x3}, 0x1}, 0x0) 16:41:08 executing program 4: r0 = epoll_create1(0x0) fcntl$lock(r0, 0x25, &(0x7f0000000080)) fcntl$lock(r0, 0x6, &(0x7f0000000040)={0x1}) 16:41:08 executing program 7: syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x2, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x2, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(0x0, 0x1000000000016) dup2(r1, r0) 16:41:08 executing program 2: r0 = epoll_create1(0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x2000, 0x0) dup3(r0, r1, 0x0) 16:41:08 executing program 5: pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = accept(r2, &(0x7f00000001c0)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @dev}}}, &(0x7f0000000040)=0xffffffff0000001c) sendto$inet6(r3, &(0x7f0000000280), 0xfffffdf7, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) write$binfmt_elf32(r4, &(0x7f0000000600)=ANY=[@ANYBLOB='1'], 0x1) shutdown(r4, 0x2) dup2(r0, r1) 16:41:08 executing program 4: r0 = socket$inet6(0xa, 0x400000001, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) r2 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$get_persistent(0x16, r1, r2) 16:41:08 executing program 3: r0 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f0000000180)=0x10) 16:41:08 executing program 6: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000000c0)='+$GPL{\'md5sum/selinuxposix_acl_accessproc{\'\x00') 16:41:08 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0xb) 16:41:08 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f00000000c0)={@mcast2={0xff, 0x2, [], 0x1}}, 0x14) 16:41:08 executing program 7: syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x2, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x2, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(0x0, 0x1000000000016) dup2(r1, r0) 16:41:08 executing program 6: socketpair$unix(0x1, 0x80005, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000980)={&(0x7f0000000540)=@nl=@proc={0x10}, 0x80, &(0x7f0000000700)}, 0x15) sendmsg(r0, &(0x7f0000000480)={&(0x7f0000000280)=@pppoe={0x18, 0x0, {0x0, @random="33f068bc93ed", 'veth0\x00'}}, 0x80, &(0x7f0000000440)}, 0x48881) 16:41:08 executing program 3: r0 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f0000000180)=0x10) 16:41:08 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) r1 = socket(0x10, 0x100000802, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8923, &(0x7f0000000080)={"6966623000f7ff010000000000000076", 0x2502}) 16:41:08 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002b80)=[{{&(0x7f0000000540)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80, &(0x7f00000009c0), 0x0, &(0x7f0000000080)=""/88, 0x58}}, {{&(0x7f0000000ac0)=@pppoe={0x0, 0x0, {0x0, @local}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000b40)=""/254, 0xfe}, {&(0x7f0000000cc0)=""/230, 0xe6}, {&(0x7f0000000dc0)=""/40, 0x28}, {&(0x7f0000003840)=""/4096, 0x1000}, {&(0x7f0000000e80)=""/111, 0x6f}], 0x5, &(0x7f0000000f00)=""/19, 0x13}}, {{&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000002ac0), 0x0, &(0x7f0000002b40)=""/52, 0x34}}], 0x3, 0x0, &(0x7f0000002cc0)={0x77359400}) clock_gettime(0x0, &(0x7f0000002b00)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000002d00)=[{{&(0x7f0000000200)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @multicast2}}}, 0x80, &(0x7f0000000880), 0x0, &(0x7f0000000900)=""/168, 0xa8}}, {{0x0, 0x0, &(0x7f0000001180), 0x0, &(0x7f0000001200)=""/216, 0xd8}}, {{&(0x7f0000001300)=@in6={0x0, 0x0, 0x0, @loopback}, 0x80, &(0x7f00000014c0), 0x0, &(0x7f0000001500)=""/164, 0xa4}}, {{&(0x7f00000023c0)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @rand_addr}}}, 0x80, &(0x7f0000002300), 0x0, &(0x7f0000002440)=""/254, 0xfe}}, {{0x0, 0x0, &(0x7f0000002740), 0x0, &(0x7f0000002780)=""/70, 0x46}}, {{0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000006840)=""/4096, 0x1000}, {&(0x7f0000007840)=""/4096, 0x1000}], 0x2}}], 0x6, 0x0, &(0x7f0000002c80)={0x0, r2+10000000}) 16:41:09 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000080), 0x0, 0x0) 16:41:09 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") sendmsg$nl_route(r0, &(0x7f00000003c0)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@ipv6_getroute={0x24, 0x1a, 0x401, 0x0, 0x0, {0xa}, [@RTA_UID={0x8, 0x19}]}, 0x24}, 0x1}, 0x0) 16:41:09 executing program 7: pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') lchown(&(0x7f0000000040)='./control\x00', 0x0, 0x0) dup2(r0, r1) 16:41:09 executing program 6: r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000fc4ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) bind$inet(r0, &(0x7f00003cdff0)={0x2}, 0x10) 16:41:09 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000080)=0x68) close(r2) close(r1) [ 158.154263] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 16:41:09 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet_IP_XFRM_POLICY(r0, 0x10e, 0xb, &(0x7f000077d000)={{{@in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @in6=@ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}}, {{@in=@multicast1=0xe0000001}, 0x0, @in6=@loopback={0x0, 0x1}}}, 0xe8) sendmsg$nl_xfrm(r0, &(0x7f0000c4afc8)={&(0x7f0000d9d000)={0x10}, 0xc, &(0x7f0000f22000)={&(0x7f0000f22d40)=@getae={0x40, 0x1f, 0x3fe, 0x0, 0x0, {{@in6=@ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}}, @in=@dev={0xac, 0x14}}}, 0xfd47}, 0x1}, 0x0) 16:41:09 executing program 4: r0 = memfd_create(&(0x7f0000000140)='#em1#+\x00', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x80000000004, 0x11, r0, 0x0) r1 = socket(0xa, 0x3, 0x39) sendto$unix(r1, &(0x7f0000000cc0), 0xe0, 0x0, &(0x7f0000000d00)=@abs, 0x6e) recvmsg$kcm(r1, &(0x7f0000000740)={&(0x7f0000000340)=@vsock={0x0, 0x0, 0x0, @my}, 0x80, &(0x7f0000000440), 0x0, &(0x7f0000000940)=""/242, 0xf2}, 0x0) ioctl$sock_bt(r1, 0x8907, &(0x7f0000000040)) 16:41:09 executing program 1: r0 = socket(0x1001000000010, 0x802, 0x0) ioctl$sock_ifreq(r0, 0x8937, &(0x7f0000009180)={'sit0\x00', @ifru_addrs=@hci={0x1f}}) 16:41:09 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00\x00\x00\x00`\x00', 0x20, 0x2, 0x5b0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001040], 0x0, &(0x7f0000000080), &(0x7f0000001040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'veth0_to_team\x00', 'ipddp0\x00', 'bridge_slave_0\x00', "7465616d5f73ff5e76655f30004000", @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @link_local={0x1, 0x80, 0xc2}, [], 0x6f, 0x1e8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00'}}}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x0, 0x0, 'system_u:object_r:usb_device_t:s0\x00'}}}]}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0x0, 0x1, [{{{0x11, 0x0, 0x0, 'bond_slave_0\x00', 'veth1_to_bridge\x00', 'syz_tun\x00', 'eql\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xa8, 0x1d8, 0x308, [@mac={'mac\x00', 0x10}]}, [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x0, 0x0, 'system_u:object_r:var_spool_t:s0\x00'}}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x0, 0x0, 'system_u:object_r:bsdpty_device_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2}]}, 0x628) 16:41:09 executing program 0: r0 = epoll_create(0x273) r1 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"6966623000faffffffffffffff00", 0x6002}) ppoll(&(0x7f00000001c0)=[{r1}], 0x1, &(0x7f0000000200)={0x77359400}, &(0x7f0000000240), 0x8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)) 16:41:09 executing program 6: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x20001, 0x0) [ 158.385064] kernel msg: ebtables bug: please report to author: entry offsets not in right order 16:41:09 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x28021) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$evdev(r0, &(0x7f0000000180)=[{{0x0, 0x2710}, 0x4, 0x4}, {{0x0, 0x7530}}], 0x30) 16:41:09 executing program 2: r0 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, &(0x7f0000000100)='4', 0x1, 0xfffffffffffffffc) keyctl$search(0xa, r0, &(0x7f0000000180)='id_resolver\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, 0x0) 16:41:09 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f00009f8000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f00005f7ffb)='nfs4\x00', 0x0, &(0x7f000000a000)) 16:41:09 executing program 6: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x20001, 0x0) 16:41:09 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x800000000000001, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x14, 0x42, 0x105, 0x0, 0x0, {0xa}}, 0x14}, 0x1}, 0x0) 16:41:09 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0x3) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000040)="0700e1311f16f477671070") setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000040), 0x4) 16:41:09 executing program 2: futex(&(0x7f0000452000), 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0x989680}, &(0x7f0000196000), 0x0) 16:41:10 executing program 7: pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') lchown(&(0x7f0000000040)='./control\x00', 0x0, 0x0) dup2(r0, r1) 16:41:10 executing program 5: r0 = socket(0xa, 0x8000000000005, 0x0) r1 = epoll_create(0x100000001) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000240)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)={0xa0000006}) epoll_wait(r1, &(0x7f0000000180)=[{}], 0x1, 0x0) 16:41:10 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f00009f8000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f00005f7ffb)='nfs4\x00', 0x0, &(0x7f000000a000)) 16:41:10 executing program 6: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x20001, 0x0) 16:41:10 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$vnet(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vhost-net\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)) 16:41:10 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) remap_file_pages(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") remap_file_pages(&(0x7f0000007000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) [ 159.076981] mmap: syz-executor3 (6811) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.txt. 16:41:10 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f00009f8000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f00005f7ffb)='nfs4\x00', 0x0, &(0x7f000000a000)) 16:41:10 executing program 5: r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000440)=@broute={'broute\x00', 0x20, 0x2, 0x2b8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000080], 0x0, &(0x7f0000000040), &(0x7f0000000080)=ANY=[@ANYBLOB="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"]}, 0x330) 16:41:10 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000180)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000037c0)="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", 0x10ac}], 0x1, &(0x7f0000000200)=[@assoc={0x18, 0x117, 0x4, 0x5}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000001440)={&(0x7f0000000280)=@sco, 0x80, &(0x7f00000013c0)=[{&(0x7f0000000300)=""/171, 0xab}, {&(0x7f00000003c0)=""/4096, 0x1000}], 0x2, &(0x7f0000001400)=""/6, 0x6}, 0x0) 16:41:10 executing program 6: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x20001, 0x0) 16:41:10 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000040)="440d0c030000000302070000ec", 0xd) 16:41:10 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f00009f8000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f00005f7ffb)='nfs4\x00', 0x0, &(0x7f000000a000)) 16:41:10 executing program 0: r0 = epoll_create(0x273) r1 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"6966623000faffffffffffffff00", 0x6002}) ppoll(&(0x7f00000001c0)=[{r1}], 0x1, &(0x7f0000000200)={0x77359400}, &(0x7f0000000240), 0x8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)) 16:41:10 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000040)="440d0c030000000302070000ec", 0xd) 16:41:12 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0x3) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000040)="0700e1311f16f477671070") setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000040), 0x4) 16:41:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0xbb7f, 0x5a6b010000000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x11, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) listen(r0, 0x0) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) 16:41:12 executing program 5: io_setup(0x8f2, &(0x7f00000003c0)) 16:41:12 executing program 3: unshare(0x2000400) r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc0505510, &(0x7f0000000200)={0x0, 0x6}) 16:41:12 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000040)="440d0c030000000302070000ec", 0xd) 16:41:12 executing program 7: pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') lchown(&(0x7f0000000040)='./control\x00', 0x0, 0x0) dup2(r0, r1) 16:41:12 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) read(r1, &(0x7f0000000080)=""/19, 0xffffff5c) 16:41:12 executing program 0: r0 = epoll_create(0x273) r1 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"6966623000faffffffffffffff00", 0x6002}) ppoll(&(0x7f00000001c0)=[{r1}], 0x1, &(0x7f0000000200)={0x77359400}, &(0x7f0000000240), 0x8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)) 16:41:13 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000040)="440d0c030000000302070000ec", 0xd) 16:41:13 executing program 3: socketpair$unix(0x1, 0x40000000000003, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) close(r0) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) io_setup(0x8, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, r0}]) 16:41:13 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}, 0x1}, 0x0) 16:41:13 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0xbb7f, 0x5a6b010000000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x11, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) listen(r0, 0x0) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) 16:41:13 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="240000005a001f00ff03f4f9002304000a04f5fe07000100020100020800038001c9a800", 0x24) 16:41:13 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f00000000c0), &(0x7f0000000100)=0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000409004bddd9de91be10eebf890ee9a90f798858439ed5542407424a00e901d2e39c5a323094c57272bf04b3ac142203c6fd061b8f7a8f") fadvise64(r1, 0x0, 0x0, 0x5) 16:41:13 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000100)='$Z', 0x2, 0x404c080, &(0x7f0000000180)=@un=@abs, 0x80) sendto(r0, &(0x7f0000000200)='\x00\x00', 0x2, 0x0, &(0x7f0000000000)=@nl=@unspec, 0x80) [ 162.302492] netlink: 'syz-executor5': attribute type 1 has an invalid length. 16:41:13 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="240000005a001f00ff03f4f9002304000a04f5fe07000100020100020800038001c9a800", 0x24) [ 162.444349] netlink: 'syz-executor5': attribute type 1 has an invalid length. 16:41:16 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0x3) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000040)="0700e1311f16f477671070") setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000040), 0x4) 16:41:16 executing program 2: r0 = socket(0x1e, 0x4, 0x0) r1 = epoll_create(0x100000001) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x2414}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x4}) 16:41:16 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r0, &(0x7f0000000080), 0x0, 0x8080, &(0x7f0000319ff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) close(r0) 16:41:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0xbb7f, 0x5a6b010000000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x11, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) listen(r0, 0x0) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) 16:41:16 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="240000005a001f00ff03f4f9002304000a04f5fe07000100020100020800038001c9a800", 0x24) 16:41:16 executing program 7: pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') lchown(&(0x7f0000000040)='./control\x00', 0x0, 0x0) dup2(r0, r1) 16:41:16 executing program 0: r0 = epoll_create(0x273) r1 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"6966623000faffffffffffffff00", 0x6002}) ppoll(&(0x7f00000001c0)=[{r1}], 0x1, &(0x7f0000000200)={0x77359400}, &(0x7f0000000240), 0x8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)) 16:41:16 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) read(r1, &(0x7f0000000080)=""/19, 0xffffff5c) [ 165.079529] netlink: 'syz-executor5': attribute type 1 has an invalid length. 16:41:16 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) read(r1, &(0x7f0000000080)=""/19, 0xffffff5c) 16:41:16 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") bind$inet6(r0, &(0x7f0000c67000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x1000008000) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) write(r2, &(0x7f00000000c0), 0x101) r3 = accept4(r0, &(0x7f0000000000)=@in={0x0, 0x0, @local}, &(0x7f0000000080)=0x80, 0x0) recvfrom$unix(r3, &(0x7f0000000140)=""/131, 0x83, 0x0, &(0x7f0000000200)=@abs, 0x700000) 16:41:16 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="240000005a001f00ff03f4f9002304000a04f5fe07000100020100020800038001c9a800", 0x24) 16:41:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0xbb7f, 0x5a6b010000000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x11, [@typed={0x8, 0x0, @fd}]}]}, 0x20}, 0x1}, 0x0) listen(r0, 0x0) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) [ 165.317890] netlink: 'syz-executor5': attribute type 1 has an invalid length. 16:41:16 executing program 5: r0 = socket$inet(0x10, 0x2, 0x4) sendmsg(r0, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005000)="10000000150061dd18c84c16290c729b", 0x10}], 0x1, &(0x7f0000001f88)}, 0x0) 16:41:16 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) shutdown(r0, 0x1) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='stat\x00') sendfile(r0, r1, &(0x7f0000000000), 0x10000) 16:41:16 executing program 5: open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mremap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000005000/0x1000)=nil) mremap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000000a000/0x1000)=nil) 16:41:16 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f00000001c0)=0x4, 0xda5f2bf85104176e) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x178, 0x4) sendto$inet6(r1, &(0x7f0000000280), 0x0, 0x0, &(0x7f0000809000)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x1c) recvfrom$inet6(r1, &(0x7f0000000080)=""/49, 0x31, 0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x709000) [ 166.090122] ================================================================== [ 166.097533] BUG: KMSAN: kernel-infoleak in copy_from_read_buf+0x311/0x890 [ 166.104439] CPU: 0 PID: 6974 Comm: syz-executor3 Not tainted 4.17.0+ #16 [ 166.111249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 166.120586] Call Trace: [ 166.123173] dump_stack+0x185/0x1d0 [ 166.126793] kmsan_report+0x188/0x2a0 [ 166.130582] kmsan_internal_check_memory+0x17e/0x1f0 [ 166.135676] kmsan_copy_to_user+0x7a/0x160 [ 166.139906] copy_from_read_buf+0x311/0x890 [ 166.144209] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 166.149559] n_tty_read+0x178f/0x2f70 [ 166.153369] ? wait_woken+0x2e0/0x2e0 [ 166.157163] ? rcu_all_qs+0x32/0x1f0 [ 166.160872] ? _cond_resched+0x3c/0xd0 [ 166.164739] ? ldsem_down_read+0x95/0xad0 [ 166.168877] ? tty_ldisc_ref_wait+0x97/0xf0 [ 166.173183] ? n_tty_flush_buffer+0x430/0x430 [ 166.177665] tty_read+0x26e/0x6c0 [ 166.181112] ? release_one_tty+0x5f0/0x5f0 [ 166.185330] __vfs_read+0x1b2/0x9d0 [ 166.188941] vfs_read+0x36c/0x6b0 [ 166.192378] __x64_sys_read+0x1bf/0x3e0 [ 166.196335] ? ksys_read+0x360/0x360 [ 166.200037] do_syscall_64+0x15b/0x230 [ 166.203920] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 166.209108] RIP: 0033:0x455ab9 [ 166.212286] RSP: 002b:00007ff2a0b11c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 166.219976] RAX: ffffffffffffffda RBX: 00007ff2a0b126d4 RCX: 0000000000455ab9 [ 166.227238] RDX: 00000000ffffff5c RSI: 0000000020000080 RDI: 0000000000000014 [ 166.234486] RBP: 000000000072bf48 R08: 0000000000000000 R09: 0000000000000000 [ 166.241732] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 166.248989] R13: 00000000004bfe4c R14: 00000000004d0378 R15: 0000000000000001 [ 166.256247] [ 166.257857] Uninit was created at: [ 166.261384] kmsan_alloc_meta_for_pages+0x166/0x3b0 [ 166.266390] kmsan_alloc_page+0x82/0xe0 [ 166.270354] __alloc_pages_nodemask+0xf7b/0x5cc0 [ 166.275089] alloc_pages_current+0x6b1/0x970 [ 166.279476] __vmalloc_node_range+0x8bf/0x1170 [ 166.284042] vmalloc+0xd8/0xf0 [ 166.287221] n_tty_open+0x4a/0x490 [ 166.290738] tty_ldisc_setup+0x375/0x670 [ 166.294777] tty_init_dev+0xb82/0x1020 [ 166.298642] ptmx_open+0x2bb/0x7c0 [ 166.302161] chrdev_open+0xc25/0xd90 [ 166.305854] do_dentry_open+0xccc/0x1440 [ 166.309901] vfs_open+0x1b6/0x2f0 [ 166.313348] path_openat+0x4771/0x6640 [ 166.317214] do_filp_open+0x261/0x640 [ 166.320997] do_sys_open+0x624/0x960 [ 166.324694] __x64_sys_openat+0x129/0x170 [ 166.328822] do_syscall_64+0x15b/0x230 [ 166.332702] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 166.337873] [ 166.339476] Byte 4094 of 4095 is uninitialized [ 166.344039] Memory access starts at ffffc900124e005e [ 166.349122] ================================================================== [ 166.356468] Disabling lock debugging due to kernel taint [ 166.361896] Kernel panic - not syncing: panic_on_warn set ... [ 166.361896] [ 166.369244] CPU: 0 PID: 6974 Comm: syz-executor3 Tainted: G B 4.17.0+ #16 [ 166.377450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 166.386794] Call Trace: [ 166.389366] dump_stack+0x185/0x1d0 [ 166.393000] panic+0x3d0/0x990 [ 166.396188] kmsan_report+0x29e/0x2a0 [ 166.399970] kmsan_internal_check_memory+0x17e/0x1f0 [ 166.405062] kmsan_copy_to_user+0x7a/0x160 [ 166.409284] copy_from_read_buf+0x311/0x890 [ 166.413584] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 166.418932] n_tty_read+0x178f/0x2f70 [ 166.422715] ? wait_woken+0x2e0/0x2e0 [ 166.426507] ? rcu_all_qs+0x32/0x1f0 [ 166.430213] ? _cond_resched+0x3c/0xd0 [ 166.434089] ? ldsem_down_read+0x95/0xad0 [ 166.438224] ? tty_ldisc_ref_wait+0x97/0xf0 [ 166.442537] ? n_tty_flush_buffer+0x430/0x430 [ 166.447022] tty_read+0x26e/0x6c0 [ 166.450470] ? release_one_tty+0x5f0/0x5f0 [ 166.454687] __vfs_read+0x1b2/0x9d0 [ 166.458298] vfs_read+0x36c/0x6b0 [ 166.461734] __x64_sys_read+0x1bf/0x3e0 [ 166.465690] ? ksys_read+0x360/0x360 [ 166.469399] do_syscall_64+0x15b/0x230 [ 166.473273] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 166.478453] RIP: 0033:0x455ab9 [ 166.481620] RSP: 002b:00007ff2a0b11c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 166.489316] RAX: ffffffffffffffda RBX: 00007ff2a0b126d4 RCX: 0000000000455ab9 [ 166.496564] RDX: 00000000ffffff5c RSI: 0000000020000080 RDI: 0000000000000014 [ 166.503817] RBP: 000000000072bf48 R08: 0000000000000000 R09: 0000000000000000 [ 166.511080] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 166.518343] R13: 00000000004bfe4c R14: 00000000004d0378 R15: 0000000000000001 [ 166.526109] Dumping ftrace buffer: [ 166.529644] (ftrace buffer empty) [ 166.533331] Kernel Offset: disabled [ 166.536936] Rebooting in 86400 seconds..