[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 39.482477] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 42.133677] random: sshd: uninitialized urandom read (32 bytes read) [ 42.432739] random: sshd: uninitialized urandom read (32 bytes read) [ 43.532810] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.35' (ECDSA) to the list of known hosts. [ 49.206456] random: sshd: uninitialized urandom read (32 bytes read) 2018/08/27 22:46:06 fuzzer started [ 50.588738] random: cc1: uninitialized urandom read (8 bytes read) 2018/08/27 22:46:09 dialing manager at 10.128.0.26:33873 2018/08/27 22:46:11 syscalls: 1 2018/08/27 22:46:11 code coverage: enabled 2018/08/27 22:46:11 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/08/27 22:46:11 setuid sandbox: enabled 2018/08/27 22:46:11 namespace sandbox: enabled 2018/08/27 22:46:11 fault injection: enabled 2018/08/27 22:46:11 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/08/27 22:46:11 net packed injection: enabled 2018/08/27 22:46:11 net device setup: enabled [ 56.382997] random: crng init done 22:48:02 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c2d0252926285717070") r1 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000080)=ANY=[@ANYBLOB="bc00bef5000000"], 0x1) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) sendmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000c80)="162adfb9", 0x4}], 0x1}}], 0x1, 0x0) 22:48:02 executing program 1: r0 = socket$inet6(0xa, 0x10000000803, 0x8) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c2d0252926285717070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x0, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) 22:48:02 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x6e20, 0x0, @ipv4={[], [], @rand_addr}}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x19) 22:48:02 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x806, 0x0) connect$inet(r1, &(0x7f0000000040), 0x10) connect$inet(r1, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 22:48:02 executing program 2: r0 = socket$inet(0x10, 0x2, 0x4) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff095ffefd956fa283b724a6008c00000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) 22:48:02 executing program 4: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) 22:48:02 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000380)="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", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) getpgrp(0x0) socket$inet6(0xa, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000080)) readv(r0, &(0x7f00000015c0)=[{&(0x7f0000001500)=""/148, 0x94}], 0x1) ppoll(&(0x7f0000000200), 0x0, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280), 0x8) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x204f863e, 0x0, 0x2, 0x0, 0x0, 0x1}) sendfile(r0, r0, &(0x7f0000000100), 0x20000102000004) 22:48:02 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETSF(r2, 0x402c542d, &(0x7f0000000100)) [ 166.771769] IPVS: ftp: loaded support on port[0] = 21 [ 166.784987] IPVS: ftp: loaded support on port[0] = 21 [ 166.825670] IPVS: ftp: loaded support on port[0] = 21 [ 166.830512] IPVS: ftp: loaded support on port[0] = 21 [ 166.844139] IPVS: ftp: loaded support on port[0] = 21 [ 166.847633] IPVS: ftp: loaded support on port[0] = 21 [ 166.864345] IPVS: ftp: loaded support on port[0] = 21 [ 166.876219] IPVS: ftp: loaded support on port[0] = 21 [ 169.362688] ip (4708) used greatest stack depth: 53712 bytes left [ 171.127307] ip (4806) used greatest stack depth: 53688 bytes left [ 171.802520] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.809183] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.829288] device bridge_slave_0 entered promiscuous mode [ 171.874090] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.880643] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.931436] device bridge_slave_0 entered promiscuous mode [ 171.978153] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.984647] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.027169] device bridge_slave_0 entered promiscuous mode [ 172.045597] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.052117] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.070917] device bridge_slave_0 entered promiscuous mode [ 172.104837] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.111337] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.142574] device bridge_slave_0 entered promiscuous mode [ 172.158908] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.165428] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.180986] device bridge_slave_0 entered promiscuous mode [ 172.197156] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.203630] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.225980] device bridge_slave_1 entered promiscuous mode [ 172.238759] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.245215] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.271134] device bridge_slave_0 entered promiscuous mode [ 172.295552] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.302095] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.319417] device bridge_slave_0 entered promiscuous mode [ 172.337871] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.344359] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.378421] device bridge_slave_1 entered promiscuous mode [ 172.393964] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.400441] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.421373] device bridge_slave_1 entered promiscuous mode [ 172.435593] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.442134] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.475685] device bridge_slave_1 entered promiscuous mode [ 172.503810] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.510373] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.540914] device bridge_slave_1 entered promiscuous mode [ 172.554533] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.561098] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.572900] device bridge_slave_1 entered promiscuous mode [ 172.580531] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.587130] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.601428] device bridge_slave_1 entered promiscuous mode [ 172.624485] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 172.643658] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 172.655717] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 172.665957] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.672452] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.723449] device bridge_slave_1 entered promiscuous mode [ 172.749089] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 172.767142] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 172.853517] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 172.912670] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 172.922289] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 172.935165] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 172.981558] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 173.031296] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 173.048787] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 173.071660] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 173.179613] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 173.196892] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 173.394637] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 173.856427] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 173.879865] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 173.896021] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 174.027476] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 174.075901] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 174.091908] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 174.141478] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 174.174617] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 174.229488] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 174.253452] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 174.333674] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 174.388584] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 174.403554] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 174.415754] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 174.444746] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 174.495784] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 174.522098] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 174.577880] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 174.584803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 174.607971] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 174.615964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 174.676649] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 174.690441] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 174.697436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 174.739835] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 174.753279] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 174.760292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 174.775495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 174.820556] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 174.827689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 174.878522] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 174.885526] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 174.896680] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 174.903962] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 174.945646] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 174.952789] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 175.002297] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 175.009342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 175.062496] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 175.069501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 175.111830] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 175.119254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 175.139980] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 175.147081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 175.212681] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 175.219687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 175.296594] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 175.303547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 175.444688] ip (5017) used greatest stack depth: 53432 bytes left [ 175.853359] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 175.896134] team0: Port device team_slave_0 added [ 175.930783] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 175.958437] team0: Port device team_slave_0 added [ 175.972427] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 176.005199] team0: Port device team_slave_0 added [ 176.049625] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 176.073486] team0: Port device team_slave_0 added [ 176.079511] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 176.091190] team0: Port device team_slave_0 added [ 176.135561] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 176.153016] team0: Port device team_slave_1 added [ 176.169431] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 176.196735] team0: Port device team_slave_0 added [ 176.228924] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 176.245977] team0: Port device team_slave_1 added [ 176.257961] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 176.280572] team0: Port device team_slave_0 added [ 176.301354] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 176.332261] team0: Port device team_slave_1 added [ 176.362149] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 176.384495] team0: Port device team_slave_1 added [ 176.421783] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 176.436939] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 176.468347] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 176.490096] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 176.511195] team0: Port device team_slave_1 added [ 176.527299] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 176.555513] team0: Port device team_slave_0 added [ 176.587904] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 176.607796] team0: Port device team_slave_1 added [ 176.625273] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 176.632234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 176.659600] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 176.685009] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 176.692480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 176.707142] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 176.744321] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 176.764121] team0: Port device team_slave_1 added [ 176.802473] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 176.809524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 176.826348] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 176.866862] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 176.876406] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 176.884139] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 176.892314] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 176.909716] team0: Port device team_slave_1 added [ 176.940597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 176.954781] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 176.993491] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 177.027351] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 177.050558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 177.086301] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 177.133641] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 177.145247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 177.155730] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 177.168604] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 177.178406] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 177.185311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 177.197956] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 177.206351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 177.219487] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 177.233751] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 177.241239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 177.255942] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 177.292066] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 177.302209] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 177.311552] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 177.320659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 177.345430] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 177.392438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 177.421415] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 177.449388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 177.477339] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 177.505136] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 177.512418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 177.521850] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 177.554384] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 177.564011] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 177.579716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 177.591095] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 177.601141] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 177.610988] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 177.620830] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 177.631098] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 177.642478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 177.665368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 177.695833] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 177.734581] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 177.771800] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 177.810392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 177.828872] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 177.849454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 177.863444] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 177.871958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 177.880556] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 177.888103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 177.896984] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 177.917442] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 177.946372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 177.956764] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 177.968408] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 177.978534] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 177.990340] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 177.998604] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 178.006940] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 178.028957] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 178.067126] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 178.114404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 178.139420] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 178.173412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 178.195256] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 178.212363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 178.225875] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 178.234381] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 178.243428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 178.279786] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 178.306435] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 178.323574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 178.358794] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 178.366401] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 178.382551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 178.580523] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 178.588101] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 178.606121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 178.704788] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 178.712323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 178.729003] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 181.385442] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.391939] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.398817] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.405440] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.417554] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 181.433346] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 181.462532] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.469094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.475961] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.482460] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.536368] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 181.556315] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.562800] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.569671] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.576130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.675073] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 181.774899] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.781388] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.788297] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.794743] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.861259] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 181.876505] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.882995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.889928] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.896438] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.916754] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 181.936606] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.943137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.950104] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.956594] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.975122] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 182.002016] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.008550] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.015501] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.022486] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.110229] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 182.298878] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.305382] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.312306] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.318765] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.379529] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 182.497469] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 182.513193] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 182.549363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 182.583303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 182.621297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 182.635421] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 182.648767] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 194.137370] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.182445] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.225955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.616265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.647629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.765776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.849240] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.932257] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.221390] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 195.350313] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 195.454461] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 195.703256] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 195.860442] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 195.960139] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 196.073295] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 196.106194] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 196.289696] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 196.295978] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 196.311957] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 196.669491] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 196.675793] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 196.688750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 196.743271] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 196.749692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 196.769002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 196.887371] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 196.893715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 196.904890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 197.017679] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 197.025664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 197.041973] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 197.134445] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 197.140850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 197.154982] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 197.255962] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 197.266454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 197.284452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 197.367771] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 197.374162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 197.396328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 197.460604] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.914416] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.948599] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.291876] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.323157] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.354708] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.496920] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.538257] 8021q: adding VLAN 0 to HW filter on device team0 22:48:42 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x8000000000002, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xa, 0x2, 0x7, 0x7fffffff}, 0x2c) 22:48:42 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000880)='./file0\x00', &(0x7f0000005440)='hugetlbfs\x00', 0x0, &(0x7f0000001d80)) mknod$loop(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0xffffffffffffffff) 22:48:42 executing program 7: r0 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000ab2000)=0x1002, 0x4) sendto$inet(r0, &(0x7f00004e9000), 0x0, 0x0, &(0x7f0000821ff0)={0x2, 0x4e20}, 0x10) recvmsg(r0, &(0x7f0000000740)={&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f0000000640), 0x0, &(0x7f00000006c0)=""/110, 0x6e}, 0x40012021) 22:48:42 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000380)="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", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) getpgrp(0x0) socket$inet6(0xa, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000080)) readv(r0, &(0x7f00000015c0)=[{&(0x7f0000001500)=""/148, 0x94}], 0x1) ppoll(&(0x7f0000000200), 0x0, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280), 0x8) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x204f863e, 0x0, 0x2, 0x0, 0x0, 0x1}) sendfile(r0, r0, &(0x7f0000000100), 0x20000102000004) 22:48:42 executing program 2: r0 = socket$inet(0x2, 0x3, 0x9) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x29, @empty, 0x4e20, 0x1, 'wrr\x00', 0x37, 0x4f, 0x52}, 0x2c) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0x83, [], 0x5, &(0x7f0000000080)=[{}, {}, {}, {}, {}], &(0x7f0000000100)=""/131}, &(0x7f0000000240)=0x78) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x11, @local, 0x0, 0x0, "64680000f0ff7c97ac76b6eecbfa00"}, 0x2c) 22:48:43 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) inotify_init1(0x0) ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f0000000200)={0x0, {0x2, 0x0, @remote}, {0x2, 0x4e20, @multicast1}, {0x2, 0x0, @remote}, 0x0, 0x1, 0x0, 0x0, 0x0, &(0x7f0000000100)='ip6gretap0\x00'}) inotify_add_watch(0xffffffffffffffff, &(0x7f0000ac5000)='./file0\x00', 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)) futimesat(r2, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={{0x0, 0x2710}, {0x0, 0x2710}}) 22:48:43 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)="4c0000001400197f09004b0101048c590188ffffcf3d34740600d4ff5bffff00e7e5ed7d00000000c8550000000000002758d60034650c0326356cdb47f6aaaa956086cbfe0db35200af4486", 0x4c}], 0x1) [ 206.038225] IPVS: set_ctl: invalid protocol: 41 0.0.0.0:20000 [ 206.068838] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 22:48:43 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x1}, 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4f, 0x0) [ 206.104488] IPVS: set_ctl: invalid protocol: 41 0.0.0.0:20000 22:48:43 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={"6c6f0000000001fff300", 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000380)={"62707130000b00000000000000faff00", r2}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'bpq0\x00', 0x502}) 22:48:43 executing program 2: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6c50400aeb995298992ea5400c2", 0x10) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0a5c2d0252926285717070") setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x0, &(0x7f0000000100)}, 0x10) sendto(r1, &(0x7f0000000040), 0xfffffffffffffe39, 0x0, &(0x7f0000000380)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80) 22:48:43 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x2c) r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0), 0x9}, 0xfffffc9f) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f0000001840), 0x3ba) recvmsg(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000140)=@nfc_llcp, 0x80, &(0x7f0000000000)=[{&(0x7f0000000280)=""/103, 0x67}], 0x1, &(0x7f0000000340)=""/171, 0xab}, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x2a, &(0x7f0000000000), 0x1}, 0x0) 22:48:43 executing program 7: r0 = open(&(0x7f0000000040)='./bus\x00', 0x141046, 0x0) close(r0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x105082) r1 = memfd_create(&(0x7f00000000c0)="56b800009df5", 0x0) pwritev(r1, &(0x7f0000002480)=[{&(0x7f00000003c0)="10", 0x1}], 0x1, 0x81003) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) madvise(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x9) 22:48:43 executing program 6: r0 = socket(0x10, 0x3, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000002ac0)={{{@in=@multicast1, @in=@broadcast}}, {{@in6}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000002bc0)=0xe8) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') sendfile(r0, r1, &(0x7f0000000300), 0xfffffffd) 22:48:43 executing program 4: r0 = inotify_init() readv(r0, &(0x7f00000006c0)=[{&(0x7f0000000140)=""/6, 0x10}], 0x286) creat(&(0x7f00000000c0)='./file0\x00', 0x0) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x2b) creat(&(0x7f0000000180)='./file0\x00', 0x0) 22:48:43 executing program 1: r0 = socket(0x10, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ptype\x00') sendfile(r0, r1, &(0x7f0000000000)=0x2f, 0x80000003) 22:48:43 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) readv(r1, &(0x7f00000007c0)=[{&(0x7f0000000880)=""/44, 0x7ffff000}], 0x1) 22:48:44 executing program 4: rt_sigprocmask(0x0, &(0x7f0000000000), &(0x7f0000000040), 0x8) setrlimit(0x0, &(0x7f0000000080)) pipe2$9p(&(0x7f0000000580)={0xffffffffffffffff}, 0x0) fcntl$setown(r0, 0x8, 0x0) 22:48:44 executing program 5: request_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f00000001c0), &(0x7f0000000200)='keyring\x00', 0xfffffffffffffffc) 22:48:44 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r2 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r2, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r2, 0x107, 0x5, &(0x7f0000001000), 0xc5) ioctl(r1, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) shutdown(r0, 0x1) 22:48:44 executing program 2: r0 = socket$inet6(0xa, 0x2000000802, 0x0) connect$inet6(r0, &(0x7f000000cfe4), 0x1c) sendmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)=[{0x18, 0x29, 0xb, "01"}], 0x18}}], 0x1, 0x0) 22:48:44 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r1 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7b, &(0x7f0000000040)=ANY=[@ANYBLOB="04000000"], &(0x7f0000000100)=0x1) close(r1) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7a, &(0x7f00000000c0), &(0x7f00000001c0)=0x10) sendmmsg$inet_sctp(r1, &(0x7f0000000bc0)=[{&(0x7f0000000180)=@in={0x2, 0x0, @rand_addr}, 0x10, &(0x7f0000000140), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="3000000000000000840000000100000000000010470000000000000000000000000000000000000000000000", @ANYRES32=0x0], 0x30}], 0x1, 0x0) 22:48:44 executing program 0: socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000400)) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000440)={0x0, 0x1, 0x0, 0x5, 0x40}, 0x14) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000280)={0x0, 0x2}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000300)=@sack_info={r1, 0x507}, &(0x7f0000000340)=0xc) ioctl(r0, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000180)) write$cgroup_int(r2, &(0x7f0000000080), 0x2001007f) ioctl$fiemap(r2, 0xc020660b, &(0x7f0000000040)={0x0, 0x7bb9, 0x1, 0x0, 0x304}) 22:48:44 executing program 4: r0 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000006c0)=@broute={'broute\x00', 0x20, 0x1, 0x3b0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000000), &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'syzkaller1\x00', 'ip6tnl0\x00', "01616d61000000004ab2cec800", @remote, [], @remote, [], 0x2a8, 0x2a8, 0x320, [@bpf0={'bpf\x00', 0x210, {{0x3, [{}, {}, {0x6}]}}}]}}, @common=@nflog={'nflog\x00', 0x50, {{0x0, 0x0, 0x0, 0x0, 0x0, "339ebc4bb0c0fba43162d5c302d891b307544d821a0dcb492ba4aa23baaca6e53f392b79c58e0581db804208237c3df1c60b6b34da2747cd3200fbb384511226"}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xffffffdffffffffc}]}, 0x428) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000600)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200004c0], 0x0, &(0x7f0000000480), &(0x7f00000004c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) [ 207.327347] tpacket_rcv: packet too big, clamped from 65535 to 65392. macoff=96 22:48:44 executing program 5: request_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f00000001c0), &(0x7f0000000200)='keyring\x00', 0xfffffffffffffffc) 22:48:44 executing program 3: r0 = socket(0x840000000002, 0x3, 0xff) close(r0) 22:48:44 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$unix(r0, &(0x7f0000000600)=[{&(0x7f00000001c0)=@abs, 0x6e, &(0x7f0000000400), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0, 0x20000001}], 0x1, 0x0) 22:48:44 executing program 7: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r0, &(0x7f0000000040)="0300", 0x2, 0x800000400008800, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000180)="0900d13a8e045a8700000020090411000055a6c91fcc70de0a", 0x19, 0x0, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) 22:48:44 executing program 5: r0 = socket$inet(0x2, 0x4008000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, &(0x7f0000000900), 0x0, 0x20000800, &(0x7f0000deaff0)={0x2, 0x4e23}, 0x10) sendto$inet(r0, &(0x7f00006fd000)="c3401c344654f3c7d9b41ba48c8e319aa4eedc3d6bd8ebd65c856a27d61154adc2b2a9763ae0001c0d32e11f38e9dd18c58f6bd779650fc30f93653bdaecf323c9f6502ceab47e58114347b289546465a5eb278de12b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d08d4154004997e317b79", 0x82, 0x0, &(0x7f0000e66000)={0x2, 0x0, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='veno\x00', 0x5) shutdown(r0, 0x1) 22:48:44 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x2000000001) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0a5c2d0252926285717070") syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @rand_addr}, @igmp={0x0, 0x0, 0x0, @multicast1}}}}}, 0x0) 22:48:44 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r2 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r2, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r2, 0x107, 0x5, &(0x7f0000001000), 0xc5) ioctl(r1, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) shutdown(r0, 0x1) 22:48:44 executing program 4: r0 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000006c0)=@broute={'broute\x00', 0x20, 0x1, 0x3b0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000000), &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'syzkaller1\x00', 'ip6tnl0\x00', "01616d61000000004ab2cec800", @remote, [], @remote, [], 0x2a8, 0x2a8, 0x320, [@bpf0={'bpf\x00', 0x210, {{0x3, [{}, {}, {0x6}]}}}]}}, @common=@nflog={'nflog\x00', 0x50, {{0x0, 0x0, 0x0, 0x0, 0x0, "339ebc4bb0c0fba43162d5c302d891b307544d821a0dcb492ba4aa23baaca6e53f392b79c58e0581db804208237c3df1c60b6b34da2747cd3200fbb384511226"}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xffffffdffffffffc}]}, 0x428) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000600)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200004c0], 0x0, &(0x7f0000000480), &(0x7f00000004c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) 22:48:44 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="0000200000000000140012000c000100697036746e6c00000400cc122ad99b34e30200c9851b24f87260ace4208a28ceab883ef9872c06008fa2859c15f64153db4776f01a0a65d6092bf53cbc30da2f42cd09d84d661682ff64f1a97e1a"], 0x1}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) 22:48:44 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') sendfile(r0, r1, &(0x7f0000000300), 0xfffffffd) 22:48:45 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000b80)) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000580)={&(0x7f00000000c0)=@generic={0x0, "3c77c59ea1e5a575b607b3cc18a0beb8215dc6567a4fde17cff808d1b1982e76e80b398446bf546a19ce907aa0089df07f31d800e7e950cb4b3121f16df0ffa1ece6ab15def171b411f14262546ab7c54d56a1195f41137a48933a7a48a6444bf80ab12b4e7eb4451dccf565cdb6b2e7d4c88a5cea08f6d4b4b1aa6df153"}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000140)="d6", 0x1}], 0x1, 0x0, 0x0, 0x4eeacd35ba62df7f}, 0x4000810) 22:48:45 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_bridge\x00'}) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400020000000000000000000000000000004e00"], 0x1}}, 0x0) 22:48:45 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000000)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvfrom$unix(r1, &(0x7f0000000600)=""/200, 0xc8, 0x0, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0xfffffffffffffd48) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x144}, {&(0x7f00000000c0)=""/85, 0x10}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0x3c}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x15}], 0x8, &(0x7f0000002400)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) 22:48:45 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r1 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7b, &(0x7f0000000040)=ANY=[@ANYBLOB="04000000"], &(0x7f0000000100)=0x1) close(r1) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7a, &(0x7f00000000c0), &(0x7f00000001c0)=0x10) sendmmsg$inet_sctp(r1, &(0x7f0000000bc0)=[{&(0x7f0000000180)=@in={0x2, 0x0, @rand_addr}, 0x10, &(0x7f0000000140), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="3000000000000000840000000100000000000010470000000000000000000000000000000000000000000000", @ANYRES32=0x0], 0x30}], 0x1, 0x0) 22:48:45 executing program 0: perf_event_open(&(0x7f000001d000)={0x200000002, 0x270, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 22:48:45 executing program 2: mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='tracefs\x00', 0x0, &(0x7f0000000040)) mknod$loop(&(0x7f0000000000)='./file0/file1\x00', 0xc040, 0xffffffffffffffff) 22:48:45 executing program 7: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') sendfile(r0, r1, &(0x7f0000000300), 0xfffffffd) 22:48:45 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r2 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r2, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r2, 0x107, 0x5, &(0x7f0000001000), 0xc5) ioctl(r1, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) shutdown(r0, 0x1) 22:48:45 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000b80)) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000580)={&(0x7f00000000c0)=@generic={0x0, "3c77c59ea1e5a575b607b3cc18a0beb8215dc6567a4fde17cff808d1b1982e76e80b398446bf546a19ce907aa0089df07f31d800e7e950cb4b3121f16df0ffa1ece6ab15def171b411f14262546ab7c54d56a1195f41137a48933a7a48a6444bf80ab12b4e7eb4451dccf565cdb6b2e7d4c88a5cea08f6d4b4b1aa6df153"}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000140)="d6", 0x1}], 0x1, 0x0, 0x0, 0x4eeacd35ba62df7f}, 0x4000810) 22:48:45 executing program 3: gettid() r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000480)='/dev/zero\x00', 0x0, 0x0) r1 = fcntl$getown(r0, 0x9) sched_getscheduler(r1) 22:48:45 executing program 4: syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_vs_stats\x00') ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f00000002c0)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close(r0) write$P9_RLCREATE(r1, &(0x7f00000000c0)={0x18}, 0x18) 22:48:45 executing program 2: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfc0004) r1 = accept4(r0, &(0x7f0000000000)=@ethernet={0x0, @local}, &(0x7f0000000040)=0x21e, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x7c, &(0x7f0000000080), &(0x7f00000000c0)=0x8) 22:48:45 executing program 7: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') sendfile(r0, r1, &(0x7f0000000300), 0xfffffffd) 22:48:45 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000300000000000000000000009500020000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000000)={r0, r1}) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0x1f3) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000006400)=[{{&(0x7f0000001f00)=@can, 0x80, &(0x7f0000002140)=[{&(0x7f0000001f80)=""/58, 0x3a}], 0x1, &(0x7f0000002180)=""/88, 0x58}}], 0x500, 0x0, &(0x7f00000065c0)={0x0, r3+30000000}) 22:48:45 executing program 0: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00'}) r0 = socket$packet(0x11, 0x2, 0x300) sendmmsg(r0, &(0x7f0000000140)=[{{&(0x7f0000000300)=@nfc={0x27, 0x1}, 0x81, &(0x7f0000000080), 0x0, &(0x7f0000000000)}}, {{&(0x7f0000000280)=@in6={0xa, 0x0, 0x4, @loopback}, 0x80, &(0x7f0000000080), 0x1, &(0x7f0000000000), 0x142}}], 0x2, 0x0) 22:48:45 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)="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") sendfile(r0, r1, &(0x7f0000000300), 0xfffffffd) 22:48:46 executing program 7: syslog(0x3, &(0x7f0000000400)=""/88, 0x58) 22:48:46 executing program 4: socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) syslog(0x3, &(0x7f0000000400)=""/88, 0x58) 22:48:46 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r2 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r2, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r2, 0x107, 0x5, &(0x7f0000001000), 0xc5) ioctl(r1, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) shutdown(r0, 0x1) [ 209.071808] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 22:48:46 executing program 1: ioctl(0xffffffffffffffff, 0x4, &(0x7f0000000000)) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="240000000a0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 22:48:46 executing program 2: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) clock_settime(0x0, &(0x7f0000000000)={0x77359400}) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000fd7ff0)={0x77359400}, &(0x7f0000048000), 0x0) socketpair(0x0, 0x0, 0x1, &(0x7f0000000180)) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f00000001c0)={{0x0, @dev={0xac, 0x14, 0x14, 0x17}, 0x0, 0x3, 'lc\x00', 0x2}, {@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x44) futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000080)={0x29, 0x4, 0x0, {0x0, 0xaa, 0x1, 0x0, [0x0]}}, 0x29) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f000000d000)={0x0, 0x7f}, &(0x7f0000048000)=0x1c0000000, 0x0) 22:48:46 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x100, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r0, 0x1008) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000001c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000000280), 0xfffffffffffffedd, 0x2000012c, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty={[0xe00000000000000]}}, 0x1c) close(r0) 22:48:46 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000240), 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x400}]}, 0x10) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x100, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000001c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000000280), 0xfffffffffffffedd, 0x2000012c, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty={[0xe00000000000000]}}, 0x1c) close(r0) 22:48:46 executing program 7: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0x4000) [ 209.595315] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 209.609111] netlink: 'syz-executor1': attribute type 1 has an invalid length. [ 209.629795] netlink: 'syz-executor1': attribute type 1 has an invalid length. 22:48:46 executing program 7: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c2d0252926285717070") mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xffffffffffffffff, 0x4000000032, 0xffffffffffffffff, 0x0) getsockopt$sock_int(r0, 0x1, 0x4, &(0x7f0000000040), &(0x7f0000001080)=0x4) 22:48:46 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_vs\x00') process_vm_writev(0x0, &(0x7f0000000080), 0x1c3, &(0x7f0000002f00)=[{&(0x7f0000002e40)=""/147, 0x5e}], 0x11, 0x0) preadv(r1, &(0x7f00000017c0), 0x1c8, 0x0) [ 209.704386] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 22:48:46 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r2 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r2, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r2, 0x107, 0x5, &(0x7f0000001000), 0xc5) ioctl(r1, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) 22:48:46 executing program 1: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfc0004) r1 = accept4(r0, &(0x7f0000000000)=@ethernet={0x0, @local}, &(0x7f0000000040)=0x21e, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000080), &(0x7f00000000c0)=0x8) 22:48:46 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x100, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r0, 0x1008) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000001c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000000280), 0xfffffffffffffedd, 0x2000012c, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty={[0xe00000000000000]}}, 0x1c) close(r0) 22:48:47 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000300000000000000000000009500020000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000000)={r0, r1}) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0x1f3) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000006400)=[{{&(0x7f0000001f00)=@can, 0x80, &(0x7f0000002140)=[{&(0x7f0000001f80)=""/58, 0x3a}], 0x1, &(0x7f0000002180)=""/88, 0x58}}], 0x500, 0x0, &(0x7f00000065c0)={0x0, r3+30000000}) 22:48:47 executing program 7: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c2d0252926285717070") mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xffffffffffffffff, 0x4000000032, 0xffffffffffffffff, 0x0) getsockopt$sock_int(r0, 0x1, 0x4, &(0x7f0000000040), &(0x7f0000001080)=0x4) 22:48:47 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000300000000000000000000009500020000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000000)={r0, r1}) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0x1f3) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000006400)=[{{&(0x7f0000001f00)=@can, 0x80, &(0x7f0000002140)=[{&(0x7f0000001f80)=""/58, 0x3a}], 0x1, &(0x7f0000002180)=""/88, 0x58}}], 0x500, 0x0, &(0x7f00000065c0)={0x0, r3+30000000}) 22:48:47 executing program 1: r0 = socket$inet(0x2, 0xa, 0x0) sendmmsg(r0, &(0x7f000000cec0)=[{{&(0x7f0000000000)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000001300), 0x0, &(0x7f0000003500)}}], 0x1, 0x0) 22:48:47 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") fstat(0xffffffffffffff9c, &(0x7f0000000240)) prctl$void(0x0) fstat(r0, &(0x7f0000000140)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000600)=@newlink={0x40, 0x10, 0x3eb80125379cfe6d, 0x0, 0x0, {}, [@IFLA_NUM_RX_QUEUES={0x8, 0x20, 0xfffff000}, @IFLA_LINKINFO={0x18, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0x4}}}]}, 0x40}}, 0x0) 22:48:47 executing program 0: socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000400)) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000440)={0x0, 0x1, 0x0, 0x5, 0x40}, 0x14) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280), &(0x7f00000002c0)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000300), &(0x7f0000000340)=0xc) ioctl(r0, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000180)) write$cgroup_int(r1, &(0x7f0000000080), 0x2001007f) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000000040)={0x0, 0x7bb9, 0x1, 0x0, 0x304}) [ 210.230280] syz-executor1 uses obsolete (PF_INET,SOCK_PACKET) [ 210.250881] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 210.396857] syz-executor3: vmalloc: allocation failure: 824632934400 bytes, mode:0x6084c0(GFP_KERNEL|__GFP_RETRY_MAYFAIL|__GFP_ZERO), nodemask=(null) [ 210.411708] syz-executor3 cpuset=syz3 mems_allowed=0 [ 210.417030] CPU: 1 PID: 6975 Comm: syz-executor3 Not tainted 4.18.0-rc8+ #34 [ 210.424250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 210.433633] Call Trace: [ 210.436285] dump_stack+0x17c/0x1c0 [ 210.439964] warn_alloc+0x422/0x680 [ 210.443676] __vmalloc_node_range+0x203/0x1140 [ 210.448321] __vmalloc_node_flags_caller+0x12b/0x140 [ 210.453473] ? alloc_netdev_mqs+0x116e/0x1680 [ 210.458005] ? alloc_netdev_mqs+0x116e/0x1680 [ 210.462556] kvmalloc_node+0x330/0x370 [ 210.466496] alloc_netdev_mqs+0x116e/0x1680 [ 210.470881] ? prepare_ip6gre_xmit_ipv6+0x920/0x920 [ 210.475946] rtnl_create_link+0x3ad/0xf90 [ 210.480167] rtnl_newlink+0x24d0/0x39e0 [ 210.484199] ? rtnl_newlink+0x1761/0x39e0 [ 210.488461] ? page_counter_cancel+0x58b/0x5b0 [ 210.493105] ? __msan_poison_alloca+0x173/0x200 [ 210.497914] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 210.503372] ? __module_address+0x6a/0x600 [ 210.507686] ? task_kmsan_context_state+0x5e/0x110 [ 210.512708] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 210.518158] ? is_bpf_text_address+0x47e/0x4b0 [ 210.522865] ? rcu_all_qs+0x2e/0x1f0 [ 210.526678] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 210.532091] ? rtnl_setlink+0x6d0/0x6d0 [ 210.536131] rtnetlink_rcv_msg+0xa0b/0x1530 [ 210.540532] ? do_syscall_64+0x15b/0x220 [ 210.544640] ? netlink_sendmsg+0x776/0x1350 [ 210.549060] ? kmsan_set_origin_inline+0x6b/0x120 [ 210.553983] ? __msan_poison_alloca+0x173/0x200 [ 210.558749] ? kmsan_set_origin_inline+0x6b/0x120 [ 210.563685] ? kmsan_set_origin+0x93/0x150 [ 210.568011] netlink_rcv_skb+0x36e/0x5f0 [ 210.572130] ? rtnetlink_bind+0x120/0x120 [ 210.576345] rtnetlink_rcv+0x50/0x60 [ 210.580108] netlink_unicast+0x1492/0x1740 [ 210.584413] ? rtnetlink_net_exit+0x90/0x90 [ 210.588798] netlink_sendmsg+0x114c/0x1350 [ 210.593131] ___sys_sendmsg+0xe32/0x1250 [ 210.597292] ? netlink_getsockopt+0x11c0/0x11c0 [ 210.602498] ? __fget_light+0x53/0x700 [ 210.606477] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 210.611929] ? __fget_light+0x6a3/0x700 [ 210.616010] __x64_sys_sendmsg+0x32d/0x460 [ 210.620304] ? ___sys_sendmsg+0x1250/0x1250 [ 210.624682] do_syscall_64+0x15b/0x220 [ 210.628630] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 210.633877] RIP: 0033:0x457089 [ 210.637083] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 210.656829] RSP: 002b:00007f4e3557ec78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 210.664588] RAX: ffffffffffffffda RBX: 00007f4e3557f6d4 RCX: 0000000000457089 [ 210.671898] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000004 [ 210.679210] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 210.686516] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 210.693823] R13: 00000000004d4188 R14: 00000000004c8b53 R15: 0000000000000000 [ 210.701290] Mem-Info: [ 210.703872] active_anon:84474 inactive_anon:1931 isolated_anon:0 [ 210.703872] active_file:4108 inactive_file:9901 isolated_file:0 [ 210.703872] unevictable:0 dirty:70 writeback:0 unstable:0 [ 210.703872] slab_reclaimable:3375 slab_unreclaimable:9738 [ 210.703872] mapped:71357 shmem:1940 pagetables:1039 bounce:0 [ 210.703872] free:902763 free_pcp:340 free_cma:0 [ 210.737527] Node 0 active_anon:337896kB inactive_anon:7724kB active_file:16432kB inactive_file:39604kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:285428kB dirty:280kB writeback:0kB shmem:7760kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 249856kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 210.765949] Node 0 DMA free:15904kB min:144kB low:180kB high:216kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 210.792299] lowmem_reserve[]: 0 2837 7263 7263 [ 210.797079] Node 0 DMA32 free:2909528kB min:26344kB low:32928kB high:39512kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2910272kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:744kB local_pcp:656kB free_cma:0kB [ 210.824951] lowmem_reserve[]: 0 0 4425 4425 22:48:47 executing program 7: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c2d0252926285717070") mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xffffffffffffffff, 0x4000000032, 0xffffffffffffffff, 0x0) getsockopt$sock_int(r0, 0x1, 0x4, &(0x7f0000000040), &(0x7f0000001080)=0x4) [ 210.829492] Node 0 Normal free:696204kB min:41092kB low:51364kB high:61636kB active_anon:333756kB inactive_anon:8252kB active_file:16436kB inactive_file:39600kB unevictable:0kB writepending:288kB present:4718592kB managed:4532216kB mlocked:0kB kernel_stack:10880kB pagetables:4124kB bounce:0kB free_pcp:692kB local_pcp:488kB free_cma:0kB [ 210.859542] lowmem_reserve[]: 0 0 0 0 [ 210.863477] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15904kB [ 210.877798] Node 0 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 3*32kB (M) 1*64kB (M) 1*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 2*2048kB (M) 708*4096kB (M) = 2909528kB [ 210.894914] Node 0 Normal: 3*4kB (UME) 751*8kB (M) 416*16kB (UME) 157*32kB (UME) 28*64kB (UME) 6*128kB (ME) 3*256kB (UM) 52*512kB (ME) 52*1024kB (ME) 8*2048kB (UM) 141*4096kB (M) = 694820kB [ 210.914227] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 210.923649] 16239 total pagecache pages [ 210.927853] 0 pages in swap cache [ 210.931873] Swap cache stats: add 0, delete 0, find 0/0 [ 210.937459] Free swap = 0kB [ 210.940561] Total swap = 0kB [ 210.943687] 1965969 pages RAM 22:48:47 executing program 2: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) clock_settime(0x0, &(0x7f0000000000)={0x77359400}) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000fd7ff0)={0x77359400}, &(0x7f0000048000), 0x0) socketpair(0x0, 0x0, 0x1, &(0x7f0000000180)) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f00000001c0)={{0x0, @dev={0xac, 0x14, 0x14, 0x17}, 0x0, 0x3, 'lc\x00', 0x2}, {@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x44) futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000080)={0x29, 0x4, 0x0, {0x0, 0xaa, 0x1, 0x0, [0x0]}}, 0x29) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f000000d000)={0x0, 0x7f}, &(0x7f0000048000)=0x1c0000000, 0x0) 22:48:47 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mknodat(r1, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000180)) [ 210.946922] 0 pages HighMem/MovableOnly [ 210.951052] 101371 pages reserved 22:48:48 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r2 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r2, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r2, 0x107, 0x5, &(0x7f0000001000), 0xc5) ioctl(r1, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) shutdown(r0, 0x1) 22:48:48 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000300000000000000000000009500020000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000000)={r0, r1}) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0x1f3) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000006400)=[{{&(0x7f0000001f00)=@can, 0x80, &(0x7f0000002140)=[{&(0x7f0000001f80)=""/58, 0x3a}], 0x1, &(0x7f0000002180)=""/88, 0x58}}], 0x500, 0x0, &(0x7f00000065c0)={0x0, r3+30000000}) 22:48:48 executing program 4: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) clock_settime(0x0, &(0x7f0000000000)={0x77359400}) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000fd7ff0)={0x77359400}, &(0x7f0000048000), 0x0) socketpair(0x0, 0x0, 0x1, &(0x7f0000000180)) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f00000001c0)={{0x0, @dev={0xac, 0x14, 0x14, 0x17}, 0x0, 0x3, 'lc\x00', 0x2}, {@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x44) futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000080)={0x29, 0x4, 0x0, {0x0, 0xaa, 0x1, 0x0, [0x0]}}, 0x29) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f000000d000)={0x0, 0x7f}, &(0x7f0000048000)=0x1c0000000, 0x0) 22:48:48 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x65, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x3f8, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='illinois\x00', 0xd470041877f0fcc9) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) 22:48:48 executing program 7: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c2d0252926285717070") mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xffffffffffffffff, 0x4000000032, 0xffffffffffffffff, 0x0) getsockopt$sock_int(r0, 0x1, 0x4, &(0x7f0000000040), &(0x7f0000001080)=0x4) 22:48:48 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000001c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000000280), 0xfffffffffffffedd, 0x2000012c, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty={[0xe00000000000000]}}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000000)="8a5c010700315f85715070") close(r0) [ 211.376121] hrtimer: interrupt took 113695 ns 22:48:48 executing program 0: socket$inet(0x2, 0x1, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000180), 0x0, 0x20000801, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffff2e, 0x0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4201}, {r0}], 0x2, 0x0) 22:48:48 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) shutdown(r0, 0x1) [ 211.480522] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 211.539359] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 22:48:48 executing program 7: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c2d0252926285717070") getsockopt$sock_int(r0, 0x1, 0x4, &(0x7f0000000040), &(0x7f0000001080)=0x4) 22:48:48 executing program 3: mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='tracefs\x00', 0x0, &(0x7f0000000040)) mknod$loop(&(0x7f0000000000)='./file0/file1\x00', 0x0, 0xffffffffffffffff) 22:48:48 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) shutdown(r0, 0x1) 22:48:48 executing program 7: r0 = socket$inet6(0xa, 0x803, 0x3) getsockopt$sock_int(r0, 0x1, 0x4, &(0x7f0000000040), &(0x7f0000001080)=0x4) 22:48:49 executing program 3: mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='tracefs\x00', 0x0, &(0x7f0000000040)) mknod$loop(&(0x7f0000000000)='./file0/file1\x00', 0x0, 0xffffffffffffffff) 22:48:49 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x12, &(0x7f0000000000)=0x8000, 0x4) 22:48:49 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x80287010, &(0x7f0000000100)) 22:48:49 executing program 7: getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, &(0x7f0000000040), &(0x7f0000001080)=0x4) 22:48:49 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000300000000000000000000009500020000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000000)={r0, r1}) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0x1f3) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000006400)=[{{&(0x7f0000001f00)=@can, 0x80, &(0x7f0000002140)=[{&(0x7f0000001f80)=""/58, 0x3a}], 0x1, &(0x7f0000002180)=""/88, 0x58}}], 0x500, 0x0, &(0x7f00000065c0)={0x0, r3+30000000}) 22:48:49 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) shutdown(r0, 0x1) 22:48:49 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000100)={0x2, 0x0, {0x0, 0x0, 0x0, 0x1e, 0xb, 0x64}}) 22:48:49 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x65, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x3f8, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='illinois\x00', 0xd470041877f0fcc9) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) 22:48:49 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0a5c2d0252926285717070") setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) 22:48:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000018ff4), 0xc, &(0x7f0000000140)={&(0x7f0000000480)={0x1c, 0x28, 0x1, 0x0, 0x0, {0x1}, [@nested={0x8, 0x0, [@generic='\tA']}]}, 0x1c}}, 0x0) [ 212.504386] ================================================================== [ 212.511800] BUG: KMSAN: uninit-value in tipc_nl_compat_doit+0x40b/0x9c0 [ 212.518575] CPU: 0 PID: 7076 Comm: syz-executor4 Not tainted 4.18.0-rc8+ #34 [ 212.525828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 212.535204] Call Trace: [ 212.537844] dump_stack+0x17c/0x1c0 [ 212.541521] kmsan_report+0x188/0x2a0 [ 212.545361] __msan_warning+0x70/0xc0 [ 212.549210] tipc_nl_compat_doit+0x40b/0x9c0 [ 212.553655] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 212.559160] tipc_nl_compat_recv+0x119a/0x2700 [ 212.563777] ? tipc_nl_node_dump+0x1540/0x1540 [ 212.568384] ? tipc_nl_compat_link_dump+0x600/0x600 [ 212.573451] ? tipc_netlink_compat_stop+0x40/0x40 [ 212.578330] genl_rcv_msg+0x16b1/0x1840 [ 212.582384] netlink_rcv_skb+0x36e/0x5f0 [ 212.586484] ? genl_unbind+0x350/0x350 [ 212.590406] genl_rcv+0x63/0x80 [ 212.593711] netlink_unicast+0x1492/0x1740 [ 212.597988] ? genl_pernet_exit+0x90/0x90 [ 212.602193] netlink_sendmsg+0x114c/0x1350 [ 212.606488] ___sys_sendmsg+0xe32/0x1250 [ 212.610587] ? netlink_getsockopt+0x11c0/0x11c0 [ 212.615295] ? __fget_light+0x53/0x700 [ 212.619217] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 212.624606] ? __fget_light+0x6a3/0x700 [ 212.628632] __x64_sys_sendmsg+0x32d/0x460 [ 212.632919] ? ___sys_sendmsg+0x1250/0x1250 [ 212.637271] do_syscall_64+0x15b/0x220 [ 212.641209] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 212.646417] RIP: 0033:0x457089 [ 212.649617] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 212.669194] RSP: 002b:00007fd75fabac78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 212.676934] RAX: ffffffffffffffda RBX: 00007fd75fabb6d4 RCX: 0000000000457089 [ 212.684238] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 212.691530] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 212.698822] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 212.706113] R13: 00000000004d4158 R14: 00000000004c8b2b R15: 0000000000000000 [ 212.713419] [ 212.715060] Uninit was created at: [ 212.718630] kmsan_internal_poison_shadow+0xb8/0x1b0 [ 212.723756] kmsan_kmalloc+0x98/0x100 [ 212.727576] kmsan_slab_alloc+0x10/0x20 [ 212.731577] __kmalloc_node_track_caller+0xb4c/0x11d0 [ 212.736794] __alloc_skb+0x2ce/0x9b0 [ 212.740538] netlink_sendmsg+0x776/0x1350 [ 212.744713] ___sys_sendmsg+0xe32/0x1250 [ 212.748797] __x64_sys_sendmsg+0x32d/0x460 [ 212.753063] do_syscall_64+0x15b/0x220 [ 212.756980] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 212.762185] ================================================================== [ 212.769557] Disabling lock debugging due to kernel taint [ 212.775022] Kernel panic - not syncing: panic_on_warn set ... [ 212.775022] [ 212.782420] CPU: 0 PID: 7076 Comm: syz-executor4 Tainted: G B 4.18.0-rc8+ #34 [ 212.791011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 212.800380] Call Trace: [ 212.802999] dump_stack+0x17c/0x1c0 [ 212.806658] panic+0x3c3/0x9a0 [ 212.809906] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 212.815389] kmsan_report+0x29e/0x2a0 [ 212.819236] __msan_warning+0x70/0xc0 [ 212.823072] tipc_nl_compat_doit+0x40b/0x9c0 [ 212.827519] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 212.833023] tipc_nl_compat_recv+0x119a/0x2700 [ 212.837637] ? tipc_nl_node_dump+0x1540/0x1540 [ 212.842245] ? tipc_nl_compat_link_dump+0x600/0x600 [ 212.847302] ? tipc_netlink_compat_stop+0x40/0x40 [ 212.852170] genl_rcv_msg+0x16b1/0x1840 [ 212.856215] netlink_rcv_skb+0x36e/0x5f0 [ 212.860305] ? genl_unbind+0x350/0x350 [ 212.864222] genl_rcv+0x63/0x80 [ 212.867529] netlink_unicast+0x1492/0x1740 [ 212.871805] ? genl_pernet_exit+0x90/0x90 [ 212.875998] netlink_sendmsg+0x114c/0x1350 [ 212.880289] ___sys_sendmsg+0xe32/0x1250 [ 212.884382] ? netlink_getsockopt+0x11c0/0x11c0 [ 212.889094] ? __fget_light+0x53/0x700 [ 212.893015] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 212.898404] ? __fget_light+0x6a3/0x700 [ 212.902426] __x64_sys_sendmsg+0x32d/0x460 [ 212.906709] ? ___sys_sendmsg+0x1250/0x1250 [ 212.911062] do_syscall_64+0x15b/0x220 [ 212.914986] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 212.920189] RIP: 0033:0x457089 [ 212.923374] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 212.942781] RSP: 002b:00007fd75fabac78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 212.950492] RAX: ffffffffffffffda RBX: 00007fd75fabb6d4 RCX: 0000000000457089 [ 212.957777] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 212.965065] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 212.972375] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 212.979639] R13: 00000000004d4158 R14: 00000000004c8b2b R15: 0000000000000000 [ 212.987329] Dumping ftrace buffer: [ 212.990862] (ftrace buffer empty) [ 212.994559] Kernel Offset: disabled [ 212.998181] Rebooting in 86400 seconds..