[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 37.442518] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 40.074992] random: sshd: uninitialized urandom read (32 bytes read) [ 40.558243] random: sshd: uninitialized urandom read (32 bytes read) [ 42.405305] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.4' (ECDSA) to the list of known hosts. [ 48.006370] random: sshd: uninitialized urandom read (32 bytes read) 2018/07/23 21:50:04 fuzzer started [ 49.753159] random: cc1: uninitialized urandom read (8 bytes read) 2018/07/23 21:50:07 dialing manager at 10.128.0.26:40663 2018/07/23 21:50:09 syscalls: 1605 2018/07/23 21:50:09 code coverage: enabled 2018/07/23 21:50:09 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/07/23 21:50:09 setuid sandbox: enabled 2018/07/23 21:50:09 namespace sandbox: enabled 2018/07/23 21:50:09 fault injection: enabled 2018/07/23 21:50:09 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/07/23 21:50:09 net packed injection: enabled 2018/07/23 21:50:09 net device setup: enabled [ 55.512770] random: crng init done 21:51:52 executing program 0: 21:51:52 executing program 1: 21:51:52 executing program 7: 21:51:52 executing program 2: 21:51:52 executing program 4: 21:51:52 executing program 5: 21:51:52 executing program 6: 21:51:52 executing program 3: [ 157.387535] IPVS: ftp: loaded support on port[0] = 21 [ 157.483512] IPVS: ftp: loaded support on port[0] = 21 [ 157.565236] IPVS: ftp: loaded support on port[0] = 21 [ 157.617933] IPVS: ftp: loaded support on port[0] = 21 [ 157.620062] IPVS: ftp: loaded support on port[0] = 21 [ 157.627243] IPVS: ftp: loaded support on port[0] = 21 [ 157.647530] IPVS: ftp: loaded support on port[0] = 21 [ 157.679436] IPVS: ftp: loaded support on port[0] = 21 [ 161.102236] ip (4917) used greatest stack depth: 53744 bytes left [ 161.859688] ip (4962) used greatest stack depth: 53616 bytes left [ 162.080238] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.082169] ip (4974) used greatest stack depth: 53504 bytes left [ 162.086810] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.119621] device bridge_slave_0 entered promiscuous mode [ 162.181019] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.187633] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.216565] device bridge_slave_0 entered promiscuous mode [ 162.436791] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.443392] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.480912] device bridge_slave_1 entered promiscuous mode [ 162.504699] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.511340] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.552771] device bridge_slave_1 entered promiscuous mode [ 162.590559] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.597149] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.646833] device bridge_slave_0 entered promiscuous mode [ 162.665010] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.671582] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.702470] device bridge_slave_0 entered promiscuous mode [ 162.729993] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.737022] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.761873] device bridge_slave_0 entered promiscuous mode [ 162.776691] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.783215] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.813339] device bridge_slave_0 entered promiscuous mode [ 162.846724] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 162.855641] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.862207] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.883505] device bridge_slave_0 entered promiscuous mode [ 162.901915] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.908476] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.934310] device bridge_slave_0 entered promiscuous mode [ 162.951197] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 162.962761] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.969308] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.988005] device bridge_slave_1 entered promiscuous mode [ 163.013129] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.019736] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.045587] device bridge_slave_1 entered promiscuous mode [ 163.063727] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.070295] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.111658] device bridge_slave_1 entered promiscuous mode [ 163.135562] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 163.146272] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.152844] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.196549] device bridge_slave_1 entered promiscuous mode [ 163.229395] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 163.237523] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.244174] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.268500] device bridge_slave_1 entered promiscuous mode [ 163.275539] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.282162] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.311942] device bridge_slave_1 entered promiscuous mode [ 163.334575] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 163.343143] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 163.357242] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 163.559432] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 163.583675] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 163.592836] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 163.606219] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 163.655096] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 163.706155] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 163.875064] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 163.907784] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 163.918479] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 164.031504] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 164.102020] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 164.326649] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 164.427195] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 164.588145] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 164.600874] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 164.609253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 164.653702] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 164.663829] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 164.761729] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 164.771268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 164.801682] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 164.820762] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 164.910751] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 164.935216] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 164.946652] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 164.961117] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 164.973489] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 164.982327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 165.041402] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 165.048978] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 165.102375] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 165.143788] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 165.218994] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 165.226587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 165.254991] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 165.263159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 165.294154] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 165.309849] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 165.364700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 165.384835] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 165.392004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 165.412225] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 165.422398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 165.529657] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 165.536845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 165.569270] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 165.576499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 165.617974] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 165.625959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 165.644974] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 165.652601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 165.737536] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 165.744747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 165.775189] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 165.782444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 165.874150] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 165.881258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 165.989676] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 166.001172] team0: Port device team_slave_0 added [ 166.108541] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 166.129296] team0: Port device team_slave_0 added [ 166.257699] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 166.289908] team0: Port device team_slave_1 added [ 166.382630] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 166.420242] team0: Port device team_slave_0 added [ 166.453710] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 166.479674] team0: Port device team_slave_1 added [ 166.522424] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 166.557273] team0: Port device team_slave_0 added [ 166.566454] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 166.587523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 166.606343] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 166.644411] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 166.656222] team0: Port device team_slave_0 added [ 166.673332] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 166.702642] team0: Port device team_slave_0 added [ 166.723522] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 166.735933] team0: Port device team_slave_0 added [ 166.749389] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 166.769174] team0: Port device team_slave_1 added [ 166.800751] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 166.817969] team0: Port device team_slave_0 added [ 166.838905] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 166.846130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 166.868957] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 166.894783] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 166.908766] team0: Port device team_slave_1 added [ 166.935278] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 166.947412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 166.959318] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 166.982864] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 167.001013] team0: Port device team_slave_1 added [ 167.023926] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 167.047251] team0: Port device team_slave_1 added [ 167.078209] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 167.091010] team0: Port device team_slave_1 added [ 167.115672] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 167.123677] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 167.144657] team0: Port device team_slave_1 added [ 167.166935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 167.180546] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 167.204607] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 167.226450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 167.238969] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 167.284936] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 167.292812] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 167.300498] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 167.315151] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 167.341246] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 167.373802] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 167.403960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 167.431869] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 167.457365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 167.476594] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 167.493918] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 167.503931] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 167.519412] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 167.549904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 167.559862] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 167.571631] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 167.583325] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 167.593477] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 167.607696] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 167.620285] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 167.630939] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 167.649393] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 167.693816] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 167.725302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 167.750970] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 167.785512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 167.813014] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 167.826166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 167.835683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 167.845302] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 167.855338] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 167.865137] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 167.892832] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 167.906985] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 167.916128] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 167.929778] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 167.949176] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 167.960744] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 167.970537] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 167.978866] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 167.988969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 168.006347] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 168.046636] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 168.074743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 168.106095] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 168.131553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 168.157673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 168.177538] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 168.188203] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 168.202204] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 168.213689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 168.235178] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 168.249173] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 168.260478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 168.286803] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 168.322311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 168.354529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 168.391403] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 168.399143] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 168.417506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 168.452245] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 168.461244] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 168.488961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 168.508775] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 168.516511] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 168.534474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 168.582107] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 168.593234] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 168.602415] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 168.618456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 168.642995] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 168.679142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 168.714981] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 168.722658] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 168.743425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 168.767464] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 168.809100] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 168.837994] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 168.893394] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 168.900949] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 168.920157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 171.076396] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.084303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.091288] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.098165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.129287] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 171.143607] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 171.211182] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.217782] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.224702] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.231179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.331138] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 171.472403] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.478976] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.485897] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.492394] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.555568] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 171.652914] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.659445] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.666325] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.672791] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.771433] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 171.801476] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.807966] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.814899] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.821366] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.834594] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 172.060533] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.067153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.074134] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.080646] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.111474] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 172.142538] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.149156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.156065] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.162557] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.250680] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 172.257567] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 172.271916] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 172.293215] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 172.309359] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 172.318400] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 172.336782] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 172.388023] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.394990] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.402019] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.408567] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.502588] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 173.280693] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 176.844850] ip (5760) used greatest stack depth: 53216 bytes left [ 183.166022] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.325758] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.357930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.509280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.593797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.943959] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.004535] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.162495] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.338369] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 184.494308] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 184.547016] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 184.583710] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 184.870012] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 185.094510] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 185.170158] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 185.230525] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 185.533875] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 185.540375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 185.556593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 185.606965] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 185.613514] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 185.629428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 185.694595] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 185.701269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 185.716989] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 185.781879] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 185.793432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 185.805385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 186.011085] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 186.017588] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 186.033532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 186.385289] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 186.391879] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 186.408898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 186.463421] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 186.469918] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 186.491633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 186.529212] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 186.542984] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 186.558431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 186.730641] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.855912] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.896990] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.093003] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.262952] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.593490] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.655976] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.841902] 8021q: adding VLAN 0 to HW filter on device team0 21:52:29 executing program 4: 21:52:29 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) sendmmsg$inet_sctp(r1, &(0x7f0000006f80)=[{&(0x7f0000006e40)=@in6={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000006f40), 0x20000000000000d4}], 0x1, 0x0) 21:52:30 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000000580)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, &(0x7f0000000700)) pipe(&(0x7f00000002c0)) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) umount2(&(0x7f0000000200)='./file0\x00', 0x4) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x4) 21:52:30 executing program 0: getrandom(&(0x7f0000000040)=""/44, 0xfffffebe, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000380)={'filter\x00', 0x7, 0x4, 0xff1d, 0x258, 0x0, 0x0, 0x38c, 0x38c, 0x38c, 0x4, &(0x7f0000000340), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac, @local, @local}}}, {{@arp={@loopback, @dev, 0x0, 0x0, @empty, {}, @mac, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'ip6_vti0\x00'}, 0xf0, 0x134}, @unspec=@LED={0x44, 'LED\x00', 0x0, {'syz0\x00'}}}], {{[], 0xc0, 0x1e5}, {0x24}}}}, 0x2e6) 21:52:30 executing program 5: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x2, r0, 0x0) 21:52:30 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) r1 = socket$inet6(0xa, 0x80000000002, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x1000}]}, 0x10) sendto$inet6(r1, &(0x7f0000000300), 0xfdb8, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x400000000000112, 0x0) 21:52:30 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @remote}, 0x10) 21:52:30 executing program 4: perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 21:52:30 executing program 5: write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)={[{0x2b, 'io'}, {0x0, 'rdma'}]}, 0xa) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_tables_targets\x00') getsockopt(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=""/134, &(0x7f0000000580)=0x86) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x40, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/1, 0x111}], 0x2000000000000021, 0x3) 21:52:30 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x400c000, &(0x7f0000000180)={0x2, 0x4e22, @remote}, 0x10) connect(r0, &(0x7f0000000100)=@nl=@unspec, 0x80) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/udp\x00') sendfile(r0, r1, &(0x7f00000001c0), 0xff) 21:52:31 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000d1c000)=0x2c, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) syz_emit_ethernet(0xfdef, &(0x7f0000000080)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @local={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x2b}}, @udp={0x0, 0x4e20, 0x8}}}}}, &(0x7f00000000c0)) 21:52:31 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x8000001, 0x0) r3 = dup3(r2, r1, 0x0) write$binfmt_elf32(r3, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 21:52:31 executing program 4: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r0, 0x80000) keyctl$join(0x1, &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x0}) keyctl$join(0x12, &(0x7f0000000080)) 21:52:31 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000014, &(0x7f0000000040)=0x80000000002, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @remote}, 0x10) write$binfmt_elf32(r0, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) sendto$inet(r0, &(0x7f0000000140), 0xeffdffff0001114e, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000000)={&(0x7f0000000100)=@in6={0x0, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f00000005c0)=""/112, 0x70}, 0x100000000000002) 21:52:31 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r0, &(0x7f000099bf26), 0x143, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='lp\x00', 0x3) sendto$inet(r0, &(0x7f0000000100), 0xfffffffffffffe4a, 0x877, 0x0, 0x0) [ 195.184895] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 195.295807] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 21:52:31 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000000100)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffa5, 0x0, 0x2}}, &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x6]}, 0x48) 21:52:31 executing program 4: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r0, 0x80000) keyctl$join(0x1, &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x0}) keyctl$join(0x12, &(0x7f0000000080)) 21:52:31 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getgroups(0x400000000000008d, &(0x7f0000000340)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f00000002c0), 0x4) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000400)=0xf8, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f0000000300), &(0x7f0000000340)=0x40) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x0) 21:52:31 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x71, &(0x7f0000000080), &(0x7f00000000c0)=0xc) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2, 0x32, 0xffffffffffffffff, 0x0) close(r0) 21:52:31 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x3, 0x0, @ipv4}, 0x1c) listen(r0, 0x43) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x3, 0x0, @loopback}, 0x1c) r2 = accept4(r0, &(0x7f0000c71ff0)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000f5effc)=0x10, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001000), 0x1000) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000002000)={0x90}, 0x90) read$FUSE(0xffffffffffffffff, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000003000)={0x90}, 0x90) dup2(r1, r2) 21:52:31 executing program 7: r0 = socket$inet6(0xa, 0x8000000000000802, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0xffff, 0x4) sendmsg$inet_sctp(r0, &(0x7f0000000080)={&(0x7f0000000500)=@in6={0xa, 0x4e24, 0x0, @dev}, 0x1c, &(0x7f0000000480)}, 0x8000) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f00009f0ffc), 0x4) 21:52:31 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000431000/0x400000)=nil, 0x400000, 0x0, 0x10, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r0, &(0x7f0000000580)={&(0x7f0000000000), 0xc, &(0x7f0000000540)={&(0x7f0000000240)=@setlink={0x28, 0x13, 0x21, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0x1a, [{0x4}]}]}, 0x28}}, 0x0) 21:52:31 executing program 4: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r0, 0x80000) keyctl$join(0x1, &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x0}) keyctl$join(0x12, &(0x7f0000000080)) 21:52:31 executing program 3: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080), 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0xb, r0, &(0x7f00000001c0), 0x0) 21:52:32 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @broadcast, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @remote, @loopback, @random="af57c24a118a", @rand_addr=0x1c}}}}, 0x0) 21:52:32 executing program 3: r0 = add_key$keyring(&(0x7f0000000600)='keyring\x00', &(0x7f0000000640), 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f00000005c0), 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480), 0x0, 0x0, r1) r3 = add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000340)="7f4d4ffe17ff7cd47dfcac4a59b60fd52f8ecc74e911427a96997378d3ab7b002fe1ba4e68d7d0b91630fa9ecd8ed53c1669045708c25ece29ed26258d1767f4e7f900ea53ef5fb0f28a9f9e4251e0aad9", 0x51, r2) r4 = add_key$user(&(0x7f0000002cc0)='user\x00', &(0x7f00000000c0), &(0x7f0000000280), 0x10c, r2) keyctl$dh_compute(0x17, &(0x7f00000001c0)={r4, r4, r3}, &(0x7f0000000280)=""/132, 0x84, 0x0) 21:52:32 executing program 4: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r0, 0x80000) keyctl$join(0x1, &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x0}) keyctl$join(0x12, &(0x7f0000000080)) 21:52:32 executing program 6: pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) vmsplice(r1, &(0x7f0000000380)=[{&(0x7f0000000340), 0x1000000}], 0x1, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000080)={0x7, 0x7f, 0x1}, 0x7) dup2(r0, r2) 21:52:32 executing program 7: bind$can_raw(0xffffffffffffffff, &(0x7f0000000080), 0x10) r0 = socket(0x2, 0x3, 0x100000001) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='ip_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000000080), 0xff45, 0x0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) 21:52:32 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x88, 0xb, &(0x7f0000001900)=@nat={'nat\x00', 0x1b, 0x5, 0x490, 0x3d0, 0x0, 0xffffffff, 0x3d0, 0x250, 0x4f0, 0x4f0, 0xffffffff, 0x4f0, 0x4f0, 0x5, &(0x7f0000001880), {[{{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv4=@dev, @ipv6=@mcast2, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@dev, @ipv4=@loopback, @port, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@mcast2, @ipv6=@ipv4={[], [], @local}, @gre_key, @icmp_id}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4f0) 21:52:32 executing program 4: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r0, 0x80000) keyctl$join(0x12, &(0x7f0000000080)) 21:52:32 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x3, 0x0, @ipv4}, 0x1c) listen(r0, 0x43) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x3, 0x0, @loopback}, 0x1c) r2 = accept4(r0, &(0x7f0000c71ff0)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000f5effc)=0x10, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001000), 0x1000) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000002000)={0x90}, 0x90) read$FUSE(0xffffffffffffffff, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000003000)={0x90}, 0x90) dup2(r1, r2) 21:52:32 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0xf4, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @my}, 0x10) ioctl$int_in(r0, 0x80000005421, &(0x7f0000000000)=0xff) listen(r0, 0x0) accept4$vsock_stream(r0, &(0x7f00000001c0)={0x28, 0x0, 0x0, @host}, 0x10, 0x0) 21:52:32 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f00000000c0)={0x20, 0x1d, 0xffffffff0000000d, 0x0, 0x0, {0x7592da1f}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}}, 0x0) 21:52:32 executing program 7: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="e92be282e09b542ad5"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x55}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 21:52:32 executing program 4: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r0, 0x80000) keyctl$join(0x12, &(0x7f0000000080)) 21:52:32 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000340)={@dev, @remote, @loopback, 0x0, 0x0, 0x0, 0x0, 0x3}) 21:52:32 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000), 0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'tunl0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f00000000c0)={@dev, r1}, 0xfffffffffffffedf) 21:52:32 executing program 3: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x228, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, &(0x7f0000000000)) [ 196.907676] netlink: 'syz-executor5': attribute type 1 has an invalid length. 21:52:33 executing program 4: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r0, 0x80000) keyctl$join(0x12, &(0x7f0000000080)) [ 196.956434] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 21:52:33 executing program 7: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="e92be282e09b542ad5"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x55}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 21:52:33 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f00000001c0)={0x18, 0x0, {0x100003, @local, 'ip6_vti0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'erspan0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f00000000c0)={0x18, 0x0, {0x3, @local, 'ip6_vti0\x00'}}) [ 197.133311] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 21:52:33 executing program 5: pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)) fcntl$setstatus(r0, 0x4, 0x2000) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) dup2(r1, r0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x9) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000604ffc)) dup2(r0, r2) 21:52:33 executing program 6: pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) vmsplice(r1, &(0x7f0000000380)=[{&(0x7f0000000340), 0x1000000}], 0x1, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000080)={0x7, 0x7f, 0x1}, 0x7) dup2(r0, r2) 21:52:33 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000000100)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @dev}}}, 0x108) 21:52:33 executing program 4: add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$join(0x1, &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x0}) keyctl$join(0x12, &(0x7f0000000080)) 21:52:33 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x20000000002) recvmmsg(r0, &(0x7f0000000840)=[{{&(0x7f00000005c0)=@generic, 0x80, &(0x7f0000000800)}}], 0x1, 0x0, 0x0) 21:52:33 executing program 7: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x4e21, 0x0, @local}}}, 0x84) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x10) fcntl$setstatus(r0, 0x408, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) readv(r0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/146, 0x92}], 0x1) dup2(r0, r2) 21:52:33 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {}, r1}}, 0x48) 21:52:33 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0xd4, 0x10}, 0xfffffffffffffc71) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0xfb, &(0x7f00001a7f05)=""/251}, 0x14) 21:52:33 executing program 4: add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$join(0x1, &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x0}) keyctl$join(0x12, &(0x7f0000000080)) 21:52:33 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40033, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) 21:52:33 executing program 4: add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$join(0x1, &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x0}) keyctl$join(0x12, &(0x7f0000000080)) 21:52:33 executing program 2: r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000f7db7f), 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f00004b3fff), 0x380, 0x0, &(0x7f00002b4000)={0x2, 0x4e20, @loopback}, 0x10) readv(r0, &(0x7f00007af000)=[{&(0x7f0000dd0fe6)=""/26, 0x1a}], 0x1) recvmsg(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/250, 0xfa}, {&(0x7f0000000340)=""/140, 0x8c}, {&(0x7f0000000400)=""/177, 0xb1}, {&(0x7f0000000000)=""/104, 0x68}, {&(0x7f00000004c0)=""/146, 0x92}, {&(0x7f0000000580)=""/86, 0x56}], 0x6, &(0x7f0000000600)=""/164, 0xa4}, 0x102) 21:52:33 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x20000000021) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/rt6_stats\x00') sendto$inet6(r0, &(0x7f0000000000), 0xfedf, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @local}, 0x1a) 21:52:33 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) r1 = dup(r0) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) io_setup(0x3, &(0x7f0000cadffc)=0x0) io_submit(r3, 0x1, &(0x7f000049bfe8)=[&(0x7f00004dbfc0)={0x0, 0x0, 0x0, 0x8, 0x0, r2, &(0x7f0000391000)}]) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0x0, 0x0, 0x0, 0x2}, 0x10}}, 0x0) [ 198.008890] dccp_v6_rcv: dropped packet with invalid checksum [ 198.044531] ================================================================== [ 198.052001] BUG: KMSAN: uninit-value in __nf_conntrack_find_get+0xc15/0x2190 [ 198.059232] CPU: 0 PID: 6966 Comm: syz-executor1 Not tainted 4.18.0-rc5+ #29 [ 198.066439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 198.075824] Call Trace: [ 198.078488] dump_stack+0x185/0x1e0 [ 198.082171] kmsan_report+0x195/0x2c0 [ 198.086048] __msan_warning+0x7d/0xe0 [ 198.089923] __nf_conntrack_find_get+0xc15/0x2190 [ 198.094810] ? __msan_poison_alloca+0x183/0x220 [ 198.099544] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 198.104957] ? hash_conntrack_raw+0x5f7/0x8c0 [ 198.109510] nf_conntrack_in+0x1674/0x2070 [ 198.113832] ipv6_conntrack_local+0xc3/0xf0 [ 198.118218] ? ipv6_conntrack_in+0xf0/0xf0 [ 198.122498] nf_hook_slow+0x15d/0x3e0 [ 198.126349] __ip6_local_out+0x64c/0x770 [ 198.130467] ? __ip6_local_out+0x770/0x770 [ 198.134770] ip6_local_out+0xa4/0x1d0 [ 198.138637] ip6_push_pending_frames+0x218/0x4d0 [ 198.143449] rawv6_sendmsg+0x45f0/0x5410 [ 198.147588] ? kmsan_set_origin_inline+0x6b/0x120 [ 198.152500] ? __msan_poison_alloca+0x183/0x220 [ 198.157208] ? __fdget+0x4e/0x60 [ 198.160640] ? compat_rawv6_ioctl+0x100/0x100 [ 198.165182] inet_sendmsg+0x3fc/0x760 [ 198.169055] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 198.174464] ? inet_getname+0x4a0/0x4a0 [ 198.178512] __sys_sendto+0x798/0x8e0 [ 198.182389] ? syscall_return_slowpath+0x108/0x800 [ 198.187390] __x64_sys_sendto+0x1a1/0x210 [ 198.191601] ? __sys_sendto+0x8e0/0x8e0 [ 198.195623] do_syscall_64+0x15b/0x230 [ 198.199563] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 198.204782] RIP: 0033:0x455ab9 [ 198.208022] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 198.227393] RSP: 002b:00007fb9288c7c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 198.235137] RAX: ffffffffffffffda RBX: 00007fb9288c86d4 RCX: 0000000000455ab9 [ 198.242476] RDX: 000000000000fedf RSI: 0000000020000000 RDI: 0000000000000018 [ 198.249784] RBP: 000000000072bea0 R08: 0000000020000180 R09: 000000000000001a [ 198.257100] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 198.264413] R13: 00000000004c1164 R14: 00000000004d1860 R15: 0000000000000000 [ 198.271726] [ 198.273370] Uninit was stored to memory at: [ 198.277782] kmsan_internal_chain_origin+0x13c/0x240 [ 198.282966] __msan_chain_origin+0x76/0xd0 [ 198.287251] __nf_conntrack_confirm+0x2700/0x3f70 [ 198.292229] ipv6_confirm+0x573/0x740 [ 198.296063] nf_hook_slow+0x15d/0x3e0 [ 198.299904] ip6_output+0x37d/0x710 [ 198.303577] ip6_local_out+0x164/0x1d0 [ 198.307491] ip6_push_pending_frames+0x218/0x4d0 [ 198.312279] rawv6_sendmsg+0x45f0/0x5410 [ 198.316384] inet_sendmsg+0x3fc/0x760 [ 198.320225] __sys_sendto+0x798/0x8e0 [ 198.324060] __x64_sys_sendto+0x1a1/0x210 [ 198.328254] do_syscall_64+0x15b/0x230 [ 198.332196] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 198.337503] [ 198.339143] Uninit was created at: [ 198.342716] kmsan_internal_poison_shadow+0xc8/0x1d0 [ 198.347874] kmsan_kmalloc+0xa1/0x120 [ 198.351702] kmem_cache_alloc+0xad2/0xbb0 [ 198.355892] __nf_conntrack_alloc+0x166/0x670 [ 198.360503] init_conntrack+0x635/0x2840 [ 198.364619] nf_conntrack_in+0x1812/0x2070 [ 198.368896] ipv6_conntrack_local+0xc3/0xf0 [ 198.373258] nf_hook_slow+0x15d/0x3e0 [ 198.377099] __ip6_local_out+0x64c/0x770 [ 198.381220] ip6_local_out+0xa4/0x1d0 [ 198.385059] ip6_push_pending_frames+0x218/0x4d0 [ 198.389860] rawv6_sendmsg+0x45f0/0x5410 [ 198.393966] inet_sendmsg+0x3fc/0x760 [ 198.397820] __sys_sendto+0x798/0x8e0 [ 198.401670] __x64_sys_sendto+0x1a1/0x210 [ 198.405879] do_syscall_64+0x15b/0x230 [ 198.409814] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 198.415286] ================================================================== [ 198.422703] Disabling lock debugging due to kernel taint [ 198.428206] Kernel panic - not syncing: panic_on_warn set ... [ 198.428206] [ 198.435639] CPU: 0 PID: 6966 Comm: syz-executor1 Tainted: G B 4.18.0-rc5+ #29 [ 198.444263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 198.453926] Call Trace: [ 198.456579] dump_stack+0x185/0x1e0 [ 198.460252] panic+0x3d0/0x9b0 [ 198.463514] kmsan_report+0x2bf/0x2c0 [ 198.467367] __msan_warning+0x7d/0xe0 [ 198.471209] __nf_conntrack_find_get+0xc15/0x2190 [ 198.476104] ? __msan_poison_alloca+0x183/0x220 [ 198.480833] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 198.486265] ? hash_conntrack_raw+0x5f7/0x8c0 [ 198.490815] nf_conntrack_in+0x1674/0x2070 [ 198.495129] ipv6_conntrack_local+0xc3/0xf0 [ 198.499498] ? ipv6_conntrack_in+0xf0/0xf0 [ 198.503765] nf_hook_slow+0x15d/0x3e0 [ 198.507617] __ip6_local_out+0x64c/0x770 [ 198.511747] ? __ip6_local_out+0x770/0x770 [ 198.516034] ip6_local_out+0xa4/0x1d0 [ 198.519895] ip6_push_pending_frames+0x218/0x4d0 [ 198.524704] rawv6_sendmsg+0x45f0/0x5410 [ 198.528875] ? kmsan_set_origin_inline+0x6b/0x120 [ 198.533760] ? __msan_poison_alloca+0x183/0x220 [ 198.538637] ? __fdget+0x4e/0x60 [ 198.542057] ? compat_rawv6_ioctl+0x100/0x100 [ 198.546577] inet_sendmsg+0x3fc/0x760 [ 198.550417] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 198.555829] ? inet_getname+0x4a0/0x4a0 [ 198.559855] __sys_sendto+0x798/0x8e0 [ 198.563697] ? syscall_return_slowpath+0x108/0x800 [ 198.568673] __x64_sys_sendto+0x1a1/0x210 [ 198.572879] ? __sys_sendto+0x8e0/0x8e0 [ 198.576898] do_syscall_64+0x15b/0x230 [ 198.580873] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 198.586095] RIP: 0033:0x455ab9 [ 198.589292] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 198.608658] RSP: 002b:00007fb9288c7c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 198.616663] RAX: ffffffffffffffda RBX: 00007fb9288c86d4 RCX: 0000000000455ab9 [ 198.623958] RDX: 000000000000fedf RSI: 0000000020000000 RDI: 0000000000000018 [ 198.631256] RBP: 000000000072bea0 R08: 0000000020000180 R09: 000000000000001a [ 198.638576] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 198.645882] R13: 00000000004c1164 R14: 00000000004d1860 R15: 0000000000000000 [ 198.653786] Dumping ftrace buffer: [ 198.657743] (ftrace buffer empty) [ 198.661447] Kernel Offset: disabled [ 198.665074] Rebooting in 86400 seconds..