[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 24.168798] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 25.914263] random: sshd: uninitialized urandom read (32 bytes read) [ 26.251877] random: sshd: uninitialized urandom read (32 bytes read) [ 26.996836] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.33' (ECDSA) to the list of known hosts. [ 32.748039] random: sshd: uninitialized urandom read (32 bytes read) 2018/09/13 05:13:43 fuzzer started [ 33.694899] random: cc1: uninitialized urandom read (8 bytes read) 2018/09/13 05:13:44 dialing manager at 10.128.0.26:42495 2018/09/13 05:13:45 checking revisions... 2018/09/13 05:13:45 testing simple program... [ 34.653601] IPVS: ftp: loaded support on port[0] = 21 executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 63.395103] can: request_module (can-proto-0) failed. [ 63.405728] can: request_module (can-proto-0) failed. executing program 2018/09/13 05:14:16 syscalls: 1 2018/09/13 05:14:16 code coverage: enabled 2018/09/13 05:14:16 comparison tracing: enabled 2018/09/13 05:14:16 setuid sandbox: enabled 2018/09/13 05:14:16 namespace sandbox: enabled 2018/09/13 05:14:16 fault injection: enabled 2018/09/13 05:14:16 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/09/13 05:14:16 net packed injection: enabled 2018/09/13 05:14:16 net device setup: enabled 05:14:16 executing program 0: r0 = socket(0xa, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth0_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@loopback, @empty, @loopback, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, r2}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000100)={@loopback, @loopback, @remote, 0x0, 0x0, 0x9}) 05:14:16 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f00000000c0), 0x0) sendmsg$rds(r1, &(0x7f0000001f00)={&(0x7f00000003c0)={0x2, 0x0, @multicast2}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000580)=""/11, 0xb}, {&(0x7f00000005c0)=""/30, 0x200005de}], 0x2, &(0x7f0000001bc0)}, 0x0) 05:14:16 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000023000)={&(0x7f0000024000), 0xc, &(0x7f0000023ff0)={&(0x7f0000010ec4)={0x14, 0x27, 0xaff, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 05:14:16 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3ff) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000140)=0x7, 0x4) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept(r0, &(0x7f0000000040)=@vsock={0x28, 0x0, 0x0, @reserved}, &(0x7f00000000c0)=0x80) write$binfmt_misc(r2, &(0x7f0000000200)={'syz0'}, 0x4) 05:14:16 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)="7374617409c0d2febcf9df2deac8c177ff171248e91193513049f831550d6f7de66cf637bdbf1311920c8a26eda4dcc3783f9db5116b34d31b0512a5608aaff01e7952340cd6fd00000000", 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000040), 0x12) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="7f"], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000001300)={0x0, r0, 0x100000000}) 05:14:16 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x522000000003, 0x11) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)) [ 66.563418] IPVS: ftp: loaded support on port[0] = 21 [ 66.567034] IPVS: ftp: loaded support on port[0] = 21 [ 66.588904] IPVS: ftp: loaded support on port[0] = 21 [ 66.598084] IPVS: ftp: loaded support on port[0] = 21 [ 66.609998] IPVS: ftp: loaded support on port[0] = 21 [ 66.647019] IPVS: ftp: loaded support on port[0] = 21 [ 68.882111] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.895261] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.910465] device bridge_slave_0 entered promiscuous mode [ 68.930361] ip (5642) used greatest stack depth: 16648 bytes left [ 68.934636] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.958334] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.978456] device bridge_slave_0 entered promiscuous mode [ 69.000065] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.006509] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.015493] device bridge_slave_0 entered promiscuous mode [ 69.044603] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.069043] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.088308] device bridge_slave_1 entered promiscuous mode [ 69.097763] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.106506] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.126299] device bridge_slave_0 entered promiscuous mode [ 69.137283] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.143744] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.151369] device bridge_slave_1 entered promiscuous mode [ 69.160314] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.166757] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.187116] device bridge_slave_1 entered promiscuous mode [ 69.195997] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 69.206748] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.219991] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.227472] device bridge_slave_0 entered promiscuous mode [ 69.249959] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.256343] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.266242] device bridge_slave_0 entered promiscuous mode [ 69.283373] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 69.292561] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 69.309618] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 69.320837] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.327208] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.369397] device bridge_slave_1 entered promiscuous mode [ 69.382480] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.396392] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.404831] device bridge_slave_1 entered promiscuous mode [ 69.415651] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.424092] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.431803] device bridge_slave_1 entered promiscuous mode [ 69.448180] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 69.476706] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 69.499037] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 69.527385] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 69.567115] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 69.623836] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 69.649129] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 69.694476] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 69.722893] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 69.839854] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 69.919992] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 69.957511] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 70.077163] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 70.091811] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 70.109501] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 70.123548] ip (5735) used greatest stack depth: 15312 bytes left [ 70.133851] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 70.172610] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 70.193274] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 70.242477] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 70.310108] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 70.331921] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 70.339366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.371093] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 70.379826] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.436092] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 70.458660] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 70.465552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.482958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.511483] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 70.527573] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 70.543138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.560462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.606231] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 70.626005] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.646092] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 70.675273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.700486] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 70.708195] team0: Port device team_slave_0 added [ 70.803385] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 70.839752] team0: Port device team_slave_0 added [ 70.848121] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 70.879044] team0: Port device team_slave_1 added [ 70.887147] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 70.900847] team0: Port device team_slave_0 added [ 70.952049] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 70.969035] team0: Port device team_slave_0 added [ 70.983127] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 71.009317] team0: Port device team_slave_1 added [ 71.016829] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 71.030699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.059088] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.068527] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 71.075843] team0: Port device team_slave_0 added [ 71.091194] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 71.108897] team0: Port device team_slave_1 added [ 71.116947] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 71.144480] team0: Port device team_slave_1 added [ 71.152499] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 71.160420] team0: Port device team_slave_0 added [ 71.184632] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.195708] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.226808] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 71.241516] team0: Port device team_slave_1 added [ 71.257843] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.300444] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 71.329021] team0: Port device team_slave_1 added [ 71.338370] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 71.346349] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.357188] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.388010] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.404555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.415782] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 71.428865] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 71.439901] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 71.447649] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 71.468845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.477387] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.499156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.519310] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.536205] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.544227] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.552418] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.560653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.569662] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 71.580760] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 71.587798] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 71.605602] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 71.636706] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 71.660941] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.671589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.699166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.716839] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.731908] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.739881] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.747309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.755307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.763271] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.771266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.782751] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 71.795984] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 71.807624] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.815757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.838888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.849894] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.876660] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 71.884018] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 71.891926] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 71.913306] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 71.938612] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.959583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.998579] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.006669] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.029009] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.039498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.047185] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.055147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.067053] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 72.083839] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 72.098911] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.110304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.148850] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.178033] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.207130] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.213710] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.220769] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.227148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.253127] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 73.265536] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.271990] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.278712] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.285084] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.294616] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 73.358318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.390370] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.443905] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.450345] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.457021] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.463462] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.501900] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 73.514259] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.520682] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.527361] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.533801] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.547240] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 73.571088] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.577464] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.584197] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.590608] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.632530] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 73.747133] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.753581] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.760324] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.766697] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.806504] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 74.388576] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.399312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.438661] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.447263] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 78.583492] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.688459] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.708195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.031925] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.042481] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.069483] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 79.209061] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.221670] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 79.231261] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 79.538742] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 79.585653] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 79.608571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.615712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.636083] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 79.671624] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 79.690377] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 79.698078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.714585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.779964] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 79.792512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.826305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.088889] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 80.095076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.115698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.132016] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.141732] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 80.150320] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 80.156474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.170508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.189184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.209339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.361577] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.373972] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.608611] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.628065] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.650838] 8021q: adding VLAN 0 to HW filter on device team0 05:14:33 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)="7374617409c0d2febcf9df2deac8c177ff171248e91193513049f831550d6f7de66cf637bdbf1311920c8a26eda4dcc3783f9db5116b34d31b0512a5608aaff01e7952340cd6fd00000000", 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000040), 0x12) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="7f"], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000001300)={0x0, r0, 0x100000000}) 05:14:33 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)="7374617409c0d2febcf9df2deac8c177ff171248e91193513049f831550d6f7de66cf637bdbf1311920c8a26eda4dcc3783f9db5116b34d31b0512a5608aaff01e7952340cd6fd00000000", 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000040), 0x12) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="7f"], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000001300)={0x0, r0, 0x100000000}) 05:14:33 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)="7374617409c0d2febcf9df2deac8c177ff171248e91193513049f831550d6f7de66cf637bdbf1311920c8a26eda4dcc3783f9db5116b34d31b0512a5608aaff01e7952340cd6fd00000000", 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000040), 0x12) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="7f"], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000001300)={0x0, r0, 0x100000000}) 05:14:33 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000023000)={&(0x7f0000024000), 0xc, &(0x7f0000023ff0)={&(0x7f0000010ec4)={0x14, 0x27, 0xaff, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 05:14:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000023000)={&(0x7f0000024000), 0xc, &(0x7f0000023ff0)={&(0x7f0000010ec4)={0x14, 0x27, 0xaff, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 05:14:34 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000023000)={&(0x7f0000024000), 0xc, &(0x7f0000023ff0)={&(0x7f0000010ec4)={0x14, 0x27, 0xaff, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 05:14:34 executing program 0: r0 = socket(0xa, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth0_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@loopback, @empty, @loopback, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, r2}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000100)={@loopback, @loopback, @remote, 0x0, 0x0, 0x9}) 05:14:34 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f00000000c0), 0x0) sendmsg$rds(r1, &(0x7f0000001f00)={&(0x7f00000003c0)={0x2, 0x0, @multicast2}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000580)=""/11, 0xb}, {&(0x7f00000005c0)=""/30, 0x200005de}], 0x2, &(0x7f0000001bc0)}, 0x0) 05:14:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000023000)={&(0x7f0000024000), 0xc, &(0x7f0000023ff0)={&(0x7f0000010ec4)={0x14, 0x27, 0xaff, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 05:14:35 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3ff) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000140)=0x7, 0x4) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept(r0, &(0x7f0000000040)=@vsock={0x28, 0x0, 0x0, @reserved}, &(0x7f00000000c0)=0x80) write$binfmt_misc(r2, &(0x7f0000000200)={'syz0'}, 0x4) 05:14:35 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f00000000c0), 0x0) sendmsg$rds(r1, &(0x7f0000001f00)={&(0x7f00000003c0)={0x2, 0x0, @multicast2}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000580)=""/11, 0xb}, {&(0x7f00000005c0)=""/30, 0x200005de}], 0x2, &(0x7f0000001bc0)}, 0x0) 05:14:35 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000023000)={&(0x7f0000024000), 0xc, &(0x7f0000023ff0)={&(0x7f0000010ec4)={0x14, 0x27, 0xaff, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 05:14:35 executing program 0: r0 = socket(0xa, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth0_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@loopback, @empty, @loopback, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, r2}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000100)={@loopback, @loopback, @remote, 0x0, 0x0, 0x9}) 05:14:35 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000023000)={&(0x7f0000024000), 0xc, &(0x7f0000023ff0)={&(0x7f0000010ec4)={0x14, 0x27, 0xaff, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 05:14:35 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x522000000003, 0x11) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)) 05:14:35 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x522000000003, 0x11) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)) 05:14:35 executing program 0: r0 = socket(0xa, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth0_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@loopback, @empty, @loopback, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, r2}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000100)={@loopback, @loopback, @remote, 0x0, 0x0, 0x9}) 05:14:35 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3ff) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000140)=0x7, 0x4) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept(r0, &(0x7f0000000040)=@vsock={0x28, 0x0, 0x0, @reserved}, &(0x7f00000000c0)=0x80) write$binfmt_misc(r2, &(0x7f0000000200)={'syz0'}, 0x4) 05:14:35 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3ff) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000140)=0x7, 0x4) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept(r0, &(0x7f0000000040)=@vsock={0x28, 0x0, 0x0, @reserved}, &(0x7f00000000c0)=0x80) write$binfmt_misc(r2, &(0x7f0000000200)={'syz0'}, 0x4) 05:14:35 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x522000000003, 0x11) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)) 05:14:35 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f00000000c0), 0x0) sendmsg$rds(r1, &(0x7f0000001f00)={&(0x7f00000003c0)={0x2, 0x0, @multicast2}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000580)=""/11, 0xb}, {&(0x7f00000005c0)=""/30, 0x200005de}], 0x2, &(0x7f0000001bc0)}, 0x0) 05:14:35 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3ff) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000140)=0x7, 0x4) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept(r0, &(0x7f0000000040)=@vsock={0x28, 0x0, 0x0, @reserved}, &(0x7f00000000c0)=0x80) write$binfmt_misc(r2, &(0x7f0000000200)={'syz0'}, 0x4) 05:14:35 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3ff) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000140)=0x7, 0x4) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept(r0, &(0x7f0000000040)=@vsock={0x28, 0x0, 0x0, @reserved}, &(0x7f00000000c0)=0x80) write$binfmt_misc(r2, &(0x7f0000000200)={'syz0'}, 0x4) 05:14:35 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3ff) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000140)=0x7, 0x4) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept(r0, &(0x7f0000000040)=@vsock={0x28, 0x0, 0x0, @reserved}, &(0x7f00000000c0)=0x80) write$binfmt_misc(r2, &(0x7f0000000200)={'syz0'}, 0x4) 05:14:35 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3ff) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000140)=0x7, 0x4) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept(r0, &(0x7f0000000040)=@vsock={0x28, 0x0, 0x0, @reserved}, &(0x7f00000000c0)=0x80) write$binfmt_misc(r2, &(0x7f0000000200)={'syz0'}, 0x4) 05:14:35 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3ff) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000140)=0x7, 0x4) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept(r0, &(0x7f0000000040)=@vsock={0x28, 0x0, 0x0, @reserved}, &(0x7f00000000c0)=0x80) write$binfmt_misc(r2, &(0x7f0000000200)={'syz0'}, 0x4) 05:14:35 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3ff) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000140)=0x7, 0x4) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept(r0, &(0x7f0000000040)=@vsock={0x28, 0x0, 0x0, @reserved}, &(0x7f00000000c0)=0x80) write$binfmt_misc(r2, &(0x7f0000000200)={'syz0'}, 0x4) 05:14:35 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3ff) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000140)=0x7, 0x4) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept(r0, &(0x7f0000000040)=@vsock={0x28, 0x0, 0x0, @reserved}, &(0x7f00000000c0)=0x80) write$binfmt_misc(r2, &(0x7f0000000200)={'syz0'}, 0x4) 05:14:35 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3ff) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000140)=0x7, 0x4) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept(r0, &(0x7f0000000040)=@vsock={0x28, 0x0, 0x0, @reserved}, &(0x7f00000000c0)=0x80) write$binfmt_misc(r2, &(0x7f0000000200)={'syz0'}, 0x4) 05:14:36 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3ff) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000140)=0x7, 0x4) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept(r0, &(0x7f0000000040)=@vsock={0x28, 0x0, 0x0, @reserved}, &(0x7f00000000c0)=0x80) write$binfmt_misc(r2, &(0x7f0000000200)={'syz0'}, 0x4) 05:14:36 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3ff) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000140)=0x7, 0x4) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept(r0, &(0x7f0000000040)=@vsock={0x28, 0x0, 0x0, @reserved}, &(0x7f00000000c0)=0x80) write$binfmt_misc(r2, &(0x7f0000000200)={'syz0'}, 0x4) 05:14:36 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3ff) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000140)=0x7, 0x4) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept(r0, &(0x7f0000000040)=@vsock={0x28, 0x0, 0x0, @reserved}, &(0x7f00000000c0)=0x80) write$binfmt_misc(r2, &(0x7f0000000200)={'syz0'}, 0x4) 05:14:36 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3ff) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000140)=0x7, 0x4) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept(r0, &(0x7f0000000040)=@vsock={0x28, 0x0, 0x0, @reserved}, &(0x7f00000000c0)=0x80) write$binfmt_misc(r2, &(0x7f0000000200)={'syz0'}, 0x4) 05:14:36 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3ff) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000140)=0x7, 0x4) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept(r0, &(0x7f0000000040)=@vsock={0x28, 0x0, 0x0, @reserved}, &(0x7f00000000c0)=0x80) write$binfmt_misc(r2, &(0x7f0000000200)={'syz0'}, 0x4) 05:14:36 executing program 3: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x522000000003, 0x11) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)) 05:14:36 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3ff) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000140)=0x7, 0x4) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept(r0, &(0x7f0000000040)=@vsock={0x28, 0x0, 0x0, @reserved}, &(0x7f00000000c0)=0x80) write$binfmt_misc(r2, &(0x7f0000000200)={'syz0'}, 0x4) 05:14:36 executing program 3: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x522000000003, 0x11) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)) 05:14:36 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3ff) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000140)=0x7, 0x4) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept(r0, &(0x7f0000000040)=@vsock={0x28, 0x0, 0x0, @reserved}, &(0x7f00000000c0)=0x80) write$binfmt_misc(r2, &(0x7f0000000200)={'syz0'}, 0x4) 05:14:36 executing program 3: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x522000000003, 0x11) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)) 05:14:36 executing program 2: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x522000000003, 0x11) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)) 05:14:36 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3ff) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000140)=0x7, 0x4) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept(r0, &(0x7f0000000040)=@vsock={0x28, 0x0, 0x0, @reserved}, &(0x7f00000000c0)=0x80) write$binfmt_misc(r2, &(0x7f0000000200)={'syz0'}, 0x4) 05:14:36 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f00000000c0), 0x0) sendmsg$rds(r1, &(0x7f0000001f00)={&(0x7f00000003c0)={0x2, 0x0, @multicast2}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000580)=""/11, 0xb}, {&(0x7f00000005c0)=""/30, 0x200005de}], 0x2, &(0x7f0000001bc0)}, 0x0) 05:14:36 executing program 2: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x522000000003, 0x11) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)) 05:14:36 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3ff) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000140)=0x7, 0x4) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept(r0, &(0x7f0000000040)=@vsock={0x28, 0x0, 0x0, @reserved}, &(0x7f00000000c0)=0x80) write$binfmt_misc(r2, &(0x7f0000000200)={'syz0'}, 0x4) 05:14:36 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f00000000c0), 0x0) sendmsg$rds(r1, &(0x7f0000001f00)={&(0x7f00000003c0)={0x2, 0x0, @multicast2}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000580)=""/11, 0xb}, {&(0x7f00000005c0)=""/30, 0x200005de}], 0x2, &(0x7f0000001bc0)}, 0x0) 05:14:36 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f00000000c0), 0x0) sendmsg$rds(r1, &(0x7f0000001f00)={&(0x7f00000003c0)={0x2, 0x0, @multicast2}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000580)=""/11, 0xb}, {&(0x7f00000005c0)=""/30, 0x200005de}], 0x2, &(0x7f0000001bc0)}, 0x0) 05:14:36 executing program 2: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x522000000003, 0x11) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)) 05:14:37 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3ff) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000140)=0x7, 0x4) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept(r0, &(0x7f0000000040)=@vsock={0x28, 0x0, 0x0, @reserved}, &(0x7f00000000c0)=0x80) write$binfmt_misc(r2, &(0x7f0000000200)={'syz0'}, 0x4) 05:14:37 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f00000000c0), 0x0) sendmsg$rds(r1, &(0x7f0000001f00)={&(0x7f00000003c0)={0x2, 0x0, @multicast2}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000580)=""/11, 0xb}, {&(0x7f00000005c0)=""/30, 0x200005de}], 0x2, &(0x7f0000001bc0)}, 0x0) 05:14:37 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f00000000c0), 0x0) sendmsg$rds(r1, &(0x7f0000001f00)={&(0x7f00000003c0)={0x2, 0x0, @multicast2}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000580)=""/11, 0xb}, {&(0x7f00000005c0)=""/30, 0x200005de}], 0x2, &(0x7f0000001bc0)}, 0x0) 05:14:37 executing program 1: r0 = socket(0xa, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth0_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@loopback, @empty, @loopback, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, r2}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000100)={@loopback, @loopback, @remote, 0x0, 0x0, 0x9}) 05:14:37 executing program 5: r0 = socket(0xa, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth0_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@loopback, @empty, @loopback, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, r2}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000100)={@loopback, @loopback, @remote, 0x0, 0x0, 0x9}) 05:14:37 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f00000000c0), 0x0) sendmsg$rds(r1, &(0x7f0000001f00)={&(0x7f00000003c0)={0x2, 0x0, @multicast2}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000580)=""/11, 0xb}, {&(0x7f00000005c0)=""/30, 0x200005de}], 0x2, &(0x7f0000001bc0)}, 0x0) 05:14:37 executing program 1: r0 = socket(0xa, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth0_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@loopback, @empty, @loopback, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, r2}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000100)={@loopback, @loopback, @remote, 0x0, 0x0, 0x9}) 05:14:37 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f00000000c0), 0x0) sendmsg$rds(r1, &(0x7f0000001f00)={&(0x7f00000003c0)={0x2, 0x0, @multicast2}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000580)=""/11, 0xb}, {&(0x7f00000005c0)=""/30, 0x200005de}], 0x2, &(0x7f0000001bc0)}, 0x0) 05:14:37 executing program 4: r0 = socket(0xa, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth0_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@loopback, @empty, @loopback, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, r2}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000100)={@loopback, @loopback, @remote, 0x0, 0x0, 0x9}) 05:14:37 executing program 5: r0 = socket(0xa, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth0_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@loopback, @empty, @loopback, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, r2}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000100)={@loopback, @loopback, @remote, 0x0, 0x0, 0x9}) 05:14:37 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f00000000c0), 0x0) sendmsg$rds(r1, &(0x7f0000001f00)={&(0x7f00000003c0)={0x2, 0x0, @multicast2}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000580)=""/11, 0xb}, {&(0x7f00000005c0)=""/30, 0x200005de}], 0x2, &(0x7f0000001bc0)}, 0x0) 05:14:37 executing program 1: r0 = socket(0xa, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth0_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@loopback, @empty, @loopback, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, r2}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000100)={@loopback, @loopback, @remote, 0x0, 0x0, 0x9}) 05:14:37 executing program 5: r0 = socket(0xa, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth0_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@loopback, @empty, @loopback, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, r2}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000100)={@loopback, @loopback, @remote, 0x0, 0x0, 0x9}) 05:14:37 executing program 4: r0 = socket(0xa, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth0_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@loopback, @empty, @loopback, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, r2}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000100)={@loopback, @loopback, @remote, 0x0, 0x0, 0x9}) 05:14:37 executing program 3: r0 = socket(0xa, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth0_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@loopback, @empty, @loopback, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, r2}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000100)={@loopback, @loopback, @remote, 0x0, 0x0, 0x9}) 05:14:37 executing program 1: r0 = socket(0xa, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth0_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@loopback, @empty, @loopback, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, r2}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000100)={@loopback, @loopback, @remote, 0x0, 0x0, 0x9}) 05:14:37 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)="7374617409c0d2febcf9df2deac8c177ff171248e91193513049f831550d6f7de66cf637bdbf1311920c8a26eda4dcc3783f9db5116b34d31b0512a5608aaff01e7952340cd6fd00000000", 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000040), 0x12) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="7f"], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000001300)={0x0, r0, 0x100000000}) 05:14:37 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f00000000c0), 0x0) sendmsg$rds(r1, &(0x7f0000001f00)={&(0x7f00000003c0)={0x2, 0x0, @multicast2}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000580)=""/11, 0xb}, {&(0x7f00000005c0)=""/30, 0x200005de}], 0x2, &(0x7f0000001bc0)}, 0x0) 05:14:37 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)="7374617409c0d2febcf9df2deac8c177ff171248e91193513049f831550d6f7de66cf637bdbf1311920c8a26eda4dcc3783f9db5116b34d31b0512a5608aaff01e7952340cd6fd00000000", 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000040), 0x12) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="7f"], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000001300)={0x0, r0, 0x100000000}) 05:14:37 executing program 4: r0 = socket(0xa, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth0_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@loopback, @empty, @loopback, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, r2}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000100)={@loopback, @loopback, @remote, 0x0, 0x0, 0x9}) 05:14:37 executing program 3: r0 = socket(0xa, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth0_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@loopback, @empty, @loopback, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, r2}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000100)={@loopback, @loopback, @remote, 0x0, 0x0, 0x9}) 05:14:37 executing program 1: r0 = socket(0xa, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth0_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@loopback, @empty, @loopback, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, r2}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000100)={@loopback, @loopback, @remote, 0x0, 0x0, 0x9}) 05:14:37 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)="7374617409c0d2febcf9df2deac8c177ff171248e91193513049f831550d6f7de66cf637bdbf1311920c8a26eda4dcc3783f9db5116b34d31b0512a5608aaff01e7952340cd6fd00000000", 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000040), 0x12) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="7f"], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000001300)={0x0, r0, 0x100000000}) 05:14:38 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)="7374617409c0d2febcf9df2deac8c177ff171248e91193513049f831550d6f7de66cf637bdbf1311920c8a26eda4dcc3783f9db5116b34d31b0512a5608aaff01e7952340cd6fd00000000", 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000040), 0x12) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="7f"], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000001300)={0x0, r0, 0x100000000}) 05:14:38 executing program 3: r0 = socket(0xa, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth0_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@loopback, @empty, @loopback, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, r2}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000100)={@loopback, @loopback, @remote, 0x0, 0x0, 0x9}) 05:14:38 executing program 1: r0 = socket(0xa, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth0_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@loopback, @empty, @loopback, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, r2}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000100)={@loopback, @loopback, @remote, 0x0, 0x0, 0x9}) 05:14:38 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)="7374617409c0d2febcf9df2deac8c177ff171248e91193513049f831550d6f7de66cf637bdbf1311920c8a26eda4dcc3783f9db5116b34d31b0512a5608aaff01e7952340cd6fd00000000", 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000040), 0x12) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="7f"], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000001300)={0x0, r0, 0x100000000}) 05:14:38 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)="7374617409c0d2febcf9df2deac8c177ff171248e91193513049f831550d6f7de66cf637bdbf1311920c8a26eda4dcc3783f9db5116b34d31b0512a5608aaff01e7952340cd6fd00000000", 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000040), 0x12) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="7f"], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000001300)={0x0, r0, 0x100000000}) 05:14:38 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)="7374617409c0d2febcf9df2deac8c177ff171248e91193513049f831550d6f7de66cf637bdbf1311920c8a26eda4dcc3783f9db5116b34d31b0512a5608aaff01e7952340cd6fd00000000", 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000040), 0x12) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="7f"], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000001300)={0x0, r0, 0x100000000}) 05:14:38 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000b00)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x0, 0x20}, 0xc) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) write$binfmt_misc(r1, &(0x7f0000000040)={'syz1'}, 0xffcf) 05:14:38 executing program 5: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f00000001c0)=@req3={0xe1f, 0x0, 0x3}, 0x9ed27b770768daeb) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000000040)={&(0x7f0000000000), 0xc, &(0x7f000000d379)={&(0x7f0000000200)={0x18, 0x14, 0x301, 0x0, 0x0, {0x1e}, [@generic="c1"]}, 0x18}}, 0x0) 05:14:38 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000100)="220000004a0007ff03000008090007000a00000000221500040003983c7911a49efc", 0x22) recvmmsg(r0, &(0x7f0000006780)=[{{&(0x7f0000000340)=@sco, 0x80, &(0x7f0000001800), 0x0, &(0x7f0000001880)=""/33, 0x21}}], 0x1, 0x0, &(0x7f0000006a00)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000009a80)={'team_slave_0\x00'}) 05:14:38 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)="7374617409c0d2febcf9df2deac8c177ff171248e91193513049f831550d6f7de66cf637bdbf1311920c8a26eda4dcc3783f9db5116b34d31b0512a5608aaff01e7952340cd6fd00000000", 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000040), 0x12) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="7f"], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000001300)={0x0, r0, 0x100000000}) 05:14:38 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000240), 0x4) r1 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000340), &(0x7f00000003c0)=0x10, 0x800) connect$inet(r1, &(0x7f0000000400)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x31, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000600)={{{@in6=@ipv4={[], [], @multicast2}, @in6=@dev}}, {{@in=@multicast2}, 0x0, @in6=@dev}}, &(0x7f0000000440)=0xffee) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000180)={'veth0\x00', 0x7}) socket$inet(0x2, 0xa, 0x5) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r3, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r4, &(0x7f00000001c0)={0x0, 0x8000000000000000, &(0x7f0000000100), 0x4c, &(0x7f0000000000)}, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000280)) mmap(&(0x7f0000cc6000/0x4000)=nil, 0x4000, 0x0, 0x10034, 0xffffffffffffffff, 0x0) [ 87.999356] ================================================================== [ 88.006893] BUG: KASAN: use-after-free in sock_i_ino+0x94/0xa0 [ 88.012904] Read of size 8 at addr ffff8801c6a65530 by task syz-executor5/7276 [ 88.020278] [ 88.021930] CPU: 0 PID: 7276 Comm: syz-executor5 Not tainted 4.19.0-rc2+ #214 [ 88.029214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 88.029226] Call Trace: [ 88.029256] dump_stack+0x1c4/0x2b4 [ 88.029280] ? dump_stack_print_info.cold.2+0x52/0x52 [ 88.029303] ? printk+0xa7/0xcf [ 88.029333] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 88.053504] veth0: mtu less than device minimum [ 88.058210] print_address_description.cold.8+0x9/0x1ff [ 88.058232] kasan_report.cold.9+0x242/0x309 [ 88.058248] ? sock_i_ino+0x94/0xa0 [ 88.058275] __asan_report_load8_noabort+0x14/0x20 [ 88.072712] sock_i_ino+0x94/0xa0 [ 88.072736] tipc_sk_fill_sock_diag+0x39c/0xd90 [ 88.072753] ? tipc_diag_dump+0x30/0x30 [ 88.072777] ? tipc_getname+0x7f0/0x7f0 [ 88.072804] ? graph_lock+0x170/0x170 [ 88.096992] syz-executor3 uses obsolete (PF_INET,SOCK_PACKET) [ 88.097399] ? __lock_sock+0x203/0x350 [ 88.097430] ? find_held_lock+0x36/0x1c0 [ 88.097453] ? mark_held_locks+0xc7/0x130 [ 88.119221] ? __local_bh_enable_ip+0x160/0x260 [ 88.123917] ? __local_bh_enable_ip+0x160/0x260 [ 88.128608] ? lockdep_hardirqs_on+0x421/0x5c0 [ 88.133209] ? trace_hardirqs_on+0xbd/0x310 [ 88.137542] ? lock_release+0x970/0x970 [ 88.141523] ? lock_sock_nested+0xe2/0x120 [ 88.145761] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 88.150778] ? skb_put+0x17b/0x1e0 [ 88.154321] ? memset+0x31/0x40 [ 88.157605] ? __nlmsg_put+0x14c/0x1b0 [ 88.161504] __tipc_add_sock_diag+0x233/0x360 [ 88.166011] tipc_nl_sk_walk+0x122/0x1d0 [ 88.170080] ? tipc_sock_diag_handler_dump+0x3d0/0x3d0 [ 88.175374] tipc_diag_dump+0x24/0x30 [ 88.179188] netlink_dump+0x519/0xd50 [ 88.183001] ? netlink_broadcast+0x50/0x50 [ 88.187256] __netlink_dump_start+0x4f1/0x6f0 [ 88.191760] ? tipc_data_ready+0x3e0/0x3e0 [ 88.196003] tipc_sock_diag_handler_dump+0x28e/0x3d0 [ 88.201116] ? __tipc_diag_gen_cookie+0xc0/0xc0 [ 88.205794] ? tipc_data_ready+0x3e0/0x3e0 [ 88.210053] ? tipc_unregister_sysctl+0x20/0x20 [ 88.214725] ? tipc_ioctl+0x3a0/0x3a0 [ 88.218535] ? netlink_deliver_tap+0x355/0xf80 [ 88.223129] sock_diag_rcv_msg+0x31d/0x410 [ 88.227378] netlink_rcv_skb+0x172/0x440 [ 88.231446] ? sock_diag_bind+0x80/0x80 [ 88.235432] ? netlink_ack+0xb80/0xb80 [ 88.239336] sock_diag_rcv+0x2a/0x40 [ 88.243058] netlink_unicast+0x5a5/0x760 [ 88.247139] ? netlink_attachskb+0x9a0/0x9a0 [ 88.251568] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 88.257124] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 88.262187] netlink_sendmsg+0xa18/0xfc0 [ 88.266263] ? netlink_unicast+0x760/0x760 [ 88.270505] ? aa_sock_msg_perm.isra.12+0xba/0x160 [ 88.275447] ? apparmor_socket_sendmsg+0x29/0x30 [ 88.280209] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 88.285756] ? security_socket_sendmsg+0x94/0xc0 [ 88.290694] ? netlink_unicast+0x760/0x760 [ 88.294943] sock_sendmsg+0xd5/0x120 [ 88.298668] ___sys_sendmsg+0x7fd/0x930 [ 88.302655] ? copy_msghdr_from_user+0x580/0x580 [ 88.307417] ? __fd_install+0x2b5/0x8f0 [ 88.311402] ? check_preemption_disabled+0x48/0x200 [ 88.316431] ? __fget_light+0x2e9/0x430 [ 88.320412] ? fget_raw+0x20/0x20 [ 88.323890] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 88.329439] ? __fd_install+0x2f9/0x8f0 [ 88.333422] ? get_unused_fd_flags+0x1a0/0x1a0 [ 88.338022] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 88.343565] ? sockfd_lookup_light+0xc5/0x160 [ 88.348075] __sys_sendmsg+0x11d/0x280 [ 88.351973] ? __ia32_sys_shutdown+0x80/0x80 [ 88.356399] ? __x64_sys_futex+0x47f/0x6a0 [ 88.360640] ? do_syscall_64+0x9a/0x820 [ 88.364626] ? do_syscall_64+0x9a/0x820 [ 88.368616] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 88.374078] ? ksys_ioctl+0x81/0xd0 [ 88.377721] __x64_sys_sendmsg+0x78/0xb0 [ 88.381798] do_syscall_64+0x1b9/0x820 [ 88.385701] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 88.391080] ? syscall_return_slowpath+0x5e0/0x5e0 [ 88.396026] ? trace_hardirqs_off+0x300/0x300 [ 88.400544] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 88.405570] ? recalc_sigpending_tsk+0x180/0x180 [ 88.410342] ? kasan_check_write+0x14/0x20 [ 88.414593] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 88.419451] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 88.424641] RIP: 0033:0x4572d9 [ 88.427842] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 88.446756] RSP: 002b:00007f08479e9c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 88.454483] RAX: ffffffffffffffda RBX: 00007f08479ea6d4 RCX: 00000000004572d9 [ 88.461758] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000006 [ 88.469038] RBP: 0000000000930140 R08: 0000000000000000 R09: 0000000000000000 [ 88.476325] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 88.483596] R13: 00000000004d4f40 R14: 00000000004c941e R15: 0000000000000001 [ 88.490896] [ 88.492524] Allocated by task 7267: [ 88.496164] save_stack+0x43/0xd0 [ 88.499621] kasan_kmalloc+0xc7/0xe0 [ 88.503338] kasan_slab_alloc+0x12/0x20 [ 88.507314] kmem_cache_alloc+0x12e/0x730 [ 88.511468] sock_alloc_inode+0x1d/0x260 [ 88.515534] alloc_inode+0x63/0x190 [ 88.519172] new_inode_pseudo+0x71/0x1a0 [ 88.523235] sock_alloc+0x41/0x270 [ 88.526775] __sock_create+0x175/0x930 [ 88.530667] __sys_socket+0x106/0x260 [ 88.534474] __x64_sys_socket+0x73/0xb0 [ 88.538452] do_syscall_64+0x1b9/0x820 [ 88.542344] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 88.547525] [ 88.549160] Freed by task 7264: [ 88.552443] save_stack+0x43/0xd0 [ 88.555925] __kasan_slab_free+0x102/0x150 [ 88.560431] kasan_slab_free+0xe/0x10 [ 88.564240] kmem_cache_free+0x83/0x290 [ 88.568215] sock_destroy_inode+0x51/0x60 [ 88.572373] destroy_inode+0x159/0x200 [ 88.576265] evict+0x5e0/0x980 [ 88.579460] iput+0x679/0xa90 [ 88.582568] dentry_unlink_inode+0x461/0x5e0 [ 88.586981] __dentry_kill+0x44c/0x7a0 [ 88.590878] dentry_kill+0xc9/0x5a0 [ 88.594519] dput.part.26+0x660/0x790 [ 88.598328] dput+0x15/0x20 [ 88.601261] __fput+0x4cf/0xa30 [ 88.604540] ____fput+0x15/0x20 [ 88.607824] task_work_run+0x1e8/0x2a0 [ 88.611716] exit_to_usermode_loop+0x318/0x380 [ 88.616298] do_syscall_64+0x6be/0x820 [ 88.620193] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 88.625377] [ 88.627008] The buggy address belongs to the object at ffff8801c6a654c0 [ 88.627008] which belongs to the cache sock_inode_cache(65:syz5) of size 984 [ 88.640895] The buggy address is located 112 bytes inside of [ 88.640895] 984-byte region [ffff8801c6a654c0, ffff8801c6a65898) [ 88.652769] The buggy address belongs to the page: [ 88.657703] page:ffffea00071a9940 count:1 mapcount:0 mapping:ffff8801c90534c0 index:0xffff8801c6a65ffd [ 88.667159] flags: 0x2fffc0000000100(slab) [ 88.671404] raw: 02fffc0000000100 ffffea00070fd3c8 ffffea00071a0908 ffff8801c90534c0 [ 88.679292] raw: ffff8801c6a65ffd ffff8801c6a65040 0000000100000003 ffff8801cbeb4140 [ 88.687170] page dumped because: kasan: bad access detected [ 88.692875] page->mem_cgroup:ffff8801cbeb4140 [ 88.697373] [ 88.699002] Memory state around the buggy address: [ 88.703938] ffff8801c6a65400: fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc fc [ 88.711300] ffff8801c6a65480: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 88.718659] >ffff8801c6a65500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 88.726017] ^ [ 88.730948] ffff8801c6a65580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 88.738315] ffff8801c6a65600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb 05:14:38 executing program 0: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x3, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200002c0], 0x0, &(0x7f00000000c0), &(0x7f00000002c0)=ANY=[]}, 0x78) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cpu.stat\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x8, 0x10, 0x6, 0x9}, &(0x7f00000001c0)=0x18) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={r1}, &(0x7f00000002c0)=0x8) write$binfmt_elf32(r0, &(0x7f0000000080)=ANY=[], 0xfffffe7e) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) sendto$inet6(r2, &(0x7f0000000140), 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r2, &(0x7f00000005c0), 0x39a191, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) accept$alg(0xffffffffffffffff, 0x0, 0x0) 05:14:39 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000100)="220000004a0007ff03000008090007000a00000000221500040003983c7911a49efc", 0x22) recvmmsg(r0, &(0x7f0000006780)=[{{&(0x7f0000000340)=@sco, 0x80, &(0x7f0000001800), 0x0, &(0x7f0000001880)=""/33, 0x21}}], 0x1, 0x0, &(0x7f0000006a00)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000009a80)={'team_slave_0\x00'}) [ 88.745670] ================================================================== [ 88.753025] Disabling lock debugging due to kernel taint [ 88.758570] Kernel panic - not syncing: panic_on_warn set ... [ 88.758570] [ 88.765951] CPU: 0 PID: 7276 Comm: syz-executor5 Tainted: G B 4.19.0-rc2+ #214 [ 88.766009] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 88.775135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 88.775140] Call Trace: [ 88.775166] dump_stack+0x1c4/0x2b4 05:14:39 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000b00)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x0, 0x20}, 0xc) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) write$binfmt_misc(r1, &(0x7f0000000040)={'syz1'}, 0xffcf) [ 88.775183] ? dump_stack_print_info.cold.2+0x52/0x52 [ 88.775205] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 88.810993] panic+0x238/0x4e7 [ 88.814202] ? add_taint.cold.5+0x16/0x16 [ 88.818367] ? trace_hardirqs_on+0xb4/0x310 [ 88.822705] ? trace_hardirqs_on+0xb4/0x310 [ 88.827046] kasan_end_report+0x47/0x4f [ 88.831034] kasan_report.cold.9+0x76/0x309 [ 88.835370] ? sock_i_ino+0x94/0xa0 [ 88.839011] __asan_report_load8_noabort+0x14/0x20 [ 88.843954] sock_i_ino+0x94/0xa0 [ 88.847430] tipc_sk_fill_sock_diag+0x39c/0xd90 [ 88.852113] ? tipc_diag_dump+0x30/0x30 [ 88.856118] ? tipc_getname+0x7f0/0x7f0 [ 88.860114] ? graph_lock+0x170/0x170 [ 88.863956] ? __lock_sock+0x203/0x350 [ 88.867865] ? find_held_lock+0x36/0x1c0 [ 88.871950] ? mark_held_locks+0xc7/0x130 [ 88.876114] ? __local_bh_enable_ip+0x160/0x260 [ 88.880802] ? __local_bh_enable_ip+0x160/0x260 [ 88.885483] ? lockdep_hardirqs_on+0x421/0x5c0 [ 88.890078] ? trace_hardirqs_on+0xbd/0x310 [ 88.894411] ? lock_release+0x970/0x970 [ 88.898389] ? lock_sock_nested+0xe2/0x120 [ 88.902646] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 88.907674] ? skb_put+0x17b/0x1e0 [ 88.911223] ? memset+0x31/0x40 [ 88.914521] ? __nlmsg_put+0x14c/0x1b0 [ 88.918424] __tipc_add_sock_diag+0x233/0x360 [ 88.922945] tipc_nl_sk_walk+0x122/0x1d0 [ 88.927022] ? tipc_sock_diag_handler_dump+0x3d0/0x3d0 [ 88.932312] tipc_diag_dump+0x24/0x30 [ 88.936128] netlink_dump+0x519/0xd50 [ 88.939955] ? netlink_broadcast+0x50/0x50 [ 88.944206] __netlink_dump_start+0x4f1/0x6f0 [ 88.948715] ? tipc_data_ready+0x3e0/0x3e0 [ 88.952968] tipc_sock_diag_handler_dump+0x28e/0x3d0 [ 88.958081] ? __tipc_diag_gen_cookie+0xc0/0xc0 [ 88.962850] ? tipc_data_ready+0x3e0/0x3e0 [ 88.967110] ? tipc_unregister_sysctl+0x20/0x20 [ 88.971797] ? tipc_ioctl+0x3a0/0x3a0 [ 88.975607] ? netlink_deliver_tap+0x355/0xf80 [ 88.980210] sock_diag_rcv_msg+0x31d/0x410 [ 88.984462] netlink_rcv_skb+0x172/0x440 [ 88.988542] ? sock_diag_bind+0x80/0x80 [ 88.992534] ? netlink_ack+0xb80/0xb80 [ 88.996442] sock_diag_rcv+0x2a/0x40 [ 89.000173] netlink_unicast+0x5a5/0x760 [ 89.004253] ? netlink_attachskb+0x9a0/0x9a0 [ 89.008675] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 89.014229] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 89.019262] netlink_sendmsg+0xa18/0xfc0 [ 89.023345] ? netlink_unicast+0x760/0x760 [ 89.027595] ? aa_sock_msg_perm.isra.12+0xba/0x160 [ 89.032528] ? apparmor_socket_sendmsg+0x29/0x30 [ 89.037289] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 89.042831] ? security_socket_sendmsg+0x94/0xc0 [ 89.047593] ? netlink_unicast+0x760/0x760 [ 89.051833] sock_sendmsg+0xd5/0x120 [ 89.055552] ___sys_sendmsg+0x7fd/0x930 [ 89.059537] ? copy_msghdr_from_user+0x580/0x580 [ 89.064298] ? __fd_install+0x2b5/0x8f0 [ 89.068278] ? check_preemption_disabled+0x48/0x200 [ 89.073299] ? __fget_light+0x2e9/0x430 [ 89.077272] ? fget_raw+0x20/0x20 [ 89.080736] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 89.086276] ? __fd_install+0x2f9/0x8f0 [ 89.090265] ? get_unused_fd_flags+0x1a0/0x1a0 [ 89.094855] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 89.100405] ? sockfd_lookup_light+0xc5/0x160 [ 89.104908] __sys_sendmsg+0x11d/0x280 [ 89.108800] ? __ia32_sys_shutdown+0x80/0x80 [ 89.113219] ? __x64_sys_futex+0x47f/0x6a0 [ 89.117454] ? do_syscall_64+0x9a/0x820 [ 89.121428] ? do_syscall_64+0x9a/0x820 [ 89.125416] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 89.130872] ? ksys_ioctl+0x81/0xd0 [ 89.134516] __x64_sys_sendmsg+0x78/0xb0 [ 89.138580] do_syscall_64+0x1b9/0x820 [ 89.142472] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 89.147844] ? syscall_return_slowpath+0x5e0/0x5e0 [ 89.152779] ? trace_hardirqs_off+0x300/0x300 [ 89.157276] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 89.162292] ? recalc_sigpending_tsk+0x180/0x180 [ 89.167050] ? kasan_check_write+0x14/0x20 [ 89.171291] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 89.176149] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 89.181336] RIP: 0033:0x4572d9 [ 89.184534] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 89.203430] RSP: 002b:00007f08479e9c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 89.211140] RAX: ffffffffffffffda RBX: 00007f08479ea6d4 RCX: 00000000004572d9 [ 89.218416] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000006 [ 89.225683] RBP: 0000000000930140 R08: 0000000000000000 R09: 0000000000000000 [ 89.232954] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 89.240220] R13: 00000000004d4f40 R14: 00000000004c941e R15: 0000000000000001 [ 89.248446] Kernel Offset: disabled [ 89.252072] Rebooting in 86400 seconds..