[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 39.047970] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 42.952973] random: sshd: uninitialized urandom read (32 bytes read) [ 43.489580] random: sshd: uninitialized urandom read (32 bytes read) [ 44.548114] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.27' (ECDSA) to the list of known hosts. [ 50.401087] random: sshd: uninitialized urandom read (32 bytes read) 2018/08/17 10:56:48 fuzzer started [ 51.824861] random: cc1: uninitialized urandom read (8 bytes read) 2018/08/17 10:56:51 dialing manager at 10.128.0.26:45509 2018/08/17 10:56:53 syscalls: 1 2018/08/17 10:56:53 code coverage: enabled 2018/08/17 10:56:53 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/08/17 10:56:53 setuid sandbox: enabled 2018/08/17 10:56:53 namespace sandbox: enabled 2018/08/17 10:56:53 fault injection: enabled 2018/08/17 10:56:53 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/08/17 10:56:53 net packed injection: enabled 2018/08/17 10:56:53 net device setup: enabled [ 57.852224] random: crng init done 10:58:33 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@flushpolicy={0x10, 0x1d, 0x7aafb36f5437055f}, 0x10}}, 0x0) 10:58:33 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x20, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000100)=@known='security.selinux\x00', &(0x7f0000000140)='/dev/snd/controlC#\x00', 0x13, 0x0) close(r1) 10:58:33 executing program 7: bpf$MAP_CREATE(0xf00000000000014, &(0x7f0000000100)={0x1, 0x10000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x4]}, 0x2c) 10:58:33 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x31) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x90, 0xffffffffffffffff}}, 0xe8) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") connect$inet6(r0, &(0x7f00000000c0), 0x1c) 10:58:33 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, &(0x7f00000004c0), &(0x7f0000000480)=0x68) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r1, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xe, &(0x7f0000000080), 0x4) 10:58:33 executing program 6: r0 = socket$inet6(0xa, 0x3, 0x6) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r1, &(0x7f0000000340)="030002", 0x3, 0x800000000008000, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) sendto$inet(r1, &(0x7f0000000140)="0900d1", 0x3, 0x0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) 10:58:33 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x10}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") sendmmsg(r0, &(0x7f00000002c0), 0x400000000000025, 0x0) 10:58:33 executing program 3: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) write$cgroup_type(r1, &(0x7f0000000180)='threaded\x00', 0xffffff5f) write$cgroup_int(r1, &(0x7f0000000980), 0xffffff4d) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x0) recvmsg$kcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f00000003c0)=""/17, 0x11}, 0x0) recvmsg$kcm(r0, &(0x7f0000000500)={&(0x7f0000000280)=@nfc, 0x80, &(0x7f0000000440), 0x0, &(0x7f0000000480)=""/81, 0x51}, 0x0) [ 156.566336] IPVS: ftp: loaded support on port[0] = 21 [ 156.569106] IPVS: ftp: loaded support on port[0] = 21 [ 156.575386] IPVS: ftp: loaded support on port[0] = 21 [ 156.595190] IPVS: ftp: loaded support on port[0] = 21 [ 156.626663] IPVS: ftp: loaded support on port[0] = 21 [ 156.640019] IPVS: ftp: loaded support on port[0] = 21 [ 156.664835] IPVS: ftp: loaded support on port[0] = 21 [ 156.700957] IPVS: ftp: loaded support on port[0] = 21 [ 160.277615] ip (4694) used greatest stack depth: 53928 bytes left [ 160.666723] ip (4719) used greatest stack depth: 53688 bytes left [ 161.522723] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.529223] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.544533] device bridge_slave_0 entered promiscuous mode [ 161.554320] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.560789] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.596119] device bridge_slave_0 entered promiscuous mode [ 161.623434] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.630006] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.664476] device bridge_slave_0 entered promiscuous mode [ 161.684535] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.691120] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.717377] device bridge_slave_0 entered promiscuous mode [ 161.743273] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.749763] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.773936] device bridge_slave_0 entered promiscuous mode [ 161.798393] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.804873] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.832798] device bridge_slave_0 entered promiscuous mode [ 161.850750] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.857250] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.896581] device bridge_slave_0 entered promiscuous mode [ 161.911005] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.917614] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.939844] device bridge_slave_1 entered promiscuous mode [ 161.968937] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.975463] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.004510] device bridge_slave_1 entered promiscuous mode [ 162.027277] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.033788] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.048109] device bridge_slave_1 entered promiscuous mode [ 162.055775] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.062330] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.079554] device bridge_slave_1 entered promiscuous mode [ 162.102194] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.108713] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.135671] device bridge_slave_1 entered promiscuous mode [ 162.152615] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.159127] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.189206] device bridge_slave_0 entered promiscuous mode [ 162.226419] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.232930] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.256871] device bridge_slave_1 entered promiscuous mode [ 162.264611] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 162.272224] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 162.279810] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 162.287639] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 162.295008] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.301561] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.328481] device bridge_slave_1 entered promiscuous mode [ 162.423390] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 162.454866] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 162.527344] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.533831] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.569930] device bridge_slave_1 entered promiscuous mode [ 162.586852] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 162.606736] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 162.618222] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 162.634080] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 162.666215] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 162.685827] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 162.710419] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 162.895426] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 162.920531] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 163.191671] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 163.280274] ip (4848) used greatest stack depth: 53416 bytes left [ 163.483490] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 163.522669] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 163.614751] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 163.653353] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 163.663601] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 163.674823] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 163.748571] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 163.829831] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 163.918376] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 163.929933] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 163.952429] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 163.981023] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 163.995170] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 164.027500] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 164.037889] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 164.048358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 164.179228] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 164.186338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 164.265570] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 164.290182] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 164.297293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 164.311304] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 164.330181] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 164.342643] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 164.376650] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 164.386628] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 164.393806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 164.411401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 164.436296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 164.476346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 164.537381] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 164.544384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 164.585275] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 164.594117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 164.621517] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 164.634172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 164.684983] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 164.692123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 164.714700] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 164.726953] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 164.734671] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 164.756175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 164.799578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 164.839746] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 164.950585] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 164.957660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 165.023366] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 165.071335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 165.367376] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 165.387921] team0: Port device team_slave_0 added [ 165.464399] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 165.497860] team0: Port device team_slave_0 added [ 165.523832] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 165.544212] team0: Port device team_slave_0 added [ 165.687495] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 165.712394] team0: Port device team_slave_0 added [ 165.742073] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 165.756314] team0: Port device team_slave_1 added [ 165.781961] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 165.809593] team0: Port device team_slave_0 added [ 165.821559] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 165.844746] team0: Port device team_slave_0 added [ 165.859418] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 165.892615] team0: Port device team_slave_1 added [ 165.923222] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 165.940612] team0: Port device team_slave_1 added [ 165.950855] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 165.973133] team0: Port device team_slave_0 added [ 165.986319] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 166.009274] team0: Port device team_slave_1 added [ 166.022202] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 166.043220] team0: Port device team_slave_0 added [ 166.075868] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 166.113803] team0: Port device team_slave_1 added [ 166.131854] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 166.149177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 166.165423] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 166.190381] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 166.200054] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 166.220392] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 166.237585] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 166.250128] team0: Port device team_slave_1 added [ 166.272971] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 166.281313] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 166.294240] team0: Port device team_slave_1 added [ 166.317676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 166.336527] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 166.378511] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 166.396500] team0: Port device team_slave_1 added [ 166.426489] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 166.438335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 166.470448] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 166.487894] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 166.497266] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 166.504841] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 166.511879] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 166.528232] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 166.581413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 166.605738] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 166.632411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 166.641740] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 166.671806] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 166.682258] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 166.693282] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 166.704004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 166.736172] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 166.766786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 166.786634] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 166.808467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 166.830644] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 166.848967] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 166.861266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 166.877710] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 166.898570] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 166.910811] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 166.921085] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 166.934236] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 166.943955] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 166.971768] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 166.990836] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 167.019568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 167.050199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 167.072384] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 167.100339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 167.113704] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 167.123614] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 167.131014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 167.141416] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 167.150806] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 167.158401] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 167.167770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 167.202365] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 167.220818] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 167.233193] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 167.240961] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 167.250977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 167.296423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 167.313277] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 167.337854] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 167.358978] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 167.369916] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 167.378969] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 167.407411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 167.425425] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 167.441109] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 167.448673] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 167.484613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 167.504323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 167.519681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 167.559798] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 167.568503] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 167.582145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 167.608607] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 167.616268] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 167.625536] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 167.640259] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 167.661927] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 167.675110] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 167.707772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 167.731366] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 167.747751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 167.769366] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 167.784124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 167.807589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 167.829716] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 167.837278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 167.846383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 167.863638] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 167.871614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 167.892778] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 168.042810] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 168.050688] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 168.070646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 168.141476] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 168.149134] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 168.168782] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 170.967003] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.973543] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.980464] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.986954] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.076761] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 171.083495] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 171.119161] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.125678] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.132592] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.139168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.147828] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 171.158649] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.165164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.172185] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.178701] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.194156] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 171.201234] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.207727] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.214648] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.221178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.264276] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 171.280279] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.286807] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.293716] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.300191] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.326968] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 171.613557] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.620113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.627115] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.633617] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.667611] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 171.694439] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.700988] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.707899] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.714394] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.725149] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 171.989764] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.996304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.003299] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.009797] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.081926] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 172.132683] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 172.159597] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 172.196802] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 172.231494] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 172.251267] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 172.273684] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 172.296176] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 183.701611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.887876] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.185886] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.228352] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.409200] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.516794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.539934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.859730] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 184.871656] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.029334] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 185.435400] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 185.531476] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 185.595764] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 185.768717] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 185.855930] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 186.001114] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 186.007506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 186.019476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 186.082842] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 186.277683] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 186.284494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 186.297584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 186.640573] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 186.646982] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 186.658091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 186.751622] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 186.757987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 186.769960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 186.843735] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 186.851426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 186.866101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 186.973168] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 186.979809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 186.991173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 187.119142] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 187.128245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 187.143969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 187.221781] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.456656] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 187.463147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 187.471815] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 187.562831] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.932766] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.038791] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.113453] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.213982] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.305663] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.788284] 8021q: adding VLAN 0 to HW filter on device team0 10:59:13 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c2d0252926285717070") r1 = socket$inet6(0xa, 0x100000002, 0x0) socket$packet(0x11, 0x2, 0x300) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000003b80)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c) sendto$inet6(r1, &(0x7f0000000300), 0xfd90, 0x400806e, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendto$inet6(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, 0x1c) 10:59:13 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c2d0252926285717070") r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f0000000080), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c) [ 195.127820] sock: process `syz-executor5' is using obsolete setsockopt SO_BSDCOMPAT 10:59:13 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c2d0252806285717070") r1 = socket$netlink(0x10, 0x3, 0x1d) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0xfffffffffffffffc}, 0xc) 10:59:13 executing program 1: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) write$cgroup_int(r1, &(0x7f0000000980), 0xffffff4d) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x0) recvmsg$kcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f00000003c0)=""/17, 0x11}, 0x0) 10:59:13 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, &(0x7f0000000280)}}], 0x1, 0x0, &(0x7f0000003280)) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000040)={0x0, @in={{0x2, 0x0, @multicast1}}}, &(0x7f0000000100)=0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @local}}, [0x0, 0x2b, 0x0, 0xc5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x3, 0x0, 0x6, 0x1, 0x5]}, &(0x7f0000000140)=0x100) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/fib_trie\x00') preadv(r0, &(0x7f00000017c0), 0x1d0, 0x5000000) 10:59:13 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x5, 0x4) sendto$inet6(r0, &(0x7f0000000080), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c) 10:59:13 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000080), 0x10) setsockopt(r0, 0x65, 0x1, &(0x7f0000000080), 0x0) 10:59:13 executing program 0: r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x34, 0x1) mmap(&(0x7f0000000000/0x24e000)=nil, 0x24e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) ioctl$int_out(r0, 0x40045731, &(0x7f0000000100)) 10:59:14 executing program 7: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = memfd_create(&(0x7f0000000140)="736563757269747d917617cb0e3dbe4574656f00", 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) write(0xffffffffffffffff, &(0x7f0000000040), 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) unlink(&(0x7f0000000180)='./file0\x00') setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) accept4$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0}, &(0x7f0000000280)=0x14, 0x800) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000002c0)={r2, @broadcast}, 0xc) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000200)=0x4, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) perf_event_open(&(0x7f0000000080)={0x200000002, 0x70, 0x671b, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x800, {0x2, 0x4e24, @local}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, {0x2, 0x4e23, @rand_addr=0xfffffffffffffff7}, 0x4, 0x7, 0x101, 0x0, 0x0, &(0x7f0000000340)='tunl0\x00'}) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000640)=ANY=[]}}, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000400)=ANY=[], 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, &(0x7f0000000040)) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000300), 0x4) bind$inet(r1, &(0x7f0000738ff0)={0x2, 0x4e21, @local}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21}, 0x10) ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, 0x0) sendto$inet(r1, &(0x7f0000000540)="5fb20c07000100f4951b9d93b7e2ff432fa4955a33a7875332e3f9f63918eacb714034430fc7e2caa99643d91904b871af5bca563b8d47b7e6ece5fc10350500e533c7bf9b462721eeb69921fd784575600c60865fb29f15a90c9aa16f9ed055157edf311d046f5854f26ee311a6262494069a45df7ef3aa4d020de30305ffb0d577132ae64eb08a51833f16255fa1a7d640041486451638df42bba4a3e0bd412f7841a4c43b64b2618dfbbdba00e320a10c68d57072fd7367e99d4c296584c71b32c17ddbb13d7f31b005daf2c91d7727c0000000", 0xd5, 0x0, &(0x7f0000000b00)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x7fff, 0x80000001}, 0x14) shutdown(r1, 0x1) 10:59:14 executing program 6: 10:59:14 executing program 4: 10:59:14 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f00000000c0)={'lo\x00'}) 10:59:14 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, &(0x7f0000000280)}}], 0x1, 0x0, &(0x7f0000003280)) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000040)={0x0, @in={{0x2, 0x0, @multicast1}}}, &(0x7f0000000100)=0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e23, @local}}, [0x0, 0x2b, 0x0, 0xc5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x3, 0x0, 0x6, 0x1, 0x5]}, &(0x7f0000000140)=0x100) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/fib_trie\x00') preadv(r0, &(0x7f00000017c0), 0x1d0, 0x6c00000000000000) 10:59:14 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000dc9ff0)={0x2, 0x4e20, @broadcast}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x15554, 0x200067c7, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 10:59:14 executing program 0: r0 = socket(0x10, 0x803, 0x6) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000007e80), 0x1, 0x0, 0x0) [ 196.594801] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 196.619280] netlink: 2 bytes leftover after parsing attributes in process `syz-executor0'. [ 196.689937] netlink: 2 bytes leftover after parsing attributes in process `syz-executor0'. 10:59:15 executing program 3: 10:59:15 executing program 4: r0 = socket$inet(0x2, 0xa, 0x0) sendto(r0, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000280)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x80) 10:59:15 executing program 1: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) write$cgroup_int(r1, &(0x7f0000000980), 0xffffff4d) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x0) recvmsg$kcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f00000003c0)=""/17, 0x11}, 0x0) 10:59:15 executing program 7: r0 = socket(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [], @loopback}}, 0x1c) getsockopt$inet_opts(r0, 0x0, 0xe, &(0x7f00000009c0)=""/31, &(0x7f0000000140)=0x1f) 10:59:15 executing program 5: 10:59:15 executing program 0: 10:59:15 executing program 6: 10:59:15 executing program 2: [ 197.461413] syz-executor4 uses obsolete (PF_INET,SOCK_PACKET) 10:59:15 executing program 5: 10:59:15 executing program 2: 10:59:15 executing program 0: 10:59:15 executing program 6: r0 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000080), 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) add_key$keyring(&(0x7f0000000680)='keyring\x00', &(0x7f00000003c0), 0x0, 0x0, 0x0) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000340), &(0x7f0000000140)="19e848063e3d1b5be2", 0x9, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040), &(0x7f0000000580), 0x1b8, r0) clock_gettime(0x0, &(0x7f0000000280)) keyctl$dh_compute(0x17, &(0x7f00000001c0)={r1, r2, r1}, &(0x7f0000a53ffb)=""/5, 0x3ca, &(0x7f0000000180)={&(0x7f00000002c0)={"736861312d67656e6572696300ea48c244e7099100"}}) 10:59:15 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00004ae000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_setup(0x9, &(0x7f0000f6c000)=0x0) io_getevents(r1, 0x2, 0x2, &(0x7f00000002c0)=[{}, {}], &(0x7f0000bd3000)={0x77359400}) io_submit(r1, 0x1, &(0x7f0000b52fd8)=[&(0x7f0000594fc0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00005be000)}]) 10:59:15 executing program 7: 10:59:15 executing program 3: 10:59:15 executing program 2: 10:59:15 executing program 0: 10:59:15 executing program 5: 10:59:16 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f0000004300)={&(0x7f0000000180), 0xc, &(0x7f00000042c0)={&(0x7f0000004340)=ANY=[@ANYBLOB="000d00000000000008001b00000000000800160000000400"], 0x1}}, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000040)={0x87, @loopback, 0x4e24, 0x2, 'lblc\x00', 0x21, 0x6, 0x5f}, 0x2c) 10:59:16 executing program 3: 10:59:16 executing program 7: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c2d0252806285717070") r1 = socket$netlink(0x10, 0x3, 0x1d) bind$netlink(r1, &(0x7f0000000000), 0xc) close(0xffffffffffffffff) 10:59:16 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000300), 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f00000001c0), 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000880)='keyring\x00', &(0x7f00000003c0), 0x0, 0x0, r1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000000), 0x0, 0x0, r2) r4 = add_key$user(&(0x7f00003bd000)='user\x00', &(0x7f0000000b00), &(0x7f00000000c0)="7f", 0x1, r3) r5 = add_key$user(&(0x7f0000002cc0)='user\x00', &(0x7f0000000140), &(0x7f0000000280), 0x240, r0) keyctl$dh_compute(0x17, &(0x7f0000000340)={r4, r5, r5}, &(0x7f0000000600)=""/132, 0xff7d, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 10:59:16 executing program 6: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c2d0252926285717070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000240)={0x0, {}, {0x2, 0x0, @multicast1}, {}, 0x2a0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)}) 10:59:16 executing program 2: syz_emit_ethernet(0x32, &(0x7f0000000000)={@link_local, @dev, [], {@arp={0x806, @generic={0x0, 0x0, 0x6, 0x0, 0x0, @broadcast, "", @dev, "4d8cfc0fe1cee93c210c47cc5090d5d8"}}}}, 0x0) 10:59:16 executing program 0: r0 = socket(0x13, 0x0, 0x800) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000140}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x24, 0x0, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_AF={0x8}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e22}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000005c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000580)={&(0x7f00000002c0)={0x14, 0x26, 0x100000601}, 0x14}}, 0x0) recvmsg(r1, &(0x7f0000003fc0)={&(0x7f0000003e40)=@can, 0x80, &(0x7f0000003f80)}, 0x0) 10:59:16 executing program 3: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x858, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000240)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0fe5f0028213ee20600d4ff5bffff00c7e5ed5e00000000c8550000000000000000", 0x48}], 0x1) 10:59:16 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$MAP_CREATE(0xf00000000000014, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x4]}, 0x2c) 10:59:16 executing program 2: 10:59:16 executing program 4: 10:59:16 executing program 6: 10:59:16 executing program 0: 10:59:16 executing program 7: 10:59:16 executing program 5: 10:59:16 executing program 2: 10:59:16 executing program 3: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000680)={0x0, 'ip6gretap0\x00'}, 0x18) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000fd8000), &(0x7f0000e7fffc), 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r0, 0x1000000000016) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) 10:59:16 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000580)="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", 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfcfd, &(0x7f0000000180), 0x0, &(0x7f0000000700), 0x365}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000000)) write$cgroup_pid(r1, &(0x7f0000000100), 0x10090) 10:59:16 executing program 1: 10:59:17 executing program 7: 10:59:17 executing program 0: 10:59:17 executing program 6: 10:59:17 executing program 2: 10:59:17 executing program 4: 10:59:17 executing program 0: 10:59:17 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 10:59:17 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000040)={'lo\x00', {0x2, 0x0, @broadcast}}) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d0252806285717070") ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f00000000c0)={'lo\x00'}) 10:59:17 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) 10:59:17 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c2d0252926285717070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000340)={@remote}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='keyring\x00', 0xffffffffffffff9c}, 0x10) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) setsockopt$inet6_mreq(r1, 0x29, 0x4000000001c, &(0x7f00000001c0)={@remote}, 0x14) 10:59:17 executing program 2: 10:59:17 executing program 6: 10:59:17 executing program 4: 10:59:17 executing program 0: 10:59:17 executing program 2: 10:59:17 executing program 5: 10:59:17 executing program 4: 10:59:17 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) clock_nanosleep(0x7, 0x0, &(0x7f0000000240)={0x0, r1+30000000}, &(0x7f0000000200)) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f00000000c0)) tkill(r2, 0x15) writev(0xffffffffffffffff, &(0x7f0000000a40), 0x0) r3 = gettid() tkill(r3, 0x1000000000016) 10:59:17 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)="0a5c2d0240316285716070") setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) 10:59:17 executing program 0: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000140)={{{@in6, @in=@local}}, {{@in6=@mcast1}, 0x0, @in=@remote}}, &(0x7f0000000240)=0xe8) r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d0252806285717070") r1 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r1, 0x1, 0x15, &(0x7f0000b56f40)=""/192, &(0x7f0000004ffc)=0xc0) 10:59:18 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x1) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") unshare(0x2000400) ioctl$sock_proto_private(r0, 0x89e1, &(0x7f0000000180)) 10:59:18 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='veth0_to_bond\x00', 0x14c) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) 10:59:18 executing program 1: 10:59:18 executing program 6: 10:59:18 executing program 7: 10:59:18 executing program 0: 10:59:18 executing program 3: 10:59:18 executing program 2: 10:59:18 executing program 4: 10:59:18 executing program 5: 10:59:18 executing program 6: 10:59:18 executing program 1: 10:59:18 executing program 0: 10:59:18 executing program 2: 10:59:18 executing program 3: 10:59:18 executing program 1: 10:59:18 executing program 7: 10:59:18 executing program 6: 10:59:18 executing program 5: 10:59:18 executing program 4: 10:59:19 executing program 2: 10:59:19 executing program 0: 10:59:19 executing program 1: 10:59:19 executing program 7: 10:59:19 executing program 3: 10:59:19 executing program 4: 10:59:19 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) read(r0, &(0x7f0000ec6000)=""/50, 0x32) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) openat$full(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/full\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x80000001) sendmmsg(0xffffffffffffffff, &(0x7f0000000ac0), 0x0, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 10:59:19 executing program 6: r0 = socket$inet6(0xa, 0x3, 0x20000000021) sendto$inet6(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1, 0x20}, 0x1c) 10:59:19 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc2c45512, &(0x7f0000000580)={{0x7, 0x0, 0x0, 0x0, 'syz0\x00', 0x20}, 0x0, [0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xe89c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x61c, 0x7, 0x400, 0x70000000000, 0x0, 0x0, 0x0, 0xff, 0x0, 0x5, 0x9, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, 0x5, 0x2, 0x7a00000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x9487, 0x0, 0x7]}) ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000540), 0x0) 10:59:19 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x14) listen(r1, 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x0, 0x20}, 0xc) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write(r2, &(0x7f0000000080)="e9", 0x1) 10:59:19 executing program 7: 10:59:19 executing program 0: 10:59:19 executing program 4: 10:59:19 executing program 3: 10:59:19 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmsg(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000023c0)=""/4096, 0x1000}], 0x1, &(0x7f00000007c0)=""/16, 0x10}, 0x0) 10:59:19 executing program 7: r0 = socket$inet6(0xa, 0x3, 0x3a) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000100)="0a5cc80700315f85715070") setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @mcast1}}, 0x5c) 10:59:19 executing program 6: r0 = socket(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000001580)={0x0}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") recvmmsg(r0, &(0x7f0000001cc0), 0x400000000000187, 0x10102, &(0x7f0000001540)={r1}) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001a000102000000000000000000000000"], 0x1}}, 0x0) 10:59:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x2e, 0x119, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 10:59:19 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x800000}}, 0x1c) 10:59:19 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x200, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) read(r0, &(0x7f0000000140)=""/197, 0xc5) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x100000000000003, 0x0) dup2(r0, r1) 10:59:19 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mincore(&(0x7f000007e000/0x14000)=nil, 0x14000, &(0x7f00000003c0)=""/213) [ 201.972586] openvswitch: netlink: Flow get message rejected, Key attribute missing. 10:59:20 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$setname(0xf, &(0x7f00000002c0)='\x00v\t') bind$alg(r0, &(0x7f0000000700)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept4(r0, 0x0, &(0x7f0000000380)=0x384, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={&(0x7f00000003c0), 0xc, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[]}}, 0x20008005) recvmmsg(r2, &(0x7f00000077c0)=[{{&(0x7f0000004300)=@sco, 0x80, &(0x7f0000006740), 0x0, &(0x7f00000067c0)=""/4096, 0x1000}}], 0x1, 0x2, &(0x7f00000078c0)={0x77359400}) 10:59:20 executing program 0: 10:59:20 executing program 1: 10:59:20 executing program 2: 10:59:20 executing program 3: 10:59:20 executing program 4: 10:59:20 executing program 0: 10:59:20 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, &(0x7f0000000280)}}], 0x1, 0x0, &(0x7f0000003280)) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000040)={0x0, @in={{0x2, 0x0, @multicast1}}}, &(0x7f0000000100)=0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e23, @local}}, [0x0, 0x2b, 0x0, 0xc5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x3, 0x0, 0x6, 0x1, 0x5]}, &(0x7f0000000140)=0x100) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/fib_trie\x00') preadv(r0, &(0x7f00000017c0), 0x1d0, 0x0) 10:59:20 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x16}, 0x1c) sendto$inet6(r0, &(0x7f0000000300), 0x53e4, 0x8004, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 10:59:20 executing program 5: 10:59:20 executing program 7: 10:59:20 executing program 6: 10:59:20 executing program 0: 10:59:20 executing program 4: 10:59:20 executing program 3: 10:59:20 executing program 1: 10:59:20 executing program 7: 10:59:21 executing program 5: 10:59:21 executing program 0: 10:59:21 executing program 3: 10:59:21 executing program 1: 10:59:21 executing program 6: 10:59:21 executing program 4: 10:59:21 executing program 7: 10:59:21 executing program 1: 10:59:21 executing program 5: 10:59:21 executing program 2: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000400)='./file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xfffffef6) chmod(&(0x7f00000001c0)='./file0\x00', 0x0) 10:59:21 executing program 0: 10:59:21 executing program 3: 10:59:21 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x20000000008912, &(0x7f0000000240)="0a5c2d0240316285717070") setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@loopback, 0x0, 0x0, 0x3}, 0x20) 10:59:21 executing program 4: r0 = socket$inet(0x2, 0xa, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6gretap0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="000000000d000000080001000000921ee13500007c60c56b075e0b8002aa1dafeae3608d6bb873fa2ad7a4c98c62d7e9c77f7d6f6aac5f5b6382c0d302a50cd27912a7dbf4a4fa5e17fa23b0ccabf5ebc18ccc227bbe5396d5832c748daea9ccf957966aba0a228102ec13c4fe114d5c8bf488f13d04c89214927a699f00eaeda18c993637fba9f46751757dedaaa55af9"], 0x1}}, 0x0) 10:59:21 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) recvfrom(r0, &(0x7f0000000b40)=""/4096, 0x1000, 0x0, &(0x7f00000002c0)=@ipx={0x4, 0x0, 0x0, "fc0c0de54ac0"}, 0x80) sendmsg$nl_route(r0, &(0x7f0000000b00)={&(0x7f0000000ac0), 0xc, &(0x7f00000000c0)={&(0x7f0000000a40)=@ipv6_getnetconf={0x14, 0x52, 0x7c5fd5fa6bcda905}, 0x14}}, 0x0) 10:59:21 executing program 3: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair(0x0, 0x0, 0x0, &(0x7f0000000180)) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)="2f02726f75702e7374617000", 0x2761, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r1, &(0x7f0000000140)}, 0x10) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) socket$kcm(0x29, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000080)=ANY=[@ANYBLOB="00ffffffff"]) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0xc0c0583b, 0x20000001) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(0xffffffffffffffff) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000001c0)=""/76}, 0x18) 10:59:21 executing program 5: 10:59:21 executing program 1: 10:59:21 executing program 0: 10:59:21 executing program 7: 10:59:21 executing program 6: 10:59:21 executing program 4: 10:59:22 executing program 5: 10:59:22 executing program 0: 10:59:22 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xf, 0x3, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xf, 0xffffffc7}}, &(0x7f0000000040)='GPL\x00', 0x1, 0x99, &(0x7f0000000180)=""/153}, 0x48) 10:59:22 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="0a5cc80700315f85715070") r1 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0xfcda) setsockopt$inet_int(r1, 0x0, 0x17, &(0x7f0000000000)=0x54d, 0x951d2c7) sendto$unix(r1, &(0x7f0000000080), 0x7272, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) setsockopt$inet_int(r1, 0x0, 0x14, &(0x7f0000000080)=0x75, 0x4) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000440)=""/175, 0xaf}], 0x1) 10:59:22 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c2d0252926285717070") syz_emit_ethernet(0x509, &(0x7f0000007000)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:59:22 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x200000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(r0, 0x4, 0x4000) io_setup(0x6, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000000040)='a', 0x1}]) 10:59:22 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001f40)={&(0x7f0000000080)={0x2, 0x0, @rand_addr=0x5}, 0x10, &(0x7f0000000500), 0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="010000000000000000000000000000000000000000000000"], 0x18}, 0x0) 10:59:22 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001cc0)={&(0x7f0000000000)={0x10, 0x9effffff, 0x80e030000000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 10:59:22 executing program 0: 10:59:22 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000d1a000)={0xa, 0x4e20, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [], @loopback}}, 0x1c) 10:59:22 executing program 1: [ 204.732697] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 204.769786] raw_sendmsg: syz-executor4 forgot to set AF_INET. Fix it! 10:59:22 executing program 0: r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, &(0x7f0000000580)}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000040)=@nfc={0x27, 0x8}, 0x80, &(0x7f0000000580)}, 0x0) 10:59:22 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000000000039a, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/softnet_stat\x00') preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000280)=""/209}, {&(0x7f0000000380)=""/242}], 0x10000000000002a1, 0x0) 10:59:22 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x136a88c8311572c, 0x7ffffff7) 10:59:22 executing program 7: r0 = socket$inet6(0xa, 0x1000000000001, 0x0) ioctl(r0, 0x8000000008912, &(0x7f00000000c0)="0a5cc80700315f85715070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000005e0007031dfffd946f61830002200a00090000e7fe1c40000c1ba3a20400ff7e280000001100ffffba16a0aa1ce208b3ebea8653b1cc7e63975c02007b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 204.962671] ================================================================== [ 204.970127] BUG: KMSAN: uninit-value in sit_tunnel_xmit+0x18c0/0x3640 [ 204.976736] CPU: 0 PID: 7087 Comm: syz-executor0 Not tainted 4.18.0-rc8+ #34 [ 204.984020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 204.993395] Call Trace: [ 204.996020] dump_stack+0x17c/0x1c0 [ 204.999686] kmsan_report+0x188/0x2a0 [ 205.003524] __msan_warning+0x70/0xc0 [ 205.007361] sit_tunnel_xmit+0x18c0/0x3640 [ 205.011635] ? validate_xmit_xfrm+0x73/0x13e0 [ 205.016193] ? ipip6_tunnel_uninit+0x7e0/0x7e0 [ 205.020825] dev_hard_start_xmit+0x5df/0xc20 [ 205.025290] __dev_queue_xmit+0x2eea/0x3a70 [ 205.029672] dev_queue_xmit+0x4b/0x60 [ 205.033502] ? __netdev_pick_tx+0xb20/0xb20 [ 205.037867] packet_sendmsg+0x7fb5/0x8ae0 [ 205.042310] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 205.047706] ? futex_wait+0x90b/0xbe0 [ 205.051540] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 205.057022] ? rw_copy_check_uvector+0x13f/0x710 [ 205.061834] ? __msan_poison_alloca+0x173/0x200 [ 205.066545] ? import_iovec+0xb4/0x5c0 [ 205.070473] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 205.076011] ___sys_sendmsg+0xe32/0x1250 [ 205.080123] ? compat_packet_setsockopt+0x360/0x360 [ 205.085216] __x64_sys_sendmsg+0x32d/0x460 [ 205.089492] ? ___sys_sendmsg+0x1250/0x1250 [ 205.093846] do_syscall_64+0x15b/0x220 [ 205.097777] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 205.103012] RIP: 0033:0x457089 10:59:23 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x2000000011, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000000180), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x4}, 0x1c) 10:59:23 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000d1a000)={0xa, 0x4e20, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [], @loopback}}, 0x1c) 10:59:23 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="0a5cc80700315f85715070") r1 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0xfcda) setsockopt$inet_int(r1, 0x0, 0x17, &(0x7f0000000000)=0x54d, 0x951d2c7) sendto$unix(r1, &(0x7f0000000080), 0x7272, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) setsockopt$inet_int(r1, 0x0, 0x14, &(0x7f0000000080)=0x75, 0x4) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000440)=""/175, 0xaf}], 0x1) [ 205.106216] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 205.125737] RSP: 002b:00007f060b935c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 205.133481] RAX: ffffffffffffffda RBX: 00007f060b9366d4 RCX: 0000000000457089 [ 205.140778] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 205.148074] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 205.155367] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff 10:59:23 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000000000039a, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/softnet_stat\x00') preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000280)=""/209}, {&(0x7f0000000380)=""/242}], 0x10000000000002a1, 0x0) [ 205.162662] R13: 00000000004d3ff8 R14: 00000000004c8a56 R15: 0000000000000000 [ 205.169964] [ 205.171602] Uninit was created at: [ 205.175165] kmsan_internal_poison_shadow+0xb8/0x1b0 [ 205.180301] kmsan_kmalloc+0x98/0x100 [ 205.184126] kmsan_slab_alloc+0x10/0x20 [ 205.188134] __kmalloc_node_track_caller+0xb4c/0x11d0 [ 205.193352] __alloc_skb+0x2ce/0x9b0 [ 205.197093] alloc_skb_with_frags+0x1d0/0xac0 [ 205.201621] sock_alloc_send_pskb+0xb47/0x1120 [ 205.206233] packet_sendmsg+0x6480/0x8ae0 10:59:23 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000d1a000)={0xa, 0x4e20, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [], @loopback}}, 0x1c) [ 205.210398] ___sys_sendmsg+0xe32/0x1250 [ 205.214481] __x64_sys_sendmsg+0x32d/0x460 [ 205.218737] do_syscall_64+0x15b/0x220 [ 205.222646] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 205.227845] ================================================================== [ 205.235213] Disabling lock debugging due to kernel taint [ 205.240676] Kernel panic - not syncing: panic_on_warn set ... [ 205.240676] [ 205.248081] CPU: 0 PID: 7087 Comm: syz-executor0 Tainted: G B 4.18.0-rc8+ #34 [ 205.256678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 205.266053] Call Trace: [ 205.268683] dump_stack+0x17c/0x1c0 [ 205.272397] panic+0x3c3/0x9a0 [ 205.275665] kmsan_report+0x29e/0x2a0 [ 205.279504] __msan_warning+0x70/0xc0 [ 205.283344] sit_tunnel_xmit+0x18c0/0x3640 [ 205.287614] ? validate_xmit_xfrm+0x73/0x13e0 [ 205.292161] ? ipip6_tunnel_uninit+0x7e0/0x7e0 [ 205.296763] dev_hard_start_xmit+0x5df/0xc20 [ 205.301221] __dev_queue_xmit+0x2eea/0x3a70 [ 205.305606] dev_queue_xmit+0x4b/0x60 [ 205.309436] ? __netdev_pick_tx+0xb20/0xb20 [ 205.313786] packet_sendmsg+0x7fb5/0x8ae0 [ 205.317965] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 205.323354] ? futex_wait+0x90b/0xbe0 [ 205.327194] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 205.332672] ? rw_copy_check_uvector+0x13f/0x710 [ 205.337460] ? __msan_poison_alloca+0x173/0x200 [ 205.342161] ? import_iovec+0xb4/0x5c0 [ 205.346075] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 205.351619] ___sys_sendmsg+0xe32/0x1250 [ 205.355719] ? compat_packet_setsockopt+0x360/0x360 10:59:23 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="0a5cc80700315f85715070") r1 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0xfcda) setsockopt$inet_int(r1, 0x0, 0x17, &(0x7f0000000000)=0x54d, 0x951d2c7) sendto$unix(r1, &(0x7f0000000080), 0x7272, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) setsockopt$inet_int(r1, 0x0, 0x14, &(0x7f0000000080)=0x75, 0x4) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000440)=""/175, 0xaf}], 0x1) [ 205.360820] __x64_sys_sendmsg+0x32d/0x460 [ 205.365104] ? ___sys_sendmsg+0x1250/0x1250 [ 205.369478] do_syscall_64+0x15b/0x220 [ 205.373415] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 205.378637] RIP: 0033:0x457089 [ 205.381842] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 205.401351] RSP: 002b:00007f060b935c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 10:59:23 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000d1a000)={0xa, 0x4e20, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [], @loopback}}, 0x1c) [ 205.409100] RAX: ffffffffffffffda RBX: 00007f060b9366d4 RCX: 0000000000457089 [ 205.416400] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 205.423703] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 205.431107] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 205.438409] R13: 00000000004d3ff8 R14: 00000000004c8a56 R15: 0000000000000000 [ 205.446010] Dumping ftrace buffer: [ 205.449548] (ftrace buffer empty) [ 205.453345] Kernel Offset: disabled [ 205.456969] Rebooting in 86400 seconds..