[ 59.575771] audit: type=1800 audit(1539017432.613:27): pid=6135 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 61.200162] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 63.045335] random: sshd: uninitialized urandom read (32 bytes read) [ 63.524624] random: sshd: uninitialized urandom read (32 bytes read) [ 66.098356] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.98' (ECDSA) to the list of known hosts. [ 71.969571] random: sshd: uninitialized urandom read (32 bytes read) 2018/10/08 16:50:47 fuzzer started [ 76.765016] random: cc1: uninitialized urandom read (8 bytes read) 2018/10/08 16:50:52 dialing manager at 10.128.0.26:43781 2018/10/08 16:50:52 syscalls: 1 2018/10/08 16:50:52 code coverage: enabled 2018/10/08 16:50:52 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/10/08 16:50:52 setuid sandbox: enabled 2018/10/08 16:50:52 namespace sandbox: enabled 2018/10/08 16:50:52 Android sandbox: /sys/fs/selinux/policy does not exist 2018/10/08 16:50:52 fault injection: enabled 2018/10/08 16:50:52 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/10/08 16:50:52 net packed injection: enabled 2018/10/08 16:50:52 net device setup: enabled [ 81.892439] random: crng init done 16:52:48 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xffffffffffffffff, 0x31, 0xffffffffffffffff, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) pread64(r2, &(0x7f0000002640)=""/207, 0xfffffede, 0x0) [ 195.780269] IPVS: ftp: loaded support on port[0] = 21 [ 198.267863] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.274466] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.283194] device bridge_slave_0 entered promiscuous mode [ 198.448101] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.454682] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.463395] device bridge_slave_1 entered promiscuous mode [ 198.694190] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 198.841966] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready 16:52:52 executing program 1: lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000500)) getgroups(0x0, &(0x7f0000001180)) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000480)=@broute={'broute\x00', 0x20, 0x6, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200007c0], 0x0, &(0x7f0000000080), &(0x7f00000007c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x4}]}, 0x108) [ 199.295623] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 199.488135] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 199.743320] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 199.750434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 199.940947] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 199.948173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 199.999674] IPVS: ftp: loaded support on port[0] = 21 [ 200.575975] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 200.584194] team0: Port device team_slave_0 added [ 200.775845] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 200.784013] team0: Port device team_slave_1 added [ 200.944275] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 200.951331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 200.960383] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 201.209079] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 201.216237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 201.225269] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 201.400482] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 201.408310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 201.417584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 201.612435] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 201.620019] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 201.629206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 203.805466] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.812197] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.820627] device bridge_slave_0 entered promiscuous mode [ 204.133988] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.140476] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.149110] device bridge_slave_1 entered promiscuous mode [ 204.175480] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.182050] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.188999] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.195593] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.204652] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 204.448201] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 204.703379] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 204.822346] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 205.269355] bond0: Enslaving bond_slave_0 as an active interface with an up link 16:52:58 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/route\x00') preadv(r0, &(0x7f00000025c0)=[{&(0x7f0000000100)=""/64, 0x40}, {&(0x7f0000002640)=""/99, 0x63}], 0x2, 0x0) [ 205.507442] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 206.117996] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 206.125194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 206.514726] IPVS: ftp: loaded support on port[0] = 21 [ 207.095683] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 207.103918] team0: Port device team_slave_0 added [ 207.376513] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 207.384836] team0: Port device team_slave_1 added [ 207.619274] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 207.626505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 207.635419] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 207.944899] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 207.952122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 207.961154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 208.246642] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 208.254424] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 208.263645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 208.515579] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 208.523584] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 208.533026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 211.114909] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.121381] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.129998] device bridge_slave_0 entered promiscuous mode [ 211.410227] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.416802] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.425456] device bridge_slave_1 entered promiscuous mode [ 211.632180] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.638657] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.645695] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.652221] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.660901] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 211.694439] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 211.782191] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 212.018361] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 212.919226] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 213.276658] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 213.565846] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 213.573113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 213.846331] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 213.853497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 16:53:07 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0xfffb, 0x80001b, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f00000000c0)=0x2) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000100)=0x6) [ 214.868260] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 214.876558] team0: Port device team_slave_0 added [ 215.270594] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 215.278876] team0: Port device team_slave_1 added [ 215.380904] IPVS: ftp: loaded support on port[0] = 21 [ 215.617652] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 215.624840] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 215.633961] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 215.897295] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 215.904612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 215.913291] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 216.344212] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 216.351935] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 216.360773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 216.740086] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 216.748189] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 216.757307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 217.180171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.524514] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 219.858347] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 219.864852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 219.873050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 221.126199] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.132770] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.139692] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.146275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.155220] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 221.327873] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.439067] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.445687] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.454277] device bridge_slave_0 entered promiscuous mode [ 221.704119] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 221.825345] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.831952] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.840267] device bridge_slave_1 entered promiscuous mode [ 222.204227] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 222.521530] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 223.550744] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 223.896244] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 224.258917] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 224.266130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready 16:53:17 executing program 4: perf_event_open(&(0x7f0000000480)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cuse\x00', 0x82, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000040)=r0) [ 224.676207] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 224.683434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 225.894764] IPVS: ftp: loaded support on port[0] = 21 [ 225.979944] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 225.988755] team0: Port device team_slave_0 added [ 226.480253] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 226.488584] team0: Port device team_slave_1 added [ 226.569719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.913977] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 226.921013] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 226.930151] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 227.286501] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 227.293637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 227.302629] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 227.796287] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 227.804021] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 227.813167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 228.233823] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 228.241413] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 228.250748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 228.399935] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 230.009910] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 230.016432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 230.024446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 231.786995] 8021q: adding VLAN 0 to HW filter on device team0 16:53:25 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0xfffb, 0x80001b, 0x0, 0xffffffffffffffff}) ppoll(&(0x7f00000001c0)=[{r1, 0x1}], 0x1, &(0x7f0000000280), &(0x7f00000002c0), 0x8) 16:53:26 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0xfffb, 0x80001b, 0x0, 0xffffffffffffffff}) ppoll(&(0x7f00000001c0)=[{r1, 0x1}], 0x1, &(0x7f0000000280), &(0x7f00000002c0), 0x8) [ 233.066114] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.074401] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.081399] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.088268] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.096752] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 233.163701] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 16:53:26 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = accept4$packet(0xffffffffffffff9c, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0x14, 0x80800) getsockopt$packet_buf(r4, 0x107, 0x2, &(0x7f00000001c0)=""/198, &(0x7f0000000080)=0xc6) ioctl$int_in(r2, 0x5452, &(0x7f0000000100)=0x101) recvmmsg(r2, &(0x7f0000000040), 0x4000000000000a8, 0x0, 0x0) r5 = dup2(r0, r1) connect$vsock_stream(r5, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) shutdown(r3, 0x1) [ 233.467953] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.474604] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.483280] device bridge_slave_0 entered promiscuous mode [ 233.961892] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.968459] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.977268] device bridge_slave_1 entered promiscuous mode [ 234.442235] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready 16:53:27 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$BLKPG(r1, 0x1269, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f00000002c0)}) r2 = syz_open_dev$sndpcmp(&(0x7f00000005c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x800c0) recvfrom$unix(r2, &(0x7f00000006c0)=""/4096, 0x1000, 0x140, &(0x7f00000016c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r3 = syz_open_dev$evdev(&(0x7f0000000600)='/dev/input/event#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffe, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGBITSND(r3, 0x80404532, &(0x7f0000000040)=""/85) [ 234.859500] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready 16:53:28 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$BLKPG(r1, 0x1269, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f00000002c0)}) r2 = syz_open_dev$sndpcmp(&(0x7f00000005c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x800c0) recvfrom$unix(r2, &(0x7f00000006c0)=""/4096, 0x1000, 0x140, &(0x7f00000016c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r3 = syz_open_dev$evdev(&(0x7f0000000600)='/dev/input/event#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffe, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGBITSND(r3, 0x80404532, &(0x7f0000000040)=""/85) 16:53:29 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$BLKPG(r1, 0x1269, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f00000002c0)}) r2 = syz_open_dev$sndpcmp(&(0x7f00000005c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x800c0) recvfrom$unix(r2, &(0x7f00000006c0)=""/4096, 0x1000, 0x140, &(0x7f00000016c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r3 = syz_open_dev$evdev(&(0x7f0000000600)='/dev/input/event#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffe, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGBITSND(r3, 0x80404532, &(0x7f0000000040)=""/85) [ 236.204088] bond0: Enslaving bond_slave_0 as an active interface with an up link 16:53:29 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$BLKPG(r1, 0x1269, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f00000002c0)}) r2 = syz_open_dev$sndpcmp(&(0x7f00000005c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x800c0) recvfrom$unix(r2, &(0x7f00000006c0)=""/4096, 0x1000, 0x140, &(0x7f00000016c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r3 = syz_open_dev$evdev(&(0x7f0000000600)='/dev/input/event#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffe, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGBITSND(r3, 0x80404532, &(0x7f0000000040)=""/85) [ 236.790223] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 237.244002] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 237.251075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready 16:53:30 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$BLKPG(r1, 0x1269, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f00000002c0)}) r2 = syz_open_dev$sndpcmp(&(0x7f00000005c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x800c0) recvfrom$unix(r2, &(0x7f00000006c0)=""/4096, 0x1000, 0x140, &(0x7f00000016c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) syz_open_dev$evdev(&(0x7f0000000600)='/dev/input/event#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffe, 0x32, 0xffffffffffffffff, 0x0) [ 237.635985] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 237.643163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 238.638089] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 238.646370] team0: Port device team_slave_0 added [ 238.694980] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.933849] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 238.942175] team0: Port device team_slave_1 added [ 239.266808] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 239.274021] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 239.282837] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 239.641261] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 239.648420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 239.657300] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 239.684641] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 240.021552] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 240.029310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 240.038198] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 240.316064] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 240.323835] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 240.332935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready 16:53:33 executing program 1: r0 = socket$inet(0x2, 0x4000000000000002, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x6, @rand_addr, 0x0, 0x3, 'lblc\x00', 0x0, 0x3, 0x57}, 0x2c) [ 240.464996] kernel msg: ebtables bug: please report to author: bad policy [ 240.499213] kernel msg: ebtables bug: please report to author: bad policy [ 240.898293] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 240.904893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 240.912721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 241.856977] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.960967] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.967551] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.974614] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.981083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.990417] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 242.997052] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 246.050518] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.938647] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready 16:53:40 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x400000, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000040)={0x0, 0x80000}) r2 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x400000, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={r1, 0x80000, r2}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001200)={r0, 0x10, &(0x7f00000011c0)={&(0x7f00000001c0)=""/4096, 0x1000, 0x0}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001280)={r2, 0x10, &(0x7f0000001240)={&(0x7f0000000100)=""/148, 0x94, r3}}, 0x10) ioctl$BLKREPORTZONE(r0, 0xc0101282, &(0x7f00000012c0)={0x9, 0x6, 0x0, [{0xd3, 0x4, 0x9, 0x7fff, 0x1, 0x7, 0x16b}, {0x5, 0x1000, 0xff, 0x2, 0x3, 0x229, 0x40}, {0x6, 0x7, 0x10001, 0xffffffffffffffc1, 0xe3, 0x80000000, 0xc7}, {0x6, 0x90, 0x6, 0x5, 0x3f, 0xb8, 0x31}, {0xfb4, 0x5, 0x8, 0x0, 0x3, 0x4, 0x2}, {0x6, 0xfff, 0x12000000, 0x3f, 0xffffffff, 0xfffffffffffffffc, 0x8}]}) r4 = perf_event_open$cgroup(&(0x7f0000001480)={0x2, 0x70, 0x1, 0x3, 0x1, 0x1, 0x0, 0x6, 0x2000, 0x1, 0x8, 0x7fff, 0x20, 0x6, 0x7, 0x8, 0x9, 0x80, 0x1ff, 0xae6, 0x38f1, 0x1ff, 0x6, 0x2, 0x7, 0xb98b, 0x3, 0xe00, 0x1, 0x0, 0x101, 0x7c42, 0x4, 0xf150, 0x5c, 0x81, 0x57aa89a3, 0x1, 0x0, 0x2, 0x0, @perf_config_ext={0x4d3d, 0x200}, 0x2000, 0x9, 0x1, 0x2, 0xd79f, 0x1000, 0xff}, r0, 0xb, r0, 0x4) fadvise64(r4, 0x0, 0x6, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r2, 0x40505331, &(0x7f0000001500)={{0xffffffffffffffff, 0x8}, {0x5, 0xb03b}, 0x0, 0x3, 0x667}) ioctl$TCSBRKP(r2, 0x5425, 0x5) r5 = request_key(&(0x7f0000001580)='blacklist\x00', &(0x7f00000015c0)={'syz', 0x0}, &(0x7f0000001600)='/dev/ppp\x00', 0xfffffffffffffff8) r6 = request_key(&(0x7f0000001640)='logon\x00', &(0x7f0000001680)={'syz', 0x0}, &(0x7f00000016c0)="7472757374656421c9776c616e312900", 0xfffffffffffffff8) keyctl$negate(0xd, r5, 0x20, r6) time(&(0x7f0000001700)) sendmmsg(r2, &(0x7f0000001dc0)=[{{&(0x7f0000001740)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e23, 0x53b, @empty, 0x1f}}}, 0x80, &(0x7f0000001840)=[{&(0x7f00000017c0)="8bcebc216cb6672d514f12f6531a25fcb3969f18c18c1700f09b70506bdd85c4bb71c5c62ab78a8182da103e036a4de1f6d9107251b371cacca07db39bdb5f3e5ebb8668b5a2b8bbcf4357cc304866112f9708a88f8d2aa5", 0x58}], 0x1, &(0x7f0000001880)=[{0x88, 0x100, 0x6, "df7ad3eb4f54648285d06e242e0a832762a0a5a5bb90b667f4e8723b914f09129832c2512a1aac9a093558966b8f9025796fecbfa534d5c7af44fe9106fa449641a14ea543363e807218dda454450f0060b9514e2a1b04961424c6d26c673ec3dc0b9cd899f81bdba0921adeb69a69944f72"}, {0xc0, 0x13f, 0x3, "e69234f03344ae65a58056172111e7335f103e774b4b0e34f59b97b68b7ea6b01715da9897e90f20d082ee516ed410aae12d77ba3b17f3d97e05980e61c70b09407f0a92c0fb7dd32c4054996e0565f43cf21fd9f320a30932fdc6993c339ed45f34be333e905bd02e895af9ff42cba911cc88d42658be6dae139f91b3fb03e12bdf1d57384f6ef3c7a6d2c879393ec2e5897c21ac859085d03c08ec6d4458e6ad4caea9dde7210339f1d7"}, {0xe0, 0x10f, 0x9, "ca322bbca3502f77c24415391305082ca6b5827d54e9b836fc28ec321c7f9dca7de135c69530b6cee437cf2a6cc5232e6190499a215a52dae19d8946e85cc4b270c6f104dc525ed977b231203cbebf5766801f0423b369c8f585cd6a24ab6a3bee340d4047132187852bb1fed4614041053bd6e68fd5b0eb999d63ad4821b829c3aa67ba4bc06d5300094ca6014ef7770afb3f65e38627b5bb246716f0fc9da1c56faea7b9aa88baf75e67b42a743770200374d636e38176fc705870effbdf7088971b2a8d4ff610612c93"}, {0xd8, 0x111, 0xff, "d52ca8b4ec9e527b4afadcfd0bdfb98ed18a52fabb18d2248de66e8d7b6a96428ebc5d3711f86461e789081b46dd8aa1a67a752a936fc4726b0a31db62c3c44ce0bca2682b2a89640a5a9fdf2725593baa2a1577fbd88171e420504e4f59f49fb3de3084dd75e5fc7b8a224a02842b70646572145fda7102095fbba61f876f6be28353e69ff0c671948706ab7fb10b1df7ff0a96d372ad5be9ebad0711b2958c2221e73f7dff28ef65d7552a02a852f71373c8a43a3b47413c93c956c54570e62a01a27386ee92"}, {0xd0, 0x107, 0x7, "692dd04da925ecd0e674d554280fc2a9ccdf91c6c468eb82bb2f376a71cd9a0df5a2217086ca94765998b7ecac7ba165e471d6754833c25cbaedfd8a59a5d536f4b4bd2c1e5c0d0af55ad038200d273f8fb7eff70af1fe80071296ae675cdbcaf0fc0c702d2395251964ec7467e49ba6bc40d4a53b4c479163ef4910d764dd93b7a64a560aa7bc43a90dd2efcc2c0323635339e161fd9291a6e0d31f96fd8c2022896b8ac193a55972444e3c76022dd3299e81061433cdd391e762"}], 0x3d0, 0x1}, 0x43}, {{&(0x7f0000001c80)=@ethernet={0x1, @dev={[], 0x1b}}, 0x80, &(0x7f0000001d80)=[{&(0x7f0000001d00)="cde2cda7e24b5b0659b76ae9c54c1dc7679fc42303a5d2f41151eb22980bf3ad5abb5ba197cec0a1b4d394c2ad5228834eaecd9f15cdc789413797f5f91460db05f4b41c67499747d57ddd662805a9f0bd9116c63f22b933ab585069923ff35721c05303ad1acf", 0x67}], 0x1, 0x0, 0x0, 0x40}, 0x8e06}], 0x2, 0x40000) openat$md(0xffffffffffffff9c, &(0x7f0000001e40)='/dev/md0\x00', 0x200, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000001e80)={0x6, 0x0, 0x0, r2}) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000001ec0)=0x1, 0x4) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000001f00)={0x212, 0x4, 0x4e0, 0x40a, 0x8, 0x1}) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000001f80)=0x0) r8 = syz_open_procfs(r7, &(0x7f0000001fc0)='fd\x00') ioctl$TCFLSH(r2, 0x540b, 0x0) r9 = msgget(0x2, 0x28) msgrcv(r9, &(0x7f0000002000)={0x0, ""/140}, 0x94, 0x2, 0x0) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) ptrace$cont(0x1f, r7, 0x8, 0x78c) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r8, 0x6, 0x1d, &(0x7f00000020c0)={0x1, 0x7f, 0x7ff, 0x5, 0x3}, 0x14) ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f0000002100)=[0x401, 0x7]) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000002180)={0x4, &(0x7f0000002140)=[{}, {}, {}, {}]}) [ 247.907981] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 247.914480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 247.922415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 247.976546] IPVS: ftp: loaded support on port[0] = 21 [ 248.793010] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.442647] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.449151] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.457804] device bridge_slave_0 entered promiscuous mode [ 251.618761] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.625754] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.634567] device bridge_slave_1 entered promiscuous mode [ 251.900967] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 252.090606] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 252.330649] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.758640] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 253.072291] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 253.216784] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 253.290732] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 253.299143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 253.539954] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 253.547140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 253.762452] ion_buffer_destroy: buffer still mapped in the kernel [ 253.949057] Not allocated shadow for addr ffff88013de69108 (page ffffea0007736760) [ 253.956830] Attempted to access 8 bytes [ 253.960864] ------------[ cut here ]------------ [ 253.965644] kernel BUG at mm/kmsan/kmsan.c:1091! [ 253.970443] invalid opcode: 0000 [#1] SMP [ 253.974618] CPU: 1 PID: 6655 Comm: syz-executor3 Not tainted 4.19.0-rc4+ #64 [ 253.981830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 253.991223] RIP: 0010:kmsan_get_shadow_address+0x2d6/0x3d0 16:53:47 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0xfffb, 0x80001b, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f00000000c0)=0x2) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000100)=0x6) [ 253.996879] Code: e9 89 00 00 00 c7 04 25 20 73 28 8c 01 00 00 00 65 48 8b 04 25 00 fd 02 00 c6 80 7b 09 00 00 01 80 3c 25 38 73 28 8c 00 74 0c <0f> 0b 0f 1f 84 00 00 00 00 00 eb fe 48 c7 c7 1c bc 57 8b 31 c0 4c [ 254.016674] RSP: 0018:ffff880154daf780 EFLAGS: 00010046 [ 254.022065] RAX: 000000000000001b RBX: 0000000000000000 RCX: 693a6ae30428b500 [ 254.029353] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000000 [ 254.036656] RBP: ffff880154daf7b0 R08: 0000000000000000 R09: ffff88021fd38f50 [ 254.043947] R10: 0000000000000000 R11: ffffffff862594e0 R12: 0000000000000001 [ 254.051237] R13: ffff88013de69108 R14: 0000000000000001 R15: 0000000000000008 [ 254.059049] FS: 0000000001579940(0000) GS:ffff88021fd00000(0000) knlGS:0000000000000000 [ 254.068594] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 254.074680] CR2: 0000000000706158 CR3: 000000015561c000 CR4: 00000000001406e0 [ 254.083095] Call Trace: [ 254.085726] kmsan_internal_unpoison_shadow+0x5c/0xe0 [ 254.090948] kmsan_unpoison_shadow+0x72/0xd0 [ 254.095410] vunmap_page_range+0x828/0xc20 [ 254.099720] remove_vm_area+0x39b/0x450 [ 254.103740] __vunmap+0x34c/0x5d0 [ 254.105940] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 254.107236] vfree+0x79/0x170 [ 254.113635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 254.116428] do_arpt_get_ctl+0xddb/0xe80 [ 254.124172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 254.127013] ? compat_do_arpt_set_ctl+0x2e90/0x2e90 [ 254.138511] nf_getsockopt+0x481/0x4e0 [ 254.142467] ip_getsockopt+0x2b1/0x470 [ 254.146409] ? compat_ip_setsockopt+0x380/0x380 [ 254.151105] tcp_getsockopt+0x1c6/0x1f0 [ 254.155134] ? tcp_get_timestamping_opt_stats+0x1810/0x1810 [ 254.160874] sock_common_getsockopt+0x13f/0x180 [ 254.165583] ? sock_recv_errqueue+0x990/0x990 [ 254.170904] __sys_getsockopt+0x48c/0x550 [ 254.175108] __se_sys_getsockopt+0xe1/0x100 [ 254.179478] __x64_sys_getsockopt+0x62/0x80 [ 254.183833] do_syscall_64+0xbe/0x100 [ 254.187676] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 254.192947] RIP: 0033:0x45a0aa [ 254.196922] Code: b8 34 01 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 dd 88 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 37 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ba 88 fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 254.219581] RSP: 002b:0000000000a3f648 EFLAGS: 00000212 ORIG_RAX: 0000000000000037 [ 254.228924] RAX: ffffffffffffffda RBX: 0000000000a3f750 RCX: 000000000045a0aa [ 254.237010] RDX: 0000000000000061 RSI: 0000000000000000 RDI: 0000000000000003 [ 254.244304] RBP: 0000000000000003 R08: 0000000000a3f65c R09: 000000000000000a [ 254.251594] R10: 0000000000a3f750 R11: 0000000000000212 R12: 0000000000000000 [ 254.258895] R13: 000000000003df56 R14: 0000000000000001 R15: 0000000000000003 [ 254.266200] Modules linked in: [ 254.269441] ---[ end trace 8439e0780fab899c ]--- [ 254.274226] RIP: 0010:kmsan_get_shadow_address+0x2d6/0x3d0 [ 254.279874] Code: e9 89 00 00 00 c7 04 25 20 73 28 8c 01 00 00 00 65 48 8b 04 25 00 fd 02 00 c6 80 7b 09 00 00 01 80 3c 25 38 73 28 8c 00 74 0c <0f> 0b 0f 1f 84 00 00 00 00 00 eb fe 48 c7 c7 1c bc 57 8b 31 c0 4c [ 254.298801] RSP: 0018:ffff880154daf780 EFLAGS: 00010046 [ 254.304195] RAX: 000000000000001b RBX: 0000000000000000 RCX: 693a6ae30428b500 [ 254.311526] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000000 [ 254.318816] RBP: ffff880154daf7b0 R08: 0000000000000000 R09: ffff88021fd38f50 [ 254.326104] R10: 0000000000000000 R11: ffffffff862594e0 R12: 0000000000000001 [ 254.333392] R13: ffff88013de69108 R14: 0000000000000001 R15: 0000000000000008 [ 254.340698] FS: 0000000001579940(0000) GS:ffff88021fd00000(0000) knlGS:0000000000000000 [ 254.348941] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 254.354843] CR2: 0000000000706158 CR3: 000000015561c000 CR4: 00000000001406e0 [ 254.362131] Kernel panic - not syncing: Fatal exception [ 254.368716] Kernel Offset: disabled [ 254.372354] Rebooting in 86400 seconds..