[ 53.913235] audit: type=1800 audit(1538986007.957:28): pid=5930 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 55.457332] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. [ 56.270345] random: sshd: uninitialized urandom read (32 bytes read) [ 56.673761] random: sshd: uninitialized urandom read (32 bytes read) Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 58.280368] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.50' (ECDSA) to the list of known hosts. [ 64.124050] random: sshd: uninitialized urandom read (32 bytes read) 2018/10/08 08:07:00 fuzzer started [ 68.681916] random: cc1: uninitialized urandom read (8 bytes read) 2018/10/08 08:07:05 dialing manager at 10.128.0.26:36867 2018/10/08 08:07:05 syscalls: 1 2018/10/08 08:07:05 code coverage: enabled 2018/10/08 08:07:05 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/10/08 08:07:05 setuid sandbox: enabled 2018/10/08 08:07:05 namespace sandbox: enabled 2018/10/08 08:07:05 Android sandbox: /sys/fs/selinux/policy does not exist 2018/10/08 08:07:05 fault injection: enabled 2018/10/08 08:07:05 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/10/08 08:07:05 net packed injection: enabled 2018/10/08 08:07:05 net device setup: enabled [ 74.736438] random: crng init done 08:09:02 executing program 0: [ 188.963744] IPVS: ftp: loaded support on port[0] = 21 [ 191.320888] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.327569] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.336452] device bridge_slave_0 entered promiscuous mode [ 191.559093] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.565671] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.574111] device bridge_slave_1 entered promiscuous mode [ 191.710331] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 191.844900] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 192.267488] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 192.409960] bond0: Enslaving bond_slave_1 as an active interface with an up link 08:09:06 executing program 1: [ 192.687557] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 192.694840] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 193.329546] IPVS: ftp: loaded support on port[0] = 21 [ 193.365397] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 193.373459] team0: Port device team_slave_0 added [ 193.629128] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 193.637248] team0: Port device team_slave_1 added [ 193.808235] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 193.815498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 193.825002] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 194.031942] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 194.038974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 194.047943] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 194.193173] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 194.200739] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 194.210260] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 194.483893] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 194.491531] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 194.500719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 196.843352] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.849846] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.856857] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.863366] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.872175] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 197.032411] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 197.306240] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.312783] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.321167] device bridge_slave_0 entered promiscuous mode [ 197.459759] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.466366] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.474917] device bridge_slave_1 entered promiscuous mode [ 197.793210] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 197.985307] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 198.519432] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 198.713802] bond0: Enslaving bond_slave_1 as an active interface with an up link 08:09:12 executing program 2: [ 199.246241] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 199.253523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 199.778685] IPVS: ftp: loaded support on port[0] = 21 [ 200.211138] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 200.219297] team0: Port device team_slave_0 added [ 200.453152] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 200.461163] team0: Port device team_slave_1 added [ 200.710370] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 200.717681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 200.726866] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 200.979028] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 200.986220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 200.995486] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 201.331808] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 201.339341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 201.348356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 201.660906] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 201.668560] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 201.677626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 204.185592] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.192216] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.200550] device bridge_slave_0 entered promiscuous mode [ 204.433330] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.439799] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.448347] device bridge_slave_1 entered promiscuous mode [ 204.798432] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 205.109024] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.115579] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.122564] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.129019] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.137925] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 205.145074] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 205.160600] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 206.022329] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 206.376790] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 206.693639] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 206.700674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 207.016016] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 207.023399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 207.499442] ip (6437) used greatest stack depth: 53040 bytes left 08:09:21 executing program 3: [ 207.900619] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 207.908906] team0: Port device team_slave_0 added [ 208.298524] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 208.306848] team0: Port device team_slave_1 added [ 208.658012] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 208.665355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 208.674400] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 208.811285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.981574] IPVS: ftp: loaded support on port[0] = 21 [ 209.006920] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 209.014173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 209.023148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 209.413790] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 209.435227] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 209.444509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 209.793765] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 209.801460] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 209.810689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 210.310374] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 211.648097] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 211.654595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 211.662648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 213.093272] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.790656] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.797206] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.805462] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.812013] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.820751] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 213.882088] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 214.756718] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.763569] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.772774] device bridge_slave_0 entered promiscuous mode [ 215.152771] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.159338] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.168082] device bridge_slave_1 entered promiscuous mode [ 215.545668] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 215.873445] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 216.967899] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 217.398507] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 217.766188] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 217.773679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 218.182195] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 218.189336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 08:09:32 executing program 4: [ 219.524432] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 219.532764] team0: Port device team_slave_0 added [ 219.716086] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.984829] IPVS: ftp: loaded support on port[0] = 21 [ 220.001467] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 220.009779] team0: Port device team_slave_1 added [ 220.427036] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 220.434501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 220.443738] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 220.890611] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 220.898114] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 220.907378] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 221.338756] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 221.346786] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 221.356517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 221.371082] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 221.715137] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 221.723001] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 221.732239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready 08:09:37 executing program 0: [ 223.021550] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 223.028137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 223.036107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 08:09:37 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x2, 0xfffffffffffffffb) setsockopt$inet_mreqsrc(r1, 0x0, 0x800000027, &(0x7f0000000000)={@multicast1, @local, @remote}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f00000002c0)={@multicast1, @local, 0x0, 0x2, [@remote, @broadcast]}, 0x18) preadv(0xffffffffffffffff, &(0x7f0000000600), 0x1000000000000134, 0x0) 08:09:37 executing program 0: r0 = socket$inet6(0xa, 0x100000000803, 0x3) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x1) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @remote}, &(0x7f00000000c0)=0xc) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) 08:09:38 executing program 0: r0 = socket$inet6(0xa, 0x1000000000005, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_matches\x00') readv(r1, &(0x7f0000002340)=[{&(0x7f0000000080)=""/4096, 0xffffff5c}], 0x100000000000010f) readv(r1, &(0x7f0000000580), 0x3c1) socket$bt_rfcomm(0x1f, 0x3, 0x3) [ 224.687119] 8021q: adding VLAN 0 to HW filter on device team0 08:09:39 executing program 0: mkdir(&(0x7f00001d3ff8)='./file0\x00', 0x0) r0 = perf_event_open(&(0x7f000000a000)={0x6, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000000200000000, 0x5c3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000ff3000), &(0x7f0000c22000)='./file0\x00', &(0x7f000015d000)='nfs\x00', 0x0, &(0x7f000000a000)) r1 = dup2(r0, r0) execveat(r1, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=[&(0x7f0000000040)='\x00', &(0x7f0000000080)='nfs\x00'], &(0x7f0000000240)=[&(0x7f0000000100)='nfs\x00', &(0x7f0000000140)="5e2b12cd766d6e657431707070316c6f00", &(0x7f0000000180)='nfs\x00', &(0x7f00000001c0)='nfs\x00', &(0x7f0000000200)='{*eth1:^cpuset\x00'], 0x400) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 08:09:39 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x80, 0x0) r1 = accept$alg(r0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)="2f02726f75702e7374617000", 0x2761, 0x0) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) write$cgroup_int(r3, &(0x7f00000002c0), 0xfefe) sendfile(r1, r3, &(0x7f0000000240), 0xaa2) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f0000000100)={{0x1, 0x3, 0x3, 0x3, 0x3}, 0x4, 0x2, 'id1\x00', 'timer0\x00', 0x0, 0x80, 0x4, 0x20, 0xeb1}) 08:09:39 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x400000, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @loopback, @rand_addr}, &(0x7f0000000100)=0xc) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000140)={r2, @remote, @multicast2}, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f000001a000)={0xffffffffffffffff}) ioctl$SG_GET_TIMEOUT(r1, 0x2202, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x0, &(0x7f000039a000)}, 0x10) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x105000, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, &(0x7f0000000040)) 08:09:40 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f0000000400)={0x400000400000}) timer_create(0x0, &(0x7f0000044000), &(0x7f0000000040)) readahead(r0, 0x5, 0x8) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f00000001c0)) tkill(0x0, 0x0) [ 226.543079] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.549633] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.556617] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.563141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.571514] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 227.053523] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 227.085870] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.092479] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.100746] device bridge_slave_0 entered promiscuous mode [ 227.457588] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.464213] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.472624] device bridge_slave_1 entered promiscuous mode [ 227.874135] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 228.248222] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 229.309244] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 229.645766] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 230.004089] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 230.011138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 230.198765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.344660] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 230.352006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 231.119878] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 231.128096] team0: Port device team_slave_0 added [ 231.410627] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 231.419130] team0: Port device team_slave_1 added [ 231.431389] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 231.645772] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 231.654543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 231.663226] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 232.039072] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 232.046725] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 232.055409] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 232.356620] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 232.364357] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 232.373139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 232.563725] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 232.570079] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 232.578072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 232.644774] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 232.652586] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 232.661286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready 08:09:47 executing program 1: [ 233.636446] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.176577] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.183157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.190081] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.196665] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.205433] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 235.212180] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 237.814308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.581568] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready 08:09:52 executing program 2: [ 239.266863] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 239.273517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 239.281292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 239.809642] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.443658] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.963240] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready 08:09:57 executing program 3: [ 243.431112] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 243.437508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 243.445556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 243.732257] 8021q: adding VLAN 0 to HW filter on device team0 08:09:59 executing program 4: 08:09:59 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000001c0)=@abs, 0x6e, &(0x7f0000000540), 0x0, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x4}, 0x0) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 08:09:59 executing program 5: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000000040)={{0x10f, 0x7, 0x401, 0x267, 0x17c, 0x0, 0x26d, 0xfffffffffffffff8}, "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"}, 0x11d) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x400, 0x0) r2 = accept(r0, &(0x7f0000000580)=@can={0x1d, 0x0}, &(0x7f0000000600)=0x80) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000640)={@empty, @mcast2, @mcast1, 0x81, 0x3f, 0xffff, 0x500, 0x9, 0x4300080, r3}) pwrite64(r1, &(0x7f00000006c0)="fd20d434714b10d15cc292a3c4005ef4ce2aca1c4afa5e96b96da2800e3cdb2220af784e5e85cff523dd2e90e65f37428cf302f8fee1317f718fe377a39d126f8f53291196812754b7ea3060292e7683d26b55b6cf9f9c7b8ed35c55c8b1d3861bd71aa02cfce40f5f3050eeca0ed3c86a7b9747112ce5e7c36494a269e0b550f9e36f98371361dafbd0d171b36c7119eeae960240363513651c42e9100dd7e2544992400b41c2b2b1d5f1a2118da65d967252f563ff734bc5cf4a147528f223ca7fc0203111578e94e6edd2cc8b6882c7ae744c3aa4308e49791af1ba51b481d0813ad30c2f69d68da0c4b3b8cfb271946c072da7d08ff70f6b0f75cef2fcd224f99b95c8112deb05e501cb285822597fa0693cd1a758f7db826105da6405ee3328362f13efa92b7f85d59974c743d2bc8dc8a98e51212b27b8534fcf8e91c212db8b55f73a2a04e69c0ac9c276ced17342ef229abe677bbdc730e9b50c8109109f9c326b5ba732b7c4195ca249b54850bafbc5c8e53660207f04db83e4ac4dd1bd9c5805a8ac6b029db771ed0fc42adfafbda363fb69ff9186b58f72806f7fbcb004c78453e86b84a791351e94230705e30761667d85e2e17a2000f28abec7bf440baf4c1eb68e1fe821621a44e7afe058e943102a9882cef45308f1e5fe8413ffbfd3242c82f01a8196057047758c672a4f104c123509164b5f98651a095cae15e3c4011f2fada17ffac6ff6738c58d769474013d060d7f16cb19d471503066df83d16f528d0cf3ff065148fafa5c6c63ebd0dfa504326656144626c71e88d8bcb0247d574fb1cfb9344cfee5f7e354b97d8574f897f4c03f4544ba088bccf14877606daa8fc33e506bf5e914014f33dabbe72dc9f160a0594528997e6bd6f7c8085a4a98db593d4e10ea3aba273941d3b69b3937271efae5155a0eff7f547d09c054258b4f21e9c1e7debde90341ea1167d36621cf773ee0fd5ae6f11b3fde2083335d4b8de5133269ea0ec6522843578c1cdc31057af3b38b8a43d095e0924ff0205672059452a065067563feec33a901ff095940e80c5c6ba613472acad6fa6b5b510fc5e7de07ed71260c779fce010a46c4756bf57cec946feff18b02454d96c68659cc9af46de997a53cf418dedb2cbd759fe1d7850df0c0a3fc7bcadda637f800497b91d22b0acd15d838b2f4e0e957f40d4f5f1dde2f023efab81bdcef4e4696a2e39cdac10b6d9ddd620a6c5a854808c5a26b46a0554559ef023577690acfd7d6f571e675f3b9f0dd502863c07196ac6cc30211919edf79cc7d3915cd29add5643b0ebb05aed7d1dcd1f2976d2b5b128c060de919aa9ceb3ef214e08744d22e0d53863c583d9fa39c3a6bf9dae54b1994acae64170deccfba1324e6e0af91c4889c0818ab24799a08fa75904ff3541bc071961b0830d887e4e2bb9d37708653f2c4c48f9d92893a364e30addd5bd1d8d7f2a662fe08e0fbe5d337e4d9b156647b038add9e4eaeb4d6a06b5a2e91a7f11fdb9b8f4875da7da3c007179dae50eaf890fc591c1361081989e2f52db7840a365292dc32c46fe71e34e7c7d7a5eb7724baf1de17a52e6a76c04592716450849db063b3a5dadfdeee0dc8eaf02cf49b96d2956a4cf29d40544b6f98633ae974db085bc8fbbb19800e6529e413e4eeeefb1e92bc45dd9dc471b0d1f392529da66c58fb4e004969e05ca8c23b0ecd9906a150455e540f94b0ed8e26ef9c6f719c206ef3e08180d71d0f723133013430e3f5edeafc740248a7f6f455f89d7be8c8eca797ee2d053278195c787e51a419df6be15b5802e7eec18b25cdcc040bd6a7226a03a58df7787b56762d503011b91d65bc06d8cbe916a74e0e178e70f58d886af6f73d6928927f4ab733bb4b4ee819f6b32e3cf44feb3e7c90f4b0189db8aa2ae19c59c4c226a832e35fdc60890893cf1d309acaa4ea7b5ebe03e9d21d6a60e31936dd72879520f57905922838eaa95037a4d09c3d801bd306eca316aea2947d6e58a35b0d959abc1f2915cf5c3a33f06ddb86d2c8d0f2b9c05909ce6bd8fc3e5a3b71eb481c987c8d8dc142d9e8408a0932bc596de7464266151dc056d65fa80d96e5b39a6883b322068ff96b464891925469d43b70b56e37d6f1a598e09ca7f7ff7b9b537c1425300922214a514d03fb629d9d05d60f4a0cf3e5aaadb6a5e679ca75039ed32cb49f055411d63ae4fba8a75ce32c9b15b5c16f07367c2b4dc913201ee6b8b8d1bb72f4f73d01ba1625730ea262e2c29a7abf4882afa06aa98b8dce376cccd6cf21372d2b209ef0ab6eee7139eb4efd5df762903d383261df86767f2fa2ab9fd04f96a2dd9b2882e5646ef7d42c213b6cc061d43424d0290a84ecc6ec4677ba24dcda1e8a5267989b247ac774b6bc16ae249f1457cc53677085834a0e4a41afef26a18731afb9e3fdb62f3852171ab39358c21ffe26925d86f0edbdd897384cd5540b500649b4f26d323e77e3d751dabdce22bb69cae3e02251ed5a5024eebc7f1a981cead59487dcba39b444583918edc4f7239c74bff0bea6fe4962e706e533b80c4701b343b358f52bd71f84974fc1bbdb8ea2c483735b52ee8928ddba4aaa88e7f5713c6660203ab31094202e60afc6106a917326caa6bdbc613ba8945bdcf6f23d9a27c880d68be6e5d01e5a8e61f4ee043137f74513167293fe3064c953d324b3c14ef14fc79b8c4f4b18b952eede662412d329b0eddb5bac60fdbea08624f31d20830cea20bdb328bb3b31b536b4d08b36280a11c27cc0d38c37dc654891837b74e0d5e7378eb51d15b235bd0ead2a8a5a4e191ac716ed0dabdaad3aa90c5e554837113badbd94be5a16175420dc41ae67b4eb4970db8ae1d2f16cec97dcf8388ac60416d0902c742c18f5e0753f74a2eb56ae90c637f6aba08d74d1957b51b965755dff7ac7d9bba2d0ce4d2899cd2907588aa35c668c118bb9ed1b03e4c16b880e0acb05eda7575d644e6fb9e25ed89a0a1d0307183a2face89d4385e0cf328cdcc473cea11f5afe417fa4a5e8ead8e747de6e664f565be96ff2874301fa42150871db40bbbdcf772bcb797e14432ce93e793f19dbbcaa3503d08b0d60d35e62148d3fd660e9fe0e43c0581a456d76cdc0eeb575ad8cea94881200d66ee1fcacd518b680b1eefabeda343a5cab22c1b4a741b46ead0de5c0c051050da450072582d1fe7e350ec239cc1619fa0be0937919611bc09a848105d1d03c31fafacb00cf4d866eeaa3ff978f071b1036f04f05de2d759c53da3abf6ec8e40717c7a651a539ab46f67048c2ba400729579b50dff7d2e3ef6884b152db1da4a134ead472bc4bf7d59add70e8dc94aaea259f2b356cee2d1cf247f77c4b20cd8a51ff49ae2e92fabe41cc7f87e5018a077d036ca74ccd821acdeb82410427b25cb22feb8c2bfb3764922675e081bfb3421f909c06997bcc2e2f44e6ac317576026509b569509e9a7acdeb50cb646380511dcb65d189df34fc93c125a6a39f9c4f0d82079d9640c4405c935d09ef1774f5c5721233a31b2bccf345ec2b22a3870d815fe30fa6f60950fafd59fd7a133fe473c963da4f33bedadae26ebff76c9c3eee280016860381d973c23fbc378707f0018630f30be110032fbd2f3674f450ad94b2652fdac664045271f0ecf42cd69231a121f46bbf01c233031b226ff4e91488ade488f03380a18427dec76a303d80e2e352895e06bbd2607cb06155c92c86e25d2af13a83bfbd49677410712b960cfff3ea9f5dbf5831b4ec6d0cfcb69606593669e1044b484af3888e520f51504c2adb374417ce589df0a4b22fcd9cc297038a18aa116481bad587a24afaa12f59613ea4bf8654a6b2b4fc983968a7e9602150574196fcadd51cedbf672648458539e66a4f7c04a71396b87dcdfb765b75ef08881aa47f5be789c2bc18f79c229c51ae492189e510e40ca5335cce0620a0b7d12b77678e091fc4d8f1b2805087e1ab65f6c1043c782f655e57c8cf385e75d1fe32050cc161c2f1297c0a6aae51fccf55660c718f3411123732b13efa397be238c7a4c6693d37d0f63de83889eff4f51b26fde90bf31a26052cb098a661387aaee421d6e574a5755f133f6871d962773163081eb01f13988326e3d85632add4a5458fd909054ea1fdaf274d04e0eea1aa1561b3e83bb1cfa5db6970b3f38437fe4ef38f0ea4f27a618c8fc47786e8362ebf85983f817402cd04ee6bc82c8058aaedd3518013e77e33847d3af3af67638df7a40f18177ac19e2ec48ed9a4f7b42573954bb3693a3a0c98fe8dafb97a068c0f219671ad8b2c6f6eee8e6d9e88a6061799c0235fded05d7197c04e573e6b1da3b4579b8b9de1ea7f95521c9f9563b3038c01c87dd5c3c36847df432d23e8e331d620388e5507de559faef2bcd25bb3640c037be02f0f6b35acc47edfac44451216d7854418193fb53555d4c7de1df632ac006be467dd65c26338a09763beaaa2ef02e7e8a363a5958833b91e6d14dd613dcf82b4718488701b0faee9644ff59ab04fdacb3952bd201e1c3619689b853206943489c0d8ae6c469aad33d6678988adfa4ae1046e2bc2e258f0fe6946611ff90858fdcadb76dd761901d42c74434a4b92aab2c7d4eb3f8134d1fa099dcd6efcef57630a034ff13e16de25cfd3ec698a64a3505adeec3b659a4f46bd041f362086172b8313cfba698fbdc7ffc74bc59eee67d514db6896da3faaae798fc35f39b10471a88aa151a6dd97a1d97bce027f91a8dc148d409064bd3ab91d2b71fed6567c201717c4f64c3bd18f0d81a4d5eef2145fecd442c703b3e51f977e6fbd7aa5e1a408f10af23585dcb6734313b737e9789a4ac5342e919b96156861f1b0afb164a9d9cddfb0003785b5eec27aead3cd0394c6a8b73aaf164829cc9c1799601a8c129c2f90a559a80c2b0e84c2821b12884eafc5045e05edfbe5ae844bab5f926ef05764826a2b533152769ba96a3ea9276b954e0259b5cd4cafa9d1b9d3235497f953c583138d8515c09bb3b32f22e42b0832afdeb861f209635ccd21e0f9980995cbbb6b7b00dd21387debc3a4cf60078c2e5017bd2531bc3e1faab41e171e014f54475fe6d1ceee11120686676e52c87f3347b965e07f818e56feee644d32fae21620253e1d1377b4bfa93a93944804084c8786b284bada593613983e961152f2304946da88520a248bb422241416307f86f3719f44522571192646a0b8ff664e5d0d2e7b0dd5c9bafe4c93c8d1e83fb9b1b8227e5ef3f35810a12787ed4ead32a331dd64fe2ef5f56d12af2e71e65ea42bdbe5c5fa2e6fea4904b66f8386f6ef2b15886896a5845fa458273aad467a1253fcf90b9ee4729f6753fce739c05e99ef1ebe1d6864b6b0fe9e6c6a22fe1fd14b11e5a22fc49f7e5c21e5b9c3576eebe0e01c25530f26dfcae656cfda447a0e04f67d4dd3f0db8a7edf0bbdac275dd268a42e8dd62606e8b262f4ffb0c1d1c8234087e11ba3c8f7afe0758357c5b5d2828238f77bbfa45061426878c8f08355c1025c8bd96d5a34b9dedf5b19ac73871b1c41f0424281da2081d9362cfde766cd99e02119320184b34f135cd51988d8092745177ddbf4feede828c63261dc7adb9d9e9239488fe6e66f4a691e4e0857d175ae6fba2f8201d9b577167901ae9907e5f9e117e34d8c74ddcf2ad3538a679536cd1b4bd7e4e22e5dbbed58fc2141b560431a042dbbedc19509d7ec12f054e032acfa4223996162e13dd0b43c542441a7586e34b18d834d1638cd", 0x1000, 0x0) fcntl$setsig(r2, 0xa, 0x3b) ioctl$BLKIOMIN(r0, 0x1278, &(0x7f00000016c0)) r4 = syz_open_dev$sndpcmc(&(0x7f0000001700)='/dev/snd/pcmC#D#c\x00', 0xb9, 0x40) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000001740)) r5 = add_key(&(0x7f0000001880)='cifs.idmap\x00', &(0x7f00000018c0)={'syz', 0x2}, &(0x7f0000001900)="306364ab620f986783cee782603b9ae98522011e83226111d2864e102c7e5c68fba6d8207d83aebc2139a1d833d96622fe80a184d59ff0552d4c3cad2d7fb2ef0843148b3ab781ae9e98bb20c28d2596fe6a4afddc4c76f82d44f29a00dcbba5b1fd4e8f2102df", 0x67, 0xfffffffffffffff9) keyctl$setperm(0x5, r5, 0x80000) write$binfmt_aout(r0, &(0x7f0000001980)={{0x10b, 0x4, 0x8001, 0x317, 0x32a, 0xcc, 0x3bd}, "a10c02b10bed367baa0389692b1e626ff8561f0b579c29a6fb95fd44aab3e3533c97e6a1b06cba2639b1b98d2788c23bd133394ed5c797ae992d8c503ffcdc5b88ce6c92008c14a4aaa5220f820ac56d8211de88674711d4d54e27d6571673190536734983d806aebf85911cd3efd56fafc89e858eaa1064ece87452fda58be08b458d7a524d438624b72c3a30d519f3a14606c1af8d29e7320379d550b127f66f7c350e9b55b800f2f400bd0f4764711a3d59ba08e43b4fcb8d655514677c8205f5f78bb52900e5b62d6e7d"}, 0xec) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001b00)={0x28, 0x0, &(0x7f0000001a80)=[@exit_looper, @register_looper, @exit_looper, @dead_binder_done, @release={0x40046306, 0x4}, @acquire={0x40046305, 0x1}], 0x0, 0x0, &(0x7f0000001ac0)}) io_setup(0x6, &(0x7f0000001b40)=0x0) io_getevents(r6, 0x100000000, 0x1, &(0x7f0000001b80)=[{}], &(0x7f0000001bc0)={0x0, 0x989680}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001c40)={&(0x7f0000001c00)='\x00', r4}, 0x10) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000001c80)) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r4, 0xc008551a, &(0x7f0000001cc0)={0xa916, 0x1c, [0x121, 0x401, 0xffffffffffff717a, 0x7fff, 0x3, 0x484, 0x4]}) ftruncate(r4, 0xb43e) pwrite64(r4, &(0x7f0000001d00)="07c098dd9fe4c9027a2ab446da5d5212a7361b579096ac4c0176a205680c130b44ea1cd363d9a19f399129986b4c8416d04a75ccb91cab5504992592154cf37b79f3a48e073d6e4fb0c666e6eeca92327454f4b0cfd80533b11d393dc6c782a64a876b68f54bf37fdadffe4d574ce0eff7775ee1f84a31f5dfd5a1769684fd9ec5c5b45257ac6c1232a8345d19bcd326f8a91bc796", 0x95, 0x0) write$UHID_CREATE(r4, &(0x7f0000001ec0)={0x0, 'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000001dc0)=""/200, 0xc8, 0x7fff, 0x4, 0x1, 0x401, 0x9}, 0x120) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000002000), &(0x7f0000002040)=0x4) write$binfmt_aout(r4, &(0x7f0000002080)={{0x0, 0xd04, 0x0, 0x93, 0x358, 0x9, 0x178, 0x6}, "e602656a6b501bab5a67265ae3dd872f8c39125552b92690a1622bbea4a8c32ffc3a3ccf5c84806772ea1df294ac322ea83828c87591a79db27182f86054227b7a79a13c72d789fa01c5149201079e", [[], [], [], [], []]}, 0x56f) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000002600)={0xffff}, 0x1) pwritev(r1, &(0x7f00000037c0)=[{&(0x7f0000002640)="284f6c542a902543c6c915fe92cd17e1eb3f32b3ee1c06e7b1c25659ceaaf0a2233ad268470fb0df1fb2cab2aed31bac4cfbb16c47f19549f28e823fa863466e6d633b707392d7e1e422a43376876b", 0x4f}, {&(0x7f00000026c0)="4ba4b34830f9ac87460e9d64d0cc0735d805c5b75edc924541492561c3d3b96542810a3beaebbba5f9b0d7c1c342f530f230d93cdd22a53592d057fcd49cdaab8f46472fe68a44d52c02702670ec3b98d2115173c5af4b999dae36e00ab3fb6948b88f0b12c1dd1ea62579cce9a403c71fc12043e0522213883f50c407c3ca24afbdd198cecccc5370abf514eb2f2c58cbcf5af71eee225b1c5399e53d99bcf5a00d56f4464f198cb756c71e32cee34191a710e65b5e4473537384ce786ef1c789fe7ec2fc72c8dd9a5f745e86338c4143cbd8813252db2c3b4afd5cb12e1073ea99ce2dfd7b7251271fa6", 0xeb}, {&(0x7f00000027c0)="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", 0x1000}], 0x3, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000003800)=0x1) r7 = memfd_create(&(0x7f0000003840)='syz', 0x7) fsetxattr$security_smack_entry(r4, &(0x7f0000003880)='security.SMACK64MMAP\x00', &(0x7f00000038c0)='/dev/loop-control\x00', 0x12, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r7, 0x84, 0x15, &(0x7f0000003900)={0x5}, 0x1) 08:09:59 executing program 1: 08:09:59 executing program 2: 08:09:59 executing program 3: 08:10:00 executing program 1: syz_emit_ethernet(0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x0) 08:10:00 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000180), 0x0, 0x400c000, &(0x7f000083b000)={0x2, 0x4e20}, 0x10) connect(r1, &(0x7f0000000100)=@nl=@unspec, 0x80) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/udp\x00') sendfile(r1, r2, &(0x7f0000000000), 0x102) 08:10:00 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000480)=0x15e, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000380)=[{r1}], 0x1, 0x9) 08:10:00 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, &(0x7f00003b6ff0)={0x77359400}, &(0x7f0000048000), 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000f, 0x31, 0xffffffffffffffff, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000000), &(0x7f0000000080)}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 08:10:00 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="0a0775b005e381e5b3b60ced5c54dbd076fc6f67050ddac3c6b772ab09eb2bc85a", 0x21) [ 246.299380] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 08:10:00 executing program 1: semop(0x0, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}], 0x1) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000040)) 08:10:00 executing program 3: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "97aa8d", 0x8, 0x33, 0x0, @remote, @empty, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 08:10:00 executing program 4: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) accept(r0, 0x0, &(0x7f00000001c0)=0xfffffc71) [ 247.124912] IPVS: ftp: loaded support on port[0] = 21 [ 248.341911] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.348310] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.356583] device bridge_slave_0 entered promiscuous mode [ 248.431484] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.437950] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.445943] device bridge_slave_1 entered promiscuous mode [ 248.522981] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 248.597040] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 248.823661] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 248.902525] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 249.047369] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 249.054662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 249.283668] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 249.291368] team0: Port device team_slave_0 added [ 249.366083] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 249.373941] team0: Port device team_slave_1 added [ 249.451470] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 249.528164] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 249.605706] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 249.613083] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 249.622019] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 249.698897] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 249.706308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 249.715757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 250.575916] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.582421] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.589188] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.595698] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.603580] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 250.992025] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 253.733385] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.026884] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 254.317467] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 254.323893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 254.331625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 254.620954] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.520734] Unknown ioctl 35083 [ 256.525045] Unknown ioctl 4728 [ 256.528982] Unknown ioctl -2129897727 [ 256.535051] Unknown ioctl -1070571007 [ 256.543742] Unknown ioctl 8827 [ 256.550791] Unknown ioctl 35083 [ 256.555246] Unknown ioctl 4728 [ 256.557506] Unknown ioctl -2129897727 [ 256.563431] Unknown ioctl -1070571007 [ 256.569789] Unknown ioctl 8827 08:10:10 executing program 5: 08:10:10 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, &(0x7f00003b6ff0)={0x77359400}, &(0x7f0000048000), 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000f, 0x31, 0xffffffffffffffff, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000000), &(0x7f0000000080)}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 08:10:10 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000280)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554ffbfeb88da4e0e1cfa08424ada75af1f13fc9b2bd402acc7edbcf3a071de35331ce39c578e7f991aef35e3db4e0731372994ae23113f7f14dafc38c82481d90049ec673c680f13dd9e11") socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000d54000/0x2000)=nil, 0x2000, 0x0, 0xa132, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) flistxattr(r0, &(0x7f00000001c0)=""/114, 0x72) 08:10:10 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x40047438, &(0x7f0000000040)={'sit0\x00'}) 08:10:10 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x200004e23, @broadcast}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00002eaffc)=0x101, 0x4) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000266ffc), 0x4) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000000)={'team0\x00', {0x2, 0x4e21, @local}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r1, &(0x7f0000000100)="89", 0x1, 0x0, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) 08:10:10 executing program 4: r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, &(0x7f0000000000)) r1 = dup2(r0, r0) r2 = epoll_create(0x20) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000400)) mq_timedreceive(r0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000001700)={0x0, 0x989680}) 08:10:11 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x10}}}, 0x1c) connect(r0, &(0x7f0000000140)=@un=@file={0x0, './file0\x00'}, 0x80) connect(r0, &(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @dev, 0x3}, 0x74) 08:10:11 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x40047438, &(0x7f0000000040)={'sit0\x00'}) 08:10:11 executing program 3: r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, &(0x7f0000000000)) r1 = dup2(r0, r0) r2 = epoll_create(0x20) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000400)) mq_timedsend(r0, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000e0b000)) mq_timedreceive(r0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000001700)={0x0, 0x989680}) 08:10:11 executing program 4: r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, &(0x7f0000000000)) r1 = dup2(r0, r0) r2 = epoll_create(0x20) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000400)) mq_timedreceive(r0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000001700)={0x0, 0x989680}) 08:10:11 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={"6c6f3a05e6ff0100", {0x2, 0x0, @loopback}}) 08:10:11 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0xfffffffffffffffe) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/.yz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', &(0x7f0000000580)='fuse\x00', 0x7a00, &(0x7f00000001c0)=ANY=[]) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdirat(r0, &(0x7f0000000100)='./file0\x00', 0x0) 08:10:11 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x10}}}, 0x1c) connect(r0, &(0x7f0000000140)=@un=@file={0x0, './file0\x00'}, 0x80) connect(r0, &(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @dev, 0x3}, 0x74) 08:10:11 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='loginuid\x00') writev(r0, &(0x7f0000002a00)=[{&(0x7f00000029c0)='0', 0x1}], 0x1) 08:10:11 executing program 4: 08:10:11 executing program 0: 08:10:11 executing program 3: 08:10:12 executing program 1: 08:10:12 executing program 2: 08:10:12 executing program 5: 08:10:12 executing program 3: 08:10:12 executing program 4: 08:10:12 executing program 0: 08:10:12 executing program 1: 08:10:12 executing program 5: 08:10:12 executing program 2: 08:10:12 executing program 3: 08:10:12 executing program 0: 08:10:12 executing program 1: 08:10:12 executing program 4: 08:10:12 executing program 5: 08:10:13 executing program 3: 08:10:13 executing program 2: 08:10:13 executing program 1: 08:10:13 executing program 0: 08:10:13 executing program 4: 08:10:13 executing program 5: 08:10:13 executing program 3: 08:10:13 executing program 2: 08:10:13 executing program 4: 08:10:13 executing program 1: 08:10:13 executing program 3: 08:10:13 executing program 2: 08:10:13 executing program 4: 08:10:14 executing program 5: 08:10:14 executing program 0: 08:10:14 executing program 4: 08:10:14 executing program 1: 08:10:14 executing program 5: 08:10:14 executing program 3: 08:10:14 executing program 2: 08:10:14 executing program 0: 08:10:14 executing program 4: 08:10:14 executing program 1: 08:10:14 executing program 2: 08:10:14 executing program 5: 08:10:14 executing program 3: 08:10:15 executing program 1: 08:10:15 executing program 0: 08:10:15 executing program 4: 08:10:15 executing program 2: 08:10:15 executing program 5: 08:10:15 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@getneigh={0x14, 0x1e, 0x301}, 0x14}}, 0x0) 08:10:15 executing program 0: lsetxattr$security_evm(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)='security.evm\x00', &(0x7f0000000300)=@v2={0x5, 0x2, 0x8, 0x4, 0x6b, "ffd704a2a5b34fd9a26fc2318e9e270ca2d9eed93a8a46f6debd3ce51f2c08b791ce4ad4dbf068b08b90b7d7d60b0bbe08f7ec23f00073e1748cb95979133f4dc04fae15c91d2b55c612eff4c529bf9f8b86ac9fd4fa387fbb21d100fc85fb4a49ba9dfe8fb03088151a72"}, 0x75, 0x2) r0 = socket(0x10, 0x803, 0x0) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000080)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x2, 0x1) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x82000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000380)={0x40, 0x2, 'client1\x00', 0x1, "c9322f5e92bfd11b", "18bf65ad142a908f1346ff8dba3f9225aee6b7bb9672db2403bfe2bad86f3205", 0x40}) clock_gettime(0x0, &(0x7f0000000280)) futimesat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000480)={0xf, 0x8}, 0x10) sendto(r0, &(0x7f0000cfefee), 0x0, 0x0, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) getsockname$packet(r0, &(0x7f0000003040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000003080)=0x14) getpgid(0x0) socket(0x11, 0x0, 0x7fff) ioprio_get$pid(0x0, 0x0) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000000)=r3) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'nr0\x00', 0x2}) 08:10:15 executing program 1: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000040)=0x5, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6gre0\x00', 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x1000000}, 0x6) 08:10:15 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000001c0)=0x2) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000240)=0x1) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000040)) 08:10:15 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x80000101005, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000900)=""/246) pwritev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="80fd02090040", 0x6}], 0x1, 0x0) 08:10:15 executing program 3: socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x4, 0x0, @perf_bp, 0x0, 0x0, 0x1000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_gettime(0x0, &(0x7f0000002080)) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)="2f67726f3c23fb57e6c60f1f4b45b74d999a9a8c2ce15b26e518a4cb3a9cd12dcea440d899c22c652b3a471b4a7db7f3fef6e02e2be389de133945a385bd81e9bdeeee03000000000000005b540745df4b1dee483b157624c5bc719a099e6a3509000000398c34", 0x2761, 0x0) write$cgroup_pid(r0, &(0x7f0000000080), 0xfffffe38) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000100)=0xc) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1a1, 0x0) r1 = gettid() sched_setscheduler(0x0, 0x3, &(0x7f0000000280)=0xfffffffffffff001) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000100)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc, &(0x7f0000000440)=[{&(0x7f00000002c0)={0x10, 0x34, 0x0, 0x70bd2b}, 0x10}], 0x1, &(0x7f0000000d00), 0x0, 0x40}, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000300), &(0x7f0000000340)=0xc) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f0000000580)={'icmp6\x00'}, &(0x7f00000005c0)=0x1e) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x660c, 0x0) get_robust_list(0x0, &(0x7f0000000680)=&(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)}, &(0x7f00000006c0)=0x18) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000500)={[], 0x7, 0x7, 0x9, 0x4, 0x0, r1}) writev(0xffffffffffffffff, &(0x7f0000e11ff0), 0x0) mount(&(0x7f0000000740)=ANY=[], &(0x7f0000000900)='./file0\x00', &(0x7f0000000940)='ramfs\x00', 0x0, &(0x7f00000008c0)='\x00') socketpair(0x9, 0x6, 0x1, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000003c0)={0xddb7, 0x0, 0x0, 0x0, 0xfffffffffffff49c}) 08:10:16 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x4, 0x0, @perf_bp, 0x0, 0x0, 0x1000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x2b, 0x0, @thr={&(0x7f0000000780)="bd21aa5f1d3684f4b5f8de04bd2a215a4b7e8e2854d1a6f100a92b921c9f2ed09fc9b18930007ff926813e1a4abd5338ec4e923fddb2ea6a6df008dead3d7a08653fc9c2ad174e638c0ed7ec1ddae1e37864c009c8c2047b5d079c801760c437b9aa2d37d44f42c52fa5d714f75583a9d8993d360ba41de545ba382cf35311260a0c088d0cdb2bedefe8343cbb", &(0x7f0000000200)="ad3688b73e4932e80248c3d5d334d1ba0de76b55425ad91833f1e4"}}, &(0x7f0000000840)=0x0) timer_gettime(r1, &(0x7f0000002080)) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)="2f67726f3c23fb57e6c60f1f4b45b74d999a9a8c2ce15b26e518a4cb3a9cd12dcea440d899c22c652b3a471b4a7db7f3fef6e02e2be389de133945a385bd81e9bdeeee03000000000000005b540745df4b1dee483b157624c5bc719a099e6a3509000000398c34", 0x2761, 0x0) write$cgroup_pid(r2, &(0x7f0000000080), 0xfffffe38) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, &(0x7f0000000500)}}], 0x1, 0x0, &(0x7f0000003280)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='stat\x00') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000100)=0xc) preadv(r3, &(0x7f00000017c0), 0x1a1, 0x0) r4 = gettid() sched_setscheduler(r4, 0x3, &(0x7f0000000280)=0xfffffffffffff001) r5 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000d40)={&(0x7f0000000100)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc, &(0x7f0000000440)=[{&(0x7f00000002c0)={0x10, 0x34, 0x0, 0x70bd2b, 0x25dfdbfc}, 0x10}], 0x1, &(0x7f0000000d00), 0x0, 0x40}, 0x0) getpeername$netlink(r2, &(0x7f0000000300), &(0x7f0000000340)=0xc) getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, &(0x7f0000000580)={'icmp6\x00'}, &(0x7f00000005c0)=0x1e) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x660c, 0x4000001) get_robust_list(r4, &(0x7f0000000680)=&(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)}, &(0x7f00000006c0)=0x18) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000500)={[], 0x7, 0x7, 0x9, 0x4, 0x81, r4}) recvfrom$unix(r2, &(0x7f0000000d80)=""/96, 0x60, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000e11ff0)=[{&(0x7f0000000140)="580000001500add427323b470c458c5602067fffffff81004e220000000058000b4824ca945f64009400050028925aa80000000000000080000efffe1b0000000000fff5dd00000010000100090a1000410400000000fcff", 0x58}], 0x1) mount(&(0x7f0000000740)=ANY=[], &(0x7f0000000900)='./file0\x00', &(0x7f0000000940)='ramfs\x00', 0x0, &(0x7f00000008c0)='\x00') socketpair(0x9, 0x6, 0x1, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f00000003c0)={0xddb7, 0xa6f0, 0x6, 0x0, 0xfffffffffffff49c}) [ 262.185160] hrtimer: interrupt took 229909 ns 08:10:16 executing program 1: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000040)=0x5, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6gre0\x00', 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x1000000}, 0x6) [ 262.548718] netlink: 64 bytes leftover after parsing attributes in process `syz-executor5'. 08:10:16 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x800000008912, &(0x7f0000000240)="153f6234488dd25d766070") bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x102d}, 0x19) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000000100)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x3d, 0x0, 0x2}, [@ldst={0x4}]}, &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0x3e9, &(0x7f000000cf3d)=""/195}, 0x48) 08:10:17 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r0, &(0x7f0000006680)=[{{&(0x7f0000000740)=@can, 0x80, &(0x7f0000000a00), 0x0, &(0x7f00000020c0)}}], 0x1, 0x0) 08:10:17 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000001c0)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) [ 263.323736] netlink: 64 bytes leftover after parsing attributes in process `syz-executor5'. 08:10:17 executing program 3: socketpair$unix(0x1, 0x400000001, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='tunl0\x00', 0x10) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x404c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) 08:10:17 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) 08:10:17 executing program 4: [ 263.735338] sg_write: data in/out 65499/33 bytes for SCSI command 0x0-- guessing data in; [ 263.735338] program syz-executor1 not setting count and/or reply_len properly 08:10:17 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x4, 0x0, @perf_bp, 0x0, 0x0, 0x1000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x2b, 0x0, @thr={&(0x7f0000000780)="bd21aa5f1d3684f4b5f8de04bd2a215a4b7e8e2854d1a6f100a92b921c9f2ed09fc9b18930007ff926813e1a4abd5338ec4e923fddb2ea6a6df008dead3d7a08653fc9c2ad174e638c0ed7ec1ddae1e37864c009c8c2047b5d079c801760c437b9aa2d37d44f42c52fa5d714f75583a9d8993d360ba41de545ba382cf35311260a0c088d0cdb2bedefe8343cbb", &(0x7f0000000200)="ad3688b73e4932e80248c3d5d334d1ba0de76b55425ad91833f1e4"}}, &(0x7f0000000840)=0x0) timer_gettime(r1, &(0x7f0000002080)) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)="2f67726f3c23fb57e6c60f1f4b45b74d999a9a8c2ce15b26e518a4cb3a9cd12dcea440d899c22c652b3a471b4a7db7f3fef6e02e2be389de133945a385bd81e9bdeeee03000000000000005b540745df4b1dee483b157624c5bc719a099e6a3509000000398c34", 0x2761, 0x0) write$cgroup_pid(r2, &(0x7f0000000080), 0xfffffe38) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, &(0x7f0000000500)}}], 0x1, 0x0, &(0x7f0000003280)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='stat\x00') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000100)=0xc) preadv(r3, &(0x7f00000017c0), 0x1a1, 0x0) r4 = gettid() sched_setscheduler(r4, 0x3, &(0x7f0000000280)=0xfffffffffffff001) r5 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r5, &(0x7f0000000d40)={&(0x7f0000000100)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc, &(0x7f0000000440)=[{&(0x7f00000002c0)={0x10, 0x34, 0x0, 0x70bd2b, 0x25dfdbfc}, 0x10}], 0x1, &(0x7f0000000d00), 0x0, 0x40}, 0x0) getpeername$netlink(r2, &(0x7f0000000300), &(0x7f0000000340)=0xc) getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, &(0x7f0000000580)={'icmp6\x00'}, &(0x7f00000005c0)=0x1e) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x660c, 0x4000001) get_robust_list(r4, &(0x7f0000000680)=&(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)}, &(0x7f00000006c0)=0x18) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000500)={[], 0x7, 0x7, 0x9, 0x4, 0x81, r4}) recvfrom$unix(r2, &(0x7f0000000d80)=""/96, 0x60, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000e11ff0)=[{&(0x7f0000000140)="580000001500add427323b470c458c5602067fffffff81004e220000000058000b4824ca945f64009400050028925aa80000000000000080000efffe1b0000000000fff5dd00000010000100090a1000410400000000fcff", 0x58}], 0x1) mount(&(0x7f0000000740)=ANY=[], &(0x7f0000000900)='./file0\x00', &(0x7f0000000940)='ramfs\x00', 0x0, &(0x7f00000008c0)='\x00') socketpair(0x9, 0x6, 0x1, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f00000003c0)={0xddb7, 0xa6f0, 0x6, 0x0, 0xfffffffffffff49c}) [ 263.853486] Not allocated shadow for addr ffff880135878d48 (page ffffea0007412d00) [ 263.861259] Attempted to access 8 bytes [ 263.865294] ------------[ cut here ]------------ [ 263.870064] kernel BUG at mm/kmsan/kmsan.c:1075! [ 263.874854] invalid opcode: 0000 [#1] SMP [ 263.879043] CPU: 0 PID: 7470 Comm: syz-executor5 Not tainted 4.19.0-rc4+ #63 [ 263.886253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 263.895639] RIP: 0010:kmsan_get_shadow_address+0x2d6/0x3d0 [ 263.901303] Code: e9 89 00 00 00 c7 04 25 20 73 28 8c 01 00 00 00 65 48 8b 04 25 00 fd 02 00 c6 80 7b 09 00 00 01 80 3c 25 38 73 28 8c 00 74 0c <0f> 0b 0f 1f 84 00 00 00 00 00 eb fe 48 c7 c7 11 bc 57 8b 31 c0 4c [ 263.920234] RSP: 0018:ffff88013d2af780 EFLAGS: 00010046 [ 263.925618] RAX: 000000000000001b RBX: 0000000000000000 RCX: 3940cfe2090b6b00 [ 263.932906] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000000 [ 263.940190] RBP: ffff88013d2af7b0 R08: 0000000000000000 R09: ffff88021fc38f50 [ 263.947481] R10: 0000000000000000 R11: ffffffff86258280 R12: 0000000000000001 [ 263.954767] R13: ffff880135878d48 R14: 0000000000000001 R15: 0000000000000008 [ 263.962066] FS: 000000000263a940(0000) GS:ffff88021fc00000(0000) knlGS:0000000000000000 [ 263.970312] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 263.976208] CR2: 0000000000706158 CR3: 000000013f2b7000 CR4: 00000000001406f0 [ 263.983497] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 263.990781] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 263.998067] Call Trace: [ 264.000693] kmsan_internal_unpoison_shadow+0x5c/0xe0 [ 264.005917] kmsan_unpoison_shadow+0x72/0xd0 [ 264.010369] vunmap_page_range+0x828/0xc20 [ 264.014674] remove_vm_area+0x39b/0x450 [ 264.018692] __vunmap+0x34c/0x5d0 [ 264.022191] vfree+0x79/0x170 [ 264.025341] do_arpt_get_ctl+0xddb/0xe80 [ 264.029492] ? compat_do_arpt_set_ctl+0x2e90/0x2e90 [ 264.034557] nf_getsockopt+0x481/0x4e0 [ 264.038529] ip_getsockopt+0x2b1/0x470 [ 264.042461] ? compat_ip_setsockopt+0x380/0x380 [ 264.047151] tcp_getsockopt+0x1c6/0x1f0 [ 264.051162] ? tcp_get_timestamping_opt_stats+0x1810/0x1810 [ 264.056900] sock_common_getsockopt+0x13f/0x180 [ 264.061599] ? sock_recv_errqueue+0x990/0x990 [ 264.066123] __sys_getsockopt+0x48c/0x550 [ 264.070317] __se_sys_getsockopt+0xe1/0x100 [ 264.074687] __x64_sys_getsockopt+0x62/0x80 [ 264.079058] do_syscall_64+0xbe/0x100 [ 264.082917] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 264.088125] RIP: 0033:0x45a0aa [ 264.091339] Code: b8 34 01 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 dd 88 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 37 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ba 88 fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 264.110259] RSP: 002b:0000000000a3f648 EFLAGS: 00000212 ORIG_RAX: 0000000000000037 [ 264.117997] RAX: ffffffffffffffda RBX: 0000000000a3f750 RCX: 000000000045a0aa [ 264.125313] RDX: 0000000000000061 RSI: 0000000000000000 RDI: 0000000000000003 [ 264.132637] RBP: 0000000000000003 R08: 0000000000a3f65c R09: 000000000000000a [ 264.139959] R10: 0000000000a3f750 R11: 0000000000000212 R12: 0000000000000000 [ 264.147269] R13: 0000000000040012 R14: 000000000000000d R15: 0000000000000005 [ 264.154573] Modules linked in: [ 264.157817] ---[ end trace c4c94e8d626a7670 ]--- [ 264.162608] RIP: 0010:kmsan_get_shadow_address+0x2d6/0x3d0 [ 264.168254] Code: e9 89 00 00 00 c7 04 25 20 73 28 8c 01 00 00 00 65 48 8b 04 25 00 fd 02 00 c6 80 7b 09 00 00 01 80 3c 25 38 73 28 8c 00 74 0c <0f> 0b 0f 1f 84 00 00 00 00 00 eb fe 48 c7 c7 11 bc 57 8b 31 c0 4c [ 264.187446] RSP: 0018:ffff88013d2af780 EFLAGS: 00010046 [ 264.192903] RAX: 000000000000001b RBX: 0000000000000000 RCX: 3940cfe2090b6b00 [ 264.200202] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000000 [ 264.207521] RBP: ffff88013d2af7b0 R08: 0000000000000000 R09: ffff88021fc38f50 [ 264.213205] ion_buffer_destroy: buffer still mapped in the kernel [ 264.214803] R10: 0000000000000000 R11: ffffffff86258280 R12: 0000000000000001 [ 264.214832] R13: ffff880135878d48 R14: 0000000000000001 R15: 0000000000000008 [ 264.235616] FS: 000000000263a940(0000) GS:ffff88021fc00000(0000) knlGS:0000000000000000 [ 264.243856] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 264.249757] CR2: 0000000000706158 CR3: 000000013f2b7000 CR4: 00000000001406f0 [ 264.257055] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 264.264337] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 264.271633] Kernel panic - not syncing: Fatal exception [ 264.278073] Kernel Offset: disabled [ 264.281715] Rebooting in 86400 seconds..