[ 59.808568] sshd (6341) used greatest stack depth: 53392 bytes left [....] Starting OpenBSD Secure Shell server: sshd[ 59.977392] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. [ 60.715584] random: sshd: uninitialized urandom read (32 bytes read) [ 61.084470] sshd (6406) used greatest stack depth: 53184 bytes left [ 61.120348] random: sshd: uninitialized urandom read (32 bytes read) Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 63.195304] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.34' (ECDSA) to the list of known hosts. [ 69.062476] random: sshd: uninitialized urandom read (32 bytes read) 2018/10/07 13:46:18 fuzzer started [ 73.640578] random: cc1: uninitialized urandom read (8 bytes read) 2018/10/07 13:46:23 dialing manager at 10.128.0.26:36867 2018/10/07 13:46:23 syscalls: 1 2018/10/07 13:46:23 code coverage: enabled 2018/10/07 13:46:23 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/10/07 13:46:23 setuid sandbox: enabled 2018/10/07 13:46:23 namespace sandbox: enabled 2018/10/07 13:46:23 Android sandbox: /sys/fs/selinux/policy does not exist 2018/10/07 13:46:23 fault injection: enabled 2018/10/07 13:46:23 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/10/07 13:46:23 net packed injection: enabled 2018/10/07 13:46:23 net device setup: enabled [ 78.853227] random: crng init done 13:48:23 executing program 0: socketpair$inet_sctp(0x2, 0x1, 0x84, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000040), &(0x7f00000000c0)=0x8) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000001ff0), 0x10) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000480)=@int=0xda, 0x4) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000180)={0x0, 0x0, 0x30}, &(0x7f00000001c0)=0xc) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000200)={r3, 0x200}, &(0x7f00000004c0)=0x8) ioctl(0xffffffffffffffff, 0x2, &(0x7f00000003c0)="cd041d8b180ef04bc9cb5ff424682b6d3aadd2dcf03a033f5f680abec120d6e75a43ee667f349e93b6f0d6b89ca919691ab66ca47cc1b49b42aaeb9561a8e05f34470c37527e3267e20ba4aeeb21fc1891dcd56b9950d61549b8c1c1b5fedf1a3941e13ec32339147a8b95f1b5a756fec2bd3c9c0d8c00c02773a2fadfcfc5be67cd1b9c3b86a058b609f8ee6d5dfe6a0f") socket$inet6(0xa, 0x3, 0x400000000006) unshare(0x40000000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) accept(r5, &(0x7f0000002840)=@in6={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000028c0)=0x80) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000000)={0x0, {0x2, 0x800000, @loopback}, {0x2, 0x0, @loopback}, {0x2, 0x0, @remote}, 0x27, 0x0, 0x0, 0x0, 0x3}) accept(r2, &(0x7f0000000100)=@xdp, &(0x7f0000000080)=0x80) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f00000000c0)={'lo\x00', {0x2, 0x0, @dev}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f00000002c0)=""/12, &(0x7f0000000300)=0xc) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000340)=0x7, &(0x7f0000000380)=0x4) accept(r2, 0x0, &(0x7f0000000500)) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000240)=ANY=[@ANYBLOB="020500000500000000020001000000000000000000000000008600b6f5fa1630107616aaf091f04a138d71e1bdb6841ea5e3fd574c8845a2c9f509c84ecc4c2942464894b8e02b01ecc322db9c8a4aff33c0cb398fffcf67d59100088b4d85a13bd5cd"], 0x63}}, 0x0) [ 197.029556] IPVS: ftp: loaded support on port[0] = 21 [ 199.558154] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.564775] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.573502] device bridge_slave_0 entered promiscuous mode [ 199.740668] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.747261] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.756035] device bridge_slave_1 entered promiscuous mode [ 199.896938] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 200.040310] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready 13:48:27 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x800001800000001) ioctl(r0, 0x8912, &(0x7f0000000000)="153f6234488dd24d766070") syz_emit_ethernet(0x7e, &(0x7f0000000140)={@local, @empty=[0x0, 0x3f00000000000000], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, @local, @dev, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, &(0x7f00000000c0)={0x0, 0x2, [0x0, 0xfffffffffffffffd]}) [ 200.510805] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 200.739031] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 200.912865] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 200.920500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 201.189220] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 201.196527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 201.219292] IPVS: ftp: loaded support on port[0] = 21 [ 201.761312] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 201.769618] team0: Port device team_slave_0 added [ 201.991399] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 201.999824] team0: Port device team_slave_1 added [ 202.298368] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 202.305625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 202.314731] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 202.576427] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 202.583678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 202.592760] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 202.904761] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 202.912625] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 202.922509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 203.074929] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 203.083078] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 203.092318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 205.136670] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.143753] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.152468] device bridge_slave_0 entered promiscuous mode [ 205.335083] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.341685] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.350205] device bridge_slave_1 entered promiscuous mode [ 205.587816] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 205.707740] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.714410] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.721374] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.728065] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.737131] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 205.865567] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready 13:48:33 executing program 2: [ 206.022129] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 206.570940] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 206.893666] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 207.041214] IPVS: ftp: loaded support on port[0] = 21 [ 207.162711] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 207.169779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 207.470373] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 207.477585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 208.437070] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 208.445404] team0: Port device team_slave_0 added [ 208.638277] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 208.646446] team0: Port device team_slave_1 added [ 208.928694] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 208.937561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 208.946712] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 209.290958] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 209.298202] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 209.307084] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 209.654316] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 209.662266] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 209.671206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 210.025525] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 210.033196] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 210.042401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 211.998737] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.005441] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.014076] device bridge_slave_0 entered promiscuous mode [ 212.347728] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.354295] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.362812] device bridge_slave_1 entered promiscuous mode [ 212.522167] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 212.736902] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 213.461877] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.468407] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.475477] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.482004] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.490765] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 213.592866] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 213.672828] bond0: Enslaving bond_slave_0 as an active interface with an up link 13:48:40 executing program 3: [ 214.027899] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 214.383178] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 214.391025] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 214.803509] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 214.811082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 215.018218] IPVS: ftp: loaded support on port[0] = 21 [ 215.209336] ip (6757) used greatest stack depth: 53040 bytes left [ 215.830749] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 215.838905] team0: Port device team_slave_0 added [ 216.254214] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 216.262519] team0: Port device team_slave_1 added [ 216.585163] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 216.592431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 216.601371] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 216.916846] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 216.924085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 216.933042] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 217.170361] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 217.178120] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 217.187591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 217.539676] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 217.547582] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 217.556748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 219.256879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.412005] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 221.375105] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.381596] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.390232] device bridge_slave_0 entered promiscuous mode [ 221.716006] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.722741] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.731121] device bridge_slave_1 entered promiscuous mode [ 221.749656] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.756182] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.763241] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.769707] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.778487] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 221.822971] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 221.829270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 221.837409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 222.164758] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 222.578395] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 222.592468] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 223.034405] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.614188] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 224.003694] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 224.386010] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 224.393225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready 13:48:51 executing program 4: [ 224.766592] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 224.773938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 226.020281] IPVS: ftp: loaded support on port[0] = 21 [ 226.246265] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 226.254338] team0: Port device team_slave_0 added [ 226.682482] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 226.690570] team0: Port device team_slave_1 added [ 227.096627] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 227.103798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 227.113180] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 227.451500] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 227.458729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 227.467767] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 227.808091] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 227.816007] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 227.825280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 228.267658] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 228.275354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 228.284620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 228.719420] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.469288] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 232.010083] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 232.016675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 232.024850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 232.235872] IPVS: ftp: loaded support on port[0] = 21 [ 232.313570] device lo entered promiscuous mode [ 232.581160] IPVS: ftp: loaded support on port[0] = 21 13:49:00 executing program 0: [ 233.141689] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.148299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.155322] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.161785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.170199] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 233.211999] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.218480] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.227004] device bridge_slave_0 entered promiscuous mode 13:49:00 executing program 0: r0 = socket(0x840000000002, 0x3, 0x103) recvmsg$kcm(r0, &(0x7f00000004c0)={&(0x7f0000000280)=@sco, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/107, 0x6b}], 0x1}, 0x2021) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000000c0)={0x4, 0x2}) ptrace$setsig(0x4203, r1, 0x5, &(0x7f0000000040)={0x37, 0x3, 0xfffffffffffffffd, 0x6}) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000100)={0xc5a8, 0x1, 0x1, 0x81, 0xfffffffffffffffb}, 0xc) [ 233.754113] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.760704] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.769396] device bridge_slave_1 entered promiscuous mode [ 233.825314] 8021q: adding VLAN 0 to HW filter on device team0 13:49:01 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r1, 0x80045700, &(0x7f0000000040)) getsockopt$sock_timeval(r0, 0x1, 0x26, &(0x7f0000000000), &(0x7f0000000440)=0x10) [ 234.102506] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 234.319613] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready 13:49:01 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="153f6234b0c755b9766070") getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@broadcast}, 0x0, @in=@loopback}}, &(0x7f0000000440)=0xe8) accept4$packet(0xffffffffffffff9c, &(0x7f0000000480)={0x11, 0x0, 0x0}, &(0x7f00000004c0)=0x14, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x72, 0xa, 0xff00}}, &(0x7f0000000280)="4550d4001f91eb2f57b73224433025039c3096b20c6b439348bf689c08608537d6223e63adc0624fbae2e109359dce6922324ccc13160b68cae6430697259dd52d1f73e16adc3592d02925dffae85e9cd2398c6c67c87fb5b12602f145b484be45912966e8b7e2f66069c56dd76c1dc112013c3a6b4de999cdcdc8855aee3437dcc87580cfbe546fbbfbc0eb56d8bbbea2904a7c73c2", 0x0, 0xfffffffffffffd4f, &(0x7f0000000000)=""/195, 0x0, 0x0, [], r1}, 0x48) socket$inet6(0xa, 0x80005, 0x0) [ 234.784791] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready 13:49:02 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f000051c000)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c560284ed7a80ffe00600000000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed4e00000000000000", 0x48}], 0x1) [ 236.214263] bond0: Enslaving bond_slave_0 as an active interface with an up link 13:49:03 executing program 0: mmap(&(0x7f0000000000/0xd25000)=nil, 0xd25000, 0x1000000, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$midi(&(0x7f0000000140)='/dev/midi#\x00', 0x80000000, 0x101000) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xb4, r1, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8e}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x80000001}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1944faa2}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bcsf0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x20}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x100000000}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0xfff}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4}, 0x80) msgrcv(0x0, &(0x7f0000235000)=ANY=[@ANYBLOB], 0x8, 0x0, 0x4ffd) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x200, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x2) flistxattr(r2, &(0x7f0000000040)=""/114, 0x72) openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x111000, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x488001, 0x0) [ 236.743494] bond0: Enslaving bond_slave_1 as an active interface with an up link 13:49:03 executing program 5: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x416000, 0x0) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x5, &(0x7f0000000040)=[{}, {}, {}, {}, {}]}) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f00000000c0)) ioctl$NBD_DISCONNECT(r0, 0xab08) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x3) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0xa0a) r1 = request_key(&(0x7f0000000100)='id_resolver\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x0) r2 = request_key(&(0x7f00000001c0)='dns_resolver\x00', &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000240)='#,\x00', 0xfffffffffffffffa) keyctl$unlink(0x9, r1, r2) r3 = fcntl$getown(r0, 0x9) r4 = syz_open_procfs(r3, &(0x7f0000000280)='net/ipx\x00') getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f00000002c0)={0x0, 0x1000, "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"}, &(0x7f0000001300)=0x1008) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000001340)={r5, 0x5}, 0x8) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1d, &(0x7f0000001380)=""/45, &(0x7f00000013c0)=0x2d) ioctl$SG_GET_LOW_DMA(r4, 0x227a, &(0x7f0000001400)) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) sendmsg$nl_route_sched(r0, &(0x7f0000001600)={&(0x7f0000001440), 0xc, &(0x7f00000015c0)={&(0x7f0000001480)=@gettaction={0x10c, 0x32, 0x700, 0x70bd2c, 0x25dfdbff, {0x0, 0x6, 0xae2}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x1e0}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x6640}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x1000}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x7}, @action_gd=@TCA_ACT_TAB={0x24, 0x1, [{0x10, 0x1e, @TCA_ACT_INDEX={0x8, 0x3, 0x10001}}, {0x10, 0x9, @TCA_ACT_INDEX={0x8, 0x3, 0x364}}]}, @action_gd=@TCA_ACT_TAB={0x94, 0x1, [{0x10, 0x1b, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0x11, @TCA_ACT_INDEX={0x8, 0x3, 0x1f}}, {0x14, 0x17, @TCA_ACT_KIND={0xc, 0x1, 'csum\x00'}}, {0x14, 0x20, @TCA_ACT_KIND={0xc, 0x1, 'csum\x00'}}, {0x14, 0x1d, @TCA_ACT_KIND={0xc, 0x1, 'sample\x00'}}, {0x14, 0xf, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x7, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffffffffffff}}, {0x10, 0xe, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0xc040}, 0x800) ioctl$TIOCPKT(r4, 0x5420, &(0x7f0000001640)=0x9) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$FIDEDUPERANGE(r6, 0xc0189436, &(0x7f0000001680)={0x131, 0x4, 0x6, 0x0, 0x0, [{r4, 0x0, 0x7}, {r4, 0x0, 0x98}, {r0, 0x0, 0x1}, {r4, 0x0, 0x2599}, {r4, 0x0, 0x3}, {r4, 0x0, 0x1}]}) mmap$xdp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000009, 0x50, r4, 0x180000000) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000001780)={{{@in=@multicast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@loopback}}, &(0x7f0000001880)=0xe8) sendmsg$xdp(r0, &(0x7f0000001980)={&(0x7f00000018c0)={0x2c, 0x2, r7, 0x20}, 0x10, &(0x7f0000001940)=[{&(0x7f0000001900)="b30c86b519a35d39595f97d6bf27e7055b987cf9d45512991b48f43b324dc7fc59e617", 0x23}], 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$FICLONE(r0, 0x40049409, r4) bind$packet(r0, &(0x7f00000019c0)={0x11, 0x1b, r7, 0x1, 0x70000000, 0x6, @dev={[], 0xb}}, 0x14) keyctl$setperm(0x5, r1, 0x28000404) ioctl$SG_GET_COMMAND_Q(r4, 0x2270, &(0x7f0000001a00)) connect$netlink(r4, &(0x7f0000001a40)=@proc={0x10, 0x0, 0x25dfdbfc, 0x2000}, 0xc) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$KVM_GET_REGS(r4, 0x8090ae81, &(0x7f0000001a80)) 13:49:04 executing program 0: [ 237.240416] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 237.247673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 237.710231] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 237.717464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 238.388109] IPVS: ftp: loaded support on port[0] = 21 [ 238.982438] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 238.990561] team0: Port device team_slave_0 added [ 239.431607] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 239.440153] team0: Port device team_slave_1 added [ 239.790946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.852118] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 239.859293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 239.868487] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 240.291700] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 240.299123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 240.307874] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 240.692020] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 240.699571] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 240.708467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 241.186482] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 241.194210] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 241.203335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 241.272309] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 242.648504] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 242.655075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 242.663058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 243.997086] 8021q: adding VLAN 0 to HW filter on device team0 13:49:11 executing program 1: [ 244.537508] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.544190] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.552852] device bridge_slave_0 entered promiscuous mode [ 244.829721] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.836453] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.844937] device bridge_slave_1 entered promiscuous mode [ 245.041621] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 245.207229] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.213869] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.220785] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.227412] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.235987] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 245.310505] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 245.752120] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 246.169706] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 246.507903] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 246.850936] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 246.858313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 247.097686] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 247.104841] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 247.880251] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 247.888527] team0: Port device team_slave_0 added [ 248.222236] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 248.230413] team0: Port device team_slave_1 added [ 248.474130] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 248.481182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 248.490053] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 248.760733] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 248.771090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 248.779949] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 249.039708] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 249.047546] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 249.056493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 249.299651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.350946] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 249.358678] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 249.367654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 250.438711] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready 13:49:18 executing program 2: [ 251.592772] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 251.599145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 251.607060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 252.163014] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.169552] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.176665] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.183224] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.191774] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 252.412622] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.603272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 255.855672] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.632001] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready 13:49:24 executing program 3: [ 257.513215] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 257.519619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 257.527879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 258.162619] 8021q: adding VLAN 0 to HW filter on device team0 [ 260.091903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.666827] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 261.209124] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 261.215720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 261.223977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 13:49:28 executing program 4: 13:49:28 executing program 0: 13:49:28 executing program 1: 13:49:28 executing program 2: 13:49:28 executing program 3: [ 261.711540] 8021q: adding VLAN 0 to HW filter on device team0 13:49:29 executing program 1: 13:49:29 executing program 2: 13:49:31 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000016000/0x4000)=nil, 0x4000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket(0x3, 0x6, 0x3) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000300)={r2}) setsockopt$inet_mreqsrc(r3, 0x0, 0x26, &(0x7f0000000240)={@empty, @multicast2}, 0xc) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) memfd_create(&(0x7f00000000c0)='#em1#+\x00', 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, 0xffffffffffffffff, 0x0) close(r0) r4 = memfd_create(&(0x7f0000000280)='/dev/rfkill\x00', 0x7) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e22, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x11}}, 0x5b529710}}, 0x0, 0x8000, 0x199d, 0xaf, 0xa0}, &(0x7f0000000080)=0x98) mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f00006ee000)='/dev/rfkill\x00', 0x0, 0x0) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) readv(r5, &(0x7f00001f2ff0)=[{&(0x7f0000001fb2)=""/1, 0x1}], 0x1) ioctl$RNDADDTOENTCNT(r5, 0x40045201, &(0x7f0000000040)) ioctl$RNDADDTOENTCNT(r5, 0x40045201, &(0x7f0000011000)) close(r6) ioctl$DRM_IOCTL_AGP_INFO(r4, 0x80386433, &(0x7f00000002c0)=""/40) 13:49:31 executing program 3: 13:49:31 executing program 0: 13:49:31 executing program 1: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000040)="120000001600e70d017b00000000000000a1", 0x12, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000680)=""/14, 0xe}], 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6e72300100"}) recvmsg(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001400), 0x0, &(0x7f0000001440)=""/81, 0x51}, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000000)='trusted.overlay.redirect\x00', &(0x7f0000000080)='./file0\x00', 0x8, 0x2) 13:49:31 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x3, &(0x7f0000013e95), 0x4) 13:49:31 executing program 4: fchmodat(0xffffffffffffffff, &(0x7f0000000b40)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x200000, 0xc04e27d3b503e3df, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000180)=0x2) r2 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x7fff, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x3}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000001c0)={r3, 0x9, 0x4, [0x5, 0x8, 0x7, 0x9]}, &(0x7f0000000200)=0x10) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000140)=0x2) [ 264.512915] hrtimer: interrupt took 53063 ns 13:49:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000100)={0x10000000000004, r2}) [ 264.717340] Not allocated shadow for addr ffff8801761beab0 (page ffffea0008c4a740) [ 264.725137] Attempted to access 8 bytes [ 264.729174] ------------[ cut here ]------------ [ 264.733946] kernel BUG at mm/kmsan/kmsan.c:1075! [ 264.738742] invalid opcode: 0000 [#1] SMP [ 264.742941] CPU: 1 PID: 6436 Comm: syz-executor0 Not tainted 4.19.0-rc4+ #63 [ 264.750146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 264.759538] RIP: 0010:kmsan_get_shadow_address+0x2d6/0x3d0 [ 264.765193] Code: e9 89 00 00 00 c7 04 25 20 73 28 8c 01 00 00 00 65 48 8b 04 25 00 fd 02 00 c6 80 7b 09 00 00 01 80 3c 25 38 73 28 8c 00 74 0c <0f> 0b 0f 1f 84 00 00 00 00 00 eb fe 48 c7 c7 11 bc 57 8b 31 c0 4c [ 264.784130] RSP: 0018:ffff88016cfdf780 EFLAGS: 00010046 [ 264.789522] RAX: 000000000000001b RBX: 0000000000000000 RCX: dcec924a3f9ed500 [ 264.796817] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000000 [ 264.804123] RBP: ffff88016cfdf7b0 R08: 0000000000000000 R09: ffff88021fd38f50 [ 264.811691] R10: 0000000000000000 R11: ffffffff86258280 R12: 0000000000000001 [ 264.818971] R13: ffff8801761beab0 R14: 0000000000000001 R15: 0000000000000008 [ 264.826268] FS: 0000000000c10940(0000) GS:ffff88021fd00000(0000) knlGS:0000000000000000 [ 264.834520] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 264.840424] CR2: 0000000000706158 CR3: 000000016cfb0000 CR4: 00000000001406e0 [ 264.847714] Call Trace: [ 264.850349] kmsan_internal_unpoison_shadow+0x5c/0xe0 [ 264.855579] kmsan_unpoison_shadow+0x72/0xd0 [ 264.860034] vunmap_page_range+0x828/0xc20 [ 264.864344] remove_vm_area+0x39b/0x450 [ 264.868369] __vunmap+0x34c/0x5d0 [ 264.871879] vfree+0x79/0x170 [ 264.875030] do_arpt_get_ctl+0xddb/0xe80 [ 264.879159] ? compat_do_arpt_set_ctl+0x2e90/0x2e90 [ 264.884221] nf_getsockopt+0x481/0x4e0 [ 264.888163] ip_getsockopt+0x2b1/0x470 [ 264.892107] ? compat_ip_setsockopt+0x380/0x380 [ 264.896805] tcp_getsockopt+0x1c6/0x1f0 [ 264.900825] ? tcp_get_timestamping_opt_stats+0x1810/0x1810 [ 264.906577] sock_common_getsockopt+0x13f/0x180 [ 264.911288] ? sock_recv_errqueue+0x990/0x990 [ 264.916314] __sys_getsockopt+0x48c/0x550 [ 264.920524] __se_sys_getsockopt+0xe1/0x100 [ 264.924905] __x64_sys_getsockopt+0x62/0x80 [ 264.929255] do_syscall_64+0xbe/0x100 [ 264.933095] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 264.938316] RIP: 0033:0x45a0aa [ 264.941534] Code: b8 34 01 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 dd 88 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 37 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ba 88 fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 264.949927] ion_buffer_destroy: buffer still mapped in the kernel [ 264.960463] RSP: 002b:0000000000a3f648 EFLAGS: 00000212 ORIG_RAX: 0000000000000037 [ 264.960488] RAX: ffffffffffffffda RBX: 0000000000a3f750 RCX: 000000000045a0aa [ 264.960503] RDX: 0000000000000061 RSI: 0000000000000000 RDI: 0000000000000003 [ 264.960517] RBP: 0000000000000003 R08: 0000000000a3f65c R09: 000000000000000a [ 264.960531] R10: 0000000000a3f750 R11: 0000000000000212 R12: 0000000000000000 [ 264.960544] R13: 0000000000040934 R14: 000000000000000a R15: 0000000000000000 [ 264.960577] Modules linked in: [ 265.014158] ---[ end trace f5c872a04e3bb315 ]--- [ 265.018950] RIP: 0010:kmsan_get_shadow_address+0x2d6/0x3d0 [ 265.024601] Code: e9 89 00 00 00 c7 04 25 20 73 28 8c 01 00 00 00 65 48 8b 04 25 00 fd 02 00 c6 80 7b 09 00 00 01 80 3c 25 38 73 28 8c 00 74 0c <0f> 0b 0f 1f 84 00 00 00 00 00 eb fe 48 c7 c7 11 bc 57 8b 31 c0 4c [ 265.043559] RSP: 0018:ffff88016cfdf780 EFLAGS: 00010046 [ 265.048955] RAX: 000000000000001b RBX: 0000000000000000 RCX: dcec924a3f9ed500 [ 265.056302] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000000 [ 265.063610] RBP: ffff88016cfdf7b0 R08: 0000000000000000 R09: ffff88021fd38f50 [ 265.070902] R10: 0000000000000000 R11: ffffffff86258280 R12: 0000000000000001 [ 265.078193] R13: ffff8801761beab0 R14: 0000000000000001 R15: 0000000000000008 [ 265.085491] FS: 0000000000c10940(0000) GS:ffff88021fd00000(0000) knlGS:0000000000000000 [ 265.093743] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 265.099647] CR2: 0000000000706158 CR3: 000000016cfb0000 CR4: 00000000001406e0 [ 265.106937] Kernel panic - not syncing: Fatal exception [ 265.113355] Kernel Offset: disabled [ 265.117000] Rebooting in 86400 seconds..