[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 31.694180] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 37.044573] random: sshd: uninitialized urandom read (32 bytes read) [ 37.525146] random: sshd: uninitialized urandom read (32 bytes read) [ 38.954472] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.5' (ECDSA) to the list of known hosts. [ 44.632401] random: sshd: uninitialized urandom read (32 bytes read) 2018/07/04 00:44:43 fuzzer started [ 46.159208] random: cc1: uninitialized urandom read (8 bytes read) 2018/07/04 00:44:46 dialing manager at 10.128.0.26:34161 2018/07/04 00:44:52 syscalls: 1541 2018/07/04 00:44:52 code coverage: enabled 2018/07/04 00:44:52 comparison tracing: ioctl(KCOV_TRACE_CMP) failed: errno 524 2018/07/04 00:44:52 setuid sandbox: enabled 2018/07/04 00:44:52 namespace sandbox: enabled 2018/07/04 00:44:52 fault injection: enabled 2018/07/04 00:44:52 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/07/04 00:44:52 net packed injection: enabled [ 55.246408] random: crng init done 00:46:21 executing program 0: perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) 00:46:21 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) writev(r0, &(0x7f0000001400)=[{&(0x7f00000013c0)='8', 0x1}], 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_to_bond\x00', 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2}, 0x6) 00:46:21 executing program 7: getpgrp(0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) writev(r0, &(0x7f0000001400)=[{&(0x7f00000013c0)='8', 0x1}], 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_to_bond\x00', 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2}, 0x6) openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x400000, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4002020}, 0xc, &(0x7f0000000a00)={&(0x7f0000000740)={0x1e4, 0x0, 0x0, 0x70bd28, 0x0, {}, [{{0x8, 0x1}, {0x1c8, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4}}, {0x8, 0x7}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8, 0x3, 0xe}, {0x8, 0x4}}, {0x8, 0x6}}}, {0x54, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8, 0x3, 0xb}, {0x24, 0x4, [{0x5, 0x3}, {0x0, 0x0, 0xc5, 0x2}, {0x0, 0x0, 0x9, 0x8000}, {0x158800000000000, 0x0, 0x0, 0x40}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4}}, {0x8, 0x7}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8, 0x3, 0x5}, {0xc, 0x4, 'hash\x00'}}}]}}]}, 0x1e4}, 0x1}, 0x0) 00:46:21 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) writev(r0, &(0x7f0000001400)=[{&(0x7f00000013c0)='8', 0x1}], 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_to_bond\x00', 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2}, 0x6) 00:46:21 executing program 3: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) close(r0) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000280)=""/56) r1 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, 0xffffffffffffffff) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000100)=""/54, 0x36}, {&(0x7f0000001440)=""/212, 0xd4}, {&(0x7f0000001540)=""/207, 0xcf}], 0x3) 00:46:21 executing program 5: r0 = socket$unix(0x1, 0x5, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x14) 00:46:21 executing program 6: r0 = socket$unix(0x1, 0x5, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000000), 0x10) 00:46:21 executing program 4: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x81000100000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f0000001e0007f1fff7ff02000000000000286a723ae515e2eb143ff80900", 0x1f) [ 143.772942] IPVS: ftp: loaded support on port[0] = 21 [ 143.827415] IPVS: ftp: loaded support on port[0] = 21 [ 143.836051] IPVS: ftp: loaded support on port[0] = 21 [ 143.842917] IPVS: ftp: loaded support on port[0] = 21 [ 143.857738] IPVS: ftp: loaded support on port[0] = 21 [ 143.878743] IPVS: ftp: loaded support on port[0] = 21 [ 143.890926] IPVS: ftp: loaded support on port[0] = 21 [ 143.916625] IPVS: ftp: loaded support on port[0] = 21 [ 145.699358] ip (4665) used greatest stack depth: 54152 bytes left [ 147.592401] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.598909] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.627289] device bridge_slave_0 entered promiscuous mode [ 147.689121] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.695593] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.717226] device bridge_slave_0 entered promiscuous mode [ 147.797880] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.804353] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.847708] device bridge_slave_1 entered promiscuous mode [ 147.880216] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.887105] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.932860] device bridge_slave_0 entered promiscuous mode [ 147.957281] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.963769] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.994702] device bridge_slave_1 entered promiscuous mode [ 148.012012] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.018544] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.032146] device bridge_slave_0 entered promiscuous mode [ 148.053184] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.059623] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.092231] device bridge_slave_0 entered promiscuous mode [ 148.131440] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 148.139288] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.145787] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.172157] device bridge_slave_0 entered promiscuous mode [ 148.189339] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.195839] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.225270] device bridge_slave_1 entered promiscuous mode [ 148.249582] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.256107] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.285465] device bridge_slave_0 entered promiscuous mode [ 148.307896] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 148.331509] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.337957] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.347576] device bridge_slave_1 entered promiscuous mode [ 148.356327] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 148.363963] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.370439] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.394583] device bridge_slave_1 entered promiscuous mode [ 148.416528] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.423001] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.453145] device bridge_slave_1 entered promiscuous mode [ 148.478521] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.484969] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.512884] device bridge_slave_0 entered promiscuous mode [ 148.525387] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 148.555344] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 148.568218] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 148.576458] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.582876] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.609932] device bridge_slave_1 entered promiscuous mode [ 148.643972] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 148.657141] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 148.755722] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.762207] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.807332] device bridge_slave_1 entered promiscuous mode [ 148.822341] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 148.858450] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 148.871445] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 148.887194] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 148.895230] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 149.050158] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 149.131313] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 149.158785] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 149.218286] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 149.350248] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 149.415253] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 149.530990] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 149.590805] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 149.601478] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 149.652267] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 149.661850] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 149.710365] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 149.717406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 149.852656] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 149.869575] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 149.903525] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 149.920239] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 149.929489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 149.947575] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 149.956730] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 149.967819] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 149.977118] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 150.045871] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 150.100929] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 150.110446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 150.146817] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 150.154769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 150.212862] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 150.219862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 150.237787] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 150.247958] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 150.255157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 150.268974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 150.295261] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 150.343200] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 150.404570] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 150.418170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 150.434822] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 150.449088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 150.487691] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 150.494643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 150.569668] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 150.576787] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 150.605956] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 150.613142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 150.629346] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 150.636288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 150.725523] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 150.750867] team0: Port device team_slave_0 added [ 150.833734] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 150.840699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 150.861247] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 150.870643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 150.947701] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 150.983006] team0: Port device team_slave_1 added [ 151.071753] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 151.098212] team0: Port device team_slave_0 added [ 151.178702] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 151.219453] team0: Port device team_slave_0 added [ 151.240635] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 151.266757] team0: Port device team_slave_0 added [ 151.277823] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 151.287724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 151.304354] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 151.359774] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 151.375828] team0: Port device team_slave_1 added [ 151.396737] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 151.421583] team0: Port device team_slave_0 added [ 151.449710] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 151.471833] team0: Port device team_slave_0 added [ 151.482737] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 151.506935] team0: Port device team_slave_1 added [ 151.535119] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 151.553936] team0: Port device team_slave_0 added [ 151.563987] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 151.571990] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 151.592134] team0: Port device team_slave_1 added [ 151.617154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 151.639420] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 151.680237] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 151.694438] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 151.708509] team0: Port device team_slave_0 added [ 151.723520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 151.750876] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 151.772899] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 151.781482] team0: Port device team_slave_1 added [ 151.789974] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 151.803220] team0: Port device team_slave_1 added [ 151.822517] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 151.834619] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 151.842184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 151.851524] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 151.903925] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 151.921468] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 151.938318] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 151.951989] team0: Port device team_slave_1 added [ 151.972825] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 151.981525] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 152.007120] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 152.038474] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 152.045970] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 152.057507] team0: Port device team_slave_1 added [ 152.065416] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 152.078164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 152.089138] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 152.110348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 152.126108] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 152.144902] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 152.164511] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 152.171847] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 152.179786] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 152.187515] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 152.194773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 152.233913] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 152.272281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 152.297296] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 152.325327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 152.347626] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 152.356446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 152.365400] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 152.374113] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 152.382363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 152.405398] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 152.423678] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 152.431410] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 152.448955] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 152.458473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 152.467361] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 152.479822] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 152.496205] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 152.504126] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 152.516254] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 152.524481] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 152.532101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 152.545124] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 152.581303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 152.613087] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 152.644793] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 152.684594] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 152.699753] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 152.707921] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 152.716061] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 152.724240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 152.742119] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 152.761411] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 152.770616] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 152.777936] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 152.786858] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 152.801624] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 152.827341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 152.844377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 152.857923] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 152.872304] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 152.881500] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 152.905529] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 152.912774] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 152.932142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 152.947450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 152.963913] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 152.980584] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 152.996960] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 153.017840] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 153.028365] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 153.055989] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 153.065188] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 153.101245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 153.125330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 153.152438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 153.166599] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 153.182149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 153.199794] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 153.222875] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 153.244885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 153.280827] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 153.301122] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 153.328290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 153.462582] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 153.470137] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 153.485433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 155.284728] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.291219] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.298092] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.304533] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.347411] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 155.360676] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 155.406561] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.413066] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.419801] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.426244] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.512078] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 155.599927] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.606389] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.613219] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.619638] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.674725] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 155.930933] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.937385] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.944172] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.950568] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.989083] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 156.003677] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.010085] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.016843] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.023250] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.032412] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 156.073183] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.079661] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.086439] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.092878] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.138621] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 156.146979] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.153425] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.160247] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.166688] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.178567] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 156.187236] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.193682] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.200448] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.206879] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.242612] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 156.383229] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 156.400898] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 156.421851] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 156.442522] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 156.452001] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 156.460829] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 156.468645] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 156.480205] ip (5321) used greatest stack depth: 54120 bytes left [ 165.369720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.655370] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.712576] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.022676] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.059641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.115788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.217465] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.249648] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.368362] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 166.514204] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 166.586516] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 167.000470] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 167.020393] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 167.088954] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 167.118836] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 167.182113] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 167.308733] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 167.328081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 167.338861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 167.497439] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 167.503761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 167.521908] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 167.667439] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 167.673783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 167.684834] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 168.004956] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 168.011408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 168.023072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 168.071904] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 168.082343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 168.099124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 168.109733] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 168.125154] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 168.138318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 168.146814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 168.170692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 168.193298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 168.219818] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 168.228619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 168.241691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 168.338704] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.488621] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.678843] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.981349] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.033309] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.060528] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.090738] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.339538] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.119829] netlink: 3 bytes leftover after parsing attributes in process `syz-executor4'. [ 174.128412] netlink: 3 bytes leftover after parsing attributes in process `syz-executor4'. 00:46:53 executing program 2: r0 = socket(0x1e, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000480)="af26262c8523bf012cf66f") mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000ac0)='./file1\x00', &(0x7f0000000a80)='./file0\x00', &(0x7f0000000a40)='ramfs\x00', 0x0, &(0x7f0000000b80)) chroot(&(0x7f0000000280)='./file0\x00') mount(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='qnx6\x00', 0x1000, &(0x7f0000000500)) clone(0x20000, &(0x7f0000000180), &(0x7f0000000100), &(0x7f0000000040), &(0x7f00000001c0)) sendto$unix(r0, &(0x7f0000000140)="779abf329daf98f112d441ac2d28ea53b1ed81c9376a9564a926841e1a7b586e464b84222873d58c6bceefbf36f3510b5b8200fa72ae142452b9e31d7f8a10553002ff26a18e2fbbe2fe37d5d5fe64e99410130adffe2823e72cc94342abbdc87edbfe7d9317ae0ad5a330589575550534676c75c682922c4401ac2e459e97d59c1daa14fb7dfac3256d4ca9c892af5865", 0x91, 0x40, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e20}, 0x6e) pivot_root(&(0x7f0000001380)='./file0\x00', &(0x7f00000016c0)='./file0\x00') setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000000)={0x2, 0xb23, 0x401, 0x7}, 0x10) 00:46:53 executing program 7: r0 = socket$inet6(0xa, 0x5, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000240)={&(0x7f0000000040)=@in={0x2}, 0x10, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=[@dstaddrv6={0x20, 0x84, 0x8, @remote={0xfe, 0x80, [], 0xbb}}, @prinfo={0x18, 0x84, 0x5, {0x3f55e0decb1bbf5d}}], 0x38}, 0x0) socket$inet6(0xa, 0x80004, 0x2) 00:46:53 executing program 4: r0 = socket$inet6(0xa, 0x8000f, 0x0) ioctl(r0, 0x8912, &(0x7f00000002c0)="af1c790929b49e0b26b2f9c033e5c89aad5395fcd3716fbd5322546a1d6e628f9235f9c4011c819eac118019811fcf77625e975b25602d19fb0829786e3b4e223a89a0470f275c4a694ba1cf1e2b68ebf115629a146eef39e4abeb3ec755a61d3b15f1a8eed37ee4e3d0f6da44e98016ba3424ac460cc43152e937743a064f6526d426bff56437b1e3d62b66b4d009c576156c3bdff298eb8156f119a697ea3a5b730031e1df794767425efa68cd07b132c4afad257ff4564cc0a20cc81189320189c9424d1f3bc89748f9e2b18c4b4345a5c7a665a680576f8fd48c6b8c29a7923f08ef82f5d0eba8d1de90") getsockopt$sock_buf(r0, 0x1, 0x1a, &(0x7f00000000c0)=""/74, &(0x7f0000000180)=0x4a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001540)={'vcan0\x00', 0x0}) r2 = accept$inet6(r0, 0x0, &(0x7f0000000080)) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000040)=0x4, 0x4) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/hwrng\x00', 0x400000, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r3, 0xc0045520, &(0x7f0000000000)=0x7) ioctl$SG_SCSI_RESET(r3, 0x2284, 0x0) flock(r2, 0x9) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000001580)={@dev={0xfe, 0x80, [], 0x21}, @mcast2={0xff, 0x2, [], 0x1}, @dev={0xfe, 0x80, [], 0x1b}, 0x8, 0x8, 0x68, 0x100, 0x7, 0x4810014, r1}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = accept(r4, &(0x7f00000003c0)=@pppoe={0x0, 0x0, {0x0, @remote}}, &(0x7f0000000440)=0x80) connect$pptp(r5, &(0x7f0000000480)={0x18, 0x2, {0x1, @rand_addr=0xff}}, 0x1e) dup2(r0, r0) setsockopt$inet_buf(r4, 0x0, 0x30000000010, &(0x7f0000000140)="02000100020001b400000002072065480100000000000000", 0x18) [ 174.651753] ------------[ cut here ]------------ [ 174.656565] kmsan_get_shadow_address_inline(fffffe0000016f08, 8, 1) [ 174.663044] WARNING: CPU: 0 PID: 6599 at mm/kmsan/kmsan_instr.c:153 kmsan_get_shadow_address_inline+0x192/0x2e0 [ 174.673274] Kernel panic - not syncing: panic_on_warn set ... [ 174.673274] [ 174.680655] CPU: 0 PID: 6599 Comm: syz-executor0 Not tainted 4.17.0+ #17 [ 174.687500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 174.696852] Call Trace: [ 174.699434] <#DB> 00:46:53 executing program 6: mmap(&(0x7f0000012000/0x3000)=nil, 0x3000, 0x4, 0x80000000032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x10100, 0x0) r3 = accept(r1, &(0x7f0000000100)=@hci={0x0, 0x0}, &(0x7f0000000180)=0x80) connect$packet(r2, &(0x7f00000001c0)={0x11, 0x6, r4, 0x1, 0xfffffffffffffffe, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000040)=0x4) mmap(&(0x7f0000014000/0x4000)=nil, 0x4000, 0x2000010, 0x14c112, r1, 0x0) close(r0) ppoll(&(0x7f00000000c0)=[{r0}, {r0, 0x2020}, {r1, 0x10}, {r0, 0x4000}, {r2, 0x1000}, {r3, 0x1}, {r1, 0xa000}, {r0, 0x8}], 0x8, &(0x7f0000000200)={0x0, 0x1c9c380}, &(0x7f0000000240)={0xfff}, 0x8) [ 174.701589] dump_stack+0x185/0x1d0 [ 174.705223] panic+0x3d0/0x990 [ 174.708430] __warn+0x40f/0x580 [ 174.711712] ? kmsan_get_shadow_address_inline+0x192/0x2e0 [ 174.717339] report_bug+0x72a/0x880 [ 174.720980] ? kmsan_get_shadow_address_inline+0x192/0x2e0 [ 174.726625] ? kmsan_get_shadow_address_inline+0x192/0x2e0 [ 174.732255] do_error_trap+0x1c1/0x620 [ 174.736146] ? vprintk_func+0x517/0x700 [ 174.740129] ? __msan_get_context_state+0x20/0xf0 [ 174.744980] do_invalid_op+0x46/0x50 [ 174.748696] invalid_op+0x14/0x20 [ 174.752156] RIP: 0010:kmsan_get_shadow_address_inline+0x192/0x2e0 [ 174.758381] RSP: 0018:fffffe0000016da8 EFLAGS: 00010082 [ 174.763739] RAX: 0000000000000037 RBX: 0000000000000001 RCX: 0000000000000000 [ 174.771009] RDX: ffffc90001897000 RSI: 0000000000000ff1 RDI: 0000000000000ff2 [ 174.778280] RBP: fffffe0000016df0 R08: 0000000000000000 R09: 0000000000000001 [ 174.785554] R10: 0000000000000000 R11: ffffffff86577160 R12: 0000000000000000 [ 174.792828] R13: 0000000000000001 R14: 0000000000000008 R15: ffff88012a580000 00:46:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) personality(0x400000d) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000fff000/0x1000)=nil, 0x1000}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x3}, &(0x7f00000000c0)=0x8) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000280)={0x9, &(0x7f0000000200)=[{0x8, 0x1f, 0x4, 0x80000001}, {0xc1d, 0x2, 0x4, 0x7fffffff}, {0x200, 0x800, 0x7, 0xfffffffffffffff9}, {0x0, 0x1, 0x8, 0x3}, {0x100000000, 0x10001, 0x2, 0x8}, {0x0, 0x9, 0x1b8f, 0x401}, {0x8, 0x0, 0x4, 0x9}, {0x1ff, 0xff, 0xbb, 0x55}, {0x9, 0x9, 0x0, 0x5}]}, 0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000100)={r2, 0xc, "ee929811c47bda515fb68e6b"}, &(0x7f0000000140)=0x14) fremovexattr(r0, &(0x7f0000000000)=@known='trusted.syz\x00') syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x3, 0x813f) [ 174.800112] ? write_ext_msg+0x950/0x950 [ 174.804184] ? kmsan_get_shadow_address_inline+0x192/0x2e0 [ 174.809815] __msan_poison_alloca+0xa7/0x1d0 [ 174.814235] ? debug+0x28/0x50 [ 174.817441] do_debug+0x5b/0x800 [ 174.820819] debug+0x28/0x50 [ 174.823839] RIP: 0010:__put_user_4+0x1e/0x30 [ 174.828238] RSP: 0018:ffff88012a5afdb0 EFLAGS: 00000297 [ 174.833607] RAX: 0000000000000014 RBX: 00007fffffffeffd RCX: 0000000020000000 [ 174.840879] RDX: 0000000000000000 RSI: aaaaaaaaaaaab000 RDI: ffffea000ae9d5c0 [ 174.848143] RBP: ffff88012a5afe78 R08: 0000000001080020 R09: 0000000000000002 [ 174.855407] R10: 0000000000000000 R11: ffffffff87d302c0 R12: 0000000000000001 [ 174.862676] R13: 0000000000000000 R14: 0000000020000000 R15: 0000000000000014 [ 174.869964] ? __sys_socketpair+0x1490/0x1490 [ 174.874459] [ 174.876708] ? __sys_socketpair+0x1cb/0x1490 [ 174.881132] __x64_sys_socketpair+0x117/0x170 [ 174.885654] ? __sys_socketpair+0x1490/0x1490 [ 174.890154] do_syscall_64+0x15b/0x230 [ 174.894057] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 174.899247] RIP: 0033:0x455ab9 00:46:53 executing program 4: syz_emit_ethernet(0x4e, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa1a86dd601979d700180000fe800000000000000000000000000000fe800000000000000000000000000000000004000001040000004e2e04019078005e4cbb00a4546e"], &(0x7f0000000000)) syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x8, 0x0) [ 174.902434] RSP: 002b:00007f96c5b05c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 174.910146] RAX: ffffffffffffffda RBX: 00007f96c5b066d4 RCX: 0000000000455ab9 [ 174.917411] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 174.924683] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 174.931958] R10: 0000000020000000 R11: 0000000000000246 R12: 00000000ffffffff [ 174.939226] R13: 00000000004c1f96 R14: 00000000004d3320 R15: 0000000000000000 [ 174.946996] Dumping ftrace buffer: [ 174.950529] (ftrace buffer empty) [ 174.954217] Kernel Offset: disabled [ 174.957819] Rebooting in 86400 seconds..