[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 29.301113] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 34.315559] random: sshd: uninitialized urandom read (32 bytes read) [ 34.797625] random: sshd: uninitialized urandom read (32 bytes read) [ 36.209208] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.2' (ECDSA) to the list of known hosts. [ 41.715937] random: sshd: uninitialized urandom read (32 bytes read) 2018/06/13 09:31:45 fuzzer started [ 43.106645] random: cc1: uninitialized urandom read (8 bytes read) 2018/06/13 09:31:48 dialing manager at 10.128.0.26:37601 2018/06/13 09:31:53 syscalls: 1643 2018/06/13 09:31:53 code coverage: enabled 2018/06/13 09:31:53 comparison tracing: ioctl(KCOV_TRACE_CMP) failed: errno 524 2018/06/13 09:31:53 setuid sandbox: enabled 2018/06/13 09:31:53 namespace sandbox: enabled 2018/06/13 09:31:53 fault injection: enabled 2018/06/13 09:31:53 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/06/13 09:31:53 net packed injection: enabled 09:31:59 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000008000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}, [], {0x95}}, &(0x7f0000014ff5)="73797a6b610000000500f3", 0x2, 0x1000, &(0x7f0000014000)=""/4096}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x36, 0x9d, &(0x7f0000000240)="e46008000000000000000a9b86dd6a000000000000000000e8d50000000100000014000000002089880bd320d98a7bf542832f8d0057", &(0x7f0000000300)=""/157}, 0x28) 09:31:59 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = dup(r0) ioctl$TIOCSTI(r1, 0x5412, 0x0) 09:31:59 executing program 7: r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, &(0x7f0000000000)) ftruncate(r0, 0x2000000000000) 09:31:59 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000400)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440)=[{}], 0x80c5c9b036709a5) socket$inet_icmp_raw(0x2, 0x3, 0x1) geteuid() getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) pipe(&(0x7f00000003c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0), &(0x7f0000003f00)=0xc) 09:31:59 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r0, 0x400000000f3) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x1e, &(0x7f0000000000)=[@in={0x2, 0x0, @broadcast=0xffffffff}], 0xffad) 09:31:59 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountstats\x00') preadv(r0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 09:31:59 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000140)={0x11, @loopback=0x7f000001, 0x0, 0x0, 'sh\x00'}, 0x2c) 09:31:59 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000040)={'syz1'}, 0xffcf) accept4(r0, 0x0, &(0x7f0000000080), 0x0) [ 56.231470] IPVS: ftp: loaded support on port[0] = 21 [ 56.361965] IPVS: ftp: loaded support on port[0] = 21 [ 56.388559] IPVS: ftp: loaded support on port[0] = 21 [ 56.428226] IPVS: ftp: loaded support on port[0] = 21 [ 56.437825] IPVS: ftp: loaded support on port[0] = 21 [ 56.443748] IPVS: ftp: loaded support on port[0] = 21 [ 56.470674] IPVS: ftp: loaded support on port[0] = 21 [ 56.478394] IPVS: ftp: loaded support on port[0] = 21 [ 58.076268] ip (4677) used greatest stack depth: 54352 bytes left [ 58.489315] ip (4712) used greatest stack depth: 54328 bytes left [ 59.460102] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.466570] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.497180] device bridge_slave_0 entered promiscuous mode [ 59.701840] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.708306] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.735520] device bridge_slave_1 entered promiscuous mode [ 59.755132] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.761598] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.782901] device bridge_slave_0 entered promiscuous mode [ 59.870240] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.877083] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.927098] device bridge_slave_0 entered promiscuous mode [ 59.954543] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 59.970085] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.976530] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.990585] device bridge_slave_0 entered promiscuous mode [ 60.005561] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.012013] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.036131] device bridge_slave_0 entered promiscuous mode [ 60.063346] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.069792] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.090778] device bridge_slave_0 entered promiscuous mode [ 60.099142] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.105579] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.119375] device bridge_slave_1 entered promiscuous mode [ 60.125699] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.132154] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.151493] device bridge_slave_0 entered promiscuous mode [ 60.163354] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.169774] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.182850] device bridge_slave_0 entered promiscuous mode [ 60.198607] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.205086] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.232183] device bridge_slave_1 entered promiscuous mode [ 60.244803] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 60.259985] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.266435] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.282579] device bridge_slave_1 entered promiscuous mode [ 60.289830] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.296266] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.312898] device bridge_slave_1 entered promiscuous mode [ 60.320978] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 60.328787] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.335232] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.359446] device bridge_slave_1 entered promiscuous mode [ 60.376297] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.382722] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.427110] device bridge_slave_1 entered promiscuous mode [ 60.451959] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 60.460269] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.466695] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.488233] device bridge_slave_1 entered promiscuous mode [ 60.520120] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 60.528296] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 60.541651] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 60.569766] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 60.613692] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 60.626001] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 60.699218] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 60.741588] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 60.760136] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 60.784611] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 60.835934] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 60.901608] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 60.932920] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 60.942891] ip (4891) used greatest stack depth: 54056 bytes left [ 61.174477] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 61.189463] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 61.295942] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 61.357311] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 61.423410] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 61.440776] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 61.457798] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 61.493227] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 61.541310] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 61.555311] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 61.566330] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 61.616498] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 61.623496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.656554] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 61.669489] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 61.681472] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 61.688457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.729550] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 61.776853] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 61.784597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.804710] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 61.811668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.832507] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 61.859169] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 61.866456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.907084] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 61.914130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.954356] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 61.961383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.972699] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 61.979724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.009286] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 62.016295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.056011] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 62.063116] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.095358] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 62.102393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.124975] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 62.140632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.158775] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 62.184763] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 62.197343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.234605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.352753] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 62.369148] team0: Port device team_slave_0 added [ 62.398716] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 62.406451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.520206] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 62.543876] team0: Port device team_slave_1 added [ 62.692159] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 62.711981] team0: Port device team_slave_0 added [ 62.741081] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 62.761086] team0: Port device team_slave_0 added [ 62.780816] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 62.787796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.802358] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.844191] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 62.856506] team0: Port device team_slave_0 added [ 62.863679] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 62.871267] team0: Port device team_slave_0 added [ 62.878241] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 62.903825] team0: Port device team_slave_0 added [ 62.917660] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 62.927965] team0: Port device team_slave_0 added [ 62.966157] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 62.980565] team0: Port device team_slave_1 added [ 62.997736] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 63.005002] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 63.032231] team0: Port device team_slave_1 added [ 63.051656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.072148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.089589] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 63.105950] team0: Port device team_slave_1 added [ 63.130197] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 63.139534] team0: Port device team_slave_1 added [ 63.157262] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 63.171908] team0: Port device team_slave_1 added [ 63.178879] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 63.191374] team0: Port device team_slave_1 added [ 63.215769] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 63.230443] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 63.243495] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 63.257638] team0: Port device team_slave_0 added [ 63.274986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.291464] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.321681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.345102] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.355545] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 63.364583] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.375171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.397396] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 63.408946] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 63.419751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.441231] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.460885] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.482680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.495888] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.512571] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 63.523068] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 63.533682] team0: Port device team_slave_1 added [ 63.539384] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 63.564236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.577784] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.596177] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.623571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.640815] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.658171] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 63.666686] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 63.674449] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 63.685352] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 63.697896] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.714107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.730691] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.745131] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.759688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.769996] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.777810] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.786564] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.797227] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 63.808965] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 63.820398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.837828] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.847656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.856400] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.878845] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 63.889519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.900852] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.923551] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 63.932689] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 63.941581] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 63.954696] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 63.964733] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 63.973695] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.990704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.051954] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.089581] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.114388] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.124107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.132154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.140383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.148347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.156465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.183898] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 64.198426] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 64.206311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.215964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.242519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.255999] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.275589] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 64.285555] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 64.293184] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.329001] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.347245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.373962] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.382583] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 64.393117] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 64.412971] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 64.434901] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.457609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.489736] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.520395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.541639] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.556862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.572394] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 64.607870] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.646291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.835823] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 64.843447] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.857106] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.535611] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.542092] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.548896] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.555325] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.655381] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 66.662118] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.706717] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.713166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.719947] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.726369] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.762536] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 66.774070] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.780500] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.787315] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.793750] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.814376] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 66.831383] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.837830] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.844604] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.851017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.891958] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 67.017698] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.024138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.030912] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.037324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.096153] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 67.116294] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.122722] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.129499] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.135940] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.148741] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 67.162250] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.168693] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.175490] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.181918] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.248949] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 67.495430] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.501917] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.508729] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.515151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.533767] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 67.679639] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.692823] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.720662] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.742710] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.759761] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.767255] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.774795] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.227792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.288380] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.426183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.477474] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.535451] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.665214] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.859292] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.890292] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.967862] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 76.001132] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 76.284643] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 76.304530] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 76.338516] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 76.490495] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 76.672236] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 76.715613] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 76.724646] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 76.730907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 76.741790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.783280] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 76.789567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 76.808792] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.057358] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 77.063660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 77.072791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.108430] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 77.121516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 77.154139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.288243] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 77.294526] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 77.305616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.341886] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 77.348356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 77.358510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.405204] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 77.412203] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 77.422173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.595246] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.617818] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 77.624277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 77.634130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.682150] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.899251] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.991274] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.103012] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.151781] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.308304] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.348444] 8021q: adding VLAN 0 to HW filter on device team0 09:32:26 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000880)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, &(0x7f0000000440)}, &(0x7f0000000200)="7f000080000022ca0bbe55a49551785b0c952808bec3cad648ab848bb2c7ec63f4", &(0x7f0000000500)=""/239, 0x0, 0x0, 0x0, &(0x7f0000000240)}) 09:32:26 executing program 2: getpgrp(0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x10000000000007) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x4}, 0x1c) [ 82.588126] sd 0:0:1:0: [sg0] tag#1301 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 82.597215] sd 0:0:1:0: [sg0] tag#1301 CDB: Variable length, sa=0xbbe [ 82.603946] sd 0:0:1:0: [sg0] tag#1301 CDB[00]: 7f 00 00 80 00 00 22 ca 0b be 55 a4 95 51 78 5b [ 82.612892] sd 0:0:1:0: [sg0] tag#1301 CDB[10]: 0c 95 28 08 be c3 ca d6 48 ab 84 8b b2 c7 ec 63 [ 82.621830] sd 0:0:1:0: [sg0] tag#1301 CDB[20]: f4 09:32:26 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x7) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c9924") ioctl$BLKPG(r0, 0x1269, &(0x7f00000006c0)={0x1, 0x0, 0x11, &(0x7f0000000800)="d8c466ce64354ae542ccfa3044ae0e6b69"}) 09:32:26 executing program 0: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x180, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = dup3(r1, r0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000080)='nv\x00', 0x3) ioctl$DRM_IOCTL_ADD_MAP(r2, 0xc0286415, &(0x7f00000000c0)={&(0x7f0000ffa000/0x3000)=nil, 0x2, 0x6, 0x86, &(0x7f0000ff9000/0x3000)=nil}) 09:32:26 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="73656375726909000000000000000000000000000000000000000e0000000400000030040000ffffffff0801000030ffffffffffffff6003000060", @ANYBLOB="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"], 0x2) 09:32:26 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) sched_setaffinity(0x0, 0x8, &(0x7f0000d4b000)=0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000001c0)={0x10001, 0x2, 'client1\x00', 0x4, "d88c0ab938e05e0d", "42ffb8f471c0832b95bb2770eea54e3776e8374bcdd51ca71c87d2ca48a9c8eb", 0x4}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0x40a85321, &(0x7f0000000100)={0x0, 0x0, 'client0\x00', 0x0, "4cc2b974650bdaae", "ed8bff398404a7c628334a4694241022d6e947e883d85398f7a7142299013631"}) 09:32:27 executing program 0: fstat(0xffffffffffffffff, &(0x7f0000000000)) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2}, 0x10) getsockopt$inet_int(r0, 0x0, 0xe, &(0x7f0000000100), &(0x7f0000000180)=0x4) 09:32:27 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={&(0x7f0000000600)={0x10}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)=@bridge_getneigh={0x20, 0x1e, 0x235, 0x0, 0x0, {0x7}}, 0x20}, 0x1}, 0x0) 09:32:27 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) ioctl$EVIOCGNAME(r2, 0x80404506, &(0x7f00000001c0)=""/8) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000180)=0x200, 0x4) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="9a9a6e89d083936e430500a7691a1fcd81b01aebcbde11c97b55dc56e6d500b238b85dd3044588139799e9dced33424a733244bfd77145060033ed4e671921de981129c05a2240f73e7b713009999f4ee5cd9fa157454956f4447c748f6bd2aa0aff9c"], 0x1) recvmsg(r1, &(0x7f0000000340)={&(0x7f0000000000)=@rc, 0x80, &(0x7f0000000280), 0x0, &(0x7f00000002c0)=""/105, 0x69}, 0x40002021) 09:32:27 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") mmap(&(0x7f0000011000/0x200000)=nil, 0x200000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) r2 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x5, 0x80000) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000040)={0x18, @tick=0xfffffffffffffffa, 0x3ff, {0x3, 0x1}, 0x4, 0x0, 0x401}) listen(r0, 0x100000000) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000440)=0x4, &(0x7f0000000480)=0x4) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'veth1_to_bridge\x00', &(0x7f0000000140)=ANY=[@ANYBLOB='(']}) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f00000004c0)=0x2, &(0x7f0000000500)=0x4) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000200)={0x1b0, r4, 0x420, 0x70bd2a, 0x25dfdbfb, {0x5}, [@IPVS_CMD_ATTR_DAEMON={0x78, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x7}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bcsf0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2={0xff, 0x2, [], 0x1}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5c}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_SERVICE={0x60, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x7, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback={0x0, 0x1}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x49}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x33}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffff}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xffffffff}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x57}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x100000000}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7f}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x4000000}, 0x44) close(r3) close(r1) mlockall(0x1) 09:32:27 executing program 7: r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x1fffd, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f00000013c0)=0x7, 0x4) bind(r0, &(0x7f0000000080)=@generic={0x0, "2735852c1b36924d8cf6d230f38618fb1d06276cf832ec50b874eaf3417fcbf1a2db9519ca0215e479e5ca742c4e1f8da65215c20c69ce373d97e9e05574655f2754e21636ac9b9a727ec283c7adc841cb855f3363bd568ca59bfb6fc274ff37295b1436a5be08930c4b33a5447280f1cd4f76efa75a373d604c961c5329"}, 0x80) 09:32:28 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000400)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440)=[{}], 0x80c5c9b036709a5) socket$inet_icmp_raw(0x2, 0x3, 0x1) geteuid() getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) pipe(&(0x7f00000003c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0), &(0x7f0000003f00)=0xc) 09:32:28 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000040)={'syz1'}, 0xffcf) accept4(r0, 0x0, &(0x7f0000000080), 0x0) 09:32:28 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x10000, 0x1) getdents(r1, &(0x7f0000000080)=""/70, 0x46) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x2}, 0x2c) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r3) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x127) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x13f) 09:32:28 executing program 0: r0 = socket(0xa, 0xe, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000007f91c90000000009593a5e116300eb3f00000002c4185c12b59015348de71896f6ca3a617e5e5762b8144a28"]) r1 = dup(r0) r2 = dup2(r0, r0) perf_event_open$cgroup(&(0x7f0000000040)={0x3, 0x70, 0xcd2, 0x2, 0x1, 0x1, 0x0, 0x10000, 0x20004, 0x2, 0x2, 0xffffffff, 0x6, 0x0, 0x1ff, 0x7f, 0x5, 0x80000001, 0xffff, 0x2b5e, 0x0, 0x8, 0x2, 0xfff, 0x6, 0x6, 0x7, 0x80000000, 0x3, 0xffffffff80000001, 0x8, 0x8, 0x8000, 0x5, 0xfffffffffffffffc, 0x3, 0x2, 0x7, 0x0, 0x7, 0x0, @perf_config_ext={0xa4a3, 0xfffffffffffffffb}, 0x2208, 0x7, 0x8, 0x7, 0x1000, 0xd45, 0x1}, r1, 0x0, r2, 0xb) socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x16, "22ba65e58d2dce0eb88ced4d4b8900f394c2be1b8fb1"}, &(0x7f0000000140)=0x3a) ioctl(r0, 0x8916, &(0x7f0000000000)) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r3, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r3, 0x3ff) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) 09:32:28 executing program 5: r0 = gettid() prctl$setptracer(0x59616d61, r0) exit(0x0) tgkill(r0, r0, 0x1) 09:32:28 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000ff7)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1bacf914c1bae57, &(0x7f0000000240)=[{}]}) ioctl$EVIOCGREP(r0, 0x40107447, &(0x7f0000000000)=""/174) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x7, 0x2, 0x800, 0x100000000, 0x10000, 0x80000001, {0x0, @in6={{0xa, 0x4e20, 0x781, @local={0xfe, 0x80, [], 0xaa}, 0x10001}}, 0x0, 0x40, 0x8, 0x438, 0x9}}, &(0x7f00000001c0)=0xb0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ppp\x00', 0x101000, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f00000004c0)={0x2, &(0x7f0000000400)=[0x6, 0x3]}) getsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000640), &(0x7f0000000680)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000200)={0xffffffff, 0x9, 0x8000, 0xfff, 0x9, 0x5, 0xe3, 0x6, r1}, 0x20) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00000003c0)="49a891013321a625771f88a9f7270e92373025cc51af93e4f6ba471da39523a10de4dd73", 0x24) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000380)='fou\x00') sendmsg$FOU_CMD_GET(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100004}, 0xc, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c0000002c3619534ac658a88b966491238cb73d09a0c5ab638be3503a391456d1a1f2a20ff0a390f976682174058f1030f0e8b4bdfd05fad9ae31ac5389aeae357889ac0db3f7699bf0f93aa424da571e3e25d1efb76a2ede1a638b8fc8ff58cdd7d850800dd7b79138a0115791975dddac6a494d0ef7a42cf73712c978d9f056b8aacbfd5e8e511faaa70aa86daa14f43fc44657bb5fc81994ed174cbb8ebdbb2e47f8e5840e3e6721d0a96b42b72b4296ac7992b6d61a5d1baea0ce26c897071ea2cf6964f482105a3b3e457886461e26a3da4228f2", @ANYRES16=r3, @ANYBLOB="000826bd7000ffdbdf25030000000800030011000000080003007f000000080003003f0000000800030008000000080003003f000000080001004e2100000800040003000000"], 0x4c}, 0x1, 0x0, 0x0, 0x20008010}, 0x10) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r0, 0x111, 0x3, 0x1, 0x4) 09:32:28 executing program 7: unshare(0x24020400) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4}) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f0000000340)) 09:32:28 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x3, &(0x7f0000c91000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x57}, [], {0x95}}, &(0x7f0000e6bffc)='GPL\x00', 0x1, 0x333, &(0x7f000000d000)=""/153, 0x0, 0x0, [0x7a]}, 0x3e) r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x80, 0x14003) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000040)=@assoc_id=0x0, &(0x7f0000000080)=0x4) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00000000c0)={r1, @in={{0x2, 0x4e21, @rand_addr=0x3f}}, 0x5, 0x80000000, 0xffffffffffffffe8, 0x4, 0x9}, &(0x7f0000000180)=0x98) 09:32:28 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000040)={'syz1'}, 0xffcf) accept4(r0, 0x0, &(0x7f0000000080), 0x0) 09:32:28 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000ff7)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1bacf914c1bae57, &(0x7f0000000240)=[{}]}) ioctl$EVIOCGREP(r0, 0x40107447, &(0x7f0000000000)=""/174) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x7, 0x2, 0x800, 0x100000000, 0x10000, 0x80000001, {0x0, @in6={{0xa, 0x4e20, 0x781, @local={0xfe, 0x80, [], 0xaa}, 0x10001}}, 0x0, 0x40, 0x8, 0x438, 0x9}}, &(0x7f00000001c0)=0xb0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ppp\x00', 0x101000, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f00000004c0)={0x2, &(0x7f0000000400)=[0x6, 0x3]}) getsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000640), &(0x7f0000000680)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000200)={0xffffffff, 0x9, 0x8000, 0xfff, 0x9, 0x5, 0xe3, 0x6, r1}, 0x20) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00000003c0)="49a891013321a625771f88a9f7270e92373025cc51af93e4f6ba471da39523a10de4dd73", 0x24) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000380)='fou\x00') sendmsg$FOU_CMD_GET(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100004}, 0xc, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c0000002c3619534ac658a88b966491238cb73d09a0c5ab638be3503a391456d1a1f2a20ff0a390f976682174058f1030f0e8b4bdfd05fad9ae31ac5389aeae357889ac0db3f7699bf0f93aa424da571e3e25d1efb76a2ede1a638b8fc8ff58cdd7d850800dd7b79138a0115791975dddac6a494d0ef7a42cf73712c978d9f056b8aacbfd5e8e511faaa70aa86daa14f43fc44657bb5fc81994ed174cbb8ebdbb2e47f8e5840e3e6721d0a96b42b72b4296ac7992b6d61a5d1baea0ce26c897071ea2cf6964f482105a3b3e457886461e26a3da4228f2", @ANYRES16=r3, @ANYBLOB="000826bd7000ffdbdf25030000000800030011000000080003007f000000080003003f0000000800030008000000080003003f000000080001004e2100000800040003000000"], 0x4c}, 0x1, 0x0, 0x0, 0x20008010}, 0x10) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r0, 0x111, 0x3, 0x1, 0x4) 09:32:28 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f00000000c0)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syzkaller1\x00', r1}) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") keyctl$join(0x1, &(0x7f0000000040)={0x73, 0x79, 0x7a}) modify_ldt$write2(0x11, &(0x7f0000000000)={0x10000, 0x20000000, 0x0, 0x0, 0x854, 0x6, 0x9, 0x8, 0xffffffffffffff23, 0x40}, 0x10) 09:32:28 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140), 0x0) r1 = accept$alg(r0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r2 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000140)={0x2, 0x5}) recvmmsg(r1, &(0x7f0000003f80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000003d00)=""/121, 0x79}], 0x1, &(0x7f0000003dc0)=""/16, 0x10}}, {{&(0x7f0000003e00)=@pptp={0x0, 0x0, {0x0, @loopback}}, 0x80, &(0x7f0000003f40)=[{&(0x7f0000003e80)=""/190, 0xbe}], 0x1}}], 0x2, 0x0, &(0x7f00000040c0)={0x0, 0x989680}) 09:32:28 executing program 7: socketpair$inet_sctp(0x2, 0x0, 0x84, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e24, 0x4f29e890, @local={0xfe, 0x80, [], 0xaa}}}, 0x80000001, 0x7, 0x4, 0x1ff, 0xae}, &(0x7f0000000140)=0x98) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={r1, 0x7}, &(0x7f00000001c0)=0x8) r2 = socket$inet6(0xa, 0x3, 0x6) getpeername$inet6(r2, &(0x7f0000000240), &(0x7f0000000280)=0x1c) ioctl(r2, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, &(0x7f0000e95fe0), 0x20) close(r3) 09:32:28 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f00000000c0)={0x0, 0x6}) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f0000000000)) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000080)=r2) dup2(r0, r2) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000040)) 09:32:28 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x10000, 0x0) sendto$unix(r0, &(0x7f0000000cc0)="865c60c6a3d6ff26e485d9ae15524ec430ba2f68b3bd09d645ba55017d3f1f12f198b9a14fe08694c415c49f69d8af53deb9076ab77b9cc92859a43e7e9a1d93790620ef3d78eb2df54bc1f7fea3d48fcde91f6a0059c1436e7ae401e429c6678f41e958f457c5fb79d30a368baf328e777d1e4e3f658b45cb5891b766ad15975b3d021480c0876f3095140ba30c88dd61caf0cc4260b235688fdbb9941e0497279dfcd53f0a8b66750514d013a2c587d995b223eccc77699ba241582d0c65a7b938f35d65f62e47263e1954ee5c0f27c7a0859e5d64aacf3b612d72c32a65b3c071a887ef66", 0xe6, 0x4044000, &(0x7f0000000a80)=@abs={0x1, 0x0, 0x4e21}, 0x6e) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffff9c, 0x84, 0x7b, &(0x7f0000000900)={0x0, 0x4}, &(0x7f0000000940)=0x3) connect(r0, &(0x7f0000000b40)=@ipx={0x4, 0xff, 0x0, "1d2c57c1ad8e", 0x9910}, 0x80) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f0000000a00)={0x0, 0x48, &(0x7f0000000980)=[@in={0x2, 0x4e23, @multicast1=0xe0000001}, @in6={0xa, 0x4e22, 0xfe82, @mcast1={0xff, 0x1, [], 0x1}, 0xffffffff80000000}, @in6={0xa, 0x4e24, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x8}]}, &(0x7f0000000a40)=0x10) fallocate(r0, 0x40, 0x2, 0xcb) sendmsg$inet_sctp(r0, &(0x7f0000000b00)={&(0x7f0000000180)=@in6={0xa, 0x4e24, 0x6, @loopback={0x0, 0x1}}, 0x1c, &(0x7f0000000840)=[{&(0x7f00000001c0)="5f32bc060cf7a39dbc990ac7385223edc34cad417251a465287cac2d1de0f7a91da6e2e656fc9f5709061c609b8532e5cf2c9ee3d2a15c9e519c2977310e4c130e3105a0cb4934d204d81840047a949c5952408bf18485c7599fbab7490f8ae164eb6d8632226cc487c854162335a3c4982eb66eb41c6b909505dfff5096cae6b2e8278347bd737f09b31f989cac6db60de94aa1dd1047713b674ccf89b87819c315ffd161a49469bd304360f80d5e93656a605fed9b5e733ae4004c4101133c9d0769280e73c280420de1bf0234fdab5ee8daa2a5f459f0d6b6e8cd52298d14d0b041f18d", 0xe5}, {&(0x7f00000002c0)="e0cbeef1f9b954f659db422d3dd54422e607443bf9210107578a8ae771d0cd91b2db1f19015e61972100d34f2a790bc93c8755785d57b8baf5920c967f4fd48facdb78a311dc6f6d0552dd0c2b80f1bc28a3be2009f306595abcafb88a8a11a602c8a2c830f1a7132e4735b0bd801d7e2823ce42d6c982ea50774912a92a26575cb19a8470fd55bf054a864d4a", 0x8d}, {&(0x7f0000000380)="17a74895bc35044011ea731f6882846262f049f51b2b1117b9af1a3376add93abe0e51698d560f9deb45c0eef526278e2dd7c4df84567c0d95a31a7ae31893", 0x3f}, {&(0x7f00000003c0)="7fe6c219742de8477daba0cdcddd3b015f189569b3a7973f4b9caaca62ba6fd48d0e0311b369e5a221d91cef7d0f7fbd469a406a015f06824642dcd58dc2973dc775a834d4b87d6859fd", 0x4a}, {&(0x7f0000000440)="14d059a55f9d052f6768a7720dbd2aa4798075b1cca433d594febc15d5f5b7b1326d7930645e18cfe269848791ee37c172b8e371224ca1f7da36680868dddec7558357e758ebc0bc4bc8ba13a01459378d36b6a82dada5be8d890b", 0x5b}, {&(0x7f00000004c0)="60043cbdb424bb3ac12e957a29ed70ad9c258a84facf8b7fd95ec8a251f4ffdcac2d6ca447d99621ad64f658ba3625e11612033a24e001b38d736c4c3a5d2ac7e120d341f70d0dc2e76aa992d0a3394497017ae7aaac5587767e96cd6606effa8e8701153aff26d2483bd83daad0acdfac610f", 0x73}, {&(0x7f0000000540)="49cc9665f894ba4a727ef234c42e111f2eefdd402d9bad60d79caf0b23becd8d57f1f8ade610f3b9d81f455b41ad37315601faf7b8092ce11610cec45da149af2fcce0439d5171697be40f152752b2ec43f5f3d985f2d7c8fc6873bed05a5726c669061a46e6220cf799584130294ed146c43c103e9ab02f2cc2e3aa0a1b9d99a53def9d26badd4cd0119e2afbca085bc869844dc7a71cee212d8d46af2eb6c97d6042903a8bed33e4e203ba33a5d9598a7b66f87d6fa411bff951bab858ec9503023adfce6ee95e1491e291cf9c8d4ccbe3c95656a35ef44e8b71fd91dd545f763530902a417315bbf4", 0xea}, {&(0x7f0000000640)="a9aba50d01090721fbef9423250c3a80dcd23c5552a76f670471dd7dbbbb20ff14e494e44c3a158b8024a5d103219925ab71074cdd3d4046cd84ab4a4b1c5c9d0149e55bbb2eb5d8323d8c004f7b39c03f5a41997cd6e8bd112d37142994bc6f912a7f85b18fe575ad51f909a8c780badf890d21c0d004f6ea395cbc6a1e4190ad4d6ad7e30d0347854845288f", 0x8d}, {&(0x7f0000000700)="3417bdece60e0d39e54412532d9786bf25061fecf63e05daf4cc8e2285bfddcfc8cf744b7d0c940db7225ba6d804f72245f8e19b2ff9e2be5b5f1df572bb75d13b7ba55dbdcbadc808ef58a60d1927d730820ddb447c5ceefa9c1a36a472b4a53bc85dd343f4f8916f14e32c6a81c1ec76394f91781bb1f75e26a56a61856990d5182ea6749881e265e99d41882202b867ec801916ec7354d35e5d2b14a39dd232034e0975e5ffc788f8cd5e02fcca02baf9ed681459a024abf060554f8490b45e18e8f391b142a5346effa393f04a09c0c2559541c04e1e23964e", 0xdb}, {&(0x7f0000000800)}], 0xa, &(0x7f0000000bc0)=ANY=[@ANYBLOB="30000000000000008400000001000000ff01050001020000060000003f000000feffffff0000010000000000", @ANYRES32=r1, @ANYBLOB="20000000000000008400000002000000c6c70c80000000004b0f0000", @ANYRES32=r2, @ANYBLOB="1800000000000000840000000500000000000000010000001043351e5d09bdf5f59ab864a1230223c99f2acae693ffaae7e82fb6239473ccacc3e108540313f7610267d3b601af399e8d21c0a7b5ef3d877851e5dfb53ce2e551b5b82bae33d696f07eb4ec28e47951988095d87723e76a19cfc6161f26861dfefad5dc4746d580aba894f6c93f47a065e989d28129a2226077"], 0x68, 0x2400c040}, 0x4) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r3, 0x541b, &(0x7f0000000800)) connect(r3, &(0x7f0000000040)=@in={0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x80) getpeername(r3, &(0x7f0000000100)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @multicast2}}}, &(0x7f00000000c0)=0x80) 09:32:28 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000040)={'syz1'}, 0xffcf) accept4(r0, 0x0, &(0x7f0000000080), 0x0) 09:32:29 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000400)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440)=[{}], 0x80c5c9b036709a5) socket$inet_icmp_raw(0x2, 0x3, 0x1) geteuid() getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) pipe(&(0x7f00000003c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0), &(0x7f0000003f00)=0xc) 09:32:29 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$inet(0x2, 0x0, 0x0, &(0x7f0000000080)) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000b40), 0x0, 0x20020003, &(0x7f0000000b00)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) r1 = dup3(r0, r0, 0x80000) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x9) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0xfffffffffffff001, 0x4) connect$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e24}, 0x6e) sendto$inet(r0, &(0x7f00000000c0)="92", 0x1, 0x0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14}}, 0x10) 09:32:29 executing program 3: r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x9, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x3, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000080)=0x5, 0x4) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f00000001c0)={0x5, 0x0, 0x2, 0x7}) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000200)={r3, 0x9}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000140)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_cmd={0x8}}) dup2(r0, r1) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000180)="a6083d5b00ad8da49e1609014e2dcae1", 0x1000002ec) 09:32:29 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) accept4(r0, 0x0, &(0x7f0000000080), 0x0) 09:32:29 executing program 7: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@sco, &(0x7f0000000080)=0x80) setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f0000000240)={{&(0x7f00000002c0)=""/196, 0xc4}, &(0x7f00000003c0), 0x1}, 0xfe98) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/fib_triestat\x00') ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, &(0x7f0000000280)={0x2e, 0xdcb0, 0x6, 0x3}) preadv(r1, &(0x7f0000000000), 0x11a, 0x0) 09:32:29 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f660070") r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000100), 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x80000009, {{0x2, 0x4e23, @multicast2=0xe0000002}}}, 0x88) setsockopt$inet_mreqn(r1, 0x0, 0x4, &(0x7f00000002c0)={@rand_addr, @multicast1=0xe0000001}, 0xc) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000100)={0xfffffffffffffffd, 0x3ff, 0x1, 0xffffffffffffff2c, 0x8, 0xffffffffffffffff, 0x0, 0x3, 0x0}, &(0x7f0000000140)=0x20) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000180)={0x80000001, 0x0, 0x8206, 0x49, 0x1, 0x7f, 0xe4, 0x2, r3}, 0x20) 09:32:29 executing program 0: r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0xe, 0x800) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f00000000c0), &(0x7f0000000180)=0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@ipv4_newaddr={0x28, 0x14, 0x801, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_FLAGS={0x8, 0x8, 0x520}, @IFA_LOCAL={0x8, 0x2, @remote={0xac, 0x14, 0x14, 0xbb}}]}, 0x28}, 0x1}, 0x20000000) [ 85.544296] Not allocated shadow for addr ffff8801d350c000 (page ffffea000af3e480) [ 85.552035] Attempted to access 4014 bytes [ 85.556284] ------------[ cut here ]------------ [ 85.561022] kernel BUG at mm/kmsan/kmsan.c:1378! [ 85.565771] invalid opcode: 0000 [#1] SMP PTI [ 85.570249] Dumping ftrace buffer: [ 85.573768] (ftrace buffer empty) [ 85.577465] Modules linked in: [ 85.580651] CPU: 0 PID: 4516 Comm: sshd Not tainted 4.17.0+ #6 [ 85.586603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 85.595958] RIP: 0010:kmsan_get_shadow_address+0x1ce/0x1f0 [ 85.601564] RSP: 0018:ffff88019648e6f0 EFLAGS: 00010082 [ 85.606914] RAX: 000000000000001e RBX: 0000000000000740 RCX: 0000000000000000 [ 85.614168] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000000 [ 85.621427] RBP: ffff88019648e708 R08: 0000000000000000 R09: 0000000000000001 [ 85.628682] R10: 0000000000000000 R11: ffffffff86575770 R12: ffff8801d350c000 [ 85.635938] R13: 0000000000000fae R14: 0000000000000001 R15: 0000000000000fae [ 85.643195] FS: 00007f8f6ae297c0(0000) GS:ffff88021fc00000(0000) knlGS:0000000000000000 [ 85.651409] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 85.657277] CR2: 0000000000701138 CR3: 00000001c8bb6000 CR4: 00000000001406f0 [ 85.664535] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 85.671791] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 85.679047] Call Trace: [ 85.681628] kmsan_internal_unpoison_shadow+0x5c/0xe0 [ 85.686808] kmsan_unpoison_shadow+0x66/0xb0 [ 85.691207] virtqueue_get_buf_ctx+0x73f/0xa20 [ 85.695783] virtqueue_get_buf+0x72/0x90 [ 85.699834] start_xmit+0x293/0x29c0 [ 85.703540] ? packet_rcv+0x2210/0x2210 [ 85.707520] ? virtnet_close+0x2c0/0x2c0 [ 85.711582] dev_hard_start_xmit+0x5f6/0xc80 [ 85.715998] sch_direct_xmit+0x578/0x8f0 [ 85.720064] __qdisc_run+0x1822/0x3730 [ 85.723962] __dev_queue_xmit+0x2069/0x3540 [ 85.728288] dev_queue_xmit+0x4b/0x60 [ 85.732090] ip_finish_output2+0x12a8/0x1480 [ 85.736496] ip_finish_output+0xcbc/0x1000 [ 85.740732] ip_output+0x505/0x5d0 [ 85.744268] ? ip_mc_finish_output+0x3b0/0x3b0 [ 85.748852] ? ip_finish_output+0x1000/0x1000 [ 85.753346] ip_queue_xmit+0x1b0f/0x1d00 [ 85.757404] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 85.762850] ? __skb_clone+0x6ec/0x990 [ 85.766740] ? ip_output+0x5d0/0x5d0 [ 85.770453] tcp_transmit_skb+0x3db5/0x5350 [ 85.774788] tcp_write_xmit+0x2d81/0xb200 [ 85.778943] ? memcg_kmem_put_cache+0x40/0x290 [ 85.783536] __tcp_push_pending_frames+0x124/0x400 [ 85.788460] tcp_push+0x803/0x8f0 [ 85.791910] tcp_sendmsg_locked+0x4eb1/0x6610 [ 85.796419] tcp_sendmsg+0xb2/0x100 [ 85.800039] ? tcp_sendmsg_locked+0x6610/0x6610 [ 85.804696] inet_sendmsg+0x3fc/0x760 [ 85.808490] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 85.813847] ? inet_getname+0x4a0/0x4a0 [ 85.817811] sock_write_iter+0x3bc/0x470 [ 85.821863] ? sock_read_iter+0x480/0x480 [ 85.825999] __vfs_write+0x808/0x9f0 [ 85.829710] vfs_write+0x467/0x8c0 [ 85.833247] __x64_sys_write+0x1bf/0x3e0 [ 85.837308] ? ksys_write+0x360/0x360 [ 85.841105] do_syscall_64+0x15b/0x230 [ 85.844993] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 85.850171] RIP: 0033:0x7f8f691c4370 [ 85.853875] RSP: 002b:00007fff312ed498 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 85.861571] RAX: ffffffffffffffda RBX: 00000000000001e8 RCX: 00007f8f691c4370 [ 85.868830] RDX: 00000000000001e8 RSI: 0000560197aa9220 RDI: 0000000000000003 [ 85.876088] RBP: 0000560197aa9220 R08: 0000000000000001 R09: 0101010101010101 [ 85.883345] R10: 0000000000000008 R11: 0000000000000246 R12: 00007fff312ed4fc [ 85.890601] R13: 0000560196fc8fb4 R14: 0000000000000028 R15: 0000560196fcaca0 [ 85.897859] Code: 75 29 48 c7 c7 59 38 97 8a 31 c0 e8 fd 4c 80 ff 80 3c 25 f8 93 53 8b 00 75 11 48 c7 c7 89 38 97 8a 31 c0 4c 89 fe e8 e2 4c 80 ff <0f> 0b eb fe 48 3d ff ff ff 1f 0f 87 a2 fe ff ff 48 8b 1c 25 10 [ 85.917048] RIP: kmsan_get_shadow_address+0x1ce/0x1f0 RSP: ffff88019648e6f0 [ 85.924142] ---[ end trace 968fc2a0eaaa29bc ]--- [ 85.928887] Kernel panic - not syncing: Fatal exception in interrupt [ 85.935809] Dumping ftrace buffer: [ 85.939334] (ftrace buffer empty) [ 85.943016] Kernel Offset: disabled [ 85.946616] Rebooting in 86400 seconds..