[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 38.710199] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 42.740498] random: sshd: uninitialized urandom read (32 bytes read) [ 43.167857] random: sshd: uninitialized urandom read (32 bytes read) [ 44.406505] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.15.230' (ECDSA) to the list of known hosts. [ 50.138927] random: sshd: uninitialized urandom read (32 bytes read) 2018/09/07 01:03:23 fuzzer started [ 51.558000] random: cc1: uninitialized urandom read (8 bytes read) 2018/09/07 01:03:26 dialing manager at 10.128.0.26:45421 2018/09/07 01:03:26 syscalls: 1 2018/09/07 01:03:26 code coverage: enabled 2018/09/07 01:03:26 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/09/07 01:03:26 setuid sandbox: enabled 2018/09/07 01:03:26 namespace sandbox: enabled 2018/09/07 01:03:26 fault injection: enabled 2018/09/07 01:03:26 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/09/07 01:03:26 net packed injection: enabled 2018/09/07 01:03:26 net device setup: enabled [ 55.153701] random: crng init done 01:05:12 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) fcntl$setsig(r1, 0xa, 0x11) fcntl$setlease(r1, 0x400, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x0) dup3(r0, r1, 0x0) 01:05:12 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x1000000efffffff, 0xffffffff00000000, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020d0000100000000000000000000000030006000e20000002000f6ae000000100000000010000000800120002000200000005000000000030000000020300000000000f00000000020000000000000092ab000000000001020014bb00200000ffffffde000000000300050000000000020000f3df0000210008000002000000"], 0x80}}, 0x0) 01:05:12 executing program 7: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x3, 0x4, 0x4, 0x1, 0x0, 0x1}, 0xe) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001200)={r0, &(0x7f0000000000), &(0x7f0000001240)=""/4096}, 0x13) 01:05:12 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x857, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={[], 0x0, 0x101, 0x279d}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 01:05:12 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f00000001c0)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) lremovexattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)=@known='security.capability\x00') 01:05:12 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r0}], 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f00000000c0), 0x8) ioctl$TCXONC(r0, 0x540a, 0x2) 01:05:12 executing program 5: clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = socket(0xa, 0x200000000080002, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000c80)) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000cc0)=ANY=[@ANYBLOB="66696c746572000000000000000082945036b06b94a20000000000000000000000000000000000000700000004000000a4040000000000000000000040010000c0030000c00300"], 0x1) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) 01:05:12 executing program 6: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x40000000000004) request_key(&(0x7f0000000340)='blacklist\x00', &(0x7f0000000380), &(0x7f0000000700)='keyring\x00', 0xfffffffffffffffd) request_key(&(0x7f0000000100)='user\x00', &(0x7f0000000280), &(0x7f00000002c0)="d13ff3d776", 0x0) pipe(&(0x7f0000000000)) [ 160.404231] IPVS: ftp: loaded support on port[0] = 21 [ 160.430299] IPVS: ftp: loaded support on port[0] = 21 [ 160.482026] IPVS: ftp: loaded support on port[0] = 21 [ 160.485849] IPVS: ftp: loaded support on port[0] = 21 [ 160.521143] IPVS: ftp: loaded support on port[0] = 21 [ 160.552964] IPVS: ftp: loaded support on port[0] = 21 [ 160.558312] IPVS: ftp: loaded support on port[0] = 21 [ 160.570451] IPVS: ftp: loaded support on port[0] = 21 [ 162.938982] ip (4922) used greatest stack depth: 53528 bytes left [ 164.646919] ip (5018) used greatest stack depth: 53496 bytes left [ 165.559044] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.565584] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.598935] device bridge_slave_0 entered promiscuous mode [ 165.659700] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.666249] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.676087] device bridge_slave_0 entered promiscuous mode [ 165.684585] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.691106] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.715084] device bridge_slave_0 entered promiscuous mode [ 165.729979] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.736497] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.752197] device bridge_slave_0 entered promiscuous mode [ 165.765594] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.772084] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.810985] device bridge_slave_0 entered promiscuous mode [ 165.839613] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.846089] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.878811] device bridge_slave_0 entered promiscuous mode [ 165.901357] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.907839] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.933871] device bridge_slave_1 entered promiscuous mode [ 165.953143] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.959627] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.980139] device bridge_slave_0 entered promiscuous mode [ 165.989894] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.996377] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.022094] device bridge_slave_1 entered promiscuous mode [ 166.043923] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.050703] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.079181] device bridge_slave_0 entered promiscuous mode [ 166.096781] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.103250] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.137597] device bridge_slave_1 entered promiscuous mode [ 166.156555] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.163039] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.185169] device bridge_slave_1 entered promiscuous mode [ 166.197289] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.203815] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.231520] device bridge_slave_1 entered promiscuous mode [ 166.248197] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.254827] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.277318] device bridge_slave_1 entered promiscuous mode [ 166.303481] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 166.314482] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 166.331021] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.337508] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.377343] device bridge_slave_1 entered promiscuous mode [ 166.397806] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 166.407235] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.413780] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.461119] device bridge_slave_1 entered promiscuous mode [ 166.499610] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 166.512089] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 166.520683] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 166.620003] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 166.634356] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 166.648804] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 166.705049] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 166.777585] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 166.790664] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 166.802212] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 166.821918] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 166.933136] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 167.082963] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 167.580481] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 167.625307] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 167.643456] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 167.703173] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 167.733473] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 167.794168] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 167.874247] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 167.946817] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 167.956473] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 167.968963] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 168.020105] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 168.034603] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 168.053277] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 168.123993] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 168.178548] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 168.244181] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 168.252353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 168.271650] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 168.278657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 168.328452] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 168.342359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 168.365393] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 168.399546] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 168.407385] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 168.414308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 168.452313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 168.501113] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 168.508165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 168.558465] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 168.565582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 168.587367] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 168.597417] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 168.607944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 168.645579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 168.692078] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 168.699032] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 168.719574] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 168.727290] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 168.734279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 168.788425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 168.825963] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 168.832887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 168.852988] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 168.904228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 168.962584] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 168.972510] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 168.979456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 168.991966] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 169.421923] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 169.450502] team0: Port device team_slave_0 added [ 169.662111] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 169.692080] team0: Port device team_slave_0 added [ 169.721119] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 169.735433] team0: Port device team_slave_0 added [ 169.765137] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 169.792397] team0: Port device team_slave_0 added [ 169.826356] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 169.850315] team0: Port device team_slave_1 added [ 169.870499] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 169.892884] team0: Port device team_slave_0 added [ 169.909835] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 169.927882] team0: Port device team_slave_0 added [ 169.961350] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 169.975876] team0: Port device team_slave_0 added [ 169.998329] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 170.015235] team0: Port device team_slave_0 added [ 170.038393] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 170.066646] team0: Port device team_slave_1 added [ 170.087357] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 170.104962] team0: Port device team_slave_1 added [ 170.123021] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 170.140297] team0: Port device team_slave_1 added [ 170.165793] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 170.190074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 170.212036] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 170.232285] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 170.249864] team0: Port device team_slave_1 added [ 170.270145] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 170.293965] team0: Port device team_slave_1 added [ 170.316642] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 170.326002] team0: Port device team_slave_1 added [ 170.352213] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 170.371643] team0: Port device team_slave_1 added [ 170.379988] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 170.391016] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 170.401671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 170.410624] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 170.458899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 170.484281] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 170.524294] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 170.531607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 170.551082] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 170.588897] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 170.596315] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 170.603376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 170.634953] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 170.657668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 170.681361] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 170.710212] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 170.717559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 170.729163] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 170.750669] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 170.770932] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 170.782443] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 170.791292] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 170.798325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 170.810926] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 170.845883] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 170.868063] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 170.884687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 170.907213] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 170.930858] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 170.955967] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 170.986893] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 171.002188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 171.012427] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 171.022771] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 171.033072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 171.049431] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 171.072625] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 171.081099] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 171.103926] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 171.111649] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 171.121845] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 171.173313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 171.198787] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 171.220685] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 171.237756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 171.262967] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 171.279176] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 171.298072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 171.307255] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 171.314844] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 171.324416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 171.333212] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 171.340189] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 171.349294] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 171.412329] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 171.420175] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 171.443103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 171.455036] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 171.463494] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 171.484967] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 171.495895] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 171.504146] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 171.511595] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 171.539152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 171.579278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 171.614041] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 171.642943] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 171.677095] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 171.696178] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 171.710704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 171.718914] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 171.727207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 171.741863] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 171.749211] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 171.758444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 171.799671] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 171.807428] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 171.817792] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 171.839509] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 171.850249] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 171.877018] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 171.890609] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 171.898993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 171.923415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 171.978137] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 172.011935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 172.051789] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 172.090039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 172.120877] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 172.130558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 172.256249] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 172.263850] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 172.283515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 174.975720] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.982315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.989210] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.995664] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.032939] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 175.042801] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 175.078611] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.085129] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.092041] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.098520] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.112391] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 175.399907] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.406406] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.413266] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.419760] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.429791] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 175.445609] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.452067] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.458963] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.465458] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.474668] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 175.491416] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.497901] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.504857] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.511315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.566256] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 175.576189] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.582643] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.589491] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.595933] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.621924] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 175.633707] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.640178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.647056] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.653515] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.665430] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 175.707972] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.714458] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.721310] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.727831] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.844302] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 175.881901] ip (5550) used greatest stack depth: 53464 bytes left [ 176.086180] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 176.105500] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 176.135826] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 176.170882] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 176.200325] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 176.219192] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 176.227884] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 187.776646] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.820192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.913957] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.957386] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.008982] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.039040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.429978] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.460523] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.938318] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 189.041639] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 189.066425] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 189.115230] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 189.139656] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 189.238271] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 189.555645] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 189.639296] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 190.114215] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 190.122610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 190.142655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 190.205545] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 190.211891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 190.220157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 190.264206] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 190.271850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 190.311216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 190.343478] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 190.353207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 190.368428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 190.417998] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 190.427114] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 190.472550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 190.532671] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 190.538966] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 190.557209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 190.825266] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 190.831941] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 190.842862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 190.973162] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 190.979484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 190.996171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 191.413913] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.491992] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.522792] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.552327] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.606450] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.719370] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.116104] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.149215] 8021q: adding VLAN 0 to HW filter on device team0 01:05:51 executing program 1: perf_event_open(&(0x7f00000005c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000480)={{}, 0x0, 0x0, 0x3}) 01:05:51 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x60, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000200], 0x30, &(0x7f0000000080), &(0x7f0000000200)=[{0x0, '\x00', 0x0, 0xeffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'nr0\x00', 'bcsh0\x00', 'irlan0\x00', 'veth1_to_team\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8) 01:05:51 executing program 6: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x40000000000004) request_key(&(0x7f0000000340)='blacklist\x00', &(0x7f0000000380), &(0x7f0000000700)='keyring\x00', 0xfffffffffffffffd) request_key(&(0x7f0000000100)='user\x00', &(0x7f0000000280), &(0x7f00000002c0)="d13ff3d776", 0x0) pipe(&(0x7f0000000000)) 01:05:52 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x41) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x0, 0x0, "e1d3f877e5eae453e55d7d64d00d4901baed21f7de92a8669b380002260857dbf5ae46354569636517b50f805ae208258dba7d0abe8d208f0f1bcc885c8ba93c", "c4f5ff00000000000066b988de9bba6df5fdc54d81bf6ba5629eef628582fba5bf4af44acfe05900", "ee42e3ef1d1772a9432c220303b70b708ad791137e2982fcce5d747a3131995a"}) 01:05:52 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg(r0, &(0x7f0000001440)={&(0x7f0000000140)=@in6={0xa, 0x4e21}, 0x6b3, &(0x7f0000001200), 0x2d4}, 0x8000) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000080)=@un=@abs={0x0, 0x0, 0x4e24}, 0x3c8, &(0x7f00000005c0), 0x0, &(0x7f0000000200)}, 0x0) 01:05:52 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) close(r1) dup2(r0, r1) 01:05:52 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() geteuid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)) getegid() sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001a40)={&(0x7f00000001c0)=@proc, 0xc, &(0x7f0000000200), 0x0, &(0x7f00000019c0)}, 0x0) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040), 0x0, 0x0, 0xfffffffffffffffe) sched_setscheduler(r0, 0x5, &(0x7f0000000140)) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) keyctl$assume_authority(0x10, r1) 01:05:52 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x60, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000200], 0x30, &(0x7f0000000080), &(0x7f0000000200)=[{0x0, '\x00', 0x0, 0xeffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'nr0\x00', 'bcsh0\x00', 'irlan0\x00', 'veth1_to_team\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8) 01:05:52 executing program 6: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x40000000000004) request_key(&(0x7f0000000340)='blacklist\x00', &(0x7f0000000380), &(0x7f0000000700)='keyring\x00', 0xfffffffffffffffd) request_key(&(0x7f0000000100)='user\x00', &(0x7f0000000280), &(0x7f00000002c0)="d13ff3d776", 0x0) pipe(&(0x7f0000000000)) 01:05:52 executing program 6: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x40000000000004) request_key(&(0x7f0000000340)='blacklist\x00', &(0x7f0000000380), &(0x7f0000000700)='keyring\x00', 0xfffffffffffffffd) request_key(&(0x7f0000000100)='user\x00', &(0x7f0000000280), &(0x7f00000002c0)="d13ff3d776", 0x0) pipe(&(0x7f0000000000)) 01:05:52 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)) 01:05:52 executing program 4: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f00000000c0)={0x28}, 0xfffffffffffffd40) ioctl$FS_IOC_RESVSP(r0, 0x402c5828, &(0x7f00000001c0)={0x0, 0x0, 0x200000000}) 01:05:52 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) lseek(r0, 0x0, 0x0) 01:05:53 executing program 6: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x40000000000004) request_key(&(0x7f0000000340)='blacklist\x00', &(0x7f0000000380), &(0x7f0000000700)='keyring\x00', 0xfffffffffffffffd) request_key(&(0x7f0000000100)='user\x00', &(0x7f0000000280), &(0x7f00000002c0)="d13ff3d776", 0x0) 01:05:53 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r0}], 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f00000000c0), 0x8) ioctl$TCXONC(r0, 0x540a, 0x2) 01:05:53 executing program 0: r0 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000240)={"6772653000000000000000fffffdfd00", &(0x7f0000000080)=ANY=[]}) 01:05:53 executing program 7: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x100000002, 0x40000000004, 0x201}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f0000000040)}, 0x8) 01:05:53 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) r0 = socket(0x8000000000a, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000000280), 0xfe09, 0x0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback={0x0, 0x8}}, 0x1c) 01:05:53 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0x437, &(0x7f0000000f80)={@local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "c22df7", 0x401, 0x11, 0x0, @dev, @local, {[], @dccp={{0x0, 0x4e20, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "0087ae", 0x0, "ca8345"}, "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"}}}}}}, &(0x7f0000001780)) recvfrom(r0, &(0x7f00000000c0)=""/251, 0x3f9, 0x0, &(0x7f0000000000)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "8df0d47434cdbcd50af760189e41d163f0fc8a3fcd8091d7e462359ba12143866e68a9028c2ccc7c1fc5ae13c3f188e2e7d7b8b4d32be094067b9571df0821"}, 0x709000) sendto$inet6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) 01:05:53 executing program 1: open(&(0x7f0000000180)='./bus\x00', 0x5d, 0x0) close(0xffffffffffffffff) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000000)) r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) r1 = memfd_create(&(0x7f0000000100)="000000008c00000001000000008000", 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003) ioctl$int_out(r1, 0x0, &(0x7f0000000140)) sendfile(r0, r1, &(0x7f0000000040), 0x7fffffffffffffff) 01:05:53 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo\x00') getdents64(r0, &(0x7f0000000180)=""/197, 0xc5) 01:05:53 executing program 6: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x40000000000004) request_key(&(0x7f0000000340)='blacklist\x00', &(0x7f0000000380), &(0x7f0000000700)='keyring\x00', 0xfffffffffffffffd) request_key(&(0x7f0000000100)='user\x00', &(0x7f0000000280), &(0x7f00000002c0)="d13ff3d776", 0x0) 01:05:53 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto$inet6(r0, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040), 0x1c) [ 200.577281] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 01:05:53 executing program 7: r0 = epoll_create1(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0xc0000006}) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x0) 01:05:53 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000001c0)=0x4000000080) r2 = syz_open_pts(r0, 0x0) ioctl$TCFLSH(r2, 0x540b, 0x2) 01:05:53 executing program 6: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x40000000000004) request_key(&(0x7f0000000100)='user\x00', &(0x7f0000000280), &(0x7f00000002c0)="d13ff3d776", 0x0) 01:05:53 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000040)=0x8000000000004, 0xe3) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x0, 0x8ffc}, 0x4) sendto$inet(r0, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @rand_addr}, 0x10) 01:05:53 executing program 6: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) request_key(&(0x7f0000000340)='blacklist\x00', &(0x7f0000000380), &(0x7f0000000700)='keyring\x00', 0xfffffffffffffffd) request_key(&(0x7f0000000100)='user\x00', &(0x7f0000000280), &(0x7f00000002c0)="d13ff3d776", 0x0) 01:05:53 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f00000001c0)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') 01:05:53 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x40000000000004) request_key(&(0x7f0000000340)='blacklist\x00', &(0x7f0000000380), &(0x7f0000000700)='keyring\x00', 0xfffffffffffffffd) request_key(&(0x7f0000000100)='user\x00', &(0x7f0000000280), &(0x7f00000002c0)="d13ff3d776", 0x0) syz_open_procfs(0x0, 0xfffffffffffffffd) [ 200.953216] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 200.972962] IPv4: Oversized IP packet from 127.0.0.1 [ 201.107964] IPv4: Oversized IP packet from 127.0.0.1 01:05:54 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x400000038}, 0xfffffffffffffe44) r0 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x1b, &(0x7f0000000040)=r0, 0x52d) 01:05:54 executing program 7: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000000140)=0x1) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) keyctl$join(0x1, &(0x7f0000000000)) 01:05:54 executing program 6: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) keyctl$set_reqkey_keyring(0xe, 0x40000000000004) request_key(&(0x7f0000000340)='blacklist\x00', &(0x7f0000000380), &(0x7f0000000700)='keyring\x00', 0xfffffffffffffffd) request_key(&(0x7f0000000100)='user\x00', &(0x7f0000000280), &(0x7f00000002c0)="d13ff3d776", 0x0) 01:05:54 executing program 5: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) r1 = syz_open_pts(0xffffffffffffffff, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000480)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) mount(&(0x7f0000000740)=ANY=[@ANYBLOB="0b2e00d451a24c1e0fd5f6d3b516930a4d76429e1653d5f8da6df6e73018a8ef38a800c599f65b7eea4599d998153b7dbee06625b9ac217efde9e22647856e0b8b066e7616ca639d3329f285e440145c07b734513814cc8b04bf95d8a3663091be5156b8655a34fa0736931cc7307923ae"], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x8000000000141042, 0xfffffffffffffffa) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, &(0x7f0000000280)=""/247) mount(&(0x7f0000000080)=ANY=[@ANYBLOB='./'], &(0x7f0000000200)='./file0\x00', &(0x7f0000000400)='ext3\x00', 0x2000000, &(0x7f0000000640)='&)ppp0)+\x00') write$evdev(r2, &(0x7f0000000440)=[{{0x77359400}}], 0x18) getpeername$unix(r2, &(0x7f00000000c0), &(0x7f0000000140)=0x6e) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0)=0xc) sendfile(r2, r2, &(0x7f00000001c0), 0xa198) getuid() ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000800)=""/4096) 01:05:54 executing program 0: r0 = socket$inet(0x2, 0x803, 0x19) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000600)={0x0, &(0x7f00000005c0)}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1}}, {{@in6}, 0x0, @in6=@loopback}}, 0xe8) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000580)={@multicast2, @local, 0x1}, 0x10) 01:05:54 executing program 2: clone(0x802102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) sysfs$1(0x1, &(0x7f0000001240)='&\x00') fchdir(0xffffffffffffffff) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000002840)=""/4096, &(0x7f0000000100)=0x1000) listxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)=""/13, 0xd) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f0000000140)) 01:05:54 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioprio_set$pid(0x1, 0x0, 0x0) 01:05:54 executing program 1: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000140)) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)="70726f63e1a2cd8e97c1707cebe75a00", 0x15c84, &(0x7f00000002c0)='\x00') 01:05:54 executing program 2: faccessat(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 01:05:54 executing program 1: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000140)) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)="70726f63e1a2cd8e97c1707cebe75a00", 0x15c84, &(0x7f00000002c0)='\x00') 01:05:54 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/tcp6\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000080)=@nl, 0x80, &(0x7f0000000540), 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) 01:05:54 executing program 3: bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) move_pages(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000ffc000/0x4000)=nil], &(0x7f0000000140), &(0x7f0000000280), 0xffffeffffffffffc) openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x0) mremap(&(0x7f000053b000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) 01:05:54 executing program 4: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount(&(0x7f00000003c0)=ANY=[], &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) getpid() sched_setscheduler(0x0, 0x0, &(0x7f0000000040)) syz_open_dev$dmmidi(&(0x7f0000001740)='/dev/dmmidi#\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) mount(&(0x7f0000001640)=@nullb='/dev/nullb0\x00', &(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)='btrfs\x00', 0x0, &(0x7f0000001700)='vmnet0@selfvmnet0\x00') write$cgroup_pid(r1, &(0x7f0000000340), 0x78) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) 01:05:54 executing program 0: r0 = socket$inet(0x2, 0x803, 0x19) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000600)={0x0, &(0x7f00000005c0)}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1}}, {{@in6}, 0x0, @in6=@loopback}}, 0xe8) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000580)={@multicast2, @local, 0x1}, 0x10) 01:05:54 executing program 1: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000140)) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)="70726f63e1a2cd8e97c1707cebe75a00", 0x15c84, &(0x7f00000002c0)='\x00') 01:05:54 executing program 6: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x40000000000004) request_key(&(0x7f0000000340)='blacklist\x00', &(0x7f0000000380), &(0x7f0000000700)='keyring\x00', 0xfffffffffffffffd) request_key(&(0x7f0000000100)='user\x00', &(0x7f0000000280), &(0x7f00000002c0)="d13ff3d776", 0x0) [ 201.865858] ================================================================== [ 201.873284] BUG: KMSAN: uninit-value in btrfs_scan_one_device+0x4c8/0x14e0 [ 201.880350] CPU: 0 PID: 7076 Comm: syz-executor4 Not tainted 4.19.0-rc1+ #41 [ 201.880361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 201.880369] Call Trace: [ 201.880395] dump_stack+0x14b/0x190 [ 201.880444] kmsan_report+0x183/0x2b0 [ 201.880475] __msan_warning+0x70/0xc0 [ 201.880504] btrfs_scan_one_device+0x4c8/0x14e0 [ 201.880540] ? strsep+0x5a/0x370 [ 201.880577] btrfs_mount_root+0xcab/0x22e0 [ 201.880598] ? pcpu_alloc+0x1ce1/0x20a0 [ 201.880667] ? btrfs_control_open+0x80/0x80 [ 201.880692] mount_fs+0x28f/0x760 [ 201.880744] vfs_kern_mount+0x21b/0x8d0 [ 201.880784] btrfs_mount+0x8b2/0x2f40 [ 201.880871] ? btrfs_resize_thread_pool+0x5e0/0x5e0 [ 201.880894] mount_fs+0x28f/0x760 [ 201.880936] vfs_kern_mount+0x21b/0x8d0 [ 201.880977] do_mount+0xcee/0x56b0 [ 201.881031] ksys_mount+0x32e/0x3d0 [ 201.881086] __se_sys_mount+0xe5/0x110 [ 201.881127] __x64_sys_mount+0x62/0x80 [ 201.881152] do_syscall_64+0xb8/0x100 [ 201.881189] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 201.979901] RIP: 0033:0x457099 [ 201.979922] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 201.979934] RSP: 002b:00007fb8e90a3c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 201.979957] RAX: ffffffffffffffda RBX: 00007fb8e90a46d4 RCX: 0000000000457099 [ 201.979971] RDX: 00000000200016c0 RSI: 0000000020001680 RDI: 0000000020001640 [ 201.979984] RBP: 00000000009300a0 R08: 0000000020001700 R09: 0000000000000000 [ 201.979997] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 201.980009] R13: 00000000004d3210 R14: 00000000004c81c6 R15: 0000000000000000 [ 201.980037] [ 201.980044] Uninit was created at: [ 201.980069] kmsan_internal_alloc_meta_for_pages+0x146/0x700 [ 201.980086] kmsan_alloc_page+0x75/0xd0 [ 201.980105] __alloc_pages_nodemask+0xf6b/0x5c80 [ 201.980121] alloc_pages_current+0x6b1/0x970 [ 201.980141] __page_cache_alloc+0x95/0x320 [ 201.980160] do_read_cache_page+0x829/0x1630 [ 201.980180] read_cache_page_gfp+0xe9/0x120 [ 201.980197] btrfs_scan_one_device+0x297/0x14e0 [ 201.980214] btrfs_mount_root+0xcab/0x22e0 [ 201.980247] mount_fs+0x28f/0x760 [ 201.980265] vfs_kern_mount+0x21b/0x8d0 [ 201.980280] btrfs_mount+0x8b2/0x2f40 [ 201.980296] mount_fs+0x28f/0x760 [ 201.980314] vfs_kern_mount+0x21b/0x8d0 [ 201.980332] do_mount+0xcee/0x56b0 [ 201.980350] ksys_mount+0x32e/0x3d0 [ 201.980368] __se_sys_mount+0xe5/0x110 [ 201.980386] __x64_sys_mount+0x62/0x80 [ 201.980402] do_syscall_64+0xb8/0x100 [ 201.980429] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 201.980436] ================================================================== [ 201.980443] Disabling lock debugging due to kernel taint [ 201.980454] Kernel panic - not syncing: panic_on_warn set ... [ 201.980454] [ 201.980476] CPU: 0 PID: 7076 Comm: syz-executor4 Tainted: G B 4.19.0-rc1+ #41 [ 201.980486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 201.980494] Call Trace: [ 201.980515] dump_stack+0x14b/0x190 [ 201.980545] panic+0x35d/0x8cb [ 201.980607] kmsan_report+0x2a8/0x2b0 [ 201.980636] __msan_warning+0x70/0xc0 [ 201.980663] btrfs_scan_one_device+0x4c8/0x14e0 [ 201.980700] ? strsep+0x5a/0x370 [ 201.980742] btrfs_mount_root+0xcab/0x22e0 [ 201.980760] ? pcpu_alloc+0x1ce1/0x20a0 [ 201.980817] ? btrfs_control_open+0x80/0x80 [ 201.980838] mount_fs+0x28f/0x760 [ 201.980877] vfs_kern_mount+0x21b/0x8d0 [ 201.980915] btrfs_mount+0x8b2/0x2f40 [ 201.980985] ? btrfs_resize_thread_pool+0x5e0/0x5e0 [ 201.981006] mount_fs+0x28f/0x760 [ 201.981045] vfs_kern_mount+0x21b/0x8d0 [ 201.981084] do_mount+0xcee/0x56b0 [ 201.981137] ksys_mount+0x32e/0x3d0 [ 201.981176] __se_sys_mount+0xe5/0x110 [ 201.981212] __x64_sys_mount+0x62/0x80 [ 201.981234] do_syscall_64+0xb8/0x100 [ 201.981257] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 201.981272] RIP: 0033:0x457099 [ 201.981290] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 201.981301] RSP: 002b:00007fb8e90a3c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 201.981323] RAX: ffffffffffffffda RBX: 00007fb8e90a46d4 RCX: 0000000000457099 [ 201.981335] RDX: 00000000200016c0 RSI: 0000000020001680 RDI: 0000000020001640 [ 201.981347] RBP: 00000000009300a0 R08: 0000000020001700 R09: 0000000000000000 [ 201.981359] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 201.981371] R13: 00000000004d3210 R14: 00000000004c81c6 R15: 0000000000000000 [ 201.981793] Dumping ftrace buffer: [ 201.981800] (ftrace buffer empty) [ 201.981806] Kernel Offset: disabled [ 202.336328] Rebooting in 86400 seconds..