[ 60.275801] audit: type=1800 audit(1539225772.308:27): pid=6170 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 61.858337] random: sshd: uninitialized urandom read (32 bytes read) [ 62.007377] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. [ 62.900972] random: sshd: uninitialized urandom read (32 bytes read) Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 65.418640] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.83' (ECDSA) to the list of known hosts. [ 71.301785] random: sshd: uninitialized urandom read (32 bytes read) 2018/10/11 02:43:05 fuzzer started [ 76.114053] random: cc1: uninitialized urandom read (8 bytes read) 2018/10/11 02:43:10 dialing manager at 10.128.0.26:39089 2018/10/11 02:43:10 syscalls: 1 2018/10/11 02:43:10 code coverage: enabled 2018/10/11 02:43:10 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/10/11 02:43:10 setuid sandbox: enabled 2018/10/11 02:43:10 namespace sandbox: enabled 2018/10/11 02:43:10 Android sandbox: /sys/fs/selinux/policy does not exist 2018/10/11 02:43:10 fault injection: enabled 2018/10/11 02:43:10 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/10/11 02:43:10 net packed injection: /dev/net/tun can't be opened (open /dev/net/tun: cannot allocate memory) 2018/10/11 02:43:10 net device setup: enabled [ 81.373429] random: crng init done 02:45:10 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f00000003c0)={0x9, 0x108, 0xfa00, {r1, 0x0, "cc2281", "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"}}, 0x110) [ 199.207127] IPVS: ftp: loaded support on port[0] = 21 [ 200.618738] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.625514] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.634401] device bridge_slave_0 entered promiscuous mode [ 200.785428] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.792074] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.800769] device bridge_slave_1 entered promiscuous mode [ 200.951321] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 201.099754] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 201.560079] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 201.713423] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 202.006834] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 202.014169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 02:45:14 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @loopback}, 0x10) [ 202.523307] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 202.531582] team0: Port device team_slave_0 added [ 202.829368] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 202.837864] team0: Port device team_slave_1 added [ 203.054589] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 203.082009] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 203.091198] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 203.275285] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 203.282593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 203.291857] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 203.478596] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 203.486557] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 203.495936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 203.559005] IPVS: ftp: loaded support on port[0] = 21 [ 203.743687] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 203.751382] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 203.761011] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 205.915248] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.922072] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.930847] device bridge_slave_0 entered promiscuous mode [ 206.180213] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.186774] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.195681] device bridge_slave_1 entered promiscuous mode [ 206.356387] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.363026] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.370051] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.376720] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.385935] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 206.400334] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 206.685948] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 207.062046] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 207.437535] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 207.720805] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 207.907270] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 207.916560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 208.098815] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 208.106148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 02:45:20 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='loginuid\x00') write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000040)={0x30}, 0x30) [ 208.913755] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 208.922269] team0: Port device team_slave_0 added [ 209.219536] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 209.228430] team0: Port device team_slave_1 added [ 209.341146] IPVS: ftp: loaded support on port[0] = 21 [ 209.527606] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 209.534943] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 209.544417] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 209.822075] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 209.829520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 209.839034] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 210.186934] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 210.195328] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 210.204839] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 210.450508] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 210.458430] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 210.467692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 212.299711] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.306494] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.315292] device bridge_slave_0 entered promiscuous mode [ 212.705848] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.712477] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.721144] device bridge_slave_1 entered promiscuous mode [ 213.013897] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 213.278294] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 214.112337] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.118851] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.126006] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.132598] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.141855] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 214.218150] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 214.264117] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 214.438004] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 214.658732] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 214.666183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 215.031043] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 215.038378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 215.875481] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 215.884084] team0: Port device team_slave_0 added [ 216.188442] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 216.197068] team0: Port device team_slave_1 added [ 216.411281] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 216.418511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 216.427803] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 02:45:28 executing program 3: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f0000000000)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, &(0x7f00000002c0)) mkdir(&(0x7f0000000480)='./file0/file1\x00', 0x0) creat(&(0x7f00000002c0)='./file0/file1/file0\x00', 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000680)='./file0/file1\x00') [ 216.809253] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 216.816574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 216.825764] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 217.158724] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 217.166510] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 217.175902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 217.464633] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 217.472559] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 217.481824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 218.007826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.434175] IPVS: ftp: loaded support on port[0] = 21 [ 219.322761] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 220.748477] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 220.755157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 220.763722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 221.632840] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.639385] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.646591] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.653181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.662471] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 222.102085] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 222.127032] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.134667] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.143511] device bridge_slave_0 entered promiscuous mode [ 222.200850] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.507505] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.514338] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.523295] device bridge_slave_1 entered promiscuous mode [ 222.933147] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 223.261402] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 224.292377] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 224.594079] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 224.895876] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 224.903287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 225.256798] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 225.264199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 226.275019] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 226.283446] team0: Port device team_slave_0 added [ 226.701837] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 226.710240] team0: Port device team_slave_1 added [ 227.180503] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 227.187822] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 227.197131] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 227.547060] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 227.554423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 227.563743] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready 02:45:39 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, &(0x7f00000003c0)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) [ 227.946652] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 227.954280] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 227.963482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 228.364008] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 228.371538] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 228.380818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 228.650348] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.590736] IPVS: ftp: loaded support on port[0] = 21 [ 230.449211] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready 02:45:44 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000002640)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539(cfb(twofish),rmd128-generic)\x00'}, 0x58) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001400)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="995792e0b6f723cdb9dcb94117280bd8", 0x10}], 0x1, &(0x7f0000000040)}, 0x0) recvmmsg(r2, &(0x7f0000008e80)=[{{&(0x7f0000000140)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000001600)=[{&(0x7f0000001540)=""/165, 0x536}], 0x1, &(0x7f0000001680)=""/72, 0x48}}], 0x1, 0x0, &(0x7f0000002240)) [ 232.133017] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 232.139457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 232.147510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 02:45:45 executing program 0: unshare(0x4000400) r0 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x1, 0x40) ioctl$KVM_S390_INTERRUPT_CPU(r0, 0x4010ae94, &(0x7f00000000c0)={0x55, 0x46, 0xd4}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x5c}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f000042a000/0x1000)=nil, 0x1000}}) socket$xdp(0x2c, 0x3, 0x0) 02:45:45 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8000008912, &(0x7f00000000c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') rt_sigpending(&(0x7f0000000040), 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$set_timeout(0xf, 0x0, 0x0) [ 233.671085] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.677781] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.684984] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.691494] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.700414] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready 02:45:45 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x1}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000100)={r1, 0x67, "0010f0c7695784171bd0718967d889f4dba9bb9061a8d09ec6f7a1bd1470b72bea246db252a06cbb2d13d6f4cb4407c1c892ccdbbb0e152dad612527e6752d38972b30a72e3f992e46094320ddabb42103371ea9500bef23de4fc0f64443ace21a61f1f0936d3e"}, &(0x7f00000000c0)=0x6f) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x71, &(0x7f00000001c0), 0x10) r2 = perf_event_open$cgroup(&(0x7f0000000200)={0x5, 0x70, 0x49b7, 0x21, 0xd1ba, 0x0, 0x0, 0x875, 0x8000, 0x0, 0x0, 0x3, 0x10001, 0x10000, 0x0, 0x80, 0x81, 0xdc, 0x1ff, 0x101, 0x9, 0x3, 0x7ff, 0x7ff, 0x5, 0x6, 0x1, 0x3, 0x7fffffff, 0x6, 0x1ff, 0x7, 0x8, 0x10000, 0x2b27, 0x8, 0xffffffffffffc76b, 0x4a, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000080), 0xc}, 0x40, 0x800, 0x2, 0x7, 0xd88c, 0x401, 0x800}, 0xffffffffffffffff, 0xa, 0xffffffffffffff9c, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000180)=0x7) [ 233.855028] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.861524] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.870332] device bridge_slave_0 entered promiscuous mode [ 233.954999] 8021q: adding VLAN 0 to HW filter on device team0 02:45:46 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000000)=0x5) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r1, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x77}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x35, 0x10}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x18}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x8004) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xf3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000200)=0x3) getxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000340)=@known="73656375726974792e6361706162696c69747900c9bd3012983e02155960196a2a84585f19c1c826172982a8de1ccc4cdc6987ffc9715cef22cee4c673d4388d5e5604a0b838afb35bd352e4c9ee649a771208309ca436bf919fd9636bfa255ff4b31f40f88ecc9c2d812171c412624f0c142fc54f65f49239f27686c17d489e925da19bf31e30ec75cd92237957661ce8a1568418e6d3d428174f89a11cc821fbf64122a36f6b411c", &(0x7f0000000280)=""/140, 0x8c) set_tid_address(&(0x7f00000001c0)) [ 234.470059] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.476724] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.485635] device bridge_slave_1 entered promiscuous mode [ 234.593896] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 02:45:46 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x280000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0x2e8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0xb3) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) sendto$inet6(r0, &(0x7f0000000040)="c3c79e96733cc14bd2cf511e3cae635789471454", 0x14, 0x4000001, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1, 0x3}, 0x1c) shutdown(r0, 0x1) [ 235.078913] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready 02:45:47 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000)={0x7fffffff}, 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000024000)={0xfffffffffffffffe}, 0x0, 0x8) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000000680)={'bridge_slave_1\x00', 0x0}) setsockopt$inet6_mreq(r3, 0x29, 0x1d, &(0x7f00000006c0)={@mcast1, r4}, 0x14) timer_create(0x0, &(0x7f0000000180)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000000140)) splice(r0, &(0x7f0000000000), r0, &(0x7f0000000040), 0x5, 0x2) timer_settime(0x0, 0x0, &(0x7f0000046fe0)={{}, {0x0, 0x9}}, &(0x7f0000046000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f000001dff4)) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYBLOB="c3000080e09d91f0e77b5fa78298263a6549a92aea4681a957a0f24e77fd3014be53851785a3c1f439c0e5a10409e2040ab6ebbe54cbc908b7357197fe36b16e83a99284c2db2940b1d52aabb28865f641265b496b9ab3b2571192c19c1f26c6ae98c7cde4fbe7d2202d8aa5437efa51cee0d9d94731c00f0316f340ba8a4861c69647205360d0ea54844044fa6c35b85d247f884a4521aa26fe9c923786e3779e785dbf4b4f3fbbd1b20a7961e82362cf0798801f3f25b9ddadaa6c88fcf9f2d4f3b7b2a0e5b646a5d5e5e9f965af3c09ae3e"], &(0x7f00000000c0)=0xcb) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f00000002c0)={r6, @in6={{0xa, 0x4e22, 0xfffffffffffffffb, @remote, 0xae}}}, 0x84) [ 235.628768] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready 02:45:48 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup(r0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r2 = syz_open_pts(r0, 0x0) tee(r2, r1, 0x10001, 0x2) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000040)={0x7fff, 0x3, 0x3, 0x1ff, 0x1, [{0x2, 0x2, 0x4, 0x0, 0x0, 0x8}]}) dup3(r2, r0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) socket$inet6_udplite(0xa, 0x2, 0x88) [ 236.912663] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 237.180259] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 237.488367] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 237.495584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 237.829087] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 237.836437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 239.064792] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 239.073381] team0: Port device team_slave_0 added [ 239.181873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.440593] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 239.449034] team0: Port device team_slave_1 added [ 239.780230] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 239.788442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 239.797429] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 240.132352] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 240.139557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 240.148536] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 240.411984] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 240.424337] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 240.432312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 240.441290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 240.740433] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 240.748274] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 240.757276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 241.581503] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 241.588118] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 241.596146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 242.677042] 8021q: adding VLAN 0 to HW filter on device team0 02:45:55 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_int(r0, 0x1, 0x3b, &(0x7f000059dffc), &(0x7f0000d8cffc)=0x4) [ 243.885426] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.892072] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.899116] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.905792] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.914593] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 243.921312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 246.957024] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.859329] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready 02:46:00 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr, 0x0, 0x2b}, 0x0, @in6=@mcast2}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) [ 248.700745] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 248.707442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 248.715533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 249.284550] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.700887] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.261993] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 252.763683] tmpfs: No value for mount option './file0/file1/file0' 02:46:04 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, &(0x7f0000000040), 0x0, 0x8001, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0xffdc) readv(r1, &(0x7f00000000c0)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1) [ 252.815639] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 252.822565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 252.830776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 252.987413] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 253.277795] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.224495] binder: release 7604:7605 transaction 2 out, still active [ 255.231200] binder: undelivered TRANSACTION_COMPLETE [ 255.233404] binder: 7605 RLIMIT_NICE not set [ 255.240950] binder: 7605 RLIMIT_NICE not set [ 255.249300] binder_alloc: binder_alloc_mmap_handler: 7604 20001000-20004000 already mapped failed -16 [ 255.259470] binder: BINDER_SET_CONTEXT_MGR already set [ 255.265117] binder: 7604:7605 ioctl 40046207 0 returned -16 [ 255.265156] binder_alloc: 7604: binder_alloc_buf, no vma [ 255.276604] binder: 7604:7606 transaction failed 29189/-3, size 0-0 line 2970 [ 255.284474] binder: 7606 RLIMIT_NICE not set [ 255.285647] binder: undelivered TRANSACTION_ERROR: 29189 [ 255.295301] binder: release 7604:7605 transaction 2 in, still active [ 255.302031] binder: send failed reply for transaction 2, target dead 02:46:07 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, &(0x7f00000003c0)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) 02:46:07 executing program 0: r0 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x1, 0x20000) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='reno\x00', 0x5) r1 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x5, 0x80) r2 = accept4$alg(r1, 0x0, 0x0, 0x800) setsockopt$sock_void(r2, 0x1, 0x24, 0x0, 0x0) r3 = socket(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r3, 0x0, 0x483, &(0x7f0000000040)={0xad, @empty, 0x4e24, 0x1, 'fo\x00', 0x14, 0x6, 0x49}, 0x2c) listen(r1, 0xd7a) setsockopt$sock_timeval(r3, 0x1, 0x14, &(0x7f0000000000), 0x10) getsockopt$sock_cred(r3, 0x1, 0x5, &(0x7f0000000e80), &(0x7f0000000080)=0x77746409f46ec3da) 02:46:07 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140), 0x4) getpid() getpriority(0x0, 0x0) fanotify_init(0x0, 0x0) 02:46:07 executing program 5: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000040)={0x32, 0x29, 0x14, 0x7, 0xb, 0x8, 0x4, 0xc2, 0x1}) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000000080)={0xd, 0x92df, 0x9}) r1 = dup2(r0, r0) fsetxattr$trusted_overlay_upper(r0, &(0x7f00000000c0)='trusted.overlay.upper\x00', &(0x7f0000000100)={0x0, 0xfb, 0x113, 0x5, 0x7fff, "b320506243a9dd24c8bc6849f96874c1", "8c0053d314c5c051b070853e77ed5c553b1a7db0f1137584c4bd03bf04e4b37da89a09a57562969ea65e14c70cd88c15227c6aed8d57ce81a371374d49596a1bcf9ead2548f6d6eac2655d929272795105ce02d5a9dc328fa2ca5251319492e27193406ee8f64c267f21de3809efee2b9b701a221d1b7c5f8b545d2b9025900b10aa4030731081afc4b5a4c2e4c11702dc0322adbab81f91796844b03773641e7b0805531c41085ea859c83e2c7828ce013f1481f7ceeb5b0e87b95214afadc79196cd94231d6c03d9a782eccf3a2d0ddfdd858d69a2700b8f67583c92f8ce90c3a42ea080ddadfb9ee452d21aa86680af2ebdc07e4261eeaaac46b76b09"}, 0x113, 0x3) r2 = add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f00000002c0)="3adb8744bb5f623363a84de48ffbb10865bbaeeb7142db023a37b5987c3a30162537ed2e7bfd4f16d14f113d47cf693fc9c46a", 0x33, 0xfffffffffffffffe) keyctl$update(0x2, r2, &(0x7f0000000300)="02a7841722ecd833825bc3bb6adae67db65828eae08059d874347d39876f2f1f6d4ba56d7c20", 0x26) setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f0000000480)={{&(0x7f0000000340)=""/245, 0xf5}, &(0x7f0000000440), 0x10}, 0x20) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x5, 0x4) r3 = add_key(&(0x7f00000004c0)='rxrpc_s\x00', &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000540)="93448d898a8d485a03e350c33887fa58bb6f95e06fc3c5b8911a61b8e78745bab0a48619cacdca3401a3f2e55f44dd93fefe5538e8035b84bb211b60509b29570055ea6c4979dc3901a46ef4d1220d4efefe94", 0x53, 0xfffffffffffffffc) keyctl$clear(0x7, r3) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/qat_adf_ctl\x00', 0x10000, 0x0) getsockopt$XDP_MMAP_OFFSETS(r4, 0x11b, 0x1, &(0x7f0000000600), &(0x7f0000000680)=0x60) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000006c0)=[{0x2, 0x400000000}, {0x4, 0x8}, {0xa, 0xffff}, {0x3, 0x100000000}, {0x8, 0xffffffff}, {0xa, 0x9}, {0x7, 0x9}, {0x4, 0xffffffffffffffe0}, {0x8, 0x1c000000000000}], 0x9) recvmsg$kcm(r4, &(0x7f0000001bc0)={&(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000001b00)=[{&(0x7f00000007c0)}, {&(0x7f0000000800)=""/62, 0x3e}, {&(0x7f0000000840)=""/172, 0xac}, {&(0x7f0000000900)=""/85, 0x55}, {&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000001980)=""/148, 0x94}, {&(0x7f0000001a40)=""/182, 0xb6}], 0x7, &(0x7f0000001b80)=""/10, 0xa, 0x48ec}, 0x1) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r4, 0x111, 0x5, 0x6, 0x4) ioctl$KVM_KVMCLOCK_CTRL(r4, 0xaead) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000001c00)={0x0, 0x800}, &(0x7f0000001c40)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000001c80)={r6, 0xefb8}, &(0x7f0000001cc0)=0x8) ioctl$FS_IOC_SETVERSION(r5, 0x40087602, &(0x7f0000001d00)=0xd9) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001d40)='/dev/hwrng\x00', 0x10000, 0x0) ioctl$KVM_SET_XSAVE(r0, 0x5000aea5, &(0x7f0000001d80)={"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"}) r8 = semget$private(0x0, 0x6, 0x404) semctl$SETALL(r8, 0x0, 0x11, &(0x7f0000002180)=[0x3]) getsockopt$EBT_SO_GET_ENTRIES(r7, 0x0, 0x81, &(0x7f0000002240)={'filter\x00', 0x0, 0x3, 0x5, [], 0x3, &(0x7f00000021c0)=[{}, {}, {}], &(0x7f0000002200)=""/5}, &(0x7f00000022c0)=0x78) recvmmsg(r5, &(0x7f0000009a40)=[{{&(0x7f0000002300)=@ethernet={0x0, @local}, 0x80, &(0x7f0000002880)=[{&(0x7f0000002380)=""/61, 0x3d}, {&(0x7f00000023c0)=""/113, 0x71}, {&(0x7f0000002440)}, {&(0x7f0000002480)=""/111, 0x6f}, {&(0x7f0000002500)=""/122, 0x7a}, {&(0x7f0000002580)=""/215, 0xd7}, {&(0x7f0000002680)=""/251, 0xfb}, {&(0x7f0000002780)=""/247, 0xf7}], 0x8, &(0x7f0000002900)=""/151, 0x97, 0x7fffffff}, 0x7f}, {{0x0, 0x0, &(0x7f0000003cc0)=[{&(0x7f00000029c0)=""/56, 0x38}, {&(0x7f0000002a00)=""/187, 0xbb}, {&(0x7f0000002ac0)=""/153, 0x99}, {&(0x7f0000002b80)=""/180, 0xb4}, {&(0x7f0000002c40)=""/4096, 0x1000}, {&(0x7f0000003c40)=""/68, 0x44}], 0x6, &(0x7f0000003d40)=""/67, 0x43, 0x5}, 0x7}, {{&(0x7f0000003dc0)=@generic, 0x80, &(0x7f0000003f00)=[{&(0x7f0000003e40)=""/170, 0xaa}], 0x1, &(0x7f0000003f40)=""/70, 0x46, 0x3fe}, 0x4}, {{0x0, 0x0, &(0x7f00000073c0)=[{&(0x7f0000003fc0)=""/212, 0xd4}, {&(0x7f00000040c0)=""/229, 0xe5}, {&(0x7f00000041c0)=""/86, 0x56}, {&(0x7f0000004240)=""/4096, 0x1000}, {&(0x7f0000005240)=""/49, 0x31}, {&(0x7f0000005280)=""/61, 0x3d}, {&(0x7f00000052c0)=""/5, 0x5}, {&(0x7f0000005300)=""/4096, 0x1000}, {&(0x7f0000006300)=""/4096, 0x1000}, {&(0x7f0000007300)=""/168, 0xa8}], 0xa, 0x0, 0x0, 0x2}, 0xe3d}, {{&(0x7f0000007480)=@ipx, 0x80, &(0x7f0000009980)=[{&(0x7f0000007500)=""/82, 0x52}, {&(0x7f0000007580)=""/208, 0xd0}, {&(0x7f0000007680)=""/223, 0xdf}, {&(0x7f0000007780)=""/4096, 0x1000}, {&(0x7f0000008780)=""/4096, 0x1000}, {&(0x7f0000009780)}, {&(0x7f00000097c0)=""/117, 0x75}, {&(0x7f0000009840)=""/220, 0xdc}, {&(0x7f0000009940)=""/17, 0x11}], 0x9, 0x0, 0x0, 0x6}, 0xffffffffffffffff}], 0x5, 0x40, &(0x7f0000009b80)) ioctl$TIOCSTI(r1, 0x5412, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000009bc0)={'filter\x00', 0x1a, "8f091d6c90fca7daaf75ecb8c2d2e588738c0d74d50032fffebf"}, &(0x7f0000009c00)=0x3e) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f0000009c40)="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") 02:46:07 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr, 0x0, 0x2b}, 0x0, @in6=@mcast2}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 02:46:07 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, &(0x7f0000000040), 0x0, 0x8001, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0xffdc) readv(r1, &(0x7f00000000c0)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1) [ 255.525258] IPVS: set_ctl: invalid protocol: 173 0.0.0.0:20004 [ 255.538572] binder: release 7609:7611 transaction 5 out, still active [ 255.545490] binder: undelivered TRANSACTION_COMPLETE [ 255.551237] binder: 7611 RLIMIT_NICE not set [ 255.556005] binder: 7611 RLIMIT_NICE not set [ 255.663104] IPVS: set_ctl: invalid protocol: 173 0.0.0.0:20004 02:46:07 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, &(0x7f0000000040), 0x0, 0x8001, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0xffdc) readv(r1, &(0x7f00000000c0)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1) 02:46:07 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, &(0x7f00000003c0)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) [ 255.746105] binder: release 7609:7611 transaction 5 in, still active [ 255.752949] binder: send failed reply for transaction 5, target dead 02:46:07 executing program 2: clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f00000003c0), 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000560], 0x7, &(0x7f0000000080), &(0x7f0000000500)=[{0x0, '\x00', 0x0, 0x0, 0x6000}, {}, {}]}, 0x108) 02:46:08 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x6, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x27}}, &(0x7f0000000240)="47504c0083ff130f5fb00e5d5b644354b6e27770c5a6241e8defd6533e2ae106be655c6c526349216c30bb1f80fb450ec0d5be", 0x1, 0x99, &(0x7f0000000180)=""/153}, 0x48) [ 256.042319] binder: release 7625:7629 transaction 7 out, still active [ 256.049083] binder: undelivered TRANSACTION_COMPLETE [ 256.056418] binder: 7629 RLIMIT_NICE not set [ 256.061065] binder: 7629 RLIMIT_NICE not set [ 256.077419] kernel msg: ebtables bug: please report to author: Chains don't start at beginning 02:46:08 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x100000011, @multicast2, 0xfffffffffffffffd, 0x0, 'lblc\x00'}, 0x2c) r2 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x11, @dev, 0x88, 0x0, 'lblcr\x00'}, 0x2c) 02:46:08 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xfffffffffffffff9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 256.163633] kernel msg: ebtables bug: please report to author: Chains don't start at beginning 02:46:08 executing program 4: socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000740)={0x2, {{0xa, 0x4e24, 0xfffffffc, @mcast2, 0x6}}}, 0x88) r1 = socket$inet(0x10, 0x3, 0x6) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000700)={0x0, @local, @loopback}, &(0x7f00000000c0)=0xc) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6=@mcast1}, 0x0, @in6=@ipv4={[], [], @remote}}}, &(0x7f0000000680)=0xe8) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000000240)='/dev/admmidi#\x00', 0x80, 0xa00) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000280)={0xaa, 0x4}) r3 = syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) setxattr$trusted_overlay_nlink(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000800)='trusted.overlay.nlink\x00', &(0x7f0000000840)={'U+', 0x3}, 0x28, 0x3) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000340)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000], 0x7fffffff, 0xfff, 0x5, 0x3, 0xffffffffffffffff}) 02:46:08 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, &(0x7f0000000040), 0x0, 0x8001, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0xffdc) readv(r1, &(0x7f00000000c0)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1) 02:46:08 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x100000011, @multicast2, 0xfffffffffffffffd, 0x0, 'lblc\x00'}, 0x2c) r2 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x11, @dev, 0x0, 0x0, 'lblcr\x00'}, 0x2c) [ 256.452689] binder: release 7625:7629 transaction 7 in, still active [ 256.459998] binder: send failed reply for transaction 7, target dead [ 256.838549] ================================================================== [ 256.846003] BUG: KMSAN: uninit-value in vmap_page_range_noflush+0x975/0xed0 [ 256.853140] CPU: 1 PID: 7654 Comm: syz-executor4 Not tainted 4.19.0-rc4+ #66 [ 256.860341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 256.869713] Call Trace: [ 256.872344] dump_stack+0x306/0x460 [ 256.876014] ? vmap_page_range_noflush+0x975/0xed0 [ 256.881004] kmsan_report+0x1a2/0x2e0 [ 256.884852] __msan_warning+0x7c/0xe0 [ 256.888698] vmap_page_range_noflush+0x975/0xed0 [ 256.893555] map_vm_area+0x17d/0x1f0 [ 256.897306] kmsan_vmap+0xf2/0x180 [ 256.900886] vmap+0x3a1/0x510 [ 256.904031] ? relay_open_buf+0x81e/0x19d0 [ 256.908319] relay_open_buf+0x81e/0x19d0 [ 256.912440] relay_open+0xabb/0x1370 [ 256.916219] do_blk_trace_setup+0xaf7/0x1780 [ 256.920694] __blk_trace_setup+0x20b/0x380 [ 256.925002] blk_trace_ioctl+0x274/0x970 [ 256.929131] ? kmsan_set_origin_inline+0x6b/0x120 [ 256.934017] ? __msan_poison_alloca+0x17a/0x210 [ 256.938738] ? blkdev_ioctl+0x327/0x55e0 [ 256.942828] ? block_ioctl+0x16f/0x1d0 [ 256.946761] blkdev_ioctl+0x1aaa/0x55e0 [ 256.950787] ? task_kmsan_context_state+0x6b/0x120 [ 256.955754] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 256.961148] ? vmalloc_to_page+0x57d/0x6b0 [ 256.965431] ? kmsan_set_origin_inline+0x6b/0x120 [ 256.970328] block_ioctl+0x16f/0x1d0 [ 256.974080] ? block_llseek+0x190/0x190 [ 256.978093] do_vfs_ioctl+0xcf3/0x2810 [ 256.982025] ? security_file_ioctl+0x92/0x200 [ 256.986554] __se_sys_ioctl+0x1da/0x270 [ 256.990562] __x64_sys_ioctl+0x4a/0x70 [ 256.994488] do_syscall_64+0xbe/0x100 [ 256.998329] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 257.003544] RIP: 0033:0x457519 [ 257.006766] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 257.025706] RSP: 002b:00007f6327c2ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 257.033478] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457519 [ 257.040785] RDX: 0000000020000340 RSI: 00000000c0481273 RDI: 0000000000000005 [ 257.048087] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 257.055398] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6327c2f6d4 [ 257.062712] R13: 00000000004be982 R14: 00000000004ce680 R15: 00000000ffffffff [ 257.070030] [ 257.071677] Uninit was created at: [ 257.075252] kmsan_internal_poison_shadow+0xc8/0x1d0 [ 257.080395] kmsan_kmalloc+0xa4/0x120 [ 257.084240] __kmalloc+0x14b/0x440 [ 257.087821] kmsan_vmap+0x9b/0x180 [ 257.091399] vmap+0x3a1/0x510 [ 257.094539] relay_open_buf+0x81e/0x19d0 [ 257.098635] relay_open+0xabb/0x1370 [ 257.102386] do_blk_trace_setup+0xaf7/0x1780 [ 257.106827] __blk_trace_setup+0x20b/0x380 [ 257.111089] blk_trace_ioctl+0x274/0x970 [ 257.115187] blkdev_ioctl+0x1aaa/0x55e0 [ 257.119188] block_ioctl+0x16f/0x1d0 [ 257.122934] do_vfs_ioctl+0xcf3/0x2810 [ 257.126873] __se_sys_ioctl+0x1da/0x270 [ 257.130882] __x64_sys_ioctl+0x4a/0x70 [ 257.134796] do_syscall_64+0xbe/0x100 [ 257.138640] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 257.143848] ================================================================== [ 257.151234] Disabling lock debugging due to kernel taint [ 257.156717] Kernel panic - not syncing: panic_on_warn set ... [ 257.156717] [ 257.164133] CPU: 1 PID: 7654 Comm: syz-executor4 Tainted: G B 4.19.0-rc4+ #66 [ 257.172737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 257.182125] Call Trace: [ 257.184760] dump_stack+0x306/0x460 [ 257.185236] IPVS: ftp: loaded support on port[0] = 21 [ 257.188438] panic+0x54c/0xafa [ 257.196876] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 257.202403] kmsan_report+0x2d3/0x2e0 [ 257.206268] __msan_warning+0x7c/0xe0 [ 257.210116] vmap_page_range_noflush+0x975/0xed0 [ 257.214964] map_vm_area+0x17d/0x1f0 [ 257.218734] kmsan_vmap+0xf2/0x180 [ 257.222334] vmap+0x3a1/0x510 [ 257.225493] ? relay_open_buf+0x81e/0x19d0 [ 257.229785] relay_open_buf+0x81e/0x19d0 [ 257.233912] relay_open+0xabb/0x1370 [ 257.237690] do_blk_trace_setup+0xaf7/0x1780 [ 257.242166] __blk_trace_setup+0x20b/0x380 [ 257.246459] blk_trace_ioctl+0x274/0x970 [ 257.250581] ? kmsan_set_origin_inline+0x6b/0x120 [ 257.255468] ? __msan_poison_alloca+0x17a/0x210 [ 257.260187] ? blkdev_ioctl+0x327/0x55e0 [ 257.264309] ? block_ioctl+0x16f/0x1d0 [ 257.268241] blkdev_ioctl+0x1aaa/0x55e0 [ 257.272271] ? task_kmsan_context_state+0x6b/0x120 [ 257.277249] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 257.282653] ? vmalloc_to_page+0x57d/0x6b0 [ 257.286938] ? kmsan_set_origin_inline+0x6b/0x120 [ 257.291832] block_ioctl+0x16f/0x1d0 [ 257.295584] ? block_llseek+0x190/0x190 [ 257.299597] do_vfs_ioctl+0xcf3/0x2810 [ 257.304019] ? security_file_ioctl+0x92/0x200 [ 257.308564] __se_sys_ioctl+0x1da/0x270 [ 257.312585] __x64_sys_ioctl+0x4a/0x70 [ 257.316519] do_syscall_64+0xbe/0x100 [ 257.320368] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 257.325587] RIP: 0033:0x457519 [ 257.328814] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 257.347747] RSP: 002b:00007f6327c2ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 257.355501] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457519 [ 257.362815] RDX: 0000000020000340 RSI: 00000000c0481273 RDI: 0000000000000005 [ 257.370119] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 257.377428] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6327c2f6d4 [ 257.384752] R13: 00000000004be982 R14: 00000000004ce680 R15: 00000000ffffffff [ 257.393065] Kernel Offset: disabled [ 257.396715] Rebooting in 86400 seconds..