[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 18.992755] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 22.522267] random: sshd: uninitialized urandom read (32 bytes read) [ 22.857480] random: sshd: uninitialized urandom read (32 bytes read) [ 23.865561] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.8' (ECDSA) to the list of known hosts. [ 29.305312] random: sshd: uninitialized urandom read (32 bytes read) 2018/08/02 16:57:09 fuzzer started [ 30.817011] random: cc1: uninitialized urandom read (8 bytes read) 2018/08/02 16:57:12 dialing manager at 10.128.0.26:35479 2018/08/02 16:57:13 syscalls: 1696 2018/08/02 16:57:13 code coverage: enabled 2018/08/02 16:57:13 comparison tracing: enabled 2018/08/02 16:57:13 setuid sandbox: enabled 2018/08/02 16:57:13 namespace sandbox: enabled 2018/08/02 16:57:13 fault injection: enabled 2018/08/02 16:57:13 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/08/02 16:57:13 net packed injection: enabled 2018/08/02 16:57:13 net device setup: enabled [ 34.675311] random: crng init done 16:57:51 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000100)=""/72, &(0x7f0000000040)=0x8) 16:57:51 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") r1 = socket(0x40000000002, 0x3, 0x67) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='bridge0\x00', 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000a40)=[{{&(0x7f0000000000)=@pppoe={0x18, 0x0, {0x0, @empty, 'rose0\x00'}}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000d80)="5ca9dde555f03fa3499589b1da63ec6c68d44ee6f0ee9ff90f26284c405f116f1e90ee06d9d3dd264b3b2cb0b0870457dab080bd04468410aec81c1928bf275965894f8e22acb8a4e07125784aa51023956c22c0805c0a17da1694f1e1cbca3d655a8dc911ceb17f11db0700cdf8679f66befbdb87dc13651c995e6a0fa1d0cf2a", 0x81}], 0x1, &(0x7f0000003fc0)=ANY=[]}}], 0x1, 0x0) sendto$unix(r1, &(0x7f0000000080), 0xffeb, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0xd0000e0}, 0x63) 16:57:51 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000100)="025cc80700145f8f764070") bind$inet(r0, &(0x7f0000e13000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000000)=0x6, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xfffffdb5, 0x4040, 0x0, 0x0) close(r0) 16:57:51 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0xff) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xf}}}, 0x1c) io_setup(0x1a0, &(0x7f0000000180)=0x0) io_submit(r1, 0x1, &(0x7f0000356ff0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)}]) 16:57:51 executing program 6: request_key(&(0x7f0000000040)='id_resolver\x00', &(0x7f0000000140), &(0x7f00000001c0)=':cgroup-ppp1!mime_typewlan0[ppp0,$nodev]', 0xfffffffffffffffe) request_key(&(0x7f0000000280)='.request_key_auth\x00', &(0x7f00000002c0), &(0x7f0000000300)='bdev,*/cgroup!+nodevlovboxnet1', 0xfffffffffffffffa) r0 = epoll_create(0x2000000000000001) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) write$P9_RSTAT(r0, &(0x7f0000000080)={0x8f, 0x7d, 0x0, {0x0, 0x88, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1e, 'bdev,*/cgroup!+nodevlovboxnet1', 0x0, "", 0xf, '-$]%[vboxnet1+.', 0x28, ':cgroup-ppp1!mime_typewlan0[ppp0,$nodev]'}}, 0x8f) 16:57:51 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x910, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_adjtime(0x0, &(0x7f0000000280)) 16:57:51 executing program 2: request_key(&(0x7f0000000280)='.request_key_auth\x00', &(0x7f00000002c0), &(0x7f0000000300)='bdev,*/cgroup!+nodevlovboxnet1', 0xfffffffffffffffa) r0 = epoll_create(0x2000000000000001) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) write$P9_RSTAT(r0, &(0x7f0000000080)={0x8f, 0x7d, 0x0, {0x0, 0x88, 0x0, 0x0, {}, 0x0, 0x0, 0x80000001, 0x0, 0x1e, 'bdev,*/cgroup!+nodevlovboxnet1', 0x0, "", 0xf, '-$]%[vboxnet1+.', 0x28, ':cgroup-ppp1!mime_typewlan0[ppp0,$nodev]'}}, 0x8f) 16:57:51 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000000)=@srh, 0x8) sendmmsg(r2, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x80, &(0x7f0000005b00)}}], 0x1, 0x0) [ 71.625986] IPVS: ftp: loaded support on port[0] = 21 [ 71.649970] IPVS: ftp: loaded support on port[0] = 21 [ 71.681353] IPVS: ftp: loaded support on port[0] = 21 [ 71.714181] IPVS: ftp: loaded support on port[0] = 21 [ 71.741557] IPVS: ftp: loaded support on port[0] = 21 [ 71.748007] IPVS: ftp: loaded support on port[0] = 21 [ 71.767611] IPVS: ftp: loaded support on port[0] = 21 [ 71.767925] IPVS: ftp: loaded support on port[0] = 21 [ 72.631773] ip (4524) used greatest stack depth: 16648 bytes left [ 73.853653] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.860207] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.887186] device bridge_slave_0 entered promiscuous mode [ 73.898754] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.905169] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.924152] device bridge_slave_0 entered promiscuous mode [ 73.932909] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.939284] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.951132] device bridge_slave_0 entered promiscuous mode [ 73.966907] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.973342] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.980980] device bridge_slave_0 entered promiscuous mode [ 73.995315] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.001680] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.010755] device bridge_slave_0 entered promiscuous mode [ 74.024855] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.031259] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.043413] device bridge_slave_0 entered promiscuous mode [ 74.051557] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.057982] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.066890] device bridge_slave_0 entered promiscuous mode [ 74.076222] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.082597] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.095478] device bridge_slave_1 entered promiscuous mode [ 74.103669] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.110062] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.124141] device bridge_slave_1 entered promiscuous mode [ 74.133086] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.139458] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.150818] device bridge_slave_0 entered promiscuous mode [ 74.159965] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.166445] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.176493] device bridge_slave_1 entered promiscuous mode [ 74.184689] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.191063] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.204745] device bridge_slave_1 entered promiscuous mode [ 74.220124] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.226504] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.239978] device bridge_slave_1 entered promiscuous mode [ 74.246547] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.253072] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.261566] device bridge_slave_1 entered promiscuous mode [ 74.271271] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.277634] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.285891] device bridge_slave_1 entered promiscuous mode [ 74.293738] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 74.302453] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 74.311247] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 74.319103] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 74.326431] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.332828] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.351976] device bridge_slave_1 entered promiscuous mode [ 74.373792] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 74.389156] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 74.411711] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 74.423560] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 74.445295] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 74.453822] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 74.466855] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 74.497817] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 74.505997] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 74.518819] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 74.566388] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 74.669738] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 74.838843] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 74.849844] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 74.869988] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 74.878671] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 74.907414] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 74.928635] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 74.981094] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 74.995263] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 75.005916] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 75.015327] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 75.031737] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 75.043824] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 75.081134] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 75.111219] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 75.133826] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 75.269088] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 75.291281] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 75.298165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.309736] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 75.318217] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 75.325132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.338616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.357985] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 75.377084] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 75.385277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.401482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.428610] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 75.435499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.499256] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 75.519955] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.567816] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 75.574751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.662179] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 75.677805] team0: Port device team_slave_0 added [ 75.685557] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 75.695491] team0: Port device team_slave_0 added [ 75.716393] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 75.731699] team0: Port device team_slave_0 added [ 75.747050] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 75.770834] team0: Port device team_slave_0 added [ 75.800323] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 75.807976] team0: Port device team_slave_0 added [ 75.815831] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 75.832820] team0: Port device team_slave_1 added [ 75.840428] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 75.849259] team0: Port device team_slave_1 added [ 75.856607] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 75.869542] team0: Port device team_slave_1 added [ 75.887249] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 75.898752] team0: Port device team_slave_0 added [ 75.906258] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 75.931490] team0: Port device team_slave_1 added [ 75.947720] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 75.964710] team0: Port device team_slave_1 added [ 75.978674] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.997733] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.027389] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 76.038337] team0: Port device team_slave_0 added [ 76.054556] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 76.068510] team0: Port device team_slave_1 added [ 76.078476] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 76.094420] team0: Port device team_slave_0 added [ 76.111509] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.123643] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.146638] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.161581] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.177039] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 76.184696] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.206828] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.220973] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.233190] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 76.242139] team0: Port device team_slave_1 added [ 76.249922] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 76.263865] team0: Port device team_slave_1 added [ 76.279993] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 76.289728] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.310795] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.330153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.342151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.352316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.361427] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 76.368482] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.377281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.388582] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 76.395646] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.404158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.415505] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 76.425105] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.434505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.453011] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 76.464044] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 76.470998] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.489627] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.504731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.518327] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.527153] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 76.534266] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.542212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.550827] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 76.558116] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 76.566778] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 76.575628] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 76.584631] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 76.593641] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 76.612453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.638804] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.679440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.696835] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.704669] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.712586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.720385] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.728201] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.735845] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.743638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.751300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.759129] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.773866] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 76.780788] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.795135] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.814480] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 76.825768] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 76.834769] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 76.860601] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 76.869189] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.889607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.928911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.944602] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.952261] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.959949] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.967721] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.975405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.996164] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 77.006149] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.021743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 77.051956] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 77.072866] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 77.086940] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 77.185500] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 77.192784] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.202251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 78.077908] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.084452] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.091458] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.097850] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.127640] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 78.144099] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.150471] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.157134] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.163494] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.199650] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 78.207637] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.214005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.220690] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.227090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.234533] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 78.240923] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.247306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.253973] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.260353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.270130] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 78.287743] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.294135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.300809] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.307204] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.351968] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 78.371461] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 78.389825] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 78.403702] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 78.413641] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 78.420721] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 78.439167] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.445541] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.452206] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.458566] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.502570] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 78.523618] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.530044] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.536699] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.543079] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.575987] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 78.810326] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.816739] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.823403] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.829793] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.855063] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 79.396409] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.407480] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.432533] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.256634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.272586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.300155] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.320562] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.480244] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.659436] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.683767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.703252] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 83.712627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.738351] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 83.756574] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 83.820321] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 83.994088] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 84.100577] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 84.106939] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 84.115498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.150190] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 84.160631] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 84.182813] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 84.189375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 84.198689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.227495] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 84.273756] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 84.279933] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 84.289446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.351384] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 84.357591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 84.370892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.496545] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 84.502748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 84.514715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.556670] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 84.562960] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 84.576793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.667368] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 84.673547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 84.682928] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.709137] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.728993] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.752129] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 84.764217] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.787312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 84.798690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.953389] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.033741] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.129120] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.207710] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.223292] 8021q: adding VLAN 0 to HW filter on device team0 16:58:07 executing program 2: 16:58:07 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000100)=""/72, &(0x7f0000000040)=0x8) 16:58:07 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], &(0x7f0000000080)=""/177, 0xb1) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000200), 0xc, &(0x7f00000007c0)={&(0x7f0000000180)=ANY=[]}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) 16:58:07 executing program 1: exit(0x0) r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x80440, 0x0) close(r0) socket$unix(0x1, 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local, 0x9}}, 0x5c) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000180)=ANY=[], 0x0) 16:58:07 executing program 7: 16:58:07 executing program 2: 16:58:07 executing program 7: 16:58:07 executing program 2: 16:58:07 executing program 7: [ 88.086364] raw_sendmsg: syz-executor0 forgot to set AF_INET. Fix it! [ 88.113204] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 16:58:08 executing program 0: 16:58:08 executing program 2: 16:58:08 executing program 3: 16:58:08 executing program 6: 16:58:08 executing program 7: 16:58:08 executing program 5: 16:58:08 executing program 4: 16:58:08 executing program 3: 16:58:08 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r2) r4 = socket(0xa, 0x1, 0x0) sendmsg$netlink(r3, &(0x7f0000005b00)={0x0, 0x0, &(0x7f0000005a00), 0x0, &(0x7f0000005a80)=[@rights={0x28, 0x1, 0x1, [r4, r1, r2, r1, r2]}], 0x28}, 0x0) recvmmsg(r1, &(0x7f0000005200)=[{{0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000480)=""/168, 0xa8}}, {{&(0x7f0000000540)=@vsock={0x0, 0x0, 0x0, @hyper}, 0x80, &(0x7f00000007c0), 0x0, &(0x7f0000000800)=""/240, 0xf0}}, {{&(0x7f0000002040)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000002400), 0x0, &(0x7f0000002480)=""/50, 0x32}}, {{0x0, 0x0, &(0x7f00000034c0), 0x0, &(0x7f0000003500)=""/131, 0x83}}, {{0x0, 0x0, &(0x7f0000003900), 0x0, &(0x7f0000003980)=""/114, 0x72}}, {{0x0, 0x0, &(0x7f0000004b80), 0x0, &(0x7f0000004bc0)=""/131, 0x83}}, {{&(0x7f0000004c80)=@nl, 0x80, &(0x7f0000005140), 0x0, &(0x7f00000051c0)=""/57, 0x39}}], 0x4000000000002dd, 0x2, 0x0) 16:58:08 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r0) r1 = memfd_create(&(0x7f0000000580)='md5sumvboxnet0]\'ppp0ppp1,@\x00', 0x0) write(r1, &(0x7f00000000c0)="6963e642c3d8eeeda3a74e3deec6fc7bb9650b5de56946c568f95d22467190ba3b6d59a5958d6fa9259c8a2ac4677b00000000000000000000200000f8bf54da32", 0x41) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 16:58:08 executing program 1: 16:58:08 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000040)) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000000c0), 0x4) 16:58:08 executing program 2: exit(0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in=@multicast1, @in6=@mcast1}}, {{@in6}, 0x0, @in=@loopback}}, 0xfffffffffffffe7b) 16:58:08 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc80700145f8f764070") r1 = perf_event_open(&(0x7f0000c86f88)={0x4000000000002, 0x70, 0x11}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000003c40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000003c80)=0x14, 0x0) ioctl$void(r1, 0x5450) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000040)={{{@in6=@ipv4={[], [], @rand_addr}, @in=@dev}}, {{@in6=@dev}}}, &(0x7f0000000140)=0xe8) 16:58:08 executing program 3: 16:58:08 executing program 5: 16:58:08 executing program 7: 16:58:08 executing program 6: 16:58:08 executing program 5: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/247, 0xffffff50}], 0x1000000000000005, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xaa1000)=nil, 0xaa1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) madvise(&(0x7f00001a2000/0xc00000)=nil, 0xc00000, 0x4000000000000008) 16:58:08 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x858, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) get_mempolicy(&(0x7f0000000100), &(0x7f00000000c0), 0x0, &(0x7f0000fff000/0x1000)=nil, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f0000000040), 0xc, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000000606ffff0000000000000000000000009de6b56d04aefa890e05329194e263f944f16a7c"], 0x28}}, 0x0) 16:58:08 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x546) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, &(0x7f0000000100)) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000140)={'bridge0\x00', {0x2, 0x0, @remote}}) r1 = dup2(r0, r0) flistxattr(0xffffffffffffffff, &(0x7f0000000440)=""/4096, 0x1000) bind$unix(0xffffffffffffffff, &(0x7f0000001440)=@file={0x1, './file0\x00'}, 0x6e) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000014c0)) getgid() bind$unix(0xffffffffffffffff, &(0x7f0000001500)=@file={0x1, './file0\x00'}, 0x6e) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000015c0)={{}, "", [[], []]}, 0x220) ioctl$TCSETS(r1, 0x5402, &(0x7f00000020c0)={0x0, 0x0, 0xcd}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000003f40)) 16:58:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000d000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="0fc5d6d02e67260fc769002667ffe336660f383b826f6c66b9800000c00f326635002000000f3036660f3808df0fae42b066b9800000c00f326635008000000f300f063e6736660fe169b8", 0x4b}], 0x1, 0x10, &(0x7f0000000180), 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000001c0)={0x1, 0x0, [{}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:58:08 executing program 7: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000500)=@known='system.posix_acl_default\x00', &(0x7f00000001c0)=""/162, 0xffffffffffffffe5) 16:58:08 executing program 1: request_key(&(0x7f0000000040)='id_resolver\x00', &(0x7f0000000140), &(0x7f00000001c0)=':cgroup-ppp1!mime_typewlan0[ppp0,$nodev]', 0xfffffffffffffffe) request_key(&(0x7f0000000280)='.request_key_auth\x00', &(0x7f00000002c0), &(0x7f0000000300)='bdev,*/cgroup!+nodevlovboxnet1', 0xfffffffffffffffa) r0 = epoll_create(0x2000000000000001) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) write$P9_RSTAT(r0, &(0x7f0000000080)={0x8f, 0x7d, 0x0, {0x0, 0x88, 0x0, 0x0, {}, 0x0, 0x0, 0x80000001, 0x0, 0x1e, 'bdev,*/cgroup!+nodevlovboxnet1', 0x0, "", 0xf, '-$]%[vboxnet1+.', 0x28, ':cgroup-ppp1!mime_typewlan0[ppp0,$nodev]'}}, 0x8f) 16:58:08 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)="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", 0x0, 0x0) r1 = creat(&(0x7f0000000440)='./file0\x00', 0x0) ioctl$fiemap(r1, 0x40086602, &(0x7f0000000380)=ANY=[]) ioctl$FS_IOC_FSSETXATTR(r1, 0x6609, &(0x7f00000004c0)) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000100), 0x4) 16:58:08 executing program 6: 16:58:08 executing program 7: 16:58:08 executing program 4: 16:58:09 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000700)='/dev/sequencer\x00', 0x8000000901, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f79805854fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") sendfile(r0, r1, &(0x7f0000000000), 0x2b428a52) 16:58:09 executing program 1: 16:58:09 executing program 5: 16:58:09 executing program 0: 16:58:09 executing program 6: 16:58:09 executing program 3: 16:58:09 executing program 4: 16:58:09 executing program 7: 16:58:09 executing program 2: request_key(&(0x7f0000000040)='id_resolver\x00', &(0x7f0000000140), &(0x7f00000001c0)=':cgroup-ppp1!mime_typewlan0[ppp0,$nodev]', 0xfffffffffffffffe) request_key(&(0x7f0000000280)='.request_key_auth\x00', &(0x7f00000002c0), &(0x7f0000000300)='bdev,*/cgroup!+nodevlovboxnet1', 0xfffffffffffffffa) r0 = epoll_create(0x2000000000000001) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f0000000180), 0x4) 16:58:09 executing program 0: socketpair$inet6(0xa, 0xf, 0xbe2, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000000140)=0xe8) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000180)={@ipv4={[], [], @loopback}, 0x62, r1}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x88) recvfrom$inet6(r3, &(0x7f0000000200)=""/185, 0xfffffffffffffd42, 0x0, 0x0, 0xfffffffffffffdfb) bind$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e23}, 0x1c) r4 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r4, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in6={0xa, 0x4e23, 0x0, @mcast2}, 0x2b6}, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0x2e8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000180)='yeah\x00', 0x5) sendto$inet(r5, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) shutdown(r5, 0x1) 16:58:09 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x5) read(r1, &(0x7f0000009fc0)=""/235, 0xeb) close(r1) close(r2) 16:58:09 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0xfeba) syz_emit_ethernet(0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)) 16:58:09 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_cmd={0xb}}) 16:58:09 executing program 3: exit(0x0) r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x80440, 0x0) close(r0) socket$unix(0x1, 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}}, 0x5c) 16:58:09 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1_mb\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={&(0x7f0000000000), 0xc, &(0x7f0000000400)={&(0x7f0000000380)=@ipv6_getroute={0x1c}, 0x1c}}, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x10800, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='&[\x00', 0xffffffffffffff9c}, 0x10) linkat(r2, &(0x7f00000000c0)='./file0\x00', r3, &(0x7f0000000200)='./file0\x00', 0x1000) socket$vsock_dgram(0x28, 0x2, 0x0) 16:58:09 executing program 6: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000100)={0x1d, r1}, 0x10) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x20000000000, 0x0) connect$l2tp(r2, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e22, @broadcast}, 0x4, 0x2, 0x1, 0x4}}, 0x2e) 16:58:09 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) fcntl$setstatus(r1, 0x4, 0x8000000000000800) connect$vsock_dgram(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @my=0x0}, 0x10) r2 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x100) bind$rds(r2, &(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10) 16:58:09 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(sha224,ecb-camellia-aesni)\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x9) r1 = socket$inet(0x2, 0x6, 0xfffffffffffffffe) delete_module(&(0x7f0000000080)='aead\x00', 0x200) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000040)={0x0, '\x00', 0x3}, 0x18) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000140)={{{@in6=@mcast2}}, {{@in6=@remote}, 0x0, @in=@dev}}, &(0x7f0000000000)=0xe8) 16:58:09 executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) stat(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000480)) read$FUSE(r0, &(0x7f0000001000), 0x1000) read$FUSE(r0, &(0x7f00000070c0), 0x1000) utimes(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)={{0x77359400}}) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_DIRENT(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="90000000000000000200000000000000010000000000000000000000000000000b000000000000006583316e6f646576656d3100000000000000000000000000000000000000000001000000000000002c00000000000000000000000000000000000000000000001c000000000000002b73797374656dcc6370757365746367726f7570246367726f75701500000000"], 0x90) 16:58:09 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x100, 0x0) epoll_pwait(r1, &(0x7f0000000040)=[{}, {}, {}, {}], 0x4, 0xff, &(0x7f0000000080)={0x5}, 0x8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0}, &(0x7f0000000400)=0xc) sendmsg$nl_route(r0, &(0x7f0000000500)={&(0x7f0000000240), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000002000010000000000000000000200000000000000000000011c000000bf9c382b5c0af827898cd14a1c96080700000000000008000b000000", @ANYRES32=0x0, @ANYRES32=r2], 0x44}}, 0x0) inotify_init1(0x80800) 16:58:09 executing program 1: unshare(0x2000400) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x10000, 0x0) ioctl$KVM_GET_PIT2(r0, 0x8070ae9f, &(0x7f0000000180)) r1 = getegid() r2 = getegid() setgroups(0x2, &(0x7f0000000140)=[r1, r2]) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00') ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000200)) mq_getsetattr(r3, &(0x7f0000000000), &(0x7f0000000080)) unlinkat(r3, &(0x7f00000000c0)='\x00', 0x200) [ 89.817006] ------------[ cut here ]------------ [ 89.823988] ODEBUG: init active (active state 0) object type: timer_list hint: delayed_work_timer_fn+0x0/0x90 [ 89.834257] WARNING: CPU: 1 PID: 6659 at lib/debugobjects.c:329 debug_print_object+0x16a/0x210 [ 89.843003] Kernel panic - not syncing: panic_on_warn set ... [ 89.843003] [ 89.850371] CPU: 1 PID: 6659 Comm: syz-executor2 Not tainted 4.18.0-rc7+ #76 [ 89.857559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 89.866902] Call Trace: [ 89.869489] dump_stack+0x1c9/0x2b4 [ 89.873111] ? dump_stack_print_info.cold.2+0x52/0x52 [ 89.878292] panic+0x238/0x4e7 [ 89.881473] ? add_taint.cold.5+0x16/0x16 [ 89.885605] ? __warn.cold.8+0x148/0x1ba [ 89.889653] ? debug_print_object+0x16a/0x210 [ 89.894133] __warn.cold.8+0x163/0x1ba [ 89.898009] ? debug_print_object+0x16a/0x210 [ 89.902492] report_bug+0x252/0x2d0 [ 89.906104] do_error_trap+0x1fc/0x4d0 [ 89.909985] ? math_error+0x3e0/0x3e0 [ 89.913767] ? __internal_add_timer+0x2e0/0x2e0 [ 89.918427] ? vprintk_default+0x28/0x30 [ 89.922473] ? vprintk_func+0x81/0xe7 [ 89.926260] ? printk+0xa7/0xcf [ 89.929524] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 89.934349] do_invalid_op+0x1b/0x20 [ 89.938048] invalid_op+0x14/0x20 [ 89.941483] RIP: 0010:debug_print_object+0x16a/0x210 [ 89.946569] Code: 3a 87 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 92 00 00 00 48 8b 14 dd a0 74 3a 87 4c 89 f6 48 c7 c7 40 6a 3a 87 e8 86 b0 e6 fd <0f> 0b 83 05 29 e7 29 05 01 48 83 c4 18 5b 41 5c 41 5d 41 5e 41 5f [ 89.965731] RSP: 0018:ffff88019bac7608 EFLAGS: 00010086 [ 89.971074] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffc90005e24000 [ 89.978325] RDX: 00000000000272bf RSI: ffffffff81632481 RDI: 0000000000000001 [ 89.985576] RBP: ffff88019bac7648 R08: ffff88019ba54740 R09: ffffed003b623ec2 [ 89.992828] R10: ffffed003b623ec2 R11: ffff8801db11f617 R12: 0000000000000001 [ 90.000079] R13: ffffffff87f9c9e0 R14: ffffffff873a7040 R15: ffffffff816918a0 [ 90.007332] ? __internal_add_timer+0x2e0/0x2e0 [ 90.011987] ? vprintk_func+0x81/0xe7 [ 90.015773] ? debug_print_object+0x16a/0x210 [ 90.020251] __debug_object_init+0x8e9/0x12e0 [ 90.024733] ? debug_object_free+0x690/0x690 [ 90.029129] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 90.034130] ? trace_hardirqs_on+0xd/0x10 [ 90.038260] ? __debug_object_init+0x581/0x12e0 [ 90.042913] ? debug_object_free+0x690/0x690 [ 90.047312] ? mark_held_locks+0xc9/0x160 [ 90.051445] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 90.056014] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 90.061104] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 90.066101] ? trace_hardirqs_on+0xd/0x10 [ 90.070232] debug_object_init+0x16/0x20 [ 90.074275] init_timer_key+0xa9/0x490 [ 90.078150] ? __queue_work+0x1410/0x1410 [ 90.082279] ? init_timer_on_stack_key+0xe0/0xe0 [ 90.087022] ? __local_bh_enable_ip+0x161/0x230 [ 90.091675] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 90.096677] ? lock_sock_nested+0x9f/0x120 [ 90.100898] ? __lockdep_init_map+0x105/0x590 [ 90.105379] vsock_stream_connect+0xc7a/0xfc0 [ 90.109864] ? vsock_dgram_connect+0x500/0x500 [ 90.114433] ? lock_downgrade+0x8f0/0x8f0 [ 90.118563] ? finish_wait+0x430/0x430 [ 90.122436] ? lock_release+0xa30/0xa30 [ 90.126393] ? check_same_owner+0x340/0x340 [ 90.130704] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 90.136228] ? _copy_from_user+0xdf/0x150 [ 90.140359] ? security_socket_connect+0x94/0xc0 [ 90.145102] __sys_connect+0x37d/0x4c0 [ 90.148976] ? __ia32_sys_accept+0xb0/0xb0 [ 90.153199] ? kasan_check_read+0x11/0x20 [ 90.157328] ? do_raw_spin_unlock+0xa7/0x2f0 [ 90.161718] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 90.166289] ? kasan_check_write+0x14/0x20 [ 90.170505] ? do_raw_spin_lock+0xc1/0x200 [ 90.174726] ? kcov_close+0x20/0x20 [ 90.178336] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 90.183858] ? fput+0x130/0x1a0 [ 90.187123] ? kcov_close+0x20/0x20 [ 90.190733] __ia32_sys_connect+0x72/0xb0 [ 90.194867] do_fast_syscall_32+0x34d/0xfb2 [ 90.199174] ? do_int80_syscall_32+0x890/0x890 [ 90.203736] ? _raw_spin_unlock_irq+0x27/0x70 [ 90.208215] ? finish_task_switch+0x1d3/0x870 [ 90.212697] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 90.218220] ? syscall_return_slowpath+0x31d/0x5e0 [ 90.223142] ? sysret32_from_system_call+0x5/0x46 [ 90.227970] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 90.232799] entry_SYSENTER_compat+0x70/0x7f [ 90.237187] RIP: 0023:0xf7f0fcb9 [ 90.240530] Code: 55 08 8b 88 64 cd ff ff 8b 98 68 cd ff ff 89 c8 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 1c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 90.259706] RSP: 002b:00000000f5ec90cc EFLAGS: 00000296 ORIG_RAX: 000000000000016a [ 90.267396] RAX: ffffffffffffffda RBX: 0000000000000014 RCX: 0000000020000100 [ 90.274646] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 90.281899] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 90.289150] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 90.296400] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 90.303667] [ 90.303671] ====================================================== [ 90.303675] WARNING: possible circular locking dependency detected [ 90.303677] 4.18.0-rc7+ #76 Not tainted [ 90.303681] ------------------------------------------------------ [ 90.303685] syz-executor2/6659 is trying to acquire lock: [ 90.303687] 00000000eb9b85df ((console_sem).lock){-.-.}, at: down_trylock+0x13/0x70 [ 90.303697] [ 90.303700] but task is already holding lock: [ 90.303703] 000000000f3405be (&obj_hash[i].lock){-.-.}, at: __debug_object_init+0x127/0x12e0 [ 90.303713] [ 90.303716] which lock already depends on the new lock. [ 90.303718] [ 90.303720] [ 90.303723] the existing dependency chain (in reverse order) is: [ 90.303725] [ 90.303726] -> #3 (&obj_hash[i].lock){-.-.}: [ 90.303737] _raw_spin_lock_irqsave+0x96/0xc0 [ 90.303740] __debug_object_init+0x127/0x12e0 [ 90.303743] debug_object_init+0x16/0x20 [ 90.303746] hrtimer_init+0x97/0x480 [ 90.303748] init_dl_task_timer+0x1b/0x50 [ 90.303751] __sched_fork+0x2ae/0x590 [ 90.303754] init_idle+0x75/0x7a0 [ 90.303757] sched_init+0xbf3/0xd2c [ 90.303759] start_kernel+0x47d/0x949 [ 90.303763] x86_64_start_reservations+0x29/0x2b [ 90.303766] x86_64_start_kernel+0x76/0x79 [ 90.303769] secondary_startup_64+0xa5/0xb0 [ 90.303770] [ 90.303772] -> #2 (&rq->lock){-.-.}: [ 90.303783] _raw_spin_lock+0x2a/0x40 [ 90.303785] task_fork_fair+0x93/0x680 [ 90.303788] sched_fork+0x446/0xb40 [ 90.303791] copy_process.part.39+0x1bf5/0x70b0 [ 90.303794] _do_fork+0x291/0x12a0 [ 90.303797] kernel_thread+0x34/0x40 [ 90.303799] rest_init+0x22/0xe4 [ 90.303802] start_kernel+0x90e/0x949 [ 90.303805] x86_64_start_reservations+0x29/0x2b [ 90.303808] x86_64_start_kernel+0x76/0x79 [ 90.303811] secondary_startup_64+0xa5/0xb0 [ 90.303813] [ 90.303815] -> #1 (&p->pi_lock){-.-.}: [ 90.303825] _raw_spin_lock_irqsave+0x96/0xc0 [ 90.303828] try_to_wake_up+0xd2/0x12a0 [ 90.303830] wake_up_process+0x10/0x20 [ 90.303833] __up.isra.1+0x1c0/0x2a0 [ 90.303836] up+0x13c/0x1c0 [ 90.303839] __up_console_sem+0xbe/0x1b0 [ 90.303841] console_unlock+0x7a2/0x10b0 [ 90.303844] vprintk_emit+0x6c6/0xdf0 [ 90.303847] vprintk_default+0x28/0x30 [ 90.303849] vprintk_func+0x7a/0xe7 [ 90.303852] printk+0xa7/0xcf [ 90.303854] load_umh+0x51/0xbd [ 90.303857] do_one_initcall+0x127/0x913 [ 90.303861] kernel_init_freeable+0x49b/0x58e [ 90.303863] kernel_init+0x11/0x1b3 [ 90.303866] ret_from_fork+0x3a/0x50 [ 90.303868] [ 90.303869] -> #0 ((console_sem).lock){-.-.}: [ 90.303879] lock_acquire+0x1e4/0x540 [ 90.303882] _raw_spin_lock_irqsave+0x96/0xc0 [ 90.303885] down_trylock+0x13/0x70 [ 90.303888] __down_trylock_console_sem+0xae/0x200 [ 90.303891] console_trylock+0x15/0xa0 [ 90.303894] vprintk_emit+0x6ad/0xdf0 [ 90.303897] vprintk_default+0x28/0x30 [ 90.303899] vprintk_func+0x7a/0xe7 [ 90.303902] printk+0xa7/0xcf [ 90.303905] __warn_printk+0x8c/0xe0 [ 90.303908] debug_print_object+0x16a/0x210 [ 90.303911] __debug_object_init+0x8e9/0x12e0 [ 90.303914] debug_object_init+0x16/0x20 [ 90.303916] init_timer_key+0xa9/0x490 [ 90.303920] vsock_stream_connect+0xc7a/0xfc0 [ 90.303923] __sys_connect+0x37d/0x4c0 [ 90.303926] __ia32_sys_connect+0x72/0xb0 [ 90.303929] do_fast_syscall_32+0x34d/0xfb2 [ 90.303932] entry_SYSENTER_compat+0x70/0x7f [ 90.303933] [ 90.303936] other info that might help us debug this: [ 90.303938] [ 90.303940] Chain exists of: [ 90.303942] (console_sem).lock --> &rq->lock --> &obj_hash[i].lock [ 90.303954] [ 90.303957] Possible unsafe locking scenario: [ 90.303959] [ 90.303962] CPU0 CPU1 [ 90.303965] ---- ---- [ 90.303967] lock(&obj_hash[i].lock); [ 90.303974] lock(&rq->lock); [ 90.303980] lock(&obj_hash[i].lock); [ 90.303986] lock((console_sem).lock); [ 90.303992] [ 90.303994] *** DEADLOCK *** [ 90.303995] [ 90.303998] 2 locks held by syz-executor2/6659: [ 90.304000] #0: 000000000843c5e6 (sk_lock-AF_VSOCK){+.+.}, at: vsock_stream_connect+0x1e3/0xfc0 [ 90.304017] #1: 000000000f3405be (&obj_hash[i].lock){-.-.}, at: __debug_object_init+0x127/0x12e0 [ 90.304029] [ 90.304031] stack backtrace: [ 90.304036] CPU: 1 PID: 6659 Comm: syz-executor2 Not tainted 4.18.0-rc7+ #76 [ 90.304041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 90.304043] Call Trace: [ 90.304046] dump_stack+0x1c9/0x2b4 [ 90.304049] ? dump_stack_print_info.cold.2+0x52/0x52 [ 90.304052] ? vprintk_func+0xd0/0xe7 [ 90.304055] print_circular_bug.isra.36.cold.57+0x1bd/0x27d [ 90.304058] ? save_trace+0xe0/0x290 [ 90.304061] __lock_acquire+0x3449/0x5020 [ 90.304064] ? trace_hardirqs_on+0x10/0x10 [ 90.304067] ? trace_hardirqs_on+0x10/0x10 [ 90.304070] ? graph_lock+0x170/0x170 [ 90.304073] ? print_usage_bug+0xc0/0xc0 [ 90.304075] lock_acquire+0x1e4/0x540 [ 90.304078] ? down_trylock+0x13/0x70 [ 90.304081] ? lock_release+0xa30/0xa30 [ 90.304084] ? lock_downgrade+0x8f0/0x8f0 [ 90.304087] ? kvm_sched_clock_read+0x9/0x20 [ 90.304089] ? sched_clock+0x31/0x40 [ 90.304092] ? vprintk_emit+0x6ad/0xdf0 [ 90.304095] _raw_spin_lock_irqsave+0x96/0xc0 [ 90.304098] ? down_trylock+0x13/0x70 [ 90.304101] down_trylock+0x13/0x70 [ 90.304104] __down_trylock_console_sem+0xae/0x200 [ 90.304107] console_trylock+0x15/0xa0 [ 90.304110] vprintk_emit+0x6ad/0xdf0 [ 90.304113] ? wake_up_klogd+0x110/0x110 [ 90.304116] ? print_usage_bug+0xc0/0xc0 [ 90.304118] ? __lock_acquire+0x7fc/0x5020 [ 90.304121] ? print_usage_bug+0xc0/0xc0 [ 90.304124] ? __internal_add_timer+0x2e0/0x2e0 [ 90.304127] vprintk_default+0x28/0x30 [ 90.304130] vprintk_func+0x7a/0xe7 [ 90.304132] printk+0xa7/0xcf [ 90.304136] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 90.304138] ? lock_acquire+0x1e4/0x540 [ 90.304141] ? __warn_printk+0x80/0xe0 [ 90.304144] ? __queue_work+0x1410/0x1410 [ 90.304147] __warn_printk+0x8c/0xe0 [ 90.304149] ? test_taint+0x20/0x20 [ 90.304152] ? print_usage_bug+0xc0/0xc0 [ 90.304155] ? __queue_work+0x1410/0x1410 [ 90.304158] debug_print_object+0x16a/0x210 [ 90.304161] __debug_object_init+0x8e9/0x12e0 [ 90.304164] ? debug_object_free+0x690/0x690 [ 90.304167] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 90.304170] ? trace_hardirqs_on+0xd/0x10 [ 90.304173] ? __debug_object_init+0x581/0x12e0 [ 90.304176] ? debug_object_free+0x690/0x690 [ 90.304179] ? mark_held_locks+0xc9/0x160 [ 90.304182] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 90.304185] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 90.304189] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 90.304191] ? trace_hardirqs_on+0xd/0x10 [ 90.304194] debug_object_init+0x16/0x20 [ 90.304197] init_timer_key+0xa9/0x490 [ 90.304200] ? __queue_work+0x1410/0x1410 [ 90.304203] ? init_timer_on_stack_key+0xe0/0xe0 [ 90.304206] ? __local_bh_enable_ip+0x161/0x230 [ 90.304209] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 90.304212] ? lock_sock_nested+0x9f/0x120 [ 90.304215] ? __lockdep_init_map+0x105/0x590 [ 90.304218] vsock_stream_connect+0xc7a/0xfc0 [ 90.304221] ? vsock_dgram_connect+0x500/0x500 [ 90.304224] ? lock_downgrade+0x8f0/0x8f0 [ 90.304227] ? finish_wait+0x430/0x430 [ 90.304230] ? lock_release+0xa30/0xa30 [ 90.304233] ? check_same_owner+0x340/0x340 [ 90.304236] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 90.304239] ? _copy_from_user+0xdf/0x150 [ 90.304242] ? security_socket_connect+0x94/0xc0 [ 90.304245] __sys_connect+0x37d/0x4c0 [ 90.304248] ? __ia32_sys_accept+0xb0/0xb0 [ 90.304251] ? kasan_check_read+0x11/0x20 [ 90.304254] ? do_raw_spin_unlock+0xa7/0x2f0 [ 90.304257] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 90.304260] ? kasan_check_write+0x14/0x20 [ 90.304263] ? do_raw_spin_lock+0xc1/0x200 [ 90.304265] ? kcov_close+0x20/0x20 [ 90.304269] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 90.304280] ? fput+0x130/0x1a0 [ 90.304282] ? kcov_close+0x20/0x20 [ 90.304285] __ia32_sys_connect+0x72/0xb0 [ 90.304288] do_fast_syscall_32+0x34d/0xfb2 [ 90.304291] ? do_int80_syscall_32+0x890/0x890 [ 90.304294] ? _raw_spin_unlock_irq+0x27/0x70 [ 90.304297] ? finish_task_switch+0x1d3/0x870 [ 90.304301] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 90.304304] ? syscall_return_slowpath+0x31d/0x5e0 [ 90.304307] ? sysret32_from_system_call+0x5/0x46 [ 90.304310] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 90.304313] entry_SYSENTER_compat+0x70/0x7f [ 90.304316] RIP: 0023:0xf7f0fcb9 [ 90.304317] Code: 55 08 8b 88 64 cd ff ff 8b 98 68 cd ff ff 89 c8 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 1c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 90.304423] RSP: 002b:00000000f5ec90cc EFLAGS: 00000296 ORIG_RAX: 000000000000016a [ 90.304430] RAX: ffffffffffffffda RBX: 0000000000000014 RCX: 0000000020000100 [ 90.304434] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 90.304438] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 90.304442] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 90.304447] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 90.304912] Dumping ftrace buffer: [ 91.210101] (ftrace buffer empty) [ 91.213789] Kernel Offset: disabled [ 91.217396] Rebooting in 86400 seconds..