[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 40.956896] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 44.414950] random: sshd: uninitialized urandom read (32 bytes read) [ 44.883206] random: sshd: uninitialized urandom read (32 bytes read) [ 46.000579] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.15.204' (ECDSA) to the list of known hosts. [ 51.893212] random: sshd: uninitialized urandom read (32 bytes read) 2018/08/31 08:15:05 fuzzer started [ 53.326695] random: cc1: uninitialized urandom read (8 bytes read) 2018/08/31 08:15:08 dialing manager at 10.128.0.26:36423 2018/08/31 08:15:10 syscalls: 1 2018/08/31 08:15:10 code coverage: enabled 2018/08/31 08:15:10 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/08/31 08:15:10 setuid sandbox: enabled 2018/08/31 08:15:10 namespace sandbox: enabled 2018/08/31 08:15:10 fault injection: enabled 2018/08/31 08:15:10 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/08/31 08:15:10 net packed injection: enabled 2018/08/31 08:15:10 net device setup: enabled [ 59.048936] random: crng init done 08:17:11 executing program 0: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000000), 0xffffff0c, 0x0) 08:17:11 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007fc, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1) recvfrom(r0, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307) close(r0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@remote, @in=@multicast1}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000200)=0xfffffffffffffd6d) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'bond_slave_0\x00'}) 08:17:11 executing program 7: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() 08:17:11 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x40, 0xa9, 0xa37, 0x1, 0x1}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r0, 0x28, &(0x7f0000000280)}, 0x10) perf_event_open$cgroup(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x40, 0xa9, 0xa37, 0x1, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r1, &(0x7f0000000280), &(0x7f0000001440)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000040)={r1, &(0x7f0000000340), &(0x7f0000001440)=""/4096}, 0x18) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000100)="cf", &(0x7f0000000180)=""/160}, 0x18) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r1, &(0x7f00000000c0)="01"}, 0x10) 08:17:11 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x224, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) recvmsg(r0, &(0x7f00000000c0)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000000)=[{&(0x7f0000003ac0)=""/4096, 0xfdbf}], 0x1, &(0x7f0000000200)=""/20, 0xfffffffffffffec4}, 0x100) shutdown(r0, 0x1) 08:17:11 executing program 4: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x540e, &(0x7f0000000240)) 08:17:11 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000200), 0x3, 0x0, &(0x7f00000003c0), &(0x7f00000004c0)=0x2, 0x1) 08:17:11 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000011000)) r1 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ftruncate(r1, 0x3) [ 179.339403] IPVS: ftp: loaded support on port[0] = 21 [ 179.344573] IPVS: ftp: loaded support on port[0] = 21 [ 179.354032] IPVS: ftp: loaded support on port[0] = 21 [ 179.381918] IPVS: ftp: loaded support on port[0] = 21 [ 179.429326] IPVS: ftp: loaded support on port[0] = 21 [ 179.432752] IPVS: ftp: loaded support on port[0] = 21 [ 179.446047] IPVS: ftp: loaded support on port[0] = 21 [ 179.464442] IPVS: ftp: loaded support on port[0] = 21 [ 182.212703] ip (4957) used greatest stack depth: 53880 bytes left [ 182.493127] ip (4974) used greatest stack depth: 53704 bytes left [ 183.892806] ip (5054) used greatest stack depth: 53576 bytes left [ 184.059144] ip (5062) used greatest stack depth: 53480 bytes left [ 184.409244] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.415749] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.460197] device bridge_slave_0 entered promiscuous mode [ 184.543754] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.550254] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.576880] device bridge_slave_0 entered promiscuous mode [ 184.612151] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.618624] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.655642] device bridge_slave_0 entered promiscuous mode [ 184.678682] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.685178] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.703981] device bridge_slave_0 entered promiscuous mode [ 184.720409] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.727007] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.755926] device bridge_slave_0 entered promiscuous mode [ 184.777092] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.783587] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.797801] device bridge_slave_0 entered promiscuous mode [ 184.810688] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.817149] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.828831] device bridge_slave_0 entered promiscuous mode [ 184.851815] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.858271] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.889297] device bridge_slave_0 entered promiscuous mode [ 184.914406] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.920945] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.933913] device bridge_slave_1 entered promiscuous mode [ 184.947156] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.953607] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.990111] device bridge_slave_1 entered promiscuous mode [ 185.008447] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.014954] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.032927] device bridge_slave_1 entered promiscuous mode [ 185.039665] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.046157] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.076678] device bridge_slave_1 entered promiscuous mode [ 185.092023] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.098581] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.118648] device bridge_slave_1 entered promiscuous mode [ 185.140727] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.147213] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.181986] device bridge_slave_1 entered promiscuous mode [ 185.202709] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.209159] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.225732] device bridge_slave_1 entered promiscuous mode [ 185.233894] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 185.241568] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.248013] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.282024] device bridge_slave_1 entered promiscuous mode [ 185.307434] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 185.328737] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 185.341224] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 185.349817] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 185.441674] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 185.460658] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 185.538764] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 185.601836] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 185.649590] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 185.665625] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 185.673063] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 185.694666] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 185.749399] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 185.841877] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 185.916608] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 186.442707] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 186.498643] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 186.582892] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 186.626343] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 186.701895] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 186.717046] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 186.747929] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 186.778450] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 186.830960] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 186.888049] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 186.900925] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 186.988343] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 187.020055] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 187.045450] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 187.074007] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 187.082228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 187.115230] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 187.169361] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 187.176553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 187.220813] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 187.235841] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 187.243326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 187.326980] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 187.334030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 187.352800] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 187.359865] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 187.410087] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 187.417135] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 187.437737] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 187.444713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 187.504802] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 187.512539] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 187.519439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 187.555660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 187.609047] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 187.620873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 187.655371] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 187.662322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 187.683715] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 187.695356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 187.715618] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 187.722616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 187.749303] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 187.764710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 187.870061] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 187.877118] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 187.973868] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 187.980868] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 188.459125] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 188.488172] team0: Port device team_slave_0 added [ 188.530183] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 188.563804] team0: Port device team_slave_0 added [ 188.640523] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 188.662607] team0: Port device team_slave_0 added [ 188.679909] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 188.695006] team0: Port device team_slave_0 added [ 188.739587] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 188.757658] team0: Port device team_slave_0 added [ 188.772645] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 188.785271] team0: Port device team_slave_0 added [ 188.822588] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 188.847263] team0: Port device team_slave_1 added [ 188.860942] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 188.883074] team0: Port device team_slave_0 added [ 188.890050] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 188.910252] team0: Port device team_slave_1 added [ 188.937406] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 188.956263] team0: Port device team_slave_0 added [ 188.988918] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 189.013802] team0: Port device team_slave_1 added [ 189.030154] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 189.053099] team0: Port device team_slave_1 added [ 189.069569] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 189.089165] team0: Port device team_slave_1 added [ 189.160171] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 189.178771] team0: Port device team_slave_1 added [ 189.191663] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 189.202079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 189.214748] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 189.244794] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 189.252752] team0: Port device team_slave_1 added [ 189.284069] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 189.294249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 189.313735] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 189.348734] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 189.361175] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 189.372122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 189.409987] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 189.442933] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 189.455714] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 189.479698] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 189.491596] team0: Port device team_slave_1 added [ 189.514122] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 189.526758] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 189.544011] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 189.564272] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 189.596411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 189.614223] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 189.630021] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 189.639783] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 189.653574] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 189.665292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 189.693150] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 189.718929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 189.747713] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 189.775763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 189.801761] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 189.824398] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 189.831403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 189.844079] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 189.863442] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 189.870616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 189.880117] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 189.924829] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 189.934398] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 189.951138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 189.984365] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 189.995491] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 190.003726] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 190.014678] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 190.024828] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 190.037728] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 190.066586] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 190.103107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 190.143552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 190.163852] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 190.190350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 190.204972] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 190.214988] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 190.227591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 190.237850] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 190.268418] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 190.281321] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 190.289043] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 190.301414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 190.323866] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 190.342867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 190.365616] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 190.373099] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 190.389812] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 190.412419] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 190.422766] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 190.434013] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 190.450001] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 190.459549] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 190.501825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 190.527309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 190.548303] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 190.576900] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 190.599183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 190.618391] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 190.628695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 190.664579] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 190.673564] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 190.683053] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 190.700737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 190.730399] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 190.749610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 190.772806] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 190.782607] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 190.797766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 190.817028] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 190.831427] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 190.842412] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 190.852025] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 190.882219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 190.908393] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 190.937797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 190.956577] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 190.974024] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 191.041042] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 191.049618] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 191.088238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 191.148701] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 191.156208] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 191.170012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 193.918807] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.925307] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.932218] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.938660] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.973193] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 193.979771] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 194.102898] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.109386] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.116232] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.122674] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.213987] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 194.300635] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.307130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.313977] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.320459] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.332363] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 194.353155] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.359635] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.366525] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.372988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.393678] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 194.402286] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.408824] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.415731] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.422193] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.472254] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 194.501743] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.508206] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.515099] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.521558] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.568296] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 194.620434] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.626965] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.633828] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.640277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.727274] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 194.756682] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.763152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.770014] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.776506] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.839407] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 195.030849] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 195.048575] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 195.075520] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 195.105881] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 195.126387] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 195.141059] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 195.155089] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 197.872173] ip (5741) used greatest stack depth: 53448 bytes left [ 207.051714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.121364] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.168769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.236995] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.277360] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.304566] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.667151] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.852121] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.279561] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 208.312663] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 208.344718] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 208.377230] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 208.517832] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 208.536570] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 208.936093] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 208.996287] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 209.482825] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 209.489202] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 209.507194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 209.579192] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 209.587358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 209.601691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 209.655073] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 209.667766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 209.684317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 209.707860] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 209.721253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 209.751078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 209.779968] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 209.787326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 209.803779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 209.825271] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 209.843964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 209.864766] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 210.183720] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 210.190053] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 210.202627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 210.230287] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 210.250521] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 210.276985] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 210.801038] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.854933] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.898073] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.960826] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.004193] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.041227] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.440710] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.495006] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.404917] hrtimer: interrupt took 44507 ns 08:17:51 executing program 4: r0 = socket(0x10, 0x20000000000003, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0}) recvmmsg(r0, &(0x7f0000001cc0), 0x400000000000091, 0x10102, &(0x7f0000001540)={r1}) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000180), 0xc, &(0x7f0000000080)={&(0x7f0000003080)={0x14, 0x1a, 0x201}, 0x14}}, 0x0) 08:17:51 executing program 6: ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f0000000040)=0x1) r0 = socket(0x10, 0x20000000000003, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000180), 0xc, &(0x7f0000000080)={&(0x7f0000003080)={0x14, 0x1a, 0x201}, 0x14}}, 0x0) 08:17:51 executing program 1: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) 08:17:51 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @rand_addr}}}, 0x84) r0 = socket(0x10, 0x20000000000003, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0}) recvmmsg(r0, &(0x7f0000001cc0), 0x400000000000059, 0x10102, &(0x7f0000001540)={r1}) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000180), 0xc, &(0x7f0000000080)={&(0x7f0000003080)={0x14, 0x1a, 0x201}, 0x14}}, 0x0) [ 218.967306] netlink: 3 bytes leftover after parsing attributes in process `syz-executor1'. 08:17:52 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000140)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x0, 0x0) close(r1) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) [ 219.016530] netlink: 3 bytes leftover after parsing attributes in process `syz-executor1'. 08:17:52 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fc7000)={0x5, 0xa, 0x4000000000080, 0x2}, 0x14) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000000)="61573df8abceb04b0449d56c68f062c44ced2d2f5103c715d9d4ed06b8f827bd27aa03f60b298a4ea311fcf029cfac7c7eca8bc6a8883c21f610291575add0f433", &(0x7f00000000c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000fcb000)={r0, &(0x7f0000fcbfff), &(0x7f00000001c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000040), &(0x7f00000001c0)}, 0x20) 08:17:52 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') 08:17:52 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000000040), 0x0, 0x20000001, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xcc000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) [ 219.473831] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 08:17:52 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fc7000)={0x5, 0xa, 0x4000000000080, 0x2}, 0x14) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', r0}, 0x10) 08:17:52 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket(0xa, 0x1, 0x0) r2 = gettid() socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@bridge_delneigh={0x1c, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r4, 0x93e, 0xf0ffffffffffff}}, 0x1c}}, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000ff8)={0xfffffffffffffdb0}, 0x8, 0x0) r7 = fcntl$dupfd(r1, 0x0, r6) write$FUSE_NOTIFY_INVAL_ENTRY(r7, &(0x7f0000000100)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '-bdevwlan0+'}}, 0x2c) tkill(r2, 0x31) read(r6, &(0x7f0000000080)=""/128, 0xae3f1a6) 08:17:52 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000140)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x0, 0x0) close(r1) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:17:52 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000140)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x0, 0x0) close(r1) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 08:17:52 executing program 3: syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x5c}, @dev}}}}}}, &(0x7f0000000140)) 08:17:52 executing program 4: perf_event_open(&(0x7f0000940000)={0x200000000002, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000000180), 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="00000b000c000100ffffffffffff0000"], 0x1}}, 0x0) 08:17:52 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-aesni\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x10) 08:17:52 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x5, 0x6, 0x4000000000080, 0x2}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r0, &(0x7f00000000c0), &(0x7f0000000180)=""/161}, 0x18) 08:17:52 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fc7000)={0x5, 0x6, 0x4000000000080, 0x2}, 0x2c) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000080)={r0, &(0x7f0000000040), &(0x7f00000001c0)}, 0x20) 08:17:53 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000340), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x400}]}, 0x10) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000340)=0x800000001ff, 0x10000038f) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r0, 0x8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$l2tp(0xffffffffffffffff, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2, 0x0, 0x0, 0x1}}, 0x2e) sendto$inet6(r1, &(0x7f0000000040), 0xfe30, 0x20000006, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @empty={[0xe00000000000000]}, 0x5}, 0x1c) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, &(0x7f0000000280)) 08:17:53 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x20000000000003, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000180), 0xc, &(0x7f0000000080)={&(0x7f0000003080)={0x14, 0x1a, 0x201}, 0x14}}, 0x0) 08:17:53 executing program 1: r0 = memfd_create(&(0x7f00000000c0)='fd\x00', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) utimensat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={{0x0, 0x2710}}, 0x0) 08:17:53 executing program 4: r0 = socket$inet6(0xa, 0x100000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400218) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) 08:17:53 executing program 3: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000000)="1f0000000104fffffd3b54c007110000f30501000b000200000000000500cf", 0x1f) 08:17:53 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) [ 220.430678] netlink: 3 bytes leftover after parsing attributes in process `syz-executor3'. [ 220.480252] netlink: 3 bytes leftover after parsing attributes in process `syz-executor3'. 08:17:58 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000000040), 0x0, 0x20000001, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xcc000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) 08:17:58 executing program 6: r0 = socket$inet6(0xa, 0x100000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400218) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) 08:17:58 executing program 1: r0 = memfd_create(&(0x7f00000000c0)='fd\x00', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) utimensat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={{0x0, 0x2710}}, 0x0) 08:17:58 executing program 4: r0 = socket$inet6(0xa, 0x100000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400218) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x7b, &(0x7f0000000040)={r3}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x7a, &(0x7f00000000c0)={r4}, &(0x7f00000001c0)=0x10) 08:17:58 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000100)=@nullb='/dev/nullb0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='btrfs\x00', 0x0, 0x0) 08:17:58 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x20000000000003, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000180), 0xc, &(0x7f0000000080)={&(0x7f0000003080)={0x14, 0x1a, 0x201}, 0x14}}, 0x0) 08:17:58 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 08:17:58 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000340), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x400}]}, 0x10) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000340)=0x800000001ff, 0x10000038f) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r0, 0x8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$l2tp(0xffffffffffffffff, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2, 0x0, 0x0, 0x1}}, 0x2e) sendto$inet6(r1, &(0x7f0000000040), 0xfe30, 0x20000006, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @empty={[0xe00000000000000]}, 0x5}, 0x1c) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, &(0x7f0000000280)) [ 225.091374] ================================================================== [ 225.098946] BUG: KMSAN: uninit-value in btrfs_scan_one_device+0x4c8/0x14e0 [ 225.105993] CPU: 0 PID: 7034 Comm: syz-executor5 Not tainted 4.19.0-rc1+ #39 [ 225.113188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 225.122555] Call Trace: [ 225.125170] dump_stack+0x14b/0x190 [ 225.128832] kmsan_report+0x183/0x2b0 [ 225.132663] __msan_warning+0x70/0xc0 [ 225.136504] btrfs_scan_one_device+0x4c8/0x14e0 [ 225.141205] ? rcu_all_qs+0x2e/0x1f0 [ 225.144956] ? _cond_resched+0x38/0xc0 [ 225.148954] ? rcu_all_qs+0x2e/0x1f0 [ 225.152711] btrfs_mount_root+0xcab/0x22e0 [ 225.156972] ? pcpu_alloc+0x1ce1/0x20a0 [ 225.161014] ? btrfs_control_open+0x80/0x80 [ 225.165361] mount_fs+0x28f/0x760 [ 225.168864] vfs_kern_mount+0x21b/0x8d0 [ 225.172890] btrfs_mount+0x8b2/0x2f40 [ 225.176738] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 225.182184] ? btrfs_resize_thread_pool+0x5e0/0x5e0 [ 225.187227] mount_fs+0x28f/0x760 [ 225.190715] vfs_kern_mount+0x21b/0x8d0 [ 225.194727] do_mount+0xcee/0x56b0 [ 225.198285] ? copy_mount_options+0x54/0x650 [ 225.202709] ? ksys_mount+0x251/0x3d0 [ 225.206553] ksys_mount+0x32e/0x3d0 [ 225.210241] __x64_sys_mount+0x157/0x1c0 [ 225.214334] ? ksys_mount+0x3d0/0x3d0 [ 225.218156] do_syscall_64+0x15b/0x220 [ 225.222074] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 225.227282] RIP: 0033:0x457099 [ 225.230505] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 225.249445] RSP: 002b:00007f9cf6d29c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 225.257199] RAX: ffffffffffffffda RBX: 00007f9cf6d2a6d4 RCX: 0000000000457099 [ 225.264492] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000020000100 [ 225.272245] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 225.279543] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 225.286840] R13: 00000000004d2eb0 R14: 00000000004c7f78 R15: 0000000000000000 [ 225.294136] [ 225.295768] Uninit was created at: [ 225.299331] kmsan_internal_alloc_meta_for_pages+0x146/0x700 [ 225.305153] kmsan_alloc_page+0x75/0xd0 [ 225.309161] __alloc_pages_nodemask+0xf6b/0x5c80 [ 225.313952] alloc_pages_current+0x6b1/0x970 [ 225.318397] __page_cache_alloc+0x95/0x320 [ 225.322662] do_read_cache_page+0x829/0x1630 [ 225.327098] read_cache_page_gfp+0xe9/0x120 [ 225.331472] btrfs_scan_one_device+0x297/0x14e0 [ 225.336166] btrfs_mount_root+0xcab/0x22e0 [ 225.340431] mount_fs+0x28f/0x760 [ 225.343932] vfs_kern_mount+0x21b/0x8d0 [ 225.347939] btrfs_mount+0x8b2/0x2f40 [ 225.351760] mount_fs+0x28f/0x760 [ 225.355232] vfs_kern_mount+0x21b/0x8d0 [ 225.359218] do_mount+0xcee/0x56b0 [ 225.362777] ksys_mount+0x32e/0x3d0 [ 225.366428] __x64_sys_mount+0x157/0x1c0 [ 225.370516] do_syscall_64+0x15b/0x220 [ 225.374433] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 225.379639] ================================================================== [ 225.387001] Disabling lock debugging due to kernel taint [ 225.392491] Kernel panic - not syncing: panic_on_warn set ... [ 225.392491] [ 225.399887] CPU: 0 PID: 7034 Comm: syz-executor5 Tainted: G B 4.19.0-rc1+ #39 [ 225.408479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 225.417852] Call Trace: [ 225.420480] dump_stack+0x14b/0x190 [ 225.424146] panic+0x35d/0x8cb [ 225.427442] kmsan_report+0x2a8/0x2b0 [ 225.431291] __msan_warning+0x70/0xc0 [ 225.435120] btrfs_scan_one_device+0x4c8/0x14e0 [ 225.439816] ? rcu_all_qs+0x2e/0x1f0 [ 225.443547] ? _cond_resched+0x38/0xc0 [ 225.447476] ? rcu_all_qs+0x2e/0x1f0 [ 225.451231] btrfs_mount_root+0xcab/0x22e0 [ 225.455527] ? pcpu_alloc+0x1ce1/0x20a0 [ 225.459565] ? btrfs_control_open+0x80/0x80 [ 225.463906] mount_fs+0x28f/0x760 [ 225.467391] vfs_kern_mount+0x21b/0x8d0 [ 225.471429] btrfs_mount+0x8b2/0x2f40 [ 225.475282] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 225.480698] ? btrfs_resize_thread_pool+0x5e0/0x5e0 [ 225.485733] mount_fs+0x28f/0x760 [ 225.489236] vfs_kern_mount+0x21b/0x8d0 [ 225.493241] do_mount+0xcee/0x56b0 [ 225.496802] ? copy_mount_options+0x54/0x650 [ 225.501236] ? ksys_mount+0x251/0x3d0 [ 225.505088] ksys_mount+0x32e/0x3d0 [ 225.508752] __x64_sys_mount+0x157/0x1c0 [ 225.512847] ? ksys_mount+0x3d0/0x3d0 [ 225.516666] do_syscall_64+0x15b/0x220 [ 225.520580] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 225.525785] RIP: 0033:0x457099 [ 225.528994] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 225.547912] RSP: 002b:00007f9cf6d29c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 225.555640] RAX: ffffffffffffffda RBX: 00007f9cf6d2a6d4 RCX: 0000000000457099 [ 225.562946] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000020000100 [ 225.570228] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 225.577507] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 225.584792] R13: 00000000004d2eb0 R14: 00000000004c7f78 R15: 0000000000000000 [ 225.592434] Dumping ftrace buffer: [ 225.595975] (ftrace buffer empty) [ 225.599671] Kernel Offset: disabled [ 225.603290] Rebooting in 86400 seconds..