[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 38.286644] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 40.363092] random: sshd: uninitialized urandom read (32 bytes read) [ 40.719863] random: sshd: uninitialized urandom read (32 bytes read) [ 41.898301] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.24' (ECDSA) to the list of known hosts. [ 47.857367] random: sshd: uninitialized urandom read (32 bytes read) 2018/09/04 13:22:07 fuzzer started [ 49.249088] random: cc1: uninitialized urandom read (8 bytes read) 2018/09/04 13:22:09 dialing manager at 10.128.0.26:45707 2018/09/04 13:22:12 syscalls: 1 2018/09/04 13:22:12 code coverage: enabled 2018/09/04 13:22:12 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/09/04 13:22:12 setuid sandbox: enabled 2018/09/04 13:22:12 namespace sandbox: enabled 2018/09/04 13:22:12 fault injection: enabled 2018/09/04 13:22:12 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/09/04 13:22:12 net packed injection: enabled 2018/09/04 13:22:12 net device setup: enabled [ 55.514840] random: crng init done 13:24:22 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0x7f, 0x0, 0xfffffffffffffffe}, 0xf) r1 = socket$inet(0x2, 0x7, 0x7) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000300)='/dev/null\x00', 0x800, 0x0) ioctl$KDDISABIO(r2, 0x4b37) fcntl$lock(r1, 0x6, &(0x7f0000000400)={0x1, 0x7, 0xf94, 0x5, r0}) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000280), &(0x7f00000002c0)=0x4) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f00000000c0)={{{@in6, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@remote}}, &(0x7f00000001c0)=0xe8) getgroups(0x2, &(0x7f0000000340)=[0xee00, 0x0]) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) getgroups(0x7, &(0x7f0000000240)=[r7, r7, r7, r6, 0xee01, 0x0, r8]) fchownat(r3, &(0x7f0000000080)='./file0\x00', r5, r9, 0x400) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000380)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}, &(0x7f0000000440)=0x10) 13:24:22 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000140)) fcntl$lock(r0, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, r1}) fstat(0xffffffffffffffff, &(0x7f0000000180)) pipe2(&(0x7f0000000340)={0xffffffffffffffff}, 0x80800) connect$inet(r2, &(0x7f0000000380)={0x2, 0x0, @multicast2}, 0x10) 13:24:22 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000040c0)='./cgroup/syz0\x00', 0x1ff) 13:24:22 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000003, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) shutdown(r0, 0x1) 13:24:22 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="020a080007000000000013002d54036205001a00000ce68d5426de7edf1500001000148e903f854de682fe64f2e902000000000000000100"], 0x38}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x20, 0x0) 13:24:22 executing program 6: bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b42e8aa222bdd1710d57809e6c2e3c0f"], &(0x7f0000000040)='syzkaller\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) 13:24:22 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0xffc, 0x100000000) 13:24:22 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1a) [ 184.683732] IPVS: ftp: loaded support on port[0] = 21 [ 184.690068] IPVS: ftp: loaded support on port[0] = 21 [ 184.712320] IPVS: ftp: loaded support on port[0] = 21 [ 184.750899] IPVS: ftp: loaded support on port[0] = 21 [ 184.763255] IPVS: ftp: loaded support on port[0] = 21 [ 184.789238] IPVS: ftp: loaded support on port[0] = 21 [ 184.795818] IPVS: ftp: loaded support on port[0] = 21 [ 184.820840] IPVS: ftp: loaded support on port[0] = 21 [ 187.317486] ip (4869) used greatest stack depth: 53752 bytes left [ 189.116233] ip (4968) used greatest stack depth: 53592 bytes left [ 189.231270] ip (4974) used greatest stack depth: 53496 bytes left [ 189.705069] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.711672] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.752357] device bridge_slave_0 entered promiscuous mode [ 189.902318] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.908859] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.943740] device bridge_slave_0 entered promiscuous mode [ 189.974348] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.980878] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.011130] device bridge_slave_0 entered promiscuous mode [ 190.034928] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.041459] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.059018] device bridge_slave_0 entered promiscuous mode [ 190.083189] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.089680] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.130040] device bridge_slave_0 entered promiscuous mode [ 190.151744] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.158225] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.183166] device bridge_slave_0 entered promiscuous mode [ 190.195005] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.201476] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.214654] device bridge_slave_0 entered promiscuous mode [ 190.224253] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.230764] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.247014] device bridge_slave_1 entered promiscuous mode [ 190.278191] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.284657] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.313515] device bridge_slave_1 entered promiscuous mode [ 190.332155] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.338669] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.357985] device bridge_slave_0 entered promiscuous mode [ 190.377140] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.383660] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.404269] device bridge_slave_1 entered promiscuous mode [ 190.422057] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.428662] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.461093] device bridge_slave_1 entered promiscuous mode [ 190.488776] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.495287] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.529340] device bridge_slave_1 entered promiscuous mode [ 190.548714] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.555180] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.576627] device bridge_slave_1 entered promiscuous mode [ 190.589243] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.595697] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.611015] device bridge_slave_1 entered promiscuous mode [ 190.619052] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 190.641902] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 190.650507] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 190.661026] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.667497] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.722369] device bridge_slave_1 entered promiscuous mode [ 190.750919] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 190.767824] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 190.847776] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 190.916773] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 190.931805] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 190.939357] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 190.955721] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 191.001614] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 191.055232] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 191.064486] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 191.166796] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 191.230717] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 191.342958] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 191.814992] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 191.894835] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 192.005035] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 192.015425] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 192.035195] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 192.095575] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 192.126869] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 192.156996] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 192.227145] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 192.240562] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 192.307198] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 192.342667] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 192.357134] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 192.420317] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 192.479102] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 192.487359] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 192.494613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 192.554369] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 192.563128] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 192.570676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 192.602024] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 192.612136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 192.688293] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 192.695408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 192.754832] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 192.761829] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 192.778068] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 192.785211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 192.815429] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 192.822409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 192.843277] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 192.850249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 192.878378] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 192.885396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 192.927950] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 192.934920] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 192.971830] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 192.978843] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 193.052329] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 193.059353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 193.084959] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 193.096732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 193.131909] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 193.138940] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 193.178703] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 193.185814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 193.202765] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 193.210036] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 193.905771] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 193.920177] team0: Port device team_slave_0 added [ 193.957909] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 193.983210] team0: Port device team_slave_0 added [ 193.992701] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 194.017550] team0: Port device team_slave_0 added [ 194.056138] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 194.088243] team0: Port device team_slave_0 added [ 194.108348] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 194.133065] team0: Port device team_slave_0 added [ 194.146184] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 194.168817] team0: Port device team_slave_0 added [ 194.200869] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 194.217729] team0: Port device team_slave_0 added [ 194.256849] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 194.277785] team0: Port device team_slave_0 added [ 194.286155] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 194.301695] team0: Port device team_slave_1 added [ 194.317904] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 194.342829] team0: Port device team_slave_1 added [ 194.356886] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 194.384189] team0: Port device team_slave_1 added [ 194.414446] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 194.438252] team0: Port device team_slave_1 added [ 194.465042] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 194.489860] team0: Port device team_slave_1 added [ 194.512007] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 194.523526] team0: Port device team_slave_1 added [ 194.542488] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 194.569017] team0: Port device team_slave_1 added [ 194.602341] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 194.615697] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 194.625227] team0: Port device team_slave_1 added [ 194.650898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 194.669717] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 194.703685] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 194.711361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 194.735878] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 194.763048] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 194.770805] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 194.780378] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 194.793376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 194.815383] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 194.843492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 194.861163] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 194.878260] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 194.901074] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 194.926444] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 194.950440] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 194.967681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 194.981952] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 195.000635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 195.018322] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 195.039445] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 195.048117] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 195.056934] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 195.067702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 195.104059] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 195.133472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 195.151957] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 195.171183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 195.186777] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 195.205869] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 195.216342] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 195.233685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 195.254904] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 195.272684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 195.289014] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 195.318401] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 195.326622] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 195.334500] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 195.357570] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 195.365250] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 195.379069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 195.401521] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 195.430387] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 195.465213] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 195.495381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 195.514425] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 195.523873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 195.534363] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 195.541363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 195.553776] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 195.563359] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 195.570675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 195.582705] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 195.610789] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 195.620165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 195.652509] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 195.679077] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 195.689567] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 195.698049] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 195.706220] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 195.722906] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 195.754672] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 195.780087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 195.805740] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 195.833868] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 195.852657] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 195.865344] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 195.886749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 195.905346] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 195.916252] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 195.926728] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 195.961106] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 195.969416] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 195.985267] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 196.006803] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 196.014269] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 196.050082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 196.081953] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 196.111404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 196.135883] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 196.156311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 196.170515] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 196.183361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 196.195500] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 196.230184] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 196.246365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 196.300370] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 196.308157] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 196.330232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 196.384777] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 196.392315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 196.414207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 196.484016] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 196.491463] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 196.512683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 199.344313] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.350839] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.357797] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.364266] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.404915] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 199.417303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 199.461026] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.467525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.474432] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.480894] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.542226] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 199.549551] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.556088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.562953] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.569413] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.583871] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 199.591186] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.597677] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.604625] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.611111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.622239] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 199.642335] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.648792] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.655710] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.662162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.695821] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 199.997307] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.003821] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.010761] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.017363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.046905] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 200.061023] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.067509] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.074406] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.080878] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.097163] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 200.122190] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.128676] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.135533] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.142039] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.165157] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 200.468446] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 200.494983] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 200.517295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 200.533645] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 200.553723] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 200.564080] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 200.572771] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 211.805403] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.976830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.180045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.215931] ip (6171) used greatest stack depth: 53464 bytes left [ 212.616095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.670911] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.700863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.733450] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.014094] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 213.059691] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.237931] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 213.407667] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 213.751793] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 213.814810] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 213.911170] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 213.920925] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 214.188220] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 214.194733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 214.212912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 214.317061] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 214.412914] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 214.419195] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 214.442476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 214.628286] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 214.634731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 214.647130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 214.994131] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 215.001551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 215.014496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 215.101327] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 215.107876] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 215.117218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 215.137134] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 215.149681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 215.195276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 215.221433] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 215.237258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 215.250489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 215.504035] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.560617] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 215.566978] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 215.579937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 215.621848] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.897856] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.230787] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.278033] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.296772] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.470968] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.878474] 8021q: adding VLAN 0 to HW filter on device team0 13:25:02 executing program 7: r0 = syz_open_dev$sndtimer(&(0x7f0000000180)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) r1 = syz_open_dev$sndtimer(&(0x7f0000022ff1)='/dev/snd/timer\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1000000805, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f000000efcc)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) r3 = dup3(r0, r2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)) 13:25:02 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000140)) fcntl$lock(r0, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, r1}) fstat(0xffffffffffffffff, &(0x7f0000000180)) pipe2(&(0x7f0000000340)={0xffffffffffffffff}, 0x80800) connect$inet(r2, &(0x7f0000000380)={0x2, 0x0, @multicast2}, 0x10) 13:25:02 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000140)) fcntl$lock(r0, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, r1}) fstat(0xffffffffffffffff, &(0x7f0000000180)) pipe2(&(0x7f0000000340)={0xffffffffffffffff}, 0x80800) connect$inet(r2, &(0x7f0000000380)={0x2, 0x0, @multicast2}, 0x10) 13:25:02 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000140)) fcntl$lock(r0, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, r1}) pipe2(&(0x7f0000000340), 0x0) 13:25:02 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000080)=0x101, 0x10000025e) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) 13:25:02 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000140)) fcntl$lock(r0, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, r1}) fstat(0xffffffffffffffff, &(0x7f0000000180)) pipe2(&(0x7f0000000340)={0xffffffffffffffff}, 0x80800) connect$inet(r2, &(0x7f0000000380)={0x2, 0x0, @multicast2}, 0x10) 13:25:02 executing program 0: clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="b000000000000000a70000000000000005300e000000000000"], &(0x7f0000003ff6)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) 13:25:02 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) close(r0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000200)) recvfrom$unix(r1, &(0x7f0000000380)=""/202, 0xca, 0x0, &(0x7f0000000480)=@file={0x0, './file0\x00'}, 0xffffffffffffff0d) 13:25:03 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000140)) fcntl$lock(r0, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, r1}) fstat(0xffffffffffffffff, &(0x7f0000000180)) pipe2(&(0x7f0000000340), 0x80800) 13:25:03 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f0000de2ff4), 0xc, &(0x7f0000000100)={&(0x7f0000000140)={0x14, 0x4000000000003, 0x1, 0xffffffffffffffff}, 0x14}}, 0x0) recvmsg(r0, &(0x7f00000009c0)={&(0x7f0000000780)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000800)=""/60, 0x3c}, {&(0x7f0000000840)=""/85, 0x55}], 0x2, &(0x7f0000000900)=""/157, 0x9d, 0x8}, 0x2) 13:25:03 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000140)) fcntl$lock(r0, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, r1}) fstat(0xffffffffffffffff, &(0x7f0000000180)) 13:25:03 executing program 4: clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000a70000000000000005300000c600000000000000000000009500000000000000"], &(0x7f0000003ff6)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) 13:25:03 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp\x00') sendfile(r0, r0, &(0x7f0000000c80), 0x7fffffff) 13:25:03 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) futex(&(0x7f0000000080), 0x4, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x0) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000080), 0x0) 13:25:03 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000000c0)=0xffc, 0x100000000) 13:25:03 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000140)) fcntl$lock(r0, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, r1}) 13:25:03 executing program 3: clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) rt_sigprocmask(0x0, &(0x7f0000000140)={0xfffffffffffffffa}, 0x0, 0x8) r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x7, 0x4, @tid=r0}, &(0x7f0000000080)) timer_settime(0x0, 0x3, &(0x7f000004a000)={{0x0, 0x1}, {0x7, 0xe4c}}, &(0x7f0000040000)) rt_sigreturn() 13:25:03 executing program 6: 13:25:03 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000600)={@multicast2, @empty, 0x0, 0x8}, 0x10) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000080)) 13:25:03 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) futex(&(0x7f0000000080), 0x0, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000040)) prctl$getname(0x10, &(0x7f00000000c0)=""/73) 13:25:03 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x12, &(0x7f0000000100)=0xffffffff, 0x4) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000080)=0x1c) 13:25:03 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000140)) fcntl$lock(r0, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, r1}) pipe2(&(0x7f0000000340), 0x0) 13:25:03 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) futex(&(0x7f0000000080), 0x0, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000040)) prctl$getname(0x10, &(0x7f00000000c0)=""/73) 13:25:03 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000001000)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) [ 224.724298] PANIC: double fault, error_code: 0x0 [ 224.729143] CPU: 1 PID: 6919 Comm: syz-executor3 Not tainted 4.19.0-rc1+ #40 [ 224.736366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 224.745750] RIP: 0010:get_cpu_entry_area+0x0/0x30 [ 224.750617] Code: a4 00 45 85 e4 79 ad e9 61 ff ff ff 49 89 d6 44 89 ff e8 93 82 a4 00 89 c0 48 89 c1 48 c1 e1 20 48 09 c1 49 89 0e eb a0 90 90 <55> 48 89 e5 53 89 fb e8 74 91 49 00 48 63 c3 48 69 c8 00 b0 03 00 [ 224.769549] RSP: 0018:fffffe000003d000 EFLAGS: 00010093 [ 224.774945] RAX: 000000000003d150 RBX: 0000000000000088 RCX: 000000000000002e [ 224.782230] RDX: 0000780000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 224.789511] RBP: fffffe000003d038 R08: 00000000009300ac R09: 00000000009300a0 [ 224.796808] R10: ffffffff89000f48 R11: ffffffff89000f48 R12: 0000000000000001 [ 224.804094] R13: fffffe000003d150 R14: 0000000000000001 R15: 0000000000000001 [ 224.811379] FS: 00007f279f3a9700(0000) GS:ffff88021fd00000(0000) knlGS:0000000000000000 13:25:03 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() fcntl$lock(r0, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, r1}) fstat(0xffffffffffffffff, &(0x7f0000000180)) [ 224.819620] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 224.825515] CR2: fffffe000003cff8 CR3: 000000012c548000 CR4: 00000000001406e0 [ 224.832821] Call Trace: [ 224.835416] [ 224.838726] ? kmsan_get_shadow_address+0x1b6/0x3d0 [ 224.843776] kmsan_memmove_shadow+0x87/0xe0 [ 224.848132] __msan_memmove+0xaa/0x130 [ 224.852088] fixup_bad_iret+0x85/0x110 [ 224.856019] error_entry+0xe6/0xf0 [ 224.859575] RIP: 0000: (null) [ 224.863487] Code: Bad RIP value. [ 224.866874] RSP: a3fb9f:00007f279f3a99c0 EFLAGS: 00000000 ORIG_RAX: 0000000000000000 13:25:03 executing program 7: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6be6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) vmsplice(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="06", 0x1}], 0x1, 0x0) [ 224.874785] RAX: 0000000000000000 RBX: ffffffff89000f48 RCX: 00000000004083dc [ 224.882074] RDX: a93317a0cc0e1900 RSI: 0000000000000000 RDI: 0000000000000000 [ 224.889385] RBP: 0000000000000000 R08: 0000000000000000 R09: 00000000009300a8 [ 224.896689] R10: 00000000009300a0 R11: 00000000009300ac R12: 0000000000000000 [ 224.899949] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 13:25:03 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) sched_setscheduler(0x0, 0x5, &(0x7f0000000140)) fcntl$lock(r0, 0x25, &(0x7f0000000040)) fstat(0xffffffffffffffff, &(0x7f0000000180)) 13:25:03 executing program 5: [ 224.903975] R13: 00000000009300a8 R14: 00000000009300a0 R15: 00000000009300ac [ 224.904002] ? general_protection+0x8/0x30 [ 224.904027] ? general_protection+0x8/0x30 [ 224.904064] [ 224.904074] Kernel panic - not syncing: Machine halted. [ 224.904096] CPU: 1 PID: 6919 Comm: syz-executor3 Not tainted 4.19.0-rc1+ #40 [ 224.904106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 224.904113] Call Trace: [ 224.904143] <#DF> [ 224.967414] dump_stack+0x14b/0x190 [ 224.971085] panic+0x35d/0x8cb [ 224.974338] ? show_regs+0xcc/0x100 [ 224.978005] df_debug+0xa6/0xb0 [ 224.981319] do_double_fault+0x302/0x410 [ 224.985484] double_fault+0x1e/0x30 [ 224.989177] RIP: 0010:get_cpu_entry_area+0x0/0x30 [ 224.994087] Code: a4 00 45 85 e4 79 ad e9 61 ff ff ff 49 89 d6 44 89 ff e8 93 82 a4 00 89 c0 48 89 c1 48 c1 e1 20 48 09 c1 49 89 0e eb a0 90 90 <55> 48 89 e5 53 89 fb e8 74 91 49 00 48 63 c3 48 69 c8 00 b0 03 00 [ 225.013022] RSP: 0018:fffffe000003d000 EFLAGS: 00010093 [ 225.018411] RAX: 000000000003d150 RBX: 0000000000000088 RCX: 000000000000002e [ 225.025709] RDX: 0000780000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 225.032996] RBP: fffffe000003d038 R08: 00000000009300ac R09: 00000000009300a0 [ 225.040300] R10: ffffffff89000f48 R11: ffffffff89000f48 R12: 0000000000000001 [ 225.047589] R13: fffffe000003d150 R14: 0000000000000001 R15: 0000000000000001 [ 225.054895] ? general_protection+0x8/0x30 [ 225.059160] ? general_protection+0x8/0x30 [ 225.063417] [ 225.065667] [ 225.068996] ? kmsan_get_shadow_address+0x1b6/0x3d0 13:25:04 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) sched_setscheduler(0x0, 0x5, &(0x7f0000000140)) fcntl$lock(r0, 0x25, &(0x7f0000000040)) fstat(0xffffffffffffffff, &(0x7f0000000180)) [ 225.074056] kmsan_memmove_shadow+0x87/0xe0 [ 225.078404] __msan_memmove+0xaa/0x130 [ 225.082337] fixup_bad_iret+0x85/0x110 [ 225.086306] error_entry+0xe6/0xf0 [ 225.089858] RIP: 0000: (null) [ 225.093768] Code: Bad RIP value. [ 225.097151] RSP: a3fb9f:00007f279f3a99c0 EFLAGS: 00000000 ORIG_RAX: 0000000000000000 [ 225.105559] RAX: 0000000000000000 RBX: ffffffff89000f48 RCX: 00000000004083dc [ 225.112851] RDX: a93317a0cc0e1900 RSI: 0000000000000000 RDI: 0000000000000000 [ 225.120139] RBP: 0000000000000000 R08: 0000000000000000 R09: 00000000009300a8 [ 225.127426] R10: 00000000009300a0 R11: 00000000009300ac R12: 0000000000000000 [ 225.134732] R13: 00000000009300a8 R14: 00000000009300a0 R15: 00000000009300ac [ 225.142033] ? general_protection+0x8/0x30 [ 225.146303] ? general_protection+0x8/0x30 [ 225.150597] [ 225.154318] Dumping ftrace buffer: [ 225.157858] (ftrace buffer empty) [ 225.161557] Kernel Offset: disabled [ 225.165220] Rebooting in 86400 seconds..