[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [ 59.979051] sshd (6086) used greatest stack depth: 53392 bytes left [....] Starting OpenBSD Secure Shell server: sshd[ 60.255204] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 62.836277] random: sshd: uninitialized urandom read (32 bytes read) [ 63.408404] random: sshd: uninitialized urandom read (32 bytes read) [ 66.009813] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.82' (ECDSA) to the list of known hosts. [ 71.904073] random: sshd: uninitialized urandom read (32 bytes read) 2018/10/11 10:06:06 fuzzer started [ 76.688084] random: cc1: uninitialized urandom read (8 bytes read) [ 76.843283] cc1 (6176) used greatest stack depth: 53184 bytes left 2018/10/11 10:06:11 dialing manager at 10.128.0.26:39089 2018/10/11 10:06:11 syscalls: 1 2018/10/11 10:06:11 code coverage: enabled 2018/10/11 10:06:11 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/10/11 10:06:11 setuid sandbox: enabled 2018/10/11 10:06:11 namespace sandbox: enabled 2018/10/11 10:06:11 Android sandbox: /sys/fs/selinux/policy does not exist 2018/10/11 10:06:11 fault injection: enabled 2018/10/11 10:06:11 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/10/11 10:06:11 net packed injection: /dev/net/tun can't be opened (open /dev/net/tun: cannot allocate memory) 2018/10/11 10:06:11 net device setup: enabled [ 81.142751] random: crng init done 10:08:08 executing program 0: [ 197.582006] IPVS: ftp: loaded support on port[0] = 21 [ 199.009560] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.016123] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.025000] device bridge_slave_0 entered promiscuous mode [ 199.187707] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.194325] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.203051] device bridge_slave_1 entered promiscuous mode [ 199.349193] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 199.494628] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 199.952997] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 200.110121] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 200.395558] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 200.402783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 10:08:12 executing program 1: [ 200.871136] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 200.879533] team0: Port device team_slave_0 added [ 201.199716] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 201.207970] team0: Port device team_slave_1 added [ 201.478249] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 201.485380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 201.494547] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 201.566160] IPVS: ftp: loaded support on port[0] = 21 [ 201.743299] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 201.750419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 201.759675] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 201.945354] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 201.953308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 201.962625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 202.216664] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 202.224464] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 202.233750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 203.578415] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.584969] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.593669] device bridge_slave_0 entered promiscuous mode [ 203.874391] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.880867] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.889935] device bridge_slave_1 entered promiscuous mode [ 204.129258] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 204.363682] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 205.006477] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.013057] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.020037] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.026645] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.035827] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 205.055498] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 205.238742] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 205.500168] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 205.763863] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 205.770932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 206.491721] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 206.500192] team0: Port device team_slave_0 added 10:08:18 executing program 2: [ 206.840032] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 206.848305] team0: Port device team_slave_1 added [ 207.174365] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 207.181436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 207.190411] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 207.489553] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 207.496743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 207.505955] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 207.794189] IPVS: ftp: loaded support on port[0] = 21 [ 207.807983] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 207.815706] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 207.824954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 208.109807] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 208.117673] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 208.127166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 210.914519] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.921360] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.929989] device bridge_slave_0 entered promiscuous mode [ 211.281185] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.287834] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.297611] device bridge_slave_1 entered promiscuous mode [ 211.535691] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.542310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.549268] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.555869] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.564913] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 211.595079] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 211.911166] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 212.412500] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 212.738248] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 213.072058] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 213.291152] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 213.299959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 213.496565] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 213.503811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 10:08:26 executing program 3: [ 214.513192] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 214.521143] team0: Port device team_slave_0 added [ 214.857677] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 214.866069] team0: Port device team_slave_1 added [ 215.144209] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 215.151468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 215.160616] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 215.397806] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 215.405078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 215.414115] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 215.777520] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 215.785253] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 215.794547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 215.884221] IPVS: ftp: loaded support on port[0] = 21 [ 216.124221] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 216.131802] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 216.141087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 218.065692] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.171718] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.178342] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.187153] device bridge_slave_0 entered promiscuous mode [ 219.418922] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 219.595365] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.601845] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.610971] device bridge_slave_1 entered promiscuous mode [ 220.056122] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 220.313707] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.320240] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.327368] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.333932] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.343010] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 220.378298] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 220.463316] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 220.728342] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 220.734894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 220.743100] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 221.128295] ip (6616) used greatest stack depth: 53056 bytes left [ 221.513553] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 221.947168] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 222.209529] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 222.216700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 222.263526] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.618048] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 222.625287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 223.835429] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 223.843816] team0: Port device team_slave_0 added [ 224.174813] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 224.183219] team0: Port device team_slave_1 added [ 224.507759] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 224.515224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 224.524596] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 224.877177] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 224.884360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 224.893385] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready 10:08:37 executing program 4: [ 225.326389] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 225.334166] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 225.343470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 225.800548] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 225.808347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 225.817651] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 226.786452] IPVS: ftp: loaded support on port[0] = 21 [ 227.026799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.808360] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 230.513605] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 230.520001] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 230.528201] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 230.925991] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.932816] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.941429] device bridge_slave_0 entered promiscuous mode [ 231.014628] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.021107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.028168] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.034767] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.044085] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 231.364383] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.370859] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.379648] device bridge_slave_1 entered promiscuous mode [ 231.772439] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 231.828851] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 232.175990] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 232.297642] 8021q: adding VLAN 0 to HW filter on device team0 10:08:44 executing program 0: 10:08:45 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='fuse\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="5eace133c22c00"]) 10:08:45 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="a667b620e8cf57dd6c"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0xb, 0x15, 0x0, 0x2}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x4, 0x80, 0x800}) [ 233.651164] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 234.099249] bond0: Enslaving bond_slave_1 as an active interface with an up link 10:08:46 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0xb, &(0x7f0000000080), 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x80) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x48af}) [ 234.562576] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 234.569661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready 10:08:46 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)='ip6_vti0\x00', 0x10) pipe2(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$DRM_IOCTL_AGP_RELEASE(r1, 0x6431) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) r3 = memfd_create(&(0x7f00000000c0)="000000008c00000000000000000000", 0x0) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) sendmsg$nl_generic(r3, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80020100}, 0xc, &(0x7f0000000500)={&(0x7f0000000880)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="0c0053000300000000000000080015007f00000144004c00336ceaf90e751bbce4304b7c89f2a6f3049baf3515895454c83d7a7fdb7f480911d46641cc8434dfb8a6c15bd92d1e5458a36d1ebac1bcd6ab7efcf0381887b62300d75950b9b97a72a3401a3e6e00459304f36fb6264786c17abc09b4fa24f9b3e8d37c6ecea7af9ea0e006badbbd441e4bfe4b14853313da0275f84737ed55973b7c0b408069973226dd087366672c4217d5c6cf18709c6faa611323eccb012f29a93f9d19e8"], 0x350}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) fstatfs(r0, &(0x7f0000000580)=""/118) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) fcntl$notify(r2, 0x402, 0x8) sendfile(r0, r2, &(0x7f00000ddff8), 0x102000002) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000700)={0x0}, &(0x7f0000000740)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000780)={r4, @in={{0x2, 0x4e20, @loopback}}}, &(0x7f0000000840)=0x84) socket$xdp(0x2c, 0x3, 0x0) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000600)=""/177) [ 235.055306] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 235.062542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 235.693333] syz-executor0 (6934) used greatest stack depth: 51424 bytes left 10:08:47 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1b, &(0x7f0000000040)={@local, 0x0}, &(0x7f0000000180)=0x14) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f00000001c0)={@empty, @multicast1, r1}, 0xc) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x800, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000080)=""/181, &(0x7f0000000140)=0xb5) pwritev(r0, &(0x7f0000000540)=[{&(0x7f0000000200)="12bd85121fb4bce841ff8bd73d6d0d1c25cd736944491d01add4912ce95dd2795696c93fab219b1b1a0947d046bd452456f59e3ff4af16bba44ad81425fb620550189f9aba7f1d", 0x47}, {&(0x7f0000000280)="4dc60c15b77b86444452420230c16e489fdc46bb7691e9bc78de2d7b9d2e45f7d8ca15d196cff775d395cc3b3517f32a09b1b73888d4bdafa29aced652df5d8cc236e107f4446dbac9dba3f406a97bcffab3f630faa34b6675e7af7b08b73c19754a94e5b67bba7a1c3eca2c8d0c33c662ca4217a4bfd5ba2c247c1f0ac981d8f7488458e9063ef06d324ad71559022f9cecc795d5ca304f5ba61db2c28c4132b77bf46b22c6959c0edd97765381083871", 0xb1}, {&(0x7f0000000340)="00d0f2dffe7d1b22264fd29ba018fbd090d259e623c7dea3e89b8f025b65055bc165bf92ec2d2a0120c87fa9c5c9447014f65d6e40d03d144d00da6ae22c2ed5a7b56ac50dffa8c04d213216f0613786217acc8f26dfdaa2fa", 0x59}, {&(0x7f00000003c0)="496fea373b541890b1f671cf31cfc6f93471e6160de0c000b072eaf6cd9fbd5bac06c1f4fffc0871e285991cc178fd8d7e71bf1d76c1f46c458e559d01a066a049efc6ad0f36e3a9fd49da5b76860718a65303b0e97515eea790251e7b4d4b410ce401ba2c3d3d353726f2c45086bf1b99de3811be535d769b33", 0x7a}, {&(0x7f0000000440)="4ee8cdd7435c0a8bfce04065657981c46bf03daba82d48ff6dfd562c63198419efce58087d4b0ddcbf3540fe2201834255b031e2b120dd41ae1ecdf0b9b028e7865a9428374ca407efcafb16171e95696bbd6c0793fff1643d01fafa4a23e62a939309f281c1cad2441a42f7420802375427e1a549850cc3eb04b2caa5d1a3caaa47cc3641aaffce343751a24593978a3ba1305287dcf75360228cf9f5408fd0dea457251dceb89063768a405b938611e7a9052cf2c3061955f2a7b1d635afd866c3d5a1a36c2123c6da9306ff0d72ef3d51b46655057e28957a28fc3f", 0xdd}], 0x5, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f00000005c0)={0x200, 0x4, 0x1, 0x8}, 0x10) getsockopt$inet6_tcp_int(r2, 0x6, 0x3, &(0x7f0000000600), &(0x7f0000000640)=0x4) [ 236.350951] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 236.359273] team0: Port device team_slave_0 added 10:08:48 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3c) perf_event_open(&(0x7f0000940000)={0x0, 0x70, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xa}, 0x1}, 0x1c) sendmsg(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000040)='+', 0x1}], 0x1, &(0x7f0000000140)}, 0xc100) writev(r0, &(0x7f0000000200)=[{&(0x7f0000001440)="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", 0xbd0}], 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) [ 236.794647] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 236.803058] team0: Port device team_slave_1 added 10:08:49 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x80000, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x1000, 0x10, 0x20, 0x4}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={r1, 0xed1}, 0x8) r2 = inotify_init1(0x0) r3 = getpid() fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) kcmp(r3, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff) [ 237.280170] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 237.287372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 237.296538] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 237.737275] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 237.744497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 237.753580] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 238.143761] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 238.151636] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 238.160747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 238.247664] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.469482] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 238.477285] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 238.486795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 239.316395] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 240.381504] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 240.388089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 240.396178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 10:08:53 executing program 1: openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x1) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) sendto$inet6(r0, &(0x7f0000000140)='9', 0x1, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2}, 0x1c) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x0) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040), &(0x7f00000000c0)=0x4) [ 241.389328] hrtimer: interrupt took 53869 ns [ 241.910358] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.126163] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.132819] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.139820] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.146420] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.155202] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 242.161831] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 245.133050] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.867034] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 246.668934] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 246.675474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 246.683616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 10:08:59 executing program 2: openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000200)={0x0, 'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000140)=""/20, 0x14, 0x6, 0x0, 0x8001}, 0x120) read(r0, &(0x7f00000003c0)=""/147, 0x93) write$UHID_DESTROY(r0, &(0x7f0000000380), 0x4) pipe(&(0x7f0000000080)) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}, 0x1}, {}, 0x0, [0x0, 0x0, 0xb9, 0x8]}, 0x5c) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000340), 0x4) [ 247.412610] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.483098] hid-generic 0006:0000:8001.0001: unknown main item tag 0x0 [ 247.490009] hid-generic 0006:0000:8001.0001: unknown main item tag 0x0 [ 247.497079] hid-generic 0006:0000:8001.0001: unknown main item tag 0x0 [ 247.503965] hid-generic 0006:0000:8001.0001: unknown main item tag 0x0 [ 247.510752] hid-generic 0006:0000:8001.0001: unknown main item tag 0x0 [ 247.517664] hid-generic 0006:0000:8001.0001: unknown main item tag 0x0 [ 247.524616] hid-generic 0006:0000:8001.0001: unknown main item tag 0x0 [ 247.531388] hid-generic 0006:0000:8001.0001: unknown main item tag 0x0 [ 247.538308] hid-generic 0006:0000:8001.0001: unknown main item tag 0x0 [ 247.545169] hid-generic 0006:0000:8001.0001: unknown main item tag 0x0 [ 247.551935] hid-generic 0006:0000:8001.0001: unknown main item tag 0x0 [ 247.558805] hid-generic 0006:0000:8001.0001: unknown main item tag 0x0 [ 247.565652] hid-generic 0006:0000:8001.0001: unknown main item tag 0x0 [ 247.572552] hid-generic 0006:0000:8001.0001: unknown main item tag 0x0 [ 247.579313] hid-generic 0006:0000:8001.0001: unknown main item tag 0x0 [ 247.586246] hid-generic 0006:0000:8001.0001: unknown main item tag 0x0 [ 247.593101] hid-generic 0006:0000:8001.0001: unknown main item tag 0x0 [ 247.599865] hid-generic 0006:0000:8001.0001: unknown main item tag 0x0 [ 247.606791] hid-generic 0006:0000:8001.0001: unknown main item tag 0x0 [ 247.613632] hid-generic 0006:0000:8001.0001: unknown main item tag 0x0 [ 247.725638] hid-generic 0006:0000:8001.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 247.749992] hid-generic 0006:0000:8001.0002: unknown main item tag 0x0 [ 247.756988] hid-generic 0006:0000:8001.0002: unknown main item tag 0x0 [ 247.763932] hid-generic 0006:0000:8001.0002: unknown main item tag 0x0 [ 247.770723] hid-generic 0006:0000:8001.0002: unknown main item tag 0x0 [ 247.777663] hid-generic 0006:0000:8001.0002: unknown main item tag 0x0 [ 247.784588] hid-generic 0006:0000:8001.0002: unknown main item tag 0x0 [ 247.791350] hid-generic 0006:0000:8001.0002: unknown main item tag 0x0 [ 247.798274] hid-generic 0006:0000:8001.0002: unknown main item tag 0x0 [ 247.805357] hid-generic 0006:0000:8001.0002: unknown main item tag 0x0 [ 247.812224] hid-generic 0006:0000:8001.0002: unknown main item tag 0x0 [ 247.818995] hid-generic 0006:0000:8001.0002: unknown main item tag 0x0 [ 247.825916] hid-generic 0006:0000:8001.0002: unknown main item tag 0x0 [ 247.832764] hid-generic 0006:0000:8001.0002: unknown main item tag 0x0 [ 247.839539] hid-generic 0006:0000:8001.0002: unknown main item tag 0x0 [ 247.846457] hid-generic 0006:0000:8001.0002: unknown main item tag 0x0 [ 247.853295] hid-generic 0006:0000:8001.0002: unknown main item tag 0x0 [ 247.860064] hid-generic 0006:0000:8001.0002: unknown main item tag 0x0 [ 247.866996] hid-generic 0006:0000:8001.0002: unknown main item tag 0x0 [ 247.873854] hid-generic 0006:0000:8001.0002: unknown main item tag 0x0 [ 247.880626] hid-generic 0006:0000:8001.0002: unknown main item tag 0x0 [ 247.968829] hid-generic 0006:0000:8001.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 250.504198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.048413] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready 10:09:03 executing program 3: socket$alg(0x26, 0x5, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x1, 0x0) r1 = fcntl$getown(0xffffffffffffff9c, 0x9) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000000)=r1) msgget$private(0x0, 0x100) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000080)=""/52) r2 = socket$inet6(0xa, 0x80003, 0x1) recvmmsg(r2, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) sendto$inet6(r2, &(0x7f0000000140)='9', 0x1, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x0) [ 251.572439] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 251.578858] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 251.586810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 252.161034] 8021q: adding VLAN 0 to HW filter on device team0 10:09:06 executing program 4: socket$alg(0x26, 0x5, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x1, 0x0) r1 = fcntl$getown(0xffffffffffffff9c, 0x9) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000000)=r1) msgget$private(0x0, 0x100) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000080)=""/52) r2 = socket$inet6(0xa, 0x80003, 0x1) recvmmsg(r2, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) sendto$inet6(r2, &(0x7f0000000140)='9', 0x1, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x0) 10:09:06 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x80000, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x1000, 0x10, 0x20, 0x4}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={r1, 0xed1}, 0x8) r2 = inotify_init1(0x0) r3 = getpid() fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) kcmp(r3, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff) 10:09:06 executing program 5: socketpair(0x0, 0x80800, 0xa6, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) r2 = socket$packet(0x11, 0x3, 0x300) r3 = dup(r0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x1, {0x2, 0x4e20, @rand_addr=0x2}, {0x2, 0x4e20, @broadcast}, {0x2, 0x4e21, @multicast1}, 0x10, 0x80000000, 0x100, 0xffff, 0x2, 0x0, 0x40, 0x3, 0x4}) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000140)={0x9, 0x4, 0x1, 0x3, 0x1bf6, 0x1}) setsockopt$inet_sctp_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000180)={0x7, 0xfffffffffffffffb, 0x7, 0xfffffffffffffd85, 0x0, 0x6, 0x1, 0x5a6, 0x0, 0x2, 0x100}, 0xb) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e20, @loopback}}, 0x6b, 0x7}, &(0x7f0000000280)=0x90) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f00000002c0)={r4, @in6={{0xa, 0x4e24, 0x10001, @dev={0xfe, 0x80, [], 0x21}, 0x6}}}, 0x84) epoll_wait(r0, &(0x7f0000000380)=[{}, {}, {}], 0x3, 0x59f) write$P9_RLERRORu(r3, &(0x7f00000003c0)={0xe, 0x7, 0x2, {{0x1, '*'}, 0x8}}, 0xe) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000400)={0x0}, &(0x7f0000000440)=0xc) fcntl$lock(r3, 0x6, &(0x7f0000000480)={0x0, 0x1, 0x800, 0xc8f, r5}) write$P9_RSTATFS(r1, &(0x7f00000004c0)={0x43, 0x9, 0x2, {0xffff, 0x1, 0x100000000, 0x9, 0x6, 0xee8c, 0x7, 0x7, 0x8}}, 0x43) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000540)={0x0, @remote, @loopback}, &(0x7f0000000580)=0xc) sendmsg$can_bcm(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x1d, r6}, 0x10, &(0x7f0000000680)={&(0x7f0000000600)={0x6, 0x2, 0x504, {0x77359400}, {0x77359400}, {0x0, 0x7, 0x401, 0x6}, 0x1, @canfd={{0x3, 0x800, 0x9, 0x400}, 0x0, 0x1, 0x0, 0x0, "d76ff2d06c8f95bd65c690ca172f3f9723b4e24a55d5610d1b76044b6f40ccbe643cc69ceb7e34e221eea47303cf77309569d393581efec56db8da2871ea2a5c"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000700)={0x3f, 0x6, 0x0, {0x6, 0x3, 0x16, 0x0, "8f6370757365742b6d696d655f747970656e6f646576"}}, 0x3f) write$P9_RFSYNC(r1, &(0x7f0000000740)={0x7, 0x33, 0x1}, 0x7) arch_prctl(0x1003, &(0x7f0000000780)="57da7402f1906ce43a90ec0ee9bf6aaedde5d4283932ab62df14917cbb33e12b1fee85decff8c589e8d42215e62fb7610f902a25f05841a324d1325d64530a76f2c7fc96456ee641c5feafb5f8d9b60dd1b7fb11c3375d0c0290ab2986618263c87235daa766b5f249b52f2225dd7e44be2606e591c4f2d0aa1bdb7044a46a971e247fb34d2fa755c8f6a5df40aa04e88cf295b83c0e3c84bb6e48d6d3") ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000840)={0x100000001, 0xae62, 0x3, 0x800000000000000, 0xfff, 0x6, 0xa3, 0xfffffffffffffff9, 0xcf, 0x1, 0x2, 0x1}) ioctl$LOOP_SET_FD(r1, 0x4c00, r1) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000880)={r4, @in6={{0xa, 0x4e20, 0x0, @ipv4={[], [], @remote}, 0x8000}}}, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000940)=[@in={0x2, 0x4e21, @remote}, @in6={0xa, 0x4e21, 0x3, @loopback, 0x7}, @in6={0xa, 0x4e23, 0x6344a531, @ipv4={[], [], @local}, 0x5}, @in={0x2, 0x4e20, @local}], 0x58) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000a40)={'filter\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f00000009c0)=[{}, {}, {}, {}, {}]}, 0x78) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000ac0)='eql\x00') openat$pfkey(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/net/pfkey\x00', 0x400, 0x0) ioctl$KVM_SET_TSS_ADDR(r0, 0xae47, 0xd000) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000b40)='/proc/self/attr/exec\x00', 0x2, 0x0) ioctl$KDGKBLED(r3, 0x4b64, &(0x7f0000000b80)) 10:09:06 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)='S', 0x1) 10:09:06 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 10:09:06 executing program 3: socket$alg(0x26, 0x5, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x1, 0x0) r1 = fcntl$getown(0xffffffffffffff9c, 0x9) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000000)=r1) msgget$private(0x0, 0x100) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000080)=""/52) r2 = socket$inet6(0xa, 0x80003, 0x1) recvmmsg(r2, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) sendto$inet6(r2, &(0x7f0000000140)='9', 0x1, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x0) 10:09:06 executing program 3: socket$alg(0x26, 0x5, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x1, 0x0) r1 = fcntl$getown(0xffffffffffffff9c, 0x9) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000000)=r1) msgget$private(0x0, 0x100) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000080)=""/52) r2 = socket$inet6(0xa, 0x80003, 0x1) recvmmsg(r2, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) sendto$inet6(r2, &(0x7f0000000140)='9', 0x1, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x0) 10:09:06 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 10:09:06 executing program 0: perf_event_open(&(0x7f0000014f88)={0x1, 0x70, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000014f88)={0x1, 0x70, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 10:09:07 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x2000000000004e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x9) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in, 0x0, 0xfff}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0x2, 0x408c3cff00000000}}, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x98) 10:09:07 executing program 4: socket$alg(0x26, 0x5, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x1, 0x0) r1 = fcntl$getown(0xffffffffffffff9c, 0x9) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000000)=r1) msgget$private(0x0, 0x100) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000080)=""/52) r2 = socket$inet6(0xa, 0x80003, 0x1) recvmmsg(r2, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) sendto$inet6(r2, &(0x7f0000000140)='9', 0x1, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x0) 10:09:07 executing program 0: 10:09:07 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 10:09:08 executing program 4: socket$alg(0x26, 0x5, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x1, 0x0) r1 = fcntl$getown(0xffffffffffffff9c, 0x9) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000000)=r1) msgget$private(0x0, 0x100) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000080)=""/52) r2 = socket$inet6(0xa, 0x80003, 0x1) recvmmsg(r2, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) sendto$inet6(r2, &(0x7f0000000140)='9', 0x1, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x0) [ 256.685325] IPVS: ftp: loaded support on port[0] = 21 [ 257.418006] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.424498] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.432061] device bridge_slave_0 entered promiscuous mode [ 257.511336] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.517911] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.526061] device bridge_slave_1 entered promiscuous mode [ 257.604723] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 257.681579] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 257.919798] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 258.003440] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 258.153858] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 258.161005] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 258.393606] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 258.401273] team0: Port device team_slave_0 added [ 258.480027] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 258.487797] team0: Port device team_slave_1 added [ 258.566354] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 258.647934] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 258.726347] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 258.733837] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 258.742829] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 258.822586] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 258.829893] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 258.839139] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 259.698704] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.705254] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.712314] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.718785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.726765] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 260.112526] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 262.957605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.259747] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 263.650708] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 263.657108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 263.665337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 263.958683] 8021q: adding VLAN 0 to HW filter on device team0 10:09:18 executing program 0: 10:09:18 executing program 5: 10:09:18 executing program 2: 10:09:18 executing program 3: 10:09:18 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 10:09:18 executing program 4: 10:09:18 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000100), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000380)=[{}, {0x3, 0x80}], 0x200000000000035a) write$P9_RSTATFS(r1, &(0x7f0000000240)={0x43}, 0x43) 10:09:18 executing program 3: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x10, 0x0, &(0x7f00000000c0)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x8, 0x0, &(0x7f0000000080)=[@release], 0x0, 0x0, &(0x7f00000000c0)}) 10:09:18 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x5, 0x4}) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000440)=""/244, &(0x7f00000002c0)=0xf4) 10:09:18 executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000200)={0x0, 'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000140)=""/20, 0x14}, 0x120) read(r0, &(0x7f00000003c0)=""/147, 0x93) 10:09:18 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, &(0x7f0000000200)='$keyring$md5sum.\x00') umount2(&(0x7f0000000080)='./file0\x00', 0x0) [ 266.464503] binder: 7763:7765 Acquire 1 refcount change on invalid ref 0 ret -22 [ 266.472390] binder: 7763:7765 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 266.493686] binder: 7763:7765 Release 1 refcount change on invalid ref 0 ret -22 [ 266.510253] binder: 7763:7765 Acquire 1 refcount change on invalid ref 0 ret -22 [ 266.518195] binder: 7763:7765 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 266.633178] binder: 7763:7766 Release 1 refcount change on invalid ref 0 ret -22 [ 266.671857] ================================================================== [ 266.679291] BUG: KMSAN: uninit-value in vmap_page_range_noflush+0x975/0xed0 [ 266.686419] CPU: 0 PID: 7771 Comm: syz-executor5 Not tainted 4.19.0-rc4+ #66 [ 266.693630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 266.702995] Call Trace: [ 266.705619] dump_stack+0x306/0x460 [ 266.709277] ? vmap_page_range_noflush+0x975/0xed0 [ 266.714257] kmsan_report+0x1a2/0x2e0 [ 266.718106] __msan_warning+0x7c/0xe0 [ 266.720770] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 266.721949] vmap_page_range_noflush+0x975/0xed0 [ 266.728772] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 266.733425] map_vm_area+0x17d/0x1f0 [ 266.733502] kmsan_vmap+0xf2/0x180 [ 266.733552] vmap+0x3a1/0x510 [ 266.733579] ? relay_open_buf+0x81e/0x19d0 [ 266.733629] relay_open_buf+0x81e/0x19d0 [ 266.733681] relay_open+0xabb/0x1370 [ 266.733742] do_blk_trace_setup+0xaf7/0x1780 [ 266.740442] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 266.744133] __blk_trace_setup+0x20b/0x380 [ 266.744191] blk_trace_ioctl+0x274/0x970 [ 266.747787] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 266.750851] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 266.755209] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 266.759135] ? alloc_set_pte+0x95d/0x2530 [ 266.763017] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 266.767249] ? kmsan_set_origin_inline+0x6b/0x120 [ 266.774038] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 266.778142] ? __msan_poison_alloca+0x17a/0x210 [ 266.782315] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 266.788868] ? blkdev_ioctl+0x327/0x55e0 [ 266.794438] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 266.800959] ? block_ioctl+0x16f/0x1d0 [ 266.800993] blkdev_ioctl+0x1aaa/0x55e0 [ 266.805325] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 266.811808] ? task_kmsan_context_state+0x6b/0x120 [ 266.816812] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 266.823301] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 266.823326] ? vmalloc_to_page+0x57d/0x6b0 [ 266.823361] ? kmsan_set_origin_inline+0x6b/0x120 [ 266.823395] block_ioctl+0x16f/0x1d0 [ 266.828108] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 266.834736] ? block_llseek+0x190/0x190 [ 266.834764] do_vfs_ioctl+0xcf3/0x2810 [ 266.834808] ? security_file_ioctl+0x92/0x200 [ 266.834843] __se_sys_ioctl+0x1da/0x270 [ 266.838944] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 266.845568] __x64_sys_ioctl+0x4a/0x70 [ 266.845593] do_syscall_64+0xbe/0x100 [ 266.845623] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 266.845652] RIP: 0033:0x457519 [ 266.849593] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 266.853505] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 266.853519] RSP: 002b:00007f4a2e08bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 266.853543] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457519 [ 266.853557] RDX: 0000000020000040 RSI: 00000000c0481273 RDI: 0000000000000003 [ 266.853570] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 266.853598] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4a2e08c6d4 [ 266.860319] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 266.865185] R13: 00000000004be982 R14: 00000000004ce680 R15: 00000000ffffffff [ 266.865217] [ 266.865225] Uninit was created at: [ 266.865247] kmsan_internal_poison_shadow+0xc8/0x1d0 [ 266.865266] kmsan_kmalloc+0xa4/0x120 [ 266.865297] __kmalloc+0x14b/0x440 [ 266.872014] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 266.877311] kmsan_vmap+0x9b/0x180 [ 266.877332] vmap+0x3a1/0x510 [ 266.877351] relay_open_buf+0x81e/0x19d0 [ 266.877369] relay_open+0xabb/0x1370 [ 266.877387] do_blk_trace_setup+0xaf7/0x1780 [ 266.877419] __blk_trace_setup+0x20b/0x380 [ 266.881734] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 266.886491] blk_trace_ioctl+0x274/0x970 [ 266.886513] blkdev_ioctl+0x1aaa/0x55e0 [ 266.886532] block_ioctl+0x16f/0x1d0 [ 266.886551] do_vfs_ioctl+0xcf3/0x2810 [ 266.886570] __se_sys_ioctl+0x1da/0x270 [ 266.886600] __x64_sys_ioctl+0x4a/0x70 [ 266.890360] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 266.896965] do_syscall_64+0xbe/0x100 [ 266.896989] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 266.896998] ================================================================== [ 266.897006] Disabling lock debugging due to kernel taint [ 266.897026] Kernel panic - not syncing: panic_on_warn set ... [ 266.897026] [ 266.897065] CPU: 0 PID: 7771 Comm: syz-executor5 Tainted: G B 4.19.0-rc4+ #66 [ 266.901091] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 266.904908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 266.904917] Call Trace: [ 266.904946] dump_stack+0x306/0x460 [ 266.904990] panic+0x54c/0xafa [ 266.905092] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 266.909597] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 266.913522] kmsan_report+0x2d3/0x2e0 [ 266.913558] __msan_warning+0x7c/0xe0 [ 266.913593] vmap_page_range_noflush+0x975/0xed0 [ 266.913664] map_vm_area+0x17d/0x1f0 [ 267.188233] kmsan_vmap+0xf2/0x180 [ 267.190945] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz0 [ 267.191809] vmap+0x3a1/0x510 [ 267.191847] ? relay_open_buf+0x81e/0x19d0 [ 267.191899] relay_open_buf+0x81e/0x19d0 [ 267.191976] relay_open+0xabb/0x1370 [ 267.192047] do_blk_trace_setup+0xaf7/0x1780 [ 267.220436] __blk_trace_setup+0x20b/0x380 [ 267.224796] blk_trace_ioctl+0x274/0x970 [ 267.228895] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 267.234366] ? alloc_set_pte+0x95d/0x2530 [ 267.238551] ? kmsan_set_origin_inline+0x6b/0x120 [ 267.243424] ? __msan_poison_alloca+0x17a/0x210 [ 267.248138] ? blkdev_ioctl+0x327/0x55e0 [ 267.252223] ? block_ioctl+0x16f/0x1d0 [ 267.256172] blkdev_ioctl+0x1aaa/0x55e0 [ 267.260190] ? task_kmsan_context_state+0x6b/0x120 [ 267.265153] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 267.270563] ? vmalloc_to_page+0x57d/0x6b0 [ 267.274840] ? kmsan_set_origin_inline+0x6b/0x120 [ 267.279893] block_ioctl+0x16f/0x1d0 [ 267.283638] ? block_llseek+0x190/0x190 [ 267.287639] do_vfs_ioctl+0xcf3/0x2810 [ 267.291569] ? security_file_ioctl+0x92/0x200 [ 267.296108] __se_sys_ioctl+0x1da/0x270 [ 267.300124] __x64_sys_ioctl+0x4a/0x70 [ 267.304056] do_syscall_64+0xbe/0x100 [ 267.307896] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 267.313111] RIP: 0033:0x457519 [ 267.316332] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 267.335249] RSP: 002b:00007f4a2e08bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 267.338958] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 267.343063] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457519 [ 267.343078] RDX: 0000000020000040 RSI: 00000000c0481273 RDI: 0000000000000003 [ 267.343092] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 267.343107] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4a2e08c6d4 [ 267.343122] R13: 00000000004be982 R14: 00000000004ce680 R15: 00000000ffffffff [ 267.350826] Kernel Offset: disabled [ 267.390742] Rebooting in 86400 seconds..