[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [ 60.812520] sshd (6136) used greatest stack depth: 53392 bytes left [....] Starting OpenBSD Secure Shell server: sshd[ 61.007920] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 64.821900] random: sshd: uninitialized urandom read (32 bytes read) [ 65.193434] random: sshd: uninitialized urandom read (32 bytes read) [ 67.651313] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.47' (ECDSA) to the list of known hosts. [ 73.429462] random: sshd: uninitialized urandom read (32 bytes read) 2018/10/11 01:12:51 fuzzer started [ 77.991360] random: cc1: uninitialized urandom read (8 bytes read) 2018/10/11 01:12:56 dialing manager at 10.128.0.26:39089 2018/10/11 01:12:56 syscalls: 1 2018/10/11 01:12:56 code coverage: enabled 2018/10/11 01:12:56 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/10/11 01:12:56 setuid sandbox: enabled 2018/10/11 01:12:56 namespace sandbox: enabled 2018/10/11 01:12:56 Android sandbox: /sys/fs/selinux/policy does not exist 2018/10/11 01:12:56 fault injection: enabled 2018/10/11 01:12:56 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/10/11 01:12:56 net packed injection: /dev/net/tun can't be opened (open /dev/net/tun: cannot allocate memory) 2018/10/11 01:12:56 net device setup: enabled [ 83.015419] random: crng init done 01:14:54 executing program 0: [ 199.004455] IPVS: ftp: loaded support on port[0] = 21 [ 200.520353] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.526954] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.535785] device bridge_slave_0 entered promiscuous mode [ 200.696685] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.703280] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.711922] device bridge_slave_1 entered promiscuous mode [ 200.855188] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 200.998607] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 201.441589] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 201.590440] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 201.873495] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 201.880562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 01:14:58 executing program 1: [ 202.526286] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 202.534772] team0: Port device team_slave_0 added [ 202.749492] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 202.757858] team0: Port device team_slave_1 added [ 202.964666] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 202.971881] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 202.980899] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 203.126850] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 203.134068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 203.142915] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 203.204469] IPVS: ftp: loaded support on port[0] = 21 [ 203.377600] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 203.385347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 203.394674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 203.585120] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 203.592881] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 203.602166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 205.325501] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.332154] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.340699] device bridge_slave_0 entered promiscuous mode [ 205.624501] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.630974] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.639658] device bridge_slave_1 entered promiscuous mode [ 205.835922] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 206.071779] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 206.228092] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.234687] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.241809] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.248304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.257747] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 206.696849] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 206.882222] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 207.062012] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 207.185733] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 207.192992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 207.412505] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 207.419656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 01:15:04 executing program 2: [ 208.110202] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 208.118619] team0: Port device team_slave_0 added [ 208.415919] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 208.424214] team0: Port device team_slave_1 added [ 208.752835] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 208.759906] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 208.769048] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 209.017378] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 209.024680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 209.033610] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 209.220344] IPVS: ftp: loaded support on port[0] = 21 [ 209.404555] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 209.412460] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 209.421565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 209.690071] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 209.697861] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 209.707154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 212.204810] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.211299] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.220338] device bridge_slave_0 entered promiscuous mode [ 212.584050] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.590530] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.599277] device bridge_slave_1 entered promiscuous mode [ 212.827984] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.834565] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.841588] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.848254] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.857664] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 212.930269] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 213.257598] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 213.782679] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 214.123992] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 214.413160] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 214.689236] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 214.698187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 214.869702] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 214.876973] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 215.778638] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 215.787160] team0: Port device team_slave_0 added [ 216.004024] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 216.012721] team0: Port device team_slave_1 added [ 216.215122] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 216.222525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 216.231510] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 01:15:12 executing program 3: [ 216.578626] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 216.585874] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 216.594932] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 216.938454] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 216.946204] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 216.955273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 217.307523] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 217.315361] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 217.324610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 218.051096] IPVS: ftp: loaded support on port[0] = 21 [ 218.330314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.508098] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 220.887861] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 220.894436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 220.902661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 221.466620] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.473184] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.480143] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.486739] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.495631] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 221.636452] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.643025] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.651777] device bridge_slave_0 entered promiscuous mode [ 221.783199] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 221.984147] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.990631] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.999518] device bridge_slave_1 entered promiscuous mode [ 222.337555] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 222.429853] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.683789] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 223.661797] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 224.011058] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 224.326752] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 224.334119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 224.756248] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 224.763478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 225.918659] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 225.927097] team0: Port device team_slave_0 added [ 226.278623] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 226.287023] team0: Port device team_slave_1 added [ 226.699908] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 226.707156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 226.716410] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 227.033372] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 227.040471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 227.049724] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready 01:15:23 executing program 4: [ 227.430906] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 227.438849] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 227.448121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 227.907837] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 227.915653] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 227.924925] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 228.013575] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.240714] IPVS: ftp: loaded support on port[0] = 21 [ 229.802808] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 231.471301] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 231.477821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 231.485947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 01:15:27 executing program 0: 01:15:28 executing program 0: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req={0x401, 0x0, 0x3}, 0x10) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xf2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x4000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000080)={{{@in6=@mcast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@mcast2}}, &(0x7f0000000180)=0xe8) sendmsg$xdp(r0, &(0x7f0000000480)={&(0x7f00000001c0)={0x2c, 0x1, r1, 0x2f}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000200)="97006426ec94768e86dde7cbd14c9e8259a51cd1e7a06a99b1ade70db0", 0x1d}, {&(0x7f0000000240)="fc8a4db94f83b882afed69ba5f70970ee56bfa780f295db983d9c6b26caa3a79d9f932818b2747dd5381e4dff86c9707c589328942fd551c54ed6de05ebbfa02c94f", 0x42}, {&(0x7f00000002c0)="fef0999a18e7ba2879f344082120a66a5b030af453dc27baff0aabc8c2969a37fd22e2a992b737b78befd1ba49802da319f32f7e38935ac2aa8e02d98885b419396bad38f07e724cbf1e1fbafdf0ba32926ca22b967f6fc4b60cb2db28b827f6e0", 0x61}, {&(0x7f0000000340)="48a8117bde1bf288ea04e386e7146057911e0b0e3d5e58fa30441979ad802f03db597a0e805904ff9b4521a729eb21f5cc6bd981ae99768f6c5818258fe8e6363c2edea71296d5281c96639e1a15f57326e77f7e70e95c44", 0x58}, {&(0x7f00000003c0)="9ddce667ad5e36f3900f0691f7ec5d5e7aaf502126ffec0f9f427094ac00d1274d73f762871b26", 0x27}], 0x5, 0x0, 0x0, 0x4000}, 0x20000001) close(r0) 01:15:28 executing program 0: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req={0x401, 0x0, 0x3}, 0x10) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xf2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x4000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000080)={{{@in6=@mcast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@mcast2}}, &(0x7f0000000180)=0xe8) sendmsg$xdp(r0, &(0x7f0000000480)={&(0x7f00000001c0)={0x2c, 0x1, r1, 0x2f}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000200)="97006426ec94768e86dde7cbd14c9e8259a51cd1e7a06a99b1ade70db0", 0x1d}, {&(0x7f0000000240)="fc8a4db94f83b882afed69ba5f70970ee56bfa780f295db983d9c6b26caa3a79d9f932818b2747dd5381e4dff86c9707c589328942fd551c54ed6de05ebbfa02c94f", 0x42}, {&(0x7f00000002c0)="fef0999a18e7ba2879f344082120a66a5b030af453dc27baff0aabc8c2969a37fd22e2a992b737b78befd1ba49802da319f32f7e38935ac2aa8e02d98885b419396bad38f07e724cbf1e1fbafdf0ba32926ca22b967f6fc4b60cb2db28b827f6e0", 0x61}, {&(0x7f0000000340)="48a8117bde1bf288ea04e386e7146057911e0b0e3d5e58fa30441979ad802f03db597a0e805904ff9b4521a729eb21f5cc6bd981ae99768f6c5818258fe8e6363c2edea71296d5281c96639e1a15f57326e77f7e70e95c44", 0x58}, {&(0x7f00000003c0)="9ddce667ad5e36f3900f0691f7ec5d5e7aaf502126ffec0f9f427094ac00d1274d73f762871b26", 0x27}], 0x5, 0x0, 0x0, 0x4000}, 0x20000001) close(r0) 01:15:29 executing program 0: r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x400, 0x0) mmap(&(0x7f0000a38000/0x3000)=nil, 0x3000, 0x3, 0x8031, r0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) fcntl$setlease(r0, 0x400, 0x0) [ 232.939704] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.946279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.953342] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.959810] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.968681] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 233.143609] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 01:15:29 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="000200001494f4ea8eeea1ad777c3c9e46c3e381a0be7fef5bd4ea0c995a5b35fb943ce2af47b106e70a319c5cdd36cadfe9ac5683840c82100f4a798a510bad4d994a4577c18e48f50bff7183e0e85a2debfd988db6dd126c2fe4bb08b5b9788fbb2bd94b5c2c070d7b0b784bdf0653c68ecab164e4c815c0dff5df953e0f76d75f44a1a74561b4d5b668b803c99d8f35adfb6741b008b5fb7a42b68b85b5d2c8462ecf1244358cd2541e81902722402220d64ae4cba1ac8d5ea32320193e178413082609cf681bc1b132dcfa1dabcc621ddb737854bc0e7927d105eb1d6c23f8264f01ef0f829ecb26f18030c2412f9e1a70e2", 0xf4) readv(r0, &(0x7f00000002c0), 0x0) socketpair(0x5, 0x80003, 0x5, &(0x7f0000000180)={0xffffffffffffffff}) getsockopt$netlink(r1, 0x10e, 0x609edc9c3a158de8, &(0x7f00000001c0)=""/20, &(0x7f0000000200)=0x14) [ 233.347151] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.353853] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.362617] device bridge_slave_0 entered promiscuous mode [ 233.403657] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.760150] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.766863] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.775980] device bridge_slave_1 entered promiscuous mode [ 234.055751] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready 01:15:30 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='comm\x00') write$UHID_INPUT2(r0, &(0x7f00000000c0), 0x6) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x3c, @loopback, 0x4e20, 0x2, 'wrr\x00', 0x4, 0x8, 0x15}, 0x2c) [ 234.434899] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready 01:15:30 executing program 0: r0 = socket$inet6(0xa, 0x800000000005, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000040)=0x23, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x1000000004e22, 0x0, @mcast1}, 0x1c) 01:15:31 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f0000033ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x21e9}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000000)={r2, 0x7}, 0x8) shutdown(r0, 0x1) [ 235.809609] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 236.281205] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 236.634488] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 236.641551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 236.961741] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 236.968807] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 237.975076] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.054529] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 238.062913] team0: Port device team_slave_0 added [ 238.393065] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 238.401382] team0: Port device team_slave_1 added [ 238.730607] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 238.737860] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 238.746783] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 239.053017] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 239.060093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 239.069057] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 239.226012] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 239.295516] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 239.303200] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 239.312382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 239.557872] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 239.565639] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 239.574603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 240.327179] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 240.333765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 240.342247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 241.490550] 8021q: adding VLAN 0 to HW filter on device team0 01:15:38 executing program 1: [ 242.747497] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.754074] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.761054] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.767661] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.776238] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 242.783073] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 246.117791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.899629] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready 01:15:43 executing program 2: setxattr$trusted_overlay_upper(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='trusted.overlay.upper\x00', &(0x7f0000000280)={0x0, 0xfb, 0x2e, 0x1, 0x2, "f7d52b0cdfab672b026557528d1bcb87", "e3836bdca8dc03b8b3c03867440b5ae747d818ed76e350360d"}, 0x2e, 0x1) syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x8, 0x181000) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000480)}, 0x100000200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00008deff8), &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) [ 247.687820] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 247.694346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 247.702457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 248.352395] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.708428] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.268458] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 251.783931] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 251.790204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 251.798171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 01:15:48 executing program 3: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x8, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001b40)="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", 0x2761, 0x0) close(r0) [ 252.307644] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.317142] ip (7439) used greatest stack depth: 53248 bytes left 01:15:50 executing program 4: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x20000000000006, 0xfffffffffffffff4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x20000200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0xf3, &(0x7f0000000100), &(0x7f0000000280)=""/243, 0x0, 0x8}, 0x28) mount(&(0x7f0000000680)=ANY=[], &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 01:15:50 executing program 0: connect$inet6(0xffffffffffffffff, &(0x7f0000000080), 0xfffffffffffffed0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000440), 0x131f64) recvmmsg(0xffffffffffffffff, &(0x7f0000000cc0)=[{{&(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000280)=""/90, 0x5a}, {&(0x7f0000000300)=""/143, 0x8f}, {&(0x7f00000003c0)=""/239, 0xef}, {&(0x7f00000004c0)=""/178, 0xb2}], 0x4, &(0x7f0000000580)=""/82, 0x52, 0x6}, 0x310}, {{&(0x7f0000000600)=@l2, 0x80, &(0x7f0000000a00)=[{&(0x7f00000000c0)=""/55, 0x37}, {&(0x7f0000000680)=""/118, 0x76}, {&(0x7f0000000180)=""/49, 0x31}, {&(0x7f0000000700)=""/209, 0xd1}, {&(0x7f0000000800)=""/116, 0x74}, {&(0x7f0000000880)=""/17, 0x11}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/171, 0xab}], 0x8, 0x0, 0x0, 0x1}, 0xffffffffffffffe1}, {{&(0x7f0000000a80)=@sco, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000b00)=""/138, 0x8a}, {&(0x7f0000000bc0)=""/8, 0x8}], 0x2, &(0x7f0000000c40)=""/74, 0x4a, 0x21}, 0xff}], 0x3, 0x61, &(0x7f0000000d80)={0x0, 0x1c9c380}) getsockopt$inet6_opts(r0, 0x29, 0x3f, &(0x7f0000000dc0)=""/151, &(0x7f0000000e80)=0x97) clone(0x1a02100, 0x0, 0xfffffffffffffffe, &(0x7f00000001c0), 0xffffffffffffffff) r1 = syz_open_dev$dmmidi(&(0x7f0000000ec0)='/dev/dmmidi#\x00', 0xff, 0x40000) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x1) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000f00)) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000100), 0x4) ppoll(&(0x7f0000000000), 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000000140), 0x8) 01:15:50 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x1000, 0x220000) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000040)="fe24448ec31757658f9f1ab625fa5d09618023b776a722a76d2424d92dd5816f8a373c573326644501f4f126e6d589fe0084707713919de39cff10b1d2387ddb29de22b4d56d05e6155e95b96975") getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000000c0)={@dev, 0x0}, &(0x7f0000000100)=0x14) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x7fff, 0x30}, &(0x7f0000000180)=0xc) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x3ff, 0x6, 0x3, 0x4, 0x1ff, 0x0, 0x3, 0x99ef, r2}, &(0x7f0000000200)=0x20) getsockopt$inet_tcp_int(r0, 0x6, 0x6, &(0x7f0000000240), &(0x7f0000000280)=0x4) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000002c0)={0x7, 0x8, 0x0, 0x0, r3}, 0x10) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000300)={0x80, 0x180000000000000, 0x466a, 0x3f}, 0x10) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000340)='/dev/hwrng\x00', 0x101200, 0x0) write$nbd(r4, &(0x7f0000000380)={0x67446698, 0x1, 0x4, 0x0, 0x1, "55bbcbb84c98601c6fb7cd2983cbf0d1ac32199743d941efe97b"}, 0x2a) r5 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000440), 0x0, 0xffffffffffffffff) keyctl$get_security(0x11, r5, &(0x7f0000000480)=""/218, 0xda) ioctl$sock_inet_SIOCGIFBRDADDR(r4, 0x8919, &(0x7f0000000580)={'veth1_to_team\x00', {0x2, 0x4e24, @rand_addr=0x1}}) getsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f00000005c0), &(0x7f0000000600)=0x4) timer_create(0x0, &(0x7f0000000640)={0x0, 0x28}, &(0x7f0000000680)=0x0) timer_getoverrun(r6) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f00000006c0)={0x3, 0xd6}) r7 = msgget$private(0x0, 0x9) msgsnd(r7, &(0x7f0000000700)={0x3, "eb4424051fcdccef70425a1f4c559dde5965f2ec4149c8eaedeb682822da49595e5f155ffd20985c3ab156952372fdebe6625386a83653aeed48d85f9b5ebd572f2f6580db1b9630d917b50a6704b78ddb8f3015fc6b1075034dbeff9d5fdce6c3bec20232b4ae89257a82d106acd438ba408f0756a7339f096450336d32c2f61038e3099528588a20eff1056823f9fb6e6cd7ec08c4b78042d3a7d92a4c1e0e72d0f7bd767d326a2b81a7d16b"}, 0xb5, 0x800) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000007c0)={0x10000, 0x2, 0x1000}, 0x4) lstat(&(0x7f0000000800)='\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000008c0)={{{@in=@local, @in, 0x4e21, 0x70, 0x4e24, 0x6, 0xa, 0x0, 0xa0, 0xaf, r1, r8}, {0x1, 0x4, 0x10001, 0x9, 0xffffffffffffffbc, 0x28a4, 0x2, 0x8001}, {0xffffffff, 0x0, 0x6e, 0x2}, 0x5, 0x6e6bbd, 0x2, 0x0, 0x2, 0x1}, {{@in6=@loopback, 0x4d2, 0x2b}, 0xa, @in6=@loopback, 0x3503, 0x4, 0x0, 0x8, 0x100, 0x401, 0x4}}, 0xe8) r9 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000000, r9) add_key(&(0x7f00000009c0)='ceph\x00', &(0x7f0000000a00)={'syz', 0x3}, &(0x7f0000000a40)="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", 0x1000, r5) socket$alg(0x26, 0x5, 0x0) alarm(0x3) ioctl$KVM_RUN(r0, 0xae80, 0x0) read$FUSE(r0, &(0x7f0000001a40), 0x1000) getsockopt$IP_VS_SO_GET_TIMEOUT(r4, 0x0, 0x486, &(0x7f0000002a40), &(0x7f0000002a80)=0xc) 01:15:50 executing program 2: setxattr$trusted_overlay_upper(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='trusted.overlay.upper\x00', &(0x7f0000000280)={0x0, 0xfb, 0x2e, 0x1, 0x2, "f7d52b0cdfab672b026557528d1bcb87", "e3836bdca8dc03b8b3c03867440b5ae747d818ed76e350360d"}, 0x2e, 0x1) syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x8, 0x181000) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000480)}, 0x100000200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00008deff8), &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 01:15:50 executing program 1: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r1) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[]}}, 0x0) fcntl$getownex(r2, 0x10, &(0x7f00000000c0)={0x0, 0x0}) ptrace$setopts(0x4206, r3, 0x0, 0x0) 01:15:50 executing program 3: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x4, &(0x7f0000000100)=0x1, 0x4) 01:15:50 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) shutdown(r0, 0x1) [ 254.407611] ptrace attach of "/root/syz-executor1"[6285] was attempted by "/root/syz-executor1"[7496] 01:15:50 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000400)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) recvmsg(r1, &(0x7f00000000c0)={0x0, 0xfffffc70, &(0x7f0000000700)=[{&(0x7f00000013c0)=""/4096, 0x1000}], 0x1, &(0x7f0000000040)=""/16, 0xfffffffffffffdd2}, 0x0) 01:15:50 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000580)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20, 0x6000000, 0x0, 0x0, 0x185}, &(0x7f0000000140)={0x8}, &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000500)={0x28, 0x0, 0x0, @reserved}, 0x10) 01:15:50 executing program 4: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x20000000000006, 0xfffffffffffffff4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x20000200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0xf3, &(0x7f0000000100), &(0x7f0000000280)=""/243, 0x0, 0x8}, 0x28) mount(&(0x7f0000000680)=ANY=[], &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 01:15:50 executing program 3: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x4, &(0x7f0000000100)=0x1, 0x4) 01:15:51 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000240)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) futex(&(0x7f0000000040)=0x1, 0x0, 0x1, &(0x7f0000000100)={0x0, 0x989680}, &(0x7f0000000180), 0x0) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000000)) 01:15:51 executing program 0: r0 = memfd_create(&(0x7f00003ce000)='}\x00', 0x0) write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, &(0x7f0000000000)={0x28}, 0x28) mmap(&(0x7f00002e4000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) name_to_handle_at(r0, &(0x7f00002e4000)="2e2f66696c65ffff", &(0x7f0000000000)=ANY=[], &(0x7f0000001ffc), 0x1400) 01:15:51 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000002900)={0xd09}) [ 255.979238] IPVS: ftp: loaded support on port[0] = 21 [ 256.715137] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.721563] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.729968] device bridge_slave_0 entered promiscuous mode [ 256.811298] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.817871] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.826067] device bridge_slave_1 entered promiscuous mode [ 256.905183] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 256.983160] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 257.221377] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 257.304485] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 257.385763] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 257.392866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 257.473537] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 257.480523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 257.717165] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 257.724853] team0: Port device team_slave_0 added [ 257.802754] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 257.810387] team0: Port device team_slave_1 added [ 257.887919] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 257.969804] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 258.050747] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 258.058135] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 258.067364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 258.141583] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 258.149174] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 258.158409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 259.042153] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.048587] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.055594] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.062074] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.069929] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 259.412433] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 262.316168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.616508] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 262.914549] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 262.920807] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 262.928873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 263.222436] 8021q: adding VLAN 0 to HW filter on device team0 01:16:01 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000580)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20, 0x6000000, 0x0, 0x0, 0x185}, &(0x7f0000000140)={0x8}, &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000500)={0x28, 0x0, 0x0, @reserved}, 0x10) 01:16:01 executing program 2: r0 = socket(0x40000000002, 0x3, 0x2) socket$inet6(0xa, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0xfcda) setsockopt$inet_int(r0, 0x0, 0x4, &(0x7f0000000100)=0x1, 0x4) sendto$unix(r0, &(0x7f0000000080), 0x7272, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) 01:16:01 executing program 3: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x4, &(0x7f0000000100)=0x1, 0x4) 01:16:01 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000400)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f0000000140)="abf8d13af618f773806a55c5bfb67340", 0x10, 0x0, &(0x7f0000000200)=@ethernet={0x0, @local}, 0x80) recvmsg(r1, &(0x7f00000000c0)={0x0, 0xfffffc70, &(0x7f0000000700)=[{&(0x7f00000013c0)=""/4096, 0x1000}], 0x1, &(0x7f0000000040)=""/16, 0xfffffffffffffdd2}, 0x0) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x0, 0x4) 01:16:01 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="ab553fec947a1333177e24b5ebadf404", 0x10) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000004740)=[{{&(0x7f00000007c0)=@pptp={0x18, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000840)=""/82, 0x52}, {&(0x7f0000000940)=""/191, 0xbf}, {&(0x7f0000000c00)=""/197, 0xc5}], 0x3, &(0x7f0000000ec0)=""/210, 0xd2}}], 0x1, 0x0, &(0x7f0000004840)) 01:16:01 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000580)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20, 0x6000000, 0x0, 0x0, 0x185}, &(0x7f0000000140)={0x8}, &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000500)={0x28, 0x0, 0x0, @reserved}, 0x10) [ 265.372454] raw_sendmsg: syz-executor2 forgot to set AF_INET. Fix it! 01:16:01 executing program 3: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x4, &(0x7f0000000100)=0x1, 0x4) 01:16:01 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x20000000000006, 0xfffffffffffffff4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x20000200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0xf3, &(0x7f0000000100), &(0x7f0000000280)=""/243, 0x0, 0x8}, 0x28) mount(&(0x7f0000000680)=ANY=[], &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) epoll_create(0x7) 01:16:01 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000002900)={0xd00, 0x0, 0xffffffb8}) 01:16:02 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x9000000000002, 0x0) ioctl(r0, 0x73, &(0x7f0000000340)="025cd90700145f8f764070") clone(0x0, &(0x7f0000000180), &(0x7f0000001180), &(0x7f00000011c0), &(0x7f0000000080)) r1 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000600)='fou\x00') ioctl$SG_GET_REQUEST_TABLE(r2, 0x2286, &(0x7f0000000640)) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = fcntl$getown(r0, 0x9) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x5, 0x4, 0x4, 0x1e, r4}) lgetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@known='system.posix_acl_default\x00', &(0x7f0000000200)=""/134, 0x86) getsockopt$sock_buf(r3, 0x1, 0x37, &(0x7f0000000440)=""/244, &(0x7f00000002c0)=0xf4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f0000000300)={0x2, 'team_slave_1\x00'}, 0x18) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x82, &(0x7f0000000380)={'broute\x00'}, &(0x7f0000000540)=0x78) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000580)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000005c0)=0x24) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f00000007c0)={r5, 0x1}, &(0x7f0000000800)=0x8) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000840)={0x2, 'bcsh0\x00', 0x2}, 0x18) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) 01:16:02 executing program 3: setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000100)=0x1, 0x4) 01:16:02 executing program 0: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$setregs(0xffffffffffffffff, r0, 0x0, &(0x7f0000000140)) ptrace$cont(0x20, r0, 0x0, 0x0) [ 266.319687] ================================================================== [ 266.327148] BUG: KMSAN: uninit-value in vmap_page_range_noflush+0x975/0xed0 [ 266.334279] CPU: 0 PID: 7844 Comm: syz-executor4 Not tainted 4.19.0-rc4+ #66 [ 266.341487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 266.350856] Call Trace: [ 266.353474] dump_stack+0x306/0x460 [ 266.357138] ? vmap_page_range_noflush+0x975/0xed0 [ 266.362106] kmsan_report+0x1a2/0x2e0 [ 266.365951] __msan_warning+0x7c/0xe0 [ 266.369801] vmap_page_range_noflush+0x975/0xed0 [ 266.374653] map_vm_area+0x17d/0x1f0 [ 266.378421] kmsan_vmap+0xf2/0x180 [ 266.382018] vmap+0x3a1/0x510 [ 266.385191] ? relay_open_buf+0x81e/0x19d0 [ 266.389475] relay_open_buf+0x81e/0x19d0 [ 266.393595] relay_open+0xabb/0x1370 [ 266.397377] do_blk_trace_setup+0xaf7/0x1780 [ 266.401865] __blk_trace_setup+0x20b/0x380 [ 266.406153] blk_trace_ioctl+0x274/0x970 [ 266.410265] ? kmsan_set_origin_inline+0x6b/0x120 [ 266.415144] ? __msan_poison_alloca+0x17a/0x210 [ 266.419854] ? blkdev_ioctl+0x327/0x55e0 [ 266.423945] ? block_ioctl+0x16f/0x1d0 [ 266.427877] blkdev_ioctl+0x1aaa/0x55e0 [ 266.431876] ? do_futex+0xada/0x59c0 [ 266.435636] ? task_kmsan_context_state+0x6b/0x120 [ 266.440597] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 266.445996] ? vmalloc_to_page+0x57d/0x6b0 [ 266.450275] ? kmsan_set_origin_inline+0x6b/0x120 [ 266.455160] block_ioctl+0x16f/0x1d0 [ 266.458914] ? block_llseek+0x190/0x190 [ 266.462923] do_vfs_ioctl+0xcf3/0x2810 [ 266.466892] ? security_file_ioctl+0x92/0x200 [ 266.471434] __se_sys_ioctl+0x1da/0x270 [ 266.475453] __x64_sys_ioctl+0x4a/0x70 [ 266.479372] do_syscall_64+0xbe/0x100 [ 266.483207] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 266.488414] RIP: 0033:0x457519 [ 266.491633] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 266.510563] RSP: 002b:00007f08d0774c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 266.518310] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457519 [ 266.525598] RDX: 0000000020000040 RSI: 00000000c0481273 RDI: 0000000000000004 [ 266.532890] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 266.540182] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f08d07756d4 [ 266.547468] R13: 00000000004be982 R14: 00000000004ce680 R15: 00000000ffffffff [ 266.554776] [ 266.556425] Uninit was created at: [ 266.559993] kmsan_internal_poison_shadow+0xc8/0x1d0 [ 266.565122] kmsan_kmalloc+0xa4/0x120 01:16:02 executing program 5: 01:16:02 executing program 2: 01:16:02 executing program 0: 01:16:02 executing program 1: 01:16:02 executing program 3: r0 = socket(0x0, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x4, &(0x7f0000000100)=0x1, 0x4) [ 266.568952] __kmalloc+0x14b/0x440 [ 266.572515] kmsan_vmap+0x9b/0x180 [ 266.576082] vmap+0x3a1/0x510 [ 266.579217] relay_open_buf+0x81e/0x19d0 [ 266.583317] relay_open+0xabb/0x1370 [ 266.587075] do_blk_trace_setup+0xaf7/0x1780 [ 266.591516] __blk_trace_setup+0x20b/0x380 [ 266.595774] blk_trace_ioctl+0x274/0x970 [ 266.599859] blkdev_ioctl+0x1aaa/0x55e0 [ 266.603860] block_ioctl+0x16f/0x1d0 [ 266.607600] do_vfs_ioctl+0xcf3/0x2810 [ 266.611521] __se_sys_ioctl+0x1da/0x270 [ 266.615525] __x64_sys_ioctl+0x4a/0x70 [ 266.619442] do_syscall_64+0xbe/0x100 [ 266.623272] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 266.628479] ================================================================== [ 266.635846] Disabling lock debugging due to kernel taint [ 266.641331] Kernel panic - not syncing: panic_on_warn set ... [ 266.641331] [ 266.648734] CPU: 0 PID: 7844 Comm: syz-executor4 Tainted: G B 4.19.0-rc4+ #66 [ 266.657332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 266.666711] Call Trace: [ 266.669348] dump_stack+0x306/0x460 [ 266.673023] panic+0x54c/0xafa [ 266.676311] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 266.681796] kmsan_report+0x2d3/0x2e0 [ 266.685640] __msan_warning+0x7c/0xe0 [ 266.689482] vmap_page_range_noflush+0x975/0xed0 [ 266.694334] map_vm_area+0x17d/0x1f0 [ 266.698103] kmsan_vmap+0xf2/0x180 [ 266.701677] vmap+0x3a1/0x510 [ 266.704814] ? relay_open_buf+0x81e/0x19d0 [ 266.709101] relay_open_buf+0x81e/0x19d0 [ 266.713215] relay_open+0xabb/0x1370 [ 266.716983] do_blk_trace_setup+0xaf7/0x1780 [ 266.721463] __blk_trace_setup+0x20b/0x380 [ 266.725755] blk_trace_ioctl+0x274/0x970 [ 266.729869] ? kmsan_set_origin_inline+0x6b/0x120 [ 266.734747] ? __msan_poison_alloca+0x17a/0x210 [ 266.739458] ? blkdev_ioctl+0x327/0x55e0 [ 266.743546] ? block_ioctl+0x16f/0x1d0 [ 266.747470] blkdev_ioctl+0x1aaa/0x55e0 [ 266.751473] ? do_futex+0xada/0x59c0 [ 266.755235] ? task_kmsan_context_state+0x6b/0x120 [ 266.760202] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 266.765599] ? vmalloc_to_page+0x57d/0x6b0 [ 266.769873] ? kmsan_set_origin_inline+0x6b/0x120 [ 266.774773] block_ioctl+0x16f/0x1d0 [ 266.778527] ? block_llseek+0x190/0x190 [ 266.782535] do_vfs_ioctl+0xcf3/0x2810 [ 266.786470] ? security_file_ioctl+0x92/0x200 [ 266.791010] __se_sys_ioctl+0x1da/0x270 [ 266.795080] __x64_sys_ioctl+0x4a/0x70 [ 266.798994] do_syscall_64+0xbe/0x100 [ 266.802832] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 266.808052] RIP: 0033:0x457519 [ 266.811271] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 266.830224] RSP: 002b:00007f08d0774c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 266.837958] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457519 [ 266.845251] RDX: 0000000020000040 RSI: 00000000c0481273 RDI: 0000000000000004 [ 266.852545] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 266.859836] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f08d07756d4 [ 266.867127] R13: 00000000004be982 R14: 00000000004ce680 R15: 00000000ffffffff [ 266.875484] Kernel Offset: disabled [ 266.879125] Rebooting in 86400 seconds..