[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 32.952722] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 36.288091] random: sshd: uninitialized urandom read (32 bytes read) [ 36.831875] random: sshd: uninitialized urandom read (32 bytes read) [ 38.253306] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.54' (ECDSA) to the list of known hosts. [ 43.821331] random: sshd: uninitialized urandom read (32 bytes read) 2018/07/04 18:52:02 fuzzer started [ 45.483933] random: cc1: uninitialized urandom read (8 bytes read) 2018/07/04 18:52:06 dialing manager at 10.128.0.26:36783 2018/07/04 18:52:08 syscalls: 1541 2018/07/04 18:52:08 code coverage: enabled 2018/07/04 18:52:08 comparison tracing: ioctl(KCOV_TRACE_CMP) failed: errno 524 2018/07/04 18:52:08 setuid sandbox: enabled 2018/07/04 18:52:08 namespace sandbox: enabled 2018/07/04 18:52:08 fault injection: enabled 2018/07/04 18:52:08 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/07/04 18:52:08 net packed injection: enabled [ 50.806325] random: crng init done 18:53:22 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x61) read(r0, &(0x7f0000000040)=""/11, 0xb) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)) poll(&(0x7f0000000000)=[{r1}], 0x1, 0xa9) dup3(r1, r0, 0x0) 18:53:22 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x1, 0x1f5) sendto$inet6(r0, &(0x7f0000000080)="040300000309c14609005375c52cf7c219f87ae819983612b578db840975", 0x1e, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x2, @loopback={0x0, 0x1}, 0x8}, 0x1c) 18:53:22 executing program 2: 18:53:22 executing program 4: 18:53:22 executing program 7: 18:53:22 executing program 5: 18:53:22 executing program 6: 18:53:22 executing program 3: [ 124.774347] IPVS: ftp: loaded support on port[0] = 21 [ 124.828929] IPVS: ftp: loaded support on port[0] = 21 [ 124.851161] IPVS: ftp: loaded support on port[0] = 21 [ 124.902800] IPVS: ftp: loaded support on port[0] = 21 [ 124.917310] IPVS: ftp: loaded support on port[0] = 21 [ 124.919557] IPVS: ftp: loaded support on port[0] = 21 [ 124.954719] IPVS: ftp: loaded support on port[0] = 21 [ 124.979105] IPVS: ftp: loaded support on port[0] = 21 [ 127.323687] ip (4748) used greatest stack depth: 54536 bytes left [ 128.075653] ip (4797) used greatest stack depth: 54344 bytes left [ 128.693557] ip (4843) used greatest stack depth: 54328 bytes left [ 128.973961] ip (4857) used greatest stack depth: 54040 bytes left [ 129.006925] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.013410] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.065405] device bridge_slave_0 entered promiscuous mode [ 129.123956] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.130437] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.146514] device bridge_slave_0 entered promiscuous mode [ 129.164486] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.171000] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.193657] device bridge_slave_0 entered promiscuous mode [ 129.263547] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.270097] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.321207] device bridge_slave_0 entered promiscuous mode [ 129.371903] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.378386] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.404169] device bridge_slave_0 entered promiscuous mode [ 129.420202] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.426677] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.446141] device bridge_slave_1 entered promiscuous mode [ 129.458967] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.465466] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.490722] device bridge_slave_1 entered promiscuous mode [ 129.510192] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.516672] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.527758] device bridge_slave_1 entered promiscuous mode [ 129.543510] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.549986] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.567252] device bridge_slave_0 entered promiscuous mode [ 129.598766] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.605250] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.624265] device bridge_slave_0 entered promiscuous mode [ 129.637403] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.643873] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.662955] device bridge_slave_0 entered promiscuous mode [ 129.674685] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.681172] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.701292] device bridge_slave_1 entered promiscuous mode [ 129.715541] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.722003] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.749705] device bridge_slave_1 entered promiscuous mode [ 129.772486] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 129.780382] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 129.803326] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 129.815459] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.821989] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.866511] device bridge_slave_1 entered promiscuous mode [ 129.895161] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 129.913090] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.919573] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.944927] device bridge_slave_1 entered promiscuous mode [ 129.970809] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.977286] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.003882] device bridge_slave_1 entered promiscuous mode [ 130.039310] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 130.047968] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 130.055490] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 130.068706] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 130.086298] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 130.106255] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 130.210197] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 130.288881] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 130.335775] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 130.401359] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 130.442919] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 130.535561] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 130.771337] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 130.799226] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 130.880309] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 130.989959] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 131.094376] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 131.105644] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 131.158709] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 131.169589] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 131.182738] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 131.213608] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 131.227934] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 131.267000] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 131.363818] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 131.370879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 131.394512] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 131.401587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 131.423838] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 131.443679] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 131.450745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 131.469878] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 131.476991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 131.541944] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 131.565440] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 131.585124] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 131.630918] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 131.639972] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 131.673203] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 131.680940] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 131.702518] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 131.709649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 131.738639] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 131.745876] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 131.772853] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 131.779939] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 131.866524] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 131.873609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 131.893188] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 131.901801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 131.918389] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 131.927510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 132.008366] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 132.017602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 132.101960] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 132.109099] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 132.140453] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 132.147503] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 132.229666] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 132.236707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 132.460702] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 132.493279] team0: Port device team_slave_0 added [ 132.546959] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 132.565206] team0: Port device team_slave_0 added [ 132.582202] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 132.598368] team0: Port device team_slave_0 added [ 132.620322] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 132.645719] team0: Port device team_slave_0 added [ 132.697541] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 132.732540] team0: Port device team_slave_1 added [ 132.802701] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 132.819172] team0: Port device team_slave_1 added [ 132.846834] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 132.871312] team0: Port device team_slave_1 added [ 132.931595] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 132.953084] team0: Port device team_slave_1 added [ 132.975697] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 132.998909] team0: Port device team_slave_0 added [ 133.021148] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 133.031019] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 133.044286] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 133.076800] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 133.095646] team0: Port device team_slave_0 added [ 133.116293] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 133.127426] team0: Port device team_slave_0 added [ 133.135545] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 133.142601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 133.161350] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 133.194699] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 133.211757] team0: Port device team_slave_0 added [ 133.237129] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 133.244840] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 133.257951] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 133.284270] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 133.293730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 133.307730] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 133.353768] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 133.366123] team0: Port device team_slave_1 added [ 133.374917] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 133.389304] team0: Port device team_slave_1 added [ 133.401720] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 133.409391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 133.440234] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 133.458725] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 133.473170] team0: Port device team_slave_1 added [ 133.501810] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 133.516927] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 133.524813] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 133.569955] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 133.595971] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 133.618396] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 133.641760] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 133.650663] team0: Port device team_slave_1 added [ 133.657485] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 133.664485] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 133.672908] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 133.709779] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 133.726272] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 133.736422] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 133.743622] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 133.757833] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 133.800497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 133.816289] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 133.831801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 133.846771] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 133.864676] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 133.873910] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 133.883274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 133.897201] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 133.905129] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 133.914487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 133.924074] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 133.945192] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 133.971228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 133.992999] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 134.000659] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 134.008899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 134.035178] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 134.051268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 134.065015] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 134.085370] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 134.094467] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 134.101903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 134.113776] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 134.142819] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 134.158668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 134.180206] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 134.193702] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 134.209960] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 134.219260] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 134.249959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 134.271774] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 134.291793] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 134.307827] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 134.325998] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 134.339498] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 134.348182] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 134.356678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 134.366869] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 134.387964] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 134.396354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 134.417765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 134.437240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 134.454721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 134.472727] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 134.480304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 134.498821] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 134.509375] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 134.516699] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 134.525777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 134.555598] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 134.566205] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 134.576723] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 134.597422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 134.636794] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 134.671367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 134.721620] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 134.729186] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 134.737841] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 134.765019] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 134.776918] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 134.789866] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 134.840309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 134.873017] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 134.900206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 135.072273] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 135.079785] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 135.096203] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 137.225145] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.231624] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.238482] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.244939] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.320502] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 137.327343] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 137.355432] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.361904] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.368692] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.375115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.383963] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 137.394669] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.401132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.407980] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.414405] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.428799] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 137.670181] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.676651] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.683439] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.689971] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.704747] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 137.714495] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.721070] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.727876] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.734310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.788527] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 137.799844] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.806317] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.813189] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.819732] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.853680] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 137.870916] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.877377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.884203] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.890650] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.901175] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 138.154535] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.161023] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.167869] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.174335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.187452] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 138.335248] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 138.362983] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 138.389888] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 138.420238] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 138.429338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 138.438574] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 138.447445] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 148.010617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.089511] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.155721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.257899] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.366086] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.554481] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.729482] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.033376] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 149.109705] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 149.141413] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.198428] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 149.214515] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 149.431955] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 149.540667] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 149.698755] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 150.063520] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 150.069929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 150.078494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 150.126734] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 150.135022] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 150.160907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 150.197219] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 150.209323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 150.224202] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 150.252574] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 150.262389] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 150.271848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 150.296301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 150.511937] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 150.518354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 150.530916] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 150.632795] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 150.639254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 150.651025] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 150.803813] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 150.810213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 150.825351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 151.114558] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.139086] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.153997] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 151.164552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 151.184708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 151.226887] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.351129] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.607912] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.781432] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.915431] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.132742] 8021q: adding VLAN 0 to HW filter on device team0 18:53:56 executing program 1: 18:53:56 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000240), &(0x7f0000000280)=0x6) 18:53:56 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000001100)=[{&(0x7f0000000000)="03", 0x1}], 0x1, 0x1) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x20000000000002, 0x32, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f00000025c0)=[{&(0x7f0000000040)=""/7, 0x174}, {&(0x7f0000001340)=""/217, 0xd9}, {&(0x7f0000003500)=""/4096, 0x1000}], 0x3) 18:53:56 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$inet(0x15, 0x5, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000000140), 0xfe9d, 0x0, 0x0, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) 18:53:56 executing program 5: request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, &(0x7f0000000100)='O&^em0wlan0\x00', 0xfffffffffffffffb) 18:53:56 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000001100)=[{&(0x7f0000000000)="03", 0x1}], 0x1, 0x1) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x20000000000002, 0x32, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f00000025c0)=[{&(0x7f0000000040)=""/7, 0x174}, {&(0x7f0000001340)=""/217, 0xd9}, {&(0x7f0000003500)=""/4096, 0x1000}], 0x3) 18:53:56 executing program 5: request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, &(0x7f0000000100)='O&^em0wlan0\x00', 0xfffffffffffffffb) 18:53:57 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000180)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000001c0)={[], 0x0, 0x20fff, 0x3a9}) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 18:53:57 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000180)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 18:53:57 executing program 6: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)="2f65786500000000000489004bddd9de91be10eebf000ee91e18f0c76fbb232a07424ae1e901d2da75af1f0200f5ab26d7e071fb35331ce39c5a0000") ioctl$FS_IOC_FSGETXATTR(r0, 0x6612, &(0x7f0000000180)) 18:53:57 executing program 1: creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) 18:53:57 executing program 5: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x8000a, 0x0) sendto(r0, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000240)=@un=@file={0x0, './file0\x00'}, 0x80) 18:53:57 executing program 7: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xe, &(0x7f0000000080)=ANY=[@ANYBLOB="b7000000000001dabfa30000000000000703000028feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000017d400300000000006506000001ed00001f040000000000006f640000000000006a0a00fe00000000850000002e000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) 18:53:57 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x5e22}, 0x1c) [ 158.329759] syz-executor5 uses obsolete (PF_INET,SOCK_PACKET) 18:53:57 executing program 1: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = getegid() fchownat(r0, &(0x7f00000000c0)='./file0\x00', 0x0, r1, 0x1000) 18:53:57 executing program 4: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="240000001a0025f00485bc04fef7001d0a0b48ff2265cea2037ea0b00800030001000000", 0x24) 18:53:57 executing program 6: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)="2f65786500000000000489004bddd9de91be10eebf000ee91e18f0c76fbb232a07424ae1e901d2da75af1f0200f5ab26d7e071fb35331ce39c5a0000") ioctl$FS_IOC_FSGETXATTR(r0, 0x6612, &(0x7f0000000180)) 18:53:57 executing program 5: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x8000a, 0x0) sendto(r0, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000240)=@un=@file={0x0, './file0\x00'}, 0x80) 18:53:57 executing program 7: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)="2f65786500000000000489004bddd9de91be10eebf000ee91e18f0c76fbb232a07424ae1e901d2da75af1f0200f5ab26d7e071fb35331ce39c5a0000") ioctl$FS_IOC_FSGETXATTR(r0, 0x6612, &(0x7f0000000180)) 18:53:57 executing program 2: 18:53:57 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0x101, @tick=0x694, 0x9, {0x40000000000, 0x1f}, 0x8001, 0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000380)={{}, 'port1\x00'}) 18:53:57 executing program 4: r0 = socket(0x1e, 0x80801, 0x100000000000) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000000)) 18:53:57 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000680)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x3}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000800)="cf", 0x1}], 0x1, &(0x7f0000000240)}, 0x4000040) 18:53:59 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000180)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000001c0)={[], 0x0, 0x20fff, 0x3a9}) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 18:53:59 executing program 0: 18:53:59 executing program 6: 18:53:59 executing program 7: 18:53:59 executing program 4: 18:53:59 executing program 2: 18:53:59 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000680)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x3}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000800)="cf", 0x1}], 0x1, &(0x7f0000000240)}, 0x4000040) 18:53:59 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0x101, @tick=0x694, 0x9, {0x40000000000, 0x1f}, 0x8001, 0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000380)={{}, 'port1\x00'}) [ 160.643968] ================================================================== [ 160.651431] BUG: KMSAN: uninit-value in update_cfs_rq_load_avg+0x1370/0x1aa0 [ 160.658654] CPU: 1 PID: 4599 Comm: syz-executor7 Not tainted 4.17.0+ #18 [ 160.665496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 160.674839] Call Trace: [ 160.677417] dump_stack+0x185/0x1d0 [ 160.681027] kmsan_report+0x188/0x2a0 [ 160.684823] __msan_warning_32+0x70/0xc0 [ 160.688882] update_cfs_rq_load_avg+0x1370/0x1aa0 [ 160.693710] ? console_trylock+0x200/0x200 [ 160.697938] update_load_avg+0xe50/0x2cc0 [ 160.702077] ? update_curr+0x690/0x10a0 [ 160.706053] dequeue_task_fair+0x13f/0x3300 [ 160.710358] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 160.715799] ? enqueue_task_fair+0x4490/0x4490 [ 160.720453] deactivate_task+0x560/0x7d0 [ 160.724499] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 160.729862] __schedule+0x164/0x770 [ 160.733475] schedule+0x1cc/0x2f0 [ 160.736921] do_nanosleep+0x2c3/0x9c0 [ 160.740713] __se_sys_nanosleep+0x4b3/0x6a0 [ 160.745018] ? hrtimer_init_sleeper+0xc0/0xc0 [ 160.749500] __x64_sys_nanosleep+0x92/0xc0 [ 160.753722] ? hrtimer_nanosleep+0x560/0x560 [ 160.758113] do_syscall_64+0x15b/0x230 [ 160.761988] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 160.767184] RIP: 0033:0x4811c0 [ 160.770368] RSP: 002b:0000000000a3ea98 EFLAGS: 00000246 ORIG_RAX: 0000000000000023 [ 160.778059] RAX: ffffffffffffffda RBX: 0000000000027318 RCX: 00000000004811c0 [ 160.785314] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000a3eaa0 [ 160.792655] RBP: 0000000000000000 R08: 0000000000000001 R09: 00000000020fe940 [ 160.800107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 160.807358] R13: 0000000000000103 R14: 0000000000a3f160 R15: 0000000000027318 [ 160.814615] [ 160.816319] Uninit was stored to memory at: [ 160.820806] kmsan_internal_chain_origin+0x12b/0x210 [ 160.825895] __msan_chain_origin+0x69/0xc0 [ 160.830248] enqueue_task_fair+0x15bf/0x4490 [ 160.834647] try_to_wake_up+0x162f/0x2260 [ 160.838786] wake_up_process+0x34/0x40 [ 160.842679] hrtimer_wakeup+0xac/0x100 [ 160.846562] __hrtimer_run_queues+0xc54/0x1630 [ 160.851129] hrtimer_interrupt+0x451/0x13c0 [ 160.855446] local_apic_timer_interrupt+0x6b/0x250 [ 160.860368] smp_apic_timer_interrupt+0x5a/0x90 [ 160.865018] [ 160.866628] Uninit was stored to memory at: [ 160.870947] kmsan_internal_chain_origin+0x12b/0x210 [ 160.876033] __msan_chain_origin+0x69/0xc0 [ 160.880255] enqueue_task_fair+0x15bf/0x4490 [ 160.884822] try_to_wake_up+0x162f/0x2260 [ 160.888956] wake_up_process+0x34/0x40 [ 160.892849] hrtimer_wakeup+0xac/0x100 [ 160.896733] __hrtimer_run_queues+0xc54/0x1630 [ 160.901298] hrtimer_interrupt+0x451/0x13c0 [ 160.905605] local_apic_timer_interrupt+0x6b/0x250 [ 160.910519] smp_apic_timer_interrupt+0x5a/0x90 [ 160.915177] [ 160.916794] Uninit was stored to memory at: [ 160.921101] kmsan_internal_chain_origin+0x12b/0x210 [ 160.926201] __msan_chain_origin+0x69/0xc0 [ 160.930429] reweight_entity+0x1610/0x1a30 [ 160.934659] task_tick_fair+0x5f8/0x1050 [ 160.938707] scheduler_tick+0x28d/0x490 [ 160.942679] update_process_times+0x157/0x1a0 [ 160.947156] tick_sched_timer+0x3ba/0x520 [ 160.951287] __hrtimer_run_queues+0xc54/0x1630 [ 160.955869] hrtimer_interrupt+0x451/0x13c0 [ 160.960201] local_apic_timer_interrupt+0x6b/0x250 [ 160.965119] smp_apic_timer_interrupt+0x5a/0x90 [ 160.969762] [ 160.971367] Uninit was stored to memory at: [ 160.975674] kmsan_internal_chain_origin+0x12b/0x210 [ 160.980761] __msan_chain_origin+0x69/0xc0 [ 160.984992] reweight_entity+0x128b/0x1a30 [ 160.989214] task_tick_fair+0x5f8/0x1050 [ 160.993261] scheduler_tick+0x28d/0x490 [ 160.997217] update_process_times+0x157/0x1a0 [ 161.001696] tick_sched_timer+0x3ba/0x520 [ 161.005829] __hrtimer_run_queues+0xc54/0x1630 [ 161.010393] hrtimer_interrupt+0x451/0x13c0 [ 161.014697] local_apic_timer_interrupt+0x6b/0x250 [ 161.019611] smp_apic_timer_interrupt+0x5a/0x90 [ 161.024254] [ 161.025860] Local variable description: ----flags.i.i.i.i@_raw_spin_lock_irqsave [ 161.033369] Variable was created at: [ 161.037080] _raw_spin_lock_irqsave+0x45/0xf0 [ 161.041557] hrtimer_interrupt+0x107/0x13c0 [ 161.045858] ================================================================== [ 161.053197] Disabling lock debugging due to kernel taint [ 161.058628] Kernel panic - not syncing: panic_on_warn set ... [ 161.058628] [ 161.065977] CPU: 1 PID: 4599 Comm: syz-executor7 Tainted: G B 4.17.0+ #18 [ 161.074185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 161.083521] Call Trace: [ 161.086106] dump_stack+0x185/0x1d0 [ 161.089731] panic+0x3d0/0x990 [ 161.092913] kmsan_report+0x29e/0x2a0 [ 161.096698] __msan_warning_32+0x70/0xc0 [ 161.100746] update_cfs_rq_load_avg+0x1370/0x1aa0 [ 161.105573] ? console_trylock+0x200/0x200 [ 161.109796] update_load_avg+0xe50/0x2cc0 [ 161.113943] ? update_curr+0x690/0x10a0 [ 161.117909] dequeue_task_fair+0x13f/0x3300 [ 161.122216] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 161.127659] ? enqueue_task_fair+0x4490/0x4490 [ 161.132227] deactivate_task+0x560/0x7d0 [ 161.136280] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 161.141643] __schedule+0x164/0x770 [ 161.145267] schedule+0x1cc/0x2f0 [ 161.148707] do_nanosleep+0x2c3/0x9c0 [ 161.153020] __se_sys_nanosleep+0x4b3/0x6a0 [ 161.157329] ? hrtimer_init_sleeper+0xc0/0xc0 [ 161.161813] __x64_sys_nanosleep+0x92/0xc0 [ 161.166044] ? hrtimer_nanosleep+0x560/0x560 [ 161.170436] do_syscall_64+0x15b/0x230 [ 161.174318] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 161.179489] RIP: 0033:0x4811c0 [ 161.182662] RSP: 002b:0000000000a3ea98 EFLAGS: 00000246 ORIG_RAX: 0000000000000023 [ 161.190354] RAX: ffffffffffffffda RBX: 0000000000027318 RCX: 00000000004811c0 [ 161.197605] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000a3eaa0 [ 161.204857] RBP: 0000000000000000 R08: 0000000000000001 R09: 00000000020fe940 [ 161.212116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 161.219370] R13: 0000000000000103 R14: 0000000000a3f160 R15: 0000000000027318 [ 162.439957] Shutting down cpus with NMI [ 162.444070] ------------[ cut here ]------------ [ 162.448852] kernel BUG at mm/kmsan/kmsan.c:1987! [ 162.453637] invalid opcode: 0000 [#1] SMP PTI [ 162.456195] Dumping ftrace buffer: [ 162.458132] Modules linked in: [ 162.461647] (ftrace buffer empty) [ 162.461689] CPU: 0 PID: 6747 Comm: syz-executor6 Tainted: G B 4.17.0+ #18 [[ 116622..446688558888]] HHaarrddwwaarree nnaamem:e :G oGoogolgel Geo oGgole Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ [ 1 612.6428.49586915]6 1R]I P:R I0P0:1 00:01km0:skanms_namni_n_meni_teernt+e0xr4+0x42/0x70 [ 162.498005] RSP: 0018:fffffe000000eea8 EFLAGS: 00010046 [ 162.503411] RAX: 0000000080000000 RBX: 0000000000000001 RCX: 00000000c0000101 [ 162.510695] RDX: 00000000ffff8802 RSI: ffffffff8a00136c RDI: ffffea000cbf2560 [ 162.517988] RBP: fffffe000000eef9 R08: 0000000000000000 R09: 0000000000000000 [ 162.525315] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 162.532662] R13: 0000000000000000 R14: 00000001424f0000 R15: 0000000000000000 [ 162.539948] FS: 00000000017a4940(0000) GS:ffff88021fc00000(0000) knlGS:0000000000000000 [ 162.548184] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 162.554861] CR2: 00000000008ac1d0 CR3: 00000001424f0000 CR4: 00000000001406f0 [ 162.562148] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 162.569426] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 162.576700] Call Trace: [ 162.579298] [ 162.581479] ? end_repeat_nmi+0x19/0x8e [ 162.585471] ? end_repeat_nmi+0x7/0x8e [ 162.589390] ? queued_spin_lock_slowpath+0x522/0xab0 [ 162.594509] ? queued_spin_lock_slowpath+0x522/0xab0 [ 162.599631] ? queued_spin_lock_slowpath+0x522/0xab0 [ 162.604730] [ 162.606986] ? __msan_warning_32+0x70/0xc0 [ 162.611250] ? _raw_spin_lock_irqsave+0xe1/0xf0 [ 162.615937] ? load_balance+0x4e65/0x88f0 [ 162.620164] ? pick_next_task_fair+0x73f/0x2530 [ 162.624888] ? check_preempt_wakeup+0x1550/0x1550 [ 162.629762] ? pick_next_task+0x1ba/0x420 [ 162.633926] ? __schedule+0x20f/0x770 [ 162.637748] ? do_task_dead+0xc8/0xf0 [ 162.641570] ? do_exit+0x347e/0x3930 [ 162.645335] ? do_group_exit+0x1a0/0x360 [ 162.649427] ? __do_sys_exit_group+0x21/0x30 [ 162.653865] ? __se_sys_exit_group+0x14/0x20 [ 162.658285] ? __x64_sys_exit_group+0x4c/0x50 [ 162.662796] ? do_group_exit+0x360/0x360 [ 162.666873] ? do_syscall_64+0x15b/0x230 [ 162.670956] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 162.676317] Code: 10 00 74 27 65 8b 04 25 c0 90 03 00 83 c0 01 83 f8 09 7d 27 65 89 04 25 c0 90 03 00 65 c6 04 25 55 6e 0b 00 ff c3 0f 0b 90 eb fe <0f> 0b 66 90 66 2e 0f 1f 84 00 00 00 00 00 eb fe 0f 0b 66 90 66 [ 162.695902] RIP: kmsan_nmi_enter+0x42/0x70 RSP: fffffe000000eea8 [ 162.702054] ---[ end trace 1057120802177e0a ]---