[ 61.894671] audit: type=1800 audit(1539170990.931:27): pid=6227 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 63.377928] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 66.828901] random: sshd: uninitialized urandom read (32 bytes read) [ 67.338712] random: sshd: uninitialized urandom read (32 bytes read) [ 69.784346] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.80' (ECDSA) to the list of known hosts. [ 75.526257] random: sshd: uninitialized urandom read (32 bytes read) 2018/10/10 11:30:06 fuzzer started [ 80.319572] random: cc1: uninitialized urandom read (8 bytes read) 2018/10/10 11:30:11 dialing manager at 10.128.0.26:45337 2018/10/10 11:30:11 syscalls: 1 2018/10/10 11:30:11 code coverage: enabled 2018/10/10 11:30:11 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/10/10 11:30:11 setuid sandbox: enabled 2018/10/10 11:30:11 namespace sandbox: enabled 2018/10/10 11:30:11 Android sandbox: /sys/fs/selinux/policy does not exist 2018/10/10 11:30:11 fault injection: enabled 2018/10/10 11:30:11 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/10/10 11:30:11 net packed injection: /dev/net/tun can't be opened (open /dev/net/tun: cannot allocate memory) 2018/10/10 11:30:11 net device setup: enabled [ 85.158228] random: crng init done 11:32:26 executing program 0: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x5750}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() [ 218.256936] IPVS: ftp: loaded support on port[0] = 21 [ 219.234900] ip (6401) used greatest stack depth: 53056 bytes left [ 219.689593] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.696207] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.705139] device bridge_slave_0 entered promiscuous mode [ 219.855424] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.862044] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.870646] device bridge_slave_1 entered promiscuous mode [ 220.018759] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 220.164460] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 220.621078] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 220.771373] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 221.063335] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 221.070470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 221.529239] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 221.537687] team0: Port device team_slave_0 added 11:32:30 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='comm\x00') lseek(r0, 0x1000, 0x0) [ 221.770820] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 221.779275] team0: Port device team_slave_1 added [ 221.998116] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 222.254094] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 222.261228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 222.270341] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 222.456522] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 222.464308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 222.473673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 222.594467] IPVS: ftp: loaded support on port[0] = 21 [ 222.742389] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 222.750071] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 222.759673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 225.074781] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.081270] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.090350] device bridge_slave_0 entered promiscuous mode [ 225.356124] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.362834] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.371460] device bridge_slave_1 entered promiscuous mode [ 225.492564] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.499082] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.506220] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.512787] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.522108] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 225.665301] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 225.859045] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 226.102375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 226.713310] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 226.986924] bond0: Enslaving bond_slave_1 as an active interface with an up link 11:32:36 executing program 2: [ 227.255315] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 227.262546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 227.535679] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 227.542911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 228.288141] IPVS: ftp: loaded support on port[0] = 21 [ 228.557387] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 228.565961] team0: Port device team_slave_0 added [ 228.789460] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 228.798047] team0: Port device team_slave_1 added [ 229.054739] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 229.064161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 229.073600] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 229.359922] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 229.367193] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 229.376475] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 229.704101] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 229.711919] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 229.721129] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 229.959718] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 229.967643] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 229.976915] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 230.963616] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.970116] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.978733] device bridge_slave_0 entered promiscuous mode [ 231.291898] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.298424] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.307358] device bridge_slave_1 entered promiscuous mode [ 231.655829] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 231.891345] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 232.741600] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 233.083914] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 233.436431] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 233.443670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 233.530654] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.537214] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.544318] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.550804] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.559887] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 233.811687] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 233.819199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 234.312372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 234.690789] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 234.699250] team0: Port device team_slave_0 added [ 235.009153] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 235.017584] team0: Port device team_slave_1 added [ 235.378256] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 235.388411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 235.397731] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 11:32:44 executing program 3: [ 235.744417] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 235.751513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 235.760414] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 236.166252] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 236.174110] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 236.183380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 236.537829] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 236.545700] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 236.555064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 237.339993] IPVS: ftp: loaded support on port[0] = 21 [ 238.273081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.701195] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 240.815885] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.822456] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.829420] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.836025] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.845235] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 240.950350] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.956962] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.965706] device bridge_slave_0 entered promiscuous mode [ 241.062496] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 241.082767] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 241.089119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 241.097392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 241.348396] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.354975] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.363744] device bridge_slave_1 entered promiscuous mode [ 241.765713] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 242.071507] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 242.490231] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.259623] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 243.666496] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 243.991541] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 243.998865] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 244.299931] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 244.307145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 245.403142] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 245.411373] team0: Port device team_slave_0 added [ 245.814260] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 245.822918] team0: Port device team_slave_1 added [ 246.093632] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 246.100749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 246.110062] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 246.446546] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 246.453979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 246.463069] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready 11:32:55 executing program 4: [ 246.877718] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 246.886042] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 246.895381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 247.367016] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 247.374777] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 247.384223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 248.651195] IPVS: ftp: loaded support on port[0] = 21 [ 249.162091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.882022] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 252.195452] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.202142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.209090] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.215724] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.224443] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready 11:33:01 executing program 0: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x5750}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() [ 252.583514] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 252.771094] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.777902] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.786641] device bridge_slave_0 entered promiscuous mode [ 252.847832] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 252.854433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 252.862507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 11:33:02 executing program 0: [ 253.284890] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.291401] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.300206] device bridge_slave_1 entered promiscuous mode 11:33:02 executing program 0: r0 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000100)=0x2, 0x4) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x61, 0x0, 0x0, 0x17c) socketpair$unix(0x1, 0x400000001, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xc4, &(0x7f0000000240)=[{&(0x7f0000000140)=""/218, 0xda}, {&(0x7f0000000340)=""/202, 0xca}, {&(0x7f0000000040)=""/41, 0x29}, {&(0x7f0000000080)=""/96, 0x60}], 0x4, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f00000002c0), 0x0, &(0x7f0000000000)=""/64, 0x40}}], 0x40000ca, 0x0, &(0x7f0000000300)={0x77359400}) [ 253.757948] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready 11:33:03 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x3, 0x402) syz_open_dev$mice(&(0x7f0000000300)='/dev/input/mice\x00', 0x0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="0002000100810000000000000000000000000000000000007879fed545b7097af84008ae834c2ceb36de8b193edd72eb2dc4a0132ebfd665f2641373ab99e8a50efba9f072336ef973077757eb224a813a76f4690ba82cf4bdf055fa447752c69cbc182ef4287a8efcbf85100acc05c48afa77a622c34de18fd475a15bafe285266fde007ef57ad387bb14c88ce9695a2498424aaec4168043e89b2f4a0ef3dcdfc3c3a5c768d3c6f96c84ef2e0087ad5bd396da912340264a8d17832ee636bf807b1954d95038e231f3a2a45e392ebf1d49bee7bbdba030f467a11240fed3abeed4769d151b15a9ce0a3c"], 0x18) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c460000000000a7c47e358897b4eafbfaabe0decb6cb492b3da51ce0000000000000000000000000000000000000000000000400000000000000000000000000000000000000000003800000000000000000000000000000000000008000000000000004f0fb91100000000000000000000000000009cc61d"], 0x78) fcntl$getownex(r1, 0x10, &(0x7f0000000040)={0x0, 0x0}) fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r2}) [ 254.309598] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 254.650583] 8021q: adding VLAN 0 to HW filter on device team0 11:33:03 executing program 0: r0 = socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000040)={'ip6gre0\x00', 0x21db}) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_vif\x00') lseek(r1, 0x31, 0x0) 11:33:04 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x12, &(0x7f0000000040)=0xffffffff, 0x3) [ 255.717491] bond0: Enslaving bond_slave_0 as an active interface with an up link 11:33:04 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x12, &(0x7f0000000040)=0xffffffff, 0x3) [ 256.142754] bond0: Enslaving bond_slave_1 as an active interface with an up link 11:33:05 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x12, &(0x7f0000000040)=0xffffffff, 0x3) [ 256.622691] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 256.629953] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 257.032914] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 257.040036] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 258.182588] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 258.191057] team0: Port device team_slave_0 added [ 258.231508] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.537402] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 258.546061] team0: Port device team_slave_1 added [ 258.928557] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 258.935977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 258.945015] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 259.332518] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 259.339998] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 259.349054] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 259.721392] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 259.729192] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 259.738348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 259.772745] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 259.952878] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 259.960580] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 259.969878] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 260.917994] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 260.924664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 260.932836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 262.215507] 8021q: adding VLAN 0 to HW filter on device team0 11:33:12 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") add_key(&(0x7f00000000c0)='encrypted\x00', &(0x7f00000001c0)={'.yz'}, &(0x7f0000000180), 0x0, 0xfffffffffffffffe) [ 263.794077] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.800610] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.807730] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.814274] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.823036] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 263.830882] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 265.939928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.705296] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 267.431876] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 267.438328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 267.446354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 11:33:17 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="cf"], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000001b000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000002c0)="66b99408000066b81e111ee366ba25b5a6000f303681950d00918e66b80b0000000f23c80f21f86635080060000f23f83e0f009125000f381ee594360f320f019dfc32f20f01c98395008800", 0x4c}], 0x1, 0x57, &(0x7f0000000100), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 268.356774] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. [ 268.369748] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.437935] ================================================================== [ 268.445390] BUG: KMSAN: uninit-value in vmx_set_constant_host_state+0x1778/0x1830 [ 268.453078] CPU: 0 PID: 7461 Comm: syz-executor2 Not tainted 4.19.0-rc4+ #66 [ 268.460278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 268.469670] Call Trace: [ 268.472303] dump_stack+0x306/0x460 [ 268.475967] ? vmx_set_constant_host_state+0x1778/0x1830 [ 268.481459] kmsan_report+0x1a2/0x2e0 [ 268.485303] __msan_warning+0x7c/0xe0 [ 268.489155] vmx_set_constant_host_state+0x1778/0x1830 [ 268.494486] vmx_create_vcpu+0x3e6f/0x7870 [ 268.498766] ? kmsan_set_origin_inline+0x6b/0x120 [ 268.503651] ? __msan_poison_alloca+0x17a/0x210 [ 268.508374] ? vmx_vm_init+0x340/0x340 [ 268.512300] kvm_arch_vcpu_create+0x25d/0x2f0 [ 268.516837] kvm_vm_ioctl+0x13fd/0x33d0 [ 268.520850] ? __msan_poison_alloca+0x17a/0x210 [ 268.525574] ? do_vfs_ioctl+0x18a/0x2810 [ 268.529694] ? __se_sys_ioctl+0x1da/0x270 [ 268.533883] ? vcpu_stat_clear_per_vm+0x420/0x420 [ 268.538758] ? vcpu_stat_clear_per_vm+0x420/0x420 [ 268.543644] do_vfs_ioctl+0xcf3/0x2810 [ 268.547618] ? security_file_ioctl+0x92/0x200 [ 268.552173] __se_sys_ioctl+0x1da/0x270 [ 268.556207] __x64_sys_ioctl+0x4a/0x70 [ 268.560133] do_syscall_64+0xbe/0x100 [ 268.564045] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 268.569264] RIP: 0033:0x457579 [ 268.572486] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 268.591414] RSP: 002b:00007f0d81c2ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 268.599167] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457579 [ 268.606455] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 268.613758] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 268.621049] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0d81c2b6d4 [ 268.628356] R13: 00000000004bfc18 R14: 00000000004cfca0 R15: 00000000ffffffff [ 268.635676] [ 268.637325] Local variable description: ----dt@vmx_set_constant_host_state [ 268.644349] Variable was created at: [ 268.648099] vmx_set_constant_host_state+0x2b0/0x1830 [ 268.653327] vmx_create_vcpu+0x3e6f/0x7870 [ 268.657569] ================================================================== [ 268.664934] Disabling lock debugging due to kernel taint [ 268.670398] Kernel panic - not syncing: panic_on_warn set ... [ 268.670398] [ 268.677810] CPU: 0 PID: 7461 Comm: syz-executor2 Tainted: G B 4.19.0-rc4+ #66 [ 268.686396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 268.695775] Call Trace: [ 268.698391] dump_stack+0x306/0x460 [ 268.702069] panic+0x54c/0xafa [ 268.705354] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 268.710858] kmsan_report+0x2d3/0x2e0 [ 268.714718] __msan_warning+0x7c/0xe0 [ 268.718559] vmx_set_constant_host_state+0x1778/0x1830 [ 268.723879] vmx_create_vcpu+0x3e6f/0x7870 [ 268.728152] ? kmsan_set_origin_inline+0x6b/0x120 [ 268.733033] ? __msan_poison_alloca+0x17a/0x210 [ 268.737761] ? vmx_vm_init+0x340/0x340 [ 268.741697] kvm_arch_vcpu_create+0x25d/0x2f0 [ 268.746241] kvm_vm_ioctl+0x13fd/0x33d0 [ 268.750267] ? __msan_poison_alloca+0x17a/0x210 [ 268.754993] ? do_vfs_ioctl+0x18a/0x2810 [ 268.759089] ? __se_sys_ioctl+0x1da/0x270 [ 268.763269] ? vcpu_stat_clear_per_vm+0x420/0x420 [ 268.768162] ? vcpu_stat_clear_per_vm+0x420/0x420 [ 268.773040] do_vfs_ioctl+0xcf3/0x2810 [ 268.776983] ? security_file_ioctl+0x92/0x200 [ 268.781551] __se_sys_ioctl+0x1da/0x270 [ 268.785585] __x64_sys_ioctl+0x4a/0x70 [ 268.789527] do_syscall_64+0xbe/0x100 [ 268.793378] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 268.798590] RIP: 0033:0x457579 [ 268.801812] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 268.820737] RSP: 002b:00007f0d81c2ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 268.828484] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457579 [ 268.835770] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 268.843081] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 268.850439] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0d81c2b6d4 [ 268.857749] R13: 00000000004bfc18 R14: 00000000004cfca0 R15: 00000000ffffffff [ 268.865988] Kernel Offset: disabled [ 268.869636] Rebooting in 86400 seconds..