[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 55.513166] audit: type=1800 audit(1539515331.574:25): pid=5988 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 55.533981] audit: type=1800 audit(1539515331.594:26): pid=5988 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 55.553661] audit: type=1800 audit(1539515331.594:27): pid=5988 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.5' (ECDSA) to the list of known hosts. 2018/10/14 11:09:05 fuzzer started syzkaller login: [ 71.885253] cc1 (6142) used greatest stack depth: 53280 bytes left 2018/10/14 11:09:10 dialing manager at 10.128.0.26:43161 2018/10/14 11:09:10 syscalls: 1 2018/10/14 11:09:10 code coverage: enabled 2018/10/14 11:09:10 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/10/14 11:09:10 setuid sandbox: enabled 2018/10/14 11:09:10 namespace sandbox: enabled 2018/10/14 11:09:10 Android sandbox: /sys/fs/selinux/policy does not exist 2018/10/14 11:09:10 fault injection: enabled 2018/10/14 11:09:10 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/10/14 11:09:10 net packed injection: enabled 2018/10/14 11:09:10 net device setup: enabled 11:11:34 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000700)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000ac0)={"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"}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f00000000c0), 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xa}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000180), &(0x7f0000000240)=0x4) [ 219.555274] IPVS: ftp: loaded support on port[0] = 21 [ 221.943198] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.949684] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.958332] device bridge_slave_0 entered promiscuous mode [ 222.105739] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.112303] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.120732] device bridge_slave_1 entered promiscuous mode [ 222.261023] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 222.401454] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready 11:11:38 executing program 1: capset(&(0x7f000043fff8)={0x19980330}, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000012d6405000000000065040400010000000704000001000000b7050000000000006a0a00fe00000000850000001a000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) [ 222.850979] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 223.114130] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 223.309577] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 223.316760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 223.530657] IPVS: ftp: loaded support on port[0] = 21 [ 223.636895] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 223.644033] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 224.351424] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 224.359644] team0: Port device team_slave_0 added [ 224.613481] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 224.621945] team0: Port device team_slave_1 added [ 224.921994] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 224.929082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 224.938130] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 225.250563] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 225.258011] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 225.266707] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 225.563307] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 225.570859] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 225.580088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 225.820030] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 225.827761] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 225.836826] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 227.246332] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.252932] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.261400] device bridge_slave_0 entered promiscuous mode [ 227.484620] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.491091] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.499673] device bridge_slave_1 entered promiscuous mode [ 227.647865] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 227.858512] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 228.300270] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.306840] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.313912] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.320358] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.329348] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 228.383303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 11:11:44 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000700)) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000800)=""/65, 0x41}], 0x1, &(0x7f0000000a00)=""/181, 0xb5}}], 0x1, 0x0, &(0x7f0000000040)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000ac0)={"55c990aa4964e82a3ec457f4c7d69681319b32c4fe546fdaa52a7f1ee7a27d5f71fb895c4bf21bf0301d2a160f646d230ecc224077896302fd1e64ad393ef24145492c44f164e53100dc89f52d25895dcd4320f649fc784145767a5224088c492511d0a5d7bb0c0176706c238dfeee9caae8811ba9d2ec92a4a340c091647ae36123d290d72c375af37957c01aa945bdb6a7a6870069350c7c2ac6b9c032e80d8150743be19fbaf9447badcc1908d174e06fd466e64e24e3c892ee52a4b31338ad67030baeffa5bfa701c1e7bfbd8fd016d87018d05ab11f9e813877bd9cdf0884cbaabe09190f95550884f8a1e6510f6bbe96f86859597bf89741aea068e55b938ebee9d9bff58478513c4b72edbf79f75431b54743ab05d3980b30b2127cf13bf94beba0828a4bb1848bc1f862fac00698e4bd2f4bde3bb35107056c4147c0ed8d7d588ba03c37b82ea384d1db706a8b46ee351812ad747d1045540a48b542996812548270c5af5d27ff72920bebd8371348c7f55a953e236ac13fe737a81bd9b61e30a5e9c526cf61862f5a0a90963c73febe3b66ab29f17b6da74b7647bcc4e527356d57fa1fe3f3dffab39df7b353eda6b839decb4484939f4fc0c84bda1c964941ccf4db1ca0d2c152fd356ac66441c8b68755d533b416d9f7999678227c7a69db08e997252dd6a38fc458d93fac9f1f14f49b7ca4a0b0c8b538d2f30c34503a0975506ae9004b3e5c3d2469cf4e03d9b79dc1499647b5b680a02bdc56c18782c48120dee663918288f068c49d85355d114cfe0c5d1405cf5e37b181f296fa7dc9af116fbe220121fe139739226eefce468f27f5d21ab51ef0e26134c5341cf13799003ceb38d4050c2ba1c9e6decc2d11a8f14a6adadd45e615106b5dd4c07093ba114ac55b4e80d1a3545ab6e8fbf796b908ecc244340fc06e4d4bd6e069b7f0232198ab067a709bcdd4d41500e5dc7032e5993f965d4603033fe61cc523937d7345df42b4f1b62c4daf64f6c29eb2f214b88680bfe19252b67719ccea37d19fe3bfb0c8ad0bd6f4a1df532ec9220269453df5144ff48f63c2ad655b8f20db01b3af95c11f4e7de2bd0a47d47b08b620589a33327bef9ee310505c1736510e88b74281f098099c753d30fcf32f31a0521e32407d689b093f24d07049682ff4662b5b94616699fd704589c0edb02cf3e622088c685564b0c166f9f3cdb12dd8a70684ac6e24570191dda2db2b1965d2397a45060f834405b81fa79204e029b7cd93333dfbef669f3e480fd071f5b87e9fdf984dfe176353ed12ea15484366548336f540a5f1e8b9e19bdeb8d71dce9ecf03d09515bc4bcf7be382176e7e12395ee0f795f76695d0d90eee181d300deb89d7098403ac76309e63f6ca3eade1ce57dcd9de56e24610ed5c470d5540e9f50d068ee8a1431bb3216ae99b18"}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f00000000c0), 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$notify(r2, 0x402, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000180), &(0x7f0000000240)=0x4) [ 228.471490] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 228.767160] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 229.127090] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 229.134571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 229.441097] IPVS: ftp: loaded support on port[0] = 21 [ 229.545202] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 229.552330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 230.517657] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 230.525736] team0: Port device team_slave_0 added [ 230.816342] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 230.824603] team0: Port device team_slave_1 added [ 231.062852] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 231.069892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 231.078992] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 231.388164] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 231.395426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 231.404469] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 231.729134] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 231.736904] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 231.745943] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 231.990628] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 231.998377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 232.007370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 233.134253] ip (6386) used greatest stack depth: 53264 bytes left [ 233.746754] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.753770] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.762295] device bridge_slave_0 entered promiscuous mode [ 234.021110] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.027702] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.036248] device bridge_slave_1 entered promiscuous mode [ 234.310447] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 234.603499] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 235.139334] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.145890] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.152899] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.159363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.168263] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 235.417641] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 235.712298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 235.746976] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 236.003105] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 236.010688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 236.257002] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 236.264272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 11:11:53 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r1, &(0x7f00000001c0)='W', 0x1, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty, 0x2000000000}, 0x1c) splice(r1, 0x0, r0, 0x0, 0x40000ab15, 0x4000000002) [ 237.054041] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 237.062356] team0: Port device team_slave_0 added [ 237.408006] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 237.416323] team0: Port device team_slave_1 added [ 237.783425] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 237.790464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 237.799752] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 238.101930] IPVS: ftp: loaded support on port[0] = 21 [ 238.220721] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 238.227917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 238.237131] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 238.647251] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 238.654995] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 238.664058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 239.039485] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 239.047234] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 239.056552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 241.842584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.085292] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 243.380718] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.387296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.394347] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.400818] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.409590] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 243.884182] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.890661] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.899285] device bridge_slave_0 entered promiscuous mode [ 244.173250] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 244.255408] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.262045] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.270548] device bridge_slave_1 entered promiscuous mode [ 244.528155] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 244.534686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 244.542838] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 244.642102] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 244.964937] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 245.822472] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.115651] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 246.493183] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 246.866125] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 246.873358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 247.207629] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 247.214862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 11:12:03 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x3a, &(0x7f0000000980)=[{&(0x7f0000000180)=""/65, 0xd}], 0x1, &(0x7f0000000a00)=""/181, 0x3e8}}], 0x1, 0x0, &(0x7f0000000040)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000ac0)={"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"}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 248.615769] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 248.624058] team0: Port device team_slave_0 added [ 248.829119] IPVS: ftp: loaded support on port[0] = 21 [ 249.044238] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 249.052721] team0: Port device team_slave_1 added [ 249.458611] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 249.465848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 249.474920] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 249.889853] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 249.897453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 249.906377] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 250.344990] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 250.352677] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 250.361952] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 250.746690] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.856627] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 250.864412] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 250.873351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 252.444609] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 254.010142] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 254.016776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 254.024947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 255.492904] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. [ 255.794095] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.956812] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.963381] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.970296] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.976900] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.985302] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 256.004194] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.010645] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.019332] device bridge_slave_0 entered promiscuous mode 11:12:12 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000700)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000ac0)={"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"}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f00000000c0), 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xa}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000180), &(0x7f0000000240)=0x4) [ 256.414850] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.421330] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.429992] device bridge_slave_1 entered promiscuous mode [ 256.812269] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 256.904778] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready 11:12:13 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000800)=""/65, 0x41}], 0x1, &(0x7f0000000a00)=""/181, 0xb5}}], 0x1, 0x0, &(0x7f0000000040)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000ac0)={"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"}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f00000000c0), 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) ioctl$KVM_GET_PIT2(0xffffffffffffffff, 0x8070ae9f, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000180), &(0x7f0000000240)=0x4) [ 257.366398] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 257.430717] kvm: pic: non byte read [ 257.462829] kvm: pic: non byte read 11:12:13 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000040), &(0x7f0000000180)=0x4) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000080)=ANY=[@ANYBLOB="04000000000000000400000001000000feffffff00000000c81c00000062dd189036b2580500000008000000000000000500000000000000040000000300000000000000000000000000eaff57070000000000000000000000000000000000000000000000000000030000000100000000000000000000000100000000000000000000000000000003000000000000000180ffff05000000000000000000de00000000ff070000000000000000000000000000000000000000000000000000"]) 11:12:14 executing program 0: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(&(0x7f0000002e40)=ANY=[], &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) umount2(&(0x7f0000000100)='./file0\x00', 0x3) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='trusted.overlay.upper\x00', &(0x7f0000000180)={0x0, 0xfb, 0xdf, 0x1, 0x2, "50edcb9044cb21d37e760cc8b6677b71", "95a16c80b68e5e359e1e41ede504ca20b24cad35eb5cf71379974c089a68ac1d3dcef756299423fc8b9101e2135d66305811a32caf3b85ed70270f9efb28a806ea2031640ee5b2e9dfb492344936e3d6922cab8e8379388db19de3973dafdb2d2c5da0583666e797b7d8180f5ff7b52d363577475c27e627ae0f4dadb9c45d04f6baa492b97fe533f3f63fe96950ce93d8844a608c20d8db94439946048978a0d727d5f11973f0e94709e9b2edd0893466b336cc214f3a2657588cf20100cc83048c56f67253b007fbbb"}, 0xdf, 0x2) utime(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)) [ 258.626486] bond0: Enslaving bond_slave_0 as an active interface with an up link 11:12:14 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cgroup.controllers\x00', 0x0, 0x0) ioctl$PPPIOCSFLAGS(r2, 0x40047459, &(0x7f00000000c0)=0x4050) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VT_WAITACTIVE(r2, 0x5607) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000140)=0x0) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000180)=r5) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000080)={'veth1_to_bond\x00', &(0x7f0000000000)=ANY=[@ANYBLOB='\f']}) close(r4) close(r3) fsetxattr$security_selinux(r0, &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000200)='system_u:object_r:tun_tap_device_t:s0\x00', 0x26, 0x3) [ 259.076882] bond0: Enslaving bond_slave_1 as an active interface with an up link 11:12:15 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f0000000100)=""/230) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000000200)={0xa, 0x5, 0x2}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000000c0), 0x4) getpeername$inet6(r1, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000040)=0xffffff08) [ 259.687530] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 259.694741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 259.695860] sctp: [Deprecated]: syz-executor0 (pid 7004) Use of int in maxseg socket option. [ 259.695860] Use struct sctp_assoc_value instead [ 259.808182] sctp: [Deprecated]: syz-executor0 (pid 7004) Use of int in maxseg socket option. [ 259.808182] Use struct sctp_assoc_value instead [ 259.970720] 8021q: adding VLAN 0 to HW filter on device bond0 11:12:16 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x420002, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f00000000c0)=0x8001) r2 = dup3(r0, r0, 0x80000) ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f0000000000)=[0xd9bb, 0xffffffffffffff80]) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x4) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x80000000000012, r0, 0x0) lseek(r0, 0x40000000000000, 0x4) [ 260.083810] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 260.090842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 11:12:16 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000100)={0x10, 0x30, 0xfa00, {&(0x7f0000000040), 0x2, {0xa, 0x4e20, 0x10000, @ipv4={[], [], @loopback}, 0x1}, r1}}, 0x38) close(r0) readv(r0, &(0x7f0000002340)=[{&(0x7f0000000140)=""/171, 0xab}, {&(0x7f0000000200)=""/171, 0xab}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f00000022c0)=""/84, 0x54}], 0x5) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000023c0)={{{@in6=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f00000024c0)=0xe8) r3 = getgid() write$FUSE_CREATE_OPEN(r0, &(0x7f0000002500)={0xa0, 0xffffffffffffffda, 0x7, {{0x4, 0x0, 0x6, 0x10001, 0xfffffffffffffff9, 0x3ff, {0x5, 0x6, 0x5, 0x4, 0x200, 0x6, 0x7fe0000, 0x100000001, 0x5, 0x8000, 0x1fa, r2, r3, 0x7, 0x100000000}}, {0x0, 0x1}}}, 0xa0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000025c0)={0x0, 0x0}, &(0x7f0000002600)=0xc) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f0000002640)) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000002680)='/dev/ion\x00', 0x2002, 0x0) ioctl$EVIOCRMFF(r5, 0x40044581, &(0x7f00000026c0)=0x100) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000002700)={0xa, 0x4, 0xfa00, {r1}}, 0xc) syz_open_pts(r0, 0x4e80c0) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0xffffffffffffc411, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000002740)=[@in6={0xa, 0x4e20, 0x9, @local, 0xa33}, @in={0x2, 0x4e20, @multicast2}, @in6={0xa, 0x4e21, 0x7, @loopback, 0x1}, @in6={0xa, 0x4e23, 0x400, @remote, 0x80}, @in6={0xa, 0x4e23, 0x7f, @dev={0xfe, 0x80, [], 0x18}, 0x1}, @in6={0xa, 0x4e21, 0x8, @empty, 0x5}, @in={0x2, 0x4e20, @local}, @in={0x2, 0x4e23, @local}, @in6={0xa, 0x4e21, 0x3, @remote, 0x3}], 0xd8) ioctl$KIOCSOUND(r0, 0x4b2f, 0x5) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000002840)={'HL\x00'}, &(0x7f0000002880)=0x1e) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f00000028c0)={0x2, [0x0, 0x0]}, &(0x7f0000002900)=0xc) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r0, 0x800455d1, &(0x7f0000002940)) getsockname$packet(r0, &(0x7f0000002980)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000029c0)=0x14) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000002a00)) socket$netlink(0x10, 0x3, 0x5) write$P9_RRENAME(r0, &(0x7f0000002a40)={0x7, 0x15, 0x2}, 0x7) pipe2$9p(&(0x7f0000002a80), 0x80000) sigaltstack(&(0x7f0000ff9000/0x4000)=nil, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000002ac0)={0xfdee, {{0xa, 0x4e22, 0x1, @empty, 0xfff}}}, 0x88) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000002b80)={r6, 0x7fffffff, 0x7f, 0xfffffffffffffff7, 0xfff, 0x2}, &(0x7f0000002bc0)=0x14) write$FUSE_ENTRY(r0, &(0x7f0000002c00)={0x90, 0xfffffffffffffffe, 0x1, {0x3, 0x2, 0x9, 0x3cab, 0x6, 0x0, {0x6, 0x6, 0xfffffffffffffff9, 0x1, 0x4, 0x80, 0x8, 0x4, 0x4, 0xb0b, 0x4, r4, r3, 0x8, 0x3f}}}, 0x90) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000002cc0)=0x400) [ 261.183413] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 261.191449] team0: Port device team_slave_0 added [ 261.472038] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 261.480098] team0: Port device team_slave_1 added [ 261.544642] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 261.677251] IPVS: ftp: loaded support on port[0] = 21 [ 261.840756] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 261.853692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 261.862607] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 262.169829] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 262.177392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 262.186271] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 262.666857] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 262.674743] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 262.683713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 262.892829] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 262.899253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 262.907528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 262.926575] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 262.992248] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 263.001412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 264.302448] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.402576] capability: warning: `syz-executor1' uses 32-bit capabilities (legacy support in use) 11:12:21 executing program 1: capset(&(0x7f000043fff8)={0x19980330}, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000012d6405000000000065040400010000000704000001000000b7050000000000006a0a00fe00000000850000001a000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) [ 266.909915] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.916513] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.923596] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.930068] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.938570] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 267.278640] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.285216] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.294967] device bridge_slave_0 entered promiscuous mode [ 267.604553] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.611043] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.619669] device bridge_slave_1 entered promiscuous mode [ 267.904938] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 267.932078] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 268.249277] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 269.160532] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 269.474729] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 269.785573] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 269.792786] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 270.045833] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 270.053229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 270.847529] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 270.855605] team0: Port device team_slave_0 added [ 271.088020] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 271.096181] team0: Port device team_slave_1 added [ 271.422139] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 271.429205] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 271.438082] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 271.515510] 8021q: adding VLAN 0 to HW filter on device bond0 11:12:27 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f0000000100), &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='cgroup2\x00', 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000440)='cgroup.max.descendants\x00', 0x2, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000700)='R', 0x1}], 0x1) [ 271.723347] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 271.730483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 271.739396] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 271.981967] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 271.989554] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 271.998544] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 272.207806] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 272.215722] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 272.224784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 272.569086] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 273.438126] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 273.445191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 273.453251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 274.295072] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.650946] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.657547] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.664621] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.671079] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.679754] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 274.686525] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 276.906589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.793888] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 278.760301] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 278.766909] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 278.775125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 279.505670] 8021q: adding VLAN 0 to HW filter on device team0 11:12:35 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getrandom(&(0x7f00000001c0)=""/4096, 0x1000, 0x0) [ 282.309267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 282.864056] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 283.157085] kvm [7682]: vcpu0, guest rIP: 0x9112 Hyper-V uhandled wrmsr: 0x4000001e data 0x0 [ 283.166322] kvm [7682]: vcpu0, guest rIP: 0x9112 Hyper-V uhandled wrmsr: 0x4000003a data 0x0 [ 283.242428] kvm [7682]: vcpu0, guest rIP: 0x9112 Hyper-V uhandled wrmsr: 0x4000001e data 0x0 [ 283.251498] kvm [7682]: vcpu0, guest rIP: 0x9112 Hyper-V uhandled wrmsr: 0x4000003a data 0x0 11:12:39 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x3a, &(0x7f0000000980)=[{&(0x7f0000000180)=""/65, 0xd}], 0x1, &(0x7f0000000a00)=""/181, 0x3e8}}], 0x1, 0x0, &(0x7f0000000040)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000ac0)={"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"}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:12:39 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100), 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0x88, &(0x7f00000bfff0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0xb8}}, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x32, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) 11:12:39 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000240)="c4c37d08c90366ba4300b022eec74424009cf9fb9cc744240206000000c7442406000000000f011c24640f01c9b8010000000f01c1e7e7c4c178288102000000c7442400c3000000c744240200000000c7442406000000000f011424c4c1381220c4c16d668f0f9f0000", 0x6a}], 0x1, 0x0, &(0x7f0000000080), 0x0) r5 = dup3(r4, r0, 0x80000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r5, 0x402c5342, &(0x7f0000000040)={0x9c123ff, 0x2, 0x3, {0x0, 0x1c9c380}, 0x77, 0x5}) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000140)=ANY=[@ANYBLOB="01000000001e004d564b00000000010000e07dbc4cff108801e11d56e88f229d7db0a3dcca8adb78fae849f503564e11e3f3dc358fd3ae984fdc583f316a4c6cd0e7882c95d1a3a80ca2f26938caee7382a28bd0a69232419f50d63cab60d09bfa4cabae41b08bb4e7d362b989045c35a2cfd926ebfb76e075b49e4166621011b867db30"]) ioctl$KVM_GET_LAPIC(r4, 0xc028ae92, &(0x7f00000003c0)={"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"}) 11:12:39 executing program 1: capset(&(0x7f000043fff8)={0x19980330}, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000012d6405000000000065040400010000000704000001000000b7050000000000006a0a00fe00000000850000001a000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) 11:12:39 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f00000001c0)=""/232) [ 283.509567] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 283.516077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 283.523981] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 11:12:39 executing program 1: capset(&(0x7f000043fff8)={0x19980330}, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000012d6405000000000065040400010000000704000001000000b7050000000000006a0a00fe00000000850000001a000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) 11:12:39 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200001c0], 0x0, &(0x7f0000000080), &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0xfffffffffffffffe, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veteam\x00\x00\x00)L\x00', @local, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1a8) 11:12:39 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x8, 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="000100000000e2d4"], &(0x7f0000000440)='syzkaller\x00', 0x9, 0x90, &(0x7f0000000200)=""/144}, 0x48) [ 284.052986] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask [ 284.486129] 8021q: adding VLAN 0 to HW filter on device team0 11:12:42 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x0, 0xfffffffffffffff7}, 0x10) recvmmsg(r1, &(0x7f0000004740)=[{{&(0x7f0000003fc0)=@hci, 0x80, &(0x7f0000000000)=[{&(0x7f0000004040)=""/201, 0xc9}], 0x1, &(0x7f0000004640)=""/208, 0xd0}}], 0x1, 0x0, 0x0) 11:12:42 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x7fff) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) 11:12:42 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f00000000c0)="c7442400e1000000c7442402811d179bff1c243e65660f72d2a6460fc76cab6bc744240068000000c744240200780000c7442406000000000f011c24440f01f866b8c7008ec00f21c766baf80cb8e8f54b87ef66bafc0cedc4437d394803060fc7ab4e540000", 0x66}], 0x1, 0x0, &(0x7f0000000280), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:12:42 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) pread64(r0, &(0x7f0000000280)=""/39, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)={&(0x7f0000000100)='./file0\x00'}, 0x10) 11:12:42 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000012d6405000000000065040400010000000704000001000000b7050000000000006a0a00fe00000000850000001a000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) 11:12:42 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f00007b1000)=0x81, 0x4) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001140), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x7fff) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) [ 286.543205] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 286.591485] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 286.626114] ================================================================== [ 286.633550] BUG: KMSAN: kernel-infoleak in _copy_to_iter+0x471/0x2640 [ 286.640169] CPU: 1 PID: 7799 Comm: syz-executor5 Not tainted 4.19.0-rc7+ #69 [ 286.647378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 286.656755] Call Trace: [ 286.659382] dump_stack+0x306/0x460 [ 286.663046] ? _raw_spin_lock_irqsave+0x227/0x340 [ 286.667935] ? _copy_to_iter+0x471/0x2640 [ 286.672145] kmsan_report+0x1a2/0x2e0 [ 286.676029] kmsan_internal_check_memory+0x374/0x460 [ 286.681193] kmsan_copy_to_user+0x89/0xe0 [ 286.685385] _copy_to_iter+0x471/0x2640 [ 286.689397] ? task_kmsan_context_state+0x6b/0x120 [ 286.694415] skb_copy_datagram_iter+0x4c3/0x1040 [ 286.699210] ? tipc_sk_anc_data_recv+0x79/0x820 [ 286.703932] tipc_recvmsg+0xd12/0x1c20 [ 286.707896] sock_recvmsg+0x1d6/0x230 [ 286.711723] ? tipc_send_packet+0x1a0/0x1a0 [ 286.716081] ___sys_recvmsg+0x459/0xae0 [ 286.720160] ? __fdget+0x318/0x430 [ 286.723774] __sys_recvmmsg+0x656/0x1120 [ 286.727896] ? kmsan_set_origin_inline+0x6b/0x120 [ 286.732789] ? __msan_poison_alloca+0x17a/0x210 [ 286.737586] ? __se_sys_recvmmsg+0xdd/0x100 [ 286.741944] do_sys_recvmmsg+0x223/0x400 [ 286.746050] __se_sys_recvmmsg+0xdd/0x100 [ 286.750250] __x64_sys_recvmmsg+0x62/0x80 [ 286.754436] do_syscall_64+0xbe/0x100 [ 286.758283] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 286.763505] RIP: 0033:0x457569 [ 286.766720] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 286.785644] RSP: 002b:00007f4613200c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 286.794072] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000457569 [ 286.801377] RDX: 0000000000000001 RSI: 0000000020004740 RDI: 0000000000000004 [ 286.808670] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 286.815960] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f46132016d4 [ 286.823253] R13: 00000000004c3244 R14: 00000000004d4de8 R15: 00000000ffffffff [ 286.830562] [ 286.832199] Uninit was stored to memory at: [ 286.836545] kmsan_internal_chain_origin+0x136/0x240 [ 286.841670] kmsan_memcpy_origins+0x13d/0x1b0 [ 286.846182] __msan_memcpy+0xcf/0x150 [ 286.850003] tipc_group_create_event+0x672/0xb90 [ 286.854774] tipc_group_proto_rcv+0x26a5/0x38f0 [ 286.859460] tipc_sk_filter_rcv+0x2948/0x3a40 [ 286.863968] tipc_sk_rcv+0xcbe/0x2b10 [ 286.867785] tipc_node_xmit+0x2f1/0xa00 [ 286.871775] tipc_node_distr_xmit+0x40d/0x680 [ 286.876288] tipc_sk_rcv+0x1e52/0x2b10 [ 286.880194] tipc_conn_send_work+0x82e/0xe20 [ 286.884626] process_one_work+0x19c4/0x24f0 [ 286.888965] worker_thread+0x206d/0x2b30 [ 286.893036] kthread+0x59c/0x5d0 [ 286.896421] ret_from_fork+0x35/0x40 [ 286.900138] [ 286.901773] Local variable description: ----evt.sroa.11@tipc_group_create_event [ 286.909225] Variable was created at: [ 286.912956] tipc_group_create_event+0xbf/0xb90 [ 286.917638] tipc_group_proto_rcv+0x26a5/0x38f0 [ 286.922306] [ 286.923942] Bytes 32-47 of 48 are uninitialized [ 286.928624] Memory access of size 48 starts at ffff88012cb0c4bc [ 286.934686] ================================================================== [ 286.942053] Disabling lock debugging due to kernel taint [ 286.947531] Kernel panic - not syncing: panic_on_warn set ... [ 286.947531] [ 286.954933] CPU: 1 PID: 7799 Comm: syz-executor5 Tainted: G B 4.19.0-rc7+ #69 [ 286.963523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 286.972892] Call Trace: [ 286.975508] dump_stack+0x306/0x460 [ 286.979174] panic+0x54c/0xafa [ 286.982438] kmsan_report+0x2d3/0x2e0 [ 286.986277] kmsan_internal_check_memory+0x374/0x460 [ 286.991420] kmsan_copy_to_user+0x89/0xe0 [ 286.995594] _copy_to_iter+0x471/0x2640 [ 286.999587] ? task_kmsan_context_state+0x6b/0x120 [ 287.004592] skb_copy_datagram_iter+0x4c3/0x1040 [ 287.009370] ? tipc_sk_anc_data_recv+0x79/0x820 [ 287.014086] tipc_recvmsg+0xd12/0x1c20 [ 287.018046] sock_recvmsg+0x1d6/0x230 [ 287.021874] ? tipc_send_packet+0x1a0/0x1a0 [ 287.026225] ___sys_recvmsg+0x459/0xae0 [ 287.030280] ? __fdget+0x318/0x430 [ 287.033853] __sys_recvmmsg+0x656/0x1120 [ 287.037947] ? kmsan_set_origin_inline+0x6b/0x120 [ 287.042819] ? __msan_poison_alloca+0x17a/0x210 [ 287.047524] ? __se_sys_recvmmsg+0xdd/0x100 [ 287.051880] do_sys_recvmmsg+0x223/0x400 [ 287.055981] __se_sys_recvmmsg+0xdd/0x100 [ 287.060160] __x64_sys_recvmmsg+0x62/0x80 [ 287.064345] do_syscall_64+0xbe/0x100 [ 287.068170] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 287.073372] RIP: 0033:0x457569 [ 287.076584] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 287.095506] RSP: 002b:00007f4613200c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 287.103340] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000457569 [ 287.110623] RDX: 0000000000000001 RSI: 0000000020004740 RDI: 0000000000000004 [ 287.117904] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 287.125186] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f46132016d4 [ 287.132469] R13: 00000000004c3244 R14: 00000000004d4de8 R15: 00000000ffffffff [ 287.140725] Kernel Offset: disabled [ 287.144366] Rebooting in 86400 seconds..