[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 51.211009] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c[ 51.568819] random: sshd: uninitialized urandom read (32 bytes read) . [ 51.642425] audit: type=1800 audit(1538967872.691:29): pid=5926 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 52.199869] random: sshd: uninitialized urandom read (32 bytes read) Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 53.634066] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.48' (ECDSA) to the list of known hosts. [ 59.381954] random: sshd: uninitialized urandom read (32 bytes read) 2018/10/08 03:04:42 fuzzer started [ 63.531262] random: cc1: uninitialized urandom read (8 bytes read) 2018/10/08 03:04:46 dialing manager at 10.128.0.26:36867 2018/10/08 03:04:46 syscalls: 1 2018/10/08 03:04:46 code coverage: enabled 2018/10/08 03:04:46 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/10/08 03:04:46 setuid sandbox: enabled 2018/10/08 03:04:46 namespace sandbox: enabled 2018/10/08 03:04:46 Android sandbox: /sys/fs/selinux/policy does not exist 2018/10/08 03:04:46 fault injection: enabled 2018/10/08 03:04:46 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/10/08 03:04:46 net packed injection: enabled 2018/10/08 03:04:46 net device setup: enabled [ 68.759652] random: crng init done 03:06:25 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000), 0x0) r2 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x167, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x9, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0x167}], 0x11, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400}) [ 164.791873] IPVS: ftp: loaded support on port[0] = 21 [ 166.835020] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.841478] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.849895] device bridge_slave_0 entered promiscuous mode [ 166.974049] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.980606] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.988949] device bridge_slave_1 entered promiscuous mode [ 167.109645] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 167.232878] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 167.607156] bond0: Enslaving bond_slave_0 as an active interface with an up link 03:06:28 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) [ 167.774480] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 168.316436] IPVS: ftp: loaded support on port[0] = 21 [ 168.560007] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 168.568235] team0: Port device team_slave_0 added [ 168.738697] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 168.746836] team0: Port device team_slave_1 added [ 168.965565] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 168.973878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 168.982707] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 169.243274] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 169.419403] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 169.427084] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 169.436287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 169.682879] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 169.690639] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 169.699659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 171.704818] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.711455] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.719909] device bridge_slave_0 entered promiscuous mode [ 171.875906] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.882466] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.889334] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.895916] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.904532] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 171.965269] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.971835] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.979972] device bridge_slave_1 entered promiscuous mode [ 172.161445] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 172.369834] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready 03:06:33 executing program 2: socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000080)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() clock_gettime(0x3, &(0x7f0000000400)={0x0, 0x0}) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, r1+10000000}, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000000000)) tkill(0x0, 0x1004000000016) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r2, 0x80045530, &(0x7f0000000500)=""/198) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x0, 0x0) munlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000001700)={0x0, @in6={{0xa, 0x4e21, 0x4, @local, 0x1ff}}, 0x5, 0x4, 0x101, 0x9, 0xc}, &(0x7f0000000440)=0x98) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f00000017c0)={r5, @in6={{0xa, 0x4e24, 0x0, @local, 0xff}}}, 0x84) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000400)={&(0x7f0000000040), 0xc, &(0x7f00000003c0)={&(0x7f0000001880)=ANY=[@ANYBLOB], 0x1}}, 0x0) read$FUSE(r2, &(0x7f0000000640), 0x1000) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000001640)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @in6={0xa, 0x4e24, 0x6, @remote, 0xe2c}}}, 0x90) [ 172.744546] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 173.284049] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 173.332951] IPVS: ftp: loaded support on port[0] = 21 [ 173.592849] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 173.852374] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 173.859669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 174.137808] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 174.145099] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 174.856076] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 174.864128] team0: Port device team_slave_0 added [ 175.144158] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 175.152475] team0: Port device team_slave_1 added [ 175.413165] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 175.420277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 175.429116] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 175.693010] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 175.700088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 175.709167] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 175.897861] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 175.905584] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 175.914444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 176.203527] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 176.211096] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 176.220107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 177.170466] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.177175] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.185727] device bridge_slave_0 entered promiscuous mode [ 177.471264] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.477877] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.486059] device bridge_slave_1 entered promiscuous mode [ 177.652984] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 177.930480] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 178.723391] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 178.938158] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 179.215304] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 179.222523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 179.261009] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.267580] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.274560] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.280999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.289428] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 179.442531] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 179.449613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 03:06:40 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r1 = dup2(r0, r0) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB], 0x1}}, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x0) [ 179.883935] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 180.405416] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 180.413418] team0: Port device team_slave_0 added [ 180.433342] IPVS: ftp: loaded support on port[0] = 21 [ 180.662021] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 180.670073] team0: Port device team_slave_1 added [ 180.978247] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 180.986195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 180.994846] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 181.423055] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 181.430150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 181.439032] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 181.786743] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 181.794583] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 181.803586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 182.093954] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 182.101521] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 182.110979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 183.407790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.540961] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 185.516566] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.523112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.529963] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.536549] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.545107] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 185.594225] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.600699] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.609089] device bridge_slave_0 entered promiscuous mode [ 185.686450] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 185.693124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 185.700999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 185.932453] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 186.000986] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.007533] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.015792] device bridge_slave_1 entered promiscuous mode [ 186.367246] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 186.721199] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 186.799492] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.734333] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 188.053585] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 188.352166] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 188.359251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 188.755479] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 188.762842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 03:06:50 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000280)='/dev/md0\x00', 0x0, 0x0) close(r1) [ 189.843675] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 189.851875] team0: Port device team_slave_0 added [ 190.225691] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 190.233699] team0: Port device team_slave_1 added [ 190.314229] IPVS: ftp: loaded support on port[0] = 21 [ 190.614446] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 190.621537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 190.630430] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 190.980239] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 190.987703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 190.996390] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 191.353994] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 191.361565] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 191.370563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 191.729478] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 191.737114] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 191.746000] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 192.283899] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.777149] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 195.133693] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 195.140173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 195.148100] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 03:06:56 executing program 0: r0 = epoll_create1(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x7be2) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000140)={0x80000005}) [ 196.011552] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.018117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.025094] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.031523] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.040250] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready 03:06:57 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x8000, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000900)={0xb, 'syz1\x00', 'syz1\x00', 'syz0\x00', 0x1000, 0xc13e, 0x0, 0x5, 0xffffffffffff6dc1, 0xffff, "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"}, 0x1118) r1 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f00000002c0)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x5, 0x0, 0xec5, r2, 0x0, 0x0, 'syz1\x00'}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000000400)={{0x7, 0x6, 0x7fff, 0x401, 'syz0\x00', 0x1}, 0x0, [0x9, 0x2, 0x7, 0xd1cc, 0x2aec, 0x1a, 0x4, 0x1000, 0x0, 0x4, 0x1f, 0xd26, 0x100000001, 0x0, 0x28ff, 0x6, 0x5, 0x9, 0x81, 0x9, 0x0, 0x6, 0x4, 0x2, 0x7, 0x9, 0x2, 0xfffffffffffffffc, 0xffffffff00000000, 0x10001, 0x3, 0x9, 0x8, 0x7, 0x401, 0xfffffffffffffff8, 0x22e1, 0x80000000000000, 0x8, 0x9, 0x7, 0xb5b, 0x1, 0xd80, 0x8, 0x1729, 0x5, 0x5, 0x7, 0xd4, 0x3, 0x4, 0x80, 0x8, 0x1000, 0x8000, 0xba5d, 0xcdb, 0x101, 0x0, 0x6, 0x3, 0x7e, 0x4, 0x4, 0x0, 0x135, 0x100000000, 0x2, 0x2, 0x7fffffff, 0x1, 0x0, 0x7, 0x8, 0x800, 0x9, 0x1, 0xffff, 0x80000000, 0x7, 0x80000001, 0xfffffffffffffffd, 0x6, 0x9, 0x5, 0x7fffffff, 0x5, 0x6, 0x4, 0x4, 0x0, 0xd91, 0x8, 0x3ff, 0x5, 0x100, 0x2, 0x100000001, 0x9, 0x51c, 0xb8d0, 0x7fffffff, 0x6, 0xb9, 0x1, 0x0, 0x4, 0x9135, 0x7, 0x9, 0x3, 0x3, 0x9, 0x401, 0x400, 0x401, 0xb6, 0x9, 0x3, 0x6, 0x242, 0x8, 0x100000000, 0x40, 0x88ed, 0x5, 0x9], {0x77359400}}) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x10042, 0x20) ioctl$UI_GET_VERSION(r3, 0x8004552d, &(0x7f0000000180)) ioctl$KVM_INTERRUPT(r3, 0x4004ae86, &(0x7f0000000040)=0x8) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) setsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f0000000140)={@multicast2, @rand_addr=0x2, r4}, 0xc) [ 196.588948] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.597607] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.604326] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.612666] device bridge_slave_0 entered promiscuous mode [ 196.822213] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 03:06:57 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.current\x00', 0x0, 0x0) r1 = accept$packet(0xffffffffffffffff, &(0x7f00000012c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001300)=0x14) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f00000000c0)) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000001340)={@dev={0xfe, 0x80, [], 0x1e}, @mcast2, @mcast2, 0x1, 0x3, 0x800, 0x100, 0x8, 0x80000038, r2}) r3 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r3, 0x800000c0045002, &(0x7f0000000080)=0x2000000) [ 197.047579] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.054669] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.062940] device bridge_slave_1 entered promiscuous mode [ 197.360630] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready 03:06:58 executing program 0: rseq(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xa30000, 0xa30000}}, 0x20, 0x100000000000, 0x0) [ 197.670880] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready 03:06:59 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000080)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x4000000000014, &(0x7f0000000180)=0x80000000002, 0x93) sendto$inet(r2, &(0x7f0000000100), 0xfffffffffffffdd9, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) r3 = dup3(r2, r0, 0x0) ioctl$BLKIOOPT(r3, 0x1279, &(0x7f00000000c0)) sendto$inet6(r0, &(0x7f0000000440)="cf", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr}}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) ioctl$BLKROSET(r3, 0x125d, &(0x7f0000000100)=0x1) tkill(r1, 0x15) [ 198.729035] bond0: Enslaving bond_slave_0 as an active interface with an up link 03:07:00 executing program 0: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000140)='.\x00', 0x86000130) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={r1, 0x10, &(0x7f0000000180)={&(0x7f0000000040)=""/137, 0x89, 0x0}}, 0x10) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000240)={0x16, 0x12, 0x6, 0x10, 0x6, 0xffff, 0x0, 0x30, 0xffffffffffffffff}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=r2, 0x4) bind$unix(r1, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e) creat(&(0x7f0000000000)='./file0\x00', 0x1e5) [ 199.157406] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 199.493678] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 199.500962] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready 03:07:00 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000000000), 0x4000000000000fe, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x200080, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000040)={@rand_addr, @loopback, 0x0}, &(0x7f0000000080)=0xc) setsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f00000000c0)={@multicast1, @multicast1, r3}, 0xc) [ 199.901596] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 199.908854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 03:07:01 executing program 0: semget(0x2, 0x3, 0x40) r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x400, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00005d5ff3)={0x2, 0x4e20, @rand_addr}, 0x10) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000000340)=ANY=[@ANYBLOB="e99b95dd923b3c0b697cc243239ce02b63f234b21150ca87ef28135ca5aa6a9f2fc88bd7cd229d31a39803ef6636ed4c43777c4f0b3b11fc8a2cb873a4596881462dba8c66c8d767f20ddd6271d217e5590d3cc78d09232369852368ee587077e9e15d5b92"], 0x1) setsockopt$inet_tcp_int(r1, 0x6, 0x200000000000a, &(0x7f0000df8ffc)=0x4, 0x4) sendto$inet(r1, &(0x7f0000de1fff)='U', 0x1, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000defffc), 0xb441e8c3d3662b97) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$EVIOCGID(0xffffffffffffffff, 0x80084502, &(0x7f0000000980)=""/254) sendto$inet(r1, &(0x7f0000000240)="567407ab7d19a9eb1801b5153103567c1f4c2c2a0c4c1857d0badd414d0b947d6847b526915d3106a9092f2f318600991aa0fd6626ed97ec56b7899fe9d974a86b000bf9f8efea89bef2f136963c2408", 0x50, 0x0, 0x0, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000040)=0x0) r3 = getuid() r4 = getgid() setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080)={r2, r3, r4}, 0xc) sendto$inet(r1, &(0x7f0000003d80)="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", 0x7f9, 0xc00c, 0x0, 0x0) recvmsg(r1, &(0x7f00000000c0)={&(0x7f0000df6f80)=@generic, 0x80, &(0x7f0000000680)=[{&(0x7f0000000140)=""/43, 0x2b}, {&(0x7f0000000180)=""/95, 0x5f}, {&(0x7f0000000200)=""/52, 0x34}, {&(0x7f00000003c0)=""/139, 0x17}, {&(0x7f00000002c0)=""/48, 0x30}, {&(0x7f0000000480)=""/250, 0xfa}, {&(0x7f0000000580)=""/122, 0x7a}, {&(0x7f0000000600)=""/104, 0x68}], 0x8, &(0x7f0000000100)=""/7, 0x7}, 0x40000100) [ 200.392987] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 200.470118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.785443] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 200.793489] team0: Port device team_slave_0 added [ 201.134538] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 201.142785] team0: Port device team_slave_1 added [ 201.386744] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 201.394000] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 201.402669] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 201.650291] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 201.692447] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 201.699691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 201.708446] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 201.980402] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 201.988116] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 201.997078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 202.244693] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 202.252369] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 202.261061] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 202.642076] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 202.648464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 202.656379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 03:07:04 executing program 1: r0 = memfd_create(&(0x7f0000000040)='proc.wlan0ppp0keyring\x00', 0x1000000000000007) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(r0, 0x3, 0x7fffffffffffdffe, 0x80) [ 203.655961] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.933483] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.940055] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.947141] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.953698] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.962087] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 204.968676] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 206.911344] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.667484] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 208.273939] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 208.280366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 208.288256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 208.768595] 8021q: adding VLAN 0 to HW filter on device team0 03:07:10 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000240)={"626f6e645f736c6176655f30000e00", {0x2, 0x0, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={"626f6e645f736c6176655f3000000002", {0x2, 0x0, @local, [0x0, 0x0, 0x0, 0x0, 0xe000000]}}) [ 211.508565] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.891703] hrtimer: interrupt took 103646 ns [ 211.973547] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready 03:07:13 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r1 = dup2(r0, r0) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB], 0x1}}, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x0) [ 212.487083] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 212.493677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 212.501375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 213.029502] 8021q: adding VLAN 0 to HW filter on device team0 03:07:16 executing program 4: socketpair(0x1, 0x2000000001, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f2, &(0x7f0000000000)='ip6gre0\x00') 03:07:16 executing program 0: ftruncate(0xffffffffffffffff, 0x0) unshare(0x8020000) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setns(r0, 0x0) 03:07:16 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xffffff94) ioctl$SG_GET_NUM_WAITING(r0, 0x227c, &(0x7f0000000200)) 03:07:16 executing program 5: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x7fffffff, 0x82) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) fcntl$addseals(r0, 0x409, 0x1) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000080)={0x0, 0x0, @pic={0x10001, 0x9, 0x8, 0x5, 0x100000000, 0x7, 0x20, 0x6, 0x0, 0x101, 0xfc, 0xffffffff, 0x0, 0x8, 0xffffffff80000001, 0x1000}}) r1 = memfd_create(&(0x7f0000000180)='/dev/dmmidi#\x00', 0x3) write$binfmt_aout(r0, &(0x7f00000001c0)={{0x10b, 0x1000, 0x8, 0xdd, 0x219, 0x7, 0x320, 0x940d}, "2059a890300dd3f6e7f86308a2cb53dffd2ae45f7f35dfba0740bf00883adbfbfc38da29a4253a7ea7b4d0760403e6b696a3a0eb307cb448b6a5f45a9fac9b968d9a6ae8f3da5edbe63fa8b94c0f0ba3e473024f80dc0c21c572a7c0bdda8c7650ebf5a2100e1b658dd54e436d6c5d2642dfcf57670117e77cc0398a0235e1f4a04dea34d0c189e6bf863dfd13a1fd1d046cce1220ee9b91642ec5c33b", [[], [], [], []]}, 0x4bd) sendfile(r1, r0, &(0x7f0000000680), 0x7fffffff) ioctl$KVM_GET_CPUID2(r0, 0xc008ae91, &(0x7f00000006c0)={0x8, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}) r2 = syz_open_dev$sndpcmp(&(0x7f0000000840)='/dev/snd/pcmC#D#p\x00', 0xffffffff, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000880)={0x3, 0x10001}) fsetxattr$trusted_overlay_nlink(r2, &(0x7f00000008c0)='trusted.overlay.nlink\x00', &(0x7f0000000900)={'L+', 0x3}, 0x28, 0x3) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000940)=""/61) ioctl$SG_GET_VERSION_NUM(r0, 0x2282, &(0x7f0000000980)) fsetxattr$security_capability(r2, &(0x7f00000009c0)='security.capability\x00', &(0x7f0000000a00)=@v1={0x1000000, [{0x21a536ec, 0x6}]}, 0xc, 0x1) ioctl$KVM_GET_REG_LIST(r0, 0xc008aeb0, &(0x7f0000000a40)={0x6, [0x9, 0x5, 0x6, 0x1, 0x2, 0x10000]}) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000a80), 0x4) setsockopt$inet_group_source_req(r2, 0x0, 0x2f, &(0x7f0000000ac0)={0x3f, {{0x2, 0x4e20, @local}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x14}}}}, 0x108) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000c00)=0x7) socketpair$inet6(0xa, 0x2, 0x1, &(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000c80)='/dev/ptmx\x00', 0x4000, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000f00)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x40004000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000d00)=@newtaction={0x1a0, 0x30, 0x800, 0x70bd2b, 0x25dfdbff, {0x0, 0x5, 0x3ff}, [{0xa4, 0x1, @m_tunnel_key={0xa0, 0x1c, {{0x10, 0x1, 'tunnel_key\x00'}, {0x44, 0x2, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0xfffffffffffffff9}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @multicast2}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x8, 0x9, 0x4e22}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @remote}]}, {0x44, 0x6, "7cb6b2724d39d9e6ef4131c060312e59b8fd4d4333771ff4b5518025cbab1cf8c8372e4f0de413450f5074f39196ed6c3e0a851aa0a5b403f0699e30d10a54a6"}}}}, {0xe8, 0x1, @m_nat={0xe4, 0x9, {{0x8, 0x1, 'nat\x00'}, {0x2c, 0x2, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x2, 0x6, 0xfffc, 0x2}, @remote, @dev={0xac, 0x14, 0x14, 0xc}, 0xffffffff}}}, {0xa8, 0x6, "4806a76d39fe00263538dac311a9a52befc01f568dc5bf9b5280511edc7f7fc4ad12d0590d20d7eb2e415f5e2ee5c146e86d82453c968d2069dafdc83f0979eec0b4cc6d4bd90ad2b9e70e591a434b3dfc99a660fb57ffdd52a977d7d299adfc51d27a6c269885e4b8701b165f09d20ed7b1221a24efb5414b8e39fbef4c74072c97c1d6502f03d621635449541d401992864df7c73cafbba1a874911602059d71"}}}}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000f40)=0x6016) pipe2(&(0x7f0000000f80)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000fc0)=0x20000, 0x4) ioctl$KVM_GET_DEBUGREGS(r4, 0x8080aea1, &(0x7f0000001000)) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0x80045530, &(0x7f0000001080)=""/239) getsockopt$inet6_tcp_int(r3, 0x6, 0x6, &(0x7f0000001180), &(0x7f00000011c0)=0x4) fsetxattr$trusted_overlay_upper(r4, &(0x7f0000001200)='trusted.overlay.upper\x00', &(0x7f0000001240)={0x0, 0xfb, 0xd7, 0x4, 0x4a, "8401cd932ac42e30427aa21a049b3cb9", "9deb4f490d0314a47cb33e8274fef9ff46da5fc0dbf2ea11eb2fa715db3401a93021b1fbdcf83d2d301ab6f5586dc20c454506dbed3af57658f61711e64daf614c25a229f1c61797ad80c69bb5cf056a68bb69275ba98d47f9892686e055e984a060c769a13dcff032c99d5fb71fcbf8ecebffd11c657ecc495b5764eb291d3b5f65730222de97fa6c5346448f4d1be1496334cb99e2f85b0e01bfc8908734df376d976f24d313b02e5ce977fc0d5b093b5a930a0bd80e6425273391aa9c7f57ac61"}, 0xd7, 0x1) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000001340)) r5 = add_key(&(0x7f0000001380)='ceph\x00', &(0x7f00000013c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$restrict_keyring(0x1d, r5, &(0x7f0000001400)='id_legacy\x00', &(0x7f0000001440)='@\x00') 03:07:16 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d7660") r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000240)={"626f6e645f736c6176655f30000e00", {0x2, 0x0, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}}) 03:07:16 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r1 = dup2(r0, r0) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB], 0x1}}, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x0) 03:07:16 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) process_vm_readv(r1, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x1, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x1, 0x0) 03:07:17 executing program 2: 03:07:17 executing program 4: [ 216.103384] ptrace attach of "/root/syz-executor1"[6149] was attempted by "/root/syz-executor1"[7461] [ 216.177290] ptrace attach of "/root/syz-executor1"[6149] was attempted by "/root/syz-executor1"[7463] 03:07:17 executing program 0: 03:07:17 executing program 3: 03:07:17 executing program 4: 03:07:17 executing program 2: 03:07:17 executing program 1: 03:07:17 executing program 3: [ 216.996897] IPVS: ftp: loaded support on port[0] = 21 [ 218.209631] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.216289] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.224248] device bridge_slave_0 entered promiscuous mode [ 218.298813] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.305294] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.313356] device bridge_slave_1 entered promiscuous mode [ 218.388397] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 218.465975] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 218.691578] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 218.770494] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 218.915658] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 218.922734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 219.149307] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 219.157484] team0: Port device team_slave_0 added [ 219.232218] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 219.239697] team0: Port device team_slave_1 added [ 219.315891] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 219.394519] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 219.471128] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 219.478478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 219.487370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 219.557264] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 219.564760] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 219.573661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 220.410089] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.416559] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.423457] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.429849] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.437952] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 220.862205] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 223.499909] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.779837] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 224.060567] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 224.066943] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 224.074915] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 224.358848] 8021q: adding VLAN 0 to HW filter on device team0 03:07:27 executing program 5: 03:07:27 executing program 0: 03:07:27 executing program 4: 03:07:27 executing program 1: 03:07:27 executing program 2: 03:07:27 executing program 3: 03:07:27 executing program 3: 03:07:27 executing program 0: 03:07:27 executing program 2: 03:07:27 executing program 4: 03:07:27 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000280)={0x77, 0x0, [0x187, 0x1]}) 03:07:27 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = socket$unix(0x1, 0x805, 0x0) bind$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x2a) [ 226.857990] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. [ 226.951089] ================================================================== [ 226.958534] BUG: KMSAN: uninit-value in vmx_create_vcpu+0x10df/0x7920 [ 226.965137] CPU: 1 PID: 7769 Comm: syz-executor1 Not tainted 4.19.0-rc4+ #63 [ 226.972333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 226.981710] Call Trace: [ 226.984327] dump_stack+0x306/0x460 [ 226.987978] ? _raw_spin_lock_irqsave+0x227/0x340 [ 226.992963] ? vmx_create_vcpu+0x10df/0x7920 [ 226.997402] kmsan_report+0x1a3/0x2d0 03:07:28 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000300000000000000000000009500020000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000000)={r1, r2}) setsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f00000000c0)=0x4adb, 0x13) write$FUSE_NOTIFY_DELETE(r3, &(0x7f0000000240)=ANY=[@ANYBLOB='?\x00\x00'], 0x3) setsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f0000000080), 0x4) 03:07:28 executing program 2: r0 = timerfd_create(0x0, 0x0) timerfd_gettime(r0, &(0x7f0000000080)) [ 227.001234] __msan_warning+0x7c/0xe0 [ 227.005060] vmx_create_vcpu+0x10df/0x7920 [ 227.009321] ? kmsan_set_origin_inline+0x6b/0x120 [ 227.014185] ? __msan_poison_alloca+0x17a/0x210 [ 227.018885] ? vmx_vm_init+0x340/0x340 [ 227.022792] kvm_arch_vcpu_create+0x25d/0x2f0 [ 227.027310] kvm_vm_ioctl+0x13fd/0x33d0 [ 227.031312] ? __msan_poison_alloca+0x17a/0x210 [ 227.036003] ? do_vfs_ioctl+0x18a/0x2810 [ 227.040080] ? __se_sys_ioctl+0x1da/0x270 [ 227.044248] ? vcpu_stat_clear_per_vm+0x420/0x420 03:07:28 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) accept$alg(r0, 0x0, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000280)='/dev/dsp#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000040)) setsockopt$inet6_dccp_int(r1, 0x21, 0x0, &(0x7f0000000400), 0x4) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f00000003c0)={&(0x7f0000000200), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0xb00, 0x70bd2c}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000, &(0x7f000040e000/0x1000)=nil}) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000100)) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442402020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000000200), 0x0) [ 227.049105] ? vcpu_stat_clear_per_vm+0x420/0x420 [ 227.053966] do_vfs_ioctl+0xcf3/0x2810 [ 227.057883] ? security_file_ioctl+0x92/0x200 [ 227.062401] __se_sys_ioctl+0x1da/0x270 [ 227.066405] __x64_sys_ioctl+0x4a/0x70 [ 227.070310] do_syscall_64+0xbe/0x100 [ 227.074128] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 227.079326] RIP: 0033:0x457579 [ 227.082533] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 227.101456] RSP: 002b:00007fa8b11dac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 227.109190] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457579 [ 227.116489] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 227.123777] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 227.131061] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa8b11db6d4 [ 227.138840] R13: 00000000004bfc18 R14: 00000000004cfca0 R15: 00000000ffffffff [ 227.146137] [ 227.147774] Local variable description: ----c.i.i.i.i.i.i@vmx_create_vcpu [ 227.154697] Variable was created at: [ 227.158435] vmx_create_vcpu+0xd5/0x7920 [ 227.162511] kvm_arch_vcpu_create+0x25d/0x2f0 [ 227.167011] ================================================================== [ 227.174372] Disabling lock debugging due to kernel taint [ 227.179833] Kernel panic - not syncing: panic_on_warn set ... [ 227.179833] [ 227.187219] CPU: 1 PID: 7769 Comm: syz-executor1 Tainted: G B 4.19.0-rc4+ #63 03:07:28 executing program 5: syz_emit_ethernet(0x32, &(0x7f0000000040)={@local, @link_local={0xffffff1f}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0xffffff6c, 0x0, @rand_addr, @multicast1}, @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "c8d1f6", 0x0, "071ccd"}}}}}}, &(0x7f0000000000)) [ 227.195801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 227.205170] Call Trace: [ 227.207784] dump_stack+0x306/0x460 [ 227.211450] panic+0x54c/0xafa [ 227.214708] kmsan_report+0x2cd/0x2d0 [ 227.218536] __msan_warning+0x7c/0xe0 [ 227.222362] vmx_create_vcpu+0x10df/0x7920 [ 227.226619] ? kmsan_set_origin_inline+0x6b/0x120 [ 227.231497] ? __msan_poison_alloca+0x17a/0x210 [ 227.236199] ? vmx_vm_init+0x340/0x340 [ 227.240110] kvm_arch_vcpu_create+0x25d/0x2f0 [ 227.244630] kvm_vm_ioctl+0x13fd/0x33d0 [ 227.248643] ? __msan_poison_alloca+0x17a/0x210 [ 227.253352] ? do_vfs_ioctl+0x18a/0x2810 [ 227.257433] ? __se_sys_ioctl+0x1da/0x270 [ 227.261598] ? vcpu_stat_clear_per_vm+0x420/0x420 [ 227.266461] ? vcpu_stat_clear_per_vm+0x420/0x420 [ 227.271319] do_vfs_ioctl+0xcf3/0x2810 [ 227.275233] ? security_file_ioctl+0x92/0x200 [ 227.279755] __se_sys_ioctl+0x1da/0x270 [ 227.283758] __x64_sys_ioctl+0x4a/0x70 [ 227.287675] do_syscall_64+0xbe/0x100 [ 227.291496] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 227.296701] RIP: 0033:0x457579 [ 227.299913] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 227.319182] RSP: 002b:00007fa8b11dac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 227.326910] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457579 [ 227.334201] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 227.341490] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 227.348781] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa8b11db6d4 [ 227.356062] R13: 00000000004bfc18 R14: 00000000004cfca0 R15: 00000000ffffffff [ 227.364609] Kernel Offset: disabled [ 227.368251] Rebooting in 86400 seconds..