Warning: Permanently added '10.128.0.127' (ECDSA) to the list of known hosts. [ 65.545400] random: sshd: uninitialized urandom read (32 bytes read) 2018/10/08 08:36:55 fuzzer started [ 70.026540] random: cc1: uninitialized urandom read (8 bytes read) 2018/10/08 08:37:00 dialing manager at 10.128.0.26:36867 2018/10/08 08:37:00 syscalls: 1 2018/10/08 08:37:00 code coverage: enabled 2018/10/08 08:37:00 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/10/08 08:37:00 setuid sandbox: enabled 2018/10/08 08:37:00 namespace sandbox: enabled 2018/10/08 08:37:00 Android sandbox: /sys/fs/selinux/policy does not exist 2018/10/08 08:37:00 fault injection: enabled 2018/10/08 08:37:00 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/10/08 08:37:00 net packed injection: enabled 2018/10/08 08:37:00 net device setup: enabled [ 74.501978] random: crng init done 08:38:55 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="b702000013000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7030000000000006a0a00fe00000000850000002b000000b7000000000000009500000000000000"], &(0x7f0000000140)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x0, 0xf, 0x7a, &(0x7f0000000080)="60e8302bbc89f67cca77d709af9835", &(0x7f0000000440)=""/122, 0x800}, 0x28) [ 188.257281] IPVS: ftp: loaded support on port[0] = 21 [ 190.540142] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.546854] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.555456] device bridge_slave_0 entered promiscuous mode [ 190.713360] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.719855] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.728465] device bridge_slave_1 entered promiscuous mode [ 190.865161] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 190.999881] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready 08:38:59 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000007000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) setpgid(r0, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, {0x0, @dev, 'lo\x00'}}, 0x1e) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000380)={0x10000009, 0xffffffffffffffff, 0x1}) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhci\x00', 0x0, 0x0) write$P9_RSTATFS(r2, &(0x7f0000000240)={0x43, 0x9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x43) [ 191.414071] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 191.669342] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 192.072117] IPVS: ftp: loaded support on port[0] = 21 [ 192.073988] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 192.084459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 192.671737] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 192.680035] team0: Port device team_slave_0 added [ 192.919536] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 192.927676] team0: Port device team_slave_1 added [ 193.162071] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 193.169220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 193.178377] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 193.362998] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 193.370107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 193.379729] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 193.644317] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 193.651890] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 193.661149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 193.876393] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 193.884014] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 193.892970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 195.709596] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.716141] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.724688] device bridge_slave_0 entered promiscuous mode [ 196.003982] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.010442] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.019099] device bridge_slave_1 entered promiscuous mode [ 196.293858] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 196.351969] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.358527] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.365583] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.372036] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.381475] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 196.511665] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 197.054139] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 08:39:05 executing program 2: mkdir(&(0x7f0000000440)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) chmod(&(0x7f0000000180)='./file0\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(0xffffffffffffffff, 0x80045301, &(0x7f00000005c0)) ioctl$sock_proto_private(0xffffffffffffffff, 0x89ef, &(0x7f0000000540)) write$FUSE_NOTIFY_DELETE(r0, &(0x7f00000001c0)={0x29, 0x6, 0x0, {0x1}}, 0x29) [ 197.348181] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 197.662751] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 197.972492] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 197.979519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 197.981269] IPVS: ftp: loaded support on port[0] = 21 [ 198.261614] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 198.268750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 198.903795] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 198.911745] team0: Port device team_slave_0 added [ 199.245061] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 199.253253] team0: Port device team_slave_1 added [ 199.437522] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 199.444812] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 199.454265] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 199.754222] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 199.761270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 199.770246] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 200.049345] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 200.057073] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 200.066082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 200.378566] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 200.386282] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 200.395572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 202.452124] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.458788] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.467237] device bridge_slave_0 entered promiscuous mode [ 202.818074] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.824808] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.833273] device bridge_slave_1 entered promiscuous mode [ 203.141234] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 203.384970] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 203.430080] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.436619] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.443611] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.450057] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.458821] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 204.165387] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 204.182942] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 204.372479] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 204.636277] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 204.643392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 204.937520] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 204.944687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 08:39:13 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0xa}, 0x6) [ 205.782623] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 205.790695] team0: Port device team_slave_0 added [ 206.204981] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 206.213231] team0: Port device team_slave_1 added [ 206.551655] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 206.558808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 206.567825] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 206.902809] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 206.909902] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 206.918893] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 206.928090] IPVS: ftp: loaded support on port[0] = 21 [ 207.211482] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 207.219635] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 207.228716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 207.587450] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 207.595433] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 207.604437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 207.824501] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.199419] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 210.504226] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 210.510567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 210.518715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 211.534378] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.540856] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.547866] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.554373] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.563320] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 211.662009] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.565439] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.571900] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.580452] device bridge_slave_0 entered promiscuous mode [ 212.592643] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 212.900730] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.907398] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.915836] device bridge_slave_1 entered promiscuous mode [ 213.270421] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 213.620331] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 214.644699] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 215.041634] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 215.341599] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 215.348907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 215.717316] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 215.724478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 08:39:24 executing program 4: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000080)="36f3f20fa266b98f0200000f320f01cb0f300f35440f20c066350b000000440f22c00f30260fc7acc1f1360f070fc72e1e75", 0x32}], 0x1, 0x0, &(0x7f0000000300), 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000003c0)="0f20c035100000000f22c0c4c1f87766baf80cb8aedf018fef66bafc0c66ed0f01ef8149000f00000036f30f2000c4c37962530782670fc75b39643e2e0f01cf66baf80cb86c5fbb8aef66bafc0c66b8e07166ef", 0x54}], 0x1, 0x0, &(0x7f0000000040), 0xfffffffffffff29) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 216.961974] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 216.970074] team0: Port device team_slave_0 added [ 217.371499] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 217.380193] team0: Port device team_slave_1 added [ 217.519480] IPVS: ftp: loaded support on port[0] = 21 [ 217.819298] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 217.826534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 217.835637] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 218.059961] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.160197] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 218.167479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 218.176256] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 218.593896] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 218.601445] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 218.610386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 219.007497] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 219.015245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 219.024226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 219.627932] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready 08:39:28 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) removexattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000300)=ANY=[]) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000c00)=ANY=[], 0x0) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000001600)=""/4096) writev(r0, &(0x7f0000001400)=[{&(0x7f00000003c0)='8', 0x1}], 0x1) sendmsg(r0, &(0x7f0000000700)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}, 0x1261}, 0x80, &(0x7f0000000640), 0x0, &(0x7f0000000180)}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0xa}, 0x6) [ 221.273933] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 221.280270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 221.288072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 08:39:29 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x31) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x20000000002, 0x0) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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"}}}, 0x120) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000180)={'ifb0\x00', {0x2, 0x4e24, @loopback}}) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000080)="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") write$RDMA_USER_CM_CMD_DISCONNECT(r2, &(0x7f0000000000)={0xa, 0x2}, 0xfffffff0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x1, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x0, 0x33}, 0x0, @in6=@loopback, 0x3505, 0x0, 0x0, 0x90}}, 0xe8) connect$inet6(r0, &(0x7f00000001c0), 0x1c) [ 223.273233] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.948860] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.955438] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.962519] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.968959] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.977387] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 224.984044] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 227.897970] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.904521] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.913005] device bridge_slave_0 entered promiscuous mode [ 228.649239] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.655857] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.664256] device bridge_slave_1 entered promiscuous mode [ 229.384775] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 230.057453] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 231.725166] clocksource: timekeeping watchdog on CPU0: Marking clocksource 'tsc' as unstable because the skew is too large: [ 231.736590] clocksource: 'acpi_pm' wd_now: 874f88 wd_last: 74ce59 mask: ffffff [ 231.746048] clocksource: 'tsc' cs_now: 8191a371b0 cs_last: 7c5e1d58bb mask: ffffffffffffffff [ 231.756651] tsc: Marking TSC unstable due to clocksource watchdog [ 231.770414] TSC found unstable after boot, most likely due to broken BIOS. Use 'tsc=unstable'. [ 231.779732] sched_clock: Marking unstable (231838210746, -67815953)<-(231886830239, -116434242) [ 231.799821] clocksource: Switched to clocksource acpi_pm [ 231.922716] bond0: Enslaving bond_slave_0 as an active interface with an up link 08:39:40 executing program 5: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x80000, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x480, 0x0, 0x140, 0x140, 0x398, 0x398, 0x398, 0x4, &(0x7f0000000040), {[{{@arp={@multicast2, @remote, 0xff0000ff, 0xff, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, {[0xff, 0xff, 0x0, 0xff, 0x0, 0xff]}, @mac=@random="2c26bef0da9b", {[0xff, 0x0, 0xff, 0xff, 0xff]}, 0x20, 0x1f, 0x604, 0x3, 0x4ed, 0x7fffffff, 'veth1_to_team\x00', 'ip6tnl0\x00', {0xff}, {0xff}}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @broadcast, @local, 0x1, 0xffffffff}}}, {{@arp={@multicast1, @multicast1, 0xffffff00, 0xffffffff, @mac=@link_local, {[0xff, 0xff, 0x0, 0x0, 0x0, 0xff]}, @empty, {[0xff, 0xff, 0x0, 0x0, 0x0, 0xff]}, 0x80000001, 0x43efc073, 0x3ff, 0x7, 0x1, 0xfffffffffffffc00, 'veth0\x00', 'bpq0\x00', {0xff}, {}, 0x0, 0x12}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="ea02ac60b0aa", @empty, @empty, @empty, 0xf, 0x1}}}, {{@arp={@loopback, @empty, 0xffffffff, 0xffffffff, @empty, {[0x0, 0xff, 0xff, 0xff, 0x0, 0xff]}, @empty, {[0x0, 0xff, 0xff]}, 0xfffffffffffffe00, 0x5, 0x1, 0x0, 0x6, 0x587, 'syzkaller0\x00', 'veth1_to_bridge\x00', {0xff}, {0xff}, 0x0, 0x206}, 0xf0, 0x118}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x8, 0x1f, 0x3}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4d0) r1 = geteuid() bind(r0, &(0x7f0000000580)=@un=@file={0x1, './file0\x00'}, 0x80) write$UHID_DESTROY(r0, &(0x7f0000000600), 0x4) socketpair(0xf, 0x803, 0x9, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0x1f, 0x8000e, 0x1) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000680)={{{@in6, @in=@remote}}, {{@in6=@dev}}}, &(0x7f0000000780)=0xe8) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000007c0)={0x0, 0x8, 0x800, 0x8}, &(0x7f0000000800)=0x10) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000840)=@assoc_value={r5, 0x2}, &(0x7f0000000880)=0x8) write$UHID_DESTROY(r3, &(0x7f00000008c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000980)={r5, 0x7c, &(0x7f0000000900)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xb}}, @in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x4e24, @multicast2}, @in={0x2, 0x4e21}, @in={0x2, 0x4e23, @local}, @in={0x2, 0x4e20, @local}, @in6={0xa, 0x4e20, 0x5, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1b}}, 0x40}]}, &(0x7f00000009c0)=0x10) r7 = accept(r2, 0x0, &(0x7f0000000a00)) ioprio_set$uid(0x3, r1, 0x98) r8 = syz_open_dev$sndpcmc(&(0x7f0000000a40)='/dev/snd/pcmC#D#c\x00', 0x2a16, 0x486000) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) ioctl$UI_SET_PROPBIT(r0, 0x4004556e, 0x6) ioctl(r2, 0x9, &(0x7f0000000a80)="18b719c73941ab4957cbfb6c6f5e109c7ec93b28756a36f6dee9a373249c5dc059d2846f44fcaf904163ac9567becb72936e15b00789ffc973fd6d48feefa58cbef29233c041d39185074cda51b5a47d7de3d81c341fd8ea4bf5a07725cde17380631013fee7c396d5fd2d6c3d40198c621eddf7d43362624ed10f40eb10b5710686301adec745ca97a688ae5c27a5201a00b7fa7f7bfa5d887e284e21b0500fda4fad7c5625e06a0d6cc08f6a77dee4d6be89be8d179da7848c57f79b65b5215d3f5723bbfdf2683fd0c1423b70b1c835dd6faf41e3f72dd7abf3f1e3ab9f6bd11b420144ef9089c21a849efa") setsockopt$inet_mreqsrc(r7, 0x0, 0x2e, &(0x7f0000000b80)={@multicast1, @rand_addr=0x1f, @broadcast}, 0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r8, 0x84, 0xa, &(0x7f0000000bc0)={0x10001, 0x0, 0x1, 0x3, 0x100000000, 0x4, 0x6, 0x3, r5}, 0x20) r9 = request_key(&(0x7f0000000c00)='encrypted\x00', &(0x7f0000000c40)={'syz', 0x2}, &(0x7f0000000c80)='veth1_to_team\x00', 0xfffffffffffffff8) r10 = add_key$keyring(&(0x7f0000000d40)='keyring\x00', &(0x7f0000000d80)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$search(0xa, r9, &(0x7f0000000cc0)='pkcs7_test\x00', &(0x7f0000000d00)={'syz', 0x2}, r10) io_setup(0x2, &(0x7f0000000dc0)=0x0) io_submit(r11, 0x5, &(0x7f0000001400)=[&(0x7f0000000f00)={0x0, 0x0, 0x0, 0x7, 0x9, r8, &(0x7f0000000e00)="c7ba3804077bfc303fc1647a6affcd941c30b11568307c3b8c792224ed2fd6c7615ddbd666e2470d55eb4e7de6d043fa2ee9a542c94de45300cf1f7c9d2f93f0fb68908c17fa7f06ec5be64546be086d45e89b66e30406a4608f79ed203309ca138afbdd02c364178bd3b1503c70e79f9a09e027f29a731eac55995755f30f12978257c84b308f1cb0decda58190bb247247bb68457e8fc8d56d4db0118d532fb4ec343b5545113531a1ce9cd9fb634a2bc5f7fce613a8c159a7058b31a18b0db839e43abb64727eb3649a0e", 0xcc, 0x6, 0x0, 0x3, r8}, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x5, 0x0, r3, &(0x7f0000000f40)="0004ccba4cdc7240974127f9f5104eed1bff6549b652bb6c47f6f799aebc721252ea81b6da1f4ac1ae2ff9404db15b65636e1a8da7fc9442d05b3a76f645f51981237b143c803b48760861a645b98663326e4dac6f7e01b0da971347145ecd32267eebcf6d6495ea08b5679bfe86205aec016c49812b7a6399d52db03fba3d6c3dbebcfdff511678eeb6e57c59013649fd1de3acebaa774ca4b507a2534a1aa3470d7642d3f794240ff146b42dd1abcc9b245b047e36da5357055698475524c22b90b65e9a5ea3c503ae8292524eebff1845db30be836d3c47593ec9f0efe6cbf688b11dd220e4f2d502c503fa7b0f34104ac71b2bdf", 0xf6, 0x5, 0x0, 0x0, r3}, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x8, r2, &(0x7f0000001080)="999dffe2213ca9cac84a90ca841c809b1987b484a16795cc0820c970b28e1b462f1f7fc749d269ff8b06a8f77bc1a9ca2a6a76a4ed3db5b88190daf0c8b2a5e9005b4d6a6b330a12cb0edba178363939b5e1121078541f32ac907eb8638a95460071e6e3d78bff437fda314210e388563900b874be95a68bea248f00f72e3bbbbbb704cacf59d056c59a4d779de61308d9bbaf86a940a600e88ecb7eaf18df2f8bf2f54c598d6025b9bb5865cf91c0d63159c8baafd328d61368009dfd346784ecf648f5b1fea485566e38eb", 0xcc, 0x9, 0x0, 0x0, 0xffffffffffffff9c}, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x7, 0x3f, r2, &(0x7f00000011c0)="6370dcd45f65464b324d8aa044084ea69c655bee97104ebd36a690dc4c0654017160d4a143d87abb4607b0209c937ee13a4bebcbb67ecae916ce0d54b3c167cbf80abd8e18819b4b56fa053a1659e58801526033b6bc4d4a27cc3af33c2b2854437bb9202511305892f434a38030ad7ac1ccea66721c2d4758d7ae4b4375f9b1339432f062b19967d83fa42559b27477aebab3ae28af6638cc813276b1c41d5d498356bd03c41346bcf59e97eda0ed03c4e57672cc7ed45d39e34403e8e5f28ef4d279e84d262505d99049f55aac5f0a0875ec3f6695d06500ef13ad563a", 0xde, 0x9, 0x0, 0x2, 0xffffffffffffff9c}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x12e, r8, &(0x7f0000001300)="a1cfae25779c8582402756512634235361c825b9949e00f01ca4e590f150a4f28ae0f8ea515a07ddec7e7cba14cc23a5451ef26146a097cc8a978e66eca2f69e5882dcb55b20dc0145e515f6e8dc2f4c14a2752b9b86fa68509eaa304612a1a94d898a48e4e550d367e722c933068cd92a0a75802483e870a1fbdcae74cfbd07e5321c2862b66f92e59ef9e7f3f47a62f5", 0x91, 0x3, 0x0, 0x1, r0}]) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000001440)={r5, 0x88, "12a0b5bff32ed84cceb3fd7b1904a81f5dfc8dc1c3788b0359cbd6657fd1bc6727586815bd18a02f5a64d4c89d1c782a8a24d05d2e2acf690d3e9c42fbc73e0e3bf0b1b80aa8c37c662a92dd1ebf002da48c6669054405f46986ee283b869c5640daa6f6e812fc667d1c1c78f9e26bb169f0b9a11af8753c9a3b8091f78fd6b17616d7c2d2c0d9d0"}, &(0x7f0000001500)=0x90) ioctl$KVM_GET_NR_MMU_PAGES(r0, 0xae45, 0x4) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000001540)={r6, 0x45}, &(0x7f0000001580)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000015c0)={r12, 0x9, 0x30}, &(0x7f0000001600)=0xc) lookup_dcookie(0xfff, &(0x7f0000001640)=""/125, 0x7d) [ 232.235815] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 232.260668] 8021q: adding VLAN 0 to HW filter on device bond0 08:39:40 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000400)={{}, "73797a300000ffffffff0000000000004000"}) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000080)={{}, 'syz1\x00'}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 232.607987] input: syz0 as /devices/virtual/input/input5 [ 232.708087] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 232.715344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready 08:39:41 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000180)="3e66aa0f0666b9800000c00f326635008000000f30bad104b80100ef670f08660f30b801008ed8f20f597f00660ff6fe0f0133", 0x33}], 0x1, 0x0, &(0x7f0000000200), 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x0) socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev}, 0x79) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x29, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) [ 233.116361] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 233.123499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 233.418333] IPVS: ftp: loaded support on port[0] = 21 [ 233.977358] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready 08:39:42 executing program 0: getitimer(0x0, &(0x7f0000000000)) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x0, &(0x7f0000006ffc), 0x4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80200000000002, &(0x7f0000000680)=0x82, 0x4) fsetxattr$security_evm(r1, &(0x7f0000000340)='security.evm\x00', &(0x7f0000000380)=@v1={0x2, "10946d65bb7a0c66e84a6f0767306bb7cde2"}, 0x13, 0x1) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0x5e9) syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') fcntl$getflags(r0, 0x401) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000040), 0x4) write$binfmt_elf64(r1, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0xffffff84) setsockopt$packet_int(r0, 0x107, 0xb, &(0x7f00000000c0)=0x2, 0x4) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x40, 0x0) r3 = getpid() ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000400)={[], 0x401, 0x8001, 0x8000, 0x4, 0x6, r3}) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0xff9a}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f00000002c0)=@req={0x6, 0x7, 0x4fd, 0xffffffffffffff80}, 0x10) socket$netlink(0x10, 0x3, 0xe) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair(0x0, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_open_procfs(0x0, &(0x7f0000000100)="2f65786500000000000409004bddd9de91be10ee9ed554fa07424adee9cbc699ec2ca576e50000bcd7a071fb35331ce39c5ad0cf73770bd4246847a1914e4fb0aa9b15eaa94bcd0e700ed63b44338e84ad4ec2f11f6f2adb8dc2fdb18231446f43142ebe700b2231e8fceed6b22a373c9409675ac8d0b53033123fb3037d66241aafe0f880e7a51d1b036ade31d2544d2581fe8653d0cff54369df8c2fce21dcb1cb965669f9a75345ac3479cd51dc7de364c9c272c83ed9e666ca25aad2e7a26e3d6c62d0f8b9065cfca311c06d0744db265aa0e486707c51fd108c0c6ccae6ff42274af94d30fce8836ff9d00bdd") ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000000280)) ioctl$BLKRAGET(r5, 0x1263, &(0x7f0000000300)) [ 234.501321] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 234.509588] team0: Port device team_slave_0 added [ 234.833103] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 234.841117] team0: Port device team_slave_1 added [ 235.295881] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 235.303073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 235.311682] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 235.573818] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 235.580125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 235.588114] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 235.682834] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 235.689868] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 235.698587] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 236.050303] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 236.057964] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 236.066929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 236.120647] hrtimer: interrupt took 118451 ns [ 236.143207] mmap: syz-executor1 (7138) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 236.366760] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 236.374718] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 236.383642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready 08:39:45 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x0, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000a00), 0x0, 0x0, &(0x7f000069affb)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r1, &(0x7f0000002500)=[{{&(0x7f0000000180)=@un=@abs, 0x80, &(0x7f0000000100)}}], 0x1, 0x4002, &(0x7f0000000140)) [ 238.056164] 8021q: adding VLAN 0 to HW filter on device team0 08:39:46 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syslog(0x3, &(0x7f00000000c0)=""/147, 0x37a8ec531be3c41f) mount(&(0x7f0000000200)=ANY=[], &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, &(0x7f00000002c0)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000180), 0x0) [ 239.714725] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.721189] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.729685] device bridge_slave_0 entered promiscuous mode [ 240.040274] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.046960] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.055387] device bridge_slave_1 entered promiscuous mode [ 240.296732] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 240.535872] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 240.663776] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.670225] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.677317] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.683878] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.692061] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 241.398687] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 241.452566] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 241.669003] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 241.949159] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 241.956407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 242.238285] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 242.245824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 243.069207] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.184489] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 243.192788] team0: Port device team_slave_0 added [ 243.474917] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 243.483171] team0: Port device team_slave_1 added [ 243.696062] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 243.703387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 243.712116] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 244.000989] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 244.008308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 244.017041] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 244.070039] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 244.289069] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 244.296788] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 244.305722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 244.663093] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 244.670660] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 244.679723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 245.219726] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 245.226244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 245.234446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 246.258527] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.155872] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.162451] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.169350] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.175993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.184594] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 247.191137] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 08:39:57 executing program 1: clone(0x10000000000200, &(0x7f0000000b00), &(0x7f0000744000), &(0x7f0000000200), &(0x7f0000000280)) mknod(&(0x7f0000000100)='./file0\x00', 0x103f, 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000540), &(0x7f00000006c0)) r0 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000240), &(0x7f0000000340)}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f00000002c0)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f0000775000)) process_vm_readv(r0, &(0x7f0000000080)=[{&(0x7f0000000140)=""/143, 0x8f}], 0x1, &(0x7f0000001540)=[{&(0x7f0000001400)=""/90, 0x5a}], 0x1, 0x0) tkill(r0, 0x1000000000016) 08:39:57 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000040)) ptrace(0x10, r0) [ 251.321132] 8021q: adding VLAN 0 to HW filter on device bond0 08:40:00 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000000000)=0xfffffdfd) [ 252.286288] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 252.895082] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 252.901915] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 252.909974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 253.442739] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.273538] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.814850] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 256.340096] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 256.346891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 256.354803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 256.822190] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. [ 256.851879] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.885865] ================================================================== [ 256.892264] BUG: KMSAN: uninit-value in loaded_vmcs_init+0x343/0x590 [ 256.892264] CPU: 1 PID: 7734 Comm: syz-executor5 Not tainted 4.19.0-rc4+ #63 [ 256.892264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 256.892264] Call Trace: [ 256.892264] [ 256.892264] dump_stack+0x306/0x460 [ 256.892264] ? loaded_vmcs_init+0x343/0x590 [ 256.892264] kmsan_report+0x1a3/0x2d0 [ 256.892264] __msan_warning+0x7c/0xe0 [ 256.892264] loaded_vmcs_init+0x343/0x590 [ 256.892264] __loaded_vmcs_clear+0x2fb/0x3c0 [ 256.892264] flush_smp_call_function_queue+0x404/0x770 [ 256.892264] ? vmx_get_msr_feature+0x180/0x180 [ 256.892264] generic_smp_call_function_single_interrupt+0x1f/0x30 [ 256.892264] smp_call_function_single_interrupt+0x2f7/0x530 [ 256.892264] call_function_single_interrupt+0xf/0x20 [ 256.892264] [ 256.892264] RIP: 0010:kmsan_internal_check_memory+0x1aa/0x210 [ 256.892264] Code: 45 89 f8 ff 75 b8 6a 01 e8 a3 fb ff ff 48 83 c4 10 48 8b 45 a8 ff 88 7c 09 00 00 75 55 e8 3e e3 36 ff 4c 89 65 90 ff 75 90 9d 15 ff 8b 7c 09 00 00 75 4e e8 27 e3 36 ff 4c 89 65 98 ff 75 98 [ 256.892264] RSP: 0000:ffff88014156f850 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff04 [ 256.892264] RAX: ffff880148fabc00 RBX: 0000000000000008 RCX: 000000010230f918 [ 256.892264] RDX: 0000000000000500 RSI: ffff88021fff2000 RDI: 0000000000000500 [ 256.892264] RBP: ffff88014156f8c0 R08: ffffffff7fffffff R09: 0000000000000002 [ 256.892264] R10: 0000000096fcd000 R11: ffffffffffffffff R12: 0000000000000246 [ 256.892264] R13: 0000000000000008 R14: 0000000000000000 R15: ffffffffffffffff [ 256.892264] kmsan_check_memory+0xb/0x10 [ 256.892264] lock_page_memcg+0x97/0x470 [ 256.892264] ? page_add_file_rmap+0xc2/0x9b0 [ 256.892264] page_add_file_rmap+0xef/0x9b0 [ 256.892264] alloc_set_pte+0x92c/0x2530 [ 256.892264] ? msan_get_shadow_origin_ptr+0x2f1/0x300 [ 256.892264] ? page_cache_get_speculative+0x516/0x5f0 [ 256.892264] filemap_map_pages+0x13f4/0x1d80 [ 256.892264] handle_mm_fault+0x3e7d/0xa3b0 [ 256.892264] ? filemap_fault+0x2cd0/0x2cd0 [ 256.892264] __do_page_fault+0xec9/0x1b50 [ 256.892264] do_page_fault+0x98/0xd0 [ 256.892264] ? page_fault+0x8/0x30 [ 256.892264] page_fault+0x1e/0x30 [ 256.892264] RIP: 0033:0x455e20 [ 256.892264] Code: 0f 05 48 3d 00 f0 ff ff 76 e0 f7 d8 64 41 89 01 eb d8 0f 1f 84 00 00 00 00 00 f7 d8 64 41 89 01 eb d7 0f 1f 84 00 00 00 00 00 3b 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 3d cb fb ff c3 66 2e [ 256.892264] RSP: 002b:0000000000a3fac8 EFLAGS: 00010207 [ 256.892264] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000000041f650 [ 256.892264] RDX: 00007ffe7daa09e8 RSI: 0000000000a3fb00 RDI: 00000000004dac7b [ 256.892264] RBP: 0000000000a3fc80 R08: 0000000000000000 R09: 0000000000000032 [ 256.892264] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000a3fef0 [ 256.892264] R13: 0000000000a3fe28 R14: 0000000000000000 R15: 0000000000000000 [ 256.892264] [ 256.892264] Local variable description: ----error.i@loaded_vmcs_init [ 256.892264] Variable was created at: [ 256.892264] loaded_vmcs_init+0x8a/0x590 [ 256.892264] __loaded_vmcs_clear+0x2fb/0x3c0 [ 256.892264] ================================================================== [ 256.892264] Disabling lock debugging due to kernel taint [ 256.892264] Kernel panic - not syncing: panic_on_warn set ... [ 256.892264] [ 256.892264] CPU: 1 PID: 7734 Comm: syz-executor5 Tainted: G B 4.19.0-rc4+ #63 [ 256.892264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 256.892264] Call Trace: [ 256.892264] [ 256.892264] dump_stack+0x306/0x460 [ 256.892264] panic+0x54c/0xafa [ 256.892264] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 256.892264] kmsan_report+0x2cd/0x2d0 [ 256.892264] __msan_warning+0x7c/0xe0 [ 256.892264] loaded_vmcs_init+0x343/0x590 [ 256.892264] __loaded_vmcs_clear+0x2fb/0x3c0 [ 256.892264] flush_smp_call_function_queue+0x404/0x770 [ 256.892264] ? vmx_get_msr_feature+0x180/0x180 [ 256.892264] generic_smp_call_function_single_interrupt+0x1f/0x30 [ 256.892264] smp_call_function_single_interrupt+0x2f7/0x530 [ 256.892264] call_function_single_interrupt+0xf/0x20 [ 256.892264] [ 256.892264] RIP: 0010:kmsan_internal_check_memory+0x1aa/0x210 [ 256.892264] Code: 45 89 f8 ff 75 b8 6a 01 e8 a3 fb ff ff 48 83 c4 10 48 8b 45 a8 ff 88 7c 09 00 00 75 55 e8 3e e3 36 ff 4c 89 65 90 ff 75 90 9d 15 ff 8b 7c 09 00 00 75 4e e8 27 e3 36 ff 4c 89 65 98 ff 75 98 [ 256.892264] RSP: 0000:ffff88014156f850 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff04 [ 256.892264] RAX: ffff880148fabc00 RBX: 0000000000000008 RCX: 000000010230f918 [ 256.892264] RDX: 0000000000000500 RSI: ffff88021fff2000 RDI: 0000000000000500 [ 256.892264] RBP: ffff88014156f8c0 R08: ffffffff7fffffff R09: 0000000000000002 [ 256.892264] R10: 0000000096fcd000 R11: ffffffffffffffff R12: 0000000000000246 [ 256.892264] R13: 0000000000000008 R14: 0000000000000000 R15: ffffffffffffffff [ 256.892264] kmsan_check_memory+0xb/0x10 [ 256.892264] lock_page_memcg+0x97/0x470 [ 256.892264] ? page_add_file_rmap+0xc2/0x9b0 [ 256.892264] page_add_file_rmap+0xef/0x9b0 [ 256.892264] alloc_set_pte+0x92c/0x2530 [ 256.892264] ? msan_get_shadow_origin_ptr+0x2f1/0x300 [ 256.892264] ? page_cache_get_speculative+0x516/0x5f0 [ 256.892264] filemap_map_pages+0x13f4/0x1d80 [ 256.892264] handle_mm_fault+0x3e7d/0xa3b0 [ 256.892264] ? filemap_fault+0x2cd0/0x2cd0 [ 256.892264] __do_page_fault+0xec9/0x1b50 [ 256.892264] do_page_fault+0x98/0xd0 [ 256.892264] ? page_fault+0x8/0x30 [ 256.892264] page_fault+0x1e/0x30 [ 256.892264] RIP: 0033:0x455e20 [ 256.892264] Code: 0f 05 48 3d 00 f0 ff ff 76 e0 f7 d8 64 41 89 01 eb d8 0f 1f 84 00 00 00 00 00 f7 d8 64 41 89 01 eb d7 0f 1f 84 00 00 00 00 00 3b 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 3d cb fb ff c3 66 2e [ 256.892264] RSP: 002b:0000000000a3fac8 EFLAGS: 00010207 [ 256.892264] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000000041f650 [ 256.892264] RDX: 00007ffe7daa09e8 RSI: 0000000000a3fb00 RDI: 00000000004dac7b [ 256.892264] RBP: 0000000000a3fc80 R08: 0000000000000000 R09: 0000000000000032 [ 256.892264] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000a3fef0 [ 256.892264] R13: 0000000000a3fe28 R14: 0000000000000000 R15: 0000000000000000 [ 256.892264] Kernel Offset: disabled [ 256.892264] Rebooting in 86400 seconds..