[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [ 57.504287] sshd (6130) used greatest stack depth: 53184 bytes left [....] Starting OpenBSD Secure Shell server: sshd[ 57.674579] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. [ 59.060668] random: sshd: uninitialized urandom read (32 bytes read) [ 59.377484] random: sshd: uninitialized urandom read (32 bytes read) Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 61.521236] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.120' (ECDSA) to the list of known hosts. [ 67.392101] random: sshd: uninitialized urandom read (32 bytes read) 2018/10/06 21:54:40 fuzzer started [ 71.862965] random: cc1: uninitialized urandom read (8 bytes read) 2018/10/06 21:54:45 dialing manager at 10.128.0.26:36867 2018/10/06 21:54:45 syscalls: 1 2018/10/06 21:54:45 code coverage: enabled 2018/10/06 21:54:45 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/10/06 21:54:45 setuid sandbox: enabled 2018/10/06 21:54:45 namespace sandbox: enabled 2018/10/06 21:54:45 Android sandbox: /sys/fs/selinux/policy does not exist 2018/10/06 21:54:45 fault injection: enabled 2018/10/06 21:54:45 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/10/06 21:54:45 net packed injection: enabled 2018/10/06 21:54:45 net device setup: enabled [ 76.794680] random: crng init done 21:56:50 executing program 0: [ 199.793147] IPVS: ftp: loaded support on port[0] = 21 [ 202.159040] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.165675] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.174429] device bridge_slave_0 entered promiscuous mode [ 202.316981] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.323624] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.332300] device bridge_slave_1 entered promiscuous mode [ 202.473309] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 202.615498] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 203.048382] bond0: Enslaving bond_slave_0 as an active interface with an up link 21:56:54 executing program 1: [ 203.268083] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 203.547788] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 203.555014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 203.842329] IPVS: ftp: loaded support on port[0] = 21 [ 204.278101] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 204.286471] team0: Port device team_slave_0 added [ 204.578165] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 204.586394] team0: Port device team_slave_1 added [ 204.754707] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 204.762184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 204.771111] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 205.031064] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 205.038591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 205.047869] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 205.238657] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 205.246374] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 205.255944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 205.548812] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 205.556782] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 205.565771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 207.413745] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.420222] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.428844] device bridge_slave_0 entered promiscuous mode [ 207.618627] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.625250] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.633750] device bridge_slave_1 entered promiscuous mode [ 207.790373] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 207.983137] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 208.254904] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.261391] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.268452] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.275515] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.285474] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 208.634644] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 208.654270] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 208.846785] bond0: Enslaving bond_slave_1 as an active interface with an up link 21:57:00 executing program 2: [ 209.066264] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 209.073562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 209.373309] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 209.380422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 210.068779] IPVS: ftp: loaded support on port[0] = 21 [ 210.216476] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 210.224681] team0: Port device team_slave_0 added [ 210.518487] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 210.526540] team0: Port device team_slave_1 added [ 210.846799] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 210.853975] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 210.863059] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 211.150896] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 211.158065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 211.167108] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 211.434204] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 211.442146] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 211.451178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 211.746863] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 211.754658] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 211.764732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 214.696099] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.702727] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.711204] device bridge_slave_0 entered promiscuous mode [ 214.960959] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.967785] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.976380] device bridge_slave_1 entered promiscuous mode [ 215.029263] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.036254] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.043472] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.049942] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.058778] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 215.320293] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 215.384475] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 215.634285] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 216.391549] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 216.608534] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 216.838518] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 216.845707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 217.080993] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 217.088272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 21:57:08 executing program 3: [ 218.183479] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 218.191507] team0: Port device team_slave_0 added [ 218.636579] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 218.644856] team0: Port device team_slave_1 added [ 218.683060] IPVS: ftp: loaded support on port[0] = 21 [ 219.027647] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 219.034858] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 219.044385] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 219.417488] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 219.424722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 219.433631] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 219.776863] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 219.784732] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 219.794090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 220.163808] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 220.171366] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 220.180589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 220.591637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.054153] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 223.361023] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 223.367579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 223.375774] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 224.463969] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.470451] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.477540] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.484074] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.493069] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 224.615656] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.622251] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.630622] device bridge_slave_0 entered promiscuous mode [ 224.765277] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.996948] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.003698] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.012241] device bridge_slave_1 entered promiscuous mode [ 225.063321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 225.368389] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 225.687194] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 226.710799] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 227.051278] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 227.421292] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 227.428596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready 21:57:18 executing program 4: [ 227.795552] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 227.802751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 229.045860] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 229.054018] team0: Port device team_slave_0 added [ 229.109325] IPVS: ftp: loaded support on port[0] = 21 [ 229.429786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.520897] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 229.529192] team0: Port device team_slave_1 added [ 229.989809] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 229.997135] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 230.006212] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 230.446751] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 230.454006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 230.463104] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 230.932276] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 230.939864] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 230.948958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 231.052106] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 231.407339] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 231.415123] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 231.424294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 232.591087] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 232.597616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 232.605759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 234.308769] 8021q: adding VLAN 0 to HW filter on device team0 21:57:25 executing program 0: 21:57:25 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000000c0)=""/44, &(0x7f0000000080)=0x2c) setsockopt$inet_buf(r0, 0x0, 0x20, &(0x7f0000000040)="bb531a6c51c180c3497b179b", 0xc) [ 235.052650] IPVS: length: 44 != 8 [ 235.074654] IPVS: length: 44 != 8 21:57:26 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000040), 0x6) perf_event_open(&(0x7f0000c86f88)={0x2, 0x232, 0xf2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x4000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) 21:57:26 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000200), 0xc, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_deladdr={0x2c, 0x15, 0x101, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r1}, [@IFA_LOCAL={0x14}]}, 0x2c}}, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x400, 0x0) ioctl$EVIOCGBITSND(r2, 0x80404532, &(0x7f0000000240)=""/4096) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r3, 0x770a, 0x0) 21:57:27 executing program 0: io_setup(0x3, &(0x7f0000000300)) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) migrate_pages(0x0, 0x7, &(0x7f0000000140)=0x598c07b6, &(0x7f0000000180)=0x100000001) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000040)=0x1) r1 = dup3(r0, r0, 0x80000) ioctl$KVM_KVMCLOCK_CTRL(r1, 0xaead) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r2, 0x0, 0x2f, &(0x7f00000001c0)={0x5, {{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xb}}}, {{0x2, 0x4e23, @remote}}}, 0x108) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.swap.current\x00', 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r1, 0x4010aeac, &(0x7f00000000c0)={0x8}) [ 236.402473] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.408998] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.416199] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.422767] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.431547] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 236.634593] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.641066] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.649817] device bridge_slave_0 entered promiscuous mode 21:57:28 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000000180)={{0x100, 0x9}, 'port1\x00', 0x8, 0x800, 0x100000000, 0x2000000009, 0x5, 0x2, 0xffff, 0x0, 0x4, 0x4}) getsockname$packet(r0, &(0x7f0000001880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000018c0)=0x14) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f00000003c0)={@mcast2, @ipv4={[], [], @broadcast}, @local, 0x81, 0x40b, 0x3, 0x400, 0x4, 0x41001c0, r1}) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/attr/current\x00', 0x2, 0x0) sendto$packet(r0, &(0x7f0000000240)="8c70d90420921700f90a62c5b869ab990e744e5f3c6724ab64e640aefa482211c3a944e0a5be823e6b60cf4d26fa4107d3bfa84927e6bf9a43ed6d1f343c967ac46d1ab3bd9d2ff3b089729afccf6ecd36fee073ca199006404584d26f3313c79be02531d900b7", 0x67, 0x10, &(0x7f0000001900)={0x11, 0xfb, r1, 0x1, 0x4000000000008, 0x6, @remote}, 0x14) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000000300)={{0x6, 0x81}, 'port1\x00', 0x40, 0x4, 0x16c9, 0x4, 0x0, 0x7, 0x100000000, 0x0, 0x0, 0x3}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)="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", 0x0, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) [ 237.095527] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.102238] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.110708] device bridge_slave_1 entered promiscuous mode [ 237.303246] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 21:57:28 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000340), 0x24, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x4000000008912, &(0x7f0000000000)="153f6234488dd25d766070") ioctl$sock_ifreq(r0, 0x8991, &(0x7f0000000080)={'bcsf0\x00', @ifru_names='ip6gre0\x00'}) listxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240), 0x0) [ 237.641300] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready 21:57:28 executing program 0: r0 = socket$inet6(0xa, 0x80001, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='maps\x00') ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000040)={0x3, 0x4}) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000fe8000000000000000000000000000aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000ffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000edff0900000000000000ff020000000000000000000000000001000000000000000000000000000000000000000000007c33085a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000ffffac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000595900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000508c6a6b62fbd99e936ed1f0b0c8516439aa3008c3f57636007eac"], 0x440e) [ 238.120690] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 239.163690] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 239.482445] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 239.725043] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 239.732352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 240.087540] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 240.094715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 241.016203] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 241.024361] team0: Port device team_slave_0 added [ 241.317938] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 241.326312] team0: Port device team_slave_1 added [ 241.374526] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.668195] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 241.675356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 241.684117] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 241.991411] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 241.998789] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 242.007545] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 242.283598] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 242.291167] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 242.300268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 242.543514] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 242.615323] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 242.622989] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 242.631955] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready 21:57:34 executing program 1: r0 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='tunl0\x00', 0x106) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x404c0c0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) [ 243.751410] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 243.757933] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 243.766121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 244.598256] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.476890] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.483494] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.490430] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.497055] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.506041] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 245.512843] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 248.239442] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.159955] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready 21:57:40 executing program 2: openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007440), 0x0, 0x0, &(0x7f0000007640)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000140)) close(r0) syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") [ 250.165520] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 250.172341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 250.180180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 250.739794] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.839916] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.378403] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 253.931966] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 253.938365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 253.946347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 21:57:45 executing program 3: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDZAPENTCNT(r0, 0x5207, &(0x7f00000000c0)) [ 254.488205] 8021q: adding VLAN 0 to HW filter on device team0 21:57:47 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="006340400000000000e5ffffff7c0000000000000000000000000000000000000000000000180000000000000008000000000900"], 0x0, 0x0, &(0x7f00000003c0)}) 21:57:47 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = request_key(&(0x7f0000000040)='rxrpc\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='\x00', 0xffffffffffffffff) r2 = request_key(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='ppp1\x00', 0xfffffffffffffff9) keyctl$reject(0x13, r1, 0x8000, 0x1, r2) getsockopt$inet_tcp_int(r0, 0x6, 0x8000000000d, &(0x7f0000000000), &(0x7f0000000100)=0x457cd7aa) 21:57:47 executing program 5: acct(&(0x7f0000000000)='./file0\x00') shmget$private(0x0, 0x4000, 0x541, &(0x7f0000ffc000/0x4000)=nil) shmget$private(0x0, 0x3000, 0x8, &(0x7f0000ffd000/0x3000)=nil) r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x9, 0x2) ioctl$RTC_WIE_OFF(r0, 0x7010) syslog(0xf, 0x0, 0x0) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000080)) lsetxattr$trusted_overlay_nlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.nlink\x00', &(0x7f0000000140)={'L+', 0x3}, 0x28, 0x1) write$P9_RUNLINKAT(r0, &(0x7f0000000180)={0x7, 0x4d, 0x1}, 0x7) stat(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@dev={0xfe, 0x80, [], 0x17}, @in6=@remote, 0x4e21, 0x5, 0x4e24, 0x7, 0xa, 0x20, 0x80, 0x3a, 0x0, r1}, {0xe, 0x8, 0x2, 0x9, 0x80, 0x9, 0x401, 0xc437}, {0x2, 0x9, 0x3, 0x4}, 0xa0b9, 0x0, 0x2, 0x0, 0x1, 0x1}, {{@in=@remote, 0x4d5, 0x3b}, 0xa, @in, 0x34ff, 0x3, 0x1, 0x3, 0x7, 0x9}}, 0xe8) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000380)={0x7, 0x5, 0x1, 0x7, 0x2, 0x6799}) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f00000003c0)=""/179) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000480)) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0xf, 0x3, 0xfff, 0x8, 0x14, r0, 0x1000}, 0x2c) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x7f) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000500)='/dev/zero\x00', 0x208600, 0x0) ioctl$EVIOCSKEYCODE(r3, 0x40084504, &(0x7f0000000540)=[0x9, 0x6]) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f0000000580)={0x3, 0x10000, 0x5, 0x0, 0x11}) read$eventfd(r0, &(0x7f0000000600), 0x8) r4 = syz_open_dev$midi(&(0x7f0000000640)='/dev/midi#\x00', 0x5, 0x80000) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000006c0)=@security={'security\x00', 0xe, 0x4, 0x460, 0x120, 0x280, 0x120, 0x120, 0x0, 0x390, 0x390, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000680), {[{{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@frag={0x30, 'frag\x00', 0x0, {0x3f, 0x1, 0x4, 0x21, 0x1}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x7f, 0x3ff, 0xfffffffffffff90b}, {0x1, 0x1770, 0x100000001}}}}, {{@ipv6={@mcast1, @dev={0xfe, 0x80, [], 0xc}, [0x0, 0x0, 0x84174d59cafaae08, 0xff], [0xffffffff, 0xffffffff, 0x0, 0xff000000], 'teql0\x00', 'rose0\x00', {}, {0xff}, 0xbf, 0x100000000, 0x1}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@unspec=@nfacct={0x48, 'nfacct\x00', 0x0, {'syz1\x00', 0x1}}, @common=@hl={0x28, 'hl\x00', 0x0, {0x1, 0xa11c}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0xfffffffffffffffe, 0x2}, {0x7fffffff, 0x9, 0x80}}}}, {{@ipv6={@loopback, @mcast1, [0x0, 0x0, 0xffffffff], [0xffffff00, 0xff000000, 0xff000000], 'ip_vti0\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0xff, 0x1, 0x3, 0x30}, 0x0, 0xc8, 0x110}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x7, 0x7}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000b80)={'vcan0\x00', 0x0}) bind$packet(r0, &(0x7f0000000bc0)={0x11, 0x0, r5, 0x1, 0x81}, 0x14) ioctl$DRM_IOCTL_SET_VERSION(r3, 0xc0106407, &(0x7f0000000c00)={0xffffffffffff0001, 0xf, 0x240000000000000}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000c40)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000c80)=0x1c) membarrier(0x1, 0x0) ioctl$KVM_PPC_GET_SMMU_INFO(r0, 0x8250aea6, &(0x7f0000000cc0)) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) fchown(r3, r1, r2) 21:57:47 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="030000000000000008001b0000000000"], 0x1}}, 0x0) 21:57:47 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="7a0af8ff75257309bfa100000000000007010000f9ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001fd8)=ANY=[], &(0x7f0000000000)="504c20004cf7d12af11ce92537b5e3191e66de5d4ec18e4c2df01484a86d77842f624946eae310794c8c96ff1466232e25951139bda5d2990e523f8ec3080ffc1224d8dc4c84a9c8e8ab31576806715523fa749e8615c61049b8b1be6aa7740702cc5add", 0x0, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x0, 0xe, 0xa8, &(0x7f0000000400)="3ad270b8d6628495e4d16d7220e5", &(0x7f0000000480)=""/168, 0x2f6}, 0x28) 21:57:47 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000080)=@nfc, 0x80, &(0x7f0000000580), 0x0, &(0x7f0000000640)=ANY=[]}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) [ 256.690329] binder_alloc: 7569: binder_alloc_buf size 2533274790404096 failed, no address space [ 256.699404] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 256.708627] binder: 7569:7571 transaction failed 29201/-28, size 6144-2533274790397952 line 2970 21:57:47 executing program 2: 21:57:47 executing program 0: [ 256.813689] binder_alloc: binder_alloc_mmap_handler: 7569 20001000-20004000 already mapped failed -16 [ 256.854572] binder: BINDER_SET_CONTEXT_MGR already set [ 256.859932] binder: 7569:7571 ioctl 40046207 0 returned -16 [ 256.954589] binder_alloc: 7569: binder_alloc_buf, no vma [ 256.960428] binder: 7569:7578 transaction failed 29189/-3, size 6144-2533274790397952 line 2970 21:57:48 executing program 1: [ 257.008939] binder: undelivered TRANSACTION_ERROR: 29201 [ 257.016102] binder: undelivered TRANSACTION_ERROR: 29189 21:57:48 executing program 3: 21:57:48 executing program 0: 21:57:48 executing program 4: 21:57:48 executing program 2: 21:57:48 executing program 1: [ 257.944178] IPVS: ftp: loaded support on port[0] = 21 [ 259.204000] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.210408] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.218787] device bridge_slave_0 entered promiscuous mode [ 259.297575] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.304115] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.311636] device bridge_slave_1 entered promiscuous mode [ 259.388609] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 259.465033] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 259.695245] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 259.776048] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 259.924977] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 259.932010] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 260.162984] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 260.170516] team0: Port device team_slave_0 added [ 260.247035] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 260.254703] team0: Port device team_slave_1 added [ 260.331365] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 260.412032] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 260.490473] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 260.497916] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 260.507115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 260.580171] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 260.587493] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 260.596690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 261.453816] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.460222] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.467216] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.473663] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.481633] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 261.871976] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 264.622362] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.922808] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 265.212224] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 265.218458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 265.226609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 265.628778] 8021q: adding VLAN 0 to HW filter on device team0 21:57:58 executing program 5: 21:57:58 executing program 4: 21:57:58 executing program 3: 21:57:58 executing program 2: 21:57:58 executing program 0: 21:57:58 executing program 1: 21:57:58 executing program 1: 21:57:58 executing program 4: 21:57:58 executing program 0: 21:57:59 executing program 3: 21:57:59 executing program 2: 21:57:59 executing program 1: 21:57:59 executing program 5: 21:57:59 executing program 4: 21:57:59 executing program 0: 21:57:59 executing program 3: 21:57:59 executing program 2: 21:57:59 executing program 4: 21:57:59 executing program 5: 21:57:59 executing program 1: 21:57:59 executing program 0: 21:58:00 executing program 2: 21:58:00 executing program 3: 21:58:00 executing program 4: 21:58:00 executing program 0: 21:58:00 executing program 5: 21:58:00 executing program 3: 21:58:00 executing program 1: 21:58:00 executing program 2: 21:58:00 executing program 4: 21:58:00 executing program 0: 21:58:00 executing program 3: 21:58:00 executing program 1: 21:58:01 executing program 2: 21:58:01 executing program 5: 21:58:01 executing program 4: 21:58:01 executing program 0: 21:58:01 executing program 1: 21:58:01 executing program 2: 21:58:01 executing program 3: 21:58:01 executing program 4: 21:58:01 executing program 0: 21:58:01 executing program 2: 21:58:01 executing program 5: 21:58:01 executing program 1: 21:58:01 executing program 3: 21:58:02 executing program 4: 21:58:02 executing program 0: 21:58:02 executing program 3: 21:58:02 executing program 2: 21:58:02 executing program 4: 21:58:02 executing program 1: 21:58:02 executing program 5: 21:58:02 executing program 0: 21:58:02 executing program 1: 21:58:02 executing program 3: 21:58:02 executing program 2: 21:58:02 executing program 5: 21:58:03 executing program 4: 21:58:03 executing program 0: 21:58:03 executing program 3: 21:58:03 executing program 2: 21:58:03 executing program 1: 21:58:03 executing program 5: 21:58:03 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000240)="c4c37d08c90366ba4300b022eec74424009cf9fb9cc744240206000000c7442406000000000f011c24640f01c9b8010000000f01c1e7e7c4c178288102000000c7442400c3000000c744240200000000c7442406000000000f011424c4c1381220c4c16d668f0f9f0000", 0x6a}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xaeb7, &(0x7f00000001c0)) 21:58:03 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234488dd25d766070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000005f00090035000c00060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) [ 272.629802] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. 21:58:03 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = mq_open(&(0x7f00000002c0)="5cf7a0cc16482d6f0037e6b31a8e697add303650d4880073ef75df610179dec236aa04e9468779ba0700000000000000359855b49b889bb5e49b358e793a6f7af52766d6fe93ca0672ac1b8a87ca6677d5220fb77cb613b3db9104d16aa1ca6cc76a74e7bd4bdc5226757b03f85b010324576c40c1c8655c739fc1a68df5e2bcb6e5ed46c8289e48ea75e785eb5d6497cd233b10b91832cf5e31767c1c419d4646cd883f25", 0x0, 0x0, &(0x7f0000664fc0)) mq_getsetattr(r1, &(0x7f0000738fc0), &(0x7f0000356000)) 21:58:03 executing program 1: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x800000c004500a, &(0x7f0000000040)) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x5, 0x100000000000000}, 0xfffffefd) syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x0) write$FUSE_LSEEK(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x200000000000011, 0x3, 0x8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={"7369743000fcff00", 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0xf6, r2}, 0x14) io_destroy(0x0) sendmmsg$inet_sctp(r1, &(0x7f0000871fc8), 0x4924924924925d0, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) getuid() 21:58:03 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000240)="c4c37d08c90366ba4300b022eec74424009cf9fb9cc744240206000000c7442406000000000f011c24640f01c9b8010000000f01c1e7e7c4c178288102000000c7442400c3000000c744240200000000c7442406000000000f011424c4c1381220c4c16d668f0f9f0000", 0x6a}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x8040ae9f, &(0x7f00000001c0)={0x2}) [ 272.781935] netlink: 57 bytes leftover after parsing attributes in process `syz-executor3'. [ 272.790736] IPv6: Can't replace route, no match found [ 272.835430] ================================================================== [ 272.842857] BUG: KMSAN: uninit-value in loaded_vmcs_init+0x343/0x590 [ 272.849384] CPU: 1 PID: 7985 Comm: syz-executor4 Not tainted 4.19.0-rc4+ #63 [ 272.856588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 272.865955] Call Trace: [ 272.868586] dump_stack+0x306/0x460 [ 272.872252] ? loaded_vmcs_init+0x343/0x590 [ 272.876624] kmsan_report+0x1a3/0x2d0 [ 272.880470] __msan_warning+0x7c/0xe0 [ 272.884311] loaded_vmcs_init+0x343/0x590 [ 272.888506] __loaded_vmcs_clear+0x2fb/0x3c0 [ 272.892972] generic_exec_single+0x17b/0x500 [ 272.897415] ? vmx_get_msr_feature+0x180/0x180 [ 272.902033] smp_call_function_single+0x290/0x500 [ 272.906916] ? vmx_get_msr_feature+0x180/0x180 [ 272.911558] vmx_free_vcpu+0x582/0x8a0 [ 272.915477] ? vmx_create_vcpu+0x7920/0x7920 [ 272.919919] kvm_arch_destroy_vm+0x727/0xcd0 [ 272.924368] kvm_put_kvm+0x100b/0x1cf0 [ 272.928314] kvm_vcpu_release+0xad/0x100 [ 272.932406] ? kvm_vcpu_mmap+0x80/0x80 [ 272.936323] __fput+0x4e8/0xda0 [ 272.939655] ____fput+0x37/0x40 [ 272.942958] ? fput+0x3e0/0x3e0 [ 272.946269] task_work_run+0x467/0x500 [ 272.950211] prepare_exit_to_usermode+0x364/0x470 [ 272.955102] syscall_return_slowpath+0x112/0x880 [ 272.959893] ? __close_fd+0x465/0x4c0 [ 272.963740] ? __se_sys_close+0x72/0x140 [ 272.967838] do_syscall_64+0xe4/0x100 [ 272.971670] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 272.976884] RIP: 0033:0x411051 [ 272.980102] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 34 19 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 272.999034] RSP: 002b:0000000000a3fd90 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 273.006782] RAX: 0000000000000000 RBX: 000000000000000c RCX: 0000000000411051 [ 273.014126] RDX: 0000000000000000 RSI: 00000000007310c0 RDI: 000000000000000b [ 273.021416] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 273.028714] R10: 0000000000a3fcb0 R11: 0000000000000293 R12: 0000000000000000 21:58:04 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000240)="c4c37d08c90366ba4300b022eec74424009cf9fb9cc744240206000000c7442406000000000f011c24640f01c9b8010000000f01c1e7e7c4c178288102000000c7442400c3000000c744240200000000c7442406000000000f011424c4c1381220c4c16d668f0f9f0000", 0x6a}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc080aebe, &(0x7f00000001c0)={0x2, 0x0, [0x486]}) [ 273.036237] R13: 0000000000000001 R14: 000000000000000e R15: 0000000000000004 [ 273.043561] [ 273.045205] Local variable description: ----error.i@loaded_vmcs_init [ 273.051735] Variable was created at: [ 273.055483] loaded_vmcs_init+0x8a/0x590 [ 273.059585] __loaded_vmcs_clear+0x2fb/0x3c0 [ 273.064005] ================================================================== [ 273.071384] Disabling lock debugging due to kernel taint [ 273.076863] Kernel panic - not syncing: panic_on_warn set ... [ 273.076863] [ 273.084265] CPU: 1 PID: 7985 Comm: syz-executor4 Tainted: G B 4.19.0-rc4+ #63 [ 273.092864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 273.102232] Call Trace: [ 273.104858] dump_stack+0x306/0x460 [ 273.108552] panic+0x54c/0xafa [ 273.111823] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 273.117312] kmsan_report+0x2cd/0x2d0 [ 273.121163] __msan_warning+0x7c/0xe0 [ 273.125031] loaded_vmcs_init+0x343/0x590 [ 273.129236] __loaded_vmcs_clear+0x2fb/0x3c0 [ 273.133684] generic_exec_single+0x17b/0x500 [ 273.138120] ? vmx_get_msr_feature+0x180/0x180 [ 273.143008] smp_call_function_single+0x290/0x500 [ 273.147893] ? vmx_get_msr_feature+0x180/0x180 [ 273.152539] vmx_free_vcpu+0x582/0x8a0 [ 273.156472] ? vmx_create_vcpu+0x7920/0x7920 [ 273.160920] kvm_arch_destroy_vm+0x727/0xcd0 [ 273.165374] kvm_put_kvm+0x100b/0x1cf0 [ 273.169323] kvm_vcpu_release+0xad/0x100 [ 273.173413] ? kvm_vcpu_mmap+0x80/0x80 [ 273.177332] __fput+0x4e8/0xda0 [ 273.180669] ____fput+0x37/0x40 [ 273.183980] ? fput+0x3e0/0x3e0 [ 273.187300] task_work_run+0x467/0x500 [ 273.191246] prepare_exit_to_usermode+0x364/0x470 [ 273.196134] syscall_return_slowpath+0x112/0x880 [ 273.200924] ? __close_fd+0x465/0x4c0 [ 273.204783] ? __se_sys_close+0x72/0x140 [ 273.208881] do_syscall_64+0xe4/0x100 [ 273.212724] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 273.217944] RIP: 0033:0x411051 [ 273.221168] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 34 19 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 273.240097] RSP: 002b:0000000000a3fd90 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 273.247838] RAX: 0000000000000000 RBX: 000000000000000c RCX: 0000000000411051 [ 273.255130] RDX: 0000000000000000 RSI: 00000000007310c0 RDI: 000000000000000b [ 273.262420] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 273.269721] R10: 0000000000a3fcb0 R11: 0000000000000293 R12: 0000000000000000 [ 273.277008] R13: 0000000000000001 R14: 000000000000000e R15: 0000000000000004 [ 273.285412] Kernel Offset: disabled [ 273.289056] Rebooting in 86400 seconds..