[ 54.816809] audit: type=1800 audit(1538870719.850:27): pid=5992 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 56.206904] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 58.126690] random: sshd: uninitialized urandom read (32 bytes read) [ 58.508077] random: sshd: uninitialized urandom read (32 bytes read) [ 60.713759] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.38' (ECDSA) to the list of known hosts. [ 66.426183] random: sshd: uninitialized urandom read (32 bytes read) 2018/10/07 00:05:33 fuzzer started [ 70.835693] random: cc1: uninitialized urandom read (8 bytes read) 2018/10/07 00:05:38 dialing manager at 10.128.0.26:36867 2018/10/07 00:05:38 syscalls: 1 2018/10/07 00:05:38 code coverage: enabled 2018/10/07 00:05:38 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/10/07 00:05:38 setuid sandbox: enabled 2018/10/07 00:05:38 namespace sandbox: enabled 2018/10/07 00:05:38 Android sandbox: /sys/fs/selinux/policy does not exist 2018/10/07 00:05:38 fault injection: enabled 2018/10/07 00:05:38 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/10/07 00:05:38 net packed injection: enabled 2018/10/07 00:05:38 net device setup: enabled [ 75.433283] random: crng init done 00:07:40 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0x4b3, &(0x7f0000000040)) [ 196.171289] IPVS: ftp: loaded support on port[0] = 21 [ 198.473136] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.479613] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.488279] device bridge_slave_0 entered promiscuous mode [ 198.645633] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.652168] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.660618] device bridge_slave_1 entered promiscuous mode [ 198.796511] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 198.933063] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready 00:07:44 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x8000008010500c, &(0x7f0000000180)) [ 199.354849] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 199.627431] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 199.887601] IPVS: ftp: loaded support on port[0] = 21 [ 200.070372] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 200.077537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 200.788020] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 200.796197] team0: Port device team_slave_0 added [ 200.996964] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 201.005174] team0: Port device team_slave_1 added [ 201.263569] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 201.270610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 201.279571] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 201.497989] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 201.505374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 201.514274] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 201.732430] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 201.740090] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 201.749304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 202.024985] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 202.032831] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 202.042052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 203.774319] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.780814] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.789334] device bridge_slave_0 entered promiscuous mode [ 204.086232] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.092782] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.101122] device bridge_slave_1 entered promiscuous mode [ 204.264728] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 204.388858] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.395436] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.402490] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.408944] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.418092] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 204.500093] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready 00:07:49 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x800000000000004) ioctl(r0, 0x8912, &(0x7f0000000080)="153f62344c8dd25d766070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0xaaaae3e, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000140)={0x6, 0x0, [0x12, 0x1]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 204.962823] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 205.290620] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 205.609798] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 205.715151] IPVS: ftp: loaded support on port[0] = 21 [ 205.874708] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 205.883330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 206.186707] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 206.193895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 207.097443] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 207.105768] team0: Port device team_slave_0 added [ 207.368187] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 207.376360] team0: Port device team_slave_1 added [ 207.648782] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 207.657681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 207.666572] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 207.920284] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 207.927472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 207.936327] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 208.263935] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 208.271591] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 208.280863] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 208.616367] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 208.624547] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 208.633563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 210.323816] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.330302] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.338941] device bridge_slave_0 entered promiscuous mode [ 210.632616] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.639080] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.647754] device bridge_slave_1 entered promiscuous mode [ 211.004607] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 211.260949] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 211.939344] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.945925] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.952927] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.959375] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.968210] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 212.072348] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 212.112640] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 212.342650] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 212.589866] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 212.597067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready 00:07:58 executing program 3: r0 = socket$netlink(0x10, 0x3, 0xc) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, r1, 0x3a9fbd6e864d86bf}, 0x14}}, 0x0) [ 212.889922] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 212.897243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 213.648456] ip (6487) used greatest stack depth: 53040 bytes left [ 214.004139] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 214.012378] team0: Port device team_slave_0 added [ 214.093746] IPVS: ftp: loaded support on port[0] = 21 [ 214.373565] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 214.381560] team0: Port device team_slave_1 added [ 214.719917] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 214.727250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 214.736222] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 215.107629] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 215.114861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 215.123796] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 215.426421] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 215.434149] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 215.443362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 215.793273] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 215.800890] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 215.810215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 216.379990] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.720402] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 219.031533] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 219.038064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 219.046213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 219.449649] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.456213] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.463274] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.469720] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.479034] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 219.903320] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.909793] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.918407] device bridge_slave_0 entered promiscuous mode [ 220.262010] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 220.319857] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.326534] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.334999] device bridge_slave_1 entered promiscuous mode [ 220.388616] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.698407] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 221.075695] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 222.062256] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 222.452084] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 222.792719] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 222.799748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 223.114937] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 223.122072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 00:08:08 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x9}) [ 224.401593] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 224.409799] team0: Port device team_slave_0 added [ 224.794337] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 224.802673] team0: Port device team_slave_1 added [ 224.817991] IPVS: ftp: loaded support on port[0] = 21 [ 225.185924] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 225.193060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 225.202081] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 225.656138] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 225.663518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 225.672567] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 226.095848] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 226.103576] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 226.112714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 226.527341] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 226.534988] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 226.543892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 227.078372] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.677222] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready 00:08:15 executing program 0: r0 = memfd_create(&(0x7f0000000040)="0044f8bd0be54ea489b563b590d9ee000000000000", 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) pwrite64(r0, &(0x7f0000000040), 0x0, 0x0) lseek(r0, 0x0, 0x3) [ 230.469585] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 230.476113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 230.484089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 231.399377] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.405930] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.412938] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.419399] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.428371] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 231.462012] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 231.566231] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.572840] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.581262] device bridge_slave_0 entered promiscuous mode 00:08:16 executing program 0: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000040)='ns\x00') exit(0x0) preadv(r1, &(0x7f0000000140)=[{&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000000080)=""/170, 0xaa}], 0x2, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(r2, 0xc0106418, &(0x7f0000000000)={0xc000000, 0xada, 0x505f, 0x83f7, 0x1, 0x1f}) [ 231.991624] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.998385] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.006806] device bridge_slave_1 entered promiscuous mode [ 232.033618] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.374690] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 232.749116] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready 00:08:17 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x4, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000040)=0x1, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000740)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000070000000400000098040000300100007002000070020000b0030000b0030000b003000004000000", @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0003001000000000000000000000000000000000000000000000000000040004552524f520000000000000000000000000000000000000000000000000038e37fece33075dece121e66b58fc47f9b05d3e785855f6246f8b6a8b4d10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000530000000000000000000000000000f0004001000000000000000000000000000000000000000000000000000050006d616e676c6500000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffff00000000000000000000ac1414aaac1414200f00000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0004001000000000000000000000000000000000000000000000000000050006d616e676c65000000000000000000000000000000000000000000000000ffffffffffff00000000000000000000be7f6c2ab0a2000000000000000000000000ffff0000000400000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff000000004d46b5058c280c485e287f57d342e7b7730aef9f8111d05b8311f1735847a668"], 0x4e8) fcntl$getownex(r2, 0x10, &(0x7f0000000200)={0x0, 0x0}) sched_setattr(r3, &(0x7f0000000240)={0x30, 0x7, 0x1, 0x3, 0x80000001, 0x8, 0xa34f, 0x80000001}, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000100), 0x80000001) 00:08:18 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f00000002c0)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x0, 0xffffffffffffffff, 0x10, 0x0, @in={0x2, 0x0, @loopback}}}, 0xa0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x80000, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r1, 0xc008551c, &(0x7f0000000080)={0x1000000000, 0x4, [0x0]}) 00:08:18 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20400, 0x0) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000080)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0xc, &(0x7f0000000040), &(0x7f0000001ac0)=0x4) [ 234.043271] bond0: Enslaving bond_slave_0 as an active interface with an up link 00:08:19 executing program 0: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffff9c) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f00000000c0)={0x15, 0x68, &(0x7f0000000000)="9514661e6bbcdaaf080058fde62c8428dc9ea0abd521f00847d9dbcd3828d549a9c9ccf12c3cbd4236ce3ba439c1de9bcce89e0cf1363a4923c7c8172de43abe13f57d54047ad63e7d641e0fa1d3e7dbedad497508d388f6cf4c5b8bc6595b9a74a3305370136f93"}) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000200)={0x0, 0x8000, 0x3, [0x9, 0x3, 0x7]}, &(0x7f0000000240)=0xe) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000100)={r1, 0x7}, &(0x7f00000001c0)=0x8) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000280)='fou\x00') sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10380200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r3, 0x301, 0x70bd2b, 0x25dfdbfc, {}, [@FOU_ATTR_TYPE={0x8}, @FOU_ATTR_AF={0x8, 0x2, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x1) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={r2, 0x2}, 0x8) r4 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000080), 0xffffffffffffff78) [ 234.484052] bond0: Enslaving bond_slave_1 as an active interface with an up link 00:08:19 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000440)='/dev/sequencer2\x00', 0x3, 0x0) ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000100), 0x8) ioctl$TCSETSF(r0, 0x5100, &(0x7f0000000080)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer2\x00', 0x0, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000180)={'nat\x00'}, &(0x7f0000000200)=0x78) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x3, 0x4a8, [0x0, 0x20000480, 0x200004b0, 0x20000628], 0x0, &(0x7f0000000240), &(0x7f0000000a00)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000030000004800000089157465616d5f736c6176655f31000000006263736630000000000000000000000073797a6b616c6c65723000000000000076657468305f746f5f7465616d000000aaaaaaaaaa0c00ff00ffffff0180c200000fff0000ffffff00001001000010010000480100006e66616363740000000000000000000000000000000000000000000000000000280000000000000073797a300000000000000000000000000000000000000000000000000000000000080000000000006e66616363740000000000000000000000000000000000000000000000000000280000000000000073797a30000000000000000000000000000000000000000000000000000000002b070000000000006d61726b0000000000000000000000000000000000000000000000000000000010000000000000000000000000000000feffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000010000006a49e4d5020000001100000008000000000d64756d6d793000000000000000000000626373663000000000000000000000007465616d3000000000000000000000007465616d5f736c6176655f300000000026cf535811f100ff00ffffffea6887384264ff00ff0000ff0000d00000000801000038010000706b747479706500000000000000000000000000000000000000000000000000080000000000000003010000000000006367726f757000000000000000000000000000000000000000000000000000000800000000000000f907000000000000646e6174000000000000000000000000000000000000000000000000000000001000000000000000ffffffffffff0000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000800000000000000ffffffff000000001100000017d043b30019766c616e3000000000000000000000006272696467655f736c6176655f31000079616d3000000000000000000000000062637368300000000000000000000000aaaaaaaaaa1eff00ffff00ff0180c2000002ff0000ff00000000f0000000680100009801000064657667726f757000000000000000000000000000000000000000000000000018000000000000000100000006000000b683000007000000595700000000000071756f746100000000000000000000000000000000000000000000000000000018000000000000000000000000000000b03600000000000009000000000000004552524f52000000000000000000000000000000000000000000000000000000200000000000000077e93a320f359b88ad6f3b40d7486617cbbd6511529a35ff188b4ae1f327000072656469726563740000000000000000000000000000000000000000000000000800000000000000000000000000000072656469726563740000000000000000000000000000000000000000000000000800000000000000fdffffff0000000094e7b697f31877234345a1ab5d6c06161b12a397d24071fbf3927e9911004dd88adbdc122ea0b6010bfe5b4628bc6fbf11f7d0930960642937c5afc5b7fba60bd8607cd771ee1726dd1b78dee70fae9486d17b744af3602d3a24b34a1f89cfe0c2b166f317a673f2ad4b5077e13b35470c57d8bed7b2c7036f6695c5fd1e49f8a64985b23084aad5c464913ba647e0f9f05693d492b9821761dfaebdceea04c0812939cda376f0a8db91e1759b33833526b4e3b8048d27ffb3ac7003d0438e3499f0"]}, 0x5e2) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000003, 0x11011, r0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x80000, 0x0) [ 235.004690] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 235.011911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 235.311897] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 235.318929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 00:08:20 executing program 5: rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') r0 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x52d7, 0x111040) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) mkdirat(r0, &(0x7f0000000100)='./file1\x00', 0x14) accept4$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000180)=0x14, 0x80000) chdir(&(0x7f00000001c0)='./file1\x00') bind$vsock_dgram(r0, &(0x7f0000000200)={0x28, 0x0, 0x2710, @hyper}, 0x10) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000240)='bond0\x00') ioctl$RTC_UIE_ON(r0, 0x7003) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000280)=0x100) getsockname$unix(r0, &(0x7f00000002c0), &(0x7f0000000340)=0x6e) r1 = msgget(0x1, 0x18) msgctl$MSG_INFO(r1, 0xc, &(0x7f0000000380)=""/236) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000480)=0x200, 0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r0, 0x4010641a, &(0x7f0000000500)={0x1, &(0x7f00000004c0)=[0x9]}) sendto$inet(r0, &(0x7f0000000540)="7874c8965311b90942f31de3a736df12ff0193fbdf86d1d8e0efe55825a70fa07a604173df1b7d4efb9c20ab57ef5ebf2d6dfc27bf5da82ff1a148eefb32a5a7d124858b7404f397ad44ab7a9367f0e6394400591e3637b81bfaf55acfc6b3ec0dfb56eaba97a8bc304bafbfa8a8bb07a64d1cdb2c85b3470f819d1e50b5c87c14788a0d1de6", 0x86, 0x41, &(0x7f0000000600)={0x2, 0x4e22, @multicast2}, 0x10) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000640)) openat$fuse(0xffffffffffffff9c, &(0x7f0000000680)='/dev/fuse\x00', 0x2, 0x0) sendmsg$key(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f00000006c0)={0x2, 0x5, 0x0, 0xf, 0x231, 0x0, 0x70bd25, 0x25dfdbfe, [@sadb_address={0x5, 0x7, 0x7f, 0x80, 0x0, @in6={0xa, 0x4e24, 0x0, @empty, 0x10001}}, @sadb_lifetime={0x4, 0x7, 0x2, 0xffffffff7fffffff, 0x5, 0x8001}, @sadb_key={0x1f, 0x9, 0x778, 0x0, "ee838fb10b89941b56112b16a54e5d7cb41953fbffb5b5107f3408e6e518063948ebc7915506a1c92b0343937305428437ccb18c10ea6e25949a255168ed97fc2744a0d1d24ba32f11284ae98cb127124aae3f66fa5f70feeeab5324dcabc319ab19d1bd966756e9a04115efd43f28eb6510ab38a9e4a4119b410465dde71a5e569af24f323df1d9d830734a9e1095bb32a73e207cccb2e880482265e5dd22ce3613e2bce990f441736a02e5ec6fd25d4609b2e1718e10debbde2dc98c9942b5d53ed3cfb8c8ea8ab9ac602bbd43549b05a0da8c53b5f167a2fcb4a9b7af48469125495348fb2a18d4f91848fb99cb"}, @sadb_x_sa2={0x2, 0x13, 0x9, 0x0, 0x0, 0x70bd2a, 0x3506}, @sadb_ident={0x2, 0xb, 0x7f, 0x0, 0x8000}, @sadb_key={0x201, 0x8, 0x8000, 0x0, "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"}, @sadb_spirange={0x2, 0x10, 0x4d6, 0x4d3}]}, 0x1188}}, 0x80) ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f0000001900)) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001940)='/dev/hwrng\x00', 0x0, 0x0) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000001980)) renameat(r0, &(0x7f00000019c0)='./file0\x00', r3, &(0x7f0000001a00)='./file0\x00') sendmsg$nl_route_sched(r3, &(0x7f0000001f80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0xe54e8bafe7f2edc9}, 0xc, &(0x7f0000001f40)={&(0x7f0000001a80)=@newtaction={0x4b4, 0x30, 0x2, 0x70bd27, 0x25dfdbfe, {0x0, 0x9, 0x8}, [{0xcc, 0x1, @m_skbmod={0xc8, 0x0, {{0xc, 0x1, 'skbmod\x00'}, {0x3c, 0x2, [@TCA_SKBMOD_DMAC={0xc, 0x3, @local}, @TCA_SKBMOD_ETYPE={0x8, 0x5, 0x6}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x6, 0x1, 0x8, 0x6e0, 0x51ebd29b}, 0x6}}]}, {0x78, 0x6, "2750a6363edc22ca1435dc381c8362bbd3667a242c51af8f8cf322e76819a31b78ecb074291d31e68703869c3c6397297ad3c264b0c6b5e993aa68addc67bf8041cd117f5087532e61db64546d40941686d83ce1dc9badba1d17a403e083ea7fbe85471a42e2c643d3440f74febd5246e83d084d"}}}}, {0xbc, 0x1, @m_csum={0xb8, 0x7, {{0xc, 0x1, 'csum\x00'}, {0x20, 0x2, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x4, 0x7, 0x7ff, 0x1}, 0x69}}}, {0x84, 0x6, "702d2c097a9abb6969fb80abe3cc9a2ad71cc980c1dd875df45c264c8c8492ec0dfbfcc5b3317af1c19a248e780f0818f726a111c4ece5679284f6ef13b792bef7dcbba1a86ffde6c6deb16ac13209acd93496cbb90a045cb4643b74577c3c5c4a15a122cf7e01fc16050b8f091a2ac8a56dde2a96972d3fe5e746cdf6849471"}}}}, {0x134, 0x1, @m_ipt={0x130, 0x12, {{0x8, 0x1, 'ipt\x00'}, {0x70, 0x2, [@TCA_IPT_INDEX={0x8, 0x3, 0x8}, @TCA_IPT_TABLE={0x14, 0x1, 'mangle\x00'}, @TCA_IPT_TABLE={0x14, 0x1, 'security\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x3f}, @TCA_IPT_INDEX={0x8, 0x3, 0xff}, @TCA_IPT_TABLE={0x14, 0x1, 'nat\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x3}, @TCA_IPT_INDEX={0x8, 0x3, 0x5}, @TCA_IPT_INDEX={0x8, 0x3, 0x1000}]}, {0xb0, 0x6, "2b195ac94ea878a8dd0d5036fcf94a782d8893fe51d63a5454badacdb121a25e52f3fd4d89524bf82fc5f496b21074cbdd2e7e1a631c15058b00ad6dd22fc99c7cf278d515f3ead2b48239ff6d6e2e49c10c3a6bb41b10f501e7bd5afe99152e64b84940e245094f80ddd18eff723af696812c9dc2ed61099f45476d807b0ea9892320634ec7c732376457e141c579b1e92ac50c149ccd108a42ca56f2a3cb4e192ebb8487567031eeb55db8"}}}}, {0xdc, 0x1, @m_vlan={0xd8, 0x1b, {{0xc, 0x1, 'vlan\x00'}, {0x94, 0x2, [@TCA_VLAN_PUSH_VLAN_ID={0x8, 0x3, 0xdd6}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x200, 0x3, 0x4, 0x4, 0x2}, 0x2}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x7fff, 0x3, 0xef, 0x4}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x8, 0x3, 0xf2b}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x6, 0x0, 0x3, 0xe3, 0x6}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x8, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x8, 0x6, 0x3}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x20, 0x2, 0x8, 0x1}, 0x2}}]}, {0x30, 0x6, "4354c63709ef799384f40785a2e9d5196e39289905c741457d589a767ffb2c0726184e5ef4dc8ee046"}}}}, {0x108, 0x1, @m_simple={0x104, 0x19, {{0xc, 0x1, 'simple\x00'}, {0x34, 0x2, [@TCA_DEF_DATA={0x18, 0x3, "766d6e65743129766d6e657430b16574683000"}, @TCA_DEF_PARMS={0x18, 0x2, {0x21, 0x3, 0x8, 0x9}}]}, {0xbc, 0x6, "0433393dcb198c79811028d131a86ab70724326fe87e0ee7e6d57811a1753db56fc76bff0f60574fcda60d4d3f8a0c7648f0f772b07e995e4ec66f286cbc2bd7f005903dcb27f8e89e1ceebd57043b34c2c7ad2e46f1b4f3faccb470c3643c8aa0494586e2e488c8763d11594592483f7db9104242f57a9c0e6eebee1b7f03a9486febe9553730a63b600a5f8467f0e6fc6896830cea2b87b9e020be027ce753a1e3c64a1f0085e2aff4ff9caf08c491a8a1eb32d388"}}}}]}, 0x4b4}, 0x1, 0x0, 0x0, 0x200000c0}, 0x1) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000001fc0)={@empty, 0x3, 0x2, 0x2, 0x0, 0x0, 0x0, 0x80000000}, &(0x7f0000002000)=0x20) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f0000002040)) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000002080)=0x0) getpgrp(r4) connect$inet(r0, &(0x7f00000020c0)={0x2, 0x4e20}, 0x10) [ 235.708519] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.461857] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 236.469904] team0: Port device team_slave_0 added [ 236.635854] IPVS: ftp: loaded support on port[0] = 21 [ 236.840937] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 236.849212] team0: Port device team_slave_1 added [ 237.133706] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 237.163253] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 237.170238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 237.179111] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 237.468465] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 237.475651] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 237.484372] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 237.786566] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 237.794391] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 237.803234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 238.177322] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 238.185087] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 238.193991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 238.535673] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 238.542261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 238.549935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 239.730248] 8021q: adding VLAN 0 to HW filter on device team0 00:08:26 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x8000008010500c, &(0x7f0000000180)) [ 242.206910] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.213539] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.220418] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.227004] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.235433] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 242.350598] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.357355] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.365725] device bridge_slave_0 entered promiscuous mode [ 242.612275] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.618745] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.627358] device bridge_slave_1 entered promiscuous mode [ 242.662402] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 242.919610] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 243.075380] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 243.881418] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 244.169926] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 244.427410] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 244.434570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 244.710171] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 244.717566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 245.589977] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 245.598432] team0: Port device team_slave_0 added [ 245.650624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.888634] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 245.896838] team0: Port device team_slave_1 added [ 246.201046] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 246.208204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 246.217480] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 246.483139] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 246.490247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 246.499162] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 246.747881] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. [ 246.793860] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 246.828612] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 246.836196] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 246.845491] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 246.868608] ================================================================== [ 246.876006] BUG: KMSAN: uninit-value in loaded_vmcs_init+0x343/0x590 [ 246.882522] CPU: 0 PID: 7356 Comm: syz-executor2 Not tainted 4.19.0-rc4+ #63 [ 246.889715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 246.899077] Call Trace: [ 246.901695] dump_stack+0x306/0x460 [ 246.905348] ? loaded_vmcs_init+0x343/0x590 [ 246.909708] kmsan_report+0x1a3/0x2d0 [ 246.913546] __msan_warning+0x7c/0xe0 [ 246.917372] loaded_vmcs_init+0x343/0x590 [ 246.921559] __loaded_vmcs_clear+0x2fb/0x3c0 [ 246.926030] generic_exec_single+0x17b/0x500 [ 246.930495] ? vmx_get_msr_feature+0x180/0x180 [ 246.935112] smp_call_function_single+0x290/0x500 [ 246.939979] ? vmx_get_msr_feature+0x180/0x180 [ 246.944600] vmx_free_vcpu+0x582/0x8a0 [ 246.948514] ? vmx_create_vcpu+0x7920/0x7920 [ 246.952950] kvm_arch_destroy_vm+0x727/0xcd0 [ 246.957394] kvm_put_kvm+0x100b/0x1cf0 [ 246.961330] kvm_vcpu_release+0xad/0x100 [ 246.965421] ? kvm_vcpu_mmap+0x80/0x80 [ 246.969364] __fput+0x4e8/0xda0 [ 246.972698] ____fput+0x37/0x40 [ 246.975994] ? fput+0x3e0/0x3e0 [ 246.979304] task_work_run+0x467/0x500 [ 246.983246] prepare_exit_to_usermode+0x364/0x470 [ 246.988129] syscall_return_slowpath+0x112/0x880 [ 246.992909] ? __close_fd+0x465/0x4c0 [ 246.996756] ? __se_sys_close+0x72/0x140 [ 247.000853] do_syscall_64+0xe4/0x100 [ 247.004683] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 247.009888] RIP: 0033:0x411051 [ 247.013096] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 34 19 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 247.032010] RSP: 002b:0000000000a3fd90 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 247.039743] RAX: 0000000000000000 RBX: 000000000000000a RCX: 0000000000411051 [ 247.047023] RDX: 0000000000000000 RSI: 0000000000731068 RDI: 0000000000000009 [ 247.054302] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 247.061586] R10: 0000000000a3fcb0 R11: 0000000000000293 R12: 0000000000000000 [ 247.068871] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000002 [ 247.076173] [ 247.077818] Local variable description: ----error.i@loaded_vmcs_init [ 247.084315] Variable was created at: [ 247.088051] loaded_vmcs_init+0x8a/0x590 [ 247.092131] __loaded_vmcs_clear+0x2fb/0x3c0 [ 247.096544] ================================================================== [ 247.103916] Disabling lock debugging due to kernel taint [ 247.111310] Kernel panic - not syncing: panic_on_warn set ... [ 247.111310] [ 247.118708] CPU: 0 PID: 7356 Comm: syz-executor2 Tainted: G B 4.19.0-rc4+ #63 [ 247.127297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 247.136660] Call Trace: [ 247.139272] dump_stack+0x306/0x460 [ 247.142950] panic+0x54c/0xafa [ 247.146214] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 247.151695] kmsan_report+0x2cd/0x2d0 [ 247.155532] __msan_warning+0x7c/0xe0 [ 247.159364] loaded_vmcs_init+0x343/0x590 [ 247.163551] __loaded_vmcs_clear+0x2fb/0x3c0 [ 247.168015] generic_exec_single+0x17b/0x500 [ 247.172478] ? vmx_get_msr_feature+0x180/0x180 [ 247.177090] smp_call_function_single+0x290/0x500 [ 247.181963] ? vmx_get_msr_feature+0x180/0x180 [ 247.186590] vmx_free_vcpu+0x582/0x8a0 [ 247.190507] ? vmx_create_vcpu+0x7920/0x7920 [ 247.194948] kvm_arch_destroy_vm+0x727/0xcd0 [ 247.199410] kvm_put_kvm+0x100b/0x1cf0 [ 247.203386] kvm_vcpu_release+0xad/0x100 [ 247.207490] ? kvm_vcpu_mmap+0x80/0x80 [ 247.211409] __fput+0x4e8/0xda0 [ 247.214748] ____fput+0x37/0x40 [ 247.218056] ? fput+0x3e0/0x3e0 [ 247.221379] task_work_run+0x467/0x500 [ 247.225345] prepare_exit_to_usermode+0x364/0x470 [ 247.230232] syscall_return_slowpath+0x112/0x880 [ 247.235034] ? __close_fd+0x465/0x4c0 [ 247.238890] ? __se_sys_close+0x72/0x140 [ 247.242988] do_syscall_64+0xe4/0x100 [ 247.246817] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 247.252021] RIP: 0033:0x411051 [ 247.255259] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 34 19 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 247.274178] RSP: 002b:0000000000a3fd90 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 247.281906] RAX: 0000000000000000 RBX: 000000000000000a RCX: 0000000000411051 [ 247.289201] RDX: 0000000000000000 RSI: 0000000000731068 RDI: 0000000000000009 [ 247.296505] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 247.303801] R10: 0000000000a3fcb0 R11: 0000000000000293 R12: 0000000000000000 [ 247.311085] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000002 [ 247.319415] Kernel Offset: disabled [ 247.323063] Rebooting in 86400 seconds..