[ 55.108593] audit: type=1800 audit(1538987052.141:27): pid=5902 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 56.543140] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 60.494879] random: sshd: uninitialized urandom read (32 bytes read) [ 60.890952] random: sshd: uninitialized urandom read (32 bytes read) [ 63.015093] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.99' (ECDSA) to the list of known hosts. [ 68.823503] random: sshd: uninitialized urandom read (32 bytes read) 2018/10/08 08:24:27 fuzzer started [ 73.221017] random: cc1: uninitialized urandom read (8 bytes read) 2018/10/08 08:24:32 dialing manager at 10.128.0.26:36867 2018/10/08 08:24:32 syscalls: 1 2018/10/08 08:24:32 code coverage: enabled 2018/10/08 08:24:32 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/10/08 08:24:32 setuid sandbox: enabled 2018/10/08 08:24:32 namespace sandbox: enabled 2018/10/08 08:24:32 Android sandbox: /sys/fs/selinux/policy does not exist 2018/10/08 08:24:32 fault injection: enabled 2018/10/08 08:24:32 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/10/08 08:24:32 net packed injection: enabled 2018/10/08 08:24:32 net device setup: enabled [ 77.832040] random: crng init done 08:26:35 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000002c0)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() timer_create(0x0, &(0x7f00000003c0)={0x0, 0x12}, &(0x7f0000000380)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) write$binfmt_elf32(r0, &(0x7f0000000400)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x7a63, 0x9d}, [{0x60000007, 0x28000000000, 0x9, 0x100000001, 0x0, 0x2078, 0x1, 0x800}], "cced0154ddbc5f340124c8ae9864f0c518292487385f9285c736ef8bb66583f98ed691db1f2f60812a8889f85ed27f07a409275f61c2d13ddfb0253616c4f2", [[], [], [], [], []]}, 0x597) tkill(r1, 0x401004000000016) [ 198.929349] IPVS: ftp: loaded support on port[0] = 21 [ 201.202388] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.208887] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.217444] device bridge_slave_0 entered promiscuous mode [ 201.373741] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.380206] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.388708] device bridge_slave_1 entered promiscuous mode [ 201.523912] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 201.658873] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready 08:26:39 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendmsg$nl_xfrm(r1, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000080)={@loopback={0x4000000000000}}, 0x20) [ 202.073206] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 202.279468] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 202.574166] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 202.581189] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 202.796528] IPVS: ftp: loaded support on port[0] = 21 [ 203.198569] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 203.206789] team0: Port device team_slave_0 added [ 203.348098] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 203.356200] team0: Port device team_slave_1 added [ 203.567354] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 203.753354] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 203.760400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 203.769374] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 203.931592] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 203.939261] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 203.948577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 204.098630] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 204.106351] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 204.115508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 206.346118] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.352675] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.359590] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.366183] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.375050] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 206.659289] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.665864] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.674438] device bridge_slave_0 entered promiscuous mode [ 206.682040] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 206.925656] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.932263] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.940648] device bridge_slave_1 entered promiscuous mode [ 207.237498] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 207.405060] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready 08:26:45 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup/syz1\x00', 0x1ff) [ 208.075320] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 208.408368] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 208.687766] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 208.695839] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 208.938079] IPVS: ftp: loaded support on port[0] = 21 [ 209.010009] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 209.018869] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 209.844816] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 209.852960] team0: Port device team_slave_0 added [ 210.026245] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 210.034579] team0: Port device team_slave_1 added [ 210.221983] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 210.229008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 210.237871] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 210.439772] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 210.447095] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 210.456044] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 210.776397] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 210.784146] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 210.793427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 211.102234] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 211.109805] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 211.118768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 213.580092] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.586731] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.595295] device bridge_slave_0 entered promiscuous mode [ 213.799731] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.806294] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.814697] device bridge_slave_1 entered promiscuous mode [ 213.999905] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 214.007736] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.014366] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.021239] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.027819] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.036567] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 214.149597] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 214.182968] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 214.923943] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 215.216479] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 215.484900] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 215.492194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 215.713550] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 215.720903] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 08:26:53 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000340)={0x5, 0x5, 0x2, 0x0, 0x1, [{}]}) [ 216.565910] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 216.573981] team0: Port device team_slave_0 added [ 216.960950] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 216.969036] team0: Port device team_slave_1 added [ 217.164848] IPVS: ftp: loaded support on port[0] = 21 [ 217.393812] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 217.400841] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 217.409869] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 217.760021] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 217.767249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 217.776099] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 218.155149] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 218.162853] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 218.172035] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 218.211106] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.397127] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 218.404925] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 218.414027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 219.433612] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 220.660809] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 220.667279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 220.675355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 221.789078] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.249192] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.255999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.263020] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.269478] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.278350] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 222.681950] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 223.290743] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.297419] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.306270] device bridge_slave_0 entered promiscuous mode [ 223.679589] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.686150] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.694621] device bridge_slave_1 entered promiscuous mode [ 224.050372] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 224.359091] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 225.442330] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 225.742352] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 226.092486] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 226.099548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready 08:27:03 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000340)={0x0, 0x5}) [ 226.435032] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 226.442229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 227.662196] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 227.670252] team0: Port device team_slave_0 added [ 227.793207] IPVS: ftp: loaded support on port[0] = 21 [ 228.051425] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 228.059696] team0: Port device team_slave_1 added [ 228.154336] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.449278] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 228.456539] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 228.465390] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 228.900835] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 228.908106] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 228.917630] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 229.338731] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 229.347643] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 229.358932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 229.742127] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 229.781907] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 229.789410] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 229.798307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 232.098383] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 232.105795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 232.113564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 234.222172] clocksource: timekeeping watchdog on CPU0: Marking clocksource 'tsc' as unstable because the skew is too large: [ 234.233607] clocksource: 'acpi_pm' wd_now: f8e01a wd_last: 498690 mask: ffffff [ 234.243054] clocksource: 'tsc' cs_now: 82670b16ad cs_last: 80aeede4e8 mask: ffffffffffffffff [ 234.253678] tsc: Marking TSC unstable due to clocksource watchdog [ 234.265445] TSC found unstable after boot, most likely due to broken BIOS. Use 'tsc=unstable'. [ 234.274347] sched_clock: Marking unstable (234323830208, -58414910)<-(234391621974, -126193906) [ 234.307586] clocksource: Switched to clocksource acpi_pm 08:27:11 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_adj\x00') writev(r0, &(0x7f0000000540)=[{&(0x7f00000002c0)='0', 0x1}], 0x1) [ 234.800357] syz-executor0 (6807): /proc/6805/oom_adj is deprecated, please use /proc/6805/oom_score_adj instead. [ 234.851367] 8021q: adding VLAN 0 to HW filter on device team0 08:27:12 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x5e, 0x0) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000040)={0x100000000, 0x7}) r1 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) r2 = memfd_create(&(0x7f000003e000)='\'', 0x0) r3 = syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x8000000040102) dup2(r3, r2) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl(r4, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") write$UHID_INPUT(r2, &(0x7f00000002c0)={0x8, "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", 0x1000}, 0x1006) write$sndseq(r2, &(0x7f0000e6ffd0)=[{0x1e, 0x0, 0x0, 0x3fd, @time}], 0x30) 08:27:12 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000140)={0x3f}, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="340000001000090800000000feffffff000000d85facd182474e00", @ANYRES32=r2, @ANYBLOB="000000000000000014001400626f6e645f736c6176655f3000000000"], 0x34}}, 0x0) getsockopt$IP_VS_SO_GET_INFO(r3, 0x0, 0x481, &(0x7f0000000080), &(0x7f0000000100)=0xc) [ 235.805172] netlink: 20 bytes leftover after parsing attributes in process `syz-executor0'. [ 235.934454] netlink: 20 bytes leftover after parsing attributes in process `syz-executor0'. 08:27:13 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x2000000000048, 0x2, 0x0, 0x80000001}, {0x6}]}, 0x10) setxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000200)={0x0, 0xfb, 0xf3, 0x3, 0x2, "3d5fac1694d1c95dfc306da0315da351", "ab3eb340761ffdc59a62843249378a76e20b2ebc6b34f608551b60aa69230908a9f8cc97d4c0b39fd33bbf1c0a037b853f5c948ceef4a97d0681978f7cd05fbc7087fd65327e95b42d2fc2fb29b36d2b2485119d0e5a75a809f3808524c0fe7f7a22eefc3ed04eabf2df26bab07b80eb155f29581e6220b58a298f95d12fa321dec9bc71d7e8321a0f868403660c250a9fd9fa5076d25374fa4692534a14bd558374de5b383a2f77e92222aaf576cab30cf22d0075210c194b0db69d8cedcbd291e7b4f673c949914c4f1e92aebf74b8a25f914aeb2e08ca7f64307d9b99"}, 0xf3, 0x3) sendmmsg(r0, &(0x7f0000003040), 0x400000000000083, 0x0) r2 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt(r2, 0x80000007ff, 0x100, &(0x7f0000000080)=""/168, &(0x7f0000000000)=0x1fe) [ 236.643728] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.650291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.657405] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.663953] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.672384] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 236.772559] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 236.804028] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.810508] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.819094] device bridge_slave_0 entered promiscuous mode [ 237.204649] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.211095] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.219611] device bridge_slave_1 entered promiscuous mode 08:27:14 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000010000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000040)) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000100)="c347d5e78769920826c1dc92ee97b81f97db746f7dcdff90d3a988516c70ec3d", 0x20}], 0x1, 0x0) [ 237.629987] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 237.993580] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready 08:27:15 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xffffffffffffffff, 0x4031, 0xffffffffffffffff, 0x0) write(r1, &(0x7f0000000080), 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) pread64(r2, &(0x7f0000002640)=""/207, 0xfffffede, 0x0) 08:27:15 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x400200, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r0, &(0x7f0000000040)="06404b28195a451076a0220f593ca28d8d9bdd311228c00e63f5523e4a1c77afcbb772830e5df007df57df93af8ee073921637e17e95916d9131314d8f72fd354e0e009c4bd67a7fc24bff2df541f07529fd0cce906147c973c23fa0abf3ec82545a165073828816f5626635fd0a21ed81fd20e885f8fad288bfdaeede3418503b8c5788508456a248056d55b9142cab2fdf0c63aac5a326", &(0x7f0000000100)=""/4}, 0x18) r1 = syz_open_dev$sndtimer(&(0x7f0000000180)='/dev/snd/timer\x00', 0x0, 0x40000) write$P9_RFLUSH(r0, &(0x7f00000001c0)={0x7, 0x6d, 0x2}, 0x7) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000200)={0xe, 0x6, 0x0, 0x3b, 0x5f, "8c7ebd46d43b25b3af950b0fbd2cb9d1e0299d91da023a941f63bd96269e4f81394a9a9b559575caaadc5d28da561abb9f46e3c74a7cfab9f882ac2f92d769e6f2af5baf6a9f33fa2f46aab04fc37922827b2838f4517a1e800e6149ed566c"}, 0x6b) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x10001, 0x6, 0x9}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000300)={r2, @in={{0x2, 0x4e23, @multicast2}}, 0x9, 0x3, 0xfffffffffffffffb, 0xb6a}, &(0x7f00000003c0)=0x98) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000400)=0x13b, 0x2) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000440)=0x7f, 0x4) ioctl$TCSBRK(r0, 0x5409, 0x7f) lsetxattr$security_smack_transmute(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000500)='TRUE', 0x4, 0x2) write$smack_current(r0, &(0x7f0000000540)='\x00', 0x1) ioctl$TCSBRK(r0, 0x5409, 0x2d) unlink(&(0x7f0000000580)='./file0\x00') r3 = syz_open_dev$dspn(&(0x7f00000005c0)='/dev/dsp#\x00', 0xffff, 0x100) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000600)=0x0) ptrace(0xffffffffffffffff, r4) ioctl$KDENABIO(r0, 0x4b36) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000640)) keyctl$session_to_parent(0x12) ioctl$KVM_GET_MSRS(r0, 0xc008ae88, &(0x7f0000000700)={0x6, 0x0, [{}, {}, {}, {}, {}, {}]}) ioctl$GIO_CMAP(r3, 0x4b70, &(0x7f0000000780)) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{0x8, 0xffffffffffffff81, 0x1, 0x4}]}, 0x10) statfs(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880)=""/186) fcntl$setownex(r3, 0xf, &(0x7f0000000940)={0x0, r4}) ioctl$EVIOCGPHYS(r5, 0x80404507, &(0x7f0000000980)=""/155) write$binfmt_script(r0, &(0x7f0000000a40)={'#! ', './file0', [{0x20, '/dev/snd/timer\x00'}, {0x20, 'TRUE'}, {0x20, 'em0wlan0['}], 0xa, "15432a3e6d1ccae4213c3827d8291b5fb4044a3048"}, 0x3f) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) getresuid(&(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)) [ 239.157499] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 239.539050] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.627333] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 239.785860] IPVS: ftp: loaded support on port[0] = 21 08:27:17 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000000)) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000740)}}], 0x1, 0x0, &(0x7f0000003280)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r1 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r1, &(0x7f00000017c0), 0x1d0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) [ 240.023334] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 240.030356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 240.432288] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 240.439322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 241.118257] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 241.656369] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 241.664570] team0: Port device team_slave_0 added [ 242.051116] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 242.059471] team0: Port device team_slave_1 added [ 242.416110] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 242.423334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 242.432114] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 242.769064] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 242.775734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 242.783627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 242.795006] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 242.805980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 242.815120] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 243.058880] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 243.066712] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 243.075836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 243.383553] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 243.391095] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 243.400393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready 08:27:21 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) [ 244.254455] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.775620] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.782196] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.790399] device bridge_slave_0 entered promiscuous mode [ 246.151405] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.158121] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.166598] device bridge_slave_1 entered promiscuous mode [ 246.448610] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 246.761170] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 246.786387] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.792962] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.799886] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.806530] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.815140] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 247.273694] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 247.560418] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 247.818635] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 248.083661] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 248.093657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 248.369164] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 248.376467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 249.281384] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 249.289601] team0: Port device team_slave_0 added [ 249.595188] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 249.603288] team0: Port device team_slave_1 added [ 249.926968] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 249.934162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 249.942973] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 250.188385] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 250.195715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 250.204667] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 250.233261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.503165] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 250.510745] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 250.519889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 250.731598] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 250.739277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 250.748427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready 08:27:28 executing program 2: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in6=@mcast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x2}}, 0xe8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0xfffffffffffffdc2}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="020d0000020000000000000000000000eb6f2dc3f2d5107f05e586a371b14ed7ff2a7f29f01c4f6ea129fd39afa764c9fe944bcb716e100d7d4319b923e94d517c52f42b005e6b569fc383810f3b461c6f2c937ae34704f66cacfaabcbc03c41389bcabdfdd9ecafcce8dc31a7ac21c05c6481ce6ba825f81f9476892f83433cf7b83cff0334ef0c5a80631ecb8705eb6d39f80b45fb7fa8ba3fbbad85ebed89877a6aa3f0be3f14c740aac588d6e9669c7663f244e7df429225914b40b7b2ff3897f49f6b12849c9882fbecdfabb5697df6275dd762d26f503ba2281406181da1"], 0xe1}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="021200001100000026bd7000fcdbdf2501001400790000000800120003000000000000003800000046003270b4a69956a98fe40000000000ac1414bb0000000000000000000400000000000000000000000000000000000004000400170000001f000000000700003f00000000000000030000000000120002000b00050000000100000000000000"], 0x88}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x400000000000117, 0x0) [ 251.271466] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 252.144938] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 252.163530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 252.171316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 252.953280] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.433520] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.439980] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.447035] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.453584] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.462110] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 253.471080] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 256.794248] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.639643] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready 08:27:34 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000380)={0x2, 0x0, 0x11, &(0x7f00000002c0)="4adeafcc4d9d97e0af0be86a108ce64705"}) [ 258.438064] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 258.444598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 258.452872] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 258.985532] 8021q: adding VLAN 0 to HW filter on device team0 [ 260.991833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.510597] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 262.032294] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 262.038629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 262.046720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 08:27:39 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000000580), &(0x7f00000001c0), &(0x7f0000000380), &(0x7f0000000400)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x40000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000200)={0x14, 0x88, 0xfa00, {r2, 0x1c, 0x0, @in6={0xa, 0x4e22, 0x0, @mcast1, 0x3}}}, 0x90) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) socket(0x0, 0x0, 0x0) shmget(0x2, 0x4000, 0x8, &(0x7f0000ffc000/0x4000)=nil) r3 = getpid() write$P9_RVERSION(r1, &(0x7f0000000300)={0x15, 0x65, 0xffff, 0xffffffff, 0x8, '9P2000.L'}, 0x15) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000180)={'icmp6\x00'}, &(0x7f00000002c0)=0x1e) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000000)) rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f00000000c0)) ptrace(0x10, r3) ptrace$setregs(0xf, r3, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0xdc23) 08:27:39 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r3, 0x8188aea6, &(0x7f0000000600)) 08:27:39 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) 08:27:39 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x2c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={"00ac730000000000ec973f820f7c4000", 0xc201}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x1000, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", &(0x7f0000004800)=""/4096}, 0x28) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x8955, &(0x7f0000000000)=0x2) 08:27:39 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x2, 0x4, 0x338f, 0x2, 0x0, 0x1}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000c88000)={r0, &(0x7f0000847f95), &(0x7f000089b000)}, 0x18) [ 262.574837] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. [ 262.657132] ================================================================== [ 262.663273] BUG: KMSAN: uninit-value in vmx_create_vcpu+0x10df/0x7920 [ 262.668075] CPU: 1 PID: 7626 Comm: syz-executor0 Not tainted 4.19.0-rc4+ #63 [ 262.668075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 262.668075] Call Trace: [ 262.668075] dump_stack+0x306/0x460 [ 262.668075] ? _raw_spin_lock_irqsave+0x227/0x340 [ 262.668075] ? vmx_create_vcpu+0x10df/0x7920 [ 262.668075] kmsan_report+0x1a3/0x2d0 [ 262.668075] __msan_warning+0x7c/0xe0 [ 262.668075] vmx_create_vcpu+0x10df/0x7920 [ 262.668075] ? vmx_vm_init+0x340/0x340 [ 262.717631] kvm_arch_vcpu_create+0x25d/0x2f0 [ 262.721820] kvm_vm_ioctl+0x13fd/0x33d0 [ 262.721820] ? __msan_poison_alloca+0x17a/0x210 [ 262.731163] 8021q: adding VLAN 0 to HW filter on device team0 [ 262.728899] ? do_vfs_ioctl+0x18a/0x2810 [ 262.728899] ? __se_sys_ioctl+0x1da/0x270 [ 262.728899] ? vcpu_stat_clear_per_vm+0x420/0x420 [ 262.728899] ? vcpu_stat_clear_per_vm+0x420/0x420 [ 262.728899] do_vfs_ioctl+0xcf3/0x2810 [ 262.728899] ? security_file_ioctl+0x92/0x200 [ 262.728899] __se_sys_ioctl+0x1da/0x270 [ 262.728899] __x64_sys_ioctl+0x4a/0x70 [ 262.741712] do_syscall_64+0xbe/0x100 [ 262.741712] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 262.741712] RIP: 0033:0x457579 [ 262.741712] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 262.794886] RSP: 002b:00007f5760dd4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 262.794886] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457579 [ 262.794886] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 262.820608] RBP: 000000000072c040 R08: 0000000000000000 R09: 0000000000000000 [ 262.820608] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5760dd56d4 [ 262.820608] R13: 00000000004bfc18 R14: 00000000004cfca0 R15: 00000000ffffffff [ 262.820608] [ 262.820608] Local variable description: ----c.i.i.i.i.i.i@vmx_create_vcpu [ 262.820608] Variable was created at: [ 262.820608] vmx_create_vcpu+0xd5/0x7920 [ 262.861874] kvm_arch_vcpu_create+0x25d/0x2f0 [ 262.861874] ================================================================== [ 262.861874] Disabling lock debugging due to kernel taint [ 262.861874] Kernel panic - not syncing: panic_on_warn set ... [ 262.861874] [ 262.861874] CPU: 1 PID: 7626 Comm: syz-executor0 Tainted: G B 4.19.0-rc4+ #63 [ 262.861874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 262.861874] Call Trace: [ 262.861874] dump_stack+0x306/0x460 [ 262.861874] panic+0x54c/0xafa [ 262.861874] kmsan_report+0x2cd/0x2d0 [ 262.919639] __msan_warning+0x7c/0xe0 [ 262.919639] vmx_create_vcpu+0x10df/0x7920 [ 262.919639] ? vmx_vm_init+0x340/0x340 [ 262.919639] kvm_arch_vcpu_create+0x25d/0x2f0 [ 262.936613] kvm_vm_ioctl+0x13fd/0x33d0 [ 262.936613] ? __msan_poison_alloca+0x17a/0x210 [ 262.936613] ? do_vfs_ioctl+0x18a/0x2810 [ 262.936613] ? __se_sys_ioctl+0x1da/0x270 [ 262.936613] ? vcpu_stat_clear_per_vm+0x420/0x420 [ 262.936613] ? vcpu_stat_clear_per_vm+0x420/0x420 [ 262.936613] do_vfs_ioctl+0xcf3/0x2810 [ 262.936613] ? security_file_ioctl+0x92/0x200 [ 262.936613] __se_sys_ioctl+0x1da/0x270 [ 262.936613] __x64_sys_ioctl+0x4a/0x70 [ 262.936613] do_syscall_64+0xbe/0x100 [ 262.936613] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 262.936613] RIP: 0033:0x457579 [ 262.936613] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 262.936613] RSP: 002b:00007f5760dd4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 262.936613] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457579 [ 262.936613] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 262.936613] RBP: 000000000072c040 R08: 0000000000000000 R09: 0000000000000000 [ 262.936613] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5760dd56d4 [ 262.936613] R13: 00000000004bfc18 R14: 00000000004cfca0 R15: 00000000ffffffff [ 262.936613] Kernel Offset: disabled [ 262.936613] Rebooting in 86400 seconds..