[....] Starting OpenBSD Secure Shell server: sshd[ 50.901105] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. [ 51.243721] audit: type=1800 audit(1538793170.307:29): pid=5917 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 51.263443] audit: type=1800 audit(1538793170.317:30): pid=5917 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 55.867406] random: sshd: uninitialized urandom read (32 bytes read) [ 56.224014] random: sshd: uninitialized urandom read (32 bytes read) [ 58.113318] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.33' (ECDSA) to the list of known hosts. [ 63.792648] random: sshd: uninitialized urandom read (32 bytes read) 2018/10/06 02:33:04 fuzzer started [ 68.047856] random: cc1: uninitialized urandom read (8 bytes read) 2018/10/06 02:33:09 dialing manager at 10.128.0.26:36867 2018/10/06 02:33:09 syscalls: 1 2018/10/06 02:33:09 code coverage: enabled 2018/10/06 02:33:09 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/10/06 02:33:09 setuid sandbox: enabled 2018/10/06 02:33:09 namespace sandbox: enabled 2018/10/06 02:33:09 Android sandbox: /sys/fs/selinux/policy does not exist 2018/10/06 02:33:09 fault injection: enabled 2018/10/06 02:33:09 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/10/06 02:33:09 net packed injection: enabled 2018/10/06 02:33:09 net device setup: enabled [ 72.803603] random: crng init done 02:34:48 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xffffffffffffffff, 0x31, 0xffffffffffffffff, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14, 0x80000) bind$packet(r0, &(0x7f00000001c0), 0x14) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r2, &(0x7f0000002640)=""/207, 0xfffffede, 0xfeffffff) [ 169.716159] IPVS: ftp: loaded support on port[0] = 21 [ 171.782791] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.789300] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.797703] device bridge_slave_0 entered promiscuous mode [ 171.922854] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.929409] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.938259] device bridge_slave_1 entered promiscuous mode [ 172.062007] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 172.188105] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 172.563512] bond0: Enslaving bond_slave_0 as an active interface with an up link 02:34:51 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$IPT_SO_GET_ENTRIES(r3, 0x0, 0x41, &(0x7f0000000080)=ANY=[@ANYBLOB="6d616e676c65000000000000000000000000000000000000000000cd8f0100000000000000000000000000000000"], &(0x7f0000000000)=0x1) close(r3) dup3(r1, r2, 0x0) [ 172.692527] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 173.288699] IPVS: ftp: loaded support on port[0] = 21 [ 173.683244] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 173.691185] team0: Port device team_slave_0 added [ 173.945033] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 173.952963] team0: Port device team_slave_1 added [ 174.154411] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 174.312383] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 174.319568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 174.328468] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 174.572370] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 174.579885] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 174.588765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 174.833713] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 174.841227] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 174.850157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 176.497693] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.504375] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.512747] device bridge_slave_0 entered promiscuous mode [ 176.692965] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.699420] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.707728] device bridge_slave_1 entered promiscuous mode [ 176.872207] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 176.985423] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.992004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.998866] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.005441] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.014083] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 177.028239] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 177.542204] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 02:34:56 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000240)={0x79}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="2e65f32efe0a6766c7442400008000006766c7442402000000006766c744240600000000670f011c24b866000f00d066b88044a2b20f23c80f21f866350400d0000f23f80f0766b80500000066b9080000000f01c10f0766b8010000000f01c10f01dfb835008ee0", 0x68}], 0x1, 0x0, &(0x7f0000000380)=[@dstype0], 0x1) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000000)=0xffffffffffffffff) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 177.591777] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 177.839841] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 177.984803] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 177.992189] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 178.274916] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 178.282103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 178.386007] IPVS: ftp: loaded support on port[0] = 21 [ 179.142893] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 179.150713] team0: Port device team_slave_0 added [ 179.423127] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 179.431287] team0: Port device team_slave_1 added [ 179.649315] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 179.656610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 179.665382] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 179.955882] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 179.963242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 179.972163] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 180.213346] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 180.220983] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 180.229689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 180.513297] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 180.520817] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 180.529828] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 182.251078] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.259131] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.267481] device bridge_slave_0 entered promiscuous mode [ 182.527304] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.533943] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.542221] device bridge_slave_1 entered promiscuous mode [ 182.794791] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 183.030153] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 183.295835] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.302391] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.309251] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.315836] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.324394] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 183.671351] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 183.743575] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 184.007719] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 184.247479] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 184.254786] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 184.454419] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 184.461792] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 02:35:04 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @my}, 0x10) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x4) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d5c6070") accept4$vsock_stream(r0, &(0x7f00000001c0)={0x28, 0x0, 0x0, @hyper}, 0x10, 0x0) [ 185.339726] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 185.347718] team0: Port device team_slave_0 added [ 185.695063] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 185.703860] team0: Port device team_slave_1 added [ 186.030847] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 186.038111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 186.048485] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 186.107527] IPVS: ftp: loaded support on port[0] = 21 [ 186.341413] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 186.348720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 186.357510] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 186.715754] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 186.723436] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 186.732347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 187.063345] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 187.070877] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 187.079941] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 188.901403] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.167109] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 190.455662] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.462265] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.469138] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.475770] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.484370] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 190.642198] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 191.351380] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.357989] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.366241] device bridge_slave_0 entered promiscuous mode [ 191.387727] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 191.394213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 191.402304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 191.783479] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.789946] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.798452] device bridge_slave_1 entered promiscuous mode [ 192.179485] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 192.484824] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 192.533581] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.505014] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 193.786891] bond0: Enslaving bond_slave_1 as an active interface with an up link 02:35:13 executing program 4: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/null\x00', 0x800, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000500)='team\x00') ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000000540)={'team_slave_1\x00'}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000580)={@multicast1, @remote}, &(0x7f0000000700)=0xc) getsockname(0xffffffffffffffff, &(0x7f0000000740)=@can, &(0x7f00000007c0)=0x80) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000001dc0)={&(0x7f0000000800)=@hci, 0x80, &(0x7f0000001c80)=[{&(0x7f0000000880)=""/236, 0xec}, {&(0x7f0000001ac0)=""/180, 0xb4}, {&(0x7f0000001b80)=""/205, 0xcd}], 0x3, &(0x7f0000001cc0)=""/225, 0xe1, 0x5}, 0x0) recvmsg(0xffffffffffffff9c, &(0x7f0000003180)={&(0x7f0000002000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000002140)=[{&(0x7f0000002080)=""/154, 0x9a}], 0x1, &(0x7f0000002180)=""/4096, 0x1000, 0xfdc}, 0x40000043) getpeername(0xffffffffffffffff, &(0x7f00000031c0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003240)=0x80) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000003400)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000033c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c656400000000", @ANYRES32=r2], 0x2}, 0x1, 0x0, 0x0, 0x20000810}, 0x50) keyctl$update(0x2, r0, &(0x7f0000000440)="c0ca1cdbaa1aed01fcffffffffffffb9449e2e82cca424de17344340b02dd527f2d8b3ae6c1db359a1de4d3713d009f683314e657da33c080068f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f8be82b00f10287031623f73470264cc5897f18f357aad6deb3883da88ae2266664933785a3ce72bb224a441437ea93c217", 0xbc) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r3, r0, r3}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0) [ 194.101126] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 194.108335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 194.449675] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 194.456893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 195.281004] IPVS: ftp: loaded support on port[0] = 21 [ 195.705743] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 195.713757] team0: Port device team_slave_0 added [ 196.052012] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 196.059861] team0: Port device team_slave_1 added [ 196.362122] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 196.369242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 196.378120] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 196.413398] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.782053] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 196.790614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 196.799425] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 197.198074] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 197.205829] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 197.215024] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 197.574330] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 197.582054] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 197.590849] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 197.840205] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 199.286492] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 199.293990] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 199.301742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 200.866214] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.194076] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.200567] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.208923] device bridge_slave_0 entered promiscuous mode [ 201.600825] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.607701] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.616021] device bridge_slave_1 entered promiscuous mode [ 201.738446] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.744987] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.751998] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.758584] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.766846] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 202.037231] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 202.412196] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 202.419314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 02:35:21 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f00000000c0)={0x0, @rand_addr, 0x0, 0x1, 'sed\x00', 0x0, 0x3}, 0x2c) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) [ 203.666893] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 204.006854] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 204.422499] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 204.430486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready 02:35:23 executing program 0: r0 = epoll_create1(0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f0000000140)={0x0, r1+10000000}, &(0x7f0000000180), 0x8) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000080)) epoll_create1(0x80001) timerfd_settime(r2, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000037000)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r2, &(0x7f0000000440)={0x7}) [ 204.749732] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 204.757101] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 02:35:24 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x8000000}, 0x14) r1 = dup(r0) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000080)=0x1f, &(0x7f00000000c0)=0x4) io_setup(0x1, &(0x7f0000000100)=0x0) io_cancel(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x6, 0x80000000, r1, &(0x7f0000000140)="76eef07ab0e8303af5adcf1bb22168bbd584c5b114924e638c226aedebddda39e55e5d55071330f2103abfc0c22f896e7c00672e5cfa31a6e3e7c4dfafc1eda3b62bccacb90dd9eb09f4a893e10cc573ddbaa792242654fbdc5fbf045c9a433e2f9fb5ab14ff6337076e5e09eeb4a0bfffdca0801820150975407cec12d06cfa34c92d32e8401fdec99bab180b27fccca8827fee33c408664933630c99d1830413556f9fae631984833833a4edda21c1b9", 0xb1, 0x5, 0x0, 0x2, r1}, &(0x7f0000000240)) 02:35:24 executing program 5: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x8400, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x113, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r1, 0x4}}, 0x10) r2 = request_key(&(0x7f0000000280)='cifs.spnego\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000300)='/proc/self/net/pfkey\x00', 0x0) add_key(&(0x7f0000000100)='trusted\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="515b1f4e3604f6955787928e4ada94868725169a60b4fdede6ddf24a2f0a9ffc626146ce1b1917aa26c8a322e2131c7cc02b0e97954bfcb53ad05b538b1856001c7c7cc0de0b9fc90ac733ff0fa3ff798d8fbe1673994a823d4d44b6d1bd9e47299b2c0f0309d128ef7f920490480fddf8c0ccd2aa41bb096c53a72c4250a1333ded6c6a57463e7a15e551e23409926482803c4f64970563ca49134be7447866bc77646b3005d389fad6fc2c223f0db59afcc310b4b2b511c420dc1c882771d6d6164a313bd365aa2d66e3707bfd1e4ca25d3b6124b39aa62985558aca773247eded0ec92c27", 0xe6, r2) ioctl$KDDISABIO(r0, 0x4b37) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000340)={0x6, 0x6, 0x4, 0xb7, 0x3f, 0x8}) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000400), &(0x7f0000000440)=0x8) getsockopt$inet6_dccp_buf(r0, 0x21, 0x2, &(0x7f0000000480)=""/56, &(0x7f00000004c0)=0x38) r5 = fcntl$getown(r4, 0x9) prctl$setptracer(0x59616d61, r5) write$P9_RREMOVE(r0, &(0x7f0000000500)={0x7, 0x7b, 0x2}, 0x7) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000580)={0x1, 0x10, 0xfa00, {&(0x7f0000000540), r1}}, 0x18) write$9p(r0, &(0x7f00000005c0)="5b2c997a38136897973287c5e9cb882984f480837fb2caaf981fb0572840b780ca7eb2bd296feea97563f112d2e8750f3c5c2febd2374109a7e34036ca28669be9a0880c4e72ef320ed2f987303c283da2fe00105f91be731cb5730a01109da992a68b9ed7582766cb4f6d7c0df77cc6f9e53d66b7c49ec092868b0ec23cf10ccd747a3a54913eecfa6382e1834cb4dc94d56686e77cfc72d060634065bf540b2583b0c88db8ae293a5e21347c8be09187cbc33b2b37fe399fa9f9b028a43191b1cd1a12e904a3b45002d27b7cae94", 0xcf) ioctl$EVIOCGKEY(r4, 0x80404518, &(0x7f00000006c0)=""/123) write$P9_RUNLINKAT(r0, &(0x7f0000000740)={0x7, 0x4d, 0x1}, 0x7) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000780)=0x2, 0x4) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f00000007c0)={0x6}) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000800), &(0x7f0000000840)=0x10) ioctl$RTC_UIE_OFF(r0, 0x7004) ioctl$FS_IOC_GETVERSION(r4, 0x80087601, &(0x7f0000000880)) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) migrate_pages(r5, 0xffffffffffffff17, &(0x7f00000008c0), &(0x7f0000000900)=0x4) clock_gettime(0x0, &(0x7f0000000a80)={0x0, 0x0}) write$sndseq(r0, &(0x7f0000000ac0)=[{0x4, 0x80, 0x5, 0xad24, @tick=0x7fff, {0x3, 0x7}, {0x77}, @quote={{0x2, 0x30738dca}, 0x3, &(0x7f0000000940)={0x6, 0x3f, 0xfff, 0x5, @tick=0x2, {0x3f, 0xfffffffffffff856}, {0xb0f, 0x8}, @raw8={"94e73cafa2bad9b164992c57"}}}}, {0xffffffff, 0x65a, 0x3, 0x9, @time, {0xe8c, 0xfffffffffffffffc}, {0x100000001, 0x1000}, @time=@time}, {0x8001, 0x3, 0x6, 0x7, @tick=0x5, {0xfff, 0x6}, {0x5, 0x8}, @ext={0xd2, &(0x7f0000000980)="c6a3bd7fb61a291d00db8612b261de5ef186c19890846d561b839cd5c27412c76869e584c301e286a56706ca642d6f6452c0037d4267cb90df34f9fffcef01ad3205051fe6500c932d86edf880fe22092f9fb9202627f9653481b848e71f689206e42b373c3a0ca9924871bed2b2d2b9c1bc20b7306ec9300c9c4743b97f617a34d6060f40265bd11890cd4ae8ae4c24784dff0c33b872d378995c46fef57046227fb1d84a2cf7691d32ee6eb5453900b33e41d2a1c6d7b03b7d4d27579d2c861c78f8ffb6348601cce3ffd8adf41a8030c7"}}, {0x10000, 0xda0, 0x7f, 0x81, @time={r6, r7+30000000}, {0x4}, {0x3800000000, 0x4}, @result={0x2, 0xfffffffffffffa08}}, {0x8, 0x5, 0xff, 0x1, @time={0x77359400}, {0x3f, 0x1}, {0xf284, 0x2}, @control={0x4, 0x1000, 0x4e}}], 0xf0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000bc0)={0x0, @in={{0x2, 0x4e20, @local}}}, &(0x7f0000000c80)=0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000cc0)={r8, 0x2, 0x7, 0xfffffffffffffffb}, 0x10) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000d00)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) getsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000d40), &(0x7f0000000d80)=0x4) [ 205.562437] 8021q: adding VLAN 0 to HW filter on device bond0 02:35:24 executing program 0: r0 = dup(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000540)={0x0, @in={{0x2, 0x4e21}}, 0x2, 0x3}, &(0x7f0000000080)=0x88) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000000c0)=ANY=[@ANYBLOB="631b06000123"], &(0x7f0000000600)=0x1) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000500)=0x6, 0x4) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000400)={0x0, 0x2}, &(0x7f0000000440)=0x8) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='reiserfs\x00', 0x40, &(0x7f0000000d80)="3c1ebf5f6828573e5b79032f7de8b77948a79f90a8573f7fc1fbac8043fccb017b382903b3f7e1e06c3e4bdd9cdcfe359de7311bfbabe8e14cb70df8a8d1d2c5eaa02c34589d") getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000480)={r1, 0x5, 0x30, 0x3ff, 0x6}, &(0x7f00000004c0)=0x18) r3 = syz_open_dev$vcsn(&(0x7f0000000980)='/dev/vcs#\x00', 0x1, 0x0) ioctl$KDGKBSENT(r3, 0x4b48, &(0x7f00000009c0)={0x7, 0x9, 0x8d}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = accept4(r4, 0x0, &(0x7f0000000340), 0x80800) setsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000b80)={r2, 0x5, 0x8, 0x2}, 0x10) bind$vsock_dgram(r5, &(0x7f0000000380)={0x28, 0x0, 0x2710, @hyper}, 0x10) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000002c0)={0x0}, &(0x7f0000000300)=0xc) r7 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$inet_dccp_int(r7, 0x21, 0x11, &(0x7f0000000280)=0x200, 0x4) r8 = syz_open_procfs(r6, &(0x7f00000003c0)='net/sockstat6\x00') mq_notify(r8, &(0x7f0000000140)={0x0, 0x12, 0x2, @tid=r6}) inotify_init() r9 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x3e, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x4, 0x0, 0xfffffffffffffffc}) bind(0xffffffffffffffff, &(0x7f0000000200)=@un=@file={0x1, './file0\x00'}, 0x22e) mq_notify(r9, &(0x7f0000000b00)={0x0, 0x12, 0x0, @thr={&(0x7f0000000e00)="73eb42612f25ea87cfca8eddb47b22274fc3334ffe80102f28ac1a", &(0x7f0000000e40)="6440e4d53faaabb6b1a9b023ae199c699512e28d94043cf8674846a1af245d70af87033a9e804ec45fda28ebd8d29d052a311e3f24d6df683b79e57235b3aacf386263824dcf5e6654b973a0d5ffab584e309bbf0b6d2c2fb03769f93c4de13c7830ef6ae4699fc0cf9dc8f82ebc08f6242650c0f58065e2be6be6588580b28a3ba2924909686399a81ec471316f3cc8044cde"}}) ftruncate(r5, 0x7) r10 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x200400, 0x0) getsockopt$inet_sctp_SCTP_EVENTS(r10, 0x84, 0xb, &(0x7f0000000100), &(0x7f0000000b40)=0xb) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r10, 0x84, 0x75, &(0x7f0000000bc0)={r2, 0x568}, 0x8) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r5, 0x8905, &(0x7f0000000180)) mq_timedsend(r9, &(0x7f00000e6000), 0x0, 0x0, &(0x7f0000e0b000)) [ 205.901223] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 205.909476] team0: Port device team_slave_0 added [ 206.248264] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 206.256735] team0: Port device team_slave_1 added 02:35:25 executing program 0: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000140)) [ 206.636475] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 206.643776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 206.652340] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 02:35:25 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000003c0), 0x4) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000140)) eventfd2(0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000340)) socket$inet6_tcp(0xa, 0x1, 0x0) getpgrp(0xffffffffffffffff) prctl$setptracer(0x59616d61, 0x0) [ 206.769091] IPVS: ftp: loaded support on port[0] = 21 [ 207.003398] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 207.010475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 207.019135] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 207.041110] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready 02:35:26 executing program 0: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x85b, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x30, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x4}}}]}, 0x30}}, 0x0) [ 207.376913] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 207.384636] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 207.393391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 207.808524] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 207.816326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 207.825158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 208.348653] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 208.355365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 208.363190] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 209.656250] 8021q: adding VLAN 0 to HW filter on device team0 02:35:28 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x2500, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000740)=""/242) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000940)=ANY=[@ANYBLOB="1414a301000000030000000002f2ddffffffffac14141219da7316d4e2a4977f2212946b080000001e46182a93b5564c39724e1b90a5000000000000000000000000d04538d7ed35720625b40cfefcca284cb2cbe53fc30d80fe047df8cafe321c66dea9a6fd816d18e439b600cac91dcab0d941"], 0x1) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'vcan0\x00', 0x0}) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040)=0x800, 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(0xffffffffffffffff, &(0x7f0000000300)={0x2c, 0x1, r3, 0x40, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f00000001c0)={0x7}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)="2e2f6367726f75d9b6a30000008000000000", 0x1ff) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) setgid(0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000240)='/dev/rtc0\x00', 0x200, 0x0) setsockopt$RDS_FREE_MR(r4, 0x114, 0x3, &(0x7f0000000400)={{0x0, 0x1}, 0x10}, 0x10) io_setup(0x0, &(0x7f0000000380)) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) getresuid(&(0x7f0000000440), &(0x7f0000000600), &(0x7f0000000640)) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0x40a45323, &(0x7f0000000480)={{0x80000000000003, 0x9}, 'port1\x00', 0x20, 0x100000, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6}) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000000)) [ 211.099013] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.105585] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.112569] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.119016] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.127277] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 211.591908] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 211.951364] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.958103] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.966425] device bridge_slave_0 entered promiscuous mode [ 212.214705] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.221201] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.229962] device bridge_slave_1 entered promiscuous mode [ 212.420474] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 212.678483] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 213.331700] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 213.599777] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 213.814686] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 213.821888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 214.103715] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 214.110880] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 214.915516] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 214.923802] team0: Port device team_slave_0 added [ 215.091870] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 215.099737] team0: Port device team_slave_1 added [ 215.357354] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 215.364672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 215.373401] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 215.400877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.634792] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. [ 215.703408] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 215.710580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 215.719363] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 215.808611] ================================================================== [ 215.816044] BUG: KMSAN: uninit-value in __vmx_flush_tlb+0x755/0x790 [ 215.822471] CPU: 1 PID: 7288 Comm: syz-executor2 Not tainted 4.19.0-rc4+ #63 [ 215.829765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 215.839128] Call Trace: [ 215.841750] dump_stack+0x306/0x460 [ 215.845413] ? __vmx_flush_tlb+0x755/0x790 [ 215.848915] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 215.849695] kmsan_report+0x1a3/0x2d0 [ 215.857122] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 215.860337] __msan_warning+0x7c/0xe0 [ 215.869172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 215.871697] __vmx_flush_tlb+0x755/0x790 [ 215.871728] vmx_flush_tlb+0x94/0xb0 [ 215.871768] ? vmx_set_rflags+0x740/0x740 [ 215.891041] kvm_mmu_load+0x1656/0x3460 [ 215.895038] ? vmx_set_cr0+0x3510/0x3510 [ 215.899122] kvm_arch_vcpu_ioctl_run+0x879e/0x10a20 [ 215.904255] ? task_kmsan_context_state+0x6b/0x120 [ 215.909197] ? __msan_get_context_state+0x9/0x30 [ 215.913959] ? INIT_INT+0xc/0x30 [ 215.917334] ? task_kmsan_context_state+0x6b/0x120 [ 215.922280] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 215.927831] ? kmsan_set_origin_inline+0x6b/0x120 [ 215.932686] ? __msan_poison_alloca+0x17a/0x210 [ 215.937369] ? put_pid+0x71/0x410 [ 215.940917] ? kvm_vcpu_ioctl+0x20a4/0x20b0 [ 215.945252] ? put_pid+0x1a9/0x410 [ 215.948811] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 215.954180] ? get_task_pid+0x17b/0x270 [ 215.958169] kvm_vcpu_ioctl+0x11a7/0x20b0 [ 215.962338] ? do_vfs_ioctl+0x18a/0x2810 [ 215.966413] ? __se_sys_ioctl+0x1da/0x270 [ 215.970586] ? kvm_vm_release+0x90/0x90 [ 215.974576] do_vfs_ioctl+0xcf3/0x2810 [ 215.978490] ? security_file_ioctl+0x92/0x200 [ 215.983007] __se_sys_ioctl+0x1da/0x270 [ 215.987006] __x64_sys_ioctl+0x4a/0x70 [ 215.991017] do_syscall_64+0xbe/0x100 [ 215.994723] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 215.994846] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 216.002333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 216.006938] RIP: 0033:0x457579 [ 216.006965] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 216.015447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 216.017389] RSP: 002b:00007fade36fec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 216.051342] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457579 [ 216.058616] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 216.065889] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 216.073165] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fade36ff6d4 [ 216.080441] R13: 00000000004c003b R14: 00000000004d0108 R15: 00000000ffffffff [ 216.087731] [ 216.089369] Local variable description: ----error.i.i.i@__vmx_flush_tlb [ 216.096115] Variable was created at: [ 216.099847] __vmx_flush_tlb+0x103/0x790 [ 216.103927] vmx_flush_tlb+0x94/0xb0 [ 216.107637] ================================================================== [ 216.115007] Disabling lock debugging due to kernel taint [ 216.120463] Kernel panic - not syncing: panic_on_warn set ... [ 216.120463] [ 216.127851] CPU: 1 PID: 7288 Comm: syz-executor2 Tainted: G B 4.19.0-rc4+ #63 [ 216.136541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 216.146004] Call Trace: [ 216.148608] dump_stack+0x306/0x460 [ 216.152262] panic+0x54c/0xafa [ 216.155500] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 216.160969] kmsan_report+0x2cd/0x2d0 [ 216.164812] __msan_warning+0x7c/0xe0 [ 216.168633] __vmx_flush_tlb+0x755/0x790 [ 216.172729] vmx_flush_tlb+0x94/0xb0 [ 216.176467] ? vmx_set_rflags+0x740/0x740 [ 216.180710] kvm_mmu_load+0x1656/0x3460 [ 216.184719] ? vmx_set_cr0+0x3510/0x3510 [ 216.188921] kvm_arch_vcpu_ioctl_run+0x879e/0x10a20 [ 216.194036] ? task_kmsan_context_state+0x6b/0x120 [ 216.198974] ? __msan_get_context_state+0x9/0x30 [ 216.203825] ? INIT_INT+0xc/0x30 [ 216.207200] ? task_kmsan_context_state+0x6b/0x120 [ 216.212155] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 216.217621] ? kmsan_set_origin_inline+0x6b/0x120 [ 216.222503] ? __msan_poison_alloca+0x17a/0x210 [ 216.227207] ? put_pid+0x71/0x410 [ 216.230681] ? kvm_vcpu_ioctl+0x20a4/0x20b0 [ 216.235021] ? put_pid+0x1a9/0x410 [ 216.238573] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 216.243947] ? get_task_pid+0x17b/0x270 [ 216.247958] kvm_vcpu_ioctl+0x11a7/0x20b0 [ 216.252147] ? do_vfs_ioctl+0x18a/0x2810 [ 216.256235] ? __se_sys_ioctl+0x1da/0x270 [ 216.260416] ? kvm_vm_release+0x90/0x90 [ 216.264408] do_vfs_ioctl+0xcf3/0x2810 [ 216.268403] ? security_file_ioctl+0x92/0x200 [ 216.272920] __se_sys_ioctl+0x1da/0x270 [ 216.276956] __x64_sys_ioctl+0x4a/0x70 [ 216.280854] do_syscall_64+0xbe/0x100 [ 216.284670] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 216.289861] RIP: 0033:0x457579 [ 216.293062] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 216.311972] RSP: 002b:00007fade36fec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 216.319692] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457579 [ 216.327088] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 216.334370] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 216.341651] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fade36ff6d4 [ 216.348934] R13: 00000000004c003b R14: 00000000004d0108 R15: 00000000ffffffff [ 216.357396] Kernel Offset: disabled [ 216.361025] Rebooting in 86400 seconds..