[ 58.756035] audit: type=1800 audit(1538758194.791:27): pid=6084 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 60.313839] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 64.553513] random: sshd: uninitialized urandom read (32 bytes read) [ 64.953224] random: sshd: uninitialized urandom read (32 bytes read) [ 66.996955] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.102' (ECDSA) to the list of known hosts. [ 72.891997] random: sshd: uninitialized urandom read (32 bytes read) 2018/10/05 16:50:11 fuzzer started [ 77.494612] random: cc1: uninitialized urandom read (8 bytes read) 2018/10/05 16:50:15 dialing manager at 10.128.0.26:36867 2018/10/05 16:50:15 syscalls: 1 2018/10/05 16:50:15 code coverage: enabled 2018/10/05 16:50:15 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/10/05 16:50:15 setuid sandbox: enabled 2018/10/05 16:50:15 namespace sandbox: enabled 2018/10/05 16:50:15 Android sandbox: /sys/fs/selinux/policy does not exist 2018/10/05 16:50:15 fault injection: enabled 2018/10/05 16:50:15 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/10/05 16:50:15 net packed injection: enabled 2018/10/05 16:50:15 net device setup: enabled [ 83.713667] random: crng init done 16:52:22 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000280), 0x3c3, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480), 0xc, &(0x7f0000000180)={&(0x7f0000000a00)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in6=@remote, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}, 0x8}, 0x0) [ 206.919567] IPVS: ftp: loaded support on port[0] = 21 [ 209.245680] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.252350] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.260733] device bridge_slave_0 entered promiscuous mode [ 209.404706] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.411241] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.419993] device bridge_slave_1 entered promiscuous mode [ 209.556189] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 209.694907] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 210.117259] bond0: Enslaving bond_slave_0 as an active interface with an up link 16:52:26 executing program 1: r0 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x0, 0x1fe) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) epoll_pwait(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x8001, &(0x7f00000000c0)={0xfffffffffffff1d8}, 0x8) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x0, 0x3ef, 0x0, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$TCSBRKP(r0, 0x5425, 0x1) connect$l2tp(0xffffffffffffffff, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x2e) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback, 0x3}) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r2, 0x40140921, &(0x7f0000000040)={0x0, 0x1, 0x0, &(0x7f00000000c0)}) [ 210.258260] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 211.116184] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 211.124009] IPVS: ftp: loaded support on port[0] = 21 [ 211.124637] team0: Port device team_slave_0 added [ 211.366315] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 211.374305] team0: Port device team_slave_1 added [ 211.561011] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 211.796958] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 211.804437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 211.813310] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 212.062236] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 212.070152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 212.079442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 212.267865] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 212.275575] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 212.285021] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 214.792810] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.799278] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.807920] device bridge_slave_0 entered promiscuous mode [ 214.898308] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.904889] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.911889] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.918334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.927245] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 214.933903] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 215.084668] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.091137] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.099666] device bridge_slave_1 entered promiscuous mode [ 215.395076] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 215.612803] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 216.346579] bond0: Enslaving bond_slave_0 as an active interface with an up link 16:52:32 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000004c0)=[{r2}], 0x1, &(0x7f0000000500)={0x77359400}, &(0x7f0000000540), 0x8) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x3) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) close(r1) [ 216.539303] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 216.875822] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 216.887169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 217.170221] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 217.177420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 217.550659] IPVS: ftp: loaded support on port[0] = 21 [ 218.014703] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 218.023491] team0: Port device team_slave_0 added [ 218.317676] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 218.325940] team0: Port device team_slave_1 added [ 218.551122] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 218.558424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 218.567484] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 218.819493] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 218.826678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 218.835917] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 219.027741] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 219.035649] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 219.044947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 219.276855] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 219.284682] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 219.293979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 222.257101] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.263697] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.270602] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.277220] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.286204] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 222.293044] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 222.947793] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.954574] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.963256] device bridge_slave_0 entered promiscuous mode [ 223.226649] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.233428] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.242021] device bridge_slave_1 entered promiscuous mode [ 223.548985] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 223.776285] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 224.638654] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 224.909668] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 225.174608] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 225.202259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 225.370783] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 225.377970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 16:52:41 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, &(0x7f0000000180), 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={'bridge_slave_0\x00', @ifru_flags=0x800}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 226.462755] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 226.470889] team0: Port device team_slave_0 added [ 226.765335] IPVS: ftp: loaded support on port[0] = 21 [ 226.888551] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 226.896668] team0: Port device team_slave_1 added [ 227.186361] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 227.193517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 227.202498] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 227.223136] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.516703] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 227.523893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 227.532745] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 227.888207] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 227.896073] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 227.905353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 228.217822] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 228.225535] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 228.234794] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 228.766918] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 230.113448] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 230.119816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 230.127946] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 231.621944] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.516436] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.522988] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.529900] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.536492] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.545514] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 233.004882] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.011363] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.020001] device bridge_slave_0 entered promiscuous mode [ 233.142119] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 233.427453] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.434243] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.443053] device bridge_slave_1 entered promiscuous mode [ 233.775030] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 234.100364] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 235.243533] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 235.575815] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 235.901415] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 235.908687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 236.309729] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 236.316910] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 16:52:52 executing program 4: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140)=0x78, 0x4) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000300)='/dev/snd/midiC#D#\x00', 0x7, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000600), 0xffffffffffffffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xe, 0x24, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) nanosleep(&(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)) r2 = dup3(r0, r1, 0x80000) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000200)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000240)=0x18) ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000280)) getegid() perf_event_open(&(0x7f0000000180)={0x5, 0x70, 0x2, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xfffffffffffffffa, 0x0, 0x6, 0x0, 0x0, 0x0, 0x10001, 0x1, 0x0, 0xed59, 0x0, 0x9, 0x0, 0x8, 0x0, 0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x0, 0x0, 0x4, 0x7, 0x3, 0x4, 0x85c}, 0x0, 0x3, 0xffffffffffffffff, 0x3) accept$alg(0xffffffffffffffff, 0x0, 0x0) gettid() socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x20000001, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) [ 237.397229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.597356] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 237.605590] team0: Port device team_slave_0 added [ 238.082901] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 238.090945] team0: Port device team_slave_1 added [ 238.261444] IPVS: ftp: loaded support on port[0] = 21 [ 238.563482] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 238.570560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 238.579885] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 238.957604] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 238.964917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 238.973913] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 239.225915] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 239.467358] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 239.475032] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 239.484012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 239.907623] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 239.915366] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 239.924648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 240.765251] netlink: 104 bytes leftover after parsing attributes in process `syz-executor0'. [ 240.774259] netlink: 4 bytes leftover after parsing attributes in process `syz-executor0'. [ 240.865037] netlink: 104 bytes leftover after parsing attributes in process `syz-executor0'. [ 240.873946] netlink: 4 bytes leftover after parsing attributes in process `syz-executor0'. [ 241.017960] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 241.024499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 241.032440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 16:52:57 executing program 0: socket$inet(0x2, 0x0, 0xfff) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000200)={'syz1', "f2983b2907f824f8d1fa612a6411da94116a5d4c85b74c9dfac85e44b23a2caacb96f48e850e766d2ec96edd88f13b0295207edc2d2cfbd6734855ed016bd0a158b5a7736e0589037e518841f1d6409dccc6cdf51c0232c69e56ec3ea6e50791ae0e1f40086f9e8a6778acecbfca736613716c48c0e048c01badc75699b2"}, 0x82) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x101000, 0x0) unshare(0x2000400) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) fcntl$getownex(r1, 0x10, &(0x7f00000000c0)={0x0, 0x0}) write$cgroup_pid(r0, &(0x7f0000000100)=r3, 0x12) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r2, 0x5) r5 = dup3(r4, r2, 0x0) write$UHID_INPUT(r5, &(0x7f0000001640)={0x8, "e52aac313baccb9b551156a2d7c12b7711c32a17d3c4c9ceef08c2046fe288a7036e513019e5e114cc4ae935d23a9990952824f5d0c1f52e2eb94e5301ba9dc9a02818038eaef46fc2c3ebbe46e4a6024c93823f66462ba3d68913fdeadd1087b06846aa3ddf6ed3dc2b61b4960f48c2edf5cdf23c7e8d3f2e6daa71e66b29bc19e377d7df4637d735194a52da503a0ac44383ba5b3da867e09ceae02a9bfc21e7f28814c2fab7da41344e207ca706dc37592abdb685e4b80eb6dc2b1dc550a1d16166d163a4a220a54d7844facbbb2648ee90aa05c3c03ee447d79e517df8ffe70c215bd0bf69e86a5f48d571b9337590d05e9947727c0d77d18a117f110252735ca6700a55fd26838935808cce7b7c222a75339e44230bdeb99bc39c0c1cc20de74fcb9744f4c4a988f3874a846d31abcf5504d78a3e14f35f6cbd123fcff22890cc17c730c3ea9f74616dfe60064552ec25568a6211bdc39483a28bed0df0afc7d7c6d13d301e080c8846eab1a9d914b0695b16dd3009feaf204d22e32c5ecc333e616159d55328d375e59194c5c9a0b3843afb283d1d26f59e03105e91aa552386468432a09be73220e942394f34c559797b74bfe7c5c2c639a40e4d2e81e1004b127540a0bdd6be2f95698e75e4f1203a47d61f506ac9364be9d98ae46536f74afe08c450ecb902e00f188c9f32aed0677455e10bbe82c763a464f10f64c403c35376b7a675546835209f0e2809e9c2bd191f784dda4b727bfac512497a07474e6d3e13233601df81abcdb6fbfb152483ec61baaee45a5d733c62107f63c55a046401a5ddef70cef8d52cb4784e3efc34de554c8ff48f7ae3d6dc1ed4eb70fe1e610355fd66ce1a375b63b6641fb3dadfab8a9b0b1f26ca11f7287258ad4766e08340f8f2fd53e7e5f287bb73c186f0290f225687040c762776a02e5e65f1b9b713e8ef98ffe111b3e4e7b761dd3ed763ed8dafd67625fb300ac752c0ff9c0c04b75be292c3f0247bd0b3560f1c76aff38791037fcf2b812f1601934a8fc769f7198e0df685841489263a1495a8a8bab1a63cb12b3089a3e30aab15ae872437e52a6f0dbc4df2d0e8df4c6bcd47beefc179d85b70b42b319453e6efaff96a509420bec299f227c4b676c58038916897f15430ff52087dd97dd329c6b6e207378053accaa31843a333e4f69586103424f44bd67eb355c1fbe078e62f07ebaae46c3e335372127dc5fa70a4579af715e531bda52761dc206aded4678079720603a577ef7e5fb5a81a525b7c96a4047d9d6bb80d7e0ce55cc0a4f73256ae9c515307f13fe54126786de425d7a674b05116104176faac5b9365b33fd2f5a710a5159d342abecede83ad421bbb712cd5b006671a958cec907311719eb3e0b5dc4fb51054e06656a7a2a066c0aac65ceb434ca3f242cb2b1d7a22179a85cbbeeacc2f0135d8dd4d1363a98d2543fa4973e19eb359e956d27f142c75f62c7aecaf47090236b9791847725bc6fde15cd4a119a4976a3f0f2d622973ad9000aae56f88b396fa1881ec0b0a5de9955fc8f864b36eacd635b88826e0a64897d605fa4a14f7786b037cf308bef61c7f860e38f1ae67fe8cb7802dbe85f9c0c082eed1a13e645370d0c95d63bba215ac8a637b8f968aef06329d62ba131b56b46bfcfa6a5e82016d5eeb6e7db45595d1acaaa5ec9886315d3dced9d0a15c44c043ac91e4ae7077139774607b76cbc017f636145beb84c128cf35ddf4a895a56b8d141f743c9189a71387893f785804f85927a23ccd79c432ab686b621ec91706ef082b4ea4fa608ce2daca0d2e2e07ff51e6a8fdc22f1c8ee5ae53720f93b4547704fae580e5560e3c7b1ac2a38ffc294d3c96635e3b919339394843c8a171c7912ceb9c0a11be25783694b177b399e7a495538e293a59d3ab44b176afed6894aa0e501d9b98981be3f2057bf6c9869403a34cb83ad57150c674301f39524a026f3608a3414287bc4e507355823c6f8640bb803a392fb8847023d1db3c39753e72414682c617de9bd0d5b6a55d46004d49f20d2f8f53cdd8eb11402f7895cd7c01b4964fd005c564b0b0e156969ccde818dda3a7cae02d1d3af95081e6549f28976fa81b5e90fbb0a62fea850ffaf0220132189c11a74996261f6de6001c50364f08c4f48fd46a0417ec8ee4d003efeead64b87d64b43cd6868f365e72e26dd9f5f9f74d135f64464cb38dd62051ae70c5a4daabebe700eb9b290b8ed4142db0090219e6186f8f71fa8fe1ebe42f621b8eed182ee8ad0401f0a3530fd48e4d1eb2637f1fbd2a7032b0f85715203c12ab8ff48131bc4ff28272b57119a76bc0b30fef5294c23c0b2bcadfbba37a00502b5e43d72148d9acc7cb7cb39dc830cd6f30262a09eecf29d1055c2edc3926cfd5076aa5f9f172ed145359fc974ca5ded652433d212607bed155df1aff269414548a39a644b6ce927de5de6e6750575c4fd7ea7fe10b1e51fde6975c0c23fc012a8b12fe3fa64e972e4e09eafea165ae5c1ffc9d761e1314a781959c223b96eefde0f4f45c7ac032a8d3f1bd304114c3329a3e4966eddcc8d44ae70bad2932f963100955e2d2d487347c2aa8356bc6bc3c84e418163c758f1372246884e6d80d87d7ab3fe660dda13ada65f200b4fb365223b93bbc29493ae6dbbbb1823edb8e9f045b60414edab955e1046b67a8d4908ab08ad90216125d2ffd8c7814a9a4940df0a653b1cf53cf456412228445ebc8e1584adfe13207ff24fe602e2a506218710483b5544347a3d515b7d2ddcaa1bb7ae3578841918a8ed00659d5f260d23ae17a9ffc77f79758844586fe53517097838a92dde8873e8be1cd5934f1a4bfdd9d0b5725b811c4a2c121b7729946993a736bd195c55684ea680304af4844a1b2f74e2c2b2ccaeceb00b9c2c515b70912efb27643c5624025e358b44853cc0efddc103ee514471af902cd9b68f102c95a91d2b825b473ce842e6367b0b7305ce8be6f9c812abe860bb632e00b69a0370e5c8f9ba0cebbcbe1b9276949c303a4e9e3b6db37a0716520c07512192364abb58399fca973a1b32106096eda8bb85745562e8a35c5e917fdf858091a4c29d6549e10098d6b205fc5cad546fe07b3a70756cf7079c88f3708f0c8527002b99e80cbd584a3737fb37953cd6dccf21add4d4b6e65894490840c008578737d5e208649d1cd34beb403c2226300297853a29cf6c661b426c13306575d81f6fd21712e0ec4366013883b95a71d5094acbf156e42de11cb873744983ec1ff9cfbee2278053b8b4e523388bd41dfd3c2ecaacc5d9d2958bbfa94f4bd0ac1c61c98ab295dd5c69020f1329818df9a2aa88ced03f4e6a4d1f8cb020afcd2384e65511ddeb908ba0c13a03dd32e8d4ccf0246008f35ef5184f81b8fed73b4aae4998bd8c7d784210042247d39396ba881bf43555d0ec58deede7b4729e79d31b2a346527594ca3a47a1723a792a701dc18d0124365e2c4a4fefed48c29a9f2fc747b302eaf92a100b2da211c91de4ab79d4aede483d852635c6f14d38095a5739d475c7aa67fdd54767a056eeb3098dfd8d1c21f32e76f0247f04118448273586856e641b83f540a643e72dc15804b78bac475f39e23291798aa45a2c10aa5fef2d5e4d7b8f529a66535d11c6149e9797f2fcce2804f2a5370345e98b0c02c7dd27135d414fe72f0740423920d68b64f6b8c05788c6692ceb4831b5d4593a970dc3ee2528765fb739964f4fed7200d7e796a9f3d0d60834e638dd8c29d4e85011e4ba4f127fe765954a5b5bb5d1cc69f2376599d5a3e8c30714893f763c06061072c10cb0eee17eb2a2514acc584b04e169d4a33a330367bb725ff9462f5d50282a2e393293eec8ea1eaab8297cc108798a4a57eccdb00647ab9f07318993f7c59c395a93cbd681d0a967a56e3f13c832c48dcc0d0096870b0d51b754e70b12a849b6f376923f7f7d909f64d64e1d6e338d39166b725265b96ed21e36b12057288d66e5df04b7b734ed0957d47fde172be2473b9ac6fdb823abe3e11ec69a170a14511d5572d6c0d9f6b749acad7003f0567bb6f9381649e42d02764077330d5af3d93185968a9f8dfed16c4a7c768a2bb98304946a557182c0ce93e82b340074e384cc6bd6129483386c654a6ab3bb12fe8e86adafa93f218fdf5019c09292858ae38ef7aa6a78e3f846215856d630ae9c5fc4009693b2767ea55c469f9099693287b35d43ee0f7a5baf3328d37b2c536f2abd6e21e472c105ae982cdd26a5a20562122e71efb1486c28d9409c3114b608f297695958c5604cf0918c0c70c56c79170260d73bde297e47cae1c404cca0a96eed51a2dc8f6f6ad862fe767ee5b5e68f231096825d935b809b3c1b5d9a2cd76cae22652bed7d263b42612ed717eba0aaf2a3989c4520c402d294285497a42736454ccb62fb3fdd073b91d4e2f6895fba9639ee78bd8ccb5bc3ce442fbeb9a1521314b82804293159fd7df4db66b78a06fe93e705bbc4e0d294a787c3cbf271b2acd15e7b4998c822f7724d3191e2265bd0d694dfb08063c9ff26a424884b46e26b5560d756c114ad1a7b92eee3f49dc2883b604ecc49c5ce92ce467778301326588a6577d44758e8d90710248d110dbf3d3d568779bd1c616369f84619dd089e38b51634f7c5d2ac9f1547a342877815a3864ad70b68b196bde9d810512f411d5235633ef65088788dfa3f152df7cee3a0803f6ac7ae192301dec07ff870ff3d7cf1c09cc9093263b225d01222376531007af9e6fb96e5ccaa8274f70adc786db7f33a20a752717b56b9a03bfce15a1aacd78c4adf8bdf41de8aaf421684c27526088c54322b5eea9175ef9c574c1f873218cc6f5df233892d7d5b0b0649ffc5a1c4909f2967a8c1f15b419ecde0448f071fa71e553f4f12cfa5e35022e75ddc5509edddc3de82d9097759b27f7c24776702e0ff64559281f796f11c1a9c77a156f390d2d18d1759b6be0347eb5bb4df912e9cfafa0db3be3243bacb378ca0946cece695a8099d6d7a24fc8bcca4c09695e3208f17f00bf404f6eb7852dfe73c163a19fd4e890e0edd5c7a727984b6f47a952373b95200bba061756c699c218b52c265b22bcd5cb24fdf056621fdd2126cede171e435320ca34e56e4c82a2afc9a59d3bf4647877658b6f23a6484f37acd8e2e184926993b5d1bbe6cdba64f486b4fb41bb94a644140540894f8fc14e585bc8beae88eabf926add289c82eb8cea99743baed842d76eb5c5573f7a7f3f2693960d6bfed697b5619afd942f41689dbd281a35e32478ba3a388dada82a2f4164481aa6a8f3946a84ea6186b20ce388c202be42996ae90feec7258d4a4a276353df84c96b160ac003d81cf395c0e61b0f0a9e692c32fab307f754cae5de7716a00cb96160cd39c931f4885d612862cecf6ba76502c9d266f97e4cf6cf0a16f787788e5471458a0dc24d3f2a28caa0f7ee00cf8bb113bd9c2b086037d765b5ec9a849df6f482fc01b48261e44299b0bc88321d837b6e2d221ebf2996b4140cd82e531de27f8de445f31c64469a5a145b031cd2569d19e27369c31ec63a989f0c9aaba7cc9d36d652001d40004f83a90d6465854f31bf15d1ef6bff4c02d60b948a37e3f50d250d7f85f545f507014aae5a35908283168c034f654acbb9d0fc261671d612e3d74261653e69e5e9cf7c8fda298b4d6c879cbbb97eafe648ba70150599089d65c1fdc0d5af879a2d46a443ac6dd21b33f72510742db4faf7eeb1580580ffe26e2d5ff", 0x1000}, 0x1006) r6 = socket$inet_tcp(0x2, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) setsockopt$inet_buf(r6, 0x0, 0x4023, &(0x7f0000000040), 0x0) 16:52:57 executing program 0: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0xc2000, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x3d, &(0x7f0000000180)="2ed81ed37e1627005e3a888282adb2d92d4f4967f4441e47dd05324ca62960963a33f39dd255b60e8352f8e47322d61f7b84604cd26467e1b8023727f928a7ce0245f47db9992b0e6e2276fb260a363570d54af1ae234af9734e38c71cc86e7c2f57026cca4c0c97fb6003579746f89af7ad3884e565fd42f1a05ee71c48527d6ef2f7ac84af7c56fd6da8bd4e753054ba68c1f1cf1b32ec3279047a4095ca98527581f80e64aa125d86073b506bfffe9317c4b2c7a70b1abb600c91c15e4cf94dc54c161c9adee5cea838d07296654b90cac5f9df93d350ab7dd0be418481a276d362ef30596dc15b2c0b68b5526a830a09dd4b23cbd2204e", 0xf9) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r2 = socket$inet(0x2, 0x3, 0x2) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f0000000040)={'raw\x00', 0x7c, "740e20dfa589444d3540b3a3f29f020aab09f5fa26cdd79723787199dbd4d854c1f515ce91286b807d492c4fbece195d171e20a97bd265516cf47df5e98195ddaf768560de91cd2a4fda4905944c93e288064e63baf9fc710ecf9347cb9094e61721756fdd226fcbdf5009c0599d59890a2b8da080ce202a30e682e6"}, &(0x7f0000000140)=0x90) setsockopt$inet_int(r2, 0x1f00000000000000, 0xd2, &(0x7f0000000000), 0x3c) 16:52:58 executing program 0: close(0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) io_setup(0x8, &(0x7f00000001c0)=0x0) io_submit(r0, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140), 0x5ee}]) [ 242.795007] 8021q: adding VLAN 0 to HW filter on device team0 16:52:58 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0xfffffffffffffffc) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) r1 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x0, 0x101000) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000180)=0x9, 0x4) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000012000/0x1000)=nil, 0x1000}, 0x1}) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) r3 = dup(r2) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000127c0)={'team0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r3, 0x4008af30, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$SIOCGIFMTU(r3, 0x8921, &(0x7f0000000000)) close(r2) 16:52:59 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0xfffffffffffffffc) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) r1 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x0, 0x101000) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000180)=0x9, 0x4) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000012000/0x1000)=nil, 0x1000}, 0x1}) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) r3 = dup(r2) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000127c0)={'team0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r3, 0x4008af30, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$SIOCGIFMTU(r3, 0x8921, &(0x7f0000000000)) close(r2) 16:53:00 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0xfffffffffffffffc) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) r1 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x0, 0x101000) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000180)=0x9, 0x4) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000012000/0x1000)=nil, 0x1000}, 0x1}) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) r3 = dup(r2) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000127c0)={'team0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r3, 0x4008af30, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$SIOCGIFMTU(r3, 0x8921, &(0x7f0000000000)) close(r2) 16:53:00 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0xfffffffffffffffc) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) r1 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x0, 0x101000) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000180)=0x9, 0x4) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000012000/0x1000)=nil, 0x1000}, 0x1}) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) r3 = dup(r2) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000127c0)={'team0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r3, 0x4008af30, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$SIOCGIFMTU(r3, 0x8921, &(0x7f0000000000)) close(r2) [ 244.906264] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.912880] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.919804] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.926409] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.934985] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready 16:53:01 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0xfffffffffffffffc) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) r1 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x0, 0x101000) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000180)=0x9, 0x4) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000012000/0x1000)=nil, 0x1000}, 0x1}) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) r3 = dup(r2) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000127c0)={'team0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r3, 0x4008af30, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$SIOCGIFMTU(r3, 0x8921, &(0x7f0000000000)) [ 245.703713] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 245.958843] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.965448] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.974097] device bridge_slave_0 entered promiscuous mode [ 246.330157] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.336836] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.345431] device bridge_slave_1 entered promiscuous mode [ 246.745856] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 247.146392] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 248.334116] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 248.769866] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 249.019220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.225677] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 249.232932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 249.610955] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 249.618197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 250.095567] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 250.237589] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 250.245770] team0: Port device team_slave_0 added [ 250.547845] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 250.556164] team0: Port device team_slave_1 added [ 250.822292] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 250.831582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 250.840523] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 251.009040] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 251.016386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 251.025279] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 251.280076] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 251.287867] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 251.296937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 251.390652] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 251.397215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 251.405200] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 251.596819] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 251.604624] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 251.613608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 251.854256] hrtimer: interrupt took 45293 ns 16:53:08 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x6, 0x4, 0x338d, 0x7}, 0xe) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r0, &(0x7f0000000040), &(0x7f00000000c0)}, 0x18) [ 252.744215] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.561974] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.568451] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.575485] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.582027] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.590779] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 254.597471] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 257.755595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.512243] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready 16:53:15 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x13e, &(0x7f0000000040)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, '>![', 0x108, 0x0, 0x0, @remote, @empty, {[], @gre={{}, {}, {}, {}, {}, {0x8, 0x6558, 0x0, "c53f9bc10b5218fbe6b21126ec5dfd4b51895eeabb8f1881b91980e74888ed41c49dc1d8bafc100ed78e3cc3b555dd235dba88b38388d4deb8c6d3795dcf58efc348b06d6b0f767c7520b7f6b0ca7326a75ba6ca9e1dadc8a4fecca66ad80f29bc3bb41a06f18c6f4f0b195587ebc281814d6457127854ef65964f36cbef44461b195c5e4c40fe1a57ae459fadf5b343cca1eeb3cdd0243195920ebeb7ebe99d397ef4d81cd3bca637aa32fbb0205fa83ce13b0277825ee8de7e55926a410d09a500e29e"}}}}}}}, &(0x7f00000001c0)) [ 259.340943] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 259.347528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 259.355412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 259.900158] 8021q: adding VLAN 0 to HW filter on device team0 [ 262.191213] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.755954] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 263.321508] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. [ 263.345403] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 263.352029] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 263.359807] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 263.393999] ================================================================== [ 263.401411] BUG: KMSAN: uninit-value in __vmx_flush_tlb+0x755/0x790 [ 263.407844] CPU: 0 PID: 7531 Comm: syz-executor3 Not tainted 4.19.0-rc4+ #63 [ 263.415048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 263.424417] Call Trace: [ 263.427032] dump_stack+0x306/0x460 [ 263.430687] ? __vmx_flush_tlb+0x755/0x790 [ 263.434974] kmsan_report+0x1a3/0x2d0 [ 263.438843] __msan_warning+0x7c/0xe0 [ 263.442705] __vmx_flush_tlb+0x755/0x790 [ 263.446810] vmx_flush_tlb+0x94/0xb0 [ 263.450555] ? vmx_set_rflags+0x740/0x740 [ 263.454737] kvm_mmu_load+0x1656/0x3460 [ 263.458774] ? vmx_set_cr0+0x3510/0x3510 [ 263.462883] kvm_arch_vcpu_ioctl_run+0x879e/0x10a20 [ 263.468073] ? task_kmsan_context_state+0x6b/0x120 [ 263.473059] ? __msan_get_context_state+0x9/0x30 [ 263.477888] ? INIT_INT+0xc/0x30 [ 263.481284] ? task_kmsan_context_state+0x6b/0x120 [ 263.486256] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 263.491754] ? kmsan_set_origin_inline+0x6b/0x120 [ 263.496641] ? __msan_poison_alloca+0x17a/0x210 [ 263.501363] ? put_pid+0x71/0x410 [ 263.504868] ? kvm_vcpu_ioctl+0x20a4/0x20b0 [ 263.509243] ? put_pid+0x1a9/0x410 [ 263.512829] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 263.518230] ? get_task_pid+0x17b/0x270 [ 263.522249] kvm_vcpu_ioctl+0x11a7/0x20b0 [ 263.526472] ? do_vfs_ioctl+0x18a/0x2810 [ 263.530566] ? __se_sys_ioctl+0x1da/0x270 [ 263.534774] ? kvm_vm_release+0x90/0x90 [ 263.538933] do_vfs_ioctl+0xcf3/0x2810 [ 263.542878] ? security_file_ioctl+0x92/0x200 [ 263.547443] __se_sys_ioctl+0x1da/0x270 [ 263.551478] __x64_sys_ioctl+0x4a/0x70 [ 263.555417] do_syscall_64+0xbe/0x100 [ 263.559256] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 263.564467] RIP: 0033:0x457579 [ 263.567683] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 263.586609] RSP: 002b:00007f39033eec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 263.594354] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457579 [ 263.601664] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 263.609001] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 263.616293] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f39033ef6d4 [ 263.623590] R13: 00000000004c003b R14: 00000000004d0108 R15: 00000000ffffffff [ 263.630904] [ 263.632554] Local variable description: ----error.i.i.i@__vmx_flush_tlb [ 263.639319] Variable was created at: [ 263.643083] __vmx_flush_tlb+0x103/0x790 [ 263.647194] vmx_flush_tlb+0x94/0xb0 [ 263.650916] ================================================================== [ 263.658322] Disabling lock debugging due to kernel taint [ 263.663833] Kernel panic - not syncing: panic_on_warn set ... [ 263.663833] [ 263.671246] CPU: 0 PID: 7531 Comm: syz-executor3 Tainted: G B 4.19.0-rc4+ #63 [ 263.679832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 263.689199] Call Trace: [ 263.691842] dump_stack+0x306/0x460 [ 263.695538] panic+0x54c/0xafa [ 263.698809] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 263.704293] kmsan_report+0x2cd/0x2d0 [ 263.708158] __msan_warning+0x7c/0xe0 [ 263.712044] __vmx_flush_tlb+0x755/0x790 [ 263.716194] vmx_flush_tlb+0x94/0xb0 [ 263.719947] ? vmx_set_rflags+0x740/0x740 [ 263.724333] kvm_mmu_load+0x1656/0x3460 [ 263.728385] ? vmx_set_cr0+0x3510/0x3510 [ 263.732535] kvm_arch_vcpu_ioctl_run+0x879e/0x10a20 [ 263.737742] ? task_kmsan_context_state+0x6b/0x120 [ 263.742723] ? __msan_get_context_state+0x9/0x30 [ 263.747533] ? INIT_INT+0xc/0x30 [ 263.750934] ? task_kmsan_context_state+0x6b/0x120 [ 263.755906] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 263.761428] ? kmsan_set_origin_inline+0x6b/0x120 [ 263.766310] ? __msan_poison_alloca+0x17a/0x210 [ 263.771036] ? put_pid+0x71/0x410 [ 263.774569] ? kvm_vcpu_ioctl+0x20a4/0x20b0 [ 263.778936] ? put_pid+0x1a9/0x410 [ 263.782508] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 263.787922] ? get_task_pid+0x17b/0x270 [ 263.791939] kvm_vcpu_ioctl+0x11a7/0x20b0 [ 263.796170] ? do_vfs_ioctl+0x18a/0x2810 [ 263.800266] ? __se_sys_ioctl+0x1da/0x270 [ 263.804445] ? kvm_vm_release+0x90/0x90 [ 263.808500] do_vfs_ioctl+0xcf3/0x2810 [ 263.812438] ? security_file_ioctl+0x92/0x200 [ 263.816967] __se_sys_ioctl+0x1da/0x270 [ 263.820986] __x64_sys_ioctl+0x4a/0x70 [ 263.824896] do_syscall_64+0xbe/0x100 [ 263.828790] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 263.834196] RIP: 0033:0x457579 [ 263.837416] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 263.856335] RSP: 002b:00007f39033eec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 263.864112] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457579 [ 263.871406] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 263.878685] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 263.879846] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.885969] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f39033ef6d4 [ 263.885983] R13: 00000000004c003b R14: 00000000004d0108 R15: 00000000ffffffff [ 263.892844] Kernel Offset: disabled [ 263.910989] Rebooting in 86400 seconds..