[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 16.577212] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 21.851804] random: sshd: uninitialized urandom read (32 bytes read) [ 22.143045] random: sshd: uninitialized urandom read (32 bytes read) [ 22.683579] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.15.194' (ECDSA) to the list of known hosts. [ 28.114383] random: sshd: uninitialized urandom read (32 bytes read) 2018/08/08 06:16:59 fuzzer started [ 29.301219] random: cc1: uninitialized urandom read (8 bytes read) 2018/08/08 06:17:01 dialing manager at 10.128.0.26:35723 2018/08/08 06:17:05 syscalls: 1 2018/08/08 06:17:05 code coverage: enabled 2018/08/08 06:17:05 comparison tracing: enabled 2018/08/08 06:17:05 setuid sandbox: enabled 2018/08/08 06:17:05 namespace sandbox: enabled 2018/08/08 06:17:05 fault injection: enabled 2018/08/08 06:17:05 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/08/08 06:17:05 net packed injection: enabled 2018/08/08 06:17:05 net device setup: enabled [ 35.733207] random: crng init done 06:18:35 executing program 0: ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000100)="88cc0c6953b06f5a") seccomp(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50a4a}]}) clock_gettime(0x3, &(0x7f0000000000)) 06:18:35 executing program 1: seccomp(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x50b1a}]}) sigaltstack(&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)) 06:18:35 executing program 7: seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x800006, 0x0, 0x0, 0x5072d}]}) write$P9_RLOCK(0xffffffffffffffff, &(0x7f0000000100)={0x8}, 0x8) 06:18:35 executing program 4: dup(0xffffffffffffffff) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, &(0x7f0000000000)) seccomp(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50a4a}]}) linkat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0) 06:18:35 executing program 5: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.net/syz1\x00', 0x200002, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)={'#! ', './file0/file0'}, 0x11) seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x400800050973}]}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x0) 06:18:35 executing program 6: seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x800006, 0x0, 0x0, 0x5072d}]}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000006540)={0x0, 0x0, &(0x7f0000006100), 0x0, &(0x7f0000006480)}, 0x0) 06:18:35 executing program 2: seccomp(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x50b1a}]}) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000080)={'erspan0\x00', {0x2, 0x0, @remote}}) 06:18:35 executing program 3: seccomp(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50a4a}]}) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000080)) [ 124.986957] IPVS: ftp: loaded support on port[0] = 21 [ 125.004079] IPVS: ftp: loaded support on port[0] = 21 [ 125.004989] IPVS: ftp: loaded support on port[0] = 21 [ 125.040474] IPVS: ftp: loaded support on port[0] = 21 [ 125.043820] IPVS: ftp: loaded support on port[0] = 21 [ 125.063264] IPVS: ftp: loaded support on port[0] = 21 [ 125.079002] IPVS: ftp: loaded support on port[0] = 21 [ 125.083276] IPVS: ftp: loaded support on port[0] = 21 [ 126.917643] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.924103] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.942580] device bridge_slave_0 entered promiscuous mode [ 126.964105] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.970578] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.979708] device bridge_slave_0 entered promiscuous mode [ 126.987914] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.994315] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.002895] device bridge_slave_0 entered promiscuous mode [ 127.021945] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.028459] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.049748] device bridge_slave_0 entered promiscuous mode [ 127.063200] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.069644] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.081308] device bridge_slave_0 entered promiscuous mode [ 127.100349] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.106836] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.125723] device bridge_slave_1 entered promiscuous mode [ 127.135094] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.141496] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.151339] device bridge_slave_1 entered promiscuous mode [ 127.163968] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.170353] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.177564] device bridge_slave_0 entered promiscuous mode [ 127.189960] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.196343] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.205130] device bridge_slave_0 entered promiscuous mode [ 127.215426] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.221825] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.231312] device bridge_slave_1 entered promiscuous mode [ 127.252434] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.258848] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.272907] device bridge_slave_1 entered promiscuous mode [ 127.282460] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.288847] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.305063] device bridge_slave_1 entered promiscuous mode [ 127.314150] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.320588] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.327897] device bridge_slave_1 entered promiscuous mode [ 127.335649] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.342032] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.350106] device bridge_slave_1 entered promiscuous mode [ 127.360427] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 127.369215] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 127.377971] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 127.387478] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 127.394692] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.401069] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.439587] device bridge_slave_0 entered promiscuous mode [ 127.451111] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 127.463046] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 127.474704] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 127.483321] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 127.493080] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 127.500435] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 127.507942] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 127.574102] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 127.582010] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.588388] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.610565] device bridge_slave_1 entered promiscuous mode [ 127.637765] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 127.657173] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 127.754765] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 127.772165] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 127.831433] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 127.855704] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 127.866256] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 127.878024] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 127.892232] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 127.911945] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 127.961120] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 127.982929] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 127.998821] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 128.038527] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 128.049315] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 128.070876] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 128.144942] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 128.204999] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 128.238971] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 128.361508] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 128.453515] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 128.473624] team0: Port device team_slave_0 added [ 128.513900] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 128.520796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 128.534089] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 128.559644] team0: Port device team_slave_0 added [ 128.585489] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 128.600232] team0: Port device team_slave_1 added [ 128.609111] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 128.622129] team0: Port device team_slave_0 added [ 128.634380] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 128.641665] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 128.654381] team0: Port device team_slave_0 added [ 128.666929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 128.679327] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 128.696264] team0: Port device team_slave_1 added [ 128.708512] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 128.723125] team0: Port device team_slave_0 added [ 128.743138] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 128.750168] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 128.757470] team0: Port device team_slave_1 added [ 128.772041] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 128.788139] team0: Port device team_slave_1 added [ 128.803300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 128.823641] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 128.837263] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 128.845959] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 128.853264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 128.861344] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 128.878009] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 128.894335] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 128.906954] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 128.914323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 128.922370] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 128.931834] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 128.939301] team0: Port device team_slave_0 added [ 128.945182] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 128.952506] team0: Port device team_slave_0 added [ 128.958387] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 128.966409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 128.978972] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 128.997000] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 129.004532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 129.017423] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 129.026956] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 129.035080] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 129.050158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 129.065507] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 129.073052] team0: Port device team_slave_1 added [ 129.082017] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 129.089426] team0: Port device team_slave_1 added [ 129.103917] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 129.112433] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 129.125776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 129.150340] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 129.159919] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 129.167205] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 129.175042] team0: Port device team_slave_1 added [ 129.186347] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 129.195425] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 129.205519] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 129.214157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 129.232468] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 129.257421] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 129.268477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 129.276436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 129.284399] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 129.294357] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 129.302788] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 129.309886] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 129.321003] team0: Port device team_slave_0 added [ 129.328301] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 129.340926] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 129.348637] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 129.379340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 129.396794] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 129.408450] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 129.416051] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 129.424095] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 129.432025] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 129.439770] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 129.447476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 129.455878] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 129.463317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 129.471405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 129.493621] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 129.509510] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 129.517232] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 129.540244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 129.569250] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 129.584729] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 129.592439] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 129.600405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 129.608980] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 129.616752] team0: Port device team_slave_1 added [ 129.633258] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 129.646764] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 129.654563] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 129.669231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 129.699516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 129.716357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 129.724600] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 129.731711] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 129.740758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 129.751147] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 129.770627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 129.784370] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 129.811185] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 129.824022] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 129.857570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 129.881108] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 129.915826] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 129.938329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 129.968120] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 129.978049] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 129.991150] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 130.105901] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 130.113367] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 130.126249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 130.210760] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 130.218902] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 130.233933] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 130.732097] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.738531] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.745216] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.751600] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.777586] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 130.803424] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.809819] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.816470] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.822840] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.860617] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 130.873796] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.880180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.886861] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.893695] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.907751] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 130.921982] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.928380] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.935024] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.941400] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.983701] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 130.996270] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.002878] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.009570] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.015956] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.043350] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 131.179924] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.186339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.193041] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.199436] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.220400] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 131.233142] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.239571] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.246218] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.252591] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.289460] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 131.402439] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.408871] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.415579] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.421961] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.452723] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 131.546942] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 131.560420] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 131.571014] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 131.578506] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 131.586133] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 131.593308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 131.600657] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 131.607926] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 135.366202] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.380955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.403226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.421296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.494616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.736372] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.765181] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 135.785650] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 135.812106] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 135.857921] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 135.867054] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.908428] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 135.943067] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.122110] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 136.175459] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 136.181680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 136.193957] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 136.211957] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 136.225013] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 136.231243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 136.245963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 136.270056] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 136.289835] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 136.319355] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 136.332768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 136.340462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 136.368812] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 136.378965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 136.403631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 136.424254] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 136.433611] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 136.586527] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 136.593050] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 136.605034] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 136.636603] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.664516] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.709252] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.730366] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.759649] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.830313] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 136.836590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 136.848064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 136.898271] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 136.904476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 136.914409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 137.084788] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.279563] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.355762] 8021q: adding VLAN 0 to HW filter on device team0 06:18:50 executing program 3: dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) seccomp(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50a4d}]}) keyctl$set_reqkey_keyring(0xe, 0x0) 06:18:50 executing program 0: dup(0xffffffffffffffff) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, &(0x7f0000000080)) seccomp(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50a4a}]}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f00000000c0)=0xc) 06:18:50 executing program 7: seccomp(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x50dca}]}) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000180), 0x0) 06:18:50 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x4000006, 0x0, 0x0, 0x50f8d}]}) ioctl$TCGETA(0xffffffffffffffff, 0x5405, &(0x7f00000001c0)) 06:18:50 executing program 3: seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x800006, 0x0, 0x0, 0x5072d}]}) openat$cgroup(0xffffffffffffff9c, &(0x7f0000000200)='syz0\x00', 0x200002, 0x0) 06:18:50 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) seccomp(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x4000006, 0x0, 0x0, 0x50f8d}]}) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000380)) 06:18:50 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x50dca}]}) mount$9p_virtio(&(0x7f00000005c0)='.[vmnet1:\x00', &(0x7f0000000600)='./file0/file1\x00', &(0x7f0000000640)='9p\x00', 0x0, &(0x7f0000000680)={'trans=virtio,'}) 06:18:50 executing program 7: seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x800006, 0x0, 0x0, 0x5072d}]}) setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@random={'system.', 'vboxnet0\x00'}, &(0x7f0000000100)='em1selinuxselinux*,mime_typemd5sum-]$/vboxnet0\x00', 0x2f, 0x0) 06:18:50 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x800006, 0x0, 0x0, 0x5072d}]}) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) 06:18:50 executing program 1: seccomp(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x50dca}]}) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x0) 06:18:50 executing program 3: open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f00000000c0)={0x15, 0x65, 0xffff, 0x0, 0x8, '9P2000.L'}, 0x15) seccomp(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50a4a}]}) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f00000001c0)={{0x2, 0x0, @multicast1}, {0x0, @remote}, 0x0, {0x2, 0x0, @remote}, 'veth0_to_bridge\x00'}) 06:18:50 executing program 0: seccomp(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x50dca}]}) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000500)={'trans=unix,'}) 06:18:50 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x50dca}]}) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000080)={'filter\x00'}, &(0x7f0000000000)=0x78) 06:18:50 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x4000006, 0x0, 0x0, 0x50f8d}]}) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f00000000c0)) 06:18:50 executing program 0: seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x400800050973}]}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x0) 06:18:50 executing program 7: seccomp(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x50dca}]}) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000380)={'filter\x00'}, &(0x7f0000000400)=0x24) 06:18:50 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x0, 0x0) accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000080)=0x1c) seccomp(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x50dca}]}) shmctl$SHM_LOCK(0x0, 0xb) 06:18:50 executing program 6: 06:18:50 executing program 2: 06:18:50 executing program 3: 06:18:50 executing program 1: 06:18:50 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000280)={0x0, 0x8000}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000003c0)={r1, 0x1, 0x6, @link_local}, 0x10) 06:18:50 executing program 3: seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x800006, 0x0, 0x0, 0x5072d}]}) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000080)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000140)) 06:18:50 executing program 2: dup(0xffffffffffffffff) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, &(0x7f0000000080)) seccomp(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50a4a}]}) getgroups(0x0, &(0x7f0000000300)) 06:18:51 executing program 6: dup(0xffffffffffffffff) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, &(0x7f0000000080)) seccomp(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50a4a}]}) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)) 06:18:51 executing program 0: 06:18:51 executing program 4: [ 140.036308] device team0 entered promiscuous mode [ 140.041372] device team_slave_0 entered promiscuous mode [ 140.047081] device team_slave_1 entered promiscuous mode 06:18:51 executing program 5: 06:18:51 executing program 7: 06:18:51 executing program 3: [ 140.147794] device team0 left promiscuous mode [ 140.152504] device team_slave_0 left promiscuous mode [ 140.157872] device team_slave_1 left promiscuous mode 06:18:51 executing program 6: 06:18:51 executing program 2: 06:18:51 executing program 3: 06:18:51 executing program 0: ioctl$VT_GETMODE(0xffffffffffffffff, 0x5601, &(0x7f00000000c0)) openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x0, 0x0) seccomp(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50a4a}]}) mount(&(0x7f0000000200)='.\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, 0x0) 06:18:51 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x800006, 0x0, 0x0, 0x5072d}]}) getsockname$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs, &(0x7f0000000180)=0x6e) 06:18:51 executing program 1: 06:18:51 executing program 5: 06:18:51 executing program 7: 06:18:51 executing program 3: 06:18:51 executing program 2: 06:18:51 executing program 1: 06:18:51 executing program 6: 06:18:51 executing program 5: 06:18:51 executing program 7: 06:18:51 executing program 3: 06:18:51 executing program 2: 06:18:51 executing program 0: 06:18:51 executing program 4: 06:18:51 executing program 5: 06:18:51 executing program 1: 06:18:51 executing program 7: 06:18:51 executing program 6: 06:18:51 executing program 3: 06:18:51 executing program 2: 06:18:51 executing program 4: 06:18:51 executing program 5: 06:18:51 executing program 0: 06:18:51 executing program 1: 06:18:51 executing program 6: 06:18:51 executing program 3: 06:18:51 executing program 2: 06:18:51 executing program 7: 06:18:51 executing program 0: 06:18:51 executing program 4: 06:18:51 executing program 5: 06:18:51 executing program 1: 06:18:51 executing program 6: 06:18:51 executing program 0: 06:18:51 executing program 7: 06:18:51 executing program 2: 06:18:51 executing program 5: 06:18:51 executing program 4: 06:18:51 executing program 3: 06:18:51 executing program 0: 06:18:51 executing program 2: 06:18:51 executing program 6: 06:18:51 executing program 5: 06:18:51 executing program 1: 06:18:51 executing program 7: 06:18:51 executing program 4: 06:18:51 executing program 3: 06:18:52 executing program 3: 06:18:52 executing program 5: 06:18:52 executing program 7: 06:18:52 executing program 2: 06:18:52 executing program 0: 06:18:52 executing program 1: 06:18:52 executing program 6: 06:18:52 executing program 4: 06:18:52 executing program 6: 06:18:52 executing program 3: 06:18:52 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x200050d4f}]}) pause() 06:18:52 executing program 1: seccomp(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x4000006, 0x0, 0x0, 0x50f8d}]}) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f00000000c0), 0x4) 06:18:52 executing program 0: seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x800006, 0x0, 0x0, 0x5072d}]}) prctl$seccomp(0x16, 0x0, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) 06:18:52 executing program 2: seccomp(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x4000006, 0x0, 0x0, 0x50f8d}]}) clock_getres(0x0, &(0x7f0000000000)) 06:18:52 executing program 7: seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x4000006, 0x0, 0x0, 0x50f8d}]}) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) 06:18:52 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x400, 0x0) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000040)={0x5000, 0xd000, 0x6, 0xe485, 0x4}) r1 = socket$inet(0x10, 0x2, 0x6) r2 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond, 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) sendmsg(r1, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000006ff0)=[{&(0x7f0000005000)="10000000150061dd18c84c16290c729b", 0x10}], 0x1, &(0x7f0000001f88)}, 0x0) recvmsg(r1, &(0x7f0000005fc8)={&(0x7f0000035ff8)=@un=@abs, 0x8, &(0x7f0000027000), 0x0, &(0x7f000002b000)=""/12, 0xc}, 0x0) 06:18:52 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x30080) syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x3, 0x280000) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='/dev/kvm\x00', 0xffffffffffffff9c}, 0x10) ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, &(0x7f0000001000)=ANY=[]) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x8000, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0xaaaaaaaaaaaacbc, 0x0, &(0x7f0000000000), 0x100001ab) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x220000, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x3f, &(0x7f0000000140)="d6327b85d261917b66fd0cfa979743e59627577971a110627f91981150f5905e30dbc07b1efc43bbd059d045609b54e64855e74769c299db41ec40f06df3d952291f9e90e273e45b84fd7b6de67973b5625edd300a202fa5c1914b70448c41a0610e813323558e0dc17b58c4a1c9e5bb69ae83f95432d6e11b63e45053bb7e24248bd86500fccde7738b582cffd706193b4f789a433de20e6c4fb56097c2c91ae22e005d4639461c28f0a43c9268d461765fcda6b26ec82a62b8f095a0eb605b6857f93d5e026b808c71719648ce1f8e18e799dadf", 0xd5) ioctl$KVM_RUN(r3, 0xae80, 0x0) 06:18:52 executing program 6: r0 = socket$inet6(0xa, 0x1000000000003, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x400000000040401, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000180)="eb3c906d6b66732e6661740002046c260200027410f0", 0x16}], 0x0, &(0x7f0000000200)) open(&(0x7f0000000000)='./file1\x00', 0x20000, 0x4) [ 141.320346] ------------[ cut here ]------------ [ 141.325257] user requested TSC rate below hardware speed [ 141.330853] WARNING: CPU: 0 PID: 6656 at arch/x86/kvm/x86.c:1414 kvm_set_tsc_khz+0x4f1/0x540 [ 141.339455] Kernel panic - not syncing: panic_on_warn set ... [ 141.339455] [ 141.346851] CPU: 0 PID: 6656 Comm: syz-executor3 Not tainted 4.18.0-rc8-next-20180807+ #33 [ 141.355272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 141.364645] Call Trace: [ 141.367255] dump_stack+0x1c9/0x2b4 [ 141.370903] ? dump_stack_print_info.cold.2+0x52/0x52 [ 141.376120] panic+0x238/0x4e7 [ 141.379329] ? add_taint.cold.5+0x16/0x16 [ 141.383504] ? __warn.cold.8+0x148/0x1ba [ 141.387586] ? kvm_set_tsc_khz+0x4f1/0x540 [ 141.391835] __warn.cold.8+0x163/0x1ba [ 141.395748] ? kvm_set_tsc_khz+0x4f1/0x540 [ 141.399998] report_bug+0x252/0x2d0 [ 141.403635] do_error_trap+0x1fc/0x4d0 [ 141.407542] ? math_error+0x3e0/0x3e0 [ 141.411363] ? vprintk_default+0x28/0x30 [ 141.415436] ? vprintk_func+0x81/0x117 [ 141.419331] ? printk+0xa7/0xcf [ 141.422627] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 141.427489] do_invalid_op+0x1b/0x20 [ 141.431253] invalid_op+0x14/0x20 [ 141.434731] RIP: 0010:kvm_set_tsc_khz+0x4f1/0x540 [ 141.439603] Code: c7 c7 40 1a 02 87 c6 05 77 b6 79 07 01 e8 67 6a 3b 00 0f 0b e9 ed fd ff ff e8 6b d1 70 00 48 c7 c7 e0 19 02 87 e8 4f 6a 3b 00 <0f> 0b bb ff ff ff ff e9 d0 fd ff ff 89 45 d0 e8 4b cf af 00 8b 45 [ 141.458527] RSP: 0018:ffff88018fd2f398 EFLAGS: 00010286 [ 141.463911] RAX: 0000000000000000 RBX: 0000000000231864 RCX: ffffc90007e44000 [ 141.471191] RDX: 000000000000324f RSI: ffffffff8163ec91 RDI: ffff88018fd2f088 [ 141.478482] RBP: ffff88018fd2f3d8 R08: ffff8801af5e2580 R09: fffffbfff0ff1288 [ 141.485783] R10: fffffbfff0ff1288 R11: ffffffff87f89443 R12: ffff88018f7d0040 [ 141.493166] R13: 000000000023124e R14: 0000000000231864 R15: 0000000000000000 [ 141.500474] ? vprintk_func+0x81/0x117 [ 141.504376] ? kvm_set_tsc_khz+0x4f1/0x540 [ 141.508625] kvm_arch_vcpu_init+0x269/0x830 [ 141.512955] kvm_vcpu_init+0x2fb/0x420 [ 141.516851] ? vcpu_stat_get+0x310/0x310 [ 141.520918] ? kvm_vm_ioctl+0x47e/0x1d80 [ 141.524982] vmx_create_vcpu+0x14c/0x28b0 [ 141.529150] ? refill_pi_state_cache.part.8+0x320/0x320 [ 141.534546] ? vmx_set_nested_state+0xea0/0xea0 [ 141.539234] ? get_futex_value_locked+0xcb/0xf0 [ 141.543911] ? kasan_check_write+0x14/0x20 [ 141.548159] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 141.553102] ? wait_for_completion+0x8d0/0x8d0 [ 141.557695] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 141.562905] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 141.568478] ? drop_futex_key_refs.isra.14+0x6d/0xe0 [ 141.573592] kvm_arch_vcpu_create+0xe5/0x220 [ 141.578003] ? kvm_arch_vcpu_free+0x90/0x90 [ 141.582340] kvm_vm_ioctl+0x488/0x1d80 [ 141.586265] ? drop_futex_key_refs.isra.14+0x6d/0xe0 [ 141.591384] ? futex_wake+0x304/0x760 [ 141.595198] ? kvm_set_memory_region+0x50/0x50 [ 141.599807] ? lock_acquire+0x1e4/0x540 [ 141.603796] ? is_bpf_text_address+0xae/0x170 [ 141.608305] ? lock_downgrade+0x8f0/0x8f0 [ 141.612477] ? do_futex+0x249/0x27d0 [ 141.616208] ? trace_hardirqs_on+0x10/0x10 [ 141.620452] ? rcu_is_watching+0x8c/0x150 [ 141.624610] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 141.629309] ? exit_robust_list+0x290/0x290 [ 141.633651] ? lock_acquire+0x1e4/0x540 [ 141.637646] ? __fget+0x4ac/0x740 [ 141.641109] ? lock_downgrade+0x8f0/0x8f0 [ 141.645265] ? lock_release+0xa30/0xa30 [ 141.649257] ? usercopy_warn+0x120/0x120 [ 141.653333] ? save_stack+0xa9/0xd0 [ 141.656965] ? save_stack+0x43/0xd0 [ 141.660607] ? __fget+0x4d5/0x740 [ 141.664074] ? ksys_dup3+0x690/0x690 [ 141.667802] ? mpi_free.cold.1+0x19/0x19 [ 141.671881] ? kasan_check_write+0x14/0x20 [ 141.676144] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 141.681700] ? bpf_find_raw_tracepoint+0x87/0xb0 [ 141.686484] ? kvm_set_memory_region+0x50/0x50 [ 141.691077] do_vfs_ioctl+0x1de/0x1720 [ 141.694976] ? lock_release+0xa30/0xa30 [ 141.698963] ? check_same_owner+0x340/0x340 [ 141.703306] ? ioctl_preallocate+0x300/0x300 [ 141.707736] ? __fget_light+0x2f7/0x440 [ 141.711750] ? fget_raw+0x20/0x20 [ 141.715222] ? __x64_sys_futex+0x47f/0x6a0 [ 141.719472] ? do_futex+0x27d0/0x27d0 [ 141.723280] ? security_file_ioctl+0x94/0xc0 [ 141.727710] ksys_ioctl+0xa9/0xd0 [ 141.731183] __x64_sys_ioctl+0x73/0xb0 [ 141.735083] do_syscall_64+0x1b9/0x820 [ 141.738987] ? finish_task_switch+0x1d3/0x870 [ 141.743528] ? syscall_return_slowpath+0x5e0/0x5e0 [ 141.748481] ? syscall_return_slowpath+0x31d/0x5e0 [ 141.753422] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 141.758453] ? __switch_to_asm+0x34/0x70 [ 141.762535] ? __switch_to_asm+0x34/0x70 [ 141.766601] ? __switch_to_asm+0x40/0x70 [ 141.770669] ? __switch_to_asm+0x34/0x70 [ 141.774742] ? __switch_to_asm+0x40/0x70 [ 141.778805] ? __switch_to_asm+0x34/0x70 [ 141.782884] ? __switch_to_asm+0x40/0x70 [ 141.786959] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 141.791821] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 141.797015] RIP: 0033:0x456cb9 [ 141.800217] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 141.819135] RSP: 002b:00007f17aa44fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 141.826865] RAX: ffffffffffffffda RBX: 00007f17aa4506d4 RCX: 0000000000456cb9 [ 141.834149] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000014 [ 141.841429] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 141.848803] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 141.856078] R13: 00000000004ce2c0 R14: 00000000004c4c57 R15: 0000000000000000 [ 141.863674] Dumping ftrace buffer: [ 141.867217] (ftrace buffer empty) [ 141.870908] Kernel Offset: disabled [ 141.874569] Rebooting in 86400 seconds..