[ 57.146084] audit: type=1800 audit(1538969855.178:27): pid=6087 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 58.562439] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 61.897579] random: sshd: uninitialized urandom read (32 bytes read) [ 62.246085] random: sshd: uninitialized urandom read (32 bytes read) [ 64.724468] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.51' (ECDSA) to the list of known hosts. [ 70.472593] random: sshd: uninitialized urandom read (32 bytes read) 2018/10/08 03:37:50 fuzzer started [ 74.973958] random: cc1: uninitialized urandom read (8 bytes read) 2018/10/08 03:37:55 dialing manager at 10.128.0.26:36867 2018/10/08 03:37:55 syscalls: 1 2018/10/08 03:37:55 code coverage: enabled 2018/10/08 03:37:55 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/10/08 03:37:55 setuid sandbox: enabled 2018/10/08 03:37:55 namespace sandbox: enabled 2018/10/08 03:37:55 Android sandbox: /sys/fs/selinux/policy does not exist 2018/10/08 03:37:55 fault injection: enabled 2018/10/08 03:37:55 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/10/08 03:37:55 net packed injection: enabled 2018/10/08 03:37:55 net device setup: enabled [ 79.098345] random: crng init done 03:39:53 executing program 0: seccomp(0x1, 0x0, &(0x7f0000000100)) [ 196.362349] IPVS: ftp: loaded support on port[0] = 21 [ 198.931467] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.938131] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.946905] device bridge_slave_0 entered promiscuous mode [ 199.092372] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.098878] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.107456] device bridge_slave_1 entered promiscuous mode [ 199.247287] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 199.383887] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready 03:39:57 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x6) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000200)) openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000740), &(0x7f0000000780)=0x4) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000400)={0x0, 0x40}, &(0x7f0000000440)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300), 0x3}, 0xa0) ioctl$KVM_GET_NESTED_STATE(r1, 0xc080aebe, &(0x7f0000000ec0)={0x0, 0x0, 0x2080}) timer_settime(0x0, 0x0, &(0x7f0000000180), &(0x7f0000000600)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000280)=r0, 0x4) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000007c0)=0x800000000000002, 0x4) bind$inet(r2, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10) ioctl$int_in(r2, 0x5421, &(0x7f00000002c0)=0x6) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f0000000080), 0x4) sendto$inet(r2, &(0x7f0000000380)="975fa5356beb7f24656b0c7c0e812390aa2ba3dab91c5db1e37e85fa7edc15a93b35c76ceacb6ec60febc38e141f54bc3cb4b0e1a0150ef4e9ad4fb740a2e2d9c39154f5dfd26d38f3e6183a562adf9ddfc2", 0x52, 0x0, &(0x7f000069affb)={0x2, 0x4e20, @loopback}, 0x10) mq_timedsend(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, &(0x7f00000000c0)={0x77359400}) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x8000, 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000140)={0x77359400}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000100)=""/24, 0x18, 0x0, 0x0) getcwd(&(0x7f0000000180)=""/118, 0x225) unshare(0x800) sendto$inet(r2, &(0x7f00004b3fff), 0x0, 0x0, &(0x7f00002b4000)={0x2, 0x4e20, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) [ 200.008149] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 200.202006] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 200.375570] IPVS: ftp: loaded support on port[0] = 21 [ 200.437794] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 200.450184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 200.634637] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 200.641713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 201.340489] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 201.348637] team0: Port device team_slave_0 added [ 201.502248] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 201.510215] team0: Port device team_slave_1 added [ 201.746785] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 201.754072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 201.763136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 201.923997] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 201.931042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 201.940191] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 202.168622] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 202.176281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 202.185538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 202.397303] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 202.405062] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 202.413888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 204.340690] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.347418] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.356106] device bridge_slave_0 entered promiscuous mode [ 204.546909] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.553634] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.562038] device bridge_slave_1 entered promiscuous mode [ 204.719732] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready 03:40:02 executing program 2: recvmsg$kcm(0xffffffffffffffff, &(0x7f00000025c0)={&(0x7f0000002240)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x1ff, &(0x7f0000000180), 0x0, &(0x7f00000024c0)=""/206, 0xce}, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sockstat\x00') preadv(r1, &(0x7f00000017c0), 0xef, 0x0) [ 204.941314] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 205.117023] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.123704] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.131254] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.137942] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.147120] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 205.432552] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 205.671055] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 205.865188] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 206.008936] IPVS: ftp: loaded support on port[0] = 21 [ 206.166295] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 206.175102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 207.217914] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 207.226114] team0: Port device team_slave_0 added [ 207.498966] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 207.507150] team0: Port device team_slave_1 added [ 207.821152] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 207.828328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 207.837297] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 208.113982] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 208.121046] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 208.129921] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 208.497469] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 208.505340] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 208.514613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 208.843102] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 208.851072] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 208.860387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 210.454741] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.461239] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.469998] device bridge_slave_0 entered promiscuous mode [ 210.802259] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.808759] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.817707] device bridge_slave_1 entered promiscuous mode [ 211.072064] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 211.317669] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 212.167349] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 212.289033] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.295667] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.302764] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.309242] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.318156] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 212.336435] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 212.523828] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 212.552873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 212.623287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 212.843814] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 212.850929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 03:40:11 executing program 3: dup(0xffffffffffffff9c) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00', 0xffffffffffffffff, 0x4c00000000000000}, &(0x7f0000001fee)="520972757374e363757367725665783a4465", 0x0) [ 213.827902] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 213.836259] team0: Port device team_slave_0 added [ 214.236583] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 214.244721] team0: Port device team_slave_1 added [ 214.267493] IPVS: ftp: loaded support on port[0] = 21 [ 214.587896] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 214.595108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 214.604074] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 214.956653] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 214.963898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 214.972663] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 215.232544] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 215.240158] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 215.249317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 215.599293] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 215.607248] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 215.616600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 218.110190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.233075] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 219.797003] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.803627] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.810600] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.817249] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.826294] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 220.020717] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.027377] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.036000] device bridge_slave_0 entered promiscuous mode [ 220.325127] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.331649] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.340419] device bridge_slave_1 entered promiscuous mode [ 220.348073] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 220.612418] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 220.618877] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 220.627362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 220.726525] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 221.018465] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 222.066222] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.092341] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 222.528379] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 222.856162] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 222.863303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 223.155344] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 223.162586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 03:40:21 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes-fixed-time)\x00'}, 0x58) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x80001, 0xfffffffffffffffe) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000fca000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x1) dup2(r1, r2) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000000340), &(0x7f0000000280)) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="799743f57fc7c254f10b4f879acbf60e", 0x10) [ 224.110637] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 224.119170] team0: Port device team_slave_0 added [ 224.527459] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 224.535925] team0: Port device team_slave_1 added [ 224.935551] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 224.943012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 224.951977] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 225.375276] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 225.382619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 225.391259] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 225.408720] IPVS: ftp: loaded support on port[0] = 21 [ 225.748293] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 225.756159] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 225.765907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 226.179411] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 226.189028] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 226.198356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 227.353137] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.806468] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 230.525998] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 230.533524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 230.541437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 231.336962] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.343592] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.350565] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.357231] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.365768] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready 03:40:29 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='comm\x00') exit(0x0) read(r0, &(0x7f0000000140)=""/104, 0x36a) [ 232.043323] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.342723] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 232.419516] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.426476] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.435164] device bridge_slave_0 entered promiscuous mode 03:40:30 executing program 0: process_vm_writev(0x0, &(0x7f0000002800), 0x0, &(0x7f0000000780)=[{&(0x7f00000028c0)=""/224, 0xe0}], 0x1, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000c00)="120000001200e7ef007b000000003391eee7ff7b000085186a3540998660ecdfb123aee7aa625463141ec5416e6153a6406451e6746c244e0adce9a41c50d52c3f4a4698623c7916f438af7df7e8f74395e11238c92bc688bb98b8c12cdd2784a0fd74cd468271b0fd5bf9dcf391a3645e518f39d863936a6a803b42e0c05a882730b60007671406058a282f059d3c6f86dde600041caacfddc1c291a62f89054e9eeae91b66b0fcd0c5681cdc3e2e1ba0820d4766eb61", 0xb7, 0x0, 0x0, 0x0) r1 = getpgrp(0x0) process_vm_writev(r1, &(0x7f0000000b00)=[{&(0x7f0000000a40)=""/178, 0xffffffffffffff91}], 0x0, &(0x7f00000008c0)=[{&(0x7f0000000000)=""/13}, {&(0x7f0000000300)=""/10, 0xffffffffffffffe6}, {&(0x7f00000006c0)=""/170, 0x253}], 0x0, 0x0) memfd_create(&(0x7f0000000880)='\x00', 0x2) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000e00)={{{@in6=@remote, @in6=@ipv4={[], [], @rand_addr}}}, {{@in=@local}, 0x0, @in=@rand_addr}}, &(0x7f00000002c0)=0xe8) recvmsg(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000140)=@hci, 0x80, &(0x7f0000000d00), 0x0, &(0x7f00000024c0)=""/129, 0x81}, 0x0) process_vm_writev(0x0, &(0x7f0000000b80)=[{&(0x7f00000007c0)=""/186, 0xba}, {&(0x7f00000001c0)=""/19, 0x13}, {&(0x7f0000000280)=""/37, 0x25}, {&(0x7f0000000900)=""/124, 0x7c}, {&(0x7f0000000d00)=""/226, 0xe2}, {&(0x7f0000000980)=""/69, 0x45}], 0x6, &(0x7f0000002180), 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) socket$inet_smc(0x2b, 0x1, 0x0) [ 232.913088] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.919613] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.928397] device bridge_slave_1 entered promiscuous mode 03:40:31 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000140), 0x1c) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000240)=ANY=[@ANYBLOB="400000009500000053c83a02a67419de34c28bd51e3e5fde2ad1585b5160f85bb33809f919c759f527a40515c7bbdcd491701f1b01d4530a9170a0f18e46fe91edfc2b5a90515d042c6232794b246e8bf545ef4c0dc58ce188684a7bbe923d7311170226ab5f2825d78997faf303ff834108aa506fcc2ba60bbb2741862e258c2079c51403c5e33753386c044b0f74f0622252a1dd4c7c9f3ac30c1d3f"]) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x3) [ 233.347585] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready 03:40:31 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='squashfs\x00', 0x0, 0x0) [ 233.753522] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready 03:40:32 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x1f, 0x200000) write$P9_ROPEN(r0, &(0x7f0000000040)={0x18, 0x71, 0x1, {{0x88, 0x3, 0x7}}}, 0x18) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2b, 0x1, 0x0) socket$rds(0x15, 0x5, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000000c0)={@in={{0x2, 0x4e22}}, 0xfffffffffffffffd, 0x4, 0xfffffffeffffffff, "2f53ca40fda940119c9dfe30834c79feeaf58d2156631838d9b02907c835522480f012e0d079b4696ed23d9ba720f3a7c459df92484ef0526d83aacf7e740fbf212f65bd8b984410b37e3c21504a2cdc"}, 0xd8) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) 03:40:32 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = memfd_create(&(0x7f000003e000)='\'', 0x0) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) utimes(0xffffffffffffffff, &(0x7f0000000240)={{r2, r3/1000+10000}, {0x77359400}}) eventfd2(0x0, 0x80801) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000340)={0x17, 0xb3, &(0x7f0000000280)="91398343f625c7061a9685b13f6c56a98af851634779c0af100aa3c212813c3ae47a28008220c28599daf29f29ffd8e0bff8a78d3fee8cdebe686283c9914d91061dc0b0dce86dd103a7a445d83f622ecdc8dcae20a4b1c75a343af034bbea84a28e000c9e0424632ad5d7877058d16294005acd3f2c568a4faf117c1560a78d4624842a693644efa1ca5b27a639552d1c92f987cdd2a0f10993fa45afb0568ac84d1b8510c2c21a64bd01ac618323b952346b"}) r4 = syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x8000000040102) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000500}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newae={0x50, 0x1e, 0x8, 0x70bd2c, 0x25dfdbfd, {{@in=@broadcast, 0x4d5, 0x2, 0x32}, @in=@multicast2, 0x9, 0x3500}, [@replay_val={0x10, 0xa, {0x70bd29, 0x70bd29, 0x4}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) dup2(r4, r1) write$sndseq(r1, &(0x7f0000e6ffd0)=[{0x21, 0x0, 0x0, 0x3fd, @time}], 0x30) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@known='trusted.overlay.impure\x00', &(0x7f00000001c0)='$securityvmnet1wlan1{\x00', 0x16, 0x3) [ 234.892894] bond0: Enslaving bond_slave_0 as an active interface with an up link 03:40:33 executing program 0: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000f80)=[{{&(0x7f0000000940)=@xdp, 0x80, &(0x7f0000002140)=[{&(0x7f0000000d00)=""/140, 0x8c}], 0x1, &(0x7f00000021c0)=""/151, 0x97}}], 0x1, 0x0, &(0x7f0000002280)={0x0, 0x989680}) recvmmsg(r0, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000022c0)=""/4096, 0x1000}, {&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f0000000280)=""/116, 0x74}], 0x3, &(0x7f0000000300)=""/22, 0x16, 0x8000}, 0x2d0df70d}, {{&(0x7f00000006c0)=@nfc_llcp, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000740)=""/181, 0xb5}, {&(0x7f0000000800)=""/221, 0xdd}, {&(0x7f0000000900)=""/64, 0x40}, {&(0x7f00000009c0)=""/103, 0x67}, {&(0x7f0000000a40)}, {&(0x7f0000000a80)=""/218, 0xda}], 0x6, &(0x7f0000000c00)=""/44, 0x2c, 0x20}}, {{&(0x7f0000000c40)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000dc0)=""/114, 0x72}, {&(0x7f0000000e40)=""/146, 0x92}], 0x2, &(0x7f0000001fc0)=""/173, 0xad}, 0x92}, {{&(0x7f0000000f00)=@nfc, 0x80, &(0x7f00000020c0)=[{&(0x7f0000002080)=""/42, 0x2a}], 0x1, &(0x7f00000032c0)=""/223, 0xdf, 0x4}, 0x2}, {{&(0x7f00000033c0)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f00000039c0)=[{&(0x7f0000002100)=""/39, 0x27}, {&(0x7f0000003440)=""/117, 0x75}, {&(0x7f0000002180)}, {&(0x7f00000034c0)=""/151, 0x97}, {&(0x7f0000003580)=""/91, 0x5b}, {&(0x7f0000003600)=""/173, 0xad}, {&(0x7f0000003800)=""/156, 0x9c}, {&(0x7f00000036c0)=""/9, 0x9}, {&(0x7f00000038c0)=""/242, 0xf2}], 0x9, 0x0, 0x0, 0x2}, 0x8001}, {{0x0, 0x0, &(0x7f0000006b40)=[{&(0x7f0000003a80)=""/4096, 0x1000}, {&(0x7f0000004a80)=""/151, 0x97}, {&(0x7f0000003740)=""/66, 0x42}, {&(0x7f0000004b40)=""/4096, 0x1000}, {&(0x7f0000005b40)=""/4096, 0x1000}], 0x5, &(0x7f0000006bc0)=""/232, 0xe8, 0x100}, 0x5}, {{&(0x7f0000006cc0)=@l2, 0x80, &(0x7f0000006f40)=[{&(0x7f0000006d40)=""/155, 0x9b}, {&(0x7f0000006e00)=""/229, 0xe5}, {&(0x7f0000006f00)=""/15, 0xf}], 0x3, &(0x7f0000006f80)=""/255, 0xff, 0x80000000}, 0xffffffffffffffff}], 0x7, 0x10000, &(0x7f0000007240)) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x7ee}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) [ 235.299995] bond0: Enslaving bond_slave_1 as an active interface with an up link 03:40:33 executing program 0: r0 = socket$inet(0x15, 0x5, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e22, @remote}, 0x10) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x2, 0x0) remap_file_pages(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9, 0x8001, 0x42000) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000140)={@mcast2, 0x0}, &(0x7f0000000080)=0x14) sendmsg$xdp(r1, &(0x7f0000000400)={&(0x7f00000002c0)={0x2c, 0x5, r2, 0x1}, 0x10, &(0x7f0000001740)=[{&(0x7f0000000300)="41e6176b475a2513c1e3", 0xa}, {&(0x7f0000000340)="fef261", 0x3}, {&(0x7f0000000480)="2f8102015af0b0f9d767844fb4438cad8f4b276b4f0bb683d3a8ef771fe93951ce460cc7efc2a6abb02a0013569fe23f3e0a23fbc3bb37272385f63dfe9e345d1c357bd66a31eea619815c5489cbffc74df7bd8b571a84965cefb0eead42c85c621cb5ad091d9c8fe7f9400ebbd5d90123a6e4d0d938fad6b713aa2053287a1969d83dee97cfaf1f01596d308101cc6e9970e9da4e11673250056fd6deaee8828f61fdec805a24c4deac5d13d7fd81ecbd3f29007b418bc164744099e446fb7d557c0e7547ed67319addd28d", 0xcc}, {&(0x7f0000000380)="2837bb5a91add3c4ab143a4e4dab0c7924d9b6ac8c393239e04d810cc121d429b6f2d3b855a8417da40d4d2f1a8931524d8da20f5b3f6559dabbf6ed2f9fa385979c808b71544d68fc9e8a5f9024a1fe699367e6922f", 0x56}, {&(0x7f0000000580)="8d6ac7d3ba764d01aee891033e87aa768e702d2439bd2e422c921a3e3a847efbc3e719db5c1cad11ae5535374c73d39a40e49311e02abd46cb551bf46b547dd4b3717a99cc31d1e2119fbcc84238b866e76d08bb6dcfaaace02fc7d6acd9b54677c7f5b55b2877ddf44e39dbe2f7398025cb19ec13c43f01690a64465c370bd2bf84607d33b2def380d8491e77cbd4bfb42dae6811d81ad2e2a78d", 0x9b}, {&(0x7f0000000640)="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", 0x1000}, {&(0x7f0000001640)="2844cc9d6601e08c6b64c8536245ba2e12ba45b4422c3d99f0f6846d1d9dbb98c27f48f8af70ed76dd6474209685fbc5fabfe8db9e52b8c75f3a0a1df13044c4ec0b36e21d5017afbf85654f717a607cd5b9890e90b3f34625bafb68f7d5311e65045527bd66750ea3922feec8f9d6def6c833cd17edb6618a05d1b11f3ce3948ed79c561e90846d291e0935871356c7687f8a8e19280470b7bbe425fb724204de1861aac0899b643529a0cca1d5d4407a36209a9e60ca3c7bad419899920def2fe6495cd6171bcc901b43eee64cdf8d860941c451bde3a259528bbe267dfbd46dcf702ee7b66a4c34ca3c99dbfbaf8a47", 0xf1}], 0x7, 0x0, 0x0, 0x4000}, 0x8800) ioctl$RTC_PIE_OFF(r1, 0x7006) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @rand_addr=0x81}, 0x10) fcntl$getownex(r1, 0x10, &(0x7f0000000200)={0x0, 0x0}) sched_setattr(r3, &(0x7f0000000240)={0x30, 0x0, 0x1, 0x9, 0x9a5, 0x5, 0x1, 0x8}, 0x0) migrate_pages(r3, 0x0, &(0x7f0000000280), &(0x7f0000001940)=0xfffffffffffffff8) socket$kcm(0x29, 0x2, 0x0) sendto$inet(r0, &(0x7f00000000c0), 0xfcd2, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb1e977145b2360fff0f000000000500000000000000c5f86b00193b084e62e460bffcc765ae"], &(0x7f0000001840)=""/202, 0x27, 0xca, 0x1}, 0x20) ioctl$RTC_WIE_ON(r1, 0x700f) bind(r1, &(0x7f00000017c0)=@vsock={0x28, 0x0, 0xffffffff, @my=0x1}, 0xffffffdc) unlinkat(r1, &(0x7f0000000180)='./file0\x00', 0x200) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0xffffffffffffff74) [ 235.620097] mmap: syz-executor0 (7102) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 235.712914] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 235.720301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 236.013572] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 236.020699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 236.836740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.892401] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 236.900504] team0: Port device team_slave_0 added [ 237.107665] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 237.116054] team0: Port device team_slave_1 added [ 237.368322] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 237.376246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 237.385004] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 237.647192] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 237.654384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 237.663274] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 237.930158] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 237.937827] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 237.947294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 238.077645] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 238.310773] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 238.318445] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 238.327413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 239.186678] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 239.193327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 239.201031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 240.357374] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.650631] hrtimer: interrupt took 80812 ns 03:40:40 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x6) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000200)) openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000740), &(0x7f0000000780)=0x4) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000400)={0x0, 0x40}, &(0x7f0000000440)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300), 0x3}, 0xa0) ioctl$KVM_GET_NESTED_STATE(r1, 0xc080aebe, &(0x7f0000000ec0)={0x0, 0x0, 0x2080}) timer_settime(0x0, 0x0, &(0x7f0000000180), &(0x7f0000000600)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000280)=r0, 0x4) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000007c0)=0x800000000000002, 0x4) bind$inet(r2, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10) ioctl$int_in(r2, 0x5421, &(0x7f00000002c0)=0x6) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f0000000080), 0x4) sendto$inet(r2, &(0x7f0000000380)="975fa5356beb7f24656b0c7c0e812390aa2ba3dab91c5db1e37e85fa7edc15a93b35c76ceacb6ec60febc38e141f54bc3cb4b0e1a0150ef4e9ad4fb740a2e2d9c39154f5dfd26d38f3e6183a562adf9ddfc2", 0x52, 0x0, &(0x7f000069affb)={0x2, 0x4e20, @loopback}, 0x10) mq_timedsend(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, &(0x7f00000000c0)={0x77359400}) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x8000, 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000140)={0x77359400}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000100)=""/24, 0x18, 0x0, 0x0) getcwd(&(0x7f0000000180)=""/118, 0x225) unshare(0x800) sendto$inet(r2, &(0x7f00004b3fff), 0x0, 0x0, &(0x7f00002b4000)={0x2, 0x4e20, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) [ 242.164702] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.171187] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.178189] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.184729] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.193107] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 242.199877] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 244.556361] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.383252] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 246.120695] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 246.127449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 246.136063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 03:40:44 executing program 2: setsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0x0, &(0x7f00000001c0), 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f00000000c0)) [ 246.554430] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. [ 246.611231] ================================================================== [ 246.618694] BUG: KMSAN: uninit-value in vmx_create_vcpu+0x10df/0x7920 [ 246.625314] CPU: 1 PID: 7406 Comm: syz-executor2 Not tainted 4.19.0-rc4+ #63 [ 246.632524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 246.641916] Call Trace: [ 246.644568] dump_stack+0x306/0x460 [ 246.648228] ? _raw_spin_lock_irqsave+0x227/0x340 [ 246.653099] ? vmx_create_vcpu+0x10df/0x7920 [ 246.657559] kmsan_report+0x1a3/0x2d0 [ 246.661411] __msan_warning+0x7c/0xe0 [ 246.665248] vmx_create_vcpu+0x10df/0x7920 [ 246.669525] ? kmsan_set_origin_inline+0x6b/0x120 [ 246.674417] ? __msan_poison_alloca+0x17a/0x210 [ 246.679133] ? vmx_vm_init+0x340/0x340 [ 246.683052] kvm_arch_vcpu_create+0x25d/0x2f0 [ 246.687604] kvm_vm_ioctl+0x13fd/0x33d0 [ 246.692923] ? __msan_poison_alloca+0x17a/0x210 [ 246.699194] ? do_vfs_ioctl+0x18a/0x2810 [ 246.703996] ? __se_sys_ioctl+0x1da/0x270 [ 246.708183] ? vcpu_stat_clear_per_vm+0x420/0x420 [ 246.713073] ? vcpu_stat_clear_per_vm+0x420/0x420 [ 246.717954] do_vfs_ioctl+0xcf3/0x2810 [ 246.722333] ? security_file_ioctl+0x92/0x200 [ 246.728112] __se_sys_ioctl+0x1da/0x270 [ 246.732134] __x64_sys_ioctl+0x4a/0x70 [ 246.736056] do_syscall_64+0xbe/0x100 [ 246.739893] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 246.745106] RIP: 0033:0x457579 [ 246.748325] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 246.767247] RSP: 002b:00007fb469275c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 246.775029] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457579 [ 246.782332] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 246.789627] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 246.796918] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb4692766d4 [ 246.804212] R13: 00000000004bfc18 R14: 00000000004cfca0 R15: 00000000ffffffff [ 246.811529] [ 246.813191] Local variable description: ----c.i.i.i.i.i.i@vmx_create_vcpu [ 246.820136] Variable was created at: [ 246.823886] vmx_create_vcpu+0xd5/0x7920 [ 246.827979] kvm_arch_vcpu_create+0x25d/0x2f0 [ 246.832491] ================================================================== [ 246.839872] Disabling lock debugging due to kernel taint [ 246.840834] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.845347] Kernel panic - not syncing: panic_on_warn set ... [ 246.845347] [ 246.845377] CPU: 1 PID: 7406 Comm: syz-executor2 Tainted: G B 4.19.0-rc4+ #63 [ 246.845390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 246.845398] Call Trace: [ 246.845435] dump_stack+0x306/0x460 [ 246.845481] panic+0x54c/0xafa [ 246.886492] kmsan_report+0x2cd/0x2d0 [ 246.891491] __msan_warning+0x7c/0xe0 [ 246.896571] vmx_create_vcpu+0x10df/0x7920 [ 246.902053] ? kmsan_set_origin_inline+0x6b/0x120 [ 246.908337] ? __msan_poison_alloca+0x17a/0x210 [ 246.914555] ? vmx_vm_init+0x340/0x340 [ 246.919889] kvm_arch_vcpu_create+0x25d/0x2f0 [ 246.925993] kvm_vm_ioctl+0x13fd/0x33d0 [ 246.931141] ? __msan_poison_alloca+0x17a/0x210 [ 246.937156] ? do_vfs_ioctl+0x18a/0x2810 [ 246.942462] ? __se_sys_ioctl+0x1da/0x270 [ 246.948048] ? vcpu_stat_clear_per_vm+0x420/0x420 [ 246.954443] ? vcpu_stat_clear_per_vm+0x420/0x420 [ 246.960912] do_vfs_ioctl+0xcf3/0x2810 [ 246.965982] ? security_file_ioctl+0x92/0x200 [ 246.972014] __se_sys_ioctl+0x1da/0x270 [ 246.977292] __x64_sys_ioctl+0x4a/0x70 [ 246.982355] do_syscall_64+0xbe/0x100 [ 246.987325] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 246.994368] RIP: 0033:0x457579 [ 246.998549] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 247.019325] RSP: 002b:00007fb469275c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 247.027082] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457579 [ 247.034378] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 247.041682] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 247.048983] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb4692766d4 [ 247.056279] R13: 00000000004bfc18 R14: 00000000004cfca0 R15: 00000000ffffffff [ 247.064876] Kernel Offset: disabled [ 247.068524] Rebooting in 86400 seconds..