[ 49.869400] audit: type=1800 audit(1545493277.892:26): pid=6290 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 51.369963] kauditd_printk_skb: 2 callbacks suppressed [ 51.369992] audit: type=1800 audit(1545493279.412:29): pid=6290 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 51.394834] audit: type=1800 audit(1545493279.422:30): pid=6290 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 52.804217] sshd (6427) used greatest stack depth: 53360 bytes left Warning: Permanently added '10.128.10.24' (ECDSA) to the list of known hosts. 2018/12/22 15:41:30 fuzzer started 2018/12/22 15:41:35 dialing manager at 10.128.0.26:35233 2018/12/22 15:41:35 syscalls: 1 2018/12/22 15:41:35 code coverage: enabled 2018/12/22 15:41:35 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/12/22 15:41:35 setuid sandbox: enabled 2018/12/22 15:41:35 namespace sandbox: enabled 2018/12/22 15:41:35 Android sandbox: /sys/fs/selinux/policy does not exist 2018/12/22 15:41:35 fault injection: enabled 2018/12/22 15:41:35 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/12/22 15:41:35 net packet injection: enabled 2018/12/22 15:41:35 net device setup: enabled 15:44:46 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) [ 259.505093] IPVS: ftp: loaded support on port[0] = 21 [ 260.894824] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.901380] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.909725] device bridge_slave_0 entered promiscuous mode [ 260.993064] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.999595] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.008114] device bridge_slave_1 entered promiscuous mode [ 261.092042] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 261.171921] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 261.427766] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 261.515961] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 261.602361] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 261.609401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 261.694127] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 261.701120] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 261.962563] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 261.971254] team0: Port device team_slave_0 added [ 262.056667] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 262.065400] team0: Port device team_slave_1 added [ 262.149547] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 262.239326] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 262.326739] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 262.334399] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 262.343628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 262.428648] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 262.436297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 262.445514] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready 15:44:50 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000002500)=[{{0x0, 0x0, &(0x7f0000001440), 0x0, &(0x7f0000002440)=""/73, 0x49}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='attr/sockcreate\x00') pwritev(r0, &(0x7f0000001400), 0x31f, 0x0) [ 263.496487] IPVS: ftp: loaded support on port[0] = 21 [ 263.547496] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.554147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.561303] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.567940] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.577277] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 263.589277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 266.113122] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.119643] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.128112] device bridge_slave_0 entered promiscuous mode [ 266.284677] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.291743] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.299965] device bridge_slave_1 entered promiscuous mode [ 266.381165] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 266.476603] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 266.816263] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 266.986747] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 267.622405] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 267.631130] team0: Port device team_slave_0 added [ 267.756414] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 267.764985] team0: Port device team_slave_1 added [ 267.914816] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 15:44:56 executing program 2: unshare(0x200) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') mount(0x0, 0x0, 0x0, 0x0, 0x0) setns(r0, 0x0) clone(0x70024000, &(0x7f0000000180), 0x0, 0x0, 0x0) mount(&(0x7f0000000300)=@sg0='/dev/sg0\x00', 0x0, &(0x7f0000000340)='securityfs\x00', 0x0, 0x0) mount(&(0x7f0000000100)=@nullb='/dev/nullb0\x00', &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='sysfs\x00', 0x0, &(0x7f0000000440)='eth1{\x00') openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x100, 0x0) pipe(&(0x7f0000000040)) creat(&(0x7f00000002c0)='./file0\x00', 0x40) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 268.070717] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 268.234374] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 268.242107] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 268.251066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 268.411999] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 268.419968] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 268.429290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 268.682207] IPVS: ftp: loaded support on port[0] = 21 [ 269.392319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.984556] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 270.344538] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.351105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.358320] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.364883] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.374126] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 270.380577] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 270.673575] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 270.679890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 270.687976] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 271.333245] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.339780] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.348039] device bridge_slave_0 entered promiscuous mode [ 271.370611] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.558371] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.565033] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.573204] device bridge_slave_1 entered promiscuous mode [ 271.664208] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 271.795957] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 272.283603] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 272.403227] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 272.547454] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 272.554540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 272.694698] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 272.701724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 273.241989] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 273.250492] team0: Port device team_slave_0 added [ 273.382363] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 273.390920] team0: Port device team_slave_1 added [ 273.599465] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 273.606528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 273.615476] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 273.779428] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 273.787080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 273.796132] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 274.000790] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 274.008479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 274.017711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 274.103625] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 274.111319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 274.120512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 275.129906] binder: 6948:6950 ioctl c018620b 0 returned -14 [ 275.147284] binder: 6948:6950 transaction failed 29189/-22, size 24-8 line 2834 [ 275.177280] binder: 6948:6950 ioctl c018620b 0 returned -14 [ 275.182735] binder: undelivered TRANSACTION_ERROR: 29189 15:45:03 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000001c0)='veth1\x00', 0xb4) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x4000000000013, &(0x7f0000000180), 0x3b2) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0xe30) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000680)='2', 0x1}], 0x1}}], 0x1, 0x4000001) write$binfmt_misc(r1, &(0x7f00000003c0)=ANY=[], 0x4240a571) 15:45:03 executing program 0: clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = creat(&(0x7f0000001140)='./file0\x00', 0x3) close(r0) prctl$PR_SET_SECUREBITS(0x1c, 0x1) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 15:45:03 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'lo\x00\x00\x00\x00\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000240)={'lo\x00', 0x101}) 15:45:04 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8000, 0x0) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000040)="698ec34d47ae2f5635f0a96a6e9b2cee087323bddc194b7665f8e6689339ee3cc9ef55b8f7c5863de47f66a6c43756420440d775a5c612c08263f51432a8b9ddb77f0e3d2f6f0e122f5fdec59debd829f6bc8aa37ffb527200e69bbbc49578c9f5111f4aa57a92c0ade7fd02d743c5b46a69ad0732da1bef9b546f3f8e7829715acd89a74d9f907b29c41ece2e8f6ede54046e2d52fcffa210b51fb97f25de46aa553112f17c3c05a4a2236197dfaef0737e6bf6b0faad0e9109be678a79b1f885075c8d299147ec") setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000000140)={0xffffffffffffff6c, {{0x2, 0x4e24, @empty}}, {{0x2, 0x4e20, @multicast1}}}, 0x108) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x41000000}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)=@flushsa={0x148, 0x1c, 0x200, 0x70bd29, 0x25dfdbfc, {0xff}, [@algo_auth_trunc={0x134, 0x14, {{'sha384-generic\x00'}, 0x730, 0x40, "d779197626f8c27a79549a6c06ed7284879a0e332bf4a974d5e3007fa06c876b2c5d27c7198d66307edb8f93783229382673ea0e22debbfc9c96eb27a8f9c6b864ce0a53d0271c4f235a00866a34ac7749e452da1858d4b0318207595c29bf24a8dd458f32790def7b6fe57017c2baeb2b5aba210a5a8c4fc439d25d966ba961673e72866252528f53e6a1ed1377ee8dbb401c3802f29c43ed3572744a7b1b7c2ea22dc74c50700c69a4b49dd581fdc08e89f54172a442df40d02a78791872ce51f090f089c21460f23e290f3752d2e3aeadf12147f65649c062b5240dbab6ff861c912ec37e"}}]}, 0x148}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = shmget$private(0x0, 0x4000, 0x90, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f00000004c0)=""/66) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, r2, 0x300, 0x70bd26, 0x25dfdbfe, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x6}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000) ioctl$KDSETLED(r0, 0x4b32, 0x0) ioctl$KDSETLED(r0, 0x4b32, 0xf7e) r3 = mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x8010, r0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000680)={r3}) prctl$PR_GET_CHILD_SUBREAPER(0x25) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f00000006c0)={0x20000000, 0x25c1, 0x15}) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000700)='/dev/dlm-control\x00', 0x400, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000740)=0x6) lstat(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000840)={{{@in=@empty, @in6=@dev={0xfe, 0x80, [], 0x1f}, 0x4e22, 0x0, 0x4e21, 0x5, 0xa, 0x20, 0x20, 0x17, 0x0, r5}, {0x4, 0x200, 0xe3aa, 0x4, 0x54, 0x0, 0x3f, 0x7}, {0x9, 0x306, 0x9, 0x9}, 0x6, 0x6e6bc0, 0x3, 0x1, 0x1, 0x1}, {{@in6=@mcast2, 0x4d2}, 0x2, @in=@empty, 0x34ff, 0x1, 0x0, 0x7, 0x4e98, 0x3, 0x8}}, 0xe8) ioctl$RTC_EPOCH_READ(r0, 0x8008700d, &(0x7f0000000940)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000009c0)={0xffffffffffffffff, r4, 0x0, 0x3, &(0x7f0000000980)='-,\x00'}, 0x30) sched_setaffinity(r6, 0x8, &(0x7f0000000a00)=0x5) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000a40)={0x7, 0x404, 0x0, 0x9}) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x74, r7, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3a}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xaf}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'dummy0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'lo\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd7}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000081}, 0x880) r8 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r8) ioctl$DRM_IOCTL_GET_UNIQUE(r4, 0xc0106401, &(0x7f0000000c40)={0x3b, &(0x7f0000000c00)=""/59}) unshare(0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x68, r2, 0x100, 0x70bd25, 0x25dfdbfb, {{}, 0x0, 0x4107, 0x0, {0x4c, 0x18, {0x5, @media='udp\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x800) getsockopt$bt_BT_VOICE(r4, 0x112, 0xb, &(0x7f0000000dc0)=0x4b0, &(0x7f0000000e00)=0x2) [ 276.166841] device lo entered promiscuous mode [ 276.219759] device lo left promiscuous mode [ 276.605888] IPVS: ftp: loaded support on port[0] = 21 [ 276.722720] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.729302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 276.736524] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.743204] bridge0: port 1(bridge_slave_0) entered forwarding state [ 276.752662] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 276.759172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 15:45:04 executing program 0: unshare(0x400) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x40, 0x0) ioctl$KVM_SET_MP_STATE(r0, 0x4004ae99, &(0x7f0000000000)=0x7) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="ff", 0x1}], 0x1, 0x0) 15:45:05 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0xff) socket$nl_crypto(0x10, 0x3, 0x15) r1 = socket$inet6(0xa, 0x80003, 0xff) dup3(r0, r1, 0x3) 15:45:05 executing program 0: r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)=@sco, 0xffffffffffffff37, &(0x7f0000000300)}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000080), 0x1ce) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f00000000c0)=@in6={0x31100, 0x8100, 0xd, @dev}, 0x80, &(0x7f0000000340), 0x25d, &(0x7f0000000380)}, 0x0) 15:45:05 executing program 0: mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(&(0x7f0000000700)=ANY=[], &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000180)='./file0\x00') r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x1f, &(0x7f0000000080), &(0x7f00000000c0)=0x4) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000540)='./file0\x00') umount2(&(0x7f00000005c0)='./file0/../file0/file0\x00', 0x2) llistxattr(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f00000001c0)=""/72, 0x48) 15:45:05 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x100000000005, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000280)={0x9, @pix={0x0, 0x0, 0x20363159}}) 15:45:06 executing program 0: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) futex(&(0x7f0000000000)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1c0000001, 0x0) [ 278.623047] 8021q: adding VLAN 0 to HW filter on device bond0 [ 279.348528] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 279.738991] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.745721] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.754042] device bridge_slave_0 entered promiscuous mode [ 279.878786] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.885390] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.893758] device bridge_slave_1 entered promiscuous mode [ 280.067697] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 280.074137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 280.082103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 280.121411] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 280.341462] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 280.752043] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.789664] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 280.906944] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 281.042991] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 281.049963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 281.133174] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 281.140161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 281.573413] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 281.583211] team0: Port device team_slave_0 added [ 281.830213] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 281.838864] team0: Port device team_slave_1 added [ 281.979900] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 281.987098] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 281.996028] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 282.189240] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 282.196288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 282.205225] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 282.303605] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 282.311188] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 282.320291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 282.520998] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 282.528698] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 282.537827] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 284.014995] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.296623] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.303253] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.310373] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.317010] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.325896] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 284.332509] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 284.774939] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready 15:45:13 executing program 1: r0 = socket(0x40000000002, 0x3, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00\x00\x00\x04\x00\x01\x00', 0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e22, @rand_addr=0x1}}, 0x1, 0xd58, 0x8, 0x7bd6e53f}, &(0x7f00000000c0)=0x98) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000100)={r1, 0x2, 0x20}, 0xc) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0xd0000e7}, 0x6e) [ 285.229032] raw_sendmsg: syz-executor1 forgot to set AF_INET. Fix it! [ 285.457316] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 285.463723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 285.471857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 286.045089] 8021q: adding VLAN 0 to HW filter on device team0 [ 289.741088] IPVS: ftp: loaded support on port[0] = 21 15:45:17 executing program 2: unshare(0x200) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') mount(0x0, 0x0, 0x0, 0x0, 0x0) setns(r0, 0x0) clone(0x70024000, &(0x7f0000000180), 0x0, 0x0, 0x0) mount(&(0x7f0000000300)=@sg0='/dev/sg0\x00', 0x0, &(0x7f0000000340)='securityfs\x00', 0x0, 0x0) mount(&(0x7f0000000100)=@nullb='/dev/nullb0\x00', &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='sysfs\x00', 0x0, &(0x7f0000000440)='eth1{\x00') openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x100, 0x0) pipe(&(0x7f0000000040)) creat(&(0x7f00000002c0)='./file0\x00', 0x40) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) 15:45:17 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) r2 = socket$l2tp(0x18, 0x1, 0x1) dup3(r2, r1, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) 15:45:17 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x10000000006, 0x0, 0x20000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.stat\x00', 0x0, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x0, r0}, 0x2c) mount(&(0x7f00000001c0)=ANY=[@ANYBLOB="ebe43970e3646e34de638cc164326abbcf73229fde99b9d914828052df8dafbf9b7e8b268a37dbfc84aaaa0327eac40d7848c34d0df411704e594e579601fe2d6ba1fe96d28f05120d10b18fd47fd015bce054c27fa58a8dd3b16b4d90b559f7864471bdc63c1900f307d0cf8ed6c9d2d5de1a847ad4f6a586a9e39a83c28621e432"], &(0x7f00000000c0)='./file0\x00', &(0x7f00005f7ffb)='nfs4\x00', 0x0, &(0x7f000000a000)) 15:45:17 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x8100, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc1, 0x0, 0x5, 0xa, 0x1d, "5d605a93ae7b272638d8f91eebcc0eacb75b504e9f5b02f2f0e2feca8898e272ab37d1fe06b50f3bdd66a68a868c1b1424bb45c7a6a68fbe1723fde86cac092a", "303f726aeb1addfd9e293d12865555fcea740735f4ddbcef45ad980ff5b0674803bbd47b9c951656652a965131ccf4000a5bc22c6ac3f30bd6975fe3da65037e", "fb00174d22f1cc57d51d4bd5411f67313a14c38300d3a2891adceb8fa764f260", [0x2, 0x17335e4a]}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x4e24, @rand_addr=0x7ff}]}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={r1, 0x8001}, &(0x7f0000000240)=0x8) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000280)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000002c0)={0x3, 0x2, 0x800, 0x0, 0xe5}) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x138, r3, 0x904, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x24, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffffffffffffe}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'bridge0\x00'}}]}, @TIPC_NLA_MEDIA={0xa8, 0x5, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8438}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8c375cb}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x727e}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000000000000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffffffffffb6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2891}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf7b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}, @TIPC_NLA_LINK={0x24, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_SOCK={0x34, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x13}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1ff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x100000001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x800}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x8040}, 0x48004) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000540)="3df634416d1c19881a99e8000128e5515e615aafc42cc58c95e1cb87ff24e785fee358fc09a05b56f22f7230c1895f626328e4aca7862df53e1240307ae8a0b60b700f03b4080fccfaddcde76e9d3adb605259d53af6e8ee918c8159a30e82045f7e1d651a2f4cef3c23812a684d0ae8b6af3897dafa34881b68557c23e94914eb407d7e651b4cc0d9bf1186b77f335a78fb51f0eecd793d9a2abb452f510c0224d8b23303a7446c8242b9abe57bdc5f670c1fcd710931a871a5ab37ed38961be3ab86b636165ba83dfb83683c5e1633") ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000640)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000680)='/dev/ptmx\x00', 0x4000, 0x0) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000006c0), &(0x7f0000000700)=0xb) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000780)={0xffffffffffffffff, r0, 0x0, 0xf, &(0x7f0000000740)='broadcast-link\x00', 0xffffffffffffffff}, 0x30) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000007c0)={[], 0x9, 0x9, 0x0, 0x29, 0x1000, r5}) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000840)='tls\x00', 0x4) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000880), &(0x7f00000008c0)=0xc) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r6) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r6, 0x800c6613, &(0x7f0000000900)={0x0, @speck128, 0x0, "e18eaaa8dd17f918"}) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000940)={r1, 0xc8, "2d324b506b4527d117cfe491d8190b8bbaf2bae5d895b55d7077305fd31b1217b75f7c753c29ed0f4f5a08987e7b28d8af982fa8f417f65a02f54275da07ae182150ba97408f7b6d0885d83284ced95c9518813d13b9964ae5f0e571f2d25c246c256ac51705b5190d3296bdf5cac76bd0547860324bc6e29c43a1c8d7b202d98b0cdff26e0e4f508d6acbe953d6fffbdbd75c440d2ed63c52ba3a8e1319ccec8273311ddef6707e4148f5e68300e441b812485fb11d0584e4d01712e2c863b81bdbd4e464a109a5"}, &(0x7f0000000a40)=0xd0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000a80)=[@in6={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0x20}, 0x7a}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1e}}, @in={0x2, 0x4e20, @local}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e22, @loopback}], 0x5c) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000b00), 0x4) getsockopt$inet6_dccp_int(r6, 0x21, 0x10, &(0x7f0000000b40), &(0x7f0000000b80)=0x4) accept$packet(r4, &(0x7f0000000bc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000c00)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000c40)={{{@in6=@mcast2, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@ipv4={[], [], @loopback}}}, &(0x7f0000000d40)=0xe8) r9 = openat$null(0xffffffffffffff9c, &(0x7f0000000d80)='/dev/null\x00', 0x4000, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/vhci\x00', 0x0, 0x0) r10 = syz_genetlink_get_family_id$team(&(0x7f0000000e40)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000001540)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001500)={&(0x7f0000000e80)={0x668, r10, 0x24, 0x70bd27, 0x25dfdbff, {}, [{{0x8, 0x1, r8}, {0xf0, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0xac}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x1000}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x44}}}]}}, {{0x8, 0x1, r7}, {0x160, 0x2, [{0x6c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x3c, 0x4, [{0xf6, 0x0, 0x5, 0x3}, {0x3cb5ee25, 0x3, 0x1, 0x7}, {0x100000001, 0xfc, 0x9, 0x974}, {0x4, 0x7, 0xfff, 0x3ff}, {0x8, 0x1ff, 0x1, 0x800}, {0xff, 0x0, 0x7, 0x81}, {0x24, 0x15, 0x3, 0x100000001}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x100000001}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x3f}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r8}, {0x164, 0x2, [{0x5c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x2c, 0x4, [{0x80, 0x101, 0x8, 0xffff}, {0x0, 0x3779, 0x3, 0x3f}, {0x2, 0x80, 0x4, 0x7ff}, {0x7ada, 0x8, 0xdb92, 0x2}, {0x8, 0xfff, 0x3, 0x9}]}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r7}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x86}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x80}}}]}}, {{0x8, 0x1, r8}, {0xc0, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x8001}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x1c, 0x4, [{0x80000001, 0x101, 0x101, 0x3}, {0xff, 0x7, 0x4, 0x7}, {0x4ddc000000000, 0x1f, 0x3, 0x9}]}}}]}}, {{0x8, 0x1, r8}, {0xf4, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x3f}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0xbcc}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r8}, {0xbc, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r8}}}]}}]}, 0x668}}, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001580)) setsockopt$inet_sctp_SCTP_MAXSEG(r9, 0x84, 0xd, &(0x7f00000015c0)=@assoc_value={r2, 0x1}, 0x8) [ 290.051247] IPVS: ftp: loaded support on port[0] = 21 [ 290.157954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.490540] IPVS: ftp: loaded support on port[0] = 21 [ 290.633748] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 291.038817] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 291.045235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 291.053139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 291.534323] 8021q: adding VLAN 0 to HW filter on device team0 [ 292.139713] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.146357] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.154731] device bridge_slave_0 entered promiscuous mode [ 292.243006] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.249540] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.257559] device bridge_slave_1 entered promiscuous mode [ 292.347222] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 292.430392] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 292.682897] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 292.789361] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 292.953413] current->kmsan.in_runtime: -1, last_caller: __msan_poison_alloca+0x141/0x2a0 [ 292.961727] ------------[ cut here ]------------ [ 292.966488] kernel BUG at mm/kmsan/kmsan_instr.c:267! [ 292.971708] invalid opcode: 0000 [#1] SMP [ 292.975863] CPU: 0 PID: 7590 Comm: kworker/1:3 Not tainted 4.20.0-rc7+ #12 [ 292.982870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 292.992244] RIP: 0010:__msan_poison_alloca+0x29c/0x2a0 [ 292.997535] Code: 0b e8 e8 ee 7b ff 85 c0 75 20 48 8b 44 24 08 8b b0 88 09 00 00 48 8b 90 80 09 00 00 48 c7 c7 4e 72 5f 8b 31 c0 e8 f4 1b 7c ff <0f> 0b 66 90 55 48 89 e5 41 57 41 56 41 54 53 48 83 ec 18 65 48 8b [ 293.016441] RSP: 0018:ffff88813e5cf550 EFLAGS: 00010046 [ 293.021826] RAX: 000000000000004c RBX: ffff8881dbd41e00 RCX: c1271ef8e745b300 [ 293.029103] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff88821fc36abc [ 293.036379] RBP: ffff88813e5cf5e8 R08: 0000000000000000 R09: ffff88821fc38f10 [ 293.043655] R10: 0000000000000000 R11: ffffffff861d8220 R12: ffff88813e5cf69f [ 293.050939] R13: 0000000000000046 R14: 0000000000000001 R15: ffffffff8ba999e0 [ 293.058216] FS: 0000000000000000(0000) GS:ffff88821fc00000(0000) knlGS:0000000000000000 [ 293.066444] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 293.072331] CR2: 0000000000417a60 CR3: 000000013e4d5000 CR4: 00000000001406f0 [ 293.079605] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 293.086899] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 293.094178] Call Trace: [ 293.096793] ? dequeue_entity+0x77/0x2d80 [ 293.100968] ? dequeue_task_fair+0x12c/0x1110 [ 293.105480] dequeue_entity+0x77/0x2d80 [ 293.109499] dequeue_task_fair+0x12c/0x1110 [ 293.113853] ? can_migrate_task+0xcdc/0x1dc0 [ 293.118285] ? enqueue_task_fair+0xe70/0xe70 [ 293.122712] deactivate_task+0x6a3/0x980 [ 293.126805] load_balance+0x6af2/0x9ad0 [ 293.130816] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 293.136412] pick_next_task_fair+0xaf1/0x3240 [ 293.140974] ? check_preempt_wakeup+0x1620/0x1620 [ 293.145839] pick_next_task+0x1ba/0x420 [ 293.149841] __schedule+0x1f7/0x830 [ 293.153491] schedule+0x1ab/0x2b0 [ 293.156974] kthread+0x3cb/0x4e0 [ 293.160351] ? process_one_work+0x1f80/0x1f80 [ 293.164851] ? schedule_tail+0x1b2/0x410 [ 293.168936] ? kthread_blkcg+0xf0/0xf0 [ 293.172839] ret_from_fork+0x35/0x40 [ 293.176574] Modules linked in: [ 293.179800] ---[ end trace 81f66daf1ffab47e ]--- [ 293.184612] RIP: 0010:__msan_poison_alloca+0x29c/0x2a0 [ 293.189892] Code: 0b e8 e8 ee 7b ff 85 c0 75 20 48 8b 44 24 08 8b b0 88 09 00 00 48 8b 90 80 09 00 00 48 c7 c7 4e 72 5f 8b 31 c0 e8 f4 1b 7c ff <0f> 0b 66 90 55 48 89 e5 41 57 41 56 41 54 53 48 83 ec 18 65 48 8b [ 293.208807] RSP: 0018:ffff88813e5cf550 EFLAGS: 00010046 [ 293.214192] RAX: 000000000000004c RBX: ffff8881dbd41e00 RCX: c1271ef8e745b300 [ 293.221469] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff88821fc36abc [ 293.228742] RBP: ffff88813e5cf5e8 R08: 0000000000000000 R09: ffff88821fc38f10 [ 293.236044] R10: 0000000000000000 R11: ffffffff861d8220 R12: ffff88813e5cf69f [ 293.243313] R13: 0000000000000046 R14: 0000000000000001 R15: ffffffff8ba999e0 [ 293.250589] FS: 0000000000000000(0000) GS:ffff88821fc00000(0000) knlGS:0000000000000000 [ 293.258819] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 293.264700] CR2: 0000000000417a60 CR3: 000000013e4d5000 CR4: 00000000001406f0 [ 293.271973] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 293.279245] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 293.286521] Kernel panic - not syncing: Fatal exception [ 294.859305] Shutting down cpus with NMI [ 294.880297] Kernel Offset: disabled [ 294.883956] Rebooting in 86400 seconds..