[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 15.228330] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 16.807591] random: sshd: uninitialized urandom read (32 bytes read) [ 16.984478] random: sshd: uninitialized urandom read (32 bytes read) [ 17.766118] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.13' (ECDSA) to the list of known hosts. [ 23.196567] random: sshd: uninitialized urandom read (32 bytes read) 2018/07/20 13:46:48 fuzzer started [ 24.303220] random: cc1: uninitialized urandom read (8 bytes read) 2018/07/20 13:46:50 dialing manager at 10.128.0.26:39733 2018/07/20 13:46:57 syscalls: 1808 2018/07/20 13:46:57 code coverage: enabled 2018/07/20 13:46:57 comparison tracing: enabled 2018/07/20 13:46:57 setuid sandbox: enabled 2018/07/20 13:46:57 namespace sandbox: enabled 2018/07/20 13:46:57 fault injection: enabled 2018/07/20 13:46:57 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/07/20 13:46:57 net packed injection: enabled 2018/07/20 13:46:57 net device setup: enabled [ 33.407065] random: crng init done 13:48:09 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x14, 0x4, 0x6, 0x319}, 0x14}, 0x1}, 0x0) 13:48:09 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000240)={0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000000)={0x20, 0x40000000000001d, 0x1, 0x0, 0x0, {0x7592da02}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) 13:48:09 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa}, 0x18) 13:48:09 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000040)={@remote={0xfe, 0x80, [], 0xbb}, r1}, 0x14) 13:48:09 executing program 4: 13:48:09 executing program 3: 13:48:09 executing program 5: 13:48:09 executing program 6: [ 103.834469] IPVS: ftp: loaded support on port[0] = 21 [ 103.834654] IPVS: ftp: loaded support on port[0] = 21 [ 103.846063] IPVS: ftp: loaded support on port[0] = 21 [ 103.862346] IPVS: ftp: loaded support on port[0] = 21 [ 103.896686] IPVS: ftp: loaded support on port[0] = 21 [ 103.898379] IPVS: ftp: loaded support on port[0] = 21 [ 103.916332] IPVS: ftp: loaded support on port[0] = 21 [ 103.946667] IPVS: ftp: loaded support on port[0] = 21 [ 105.525624] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.532037] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.543406] device bridge_slave_0 entered promiscuous mode [ 105.558900] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.565329] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.573515] device bridge_slave_0 entered promiscuous mode [ 105.587342] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.593735] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.612528] device bridge_slave_0 entered promiscuous mode [ 105.626794] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.633313] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.641297] device bridge_slave_0 entered promiscuous mode [ 105.659881] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.666337] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.676770] device bridge_slave_0 entered promiscuous mode [ 105.686503] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.692885] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.704243] device bridge_slave_1 entered promiscuous mode [ 105.711748] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.718111] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.729583] device bridge_slave_1 entered promiscuous mode [ 105.737402] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.743801] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.751115] device bridge_slave_0 entered promiscuous mode [ 105.767659] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.774077] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.786369] device bridge_slave_1 entered promiscuous mode [ 105.793807] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.800199] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.811456] device bridge_slave_1 entered promiscuous mode [ 105.818461] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.824915] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.836522] device bridge_slave_1 entered promiscuous mode [ 105.843807] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 105.851106] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.857468] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.865207] device bridge_slave_0 entered promiscuous mode [ 105.877182] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.883554] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.890958] device bridge_slave_0 entered promiscuous mode [ 105.899339] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.905714] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.916669] device bridge_slave_1 entered promiscuous mode [ 105.925160] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 105.933294] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 105.942558] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 105.952564] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 105.959890] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 105.967404] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 105.974849] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.981288] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.009683] device bridge_slave_1 entered promiscuous mode [ 106.032007] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.038436] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.051136] device bridge_slave_1 entered promiscuous mode [ 106.058844] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 106.073587] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 106.084977] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 106.092479] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 106.100588] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 106.108556] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 106.169344] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 106.183105] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 106.282494] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 106.291681] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 106.344598] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 106.375834] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 106.397989] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 106.418626] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 106.428674] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 106.440271] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 106.451920] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 106.500874] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 106.514932] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 106.535811] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 106.545811] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 106.556194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 106.570250] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 106.585604] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 106.645249] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 106.703195] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 106.753549] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 106.940960] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 106.953848] team0: Port device team_slave_0 added [ 106.984196] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 107.000578] team0: Port device team_slave_0 added [ 107.011377] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 107.022857] team0: Port device team_slave_0 added [ 107.034224] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 107.045507] team0: Port device team_slave_0 added [ 107.058516] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 107.078720] team0: Port device team_slave_0 added [ 107.088800] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 107.102689] team0: Port device team_slave_0 added [ 107.115597] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 107.122822] team0: Port device team_slave_1 added [ 107.135991] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 107.148762] team0: Port device team_slave_1 added [ 107.162465] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 107.172950] team0: Port device team_slave_1 added [ 107.186689] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 107.195844] team0: Port device team_slave_1 added [ 107.212881] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 107.220631] team0: Port device team_slave_1 added [ 107.231570] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 107.240913] team0: Port device team_slave_1 added [ 107.250207] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 107.263508] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 107.273476] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 107.285109] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 107.297663] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 107.324312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 107.335378] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 107.342809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 107.350429] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 107.360879] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 107.367923] team0: Port device team_slave_0 added [ 107.374514] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 107.381488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 107.390652] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 107.400166] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 107.407916] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 107.416246] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 107.423556] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 107.449625] team0: Port device team_slave_0 added [ 107.461232] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 107.468378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 107.480514] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 107.500593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 107.508301] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 107.515721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 107.523330] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 107.530643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 107.538271] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 107.545888] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 107.552850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 107.560724] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 107.570007] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 107.577694] team0: Port device team_slave_1 added [ 107.584286] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 107.592675] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 107.601207] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 107.618578] team0: Port device team_slave_1 added [ 107.624991] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 107.633573] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 107.640805] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 107.650254] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 107.657763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 107.671110] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 107.690375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 107.708825] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 107.719168] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 107.726804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 107.734495] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 107.742197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 107.749879] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 107.757586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 107.765269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 107.772768] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 107.781561] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 107.790299] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 107.797319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 107.811136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 107.824306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 107.831883] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 107.841752] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 107.851609] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 107.858793] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 107.866062] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 107.891493] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 107.905455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 107.916314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 107.923989] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 107.931682] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 107.939393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 107.948601] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 107.955782] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 107.963531] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 107.972576] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 107.979599] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 107.988453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 107.999401] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 108.006590] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 108.014835] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 108.036100] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 108.044635] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 108.075653] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 108.083302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 108.116511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 108.135505] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 108.144075] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 108.151814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 108.163249] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 108.172086] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 108.186797] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 108.218530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 108.243206] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 108.255620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 108.268813] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 108.293124] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 108.301006] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 108.318559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 108.346998] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 108.354845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 109.072973] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.079406] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.086073] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.092449] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.125480] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 109.141955] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.148335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.154934] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.161309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.186180] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 109.199688] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 109.207252] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 109.226547] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.232928] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.239545] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.245900] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.253260] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 109.266101] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.272487] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.279134] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.285502] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.304589] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 109.328694] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.335113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.341753] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.348123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.363278] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 109.387298] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.393675] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.400280] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.406659] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.443572] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 109.455695] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.462078] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.468737] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.475106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.482813] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 109.493506] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.499894] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.506534] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.512892] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.520682] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 110.239108] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 110.251869] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 110.269949] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 110.283663] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 110.290681] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 110.297963] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 113.105489] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.132989] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.153871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.233947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.259897] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.278208] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.300359] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.428030] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.487383] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 113.495916] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 113.583798] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 113.591887] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 113.606358] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 113.646325] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 113.692775] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 113.823406] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 113.846781] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 113.852965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 113.863520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 113.901768] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 113.909179] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 113.917083] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 113.941446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 113.968453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 113.978375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 113.990685] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 114.005117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 114.016931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 114.043250] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 114.057339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 114.083541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 114.106884] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 114.116132] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 114.122589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 114.138618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 114.162283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 114.169713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 114.262248] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.277241] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 114.285331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 114.297214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 114.370444] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.407824] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.425694] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.437390] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.478783] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.515107] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.586666] 8021q: adding VLAN 0 to HW filter on device team0 13:48:21 executing program 5: 13:48:21 executing program 5: r0 = socket$inet(0x2, 0x3, 0x3f) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000004c0)='bridge_slave_0\x00', 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10) 13:48:21 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x3e, &(0x7f0000001180)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "b7e720", 0x8, 0x11, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [0x3], 0xaa}, {[], @icmpv6=@echo_request={0x80}}}}}}, &(0x7f0000000000)) 13:48:21 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f000000d000)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x10040000000000b}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}}, 0x1c) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x38, 0x3a, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0x2, 0x0, 0x0, 0x0, [], {0x0, 0x6, 'p+l', 0x0, 0x6, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @dev={0xfe, 0x80}, [], "33cc6533eb08a2e9"}}}}}}}, 0x0) [ 116.620319] IPVS: ftp: loaded support on port[0] = 21 13:48:21 executing program 5: semget$private(0x0, 0x4, 0x0) 13:48:22 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f000000d000)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x10040000000000b}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}}, 0x1c) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x38, 0x3a, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0x2, 0x0, 0x0, 0x0, [], {0x0, 0x6, 'p+l', 0x0, 0x6, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @dev={0xfe, 0x80}, [], "33cc6533eb08a2e9"}}}}}}}, 0x0) 13:48:22 executing program 6: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0xa) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f0000000200)=0xc) r2 = syz_open_procfs(r1, &(0x7f0000000280)="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") sendfile(r0, r2, &(0x7f0000000040), 0x100000001) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) 13:48:22 executing program 5: shmget(0x2, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) 13:48:22 executing program 0: r0 = socket$inet(0x2, 0x80003, 0x2000000084) sendto$inet(r0, &(0x7f0000000080)="582f090000003326ed53712f09000003", 0x10, 0x0, &(0x7f0000000100)={0x2}, 0x10) 13:48:22 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cfb(blowfish-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="9134abc0", 0x4) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_elf32(r1, &(0x7f0000000180)=ANY=[], 0xffbd) recvmsg(r1, &(0x7f0000000340)={&(0x7f0000000100)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000500)=""/226, 0xe2}], 0x1}, 0x0) [ 116.908881] IPVS: ftp: loaded support on port[0] = 21 [ 116.916579] netlink: 'syz-executor2': attribute type 1 has an invalid length. [ 116.931738] netlink: 'syz-executor2': attribute type 1 has an invalid length. 13:48:22 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa}, 0x18) 13:48:22 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x8, &(0x7f0000000100)=0x0) io_submit(r1, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140)}]) 13:48:22 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f000000d000)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x10040000000000b}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}}, 0x1c) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x38, 0x3a, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0x2, 0x0, 0x0, 0x0, [], {0x0, 0x6, 'p+l', 0x0, 0x6, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @dev={0xfe, 0x80}, [], "33cc6533eb08a2e9"}}}}}}}, 0x0) 13:48:22 executing program 7: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7050000000000006a0a00fe00000000850000000b000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x77, &(0x7f0000000380)="9152de5a68ccec787b8123ed14f9", &(0x7f00000002c0)=""/119}, 0x28) 13:48:22 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00', 0x19, 0x3, 0x3b0, [0x20000980, 0x0, 0x0, 0x20000ba8, 0x20000cd0], 0x0, &(0x7f0000000000), &(0x7f0000000980)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x5, 0x0, 0x0, 'veth1_to_bond\x00', 'bridge_slave_0\x00', 'veth1_to_team\x00', 'ip6_vti0\x00', @link_local={0x1, 0x80, 0xc2}, [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xb0, 0xe8, 0x118, [@time={'time\x00', 0x18, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}}]}, [@snat={'snat\x00', 0x10, {{@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}}}]}, @common=@CLASSIFY={'CLASSIFY\x00', 0x8}}, {{{0x3, 0x0, 0x0, 'tunl0\x00', '\x00', 'bond0\x00', 'lo\x00', @random="d57fb022f458", [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0xa8, 0xe0}, [@snat={'snat\x00', 0x10, {{@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}}}]}, @arpreply={'arpreply\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x0, 'irlVn0\x00', 'bond_slave_1\x00', 'veth0_to_bond\x00', 'veth0_to_bond\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0x70, 0xc0, 0xf8}, [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz1\x00'}}}]}, @common=@mark={'mark\x00', 0x10}}]}, {0x0, '\x00', 0x3, 0xffffffffffffffff}, {0x0, '\x00', 0x3, 0xffffffffffffffff}]}, 0x428) 13:48:22 executing program 5: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x200000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chroot(&(0x7f0000000080)='./file0\x00') umount2(&(0x7f0000000040)='./file0\x00', 0x0) 13:48:22 executing program 6: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x200000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x0) [ 117.016520] kasan: CONFIG_KASAN_INLINE enabled [ 117.021212] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 117.028621] general protection fault: 0000 [#1] SMP KASAN [ 117.034166] CPU: 1 PID: 6586 Comm: syz-executor5 Not tainted 4.18.0-rc5-next-20180720+ #12 [ 117.042553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 117.051920] RIP: 0010:do_remount_sb+0x371/0x850 [ 117.056567] Code: ff ff ff e8 11 f9 f9 05 41 89 c5 48 8b 85 30 ff ff ff 48 8d b8 e0 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e b5 03 00 00 48 8b 85 30 ff ff [ 117.075895] RSP: 0018:ffff8801b218fa38 EFLAGS: 00010202 [ 117.081253] RAX: dffffc0000000000 RBX: ffff8801bbdb2d80 RCX: ffffc90006e3c000 [ 117.088516] RDX: 000000000000001c RSI: ffffffff81ee8f2f RDI: 00000000000000e0 [ 117.095773] RBP: ffff8801b218fb40 R08: ffff8801a8974280 R09: fffffbfff11c24e5 [ 117.103030] R10: fffffbfff11c24e5 R11: ffffffff88e1272b R12: ffff8801b218fb18 [ 117.110286] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 117.117556] FS: 00007fe808017700(0000) GS:ffff8801daf00000(0000) knlGS:0000000000000000 [ 117.125772] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 117.131639] CR2: 00000000004dbe20 CR3: 00000001b1134000 CR4: 00000000001406e0 [ 117.138898] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 117.146154] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 117.153417] Call Trace: [ 117.156001] ? kpageflags_read+0x370/0x370 [ 117.160235] ? user_get_super+0x250/0x250 [ 117.164377] ? down_write+0x8f/0x130 [ 117.168087] ? ksys_umount+0x8c2/0x12f0 [ 117.172049] ? down_read+0x1d0/0x1d0 [ 117.175754] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 117.181287] ? ns_capable_common+0x13f/0x170 [ 117.185693] ksys_umount+0xfa7/0x12f0 [ 117.189482] ? lock_release+0xa30/0xa30 [ 117.193459] ? __detach_mounts+0x430/0x430 [ 117.197687] ? mntput_no_expire+0x18e/0xbc0 [ 117.202004] ? do_raw_spin_lock+0xc1/0x200 [ 117.206232] ? mnt_get_count+0x150/0x150 [ 117.210282] ? dput.part.26+0x276/0x7a0 [ 117.214254] ? shrink_dcache_sb+0x350/0x350 [ 117.218566] ? current_umask+0x70/0x70 [ 117.222459] ? __x64_sys_futex+0x47f/0x6a0 [ 117.226685] ? do_futex+0x27d0/0x27d0 [ 117.230473] ? __ia32_sys_fchdir+0x1f0/0x1f0 [ 117.234875] __x64_sys_umount+0x54/0x80 [ 117.238837] do_syscall_64+0x1b9/0x820 [ 117.242714] ? finish_task_switch+0x1d3/0x870 [ 117.247196] ? syscall_return_slowpath+0x5e0/0x5e0 [ 117.252112] ? syscall_return_slowpath+0x31d/0x5e0 [ 117.257033] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 117.262039] ? prepare_exit_to_usermode+0x291/0x3b0 [ 117.267046] ? perf_trace_sys_enter+0xb10/0xb10 [ 117.271701] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 117.276541] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 117.281715] RIP: 0033:0x455ab9 [ 117.284886] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 117.304186] RSP: 002b:00007fe808016c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 117.311891] RAX: ffffffffffffffda RBX: 00007fe8080176d4 RCX: 0000000000455ab9 [ 117.319156] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 117.326412] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 117.333668] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 117.340923] R13: 00000000004c26ed R14: 00000000004d4320 R15: 0000000000000000 [ 117.348197] Modules linked in: [ 117.351381] Dumping ftrace buffer: [ 117.354912] (ftrace buffer empty) [ 117.359180] ---[ end trace febfa92fdc857b68 ]--- [ 117.363987] RIP: 0010:do_remount_sb+0x371/0x850 [ 117.368672] Code: ff ff ff e8 11 f9 f9 05 41 89 c5 48 8b 85 30 ff ff ff 48 8d b8 e0 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e b5 03 00 00 48 8b 85 30 ff ff [ 117.388007] RSP: 0018:ffff8801b218fa38 EFLAGS: 00010202 [ 117.393423] RAX: dffffc0000000000 RBX: ffff8801bbdb2d80 RCX: ffffc90006e3c000 [ 117.400720] RDX: 000000000000001c RSI: ffffffff81ee8f2f RDI: 00000000000000e0 [ 117.408033] RBP: ffff8801b218fb40 R08: ffff8801a8974280 R09: fffffbfff11c24e5 [ 117.416560] R10: fffffbfff11c24e5 R11: ffffffff88e1272b R12: ffff8801b218fb18 [ 117.423877] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 117.431175] FS: 00007fe808017700(0000) GS:ffff8801daf00000(0000) knlGS:0000000000000000 [ 117.439429] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 117.445336] CR2: 00000000004dbe20 CR3: 00000001b1134000 CR4: 00000000001406e0 [ 117.452635] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 117.459935] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 117.467237] Kernel panic - not syncing: Fatal exception [ 117.473100] Dumping ftrace buffer: [ 117.476632] (ftrace buffer empty) [ 117.480330] Kernel Offset: disabled [ 117.483953] Rebooting in 86400 seconds..