[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 29.119112] audit: type=1800 audit(1538869989.077:25): pid=5582 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 29.138156] audit: type=1800 audit(1538869989.077:26): pid=5582 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 29.177581] audit: type=1800 audit(1538869989.077:27): pid=5582 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.74' (ECDSA) to the list of known hosts. 2018/10/06 23:53:20 fuzzer started 2018/10/06 23:53:21 dialing manager at 10.128.0.26:38991 2018/10/06 23:53:21 syscalls: 1 2018/10/06 23:53:21 code coverage: enabled 2018/10/06 23:53:21 comparison tracing: enabled 2018/10/06 23:53:21 setuid sandbox: enabled 2018/10/06 23:53:21 namespace sandbox: enabled 2018/10/06 23:53:21 Android sandbox: /sys/fs/selinux/policy does not exist 2018/10/06 23:53:21 fault injection: enabled 2018/10/06 23:53:21 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/10/06 23:53:21 net packed injection: enabled 2018/10/06 23:53:21 net device setup: enabled 23:55:59 executing program 0: syzkaller login: [ 200.087627] IPVS: ftp: loaded support on port[0] = 21 23:56:00 executing program 1: [ 200.292453] IPVS: ftp: loaded support on port[0] = 21 23:56:00 executing program 2: [ 200.534023] IPVS: ftp: loaded support on port[0] = 21 23:56:00 executing program 3: [ 200.945540] IPVS: ftp: loaded support on port[0] = 21 23:56:01 executing program 4: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000240), 0xffffffffffffffff) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", r0, &(0x7f00000000c0)='./file0\x00') mkdirat(r0, &(0x7f0000000200)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x0) mount(&(0x7f0000000200)=ANY=[], &(0x7f0000000c40)='./file0\x00', &(0x7f0000000c80)='devtmpfs\x00', 0x0, &(0x7f0000000380)='md5sum/procposix_acl_accessvmnet0eth1self@mime_typelo\x00') openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x101000, 0x0) chroot(&(0x7f0000000200)='./file0\x00') [ 201.284283] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.307183] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.320359] device bridge_slave_0 entered promiscuous mode [ 201.391119] IPVS: ftp: loaded support on port[0] = 21 [ 201.448119] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.454546] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.462751] device bridge_slave_1 entered promiscuous mode [ 201.567287] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready 23:56:01 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) sendmmsg(r0, &(0x7f00000031c0)=[{{&(0x7f0000000240)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000001580)=[{&(0x7f0000000100)="03", 0x1}], 0x1, &(0x7f0000001600)}}], 0x1, 0x40080) [ 201.648978] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 201.883407] IPVS: ftp: loaded support on port[0] = 21 [ 201.993836] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 202.018412] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.024813] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.048340] device bridge_slave_0 entered promiscuous mode [ 202.059563] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.077032] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.084277] device bridge_slave_0 entered promiscuous mode [ 202.100316] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 202.148278] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.154671] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.166504] device bridge_slave_1 entered promiscuous mode [ 202.175202] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.195869] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.210838] device bridge_slave_1 entered promiscuous mode [ 202.267883] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 202.315312] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 202.360730] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 202.439169] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 202.547254] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 202.567853] team0: Port device team_slave_0 added [ 202.692318] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.699077] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.706486] device bridge_slave_0 entered promiscuous mode [ 202.716519] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 202.729658] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 202.747550] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 202.754785] team0: Port device team_slave_1 added [ 202.800223] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.817492] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.832943] device bridge_slave_1 entered promiscuous mode [ 202.848369] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 202.859810] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 202.870544] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 202.879025] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 202.902172] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 202.937986] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 202.946444] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 202.955093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 202.971435] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 203.005908] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 203.021560] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 203.047040] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 203.065956] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 203.074414] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 203.095967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 203.111473] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 203.137587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 203.165622] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 203.184448] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 203.199533] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 203.263608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 203.273417] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 203.286159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 203.294433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 203.331585] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.338941] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.361267] device bridge_slave_0 entered promiscuous mode [ 203.390275] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 203.489242] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.501200] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.513256] device bridge_slave_1 entered promiscuous mode [ 203.521162] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 203.537578] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 203.551991] team0: Port device team_slave_0 added [ 203.566635] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 203.575871] team0: Port device team_slave_0 added [ 203.585579] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 203.654179] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 203.670754] team0: Port device team_slave_1 added [ 203.682776] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 203.707660] team0: Port device team_slave_1 added [ 203.714826] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 203.747940] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.754366] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.771337] device bridge_slave_0 entered promiscuous mode [ 203.828692] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 203.836354] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 203.913185] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.923636] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.933756] device bridge_slave_1 entered promiscuous mode [ 203.943248] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 203.959954] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 203.968068] team0: Port device team_slave_0 added [ 203.979817] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 203.987231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 203.995064] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 204.025816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 204.038108] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 204.050563] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 204.065149] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 204.081981] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 204.108182] team0: Port device team_slave_1 added [ 204.113704] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 204.124541] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 204.134217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 204.145784] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 204.155202] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 204.177580] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 204.185513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 204.213310] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 204.228364] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 204.254672] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 204.277802] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 204.286328] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 204.297552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 204.311511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 204.327940] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 204.337449] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 204.350154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 204.379343] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 204.392558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 204.438123] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 204.513552] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.519976] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.526621] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.533033] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.561325] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 204.576677] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 204.587063] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 204.595847] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 204.630717] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 204.667241] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 204.684957] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 204.700262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 204.746812] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 204.795661] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 204.818089] team0: Port device team_slave_0 added [ 204.879606] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 204.907714] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 204.914560] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 204.940269] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 204.958218] team0: Port device team_slave_1 added [ 205.074398] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 205.097735] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 205.119137] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 205.188262] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 205.198243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 205.205985] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 205.306067] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 205.313726] team0: Port device team_slave_0 added [ 205.335487] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 205.357651] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 205.373353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 205.467195] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 205.474411] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 205.482839] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 205.494710] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.501107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.507769] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.514120] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.521720] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 205.538956] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.545381] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.552048] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.558436] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.588858] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 205.595503] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 205.607427] team0: Port device team_slave_1 added [ 205.693559] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 205.787266] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.793649] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.800307] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.806671] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.822967] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 205.837229] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 205.887110] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 205.907257] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 205.914435] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 205.948869] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 205.963860] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 205.997743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 206.034997] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 206.050588] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 206.061101] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 206.663542] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.669975] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.676608] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.683004] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.701127] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 206.905052] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 207.089519] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.095926] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.102587] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.108973] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.121951] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 207.937522] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 208.748506] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.134082] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 209.453337] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.477890] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 209.485452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 209.492813] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 209.726865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.830418] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 209.842987] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.870713] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.139411] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 210.148920] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 210.164157] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 210.177565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 210.194883] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 210.477716] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.516093] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 210.522325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 210.535877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 210.545417] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 210.561084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 210.587578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 210.676277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.867272] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.883993] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.108525] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.135671] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 211.482106] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 211.499845] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 211.509538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 211.523118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 211.842560] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 211.857890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 211.871142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 211.902537] 8021q: adding VLAN 0 to HW filter on device team0 23:56:12 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0xe440, 0x103802) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="8b", 0x1}], 0x1) [ 212.216561] 8021q: adding VLAN 0 to HW filter on device team0 23:56:12 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000001400)=@alg, 0x80, &(0x7f0000000380), 0x0, &(0x7f0000002740)=""/218, 0xda}}], 0x1, 0x0, &(0x7f0000002e40)) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000080), 0xc, &(0x7f0000000000)={&(0x7f00000003c0)={0x14, 0x42, 0x105}, 0x14}}, 0x0) 23:56:12 executing program 0: listen(0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000280)={'bond_slave_1\x00', &(0x7f0000000240)=@ethtool_pauseparam={0x13}}) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xc0109207, 0x20000000) fcntl$getown(0xffffffffffffffff, 0x9) 23:56:12 executing program 0: syz_emit_ethernet(0x4a, &(0x7f0000000240)={@link_local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x3, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x29, 0x0, @empty, @broadcast}, @udp={0x0, 0x0, 0x28}}}}}, &(0x7f0000000380)) [ 212.544150] sit: non-ECT from 0.0.0.0 with TOS=0x3 [ 212.570587] sit: non-ECT from 0.0.0.0 with TOS=0x3 23:56:12 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x12, 0x10, 0x0, 0x101}, 0xf) 23:56:12 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket(0x10, 0x803, 0x0) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0xb, &(0x7f0000000040), 0x20a155a0) 23:56:12 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)={'syz1', "b7e37d592b995b9664217a9ed853eb674ea587d125ae46c4666677a88a4d627865472c8756ddfb1101625c3848fb2cadbfef99477f96b6856cf016b57e9fb7451487943c2a5c03cedf9a7437961b7514513818281b6cecc1d4a36d85040c4c6841f8230ec0c0329fe1d208bd846389e55bf2492a6e00d5629f3e05ca33ae25ec4c8e6672ed18b33f2dd915794559c80b83829e5e3e908373a5664aa4791c56758d14ddce0f5b481c8f0de7ffaac642aa43"}, 0xb5) socketpair$unix(0x1, 0x400000001, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) r3 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x18, 0x0, &(0x7f0000000000)=[@free_buffer={0x40086303, r3}, @free_buffer={0x40086303, r3}], 0x0, 0x0, &(0x7f0000000040)}) [ 212.909533] binder: 7245:7247 got transaction to context manager from process owning it [ 212.937305] binder: 7245:7247 transaction failed 29201/-22, size 0-0 line 2846 [ 212.963346] binder: 7245:7247 BC_FREE_BUFFER u0000000020001000 no match [ 212.981822] binder: 7245:7247 BC_FREE_BUFFER u0000000020001000 no match [ 213.016878] binder: undelivered TRANSACTION_ERROR: 29201 23:56:13 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = memfd_create(&(0x7f0000000e00)="0fc5d4e13fd144bbf9daf670ef2ff42c2503df76b6a5a8122b40164ba81c781200000000cd5faf6ba8217417e69eb7566f581b7580be20c876cb0fd107b06d", 0x0) write$binfmt_aout(r3, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0xf, 0x11, r3, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000001c0)={[{}, {0x0, 0x200000000}, {0x0, 0x0, 0xfffffffffffffffb}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:56:13 executing program 0: r0 = memfd_create(&(0x7f0000000240)="2e001b2121894de067a1504545d99e", 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000043ff3)='/dev/snd/seq\x00', 0x0, 0x802) r2 = dup2(r1, r0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000041f74)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000140)=[{0x0, 0x3, 0x0, 0x0, @tick=0x5, {}, {}, @queue}], 0x30) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x362, @time={0x0, 0x989680}}) 23:56:13 executing program 2: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)) [ 213.180562] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. [ 213.210651] hrtimer: interrupt took 26130 ns 23:56:13 executing program 0: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000200)=ANY=[], &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, &(0x7f00000002c0)) r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x404402) accept$unix(r0, &(0x7f0000000140), &(0x7f0000000040)=0x6e) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./file0/file1\x00', 0x0) mkdir(&(0x7f0000000300)='./file0/file1/file0\x00', 0x0) rename(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file0/file1\x00') [ 213.545872] tmpfs: No value for mount option 'md5sum/procposix_acl_accessvmnet0eth1self@mime_typelo' [ 213.557963] tmpfs: No value for mount option 'md5sum/procposix_acl_accessvmnet0eth1self@mime_typelo' 23:56:14 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_emit_ethernet(0x7e, &(0x7f0000000140)={@local, @link_local={0x1, 0x80, 0xc2, 0xe80}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0xf, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, @local, @dev, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, &(0x7f00000000c0)) r1 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x6, 0x0) ioctl$KVM_GET_MP_STATE(r1, 0x8004ae98, &(0x7f0000000300)) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpu.stat\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x12, 0xa, &(0x7f0000000340)=@raw=[@jmp={0x5, 0x13c, 0xd, 0x6, 0x4, 0xfffffffffffffff8, 0x8}, @alu={0x7, 0x5, 0xc, 0xb, 0x1, 0xffffffffffffffc0, 0xfffffffffffffff4}, @generic={0x3e, 0x0, 0x3, 0x1c7c9e80}, @alu={0x0, 0x0, 0x9, 0xe, 0x9, 0xfffffffffffffffd, 0x8}, @ldst={0x3, 0x3, 0x3, 0x0, 0x1, 0x118, 0xfffffffffffffff0}], &(0x7f00000003c0)='GPL\x00', 0xfff, 0x0, 0x0, 0x0, 0x1, [], 0x0, 0xf}, 0x48) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000040)) syz_emit_ethernet(0x92, &(0x7f00000001c0)={@empty, @local, [{[], {0x8100, 0x9, 0x4, 0x2}}], {@mpls_mc={0x8848, {[{0x498, 0x0, 0xfffffffffffffffd, 0x7e00000000000}, {0x3ff, 0x0, 0xffff, 0x3f}, {0x101, 0x9, 0x3, 0x4}, {0x400, 0x801, 0x1, 0x9}, {0x8, 0x0, 0xfffffffffffff3a7, 0x6}, {0x401, 0x48, 0x0, 0xfffffffffffff72a}, {0x0, 0x8c3, 0xfffffffffffffffb, 0x5}, {0x3, 0x800, 0x5, 0x7}, {0x4, 0x3, 0x1f, 0x80000001}], @ipv4={{0xc, 0x4, 0x0, 0x3, 0x5c, 0x65, 0x4, 0x80, 0x27, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}, @broadcast, {[@cipso={0x86, 0x1c, 0xec, [{0x5, 0xc, "1f7fd548b454a619aaa2"}, {0x5, 0x7, "a0290d72bb"}, {0x1, 0x3, "e0"}]}]}}, @icmp=@parameter_prob={0xc, 0x0, 0x0, 0x800, 0x4, 0x0, {0x9, 0x4, 0xffff, 0x1, 0x3, 0x67, 0xfffffffffffffbff, 0x10000000000, 0x3, 0x7, @multicast2, @dev={0xac, 0x14, 0x14, 0x19}, {[@cipso={0x86, 0xe, 0x2, [{0x0, 0x8, "e170576aff39"}]}]}}}}}}}}, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000100)={0x80}, 0x4) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) 23:56:14 executing program 2: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) r2 = dup3(r0, r0, 0x80000) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r2, 0xc008551b, &(0x7f0000000000)={0x2, 0x20, [0x40, 0x7, 0x1, 0x3, 0x24b, 0x1ffc00, 0x7ff, 0x6]}) ptrace(0x4207, r1) ptrace$pokeuser(0x6, r1, 0x0, 0x0) 23:56:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00/\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00000000006970000000000c00020008000f0002000000"], 0x189}}, 0x0) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x80000) clock_gettime(0x4, &(0x7f0000000200)={0x0, 0x0}) nanosleep(&(0x7f0000000100)={r2, r3+10000000}, &(0x7f0000000140)) setsockopt$inet_tcp_int(r1, 0x6, 0x0, &(0x7f00000000c0)=0x708a, 0x4) 23:56:14 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000580)='/dev/snapshot\x00', 0x1, 0x0) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f00000005c0)={0xf000, 0x100004, 0xbc, 0x3, 0x20}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = syz_open_dev$dspn(&(0x7f0000000300)='/dev/dsp#\x00', 0xb3, 0x0) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000380)='fou\x00') sendmsg$FOU_CMD_GET(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800110}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, r3, 0x908, 0x70bd29, 0x25dfdbfe, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x1}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x3b}, @FOU_ATTR_TYPE={0x8, 0x4, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000000) ioctl$KVM_ENABLE_CAP_CPU(r1, 0xc008ae88, &(0x7f00000000c0)={0x2, 0x0, [0x10a]}) r4 = syz_open_dev$usb(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x8, 0x2000) connect$vsock_stream(r4, &(0x7f00000002c0), 0x10) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x80200, 0x10) ioctl$LOOP_GET_STATUS(r5, 0x4c03, &(0x7f0000000480)) setsockopt$inet6_MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000200)={{0xa, 0x4e20, 0x20, @remote, 0x6}, {0xa, 0x4e24, 0x1, @mcast1}, 0x7f, [0x81, 0x3, 0x7, 0x4, 0x10001, 0x100000000, 0x7, 0xfff]}, 0x5c) ioctl$TIOCSLCKTRMIOS(r4, 0x5457, &(0x7f0000000540)) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x101002, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000140)="67660f38817f0066ba410066edb805000000b9000000000f01d96466410f38819d3000000066ba2100b0dbee420f01cf66ba4200edc4a3d9229700100000006544d9e5440f30", 0x46}], 0x1, 0x8, &(0x7f00000001c0), 0x0) 23:56:14 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1004010, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x70, 0x200000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e21, 0xeb94, @mcast1, 0x5}}, [0x6, 0x800, 0x38de, 0x10000, 0x0, 0x80000000, 0x1f, 0x9, 0x3, 0x6, 0xab, 0x80000000, 0x3, 0x4, 0x7ff]}, &(0x7f0000000180)=0x100) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f00000001c0)={r3, 0x0, 0x5}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x8031, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@dev, @in6=@ipv4={[], [], @rand_addr}}}, {{@in=@multicast2}, 0x0, @in=@rand_addr}}, &(0x7f0000000580)=0xe8) setsockopt$sock_void(r4, 0x1, 0x24, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200)={0xffffffffffffffff}, 0x13f, 0xb}}, 0x20) getsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000400)={r3, 0xf97}, &(0x7f0000000440)=0x8) write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000280)={0x6, 0x118, 0xfa00, {{0xffffffffffffffff, 0x50e47d1e, "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", 0x49, 0x8, 0x6, 0x3, 0x4, 0xffff, 0x8, 0x1}, r6}}, 0x120) 23:56:14 executing program 0: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x2, 0x0, &(0x7f00000000c0)=@raw, &(0x7f0000000100)='syzkaller\x00', 0x6b1b3afc, 0x59, &(0x7f0000000140)=""/89, 0x41000, 0x1, [], r0, 0xd}, 0x48) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sysfs$3(0x3) request_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='GPL^\x00', 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0x80, 0x7, 0x2, 0x2, 0x5}, &(0x7f00000001c0)=0x14) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000200)={r2, 0xb1ad, 0x2, [0x82fb, 0xef]}, &(0x7f0000000240)=0xc) 23:56:14 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) unlink(&(0x7f0000000000)='./file0\x00') ioctl$KVM_TRANSLATE(r3, 0x4138ae84, &(0x7f00000001c0)) ioctl$RTC_AIE_OFF(r1, 0x7002) 23:56:14 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x1, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000180)="1de4bc7d", 0x4}], 0x1) connect$bt_l2cap(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, 0x8, {0x5ece, 0x3, 0x0, 0x5, 0x100, 0x81}, 0x0, 0x6}, 0xe) epoll_create(0x31) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000280), 0x0) read(r0, &(0x7f0000000340)=""/3, 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000}, &(0x7f0000000100)={0x20}, &(0x7f0000000140)={0x8}, &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000280)) 23:56:14 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x10, 0x80803, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0xffffffff7fffffff, 0x40000) ioctl$KVM_PPC_GET_SMMU_INFO(r2, 0x8250aea6, &(0x7f0000000140)=""/151) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$nbd(r3, &(0x7f0000000240)={0x67446698, 0x1, 0x0, 0x0, 0x2, "7f045523caba34985cc15e81ff03a8f22c4d1e1c9fb4ed332833ca7e273160146b172fdfc2ebc4a63da40b589d1b63b5737a4314b35e02ea96969ce6012a0aad1c3cfd6b85bd07c98ec047b78686063f854c6f3b37a1ef92dbf868d02a3a7f40e0282ab1b89c715cbfb93535238a3ad3fc52371a0619942ec32b6e3a82f17dda25746c1dc389e2d3e3444049f39908b6000c6c6c91fbdbb6cbac354ee08d020cc598ae73da671e5ffcaf1d79c9c83c992915eb94ab9c6836ac35cbe8e789e242f5f2391a9b6da14efed9"}, 0xda) dup3(r1, r1, 0x80000) [ 214.652633] netlink: 24 bytes leftover after parsing attributes in process `syz-executor2'. 23:56:14 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000007002e2f66696c6530000000000000"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RREADDIR(r1, &(0x7f00000006c0)={0xcb, 0x29, 0x1, {0x200, [{{0x14, 0x1, 0x2}, 0x100000001, 0x7, 0x7, './file0'}, {{0x40, 0x1}, 0x6, 0xbe, 0x7, './file0'}, {{0x40, 0x0, 0x8}, 0x8000, 0x3, 0x7, './file0'}, {{0x10, 0x1, 0x2}, 0x2, 0x40000000, 0xd, './file0/file0'}, {{0x61, 0x1, 0x3}, 0xf445, 0xb7, 0x7, './file0'}, {{0x8, 0x0, 0x4}, 0xffff, 0x80, 0x7, './file0'}]}}, 0xcb) write$P9_RGETATTR(r1, &(0x7f0000000600)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RMKDIR(r1, &(0x7f0000000180)={0x14, 0x49, 0x1, {0x0, 0x1}}, 0x14) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@posixacl='posixacl'}]}}) [ 214.804849] WARNING: CPU: 0 PID: 7388 at mm/slab_common.c:1031 kmalloc_slab+0x56/0x70 [ 214.812866] Kernel panic - not syncing: panic_on_warn set ... [ 214.812866] [ 214.820254] CPU: 0 PID: 7388 Comm: syz-executor2 Not tainted 4.19.0-rc6+ #271 [ 214.827526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 214.836877] Call Trace: [ 214.839476] dump_stack+0x1c4/0x2b4 [ 214.843115] ? dump_stack_print_info.cold.2+0x52/0x52 [ 214.848316] panic+0x238/0x4e7 [ 214.851523] ? add_taint.cold.5+0x16/0x16 [ 214.855682] ? __warn.cold.8+0x148/0x1ba [ 214.859750] ? kmalloc_slab+0x56/0x70 [ 214.863560] __warn.cold.8+0x163/0x1ba [ 214.867456] ? kmalloc_slab+0x56/0x70 [ 214.871265] report_bug+0x254/0x2d0 [ 214.874901] do_error_trap+0x1fc/0x4d0 [ 214.878793] ? math_error+0x3f0/0x3f0 [ 214.882606] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 214.887459] ? trace_hardirqs_on_caller+0x310/0x310 [ 214.892487] ? p9_fid_destroy+0x9f/0xd0 [ 214.896477] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 214.901329] do_invalid_op+0x1b/0x20 [ 214.905051] invalid_op+0x14/0x20 [ 214.908515] RIP: 0010:kmalloc_slab+0x56/0x70 [ 214.912931] Code: c5 60 ab 00 89 5d c3 48 85 ff b8 10 00 00 00 74 f4 83 ef 01 c1 ef 03 0f b6 87 80 aa 00 89 eb d8 31 c0 81 e6 00 02 00 00 75 db <0f> 0b 5d c3 48 8b 04 c5 a0 aa 00 89 5d c3 66 90 66 2e 0f 1f 84 00 [ 214.931838] RSP: 0018:ffff88018a317980 EFLAGS: 00010246 [ 214.937209] RAX: 0000000000000000 RBX: 0000011400000200 RCX: ffffc90005e8a000 [ 214.944479] RDX: 000000000001d152 RSI: 0000000000000000 RDI: 0000011400000200 [ 214.951749] RBP: ffff88018a317980 R08: ffff88018a2ba2c0 R09: fffffbfff12e13b4 [ 214.959021] R10: fffffbfff12e13b4 R11: ffffffff89709da3 R12: fffffffffffffff4 [ 214.966298] R13: ffff8801d88eff00 R14: ffff8801d88eff00 R15: 0000000000608040 [ 214.973598] __kmalloc+0x25/0x760 [ 214.977062] ? v9fs_mount+0x764/0x8f0 [ 214.980869] ? __v9fs_get_acl+0xc5/0x170 [ 214.984938] __v9fs_get_acl+0xc5/0x170 [ 214.988833] v9fs_get_acl+0xe5/0x2a0 [ 214.992554] v9fs_mount+0x636/0x8f0 [ 214.996188] ? alloc_pages_current+0x114/0x210 [ 215.000779] mount_fs+0xae/0x31d [ 215.004158] vfs_kern_mount.part.35+0xdc/0x4f0 [ 215.008749] ? may_umount+0xb0/0xb0 [ 215.012389] ? _raw_read_unlock+0x2c/0x50 [ 215.016548] ? __get_fs_type+0x97/0xc0 [ 215.020442] do_mount+0x581/0x31f0 [ 215.023990] ? trace_hardirqs_off+0x310/0x310 [ 215.028495] ? copy_mount_string+0x40/0x40 [ 215.032739] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 215.037511] ? retint_kernel+0x2d/0x2d [ 215.041434] ? copy_mount_options+0x1a1/0x380 [ 215.045945] ? __sanitizer_cov_trace_pc+0x48/0x50 [ 215.050797] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 215.056342] ? copy_mount_options+0x288/0x380 [ 215.059105] PM: Basic memory bitmaps created [ 215.060889] ksys_mount+0x12d/0x140 [ 215.060906] __x64_sys_mount+0xbe/0x150 [ 215.060924] ? do_syscall_64+0xca/0x820 [ 215.060939] do_syscall_64+0x1b9/0x820 [ 215.060955] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 215.060980] ? syscall_return_slowpath+0x5e0/0x5e0 [ 215.091098] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 215.095951] ? trace_hardirqs_on_caller+0x310/0x310 [ 215.100980] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 215.106011] ? prepare_exit_to_usermode+0x291/0x3b0 [ 215.111045] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 215.115899] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 215.121119] RIP: 0033:0x457579 [ 215.124318] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 215.143227] RSP: 002b:00007f775ecb3c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 215.150940] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000457579 [ 215.158219] RDX: 00000000200003c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 215.165490] RBP: 000000000072bf00 R08: 00000000200004c0 R09: 0000000000000000 [ 215.172758] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f775ecb46d4 [ 215.180022] R13: 00000000004c28b5 R14: 00000000004d3c90 R15: 00000000ffffffff [ 215.188261] Kernel Offset: disabled [ 215.191885] Rebooting in 86400 seconds..