[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 61.980298][ T27] audit: type=1800 audit(1576101154.642:25): pid=8871 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 62.002019][ T27] audit: type=1800 audit(1576101154.642:26): pid=8871 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 62.046362][ T27] audit: type=1800 audit(1576101154.642:27): pid=8871 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.235' (ECDSA) to the list of known hosts. 2019/12/11 21:52:44 fuzzer started 2019/12/11 21:52:46 dialing manager at 10.128.0.26:33577 2019/12/11 21:52:46 syscalls: 2701 2019/12/11 21:52:46 code coverage: enabled 2019/12/11 21:52:46 comparison tracing: enabled 2019/12/11 21:52:46 extra coverage: enabled 2019/12/11 21:52:46 setuid sandbox: enabled 2019/12/11 21:52:46 namespace sandbox: enabled 2019/12/11 21:52:46 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/11 21:52:46 fault injection: enabled 2019/12/11 21:52:46 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/11 21:52:46 net packet injection: enabled 2019/12/11 21:52:46 net device setup: enabled 2019/12/11 21:52:46 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/12/11 21:52:46 devlink PCI setup: PCI device 0000:00:10.0 is not available 21:54:24 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000001840)=[{&(0x7f0000000200)=""/252, 0xfc}, {0x0}], 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xccf3, 0x0, 0x0, 0x800e00545) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f0000000840)=[{&(0x7f0000000100)=""/111, 0x6f}, {0x0}, {0x0}], 0x3) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) r4 = dup(r2) shutdown(r4, 0x0) r5 = socket$inet6_sctp(0x1c, 0x5, 0x84) readv(r5, &(0x7f0000000700)=[{&(0x7f0000000580)=""/180, 0xb4}, {0x0}, {0x0}], 0x1000000000000220) shutdown(r3, 0x0) shutdown(r1, 0x0) syzkaller login: [ 172.169943][ T9035] IPVS: ftp: loaded support on port[0] = 21 21:54:24 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x1, 0x0, 0x0, 0x3}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000002440)={{{@in6=@mcast2, @in6=@initdev}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @broadcast}}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000680)=@tipc=@id, &(0x7f0000000180)=0x80) r4 = syz_open_procfs(0x0, &(0x7f00000010c0)='net/tcp6\x00') read$FUSE(r4, &(0x7f0000001100), 0x11e5) syz_open_dev$vcsa(0x0, 0x0, 0x0) inotify_init1(0x0) syz_open_procfs(0x0, &(0x7f00000010c0)='net/tcp6\x00') [ 172.315072][ T9035] chnl_net:caif_netlink_parms(): no params data found [ 172.385738][ T9035] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.395175][ T9035] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.404758][ T9035] device bridge_slave_0 entered promiscuous mode [ 172.414451][ T9035] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.423131][ T9035] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.431900][ T9035] device bridge_slave_1 entered promiscuous mode 21:54:25 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f0000003800)=[{&(0x7f0000001540)='RDSK', 0x4, 0x800}]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x7ff, 0x101000) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, &(0x7f0000000080)=""/223, &(0x7f0000000180)=0xdf) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 172.458197][ T9035] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.472606][ T9035] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.517477][ T9038] IPVS: ftp: loaded support on port[0] = 21 [ 172.523635][ T9035] team0: Port device team_slave_0 added [ 172.525926][ T9035] team0: Port device team_slave_1 added [ 172.614200][ T9035] device hsr_slave_0 entered promiscuous mode [ 172.669978][ T9035] device hsr_slave_1 entered promiscuous mode 21:54:25 executing program 3: unshare(0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r0 = socket$inet(0x2, 0x0, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000340)='./file0\x00', 0x0, 0x2001251, 0x0) connect(0xffffffffffffffff, &(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x4, 0x0, 0x2, 0x4, {0xa, 0x4e20, 0xfb84, @remote}}}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0xf, &(0x7f0000000480)=ANY=[@ANYBLOB="85000000070000002500000000000000950000000000000067e8f7150fcd34cfa572170d70f0661c392ece1cb9e901020a7b61a2bdc7a79312eac99327279c87453bfa60915fe588587502cbe79535b1c95f130885cfde2a21a1adfc51e0d98e025c404e361ec0384db246e6e743930c419bf68d47dbabc53ab01888c3a72966c5c2fa7cc548599c7318c11cbc621c08c70d74ba71bba6ceb7a69832cb478e44dbb471db8eed8ff6685ccbe27802053247264c9218c9bcfbb14edd6ad52bd0e578a4968029ca0d06b27c"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r3 = pkey_alloc(0x0, 0xab3677fb0f82d5f0) pkey_mprotect(&(0x7f0000f5a000/0x2000)=nil, 0x2000, 0x1000000, r3) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f0000000200)={0x2e, @empty, 0x4e21, 0x0, 'wlc\x00', 0x2, 0x8, 0x1e}, 0x2c) fanotify_mark(0xffffffffffffffff, 0x65, 0x0, 0xffffffffffffffff, 0x0) [ 172.790601][ T9040] IPVS: ftp: loaded support on port[0] = 21 [ 172.859175][ T9035] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 172.933544][ T9035] netdevsim netdevsim0 netdevsim1: renamed from eth1 21:54:25 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001380)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r1, 0x40045566, 0x8) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) ioctl$CAPI_GET_FLAGS(0xffffffffffffffff, 0x80044323, &(0x7f0000000140)) waitid(0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x1, &(0x7f0000000240)) syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x7) [ 172.993797][ T9035] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 173.066336][ T9035] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 173.141320][ T9042] IPVS: ftp: loaded support on port[0] = 21 [ 173.194820][ T9035] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.202116][ T9035] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.210008][ T9035] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.217097][ T9035] bridge0: port 1(bridge_slave_0) entered forwarding state 21:54:25 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7}, 0x0) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x9cf4, 0x0, 0x0, 0x800e0075d) shutdown(r1, 0x0) shutdown(r2, 0x0) [ 173.321517][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.335382][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.380656][ T9038] chnl_net:caif_netlink_parms(): no params data found [ 173.404912][ T9046] IPVS: ftp: loaded support on port[0] = 21 [ 173.535520][ T9035] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.542895][ T9038] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.550710][ T9038] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.558563][ T9038] device bridge_slave_0 entered promiscuous mode [ 173.569537][ T9038] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.576866][ T9038] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.584658][ T9038] device bridge_slave_1 entered promiscuous mode [ 173.609832][ T9038] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.627429][ T9049] IPVS: ftp: loaded support on port[0] = 21 [ 173.631438][ T9035] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.653860][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 173.663314][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 173.673895][ T9038] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.755108][ T9038] team0: Port device team_slave_0 added [ 173.763058][ T9038] team0: Port device team_slave_1 added [ 173.794110][ T9042] chnl_net:caif_netlink_parms(): no params data found [ 173.851655][ T9038] device hsr_slave_0 entered promiscuous mode [ 173.900102][ T9038] device hsr_slave_1 entered promiscuous mode [ 173.939841][ T9038] debugfs: Directory 'hsr0' with parent '/' already present! [ 173.953798][ T9044] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 173.962939][ T9044] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 173.971862][ T9044] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.978971][ T9044] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.988492][ T9044] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 173.997168][ T9044] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 174.007422][ T9044] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.014534][ T9044] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.041973][ T9040] chnl_net:caif_netlink_parms(): no params data found [ 174.115778][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 174.147275][ T9042] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.154917][ T9042] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.162847][ T9042] device bridge_slave_0 entered promiscuous mode [ 174.202225][ T9042] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.209312][ T9042] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.217591][ T9042] device bridge_slave_1 entered promiscuous mode [ 174.225265][ T9046] chnl_net:caif_netlink_parms(): no params data found [ 174.246403][ T9040] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.254527][ T9040] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.264555][ T9040] device bridge_slave_0 entered promiscuous mode [ 174.275645][ T9040] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.283112][ T9040] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.293268][ T9040] device bridge_slave_1 entered promiscuous mode [ 174.306285][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 174.328803][ T9038] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 174.382758][ T9038] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 174.482206][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 174.491497][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 174.500537][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 174.508393][ T9038] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 174.553929][ T9042] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.569487][ T9046] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.578224][ T9046] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.586297][ T9046] device bridge_slave_0 entered promiscuous mode [ 174.594934][ T9046] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.602591][ T9046] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.610948][ T9046] device bridge_slave_1 entered promiscuous mode [ 174.620257][ T9038] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 174.653330][ T9042] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.665980][ T9040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.679317][ T9040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.716669][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 174.726252][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 174.752157][ T9046] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.763435][ T9042] team0: Port device team_slave_0 added [ 174.772912][ T9046] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.787838][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 174.796549][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 174.816637][ T9040] team0: Port device team_slave_0 added [ 174.838924][ T9042] team0: Port device team_slave_1 added [ 174.861051][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 174.869544][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 174.880274][ T9035] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 174.896676][ T9040] team0: Port device team_slave_1 added [ 174.930181][ T9046] team0: Port device team_slave_0 added [ 174.938387][ T9046] team0: Port device team_slave_1 added [ 174.956064][ T9049] chnl_net:caif_netlink_parms(): no params data found [ 174.994331][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 175.001985][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 175.039279][ T9035] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.101731][ T9040] device hsr_slave_0 entered promiscuous mode [ 175.130538][ T9040] device hsr_slave_1 entered promiscuous mode [ 175.169742][ T9040] debugfs: Directory 'hsr0' with parent '/' already present! [ 175.221639][ T9042] device hsr_slave_0 entered promiscuous mode [ 175.259950][ T9042] device hsr_slave_1 entered promiscuous mode [ 175.319907][ T9042] debugfs: Directory 'hsr0' with parent '/' already present! [ 175.363845][ T9046] device hsr_slave_0 entered promiscuous mode [ 175.409964][ T9046] device hsr_slave_1 entered promiscuous mode [ 175.459789][ T9046] debugfs: Directory 'hsr0' with parent '/' already present! [ 175.545606][ T9049] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.553224][ T9049] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.561727][ T9049] device bridge_slave_0 entered promiscuous mode [ 175.586725][ T9049] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.595438][ T9049] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.604128][ T9049] device bridge_slave_1 entered promiscuous mode [ 175.628599][ T9049] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.659368][ T9042] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 175.722883][ T9049] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.746518][ T9046] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 175.811779][ T9046] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 175.864670][ T9042] netdevsim netdevsim3 netdevsim1: renamed from eth1 21:54:28 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3c) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/128, 0x80}], 0x1) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x8800) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000480)="a9", 0x1}], 0x1) [ 175.913890][ T9042] netdevsim netdevsim3 netdevsim2: renamed from eth2 21:54:28 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000c40)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r1) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'bridge_slave_1\x00', &(0x7f0000000280)=ANY=[@ANYRES32=r4]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xc) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000000)={'syz_tun\x00', 0x0}) [ 175.973973][ T9042] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 176.031751][ T9040] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 176.082149][ T9046] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 176.129239][ T9049] team0: Port device team_slave_0 added [ 176.136960][ T9040] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 176.181983][ T9046] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 176.259295][ T9038] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.272782][ T9049] team0: Port device team_slave_1 added [ 176.278662][ T9040] netdevsim netdevsim2 netdevsim2: renamed from eth2 21:54:29 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000c40)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r1) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'bridge_slave_1\x00', &(0x7f0000000280)=ANY=[@ANYRES32=r4]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xc) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000000)={'syz_tun\x00', 0x0}) [ 176.358644][ T9040] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 176.473542][ T9049] device hsr_slave_0 entered promiscuous mode [ 176.522873][ T9049] device hsr_slave_1 entered promiscuous mode [ 176.559806][ T9049] debugfs: Directory 'hsr0' with parent '/' already present! [ 176.580743][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 176.588702][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 176.609821][ T9038] 8021q: adding VLAN 0 to HW filter on device team0 21:54:29 executing program 0: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='trusted.overlay.origin\x00', &(0x7f0000000380)='y\x00', 0x2, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x4e22, @empty}, {0x2, 0x4e20, @remote}, {0x2, 0x4e24, @empty}, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x40}) socketpair$unix(0x1, 0x8000000000005, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e22, @local}, {0x2, 0x0, @rand_addr=0x7}, {0x2, 0x4e22, @multicast2}, 0x8, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000000)='vxcan1\x00', 0x3, 0x8001, 0x1f}) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000001240)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4620, 0x4, 'l\x02p\xaa[\xbb$\xf5\x9c\x00\x00\x04\x00', 0x1, 0x1f, 0x5b}, 0x2c) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r1, &(0x7f00000013c0)={0x18}) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r6, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000200)) lseek(r0, 0x4, 0x0) [ 176.678857][ T9050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 176.704344][ T9050] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 176.716673][ T9050] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.724012][ T9050] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.732399][ T9050] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 176.742830][ T9050] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 176.754651][ T9050] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.762346][ T9050] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.770814][ T9050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 176.781792][ T9050] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 176.789866][ T9050] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 176.838561][ T9049] netdevsim netdevsim5 netdevsim0: renamed from eth0 21:54:29 executing program 0: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000180)=@req3={0x401}, 0x1c) close(r0) [ 176.919765][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 176.928577][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 176.945012][ T9049] netdevsim netdevsim5 netdevsim1: renamed from eth1 21:54:29 executing program 0: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000180)=@req3={0x401}, 0x1c) close(r0) [ 177.002253][ T9049] netdevsim netdevsim5 netdevsim2: renamed from eth2 21:54:29 executing program 0: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000180)=@req3={0x401}, 0x1c) close(r0) [ 177.044687][ T9049] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 177.103429][ T9045] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 177.158172][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 177.167472][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 177.184374][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 177.193463][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 177.224417][ T9038] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 177.244250][ T9038] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 177.260069][ T9046] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.266913][ T9045] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 177.278999][ T9045] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 177.309059][ T9040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.321518][ T9042] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.346595][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 177.354543][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 177.371906][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 177.379815][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 177.397982][ T9050] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 177.406070][ T9050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 177.418983][ T9038] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.428406][ T9046] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.444816][ T9040] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.466175][ T9042] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.474056][ T9050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 177.483765][ T9050] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 177.495196][ T9050] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.502313][ T9050] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.510573][ T9050] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 177.518281][ T9050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 177.527598][ T9050] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 177.562466][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 177.571927][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 177.581560][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.588640][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.597138][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 177.606140][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 177.614982][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.622119][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.630593][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 177.639294][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 177.648023][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.655144][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.663593][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 177.672286][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 177.680907][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.687960][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.695761][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 177.705035][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 177.714390][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 177.723223][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.730452][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.739238][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 177.747846][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 177.802226][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 177.815948][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 177.830166][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 177.839078][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 177.848266][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 177.856928][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 177.865923][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 177.875072][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 177.897696][ T9046] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 177.909328][ T9046] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 177.941486][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 177.953224][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 177.962803][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 177.971650][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 177.980691][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 177.989163][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 177.997917][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 178.006471][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 178.015914][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 178.024330][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 178.043920][ T9049] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.053048][ T9045] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 178.062260][ T9045] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 178.085549][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 178.094563][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 178.106822][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 178.115850][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 178.125297][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 178.144197][ T9045] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 178.153267][ T9045] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 178.162745][ T9045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 178.171882][ T9045] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 178.186892][ T9046] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.209221][ T9040] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 178.221593][ T9040] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 178.229809][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 178.237293][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 178.245355][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 178.253398][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 178.261358][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 178.269831][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 178.278294][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 178.287322][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 178.299675][ T9049] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.309868][ T9042] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 178.337969][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 178.348417][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 178.359497][ T3217] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.366677][ T3217] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.383884][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 178.413042][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 178.423624][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 178.432461][ T3217] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.439568][ T3217] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.447846][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 178.456362][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 178.464249][ T3217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 178.488421][ T9050] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 178.497278][ T9050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 178.506339][ T9050] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 178.515064][ T9050] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 178.523468][ T9050] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 178.533680][ T9040] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.546592][ T9042] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.554906][ T9050] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 178.562941][ T9050] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 178.572027][ T9050] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready 21:54:31 executing program 1: syz_emit_ethernet(0x3a, &(0x7f0000000380)={@link_local, @random="27c2de128914", [], {@ipv4={0x800, {{0x7, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @multicast1, {[@ra={0x94, 0x6}]}}, @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d70502", 0x0, "f53475"}}}}}}, 0x0) [ 178.614508][ T9050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 178.670936][ T9050] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 178.691747][ T9110] input: syz1 as /devices/virtual/input/input5 [ 178.734522][ T9049] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 178.769472][ T9049] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 178.819501][ T9044] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 178.850653][ T9044] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 178.948190][ T9049] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.971574][ T9045] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 178.979108][ T9045] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 179.039576][ C1] hrtimer: interrupt took 26071 ns [ 179.060326][ T9127] loop2: RDSK (0) [ 179.060326][ T9127] unable to read partition table [ 179.076725][ T9127] loop2: partition table beyond EOD, truncated [ 179.092349][ T9127] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) [ 179.119334][ T9125] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.131936][ T9125] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.261708][ T9127] loop2: RDSK (0) [ 179.261708][ T9127] unable to read partition table [ 179.277391][ T9127] loop2: partition table beyond EOD, truncated [ 179.286212][ T9127] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) 21:54:32 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f0000003800)=[{&(0x7f0000001540)='RDSK', 0x4, 0x800}]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x7ff, 0x101000) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, &(0x7f0000000080)=""/223, &(0x7f0000000180)=0xdf) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 179.541037][ T9145] loop2: RDSK (0) [ 179.541037][ T9145] unable to read partition table [ 179.554454][ T9145] loop2: partition table beyond EOD, truncated [ 179.576500][ T9145] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) 21:54:32 executing program 3: unshare(0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r0 = socket$inet(0x2, 0x0, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000340)='./file0\x00', 0x0, 0x2001251, 0x0) connect(0xffffffffffffffff, &(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x4, 0x0, 0x2, 0x4, {0xa, 0x4e20, 0xfb84, @remote}}}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0xf, &(0x7f0000000480)=ANY=[@ANYBLOB="85000000070000002500000000000000950000000000000067e8f7150fcd34cfa572170d70f0661c392ece1cb9e901020a7b61a2bdc7a79312eac99327279c87453bfa60915fe588587502cbe79535b1c95f130885cfde2a21a1adfc51e0d98e025c404e361ec0384db246e6e743930c419bf68d47dbabc53ab01888c3a72966c5c2fa7cc548599c7318c11cbc621c08c70d74ba71bba6ceb7a69832cb478e44dbb471db8eed8ff6685ccbe27802053247264c9218c9bcfbb14edd6ad52bd0e578a4968029ca0d06b27c"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r3 = pkey_alloc(0x0, 0xab3677fb0f82d5f0) pkey_mprotect(&(0x7f0000f5a000/0x2000)=nil, 0x2000, 0x1000000, r3) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f0000000200)={0x2e, @empty, 0x4e21, 0x0, 'wlc\x00', 0x2, 0x8, 0x1e}, 0x2c) fanotify_mark(0xffffffffffffffff, 0x65, 0x0, 0xffffffffffffffff, 0x0) 21:54:32 executing program 1: r0 = inotify_init() readv(r0, &(0x7f00000015c0)=[{&(0x7f0000001380)=""/172, 0xac}], 0x1) 21:54:32 executing program 5: unshare(0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r0 = socket$inet(0x2, 0x0, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000340)='./file0\x00', 0x0, 0x2001251, 0x0) connect(0xffffffffffffffff, &(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x4, 0x0, 0x2, 0x4, {0xa, 0x4e20, 0xfb84, @remote}}}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0xf, &(0x7f0000000480)=ANY=[@ANYBLOB="85000000070000002500000000000000950000000000000067e8f7150fcd34cfa572170d70f0661c392ece1cb9e901020a7b61a2bdc7a79312eac99327279c87453bfa60915fe588587502cbe79535b1c95f130885cfde2a21a1adfc51e0d98e025c404e361ec0384db246e6e743930c419bf68d47dbabc53ab01888c3a72966c5c2fa7cc548599c7318c11cbc621c08c70d74ba71bba6ceb7a69832cb478e44dbb471db8eed8ff6685ccbe27802053247264c9218c9bcfbb14edd6ad52bd0e578a4968029ca0d06b27c"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r3 = pkey_alloc(0x0, 0xab3677fb0f82d5f0) pkey_mprotect(&(0x7f0000f5a000/0x2000)=nil, 0x2000, 0x1000000, r3) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f0000000200)={0x2e, @empty, 0x4e21, 0x0, 'wlc\x00', 0x2, 0x8, 0x1e}, 0x2c) fanotify_mark(0xffffffffffffffff, 0x65, 0x0, 0xffffffffffffffff, 0x0) 21:54:32 executing program 0: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000180)=@req3={0x401}, 0x1c) close(r0) 21:54:32 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x71c000) 21:54:32 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x5c, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x7, 0x182) dup2(r0, r1) 21:54:32 executing program 0: r0 = socket(0x1e, 0x4, 0x0) close(r0) 21:54:33 executing program 0: r0 = socket(0x1e, 0x4, 0x0) close(r0) [ 180.458005][ T9174] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.467517][ T9174] bridge0: port 1(bridge_slave_0) entered disabled state 21:54:33 executing program 0: r0 = socket(0x1e, 0x4, 0x0) close(r0) 21:54:33 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$usbmon(r0, &(0x7f0000000040)=""/122, 0x7a) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x28, 0x1a, [{0x4}, {0xfffffffffffffe2c}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0xfffffffffffffdc2}]}, @IFLA_GROUP={0x8}]}, 0x50}}, 0x0) 21:54:33 executing program 2: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x285) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) syz_open_dev$sndpcmc(0x0, 0x0, 0x381000) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000030, 0xa000000) 21:54:33 executing program 0: setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180)=@req3={0x401}, 0x1c) close(0xffffffffffffffff) [ 181.179478][ T21] list_del corruption. prev->next should be ffff88808ff870f0, but was ffff88808ff55c30 [ 181.189900][ T21] ------------[ cut here ]------------ [ 181.195369][ T21] kernel BUG at lib/list_debug.c:51! [ 181.200884][ T21] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 181.206953][ T21] CPU: 0 PID: 21 Comm: kworker/u4:1 Not tainted 5.5.0-rc1-next-20191211-syzkaller #0 [ 181.216398][ T21] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 181.226445][ T21] Workqueue: netns cleanup_net [ 181.231202][ T21] RIP: 0010:__list_del_entry_valid.cold+0xf/0x4f [ 181.237508][ T21] Code: e8 c9 00 cb fd 0f 0b 48 89 f1 48 c7 c7 c0 10 70 88 4c 89 e6 e8 b5 00 cb fd 0f 0b 4c 89 f6 48 c7 c7 60 12 70 88 e8 a4 00 cb fd <0f> 0b 4c 89 ea 4c 89 f6 48 c7 c7 a0 11 70 88 e8 90 00 cb fd 0f 0b [ 181.257218][ T21] RSP: 0018:ffffc90000dd7980 EFLAGS: 00010286 [ 181.263377][ T21] RAX: 0000000000000054 RBX: ffff8880a1889420 RCX: 0000000000000000 [ 181.271339][ T21] RDX: 0000000000000000 RSI: ffffffff815e8576 RDI: fffff520001baf22 [ 181.279348][ T21] RBP: ffffc90000dd7998 R08: 0000000000000054 R09: fffffbfff165a7a6 [ 181.287310][ T21] R10: fffffbfff165a7a5 R11: ffffffff8b2d3d2f R12: ffff8880a1889520 [ 181.295263][ T21] R13: ffff88808ff55c30 R14: ffff88808ff870f0 R15: ffff88808ff870f0 [ 181.303215][ T21] FS: 0000000000000000(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 181.312142][ T21] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 181.318718][ T21] CR2: 000000c434c42000 CR3: 0000000090d3b000 CR4: 00000000001406f0 [ 181.326681][ T21] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 181.334664][ T21] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 181.342678][ T21] Call Trace: [ 181.346045][ T21] __dentry_kill+0x1fd/0x600 [ 181.350613][ T21] ? dput+0x38/0xe10 [ 181.354837][ T21] ? dput+0x38/0xe10 [ 181.358712][ T21] dput+0x62f/0xe10 [ 181.362500][ T21] simple_recursive_removal+0x5bc/0x6d0 [ 181.368023][ T21] ? debugfs_rename+0x7f0/0x7f0 [ 181.372875][ T21] ? mntput+0x74/0xa0 [ 181.376862][ T21] debugfs_remove+0x5e/0x80 [ 181.381350][ T21] nsim_ipsec_teardown+0x7c/0x8f [ 181.386328][ T21] nsim_destroy+0x42/0x70 [ 181.390644][ T21] __nsim_dev_port_del+0x150/0x1f0 [ 181.395741][ T21] nsim_dev_port_del_all+0x8b/0xe0 [ 181.400856][ T21] nsim_dev_reload_destroy+0x58/0xf0 [ 181.406126][ T21] nsim_dev_reload_down+0x73/0xe0 [ 181.411147][ T21] devlink_reload+0xc8/0x3c0 [ 181.415715][ T21] ? devlink_nl_cmd_reload+0x7e0/0x7e0 [ 181.421158][ T21] devlink_pernet_pre_exit+0x104/0x1a0 [ 181.426611][ T21] ? devlink_nl_cmd_reload+0x7e0/0x7e0 [ 181.432065][ T21] cleanup_net+0x49b/0xaf0 [ 181.436466][ T21] ? unregister_pernet_device+0x80/0x80 [ 181.442006][ T21] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 181.447533][ T21] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 181.453578][ T21] ? trace_hardirqs_on+0x67/0x240 [ 181.458606][ T21] process_one_work+0x9af/0x1740 [ 181.463558][ T21] ? pwq_dec_nr_in_flight+0x320/0x320 [ 181.468918][ T21] ? lock_acquire+0x190/0x410 [ 181.473585][ T21] worker_thread+0x98/0xe40 [ 181.478072][ T21] kthread+0x361/0x430 [ 181.482124][ T21] ? process_one_work+0x1740/0x1740 [ 181.487301][ T21] ? kthread_mod_delayed_work+0x1f0/0x1f0 [ 181.493021][ T21] ret_from_fork+0x24/0x30 [ 181.497428][ T21] Modules linked in: [ 181.502093][ T21] ---[ end trace 2a6b0ebef7f503e5 ]--- [ 181.507580][ T21] RIP: 0010:__list_del_entry_valid.cold+0xf/0x4f [ 181.513955][ T21] Code: e8 c9 00 cb fd 0f 0b 48 89 f1 48 c7 c7 c0 10 70 88 4c 89 e6 e8 b5 00 cb fd 0f 0b 4c 89 f6 48 c7 c7 60 12 70 88 e8 a4 00 cb fd <0f> 0b 4c 89 ea 4c 89 f6 48 c7 c7 a0 11 70 88 e8 90 00 cb fd 0f 0b [ 181.533590][ T21] RSP: 0018:ffffc90000dd7980 EFLAGS: 00010286 [ 181.539694][ T21] RAX: 0000000000000054 RBX: ffff8880a1889420 RCX: 0000000000000000 [ 181.547673][ T21] RDX: 0000000000000000 RSI: ffffffff815e8576 RDI: fffff520001baf22 [ 181.555732][ T21] RBP: ffffc90000dd7998 R08: 0000000000000054 R09: fffffbfff165a7a6 [ 181.563744][ T21] R10: fffffbfff165a7a5 R11: ffffffff8b2d3d2f R12: ffff8880a1889520 [ 181.571750][ T21] R13: ffff88808ff55c30 R14: ffff88808ff870f0 R15: ffff88808ff870f0 [ 181.579743][ T21] FS: 0000000000000000(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 181.588670][ T21] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 181.595280][ T21] CR2: 000000c434c42000 CR3: 0000000090d3b000 CR4: 00000000001406f0 [ 181.603276][ T21] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 181.611304][ T21] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 181.619279][ T21] Kernel panic - not syncing: Fatal exception [ 181.626614][ T21] Kernel Offset: disabled [ 181.630937][ T21] Rebooting in 86400 seconds..