Warning: Permanently added '10.128.0.46' (ECDSA) to the list of known hosts. 2018/12/13 03:54:11 fuzzer started 2018/12/13 03:54:13 dialing manager at 10.128.0.26:45075 2018/12/13 03:54:13 checking revisions... 2018/12/13 03:54:13 testing simple program... syzkaller login: [ 46.551028] IPVS: ftp: loaded support on port[0] = 21 executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 75.489970] can: request_module (can-proto-0) failed. [ 75.500830] can: request_module (can-proto-0) failed. executing program 2018/12/13 03:54:44 syscalls: 1 2018/12/13 03:54:44 code coverage: enabled 2018/12/13 03:54:44 comparison tracing: enabled 2018/12/13 03:54:44 setuid sandbox: enabled 2018/12/13 03:54:44 namespace sandbox: enabled 2018/12/13 03:54:44 Android sandbox: /sys/fs/selinux/policy does not exist 2018/12/13 03:54:44 fault injection: enabled 2018/12/13 03:54:44 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/12/13 03:54:44 net packet injection: enabled 2018/12/13 03:54:44 net device setup: enabled 03:54:45 executing program 0: r0 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) mlock(&(0x7f0000005000/0x4000)=nil, 0x4000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) remap_file_pages(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) [ 78.348741] IPVS: ftp: loaded support on port[0] = 21 03:54:45 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000005800), 0x10) [ 78.683376] IPVS: ftp: loaded support on port[0] = 21 03:54:46 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000240)="0a5c2d023c126285718070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1}, [@nested={0x8, 0x0, [@generic="02"]}]}, 0x1c}}, 0x0) [ 79.006797] IPVS: ftp: loaded support on port[0] = 21 03:54:46 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x8) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x8002, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhci\x00', 0x311000, 0x0) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000400)={0x8, 0x9}) r2 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffff8000}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000000240), &(0x7f00000001c0), &(0x7f0000000140), &(0x7f0000000200)) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000200)={0x0, 0x1, 0xf, 0x0, 0x3f, 0x0, 0x4}, &(0x7f0000000300)=0x20) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in, 0x5}, 0x90) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x10280, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$unix(0x1, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) prctl$PR_GET_NAME(0x10, &(0x7f0000000040)=""/88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x1, 0x0) write$sndseq(r6, &(0x7f0000000140)=[{0x81, 0x5, 0x0, 0x0, @tick, {}, {}, @raw8={"959546592b83c98a10d789af"}}], 0xffffff1c) ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000240)=0x80020) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x1d}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f00000001c0)={r8, 0x3}, &(0x7f0000000200)=0x8) [ 79.552630] IPVS: ftp: loaded support on port[0] = 21 [ 79.760293] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.781650] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.789541] device bridge_slave_0 entered promiscuous mode 03:54:47 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x6) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xc, &(0x7f000079bffc), &(0x7f0000350ffc)=0x4) [ 79.933371] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.954327] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.961749] device bridge_slave_1 entered promiscuous mode [ 80.083261] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 80.100262] IPVS: ftp: loaded support on port[0] = 21 [ 80.257700] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready 03:54:47 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000040)) [ 80.487286] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.498622] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.511868] device bridge_slave_0 entered promiscuous mode [ 80.655019] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.678456] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.693993] device bridge_slave_1 entered promiscuous mode [ 80.707875] IPVS: ftp: loaded support on port[0] = 21 [ 80.730169] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 80.862585] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 80.879518] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 80.998476] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 81.025906] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.032300] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.069266] device bridge_slave_0 entered promiscuous mode [ 81.228525] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.244629] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.254969] device bridge_slave_1 entered promiscuous mode [ 81.383977] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 81.412847] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 81.480170] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 81.507277] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 81.627659] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 81.635837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.666795] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 81.675185] team0: Port device team_slave_0 added [ 81.690051] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.697480] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.714852] device bridge_slave_0 entered promiscuous mode [ 81.760972] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 81.785644] team0: Port device team_slave_1 added [ 81.794552] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.801023] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.818385] device bridge_slave_1 entered promiscuous mode [ 81.917788] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 81.952873] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.991038] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 82.019592] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 82.059438] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.107396] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 82.131014] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 82.147823] team0: Port device team_slave_0 added [ 82.154851] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 82.169825] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.187558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.234884] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.241411] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.255599] device bridge_slave_0 entered promiscuous mode [ 82.275582] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 82.285304] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 82.293708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.314886] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.322826] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.341167] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 82.351523] team0: Port device team_slave_1 added [ 82.392448] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.414549] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.434376] device bridge_slave_1 entered promiscuous mode [ 82.492517] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 82.525279] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 82.535653] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 82.564357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.572293] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.612659] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 82.638120] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 82.680128] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.703618] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.721681] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 82.736628] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 82.744101] team0: Port device team_slave_0 added [ 82.775412] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 82.795072] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 82.802577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 82.834856] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.842815] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.906810] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 82.914384] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.922309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.960064] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 82.980640] team0: Port device team_slave_1 added [ 83.151903] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.181441] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 83.222129] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.234438] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.246593] device bridge_slave_0 entered promiscuous mode [ 83.268361] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.292396] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 83.315042] team0: Port device team_slave_0 added [ 83.343935] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 83.351534] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.361700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.384836] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 83.396492] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.403059] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.416751] device bridge_slave_1 entered promiscuous mode [ 83.440673] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 83.453985] team0: Port device team_slave_1 added [ 83.484820] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 83.504685] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 83.512587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 83.524983] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.546246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.572399] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 83.587238] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 83.606275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 83.614998] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.641685] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 83.662216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 83.694515] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 83.706565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.717646] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.727738] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.734277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.741310] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.747818] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.757334] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 83.766029] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 83.807316] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 83.825071] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.845387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.955404] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 83.962512] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.978864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.079037] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 84.103440] team0: Port device team_slave_0 added [ 84.150866] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 84.223061] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 84.238915] team0: Port device team_slave_1 added [ 84.279357] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.302765] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 84.394667] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 84.401523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 84.411847] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.429482] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 84.469291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 84.491060] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.497526] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.504402] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.510892] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.527323] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 84.542176] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 84.559763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 84.576070] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 84.589542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 84.604880] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.716658] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 84.724109] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.733904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 84.871053] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 84.884669] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.895126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 85.034562] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 85.042352] team0: Port device team_slave_0 added [ 85.122813] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.129238] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.135999] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.142364] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.162314] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 85.215477] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 85.231442] team0: Port device team_slave_1 added [ 85.284423] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 85.295623] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 85.322927] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 85.345057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 85.355992] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 85.408269] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.414789] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.421494] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.428456] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.436139] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 85.467928] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 85.494753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 85.505107] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 85.626513] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 85.633771] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 85.645006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 85.782873] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 85.797107] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 85.812445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 86.305095] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 86.415537] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.421911] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.429041] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.435606] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.468028] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 87.116280] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.122702] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.129431] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.135840] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.167554] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 87.334639] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 87.341759] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 88.951434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.387650] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 89.486067] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.907366] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 89.925519] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 89.931697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 89.945951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 89.960427] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.190761] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.348147] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.376639] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 90.383031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 90.391981] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 90.479338] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 90.731928] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 90.817718] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.925346] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 90.931486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 90.939804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 91.228025] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 91.244310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 91.265076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 91.390688] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.421035] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.671413] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.854027] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 92.121636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.301020] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 92.324343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 92.339170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 92.611739] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 92.779621] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.088977] mmap: syz-executor0 (7471) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 93.135096] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 93.141283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 93.148475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 03:55:00 executing program 0: r0 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) mlock(&(0x7f0000005000/0x4000)=nil, 0x4000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) remap_file_pages(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) 03:55:00 executing program 0: r0 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) mlock(&(0x7f0000005000/0x4000)=nil, 0x4000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) remap_file_pages(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) 03:55:00 executing program 0: r0 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) mlock(&(0x7f0000005000/0x4000)=nil, 0x4000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) remap_file_pages(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) 03:55:00 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000005800), 0x10) 03:55:00 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000005800), 0x10) 03:55:00 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000005800), 0x10) [ 93.679009] 8021q: adding VLAN 0 to HW filter on device team0 03:55:00 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000005800), 0x10) 03:55:00 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000005800), 0x10) 03:55:01 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000240)="0a5c2d023c126285718070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1}, [@nested={0x8, 0x0, [@generic="02"]}]}, 0x1c}}, 0x0) [ 94.382978] hrtimer: interrupt took 33803 ns 03:55:01 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) mlock(&(0x7f0000005000/0x4000)=nil, 0x4000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) remap_file_pages(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) 03:55:02 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x6) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xc, &(0x7f000079bffc), &(0x7f0000350ffc)=0x4) 03:55:02 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000040)) 03:55:02 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000005800), 0x10) 03:55:02 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000240)="0a5c2d023c126285718070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x29, 0x82d, 0x0, 0x0, {0x1}, [@nested={0x8, 0x0, [@generic="02"]}]}, 0x1c}}, 0x0) 03:55:02 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x8) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x8002, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhci\x00', 0x311000, 0x0) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000400)={0x8, 0x9}) r2 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffff8000}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000000240), &(0x7f00000001c0), &(0x7f0000000140), &(0x7f0000000200)) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000200)={0x0, 0x1, 0xf, 0x0, 0x3f, 0x0, 0x4}, &(0x7f0000000300)=0x20) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in, 0x5}, 0x90) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x10280, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$unix(0x1, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) prctl$PR_GET_NAME(0x10, &(0x7f0000000040)=""/88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x1, 0x0) write$sndseq(r6, &(0x7f0000000140)=[{0x81, 0x5, 0x0, 0x0, @tick, {}, {}, @raw8={"959546592b83c98a10d789af"}}], 0xffffff1c) ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000240)=0x80020) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x1d}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f00000001c0)={r8, 0x3}, &(0x7f0000000200)=0x8) 03:55:02 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) mlock(&(0x7f0000005000/0x4000)=nil, 0x4000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) remap_file_pages(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) 03:55:02 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x6) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xc, &(0x7f000079bffc), &(0x7f0000350ffc)=0x4) [ 95.334315] list_add corruption. prev->next should be next (ffffffff8a1dca60), but was ffff8881bfaa18f0. (prev=ffff8881b6436270). [ 95.346596] ------------[ cut here ]------------ [ 95.351407] kernel BUG at lib/list_debug.c:28! [ 95.356062] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 95.361443] CPU: 0 PID: 7682 Comm: blkid Not tainted 4.20.0-rc6-next-20181210+ #164 [ 95.369268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 95.378771] RIP: 0010:__list_add_valid.cold.2+0x23/0x2a 03:55:02 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000040)) [ 95.384274] Code: e8 00 1f d2 fd 0f 0b 48 89 d9 48 c7 c7 20 e6 80 88 e8 ef 1e d2 fd 0f 0b 48 89 f1 48 c7 c7 a0 e6 80 88 48 89 de e8 db 1e d2 fd <0f> 0b 90 90 90 90 90 55 48 89 e5 41 57 41 56 49 be 00 00 00 00 00 [ 95.403271] RSP: 0000:ffff8881dac06ce0 EFLAGS: 00010286 [ 95.403748] kobject: 'loop0' (00000000b22d2c79): kobject_uevent_env [ 95.408649] RAX: 0000000000000075 RBX: ffffffff8a1dca60 RCX: 0000000000000000 [ 95.408656] RDX: 0000000000000000 RSI: ffffffff816621c5 RDI: 0000000000000005 03:55:02 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000040)) 03:55:02 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000040)) [ 95.408664] RBP: ffff8881dac06cf8 R08: ffff8881bcd40140 R09: ffffed103b585020 [ 95.408671] R10: ffffed103b585020 R11: ffff8881dac28107 R12: ffff8881bec7f930 [ 95.408678] R13: ffff8881bec7f6c0 R14: ffffffff8a1dc820 R15: ffffffff8a1dcab0 [ 95.408694] FS: 00007fbf00019740(0000) GS:ffff8881dac00000(0000) knlGS:0000000000000000 [ 95.428874] kobject: 'loop0' (00000000b22d2c79): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 95.430076] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 95.430083] CR2: 00007fbeff8b89a0 CR3: 00000001d96d8000 CR4: 00000000001406f0 03:55:02 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000040)) [ 95.430093] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 95.430105] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 95.497283] Call Trace: [ 95.499864] [ 95.502038] ___neigh_create+0x14b7/0x2600 [ 95.506299] ? rcu_read_unlock_special+0x370/0x370 [ 95.511240] ? print_usage_bug+0xc0/0xc0 [ 95.515367] ? print_usage_bug+0xc0/0xc0 [ 95.519441] ? neigh_remove_one+0x5a0/0x5a0 [ 95.523816] ? print_usage_bug+0xc0/0xc0 [ 95.527900] ? __local_bh_enable_ip+0x160/0x260 03:55:02 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000040)) [ 95.532575] ? __local_bh_enable_ip+0x160/0x260 [ 95.537253] ? lockdep_hardirqs_on+0x296/0x5b0 [ 95.541837] ? mark_held_locks+0x130/0x130 [ 95.544464] kobject: 'loop0' (00000000b22d2c79): kobject_uevent_env [ 95.546088] ? __local_bh_enable_ip+0x160/0x260 [ 95.552491] kobject: 'loop0' (00000000b22d2c79): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 95.557147] ? lockdep_hardirqs_on+0x296/0x5b0 [ 95.557161] ? trace_hardirqs_on+0xbd/0x310 [ 95.557176] ? mark_held_locks+0xc7/0x130 [ 95.579650] ? ip6t_do_table+0xd9e/0x1d30 [ 95.583796] ? trace_hardirqs_off_caller+0x310/0x310 [ 95.588919] ? __local_bh_enable_ip+0x160/0x260 [ 95.593591] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 95.599149] ? lock_acquire+0x1ed/0x520 [ 95.603140] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 95.608692] ? check_preemption_disabled+0x48/0x280 [ 95.613721] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 95.619327] ? rcu_pm_notify+0xc0/0xc0 [ 95.623267] __neigh_create+0x30/0x40 [ 95.627116] ip6_finish_output2+0xa64/0x2940 [ 95.631531] ? find_held_lock+0x36/0x1c0 [ 95.635593] ? ip6_forward_finish+0x560/0x560 [ 95.640094] ? ip6_mtu+0x39c/0x520 [ 95.643641] ? lock_downgrade+0x900/0x900 [ 95.647800] ? check_preemption_disabled+0x48/0x280 [ 95.652832] ? kasan_check_read+0x11/0x20 [ 95.656993] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 95.662266] ? rcu_read_unlock_special+0x370/0x370 [ 95.667230] ? ip6_mtu+0x160/0x520 [ 95.670766] ? find_match+0x10a0/0x10a0 [ 95.674743] ? kasan_check_read+0x11/0x20 [ 95.678893] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 03:55:02 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x6) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xc, &(0x7f000079bffc), &(0x7f0000350ffc)=0x4) [ 95.684173] ip6_finish_output+0x58c/0xc60 [ 95.688438] ? ip6_finish_output+0x58c/0xc60 [ 95.692845] ip6_output+0x232/0x9d0 [ 95.696500] ? ip6_finish_output+0xc60/0xc60 [ 95.700944] ? ip6_fragment+0x38b0/0x38b0 [ 95.705116] ? __lock_is_held+0xb5/0x140 [ 95.709183] ndisc_send_skb+0x1005/0x1560 [ 95.713349] ? nf_hook.constprop.33+0x860/0x860 [ 95.718020] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 95.723564] ? refcount_sub_and_test_checked+0x203/0x310 [ 95.729037] ? refcount_dec_if_one+0x180/0x180 [ 95.733650] ? memcpy+0x45/0x50 [ 95.736946] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 95.742515] ndisc_send_rs+0x134/0x6e0 [ 95.746420] addrconf_rs_timer+0x314/0x690 [ 95.750690] ? ipv6_get_lladdr+0x5e0/0x5e0 [ 95.754958] call_timer_fn+0x272/0x920 [ 95.758856] ? ipv6_get_lladdr+0x5e0/0x5e0 [ 95.763114] ? process_timeout+0x40/0x40 [ 95.767181] ? mark_held_locks+0xc7/0x130 [ 95.771367] ? _raw_spin_unlock_irq+0x27/0x80 [ 95.775862] ? _raw_spin_unlock_irq+0x27/0x80 [ 95.780376] ? ipv6_get_lladdr+0x5e0/0x5e0 [ 95.784638] ? lockdep_hardirqs_on+0x296/0x5b0 [ 95.789264] ? trace_hardirqs_on+0xbd/0x310 [ 95.793587] ? kasan_check_read+0x11/0x20 [ 95.797765] ? __run_timers+0x7da/0xc70 [ 95.801760] ? trace_hardirqs_off_caller+0x310/0x310 [ 95.806881] ? ipv6_get_lladdr+0x5e0/0x5e0 [ 95.811126] __run_timers+0x7e5/0xc70 [ 95.814929] ? timer_fixup_init+0x70/0x70 [ 95.819097] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 95.824141] ? graph_lock+0x270/0x270 [ 95.827967] ? print_usage_bug+0xc0/0xc0 [ 95.829902] kobject: 'loop0' (00000000b22d2c79): kobject_uevent_env [ 95.832040] ? hrtimer_update_softirq_timer+0xa0/0xa0 [ 95.832055] ? find_held_lock+0x36/0x1c0 [ 95.832071] ? graph_lock+0x270/0x270 [ 95.851531] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 95.857072] ? check_preemption_disabled+0x48/0x280 [ 95.861525] kobject: 'loop0' (00000000b22d2c79): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 95.862120] ? __lock_is_held+0xb5/0x140 [ 95.875613] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 95.881162] ? check_preemption_disabled+0x48/0x280 [ 95.886234] run_timer_softirq+0x52/0xb0 [ 95.890328] ? rcu_read_lock_sched_held+0x14f/0x180 [ 95.895390] __do_softirq+0x308/0xb7e [ 95.899224] ? ktime_get_raw_ts64+0x4d0/0x4d0 [ 95.903771] ? lock_downgrade+0x900/0x900 [ 95.907949] ? __irqentry_text_end+0x1f9658/0x1f9658 [ 95.913067] ? pvclock_read_flags+0x160/0x160 [ 95.917568] ? lapic_next_event+0x5a/0x90 [ 95.921750] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 95.927336] ? kvm_clock_read+0x18/0x30 [ 95.931321] ? kvm_sched_clock_read+0x9/0x20 [ 95.935761] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 95.941320] ? check_preemption_disabled+0x48/0x280 [ 95.946344] irq_exit+0x17f/0x1c0 [ 95.949805] smp_apic_timer_interrupt+0x1cb/0x760 [ 95.954649] ? smp_reschedule_interrupt+0x109/0x650 [ 95.959686] ? smp_call_function_single_interrupt+0x650/0x650 [ 95.965571] ? interrupt_entry+0xb5/0xc0 [ 95.969646] ? trace_hardirqs_off_caller+0xbb/0x310 [ 95.974668] ? trace_hardirqs_off_caller+0xbb/0x310 [ 95.979686] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 95.984527] ? trace_hardirqs_on_caller+0x310/0x310 [ 95.989599] ? trace_hardirqs_on_caller+0x310/0x310 [ 95.993519] kobject: 'loop0' (00000000b22d2c79): kobject_uevent_env [ 95.994676] ? task_prio+0x50/0x50 [ 95.994689] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 95.994706] ? check_preemption_disabled+0x48/0x280 [ 96.001111] kobject: 'loop0' (00000000b22d2c79): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 96.004635] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 96.004655] apic_timer_interrupt+0xf/0x20 [ 96.033728] [ 96.035991] RIP: 0010:lock_is_held_type+0x58/0x210 [ 96.040929] Code: c1 ea 03 0f b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 6e 01 00 00 8b 83 7c 08 00 00 85 c0 0f 85 46 01 00 00 <48> c7 c7 a8 40 72 89 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 [ 96.059866] RSP: 0000:ffff8881b68ff4e8 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 96.067568] RAX: 0000000000000000 RBX: ffff8881bcd40140 RCX: 0000000000000000 [ 96.074966] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: ffff8881bcd409bc [ 96.082268] RBP: ffff8881b68ff508 R08: ffff8881bcd40140 R09: ffffed103b585b5f [ 96.089544] R10: ffffed103b585b5f R11: ffff8881dac2dafb R12: ffffea000861c440 [ 96.096815] R13: ffffffff897a0c40 R14: ffff8881b68ff958 R15: dffffc0000000000 [ 96.104123] rcu_read_lock_held+0xa9/0xc0 [ 96.108291] filemap_map_pages+0x1256/0x1a20 [ 96.112730] ? find_get_entries_tag+0x1400/0x1400 [ 96.117588] ? print_usage_bug+0xc0/0xc0 [ 96.121657] ? print_usage_bug+0xc0/0xc0 [ 96.125722] ? lock_downgrade+0x900/0x900 [ 96.129867] ? check_preemption_disabled+0x48/0x280 [ 96.134890] ? __lock_acquire+0x62f/0x4c20 [ 96.139150] ? print_usage_bug+0xc0/0xc0 [ 96.143258] ? graph_lock+0x270/0x270 [ 96.147060] ? mark_held_locks+0x130/0x130 [ 96.151306] ? __lock_acquire+0x62f/0x4c20 [ 96.155547] ? __handle_mm_fault+0x46ee/0x5b70 [ 96.160138] ? mark_held_locks+0x130/0x130 [ 96.164368] ? mark_held_locks+0x130/0x130 [ 96.168614] ? do_raw_spin_unlock+0xa7/0x330 [ 96.173028] ? do_raw_spin_trylock+0x270/0x270 [ 96.177619] ? graph_lock+0x270/0x270 [ 96.181421] ? graph_lock+0x270/0x270 [ 96.185228] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 96.190789] __handle_mm_fault+0x456b/0x5b70 [ 96.195250] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 96.200090] ? find_held_lock+0x36/0x1c0 [ 96.204319] ? graph_lock+0x270/0x270 [ 96.208116] ? graph_lock+0x270/0x270 [ 96.211963] ? find_held_lock+0x36/0x1c0 [ 96.216047] ? handle_mm_fault+0x42a/0xc70 [ 96.220308] ? lock_downgrade+0x900/0x900 [ 96.224481] ? check_preemption_disabled+0x48/0x280 [ 96.229508] ? kasan_check_read+0x11/0x20 [ 96.233669] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 96.238940] ? rcu_read_unlock_special+0x370/0x370 [ 96.243867] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 96.249470] ? check_preemption_disabled+0x48/0x280 [ 96.254500] handle_mm_fault+0x54f/0xc70 [ 96.258587] ? __handle_mm_fault+0x5b70/0x5b70 [ 96.263174] ? find_vma+0x34/0x190 [ 96.266725] __do_page_fault+0x5f6/0xd70 [ 96.270808] do_page_fault+0xf2/0x7e0 [ 96.274603] ? vmalloc_sync_all+0x30/0x30 [ 96.278750] ? error_entry+0x70/0xd0 [ 96.282483] ? trace_hardirqs_off_caller+0xbb/0x310 [ 96.287534] ? trace_hardirqs_on_caller+0xc0/0x310 [ 96.292470] ? syscall_return_slowpath+0x5e0/0x5e0 [ 96.297394] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 96.302245] ? trace_hardirqs_on_caller+0x310/0x310 [ 96.307291] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 96.312742] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 96.317759] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 96.323321] ? prepare_exit_to_usermode+0x291/0x3b0 [ 96.328347] ? page_fault+0x8/0x30 [ 96.331883] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 96.336734] ? page_fault+0x8/0x30 [ 96.340312] page_fault+0x1e/0x30 [ 96.343773] RIP: 0033:0x7fbeff8b89a0 [ 96.347532] Code: Bad RIP value. [ 96.350910] RSP: 002b:00007ffc7fb18578 EFLAGS: 00010202 [ 96.356271] RAX: 00007ffc7fb185a0 RBX: 0000000000000003 RCX: 00007ffc7fb18668 [ 96.363546] RDX: 00007ffc7fb18580 RSI: 00007fbeffbf8a50 RDI: 00007ffc7fb186f2 [ 96.370861] RBP: 0000000001b5e040 R08: 00007ffc7fb1866c R09: 0000000000000000 [ 96.378179] R10: 0000000000000000 R11: 00007fbeff8a5a30 R12: 0000000000000000 [ 96.385472] R13: 0000000000000000 R14: 0000000000000003 R15: 0000000000000005 [ 96.392742] Modules linked in: [ 96.395984] ---[ end trace 0f84eb25ef10946b ]--- [ 96.400766] RIP: 0010:__list_add_valid.cold.2+0x23/0x2a [ 96.406177] Code: e8 00 1f d2 fd 0f 0b 48 89 d9 48 c7 c7 20 e6 80 88 e8 ef 1e d2 fd 0f 0b 48 89 f1 48 c7 c7 a0 e6 80 88 48 89 de e8 db 1e d2 fd <0f> 0b 90 90 90 90 90 55 48 89 e5 41 57 41 56 49 be 00 00 00 00 00 [ 96.425636] RSP: 0000:ffff8881dac06ce0 EFLAGS: 00010286 [ 96.430999] RAX: 0000000000000075 RBX: ffffffff8a1dca60 RCX: 0000000000000000 [ 96.438292] RDX: 0000000000000000 RSI: ffffffff816621c5 RDI: 0000000000000005 [ 96.445773] RBP: ffff8881dac06cf8 R08: ffff8881bcd40140 R09: ffffed103b585020 [ 96.453045] R10: ffffed103b585020 R11: ffff8881dac28107 R12: ffff8881bec7f930 [ 96.460336] R13: ffff8881bec7f6c0 R14: ffffffff8a1dc820 R15: ffffffff8a1dcab0 [ 96.467624] FS: 00007fbf00019740(0000) GS:ffff8881dac00000(0000) knlGS:0000000000000000 [ 96.475864] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 96.481757] CR2: 00007fbeff8b8976 CR3: 00000001d96d8000 CR4: 00000000001406f0 03:55:02 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x8) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x8002, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhci\x00', 0x311000, 0x0) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000400)={0x8, 0x9}) r2 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffff8000}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000000240), &(0x7f00000001c0), &(0x7f0000000140), &(0x7f0000000200)) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000200)={0x0, 0x1, 0xf, 0x0, 0x3f, 0x0, 0x4}, &(0x7f0000000300)=0x20) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in, 0x5}, 0x90) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x10280, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$unix(0x1, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) prctl$PR_GET_NAME(0x10, &(0x7f0000000040)=""/88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x1, 0x0) write$sndseq(r6, &(0x7f0000000140)=[{0x81, 0x5, 0x0, 0x0, @tick, {}, {}, @raw8={"959546592b83c98a10d789af"}}], 0xffffff1c) ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000240)=0x80020) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x1d}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f00000001c0)={r8, 0x3}, &(0x7f0000000200)=0x8) 03:55:02 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x6) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xc, &(0x7f000079bffc), &(0x7f0000350ffc)=0x4) [ 96.489055] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 96.496371] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 96.503761] Kernel panic - not syncing: Fatal exception in interrupt [ 96.511304] Kernel Offset: disabled [ 96.514928] Rebooting in 86400 seconds..