Warning: Permanently added '[localhost]:33936' (ECDSA) to the list of known hosts. 2019/12/26 17:53:22 fuzzer started 2019/12/26 17:53:24 dialing manager at 10.0.2.10:41933 2019/12/26 17:53:24 syscalls: 2682 2019/12/26 17:53:24 code coverage: enabled 2019/12/26 17:53:24 comparison tracing: enabled 2019/12/26 17:53:24 extra coverage: enabled 2019/12/26 17:53:24 setuid sandbox: enabled 2019/12/26 17:53:24 namespace sandbox: enabled 2019/12/26 17:53:24 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/26 17:53:24 fault injection: enabled 2019/12/26 17:53:24 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/26 17:53:24 net packet injection: enabled 2019/12/26 17:53:24 net device setup: enabled 2019/12/26 17:53:24 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/12/26 17:53:24 devlink PCI setup: PCI device 0000:00:10.0 is not available 17:54:04 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@nat={'nat\x00', 0x1b, 0x5, 0x5b8, 0x160, 0x0, 0x298, 0x160, 0x298, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x5, 0x0, {[{{@uncond, 0x0, 0x118, 0x160, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@hl={{0x28, 'hl\x00'}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@loopback, @ipv4=@multicast2}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@dst={{0x48, 'dst\x00'}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@remote, @ipv6=@rand_addr="ce71447e11b3e0b0709f9b0fb17327f8", @gre_key, @icmp_id}}}, {{@ipv6={@rand_addr="e281a984486fd3587764ef56596c8503", @mcast2, [], [], 'ifb0\x00', 'ip6gretap0\x00'}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@hbh={{0x48, 'hbh\x00'}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv4=@remote, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@remote, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x618) 17:54:05 executing program 1: pipe(&(0x7f00000006c0)={0xffffffffffffffff}) close(r0) syzkaller login: [ 165.324698][ T8620] IPVS: ftp: loaded support on port[0] = 21 [ 165.448178][ T8619] IPVS: ftp: loaded support on port[0] = 21 17:54:05 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0x7e) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66002e66617400020401000200000200f8", 0x16}], 0x0, 0x0) 17:54:06 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x72, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) [ 166.225342][ T8619] chnl_net:caif_netlink_parms(): no params data found [ 166.276612][ T8622] IPVS: ftp: loaded support on port[0] = 21 [ 166.340744][ T8620] chnl_net:caif_netlink_parms(): no params data found [ 166.445751][ T8620] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.458082][ T8620] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.459781][ T8626] IPVS: ftp: loaded support on port[0] = 21 [ 166.482609][ T8620] device bridge_slave_0 entered promiscuous mode [ 166.509512][ T8620] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.519623][ T8620] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.535006][ T8620] device bridge_slave_1 entered promiscuous mode [ 166.547311][ T8619] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.562659][ T8619] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.585596][ T8619] device bridge_slave_0 entered promiscuous mode [ 166.652709][ T8619] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.661649][ T8619] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.670628][ T8619] device bridge_slave_1 entered promiscuous mode [ 166.699701][ T8620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.733504][ T8620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.766604][ T8619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.781145][ T8619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.809724][ T8620] team0: Port device team_slave_0 added [ 166.831038][ T8620] team0: Port device team_slave_1 added [ 166.844534][ T8619] team0: Port device team_slave_0 added [ 166.856174][ T8619] team0: Port device team_slave_1 added [ 166.971168][ T8620] device hsr_slave_0 entered promiscuous mode [ 167.018551][ T8620] device hsr_slave_1 entered promiscuous mode [ 167.193001][ T8619] device hsr_slave_0 entered promiscuous mode [ 167.269406][ T8619] device hsr_slave_1 entered promiscuous mode [ 167.358000][ T8619] debugfs: Directory 'hsr0' with parent '/' already present! [ 167.394695][ T8622] chnl_net:caif_netlink_parms(): no params data found [ 167.481999][ T8626] chnl_net:caif_netlink_parms(): no params data found [ 167.504467][ T8620] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 167.583024][ T8620] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 167.643283][ T8622] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.667473][ T8622] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.688003][ T8622] device bridge_slave_0 entered promiscuous mode [ 167.708926][ T8619] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 167.820102][ T8619] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 167.910014][ T8620] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 168.004146][ T8620] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 168.101696][ T8622] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.111222][ T8622] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.122605][ T8622] device bridge_slave_1 entered promiscuous mode [ 168.139736][ T8619] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 168.200238][ T8619] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 168.301968][ T8622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.324880][ T8622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.354152][ T8626] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.366396][ T8626] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.379628][ T8626] device bridge_slave_0 entered promiscuous mode [ 168.399848][ T8622] team0: Port device team_slave_0 added [ 168.410413][ T8622] team0: Port device team_slave_1 added [ 168.417463][ T8626] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.426365][ T8626] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.436159][ T8626] device bridge_slave_1 entered promiscuous mode [ 168.467363][ T8626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.482096][ T8626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.570582][ T8622] device hsr_slave_0 entered promiscuous mode [ 168.648236][ T8622] device hsr_slave_1 entered promiscuous mode [ 168.727799][ T8622] debugfs: Directory 'hsr0' with parent '/' already present! [ 168.751908][ T8626] team0: Port device team_slave_0 added [ 168.767280][ T8626] team0: Port device team_slave_1 added [ 168.903663][ T8622] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 169.010844][ T8626] device hsr_slave_0 entered promiscuous mode [ 169.108866][ T8626] device hsr_slave_1 entered promiscuous mode [ 169.218807][ T8626] debugfs: Directory 'hsr0' with parent '/' already present! [ 169.267819][ T8622] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 169.330493][ T8622] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 169.401868][ T8622] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 169.552421][ T8626] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 169.637498][ T8626] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 169.719773][ T8626] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 169.782973][ T8626] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 169.892536][ T8620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.927965][ T8619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.960976][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 169.978433][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 169.995148][ T8620] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.031869][ T8619] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.053292][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 170.072255][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 170.085887][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 170.100039][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 170.118640][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.131273][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.162448][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 170.185557][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 170.201953][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.216407][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.235013][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 170.254818][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 170.284477][ T8627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 170.306930][ T8627] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 170.329389][ T8627] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.345095][ T8627] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.355548][ T8627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 170.370582][ T8627] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 170.383863][ T8627] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.397761][ T8627] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.419237][ T170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 170.448620][ T3015] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 170.464281][ T3015] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 170.482984][ T3015] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 170.503677][ T3015] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 170.523311][ T3015] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 170.541910][ T8633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 170.560901][ T8633] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 170.577490][ T8633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 170.619057][ T8620] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 170.642017][ T8620] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 170.673968][ T8626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.755442][ T3015] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 170.776752][ T3015] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 170.804711][ T3015] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 170.825175][ T3015] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 170.840192][ T3015] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 170.859822][ T3015] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 170.911162][ T8620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.926310][ T3015] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 170.940601][ T3015] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 170.962679][ T3015] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 170.992386][ T3015] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 171.013399][ T8626] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.037397][ T8622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.057076][ T8633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 171.070752][ T8633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 171.091338][ T8633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 171.104805][ T8633] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 171.140413][ T170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 171.183248][ T170] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 171.210649][ T170] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.224764][ T170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.241228][ T170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 171.262336][ T170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 171.285047][ T170] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 171.315898][ T8622] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.350130][ T8633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 171.374966][ T8633] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 171.394287][ T8633] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.407072][ T8633] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.420238][ T8633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 171.435573][ T8633] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 171.449354][ T8633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 171.465502][ T8633] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 171.497681][ T3382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 171.521155][ T3382] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 171.550610][ T3382] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.569155][ T3382] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.570473][ T3382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 171.612264][ T3382] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 171.711040][ T8635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 17:54:11 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) r1 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000240)={'bond0\x00\x00 \n\a!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r3 = socket(0x0, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f00000004c0)={@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, {0x0}, 0x0}, 0xa0) accept4$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0, 0x80400) getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000000), 0x0) [ 171.732988][ T8635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 171.753730][ T8635] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 171.767971][ T8635] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.776403][ T8635] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.785860][ T8635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 171.798784][ T8635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 171.815524][ T8635] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 171.830622][ T8635] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 171.850745][ T8642] bond0: (slave bond_slave_1): Releasing backup interface [ 171.985229][ T170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 172.005959][ T170] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 172.026932][ T170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 172.044974][ T170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 172.062178][ T170] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 172.085286][ T8644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.120858][ T3015] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 172.140711][ T3015] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 172.161108][ T3015] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 172.175375][ T3015] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 172.189216][ T3015] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 172.205542][ T3015] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 172.221427][ T8642] bond0: (slave bond_slave_1): Releasing backup interface [ 172.284026][ T8626] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 172.307015][ T8619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.322294][ T8644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.339413][ T3015] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 172.364578][ T8622] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 172.401277][ T8622] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network 17:54:12 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) r1 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000240)={'bond0\x00\x00 \n\a!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r3 = socket(0x0, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f00000004c0)={@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, {0x0}, 0x0}, 0xa0) accept4$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0, 0x80400) getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000000), 0x0) [ 172.442859][ T8635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 172.458313][ T8635] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 172.473527][ T8635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 172.487546][ T8635] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 172.500630][ T8635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 172.515168][ T8635] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 172.529254][ T8635] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 172.551572][ T8650] bond0: (slave bond_slave_1): Releasing backup interface [ 172.647094][ T8652] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.679437][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 172.696550][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 17:54:12 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="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", 0x210}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) [ 172.711679][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 172.735418][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 172.777210][ T8622] 8021q: adding VLAN 0 to HW filter on device batadv0 17:54:13 executing program 0: openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000000)="13", 0x8}], 0x1) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000000640)={0x43, 0x9, 0x2, {0x0, 0x7, 0x4, 0x2, 0x9, 0x8000, 0x20, 0x400, 0xfffffffd}}, 0x43) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x40}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000180)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x24) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x8000000, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="100000001001000001000000ed58696d81c295beba33004e85d76000000000000000068a9a5e587ecb7859211e2f50680664c11478ef7edf0f5f5c0ccf407a74db88d55ca7251f02706d4d115ddb9189cf91b56270f48f6c0c786328ded2ca80484ae6d64cd31205a814c8c23e00c86f080c777b3408c35c9b53c087be40f552f142c26c885c819ea68da3dd2b447210474e17e4802a98513da13ccd8d0dca9b2a82e14259de5cc7af5e1e51f8000000000000000000"], 0x10}}], 0x2, 0x0) sendmmsg(r0, &(0x7f0000005c00), 0x17c1ea0c475f298, 0x4009890) close(r0) [ 172.825882][ T8626] 8021q: adding VLAN 0 to HW filter on device batadv0 17:54:13 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0x7e) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66002e66617400020401000200000200f8", 0x16}], 0x0, 0x0) 17:54:16 executing program 1: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) syz_open_procfs(0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, 0x0) io_setup(0x8, &(0x7f00000004c0)=0x0) io_submit(r1, 0xc2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) getresuid(0x0, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) shmdt(0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) getdents(0xffffffffffffffff, &(0x7f00000000c0)=""/31, 0x77c) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) io_setup(0x0, &(0x7f00000004c0)) r3 = socket$inet(0x2, 0x3, 0x80) fadvise64(r3, 0xffff, 0x55, 0x5) setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000400)={{0x0, @loopback, 0x0, 0x0, 'dh\x00', 0x0, 0x40000000}, {@remote, 0x0, 0x2, 0x0, 0x8}}, 0x38d) io_setup(0x0, &(0x7f0000000100)) pipe(&(0x7f00000001c0)) r4 = syz_open_dev$evdev(&(0x7f0000000440)='/dev/input/event#\x00', 0x0, 0x0) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) dup2(r5, 0xffffffffffffffff) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) [ 193.109675][ T3015] ------------[ cut here ]------------ [ 193.127945][ T3015] AppArmor WARN aa_sock_msg_perm: ((!sock)): [ 193.130296][ T3015] WARNING: CPU: 3 PID: 3015 at security/apparmor/lsm.c:933 aa_sock_msg_perm.isra.0+0xdd/0x170 [ 193.137735][ T3015] Kernel panic - not syncing: panic_on_warn set ... [ 193.137735][ T3015] CPU: 3 PID: 3015 Comm: kworker/3:2 Not tainted 5.5.0-rc3-syzkaller #0 [ 193.137735][ T3015] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.12.0-59-gc9ba5276e321-prebuilt.qemu.org 04/01/2014 [ 193.137735][ T3015] Workqueue: krxrpcd rxrpc_peer_keepalive_worker [ 193.137735][ T3015] Call Trace: [ 193.137735][ T3015] dump_stack+0x197/0x210 [ 193.137735][ T3015] ? aa_sock_msg_perm.isra.0+0xa0/0x170 [ 193.137735][ T3015] panic+0x2e3/0x75c [ 193.137735][ T3015] ? add_taint.cold+0x16/0x16 [ 193.137735][ T3015] ? __kasan_check_write+0x14/0x20 [ 193.137735][ T3015] ? __warn.cold+0x14/0x3e [ 193.137735][ T3015] ? __warn+0xd9/0x1cf [ 193.137735][ T3015] ? aa_sock_msg_perm.isra.0+0xdd/0x170 [ 193.137735][ T3015] __warn.cold+0x2f/0x3e [ 193.137735][ T3015] ? aa_sock_msg_perm.isra.0+0xdd/0x170 [ 193.137735][ T3015] report_bug+0x289/0x300 [ 193.137735][ T3015] do_error_trap+0x11b/0x200 [ 193.137735][ T3015] do_invalid_op+0x37/0x50 [ 193.137735][ T3015] ? aa_sock_msg_perm.isra.0+0xdd/0x170 [ 193.137735][ T3015] invalid_op+0x23/0x30 [ 193.137735][ T3015] RIP: 0010:aa_sock_msg_perm.isra.0+0xdd/0x170 [ 193.137735][ T3015] Code: 89 ef e8 66 70 03 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 c6 c3 17 fe 48 c7 c6 e0 56 6a 88 48 c7 c7 20 41 6a 88 e8 22 6b e8 fd <0f> 0b e9 43 ff ff ff e8 a7 c3 17 fe 48 c7 c6 e0 56 6a 88 48 c7 c7 [ 193.137735][ T3015] RSP: 0018:ffffc9000bb7f9b0 EFLAGS: 00010286 [ 193.137735][ T3015] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 193.137735][ T3015] RDX: 0000000000000000 RSI: ffffffff815e8b56 RDI: fffff5200176ff28 [ 193.137735][ T3015] RBP: ffffc9000bb7f9d8 R08: ffff8880271ac800 R09: fffffbfff1659bcb [ 193.137735][ T3015] R10: fffffbfff1659bca R11: ffffffff8b2cde57 R12: ffffc9000bb7fb20 [ 193.137735][ T3015] R13: ffffffff886a45c0 R14: 0000000000000002 R15: 000000000000001d [ 193.137735][ T3015] ? vprintk_func+0x86/0x189 [ 193.137735][ T3015] apparmor_socket_sendmsg+0x2a/0x30 [ 193.137735][ T3015] security_socket_sendmsg+0x77/0xc0 [ 193.137735][ T3015] sock_sendmsg+0x45/0x130 [ 193.137735][ T3015] kernel_sendmsg+0x44/0x50 [ 193.137735][ T3015] rxrpc_send_keepalive+0x1ff/0x940 [ 193.137735][ T3015] ? rxrpc_reject_packets+0xab0/0xab0 [ 193.137735][ T3015] ? _raw_spin_unlock_bh+0x2c/0x30 [ 193.137735][ T3015] ? __local_bh_enable_ip+0x15a/0x270 [ 193.137735][ T3015] ? lockdep_hardirqs_on+0x421/0x5e0 [ 193.137735][ T3015] ? rxrpc_peer_keepalive_worker+0x62e/0xd02 [ 193.137735][ T3015] ? __local_bh_enable_ip+0x15a/0x270 [ 193.137735][ T3015] rxrpc_peer_keepalive_worker+0x7be/0xd02 [ 193.137735][ T3015] ? rxrpc_peer_add_rtt+0x650/0x650 [ 193.137735][ T3015] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 193.137735][ T3015] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 193.137735][ T3015] ? trace_hardirqs_on+0x67/0x240 [ 193.137735][ T3015] process_one_work+0x9af/0x1740 [ 193.137735][ T3015] ? pwq_dec_nr_in_flight+0x320/0x320 [ 193.137735][ T3015] ? lock_acquire+0x190/0x410 [ 193.137735][ T3015] worker_thread+0x98/0xe40 [ 193.137735][ T3015] ? trace_hardirqs_on+0x67/0x240 [ 193.137735][ T3015] kthread+0x361/0x430 [ 193.137735][ T3015] ? process_one_work+0x1740/0x1740 [ 193.137735][ T3015] ? kthread_mod_delayed_work+0x1f0/0x1f0 [ 193.137735][ T3015] ret_from_fork+0x24/0x30 [ 193.137735][ T3015] Kernel Offset: disabled [ 193.137735][ T3015] Rebooting in 86400 seconds..