Warning: Permanently added '10.128.0.221' (ECDSA) to the list of known hosts. [ 43.571519] random: sshd: uninitialized urandom read (32 bytes read) 2019/11/18 21:43:31 fuzzer started [ 43.768898] audit: type=1400 audit(1574113411.382:36): avc: denied { map } for pid=6952 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 44.530784] random: cc1: uninitialized urandom read (8 bytes read) 2019/11/18 21:43:33 dialing manager at 10.128.0.105:37719 2019/11/18 21:43:33 syscalls: 2529 2019/11/18 21:43:33 code coverage: enabled 2019/11/18 21:43:33 comparison tracing: ioctl(KCOV_TRACE_CMP) failed: invalid argument 2019/11/18 21:43:33 extra coverage: extra coverage is not supported by the kernel 2019/11/18 21:43:33 setuid sandbox: enabled 2019/11/18 21:43:33 namespace sandbox: enabled 2019/11/18 21:43:33 Android sandbox: /sys/fs/selinux/policy does not exist 2019/11/18 21:43:33 fault injection: enabled 2019/11/18 21:43:33 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/11/18 21:43:33 net packet injection: enabled 2019/11/18 21:43:33 net device setup: enabled 2019/11/18 21:43:33 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/11/18 21:43:33 devlink PCI setup: PCI device 0000:00:10.0 is not available [ 46.561510] random: crng init done 21:45:51 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x6) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r0, r3, &(0x7f0000000240)=0x202, 0x4000000000dc) 21:45:51 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000a80)="ad56b6cc0400fb8b65d8b4ac2ca35c66", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$unix(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000ac0)="4d6ed6991f2cbcf96ea0b6042922efae8ce406f5296a31496546f74d527700676f84081df7e14f58544f77f5c5eb33a36effdc8bcfa40a11acc5bb779a57987b1920fc13933d8d0f32457e718ceb7acac7fb57808c68887a823ba93bebadb646dced9363e404759c041b890322e05e56dfdd51dc85de2d6d1f6459e54396c2796a79f8891b8bf0d2d4bcfd50ae38a2da2a1e604943", 0x95}], 0x1}, 0x0) 21:45:51 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000180)={0x2, 0x4e23, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) write$binfmt_script(r0, &(0x7f00000009c0)=ANY=[], 0x8408) 21:45:51 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$KVM_SET_IRQCHIP(r2, 0xc00caee0, &(0x7f00000001c0)={0x80ffff}) 21:45:52 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_EPOCH_SET(r0, 0x4004700e, 0x0) 21:45:52 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000600)=""/142, 0x8e}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_INIT(r0, &(0x7f0000000300)={0x50, 0x0, 0x1}, 0x50) [ 184.332217] audit: type=1400 audit(1574113551.952:37): avc: denied { map } for pid=6952 comm="syz-fuzzer" path="/root/syzkaller-shm932013282" dev="sda1" ino=1426 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 184.390157] audit: type=1400 audit(1574113551.972:38): avc: denied { map } for pid=6970 comm="syz-executor.5" path="/sys/kernel/debug/kcov" dev="debugfs" ino=19 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 184.532501] IPVS: ftp: loaded support on port[0] = 21 [ 185.328588] chnl_net:caif_netlink_parms(): no params data found [ 185.361670] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.368308] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.375708] device bridge_slave_0 entered promiscuous mode [ 185.382844] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.389216] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.396184] device bridge_slave_1 entered promiscuous mode [ 185.403312] IPVS: ftp: loaded support on port[0] = 21 [ 185.417568] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 185.426689] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 185.442682] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 185.449772] team0: Port device team_slave_0 added [ 185.455447] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 185.462748] team0: Port device team_slave_1 added [ 185.469829] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 185.477713] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 185.541815] device hsr_slave_0 entered promiscuous mode [ 185.580379] device hsr_slave_1 entered promiscuous mode [ 185.622990] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 185.634143] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 185.641670] audit: type=1400 audit(1574113553.262:39): avc: denied { create } for pid=6977 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 185.670139] audit: type=1400 audit(1574113553.292:40): avc: denied { write } for pid=6977 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 185.694055] audit: type=1400 audit(1574113553.292:41): avc: denied { read } for pid=6977 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 185.736866] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.743305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.750242] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.756609] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.783554] IPVS: ftp: loaded support on port[0] = 21 [ 185.812167] chnl_net:caif_netlink_parms(): no params data found [ 185.854651] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.861180] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.868022] device bridge_slave_0 entered promiscuous mode [ 185.882795] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.889226] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.896371] device bridge_slave_1 entered promiscuous mode [ 185.917912] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 185.928815] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 185.954351] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 185.961693] team0: Port device team_slave_0 added [ 185.971233] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 185.977313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.983774] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 185.991792] team0: Port device team_slave_1 added [ 185.999670] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 186.007409] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 186.015571] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 186.023944] IPVS: ftp: loaded support on port[0] = 21 [ 186.053731] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 186.059815] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.102328] device hsr_slave_0 entered promiscuous mode [ 186.150336] device hsr_slave_1 entered promiscuous mode [ 186.191051] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 186.199874] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 186.209992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 186.217961] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.235171] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.288645] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 186.296437] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.302796] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.309809] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 186.318238] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.324624] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.341600] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 186.354908] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 186.366102] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 186.374960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 186.384181] IPVS: ftp: loaded support on port[0] = 21 [ 186.384683] chnl_net:caif_netlink_parms(): no params data found [ 186.403668] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 186.419329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 186.452698] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 186.474109] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 186.482722] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 186.492603] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 186.523866] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 186.532388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 186.539875] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 186.574910] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.581814] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 186.592068] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.598433] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.605620] device bridge_slave_0 entered promiscuous mode [ 186.612819] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.619188] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.626543] device bridge_slave_1 entered promiscuous mode [ 186.639425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 186.648344] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 186.657925] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 186.664797] chnl_net:caif_netlink_parms(): no params data found [ 186.679289] IPVS: ftp: loaded support on port[0] = 21 [ 186.692337] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 186.701703] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 186.711323] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 186.731740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 186.739601] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 186.749112] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 186.755535] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 186.763886] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 186.786149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 186.793560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 186.803636] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 186.811233] team0: Port device team_slave_0 added [ 186.818068] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 186.824349] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.840850] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 186.847921] team0: Port device team_slave_1 added [ 186.859849] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 186.883825] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 186.905665] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 186.925678] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 186.935508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 186.943502] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 186.951516] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.957970] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.965435] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 187.032375] device hsr_slave_0 entered promiscuous mode [ 187.070510] device hsr_slave_1 entered promiscuous mode [ 187.112708] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 187.119986] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 187.141398] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 187.147709] chnl_net:caif_netlink_parms(): no params data found [ 187.157858] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 187.172708] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 187.182271] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 187.189001] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 187.196822] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 187.204514] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.210908] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.260844] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 187.269951] chnl_net:caif_netlink_parms(): no params data found [ 187.280759] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.287136] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.294032] device bridge_slave_0 entered promiscuous mode [ 187.300891] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.307230] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.314471] device bridge_slave_1 entered promiscuous mode [ 187.328008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 187.337449] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 187.361083] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 187.369670] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.376637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 187.396334] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 187.410986] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 187.438927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 187.452187] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 187.459746] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 187.469298] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 187.487990] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.494669] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.501908] device bridge_slave_0 entered promiscuous mode [ 187.515195] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 187.522683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 187.534841] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 187.543183] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 187.552772] team0: Port device team_slave_0 added [ 187.557990] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.564613] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.572247] device bridge_slave_1 entered promiscuous mode [ 187.591737] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 187.601040] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 187.608083] team0: Port device team_slave_1 added [ 187.617924] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 187.625458] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 187.634492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 187.642580] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 187.658395] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.666353] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.673900] device bridge_slave_0 entered promiscuous mode [ 187.686412] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.692844] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.699986] device bridge_slave_1 entered promiscuous mode [ 187.714117] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 187.731642] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 187.740054] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 187.749225] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 187.779452] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 187.786780] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 187.795000] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 187.862147] device hsr_slave_0 entered promiscuous mode [ 187.890399] device hsr_slave_1 entered promiscuous mode [ 187.951057] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 187.958270] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 187.969998] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 187.979439] bond0: Enslaving bond_slave_1 as an active interface with an up link 21:45:55 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x3, 0x7f) write$P9_RAUTH(r1, &(0x7f0000000100)={0x14}, 0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) write$P9_RGETATTR(r6, &(0x7f00000002c0)={0xa0, 0x19, 0x2, {0xa02, {0x8, 0x3, 0x5}, 0x52, r7, r8, 0x7, 0xc582, 0x47f, 0x200, 0x6, 0x200, 0x1, 0x1, 0x540, 0x4, 0x2, 0x3f, 0x6, 0x6, 0x70}}, 0xa0) vmsplice(r1, &(0x7f00000013c0)=[{&(0x7f0000000200)="8f3a1e6aee7f2e97d036bfb16915805ba71e06b3", 0x14}], 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r3, 0x0, 0x3, &(0x7f00000000c0)=0x7ff, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r10, 0x0, r9) splice(r0, 0x0, r9, 0x0, 0x7, 0x1) r11 = syz_open_dev$sndpcmp(&(0x7f0000000380)='/dev/snd/pcmC#D#p\x00', 0x2, 0x101000) ioctl$SG_SET_COMMAND_Q(r11, 0x2271, &(0x7f00000003c0)=0x1) [ 188.004297] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 188.011873] team0: Port device team_slave_0 added [ 188.018133] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 188.026739] team0: Port device team_slave_1 added [ 188.034490] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 188.063556] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 188.077295] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 188.089863] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 188.099849] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready 21:45:55 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000480)='./bus\x00', 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x208200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x14103e, 0x0) r3 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x0, 0xce62ba94d1a69874) fcntl$getflags(r3, 0x3) mmap(&(0x7f000047f000/0x1000)=nil, 0x1000, 0x7ffffe, 0x80013, r2, 0x0) read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) r4 = syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="778741f35c00000000918f874555c11fe0a8a4ec52e633dc11b51bce84705d99f7708e7bc8f81d9b1411040b0e91cd05bc21b0770cbfd78373cf1a04d9020641a09392b5b0b076cdabce76eb97e37cb654b8734caf3cd8372c229e4f268cf85e3ed17c5bde8842888700", @ANYRES16=r4, @ANYBLOB="e54e000000000000000008000000180004001400010062726f61646342d6ac5556f14576c3d787022349f027227b1e1dad51c414bb807a56a056a392ff34ccfeca4319992cf612d6428bfea78c4b479826eb2ea8682d11309a4fdc67621511e05ad47aaf11f40009b27b9e953fc9cb29981757fc8f1e1e8692565a9ec6ef762e7c4aa638804eee076d3b629337b04bc45cfebe39dce49f5cf407713f9e2c7cc733782828dda15effa3d9369fd58d3cb25f682ecc268448c1c2b377ee0dde137211469d99993c98c732c1411a87edbb973eec4cda6cb956d26facd32e8454e78213ce5c1525203399d87e9dd8d7da4b6b"], 0x3}}, 0x0) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8f33580d18fd21ff}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x2d9, r4, 0x1, 0x70bd2d, 0x25dfdbfb}, 0x14}}, 0x4000) [ 188.119665] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 188.126517] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 188.134114] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 188.141418] team0: Port device team_slave_0 added [ 188.147246] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 188.155404] team0: Port device team_slave_1 added [ 188.162153] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 188.198122] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.208739] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 188.218634] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 188.253582] device hsr_slave_0 entered promiscuous mode [ 188.266949] audit: type=1804 audit(1574113555.882:42): pid=7015 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir818154398/syzkaller.iJxuAZ/2/file0/bus" dev="ramfs" ino=26392 res=1 [ 188.290043] hrtimer: interrupt took 44310 ns [ 188.294507] audit: type=1804 audit(1574113555.892:43): pid=7015 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.5" name="/root/syzkaller-testdir818154398/syzkaller.iJxuAZ/2/file0/bus" dev="ramfs" ino=26392 res=1 [ 188.326427] device hsr_slave_1 entered promiscuous mode [ 188.332620] audit: type=1400 audit(1574113555.902:44): avc: denied { map } for pid=7014 comm="syz-executor.5" path="/root/syzkaller-testdir818154398/syzkaller.iJxuAZ/2/file0/bus" dev="ramfs" ino=26392 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:ramfs_t:s0 tclass=file permissive=1 [ 188.362107] audit: type=1804 audit(1574113555.902:45): pid=7015 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.5" name="/root/syzkaller-testdir818154398/syzkaller.iJxuAZ/2/file0/bus" dev="ramfs" ino=26392 res=1 [ 188.391252] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 188.412533] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.422930] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 188.442791] audit: type=1804 audit(1574113556.062:46): pid=7016 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir818154398/syzkaller.iJxuAZ/2/file0/file0/bus" dev="ramfs" ino=26397 res=1 [ 188.471899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 188.485370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 188.496280] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready 21:45:56 executing program 5: socket$inet_dccp(0x2, 0x6, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x4, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40000, 0x8}, [@IFLA_GROUP={0xae, 0x1b, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x1) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r2, 0x40505330, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000180)=@rc, &(0x7f0000000040)=0x80, 0x800) pipe(0x0) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)=ANY=[@ANYBLOB="1001007d", @ANYRES16=r6, @ANYBLOB="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"], 0x110}, 0x1, 0x0, 0x0, 0x20000000}, 0x40081) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) dup(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = fcntl$dupfd(r8, 0x0, r7) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f00000000c0)=@get={0x1, &(0x7f0000000340)=""/217, 0x28ab}) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$UI_SET_EVBIT(r9, 0x40045564, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = fcntl$dupfd(r11, 0x0, r10) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_TREAD(r12, 0x40045402, &(0x7f0000000240)) [ 188.519585] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 188.531337] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.583822] device hsr_slave_0 entered promiscuous mode [ 188.610541] device hsr_slave_1 entered promiscuous mode [ 188.630893] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 188.638330] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 188.648227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.659125] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 188.668589] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 188.675966] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 188.686632] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 188.695133] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.701531] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.709118] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 188.717780] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 188.741893] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 188.750715] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 188.773658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 188.781905] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 188.789905] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.796478] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.804555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 188.812131] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 188.823215] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 188.829340] 8021q: adding VLAN 0 to HW filter on device team0 21:45:56 executing program 5: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r0) mount(&(0x7f0000000180)=ANY=[], &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x0, 0x0) write$nbd(0xffffffffffffffff, 0x0, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x8000, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="7d19bb0ba76bf6", @ANYRESHEX=r3, @ANYBLOB=',\x00']) syz_open_dev$amidi(&(0x7f0000000140)='/dev/amidi#\x00', 0x6, 0x4000) [ 188.863718] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 188.864485] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 188.894120] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 188.931008] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 188.935925] 9pnet: Insufficient options for proto=fd [ 188.945339] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 188.952855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 188.963705] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 188.973203] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.979619] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.986796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 189.021013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 21:45:56 executing program 1: setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x13, r0, 0x0) shmget(0x2, 0x1000, 0x1c, &(0x7f000096d000/0x1000)=nil) perf_event_open(&(0x7f000001d000)={0x1, 0x25a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_dev$admmidi(&(0x7f00000015c0)='/dev/admmidi#\x00', 0x8, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(0xffffffffffffffff, 0x80045300, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) fsetxattr$security_smack_transmute(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x0, 0x0, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x64) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PPPIOCGIDLE(0xffffffffffffffff, 0x8010743f, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x4028010, &(0x7f0000e68000)={0x2, 0x4e24, @multicast1}, 0xffffffffffffff9e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sendto(r2, &(0x7f0000000000)="b6", 0x1, 0x1, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140), 0x47) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) setsockopt$inet_int(r8, 0x0, 0xd, &(0x7f0000000040)=0x7, 0x4) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) readv(r2, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/216, 0xd8}], 0x1) [ 189.032476] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 189.042612] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 189.062188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.071470] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready 21:45:56 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0xc0a, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r2) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f0000000100)=@v2={0x2, @aes128, 0x1, [], "3e808d12126142a29bc074dbee2742ac"}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$P9_RCREATE(r1, &(0x7f0000000280)={0x18, 0x73, 0x1, {{0x34, 0x2, 0x4}, 0x8}}, 0x18) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r6, 0x4048ae9b, &(0x7f00000003c0)={0xe0003}) getgroups(0x2, &(0x7f00000005c0)=[0x0, 0x0]) setregid(0x0, r7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = fcntl$dupfd(r9, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$MON_IOCQ_RING_SIZE(r10, 0x9205) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000300)="66b8ad008ed00f8d0808417b2c020f3548b800000100000000000f23c00f21f835010008000f23740fc778fc0f350fd8060f30", 0x33}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000040), 0x0, &(0x7f00000000c0)=0x0) fstat(0xffffffffffffffff, 0x0) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x2) prctl$PR_GET_TSC(0x19, &(0x7f0000000740)) lchown(&(0x7f0000000000)='./file0\x00', r11, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = fcntl$dupfd(r13, 0x0, r12) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) r15 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r14, 0xc1105511, &(0x7f0000000440)={{0x8, 0x6, 0xffffff01, 0xffff, 'syz1\x00', 0x2}, 0x5, 0x20, 0x7ff, r15, 0x2, 0x100, 'syz0\x00', &(0x7f0000000080)=['\x00', '\x00'], 0x2, [], [0xff7f, 0x7, 0x7fff, 0xfc00]}) sched_setaffinity(r15, 0x8, &(0x7f0000000140)=0xfd6) ioctl$KVM_RUN(r6, 0xae80, 0x0) [ 189.080857] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 189.088325] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 189.096460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 189.104671] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 189.114218] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.120661] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.136633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 189.146609] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 189.155448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 189.163328] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 189.171011] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 189.179424] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 189.189395] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 189.199307] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 189.211111] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 189.220549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 189.228089] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready 21:45:56 executing program 1: r0 = perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) write$P9_RVERSION(r2, &(0x7f0000000980)=ANY=[@ANYBLOB="1500000065ffff0010000008003950323030300900fc9cd866b42938ab0142624904b40d651a9b3672476a814ac42843aa88e1db60ba47b6bb30407402000000349f0633a206403448d69000000000e03a80b9374275d0f7b100237209ffe467ab1296c3c5085a515cf18151210b8615d54f1c7f3e9ef2ec1577c935216a586171a0aca46a1b561565ffefd7652e6c949d9a7f95f42d36d892d4b30cc1fc50434686595553e6f3381cf655df317fe9ca3533e7afb1ced5c006e691b4999cf6c0aae1178e256baacb07e6f80b9f8e6bc4f3b57d528930399f5c7903c06e4298f2d6774ba4d327c8c4c783340d84b8252dc0961fdc1816a67772058c027c491d1761cd867b446e1d09fc35834cb3e8e0ed7bde47964dc091ec1ce2dd7bfa8c430600000000000000ce550d9645db0c58453350fa101f5aae17559fcfd2bd00000000c2621a68b48ccc39235cdf20d22060d3c8f352e3416380e4aab0aad9d953e0a7dd37de2bfc4fcdd81bfa4264c89a612bf74868309f840cc82f1cb4a4eaa8728c3425a50c9ffb680f44aff1e913a7f5b3158696196345a4caebc08e692861bbd2304b31f7c58fe55f668b9420ea754930458873cec2e3869c70cc78c2a06f70c33a4c09e6195262ae96eec759aae838435429bd039f8ffde4c529d7dc83c298a16cd17d01d46e41e6feef9fc6f935e8f745bd1208d4d5b226eff700"/528], 0x15) eventfd2(0x4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mknod$loop(&(0x7f00000000c0)='./file0\x00', 0xa000, 0x0) write$P9_RAUTH(r2, &(0x7f0000000040)={0x14, 0x67, 0x1}, 0x14) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0) close(r3) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) write$P9_RLOPEN(r3, 0x0, 0x0) write$P9_RGETATTR(r2, &(0x7f0000000500)={0xa0, 0x19, 0x1, {0x0, {0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0xa0) ioctl$VIDIOC_DBG_G_CHIP_INFO(r0, 0xc0c85666, &(0x7f00000001c0)={{0x4}, "948676b89ad94220e7fe0da4a12c48de35c5be49a13e0fdb76a15be122bf8fa8", 0x4}) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000140), 0x4) connect$inet(r4, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = dup3(r4, r5, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000005140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000005100)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r7, &(0x7f0000005180)={0xf, 0x8}, 0x10) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000340)={0xf, 0x8, 0xfa00, {r8, 0xb}}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) umount2(&(0x7f0000000140)='./file0\x00', 0xb) [ 189.235911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 189.243695] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 189.275602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 189.297248] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 189.307068] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 189.339085] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 189.346459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 189.357666] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 189.367418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 189.378277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 189.387194] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 189.400426] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 189.412136] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 189.426562] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 189.435683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 189.450717] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 189.459916] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 189.466183] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.478777] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 189.490344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 189.497817] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 189.516568] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 189.524891] list_add double add: new=ffff888056078898, prev=ffff888056078898, next=ffff88808de0c840. [ 189.532266] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 189.534592] ------------[ cut here ]------------ [ 189.542618] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 189.545222] kernel BUG at lib/list_debug.c:29! [ 189.545305] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 189.557523] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.561303] Modules linked in: [ 189.561315] CPU: 0 PID: 7060 Comm: syz-executor.1 Not tainted 4.14.154 #0 [ 189.561320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 189.561325] task: ffff888055aee140 task.stack: ffff888055ab0000 [ 189.561340] RIP: 0010:__list_add_valid.cold+0x26/0x3c [ 189.567460] kobject: 'vlan0' (ffff88809f57ea00): kobject_add_internal: parent: 'mesh', set: '' [ 189.570553] RSP: 0018:ffff888055ab7a00 EFLAGS: 00010282 [ 189.570560] RAX: 0000000000000058 RBX: ffff88808de0c800 RCX: 0000000000000000 [ 189.570564] RDX: 000000000000dfb4 RSI: ffffffff814b8535 RDI: ffffed100ab56f36 [ 189.570568] RBP: ffff888055ab7a18 R08: 0000000000000058 R09: ffff888055aeea08 [ 189.570573] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88808de0c840 [ 189.570580] R13: ffff888056078898 R14: ffff888056078898 R15: ffff888056078898 [ 189.608778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.612775] FS: 00007ff3d73cf700(0000) GS:ffff8880aee00000(0000) knlGS:0000000000000000 [ 189.612780] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 189.612784] CR2: 00007f496014d000 CR3: 00000000a0b37000 CR4: 00000000001406f0 [ 189.612790] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 189.612794] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 189.612804] Call Trace: [ 189.612820] ? _raw_spin_lock+0x37/0x40 [ 189.612831] p9_fd_request+0xe3/0x2b0 [ 189.612841] p9_client_rpc+0x21b/0x1180 [ 189.612852] ? p9_client_prepare_req.part.0+0xa90/0xa90 [ 189.612863] ? trace_hardirqs_on_caller+0x400/0x590 [ 189.612871] ? trace_hardirqs_on+0xd/0x10 [ 189.612881] ? finish_wait+0x260/0x260 [ 189.612892] ? destroy_inode+0xc7/0x120 [ 189.622176] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 189.627449] ? evict+0x3e6/0x630 [ 189.636189] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 189.641996] ? do_raw_spin_unlock+0x16b/0x260 [ 189.642008] p9_client_clunk+0x89/0x150 [ 189.642021] v9fs_dentry_release+0x6d/0xd0 [ 189.649415] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 189.655207] ? v9fs_cached_dentry_delete+0x40/0x40 [ 189.655221] __dentry_kill+0x39a/0x580 [ 189.655228] ? dput.part.0+0x2a/0x750 [ 189.655236] ? dput.part.0+0x2a/0x750 [ 189.655247] dput.part.0+0x59f/0x750 [ 189.664896] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 189.669346] do_one_tree+0x44/0x50 [ 189.678830] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 189.683871] shrink_dcache_for_umount+0x67/0x140 [ 189.683880] generic_shutdown_super+0x6d/0x370 [ 189.683887] kill_anon_super+0x3f/0x60 [ 189.683896] v9fs_kill_super+0x3e/0xa0 [ 189.683906] deactivate_locked_super+0x74/0xe0 [ 189.696278] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 189.697707] deactivate_super+0x85/0xa0 [ 189.703924] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 189.705448] cleanup_mnt+0xb2/0x150 [ 189.713023] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 189.715793] __cleanup_mnt+0x16/0x20 [ 189.721305] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 189.723837] task_work_run+0x114/0x190 [ 189.723849] exit_to_usermode_loop+0x1da/0x220 [ 189.723859] do_syscall_64+0x4bc/0x640 [ 189.730859] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 189.737431] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 189.737445] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 189.743853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.746763] RIP: 0033:0x45a639 [ 189.752136] kobject: 'vlan0' (ffff8880970bcb80): kobject_add_internal: parent: 'mesh', set: '' [ 189.755214] RSP: 002b:00007ff3d73cec78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 189.755223] RAX: 0000000000000000 RBX: 0000000000000002 RCX: 000000000045a639 [ 189.755227] RDX: 0000000000000000 RSI: 000000000000000b RDI: 0000000020000140 [ 189.755234] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 189.761563] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 189.765944] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff3d73cf6d4 [ 189.771733] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.774725] R13: 00000000004ca580 R14: 00000000004e24f8 R15: 00000000ffffffff [ 189.774737] Code: [ 189.780691] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 189.782305] e9 [ 189.787801] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 189.792912] 56 ff ff ff 4c 89 e1 48 c7 c7 00 1f 9d 86 e8 2f b1 72 fe [ 189.798789] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 189.802607] 0f 0b 48 89 f2 4c 89 e1 4c 89 ee 48 c7 c7 40 20 9d 86 [ 189.809773] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 189.811972] e8 18 b1 72 fe <0f> 0b 48 89 f1 48 c7 c7 c0 1f 9d 86 4c [ 189.819741] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 189.819761] 89 [ 189.825109] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 189.830563] e6 e8 04 b1 72 fe 0f [ 189.830591] RIP: __list_add_valid.cold+0x26/0x3c RSP: ffff888055ab7a00 [ 189.831870] ---[ end trace cdc2bd8d03c10727 ]--- [ 189.837554] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 189.841516] Kernel panic - not syncing: Fatal exception [ 189.843029] Kernel Offset: disabled [ 190.062823] Rebooting in 86400 seconds..