Warning: Permanently added '10.128.0.199' (ECDSA) to the list of known hosts. 2019/12/11 22:40:21 fuzzer started 2019/12/11 22:40:23 dialing manager at 10.128.0.26:33577 2019/12/11 22:40:24 syscalls: 2701 2019/12/11 22:40:24 code coverage: enabled 2019/12/11 22:40:24 comparison tracing: enabled 2019/12/11 22:40:24 extra coverage: enabled 2019/12/11 22:40:24 setuid sandbox: enabled 2019/12/11 22:40:24 namespace sandbox: enabled 2019/12/11 22:40:24 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/11 22:40:24 fault injection: enabled 2019/12/11 22:40:24 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/11 22:40:24 net packet injection: enabled 2019/12/11 22:40:24 net device setup: enabled 2019/12/11 22:40:24 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/12/11 22:40:24 devlink PCI setup: PCI device 0000:00:10.0 is not available 22:42:17 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = gettid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) prctl$PR_SET_PTRACER(0x59616d61, r0) close(0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0xf) ptrace$cont(0x18, r1, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x8, 0x37}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 22:42:17 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, 0xffffffffffffffff}}]}}) syzkaller login: [ 205.151242][ T9403] IPVS: ftp: loaded support on port[0] = 21 22:42:17 executing program 2: open(&(0x7f0000000100)='./file0\x00', 0x204c2, 0x0) mount(&(0x7f0000001340)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000180)='./file0\x00', 0x0, 0x1001004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x285042a, &(0x7f0000000000)={[{@test_dummy_encryption='test_dummy_encryption'}]}) [ 205.258696][ T9405] IPVS: ftp: loaded support on port[0] = 21 [ 205.370281][ T9403] chnl_net:caif_netlink_parms(): no params data found [ 205.465390][ T9403] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.499754][ T9403] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.507821][ T9403] device bridge_slave_0 entered promiscuous mode [ 205.538838][ T9403] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.550810][ T9408] IPVS: ftp: loaded support on port[0] = 21 [ 205.560384][ T9403] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.568133][ T9403] device bridge_slave_1 entered promiscuous mode 22:42:18 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xd4}) [ 205.657599][ T9403] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.695047][ T9403] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.770767][ T9405] chnl_net:caif_netlink_parms(): no params data found [ 205.802674][ T9403] team0: Port device team_slave_0 added [ 205.860136][ T9403] team0: Port device team_slave_1 added [ 205.881557][ T9411] IPVS: ftp: loaded support on port[0] = 21 [ 205.889110][ T9408] chnl_net:caif_netlink_parms(): no params data found 22:42:18 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$KDGKBLED(r0, 0x4b64, 0x0) [ 205.992943][ T9403] device hsr_slave_0 entered promiscuous mode [ 206.049995][ T9403] device hsr_slave_1 entered promiscuous mode [ 206.137111][ T9405] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.153364][ T9405] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.170596][ T9405] device bridge_slave_0 entered promiscuous mode [ 206.218642][ T9405] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.225796][ T9405] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.240592][ T9405] device bridge_slave_1 entered promiscuous mode [ 206.255294][ T9408] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.263170][ T9408] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.271212][ T9408] device bridge_slave_0 entered promiscuous mode [ 206.307226][ T9414] IPVS: ftp: loaded support on port[0] = 21 22:42:18 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-camellia-aesni\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r1}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 206.317006][ T9408] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.335229][ T9408] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.346162][ T9408] device bridge_slave_1 entered promiscuous mode [ 206.356299][ T9405] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.368350][ T9403] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 206.452453][ T9405] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.467038][ T9403] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 206.511988][ T9403] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 206.568914][ T9403] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 206.646512][ T9405] team0: Port device team_slave_0 added [ 206.657278][ T9416] IPVS: ftp: loaded support on port[0] = 21 [ 206.664691][ T9405] team0: Port device team_slave_1 added [ 206.672096][ T9408] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.687148][ T9408] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.716431][ T9408] team0: Port device team_slave_0 added [ 206.737824][ T9408] team0: Port device team_slave_1 added [ 206.801634][ T9405] device hsr_slave_0 entered promiscuous mode [ 206.849996][ T9405] device hsr_slave_1 entered promiscuous mode [ 206.899701][ T9405] debugfs: Directory 'hsr0' with parent '/' already present! [ 206.961549][ T9408] device hsr_slave_0 entered promiscuous mode [ 207.020009][ T9408] device hsr_slave_1 entered promiscuous mode [ 207.059745][ T9408] debugfs: Directory 'hsr0' with parent '/' already present! [ 207.127991][ T9411] chnl_net:caif_netlink_parms(): no params data found [ 207.174172][ T9405] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 207.232549][ T9405] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 207.271674][ T9405] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 207.337414][ T9408] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 207.412087][ T9405] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 207.467918][ T9408] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 207.507411][ T9408] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 207.588935][ T9408] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 207.670444][ T9411] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.677533][ T9411] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.686549][ T9411] device bridge_slave_0 entered promiscuous mode [ 207.706833][ T9411] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.715311][ T9411] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.724665][ T9411] device bridge_slave_1 entered promiscuous mode [ 207.782652][ T9411] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.797006][ T9416] chnl_net:caif_netlink_parms(): no params data found [ 207.827915][ T9411] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.879338][ T9411] team0: Port device team_slave_0 added [ 207.887082][ T9414] chnl_net:caif_netlink_parms(): no params data found [ 207.904857][ T9403] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.912455][ T9416] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.919506][ T9416] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.927517][ T9416] device bridge_slave_0 entered promiscuous mode [ 207.938008][ T9411] team0: Port device team_slave_1 added [ 207.944795][ T9416] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.955646][ T9416] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.963827][ T9416] device bridge_slave_1 entered promiscuous mode [ 208.045023][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 208.053366][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 208.064529][ T9403] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.073183][ T9416] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.141634][ T9411] device hsr_slave_0 entered promiscuous mode [ 208.199923][ T9411] device hsr_slave_1 entered promiscuous mode [ 208.239682][ T9411] debugfs: Directory 'hsr0' with parent '/' already present! [ 208.261290][ T9414] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.268423][ T9414] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.277333][ T9414] device bridge_slave_0 entered promiscuous mode [ 208.287914][ T9414] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.297352][ T9414] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.306203][ T9414] device bridge_slave_1 entered promiscuous mode [ 208.316095][ T9416] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.333160][ T9405] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.353371][ T9408] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.387160][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 208.396686][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 208.405212][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.412397][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.420521][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 208.428940][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 208.437575][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.444650][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.452547][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 208.482881][ T9416] team0: Port device team_slave_0 added [ 208.492910][ T9414] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.505578][ T3122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 208.514909][ T3122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 208.522895][ T3122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 208.538904][ T9411] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 208.595154][ T9416] team0: Port device team_slave_1 added [ 208.603113][ T9414] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.617562][ T9411] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 208.672304][ T2521] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 208.680911][ T2521] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 208.688571][ T2521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 208.698898][ T9405] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.719344][ T9408] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.728395][ T9411] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 208.795667][ T2521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 208.805276][ T2521] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 208.813798][ T2521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 208.823559][ T2521] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 208.832673][ T2521] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.839786][ T2521] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.847299][ T2521] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 208.856165][ T2521] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 208.864969][ T2521] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 208.873190][ T2521] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 208.882135][ T9411] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 208.972951][ T9416] device hsr_slave_0 entered promiscuous mode [ 209.009978][ T9416] device hsr_slave_1 entered promiscuous mode [ 209.049727][ T9416] debugfs: Directory 'hsr0' with parent '/' already present! [ 209.059359][ T9414] team0: Port device team_slave_0 added [ 209.089141][ T9403] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 209.100858][ T9403] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 209.127503][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 209.136008][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 209.145156][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.152253][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.159856][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 209.168307][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 209.177268][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.184352][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.192253][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 209.200986][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 209.209380][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 209.217846][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 209.226752][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 209.235051][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 209.243611][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 209.251442][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 209.261650][ T9414] team0: Port device team_slave_1 added [ 209.302760][ T9419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 209.313604][ T9419] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 209.323076][ T9419] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.330176][ T9419] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.338285][ T9419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 209.348669][ T9419] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 209.357152][ T9419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 209.366878][ T9419] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 209.382609][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 209.392635][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 209.408719][ T9403] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.419272][ T9416] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 209.472227][ T9419] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 209.480487][ T9419] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 209.521936][ T9414] device hsr_slave_0 entered promiscuous mode [ 209.592699][ T9414] device hsr_slave_1 entered promiscuous mode [ 209.629667][ T9414] debugfs: Directory 'hsr0' with parent '/' already present! [ 209.642488][ T9416] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 209.693068][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 209.701666][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 209.715282][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 209.723627][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 209.732306][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 209.740591][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 209.748945][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 209.757341][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 209.778099][ T9405] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 209.789522][ T9405] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 209.811229][ T9416] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 209.851309][ T9422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 209.860389][ T9422] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 209.868566][ T9422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 209.876970][ T9422] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 209.885338][ T9422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 209.893752][ T9422] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 209.912249][ T9408] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 209.946243][ T9405] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.958524][ T9416] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 210.001081][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 210.008532][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 210.118207][ T3122] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 210.133385][ T3122] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 22:42:22 executing program 0: poll(&(0x7f0000000000)=[{}, {}, {}, {}, {}], 0x5, 0x800000000004b) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x5f6, 0x0, 0x0, 0x800e004e5) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) readv(r2, &(0x7f0000000800)=[{&(0x7f00000001c0)=""/139, 0x8b}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7) shutdown(r0, 0x0) [ 210.160635][ T9414] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 210.202775][ T9414] netdevsim netdevsim4 netdevsim1: renamed from eth1 22:42:22 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, 0xffffffffffffffff}}]}}) [ 210.262836][ T9408] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.295026][ T9414] netdevsim netdevsim4 netdevsim2: renamed from eth2 22:42:23 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, 0xffffffffffffffff}}]}}) [ 210.352748][ T9414] netdevsim netdevsim4 netdevsim3: renamed from eth3 22:42:23 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, 0xffffffffffffffff}}]}}) [ 210.426333][ T9411] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.503660][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 210.519070][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 210.543631][ T9411] 8021q: adding VLAN 0 to HW filter on device team0 22:42:23 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, 0xffffffffffffffff}}]}}) [ 210.602139][ T3122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 210.616917][ T3122] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 210.627230][ T3122] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.634380][ T3122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.669044][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 210.683869][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 210.695451][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 210.707456][ T2939] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.714610][ T2939] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.736332][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 210.743157][ T9453] 9pnet: Insufficient options for proto=fd [ 210.754511][ T9416] 8021q: adding VLAN 0 to HW filter on device bond0 22:42:23 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, 0xffffffffffffffff}}]}}) [ 210.781279][ T9448] EXT4-fs (sda1): Test dummy encryption mode enabled [ 210.796281][ T9448] EXT4-fs (sda1): re-mounted. Opts: test_dummy_encryption, [ 210.809241][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 210.827793][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 210.837385][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 210.878082][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 210.889202][ T9454] EXT4-fs (sda1): Test dummy encryption mode enabled [ 210.904485][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 210.918979][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 210.928258][ T9454] EXT4-fs (sda1): re-mounted. Opts: test_dummy_encryption, [ 210.942045][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 210.949841][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 22:42:23 executing program 2: open(&(0x7f0000000100)='./file0\x00', 0x204c2, 0x0) mount(&(0x7f0000001340)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000180)='./file0\x00', 0x0, 0x1001004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x285042a, &(0x7f0000000000)={[{@test_dummy_encryption='test_dummy_encryption'}]}) 22:42:23 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000040)=""/41, 0x29}], 0x1}, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xccf3, 0x0, 0x0, 0x800e00545) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f00000009c0)=[{&(0x7f0000000240)=""/235, 0xeb}], 0x1) shutdown(r1, 0x0) [ 211.294361][ T21] list_del corruption. prev->next should be ffff8880a56c92d0, but was ffff8880a56c9b10 [ 211.304957][ T21] ------------[ cut here ]------------ [ 211.310424][ T21] kernel BUG at lib/list_debug.c:51! [ 211.315859][ T21] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 211.321928][ T21] CPU: 0 PID: 21 Comm: kworker/u4:1 Not tainted 5.5.0-rc1-next-20191211-syzkaller #0 [ 211.331379][ T21] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 211.341524][ T21] Workqueue: netns cleanup_net [ 211.346272][ T21] RIP: 0010:__list_del_entry_valid.cold+0xf/0x4f [ 211.352584][ T21] Code: e8 c9 00 cb fd 0f 0b 48 89 f1 48 c7 c7 c0 10 70 88 4c 89 e6 e8 b5 00 cb fd 0f 0b 4c 89 f6 48 c7 c7 60 12 70 88 e8 a4 00 cb fd <0f> 0b 4c 89 ea 4c 89 f6 48 c7 c7 a0 11 70 88 e8 90 00 cb fd 0f 0b [ 211.372163][ T21] RSP: 0018:ffffc90000dd7980 EFLAGS: 00010286 [ 211.378201][ T21] RAX: 0000000000000054 RBX: ffff8880a19504a0 RCX: 0000000000000000 [ 211.386146][ T21] RDX: 0000000000000000 RSI: ffffffff815e8576 RDI: fffff520001baf22 [ 211.394095][ T21] RBP: ffffc90000dd7998 R08: 0000000000000054 R09: fffffbfff165a7a6 [ 211.402040][ T21] R10: fffffbfff165a7a5 R11: ffffffff8b2d3d2f R12: ffff8880a19505a0 [ 211.410154][ T21] R13: ffff8880a56c9b10 R14: ffff8880a56c92d0 R15: ffff8880a56c92d0 [ 211.418110][ T21] FS: 0000000000000000(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 211.427012][ T21] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 211.433657][ T21] CR2: 00007ffe9ca6ed8c CR3: 00000000a5152000 CR4: 00000000001406f0 [ 211.441608][ T21] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 211.449560][ T21] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 211.457518][ T21] Call Trace: [ 211.460794][ T21] __dentry_kill+0x1fd/0x600 [ 211.465358][ T21] ? dput+0x38/0xe10 [ 211.469226][ T21] ? dput+0x38/0xe10 [ 211.473095][ T21] dput+0x62f/0xe10 [ 211.476881][ T21] simple_recursive_removal+0x5bc/0x6d0 [ 211.482401][ T21] ? debugfs_rename+0x7f0/0x7f0 [ 211.487223][ T21] ? mntput+0x74/0xa0 [ 211.491191][ T21] debugfs_remove+0x5e/0x80 [ 211.495678][ T21] nsim_ipsec_teardown+0x7c/0x8f [ 211.500589][ T21] nsim_destroy+0x42/0x70 [ 211.504894][ T21] __nsim_dev_port_del+0x150/0x1f0 [ 211.509988][ T21] nsim_dev_port_del_all+0x8b/0xe0 [ 211.515082][ T21] nsim_dev_reload_destroy+0x58/0xf0 [ 211.520362][ T21] nsim_dev_reload_down+0x73/0xe0 [ 211.525362][ T21] devlink_reload+0xc8/0x3c0 [ 211.529931][ T21] ? devlink_nl_cmd_reload+0x7e0/0x7e0 [ 211.535375][ T21] devlink_pernet_pre_exit+0x104/0x1a0 [ 211.540806][ T21] ? devlink_nl_cmd_reload+0x7e0/0x7e0 [ 211.546251][ T21] cleanup_net+0x49b/0xaf0 [ 211.550652][ T21] ? unregister_pernet_device+0x80/0x80 [ 211.556180][ T21] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 211.561698][ T21] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 211.567650][ T21] ? trace_hardirqs_on+0x67/0x240 [ 211.572652][ T21] process_one_work+0x9af/0x1740 [ 211.577569][ T21] ? pwq_dec_nr_in_flight+0x320/0x320 [ 211.582915][ T21] ? lock_acquire+0x190/0x410 [ 211.587565][ T21] worker_thread+0x98/0xe40 [ 211.592062][ T21] kthread+0x361/0x430 [ 211.596193][ T21] ? process_one_work+0x1740/0x1740 [ 211.601362][ T21] ? kthread_mod_delayed_work+0x1f0/0x1f0 [ 211.607056][ T21] ret_from_fork+0x24/0x30 [ 211.611450][ T21] Modules linked in: [ 211.616103][ T21] ---[ end trace d3c0ed4194904232 ]--- [ 211.621668][ T21] RIP: 0010:__list_del_entry_valid.cold+0xf/0x4f [ 211.627986][ T21] Code: e8 c9 00 cb fd 0f 0b 48 89 f1 48 c7 c7 c0 10 70 88 4c 89 e6 e8 b5 00 cb fd 0f 0b 4c 89 f6 48 c7 c7 60 12 70 88 e8 a4 00 cb fd <0f> 0b 4c 89 ea 4c 89 f6 48 c7 c7 a0 11 70 88 e8 90 00 cb fd 0f 0b [ 211.647598][ T21] RSP: 0018:ffffc90000dd7980 EFLAGS: 00010286 [ 211.653666][ T21] RAX: 0000000000000054 RBX: ffff8880a19504a0 RCX: 0000000000000000 [ 211.661639][ T21] RDX: 0000000000000000 RSI: ffffffff815e8576 RDI: fffff520001baf22 [ 211.669637][ T21] RBP: ffffc90000dd7998 R08: 0000000000000054 R09: fffffbfff165a7a6 [ 211.677602][ T21] R10: fffffbfff165a7a5 R11: ffffffff8b2d3d2f R12: ffff8880a19505a0 [ 211.685577][ T21] R13: ffff8880a56c9b10 R14: ffff8880a56c92d0 R15: ffff8880a56c92d0 [ 211.693553][ T21] FS: 0000000000000000(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 211.702681][ T21] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 211.709258][ T21] CR2: 00007ffe9ca6ed8c CR3: 00000000a5152000 CR4: 00000000001406f0 [ 211.717277][ T21] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 211.725250][ T21] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 211.733224][ T21] Kernel panic - not syncing: Fatal exception [ 211.740757][ T21] Kernel Offset: disabled [ 211.745079][ T21] Rebooting in 86400 seconds..