Warning: Permanently added '10.128.1.24' (ECDSA) to the list of known hosts.
[   39.841719] random: sshd: uninitialized urandom read (32 bytes read)
2019/10/13 20:40:42 fuzzer started
[   40.045106] audit: type=1400 audit(1570999242.916:36): avc:  denied  { map } for  pid=6838 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1
[   40.791505] random: cc1: uninitialized urandom read (8 bytes read)
2019/10/13 20:40:44 dialing manager at 10.128.0.105:38503
2019/10/13 20:40:44 syscalls: 2500
2019/10/13 20:40:44 code coverage: enabled
2019/10/13 20:40:44 comparison tracing: ioctl(KCOV_TRACE_CMP) failed: invalid argument
2019/10/13 20:40:44 extra coverage: extra coverage is not supported by the kernel
2019/10/13 20:40:44 setuid sandbox: enabled
2019/10/13 20:40:44 namespace sandbox: enabled
2019/10/13 20:40:44 Android sandbox: /sys/fs/selinux/policy does not exist
2019/10/13 20:40:44 fault injection: enabled
2019/10/13 20:40:44 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2019/10/13 20:40:44 net packet injection: enabled
2019/10/13 20:40:44 net device setup: enabled
2019/10/13 20:40:44 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
[   43.011111] random: crng init done
20:42:28 executing program 0:

20:42:28 executing program 5:

20:42:28 executing program 1:

20:42:28 executing program 2:

20:42:28 executing program 3:

20:42:28 executing program 4:

[  145.346780] audit: type=1400 audit(1570999348.216:37): avc:  denied  { map } for  pid=6838 comm="syz-fuzzer" path="/root/syzkaller-shm506111641" dev="sda1" ino=16497 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1
[  145.375898] audit: type=1400 audit(1570999348.246:38): avc:  denied  { map } for  pid=6855 comm="syz-executor.0" path="/sys/kernel/debug/kcov" dev="debugfs" ino=1123 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1
[  145.740938] IPVS: ftp: loaded support on port[0] = 21
[  146.523189] IPVS: ftp: loaded support on port[0] = 21
[  146.561931] chnl_net:caif_netlink_parms(): no params data found
[  146.595719] bridge0: port 1(bridge_slave_0) entered blocking state
[  146.602595] bridge0: port 1(bridge_slave_0) entered disabled state
[  146.609797] device bridge_slave_0 entered promiscuous mode
[  146.617142] bridge0: port 2(bridge_slave_1) entered blocking state
[  146.623667] bridge0: port 2(bridge_slave_1) entered disabled state
[  146.630977] device bridge_slave_1 entered promiscuous mode
[  146.647851] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  146.657065] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  146.673772] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  146.681223] team0: Port device team_slave_0 added
[  146.687209] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  146.694534] team0: Port device team_slave_1 added
[  146.699781] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  146.707299] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  146.762098] device hsr_slave_0 entered promiscuous mode
[  146.820392] device hsr_slave_1 entered promiscuous mode
[  146.882431] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[  146.894433] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[  146.923537] bridge0: port 2(bridge_slave_1) entered blocking state
[  146.930119] bridge0: port 2(bridge_slave_1) entered forwarding state
[  146.937219] bridge0: port 1(bridge_slave_0) entered blocking state
[  146.943668] bridge0: port 1(bridge_slave_0) entered forwarding state
[  146.952323] IPVS: ftp: loaded support on port[0] = 21
[  147.043906] IPVS: ftp: loaded support on port[0] = 21
[  147.071774] chnl_net:caif_netlink_parms(): no params data found
[  147.128899] chnl_net:caif_netlink_parms(): no params data found
[  147.144365] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready
[  147.150704] 8021q: adding VLAN 0 to HW filter on device bond0
[  147.171096] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  147.181387] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[  147.187475] 8021q: adding VLAN 0 to HW filter on device team0
[  147.207820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  147.216391] bridge0: port 1(bridge_slave_0) entered disabled state
[  147.223663] bridge0: port 2(bridge_slave_1) entered disabled state
[  147.251463] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  147.259095] bridge0: port 1(bridge_slave_0) entered blocking state
[  147.265469] bridge0: port 1(bridge_slave_0) entered forwarding state
[  147.272439] bridge0: port 1(bridge_slave_0) entered blocking state
[  147.278771] bridge0: port 1(bridge_slave_0) entered disabled state
[  147.286306] device bridge_slave_0 entered promiscuous mode
[  147.298790] bridge0: port 1(bridge_slave_0) entered blocking state
[  147.305200] bridge0: port 1(bridge_slave_0) entered disabled state
[  147.312285] device bridge_slave_0 entered promiscuous mode
[  147.331123] bridge0: port 2(bridge_slave_1) entered blocking state
[  147.337488] bridge0: port 2(bridge_slave_1) entered disabled state
[  147.345555] device bridge_slave_1 entered promiscuous mode
[  147.358590] bridge0: port 2(bridge_slave_1) entered blocking state
[  147.365071] bridge0: port 2(bridge_slave_1) entered disabled state
[  147.372334] device bridge_slave_1 entered promiscuous mode
[  147.378922] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  147.387484] bridge0: port 2(bridge_slave_1) entered blocking state
[  147.393958] bridge0: port 2(bridge_slave_1) entered forwarding state
[  147.401360] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  147.408883] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  147.416453] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  147.423777] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  147.431284] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  147.439172] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[  147.446744] IPVS: ftp: loaded support on port[0] = 21
[  147.447303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  147.479619] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  147.493627] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  147.503530] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  147.519060] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[  147.527021] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  147.562590] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  147.571342] team0: Port device team_slave_0 added
[  147.576952] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  147.584209] team0: Port device team_slave_0 added
[  147.589644] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  147.613708] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  147.622392] team0: Port device team_slave_1 added
[  147.627530] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  147.634609] team0: Port device team_slave_1 added
[  147.640952] 8021q: adding VLAN 0 to HW filter on device batadv0
[  147.672493] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  147.683132] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  147.691360] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  147.714984] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
20:42:30 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000005d00)={&(0x7f0000000280)=ANY=[@ANYBLOB="a00000001000070d00000000000000000000a961c811ec1b3ead05dbeedc393d887f68fa6cdf8d6eb8458fd6c2bd9ef00c7746d275e8c0475984edf30e7a4e0849c4182cfd7a7e254acab1ca28ee2a3ae79448f60c759396cc7d401d61f7e210a1d828076188", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x33e0], 0xa0}}, 0x0)

[  147.795036] IPVS: ftp: loaded support on port[0] = 21
[  147.815824] device hsr_slave_0 entered promiscuous mode
[  147.860455] device hsr_slave_1 entered promiscuous mode
[  147.953384] device hsr_slave_0 entered promiscuous mode
[  147.990468] device hsr_slave_1 entered promiscuous mode
[  148.032863] chnl_net:caif_netlink_parms(): no params data found
[  148.041926] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.0'.
[  148.054115] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[  148.062025] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
20:42:30 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0x0, <r0=>0x0})
r1 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r1, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0xa)
sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0x80, &(0x7f0000000300), 0x0, &(0x7f00000005c0)=[{0x98, 0x87, 0x8, "fc44a5fd6292765367dfcb17b6200ff32363bfbb96289844e989c3d96c8188d9d5bda8b4288553f216dd43f0dc90cd9ae37a3ed11c633d8266bdfdcbedb0cb0ea1387237233d3bc8002fa4d7a465422d1021b5627688f751eb22b24ef8ab9c9ec92d7320b9368c8c4f2df12fa1ac2a6c6b5bd09b5089b7cc34ac3c5c419055946fbbb725cc097d"}, {0xa0, 0x6, 0x3, "bb090094f886b6e12010cc5ec300cb0cfd01e92bc208778746dcd2d2cf7273ace75c8119decdbbecd0499a28914f104d29ba573c5f6a8808ff2ef22bcfaf0d8e99d30b74152302eadccce088f7b9be0b59b3d584814fce61b8c53150c0f8252f3ab7008e926a26d922f446513c9b08e9fe854698408e87bce44ace778ac24b517e1f01032e07ee580000000000000000"}, {0x18, 0x10e, 0x7, "2ee23c91b9"}, {0xe0, 0x1c5, 0xce, "3825bd33858a72b8f7f0ff76b83a2d8a1457710dbabeb3178466519510b671132e2edc9c2b3d571b4a842e3cfc2d4a5d51bd17a9b4da4852035f6d0c0bf5a07e9082ab947c0ed788e0029b70e2b3405efd65f50148564c6ef8f7bcd996bff22572e5ff78da24702ae1ed93e06b3f39b70c23f58939f21ff6aa7d2976411ce04c4b778cf5b5f005fb2bbe2cb716d2ee94c131b546790284c51578525418a5455b34f341e16e0ded480af5fa0bb3548ec98f73748409078858b35ecfedae121364f7039a0e67a24093641ef6fd161ada39"}, {0x28, 0x104, 0xf, "4e99c487089bc3b588228afa0c034ba76e651cdc9456de87"}, {0x20, 0x103, 0x3b8, "058235f9b9310f24744122caf3ab27"}, {0xa0, 0x114, 0x5, "a9bee5a84618286d89d3f638ea25a83a1c5253df50a6a64c2225a8f167ec4d45c09cb447a1f6bb793c2b2daf31cf76242d1ae9c4e1503d42bd1552c012a4dc08f26b8d151ba51a1e879b49624c3be7986a635ad5a0b0b61bdc18a7d7e7dfb88090364ddbf07f5a18c674ba1f254e54cedc8449f16d00d9027ead41f11dde0d2563b370b8c234516f7d068ed4f3"}], 0x318}}], 0x2, 0x0)

[  148.080782] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
20:42:31 executing program 0:
socket$inet6(0xa, 0x80000, 0x3)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @ipv4={[], [], @loopback}}, 0x1c)
sendmmsg(r0, &(0x7f0000000440), 0x400000000000211, 0x810)
syz_open_procfs(0x0, &(0x7f00000002c0)='net/l2cap\x00')
socket$inet6_tcp(0xa, 0x1, 0x0)

[  148.134519] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[  148.169190] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[  148.255616] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[  148.273693] chnl_net:caif_netlink_parms(): no params data found
[  148.290046] hrtimer: interrupt took 46914 ns
[  148.333535] bridge0: port 1(bridge_slave_0) entered blocking state
[  148.341497] bridge0: port 1(bridge_slave_0) entered disabled state
[  148.349741] device bridge_slave_0 entered promiscuous mode
[  148.397761] bridge0: port 2(bridge_slave_1) entered blocking state
[  148.407270] bridge0: port 2(bridge_slave_1) entered disabled state
[  148.419638] device bridge_slave_1 entered promiscuous mode
[  148.436736] 8021q: adding VLAN 0 to HW filter on device bond0
[  148.501767] 8021q: adding VLAN 0 to HW filter on device bond0
[  148.509456] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
20:42:31 executing program 0:
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00<s\x8c\')tU\x19\x9a)S\xa7b\xce\xd8\xde\x95\xf6\xc3\\n\xc1\xa2)o\xee\x97\xdf\xe9\xf3\xfdJ\xe8`7iY\x86~\xd8\xecy\xc00.\x90\xfc\xac\xa0\xb8\x1d\x1a\x7f\xec\xea\np\xb4\xd5l\xb5\xc3\xc7w%\x16a~]P\x04\xc7 \xf7\x92\x8b\x8f\x9d&\\\xf9\xa3\x96G<\xd4\x80\x16/\x81\xe7(\x8b\xde9]\xaf\xbc\xb0\r}Ne\xfaX\xb0\x8a\xbd\x1d\xfc\xd4\x91\x95\x00\v\x14a0_\xd9\x1f\xc7\xb5\xc3FS\x16\x03~\xbbc*\xa3\xab`\x06\xf0\xbc\xacJY\xe7\xb2\x8cw\xa4U.\xa4\xe2u\x1d!jVL}#O\t\xb2`\x0e\xe9\xc6*\xf7\xf8Uh\x8e\x01\xf1b\xf5;\x8a\x17\x9a\x0fq\x01\x91pSR\x82-H\n\x1fP\xb6*\xc9\xfd\x89\xb5\x7f\x87m\"\xaa\xce\xed\a\xf2\xfd<\x10\xb8\xcf\xfac\xcc\x0f\xd2\xdd\xcd#8\"\x8b\xf2\xccA\v\xdf\xf5\x8d\xa5-\x02\xaa|\xdd\xd0az\xc8,)\xedf\x89x>\a\x13', 0x275a, 0x0)
preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x0)
vmsplice(r0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="5e63cefb3109eb515108e58221afb87ac56add7e92706cc5869636456ef55b5a1bea21e99f83c2cc30cd4ab0121a", 0x2e}, {&(0x7f0000000240)="f5a16c8cb3d4dc3ab3cdc99ed1f84fdb7788047c4ce1583334f25b151bb5addb", 0x20}], 0x2, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

[  148.562318] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  148.572157] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  148.582480] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  148.590803] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  148.599395] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[  148.618499] 8021q: adding VLAN 0 to HW filter on device team0
[  148.627206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  148.635916] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  148.643139] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  148.650430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
20:42:31 executing program 0:
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00<s\x8c\')tU\x19\x9a)S\xa7b\xce\xd8\xde\x95\xf6\xc3\\n\xc1\xa2)o\xee\x97\xdf\xe9\xf3\xfdJ\xe8`7iY\x86~\xd8\xecy\xc00.\x90\xfc\xac\xa0\xb8\x1d\x1a\x7f\xec\xea\np\xb4\xd5l\xb5\xc3\xc7w%\x16a~]P\x04\xc7 \xf7\x92\x8b\x8f\x9d&\\\xf9\xa3\x96G<\xd4\x80\x16/\x81\xe7(\x8b\xde9]\xaf\xbc\xb0\r}Ne\xfaX\xb0\x8a\xbd\x1d\xfc\xd4\x91\x95\x00\v\x14a0_\xd9\x1f\xc7\xb5\xc3FS\x16\x03~\xbbc*\xa3\xab`\x06\xf0\xbc\xacJY\xe7\xb2\x8cw\xa4U.\xa4\xe2u\x1d!jVL}#O\t\xb2`\x0e\xe9\xc6*\xf7\xf8Uh\x8e\x01\xf1b\xf5;\x8a\x17\x9a\x0fq\x01\x91pSR\x82-H\n\x1fP\xb6*\xc9\xfd\x89\xb5\x7f\x87m\"\xaa\xce\xed\a\xf2\xfd<\x10\xb8\xcf\xfac\xcc\x0f\xd2\xdd\xcd#8\"\x8b\xf2\xccA\v\xdf\xf5\x8d\xa5-\x02\xaa|\xdd\xd0az\xc8,)\xedf\x89x>\a\x13', 0x275a, 0x0)
preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x0)
vmsplice(r0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="5e63cefb3109eb515108e58221afb87ac56add7e92706cc5869636456ef55b5a1bea21e99f83c2cc30cd4ab0121a", 0x2e}, {&(0x7f0000000240)="f5a16c8cb3d4dc3ab3cdc99ed1f84fdb7788047c4ce1583334f25b151bb5addb", 0x20}], 0x2, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

[  148.692475] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  148.705981] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[  148.719839] 8021q: adding VLAN 0 to HW filter on device team0
[  148.758772] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  148.769908] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  148.777582] bridge0: port 1(bridge_slave_0) entered blocking state
[  148.784900] bridge0: port 1(bridge_slave_0) entered disabled state
[  148.793192] device bridge_slave_0 entered promiscuous mode
[  148.801210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  148.809029] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  148.817643] bridge0: port 1(bridge_slave_0) entered blocking state
[  148.824059] bridge0: port 1(bridge_slave_0) entered forwarding state
[  148.835285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  148.843299] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  148.854736] bridge0: port 1(bridge_slave_0) entered blocking state
[  148.861142] bridge0: port 1(bridge_slave_0) entered forwarding state
[  148.868747] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  148.876761] team0: Port device team_slave_0 added
[  148.885958] chnl_net:caif_netlink_parms(): no params data found
[  148.896258] bridge0: port 2(bridge_slave_1) entered blocking state
20:42:31 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
fcntl$setpipe(r0, 0x407, 0x80)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYBLOB="25748e98f2a1be3fc84669e2377d240e9549eb96f5d0d60b81ae809fc45328c83cba94fa3ca8d3739df272d8ed4aa3bbc72fabc86f0701259cdea95bdb52612235965481663a21bff78df6b78879ac41e42ab15b526a631648c6d0c2415b66b92c1438d6bc360f2dc1c2b3484ba10dc909344dd15a825db2379ac708b7f2c9b1b0767c939645eecda2b5b642223df094059dcfaf756661fe0662ee048fb498676edb695bbc5be4d66c4d3daf5826f3e0d346f242b1b1c4a3932fcd1d616c88a53ba8620438e30ed059b23ad921edb3800ba7136e6bc015dddf3204f0", @ANYBLOB="08001b0000000000"], 0x5}}, 0x0)
msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4)

[  148.906624] bridge0: port 2(bridge_slave_1) entered disabled state
[  148.913993] device bridge_slave_1 entered promiscuous mode
[  148.921367] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  148.929961] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[  148.937685] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  148.944772] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  148.952224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  148.960262] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  148.967934] bridge0: port 2(bridge_slave_1) entered blocking state
[  148.974340] bridge0: port 2(bridge_slave_1) entered forwarding state
[  148.985076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  148.994281] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  149.001782] team0: Port device team_slave_1 added
[  149.012767] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  149.021127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  149.028946] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  149.036870] bridge0: port 2(bridge_slave_1) entered blocking state
[  149.043255] bridge0: port 2(bridge_slave_1) entered forwarding state
20:42:31 executing program 0:
socket$nl_xfrm(0x10, 0x3, 0x6)
io_setup(0x4, &(0x7f00000004c0)=<r0=>0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
prctl$PR_GET_FPEXC(0xb, &(0x7f0000000000))
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$VFIO_SET_IOMMU(r2, 0x3b66, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r6=>0xffffffffffffffff})
close(r6)
io_setup(0x6, &(0x7f0000000140)=<r7=>0x0)
io_submit(r7, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r6, 0x0, 0x12f}])
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200)
r10 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x420000, 0x0)
splice(r9, &(0x7f0000000100), r10, &(0x7f00000001c0), 0xfffffffffffffffe, 0x2)
r11 = dup(r8)
ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
r13 = dup(r12)
ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200)
ioctl$KVM_SET_USER_MEMORY_REGION(r13, 0x4020ae46, &(0x7f0000000080)={0x10200, 0x2, 0x100000, 0x2000, &(0x7f0000ffc000/0x2000)=nil})
close(r3)
r14 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r14, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @loopback}, 0x1c)
io_submit(r0, 0x179, &(0x7f0000001600))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r15=>0xffffffffffffffff})
r16 = dup(r15)
ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x400200)
ioctl$EVIOCGABS2F(r16, 0x8018456f, &(0x7f00000002c0)=""/164)

[  149.076132] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[  149.093111] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  149.101319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  149.125247] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[  149.133301] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  149.149397] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[  149.160137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  149.167757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  149.175590] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  149.184633] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  149.195354] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  149.217021] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  149.237630] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[  149.247128] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready
[  149.293768] device hsr_slave_0 entered promiscuous mode
[  149.340294] device hsr_slave_1 entered promiscuous mode
[  149.380827] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[  149.388038] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[  149.407644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  149.415316] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  149.423562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  149.431021] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  149.439276] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[  149.448390] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready
[  149.456283] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  149.463738] team0: Port device team_slave_0 added
[  149.475248] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[  149.484478] bridge0: port 1(bridge_slave_0) entered blocking state
[  149.491087] bridge0: port 1(bridge_slave_0) entered disabled state
[  149.497991] device bridge_slave_0 entered promiscuous mode
[  149.504958] bridge0: port 2(bridge_slave_1) entered blocking state
[  149.513589] bridge0: port 2(bridge_slave_1) entered disabled state
[  149.522008] device bridge_slave_1 entered promiscuous mode
[  149.528363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  149.538429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  149.546224] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  149.555200] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[  149.563805] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[  149.570725] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  149.577764] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  149.585103] team0: Port device team_slave_1 added
[  149.601459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  149.608997] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  149.620487] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[  149.628824] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready
[  149.643985] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  149.655636] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  149.664601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  149.672687] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  149.680177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  149.687781] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  149.699919] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[  149.708628] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  149.729823] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  149.749701] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready
[  149.759722] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  149.773256] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  149.784340] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[  149.790698] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  149.804254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  149.811794] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  149.833766] 8021q: adding VLAN 0 to HW filter on device bond0
[  149.842547] 8021q: adding VLAN 0 to HW filter on device batadv0
[  149.868175] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  149.878837] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  149.886267] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  149.893905] team0: Port device team_slave_0 added
[  149.899625] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  149.907270] team0: Port device team_slave_1 added
[  149.952172] device hsr_slave_0 entered promiscuous mode
[  149.990378] device hsr_slave_1 entered promiscuous mode
[  150.050664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  150.057729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  150.066709] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[  150.072909] 8021q: adding VLAN 0 to HW filter on device team0
[  150.080541] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  150.089417] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  150.099171] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[  150.108577] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[  150.118144] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[  150.127845] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  150.138953] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  150.160841] 8021q: adding VLAN 0 to HW filter on device batadv0
[  150.175677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  150.188918] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  150.201556] bridge0: port 1(bridge_slave_0) entered blocking state
20:42:33 executing program 5:
sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, 0x0, 0x0, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}]}]}, 0x20}}, 0x0)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r3, 0x0, 0x0)
tkill(r3, 0x1)
name_to_handle_at(r2, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180)={0xb6, 0x100, "f6ede839d747ee5d003dcf5eb9644d6d89e2ea7da3e1fa19e379cb874ff3810ed62607bfe68f08a5a8f9815ed236175699b259a36a264f109a6ee31e7d8a362c9dc93d195f69e3346f6e908b849369621f38151bf5ac0fd6f57667c273053338ed4aba80151702f2324da96d76becc5693aa80191544442ce0a890bd16370005f094e338cdaea77a84a083ab89de82c73e10dee35269006a1c5f2fd3236a338b18fcefb923000bd5d4d36b9bf045"}, &(0x7f0000000040), 0x0)
ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r3, 0x0, 0x0)

[  150.208037] bridge0: port 1(bridge_slave_0) entered forwarding state
[  150.219353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  150.228192] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  150.244466] bridge0: port 2(bridge_slave_1) entered blocking state
[  150.250878] bridge0: port 2(bridge_slave_1) entered forwarding state
[  150.260603] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[  150.322465] device hsr_slave_0 entered promiscuous mode
[  150.370344] device hsr_slave_1 entered promiscuous mode
[  150.413975] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  150.423356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  150.436278] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[  150.446004] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[  150.453430] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[  150.461672] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[  150.469130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  150.495949] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[  150.513175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  150.521545] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  150.531739] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[  150.546077] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[  150.553669] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  150.561232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  150.569010] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  150.593275] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready
[  150.600675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
20:42:33 executing program 1:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x89210, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
close(r0)
r1 = socket$netlink(0x10, 0x3, 0x9)
connect$netlink(r1, &(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x14800008}, 0xc)
r2 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0)
ftruncate(r2, 0x200006)
sendfile(r0, r2, 0x0, 0x8000fffffffe)
pipe(&(0x7f0000000140))
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000000)=@fragment, 0x8)
write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3)

[  150.608173] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  150.618966] 8021q: adding VLAN 0 to HW filter on device bond0
[  150.657898] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready
[  150.667431] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  150.676228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  150.684609] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  150.688245] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=6954 comm=syz-executor.1
[  150.694851] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[  150.704460] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=6954 comm=syz-executor.1
[  150.715155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  150.722834] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=6954 comm=syz-executor.1
[  150.741337] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=6954 comm=syz-executor.1
[  150.753560] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=6954 comm=syz-executor.1
[  150.767339] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  150.770394] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=6954 comm=syz-executor.1
[  150.776281] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[  150.791603] 8021q: adding VLAN 0 to HW filter on device team0
[  150.797596] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=6954 comm=syz-executor.1
[  150.815444] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[  150.818996] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=6954 comm=syz-executor.1
[  150.830186] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  150.841810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  150.844573] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=6954 comm=syz-executor.1
[  150.851251] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  150.865178] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=6954 comm=syz-executor.1
[  150.870502] 8021q: adding VLAN 0 to HW filter on device bond0
[  150.888022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  150.896161] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  150.908100] bridge0: port 1(bridge_slave_0) entered blocking state
[  150.914531] bridge0: port 1(bridge_slave_0) entered forwarding state
[  150.929674] 8021q: adding VLAN 0 to HW filter on device batadv0
[  150.940226] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  150.948076] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  150.960496] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  150.979961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  150.995520] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  151.004356] bridge0: port 2(bridge_slave_1) entered blocking state
[  151.010769] bridge0: port 2(bridge_slave_1) entered forwarding state
[  151.020720] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[  151.042017] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  151.049958] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[  151.056636] 8021q: adding VLAN 0 to HW filter on device team0
[  151.063194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  151.071850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  151.078866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  151.091101] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[  151.098715] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  151.108521] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  151.116228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  151.124656] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  151.132438] bridge0: port 1(bridge_slave_0) entered blocking state
[  151.138763] bridge0: port 1(bridge_slave_0) entered forwarding state
[  151.147892] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[  151.156543] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  151.163871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  151.171531] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  151.179315] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  151.193068] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[  151.201164] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  151.208368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  151.216131] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  151.223695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  151.231693] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  151.239207] bridge0: port 2(bridge_slave_1) entered blocking state
[  151.245814] bridge0: port 2(bridge_slave_1) entered forwarding state
[  151.255753] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready
[  151.266718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  151.274674] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  151.287795] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[  151.296981] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  151.307027] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[  151.320789] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[  151.328752] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready
[  151.338491] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  151.350693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
20:42:34 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
modify_ldt$write2(0x11, &(0x7f00000001c0)={0xa15}, 0x10)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
clone(0x22044200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$VIDIOC_DBG_G_CHIP_INFO(r3, 0xc0c85666, &(0x7f0000000080)={{0x0, @name="7cf01a2d00e9f9f8d2f4aacba2d3c3060be91c3326202e212a1957dfa11787cc"}, "30d020368b4c193ab2b47a7153f3060fd0da00"})

[  151.358391] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  151.367050] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  151.374692] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  151.392313] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[  151.402088] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[  151.408143] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  151.416757] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  151.424134] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  151.432261] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  151.441794] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready
[  151.455568] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready
[  151.466288] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[  151.478131] 8021q: adding VLAN 0 to HW filter on device batadv0
[  151.484582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  151.492262] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  151.504494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  151.512178] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  151.521986] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[  151.528025] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  151.553113] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[  151.578933] 8021q: adding VLAN 0 to HW filter on device batadv0
20:42:35 executing program 1:
socket$nl_route(0x10, 0x3, 0x0)
getpid()
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000740)=@mangle={'mangle\x00', 0x1f, 0x6, 0x500, 0x2d0, 0x0, 0x1b8, 0x3b8, 0x3b8, 0x498, 0x498, 0x498, 0x498, 0x498, 0x6, 0x0, {[{{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x18}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@broadcast, @multicast2, 0xff, 0xff, 'syzkaller1\x00', 'syz_tun\x00', {}, {0xff}, 0xff, 0x0, 0x40}, 0x0, 0x98, 0xd0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffff, 0x2, 0x1}, {0x2, 0x81}, {0x7f, 0x22, 0xd1}, 0x2}}}, {{@ip={@multicast1, @loopback, 0x0, 0xffffffff, 'yam0\x00', 'ip6tnl0\x00', {0x7f}, {0xff}, 0xe1}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x8}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@icmp={0x28, 'icmp\x00', 0x0, {0x0, 0x3f, 0x8}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00'}}, {{@uncond, 0x0, 0xb8, 0xe0, 0x0, {}, [@common=@socket0={0x20, 'socket\x00'}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x20}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x560)
syz_genetlink_get_family_id$tipc2(0x0)
ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
r0 = creat(&(0x7f0000000280)='./file0\x00', 0x108)
write$binfmt_script(r0, &(0x7f0000000200)={'#! ', './file0', [{0x20, '#! '}]}, 0xf)
ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f0000000200)=ANY=[@ANYBLOB="0400000000000000000000c00900000003000000000000349a09000001000000030000000000000000000000000000090000000000100000010000000100dbc6b4ecb7a12d8de96804000006000000070000004000000000000000000000000000000007000000050000ffff0400000000000000000000000000000000000000ff0f0000090000000900000002000000020000000010000000"])
r1 = creat(&(0x7f0000000000)='./file1/file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='overlay\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
r2 = syz_open_dev$vivid(0x0, 0x0, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f00000003c0)={0x0, 0x7fffffff})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x800800, 0x0)
fsetxattr$security_evm(r3, &(0x7f0000000100)='security.evm\x00', &(0x7f00000002c0)=@sha1={0x1, "81a96d412c7d3ddb59856a552623cc59e89efee9"}, 0x15, 0x2)
chdir(&(0x7f0000000180)='./file0\x00')
link(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000300)=0x9)
ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6)
socket$netlink(0x10, 0x3, 0x2)
openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)

[  152.487286] audit: type=1400 audit(1570999355.356:39): avc:  denied  { create } for  pid=6988 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1
[  152.511786] audit: type=1400 audit(1570999355.356:40): avc:  denied  { write } for  pid=6988 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1
[  152.536457] audit: type=1400 audit(1570999355.356:41): avc:  denied  { read } for  pid=6988 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1
[  152.601843] overlayfs: './file0' not a directory
20:42:35 executing program 4:
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x4}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndpcmc(&(0x7f0000000200)='/dev/snd/pcmC#D#c\x00', 0x7fffffff, 0x0)
ioctl$TIOCGPTPEER(r0, 0x5441, 0x0)
pipe2$9p(&(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f00000002c0)={0xffffff80}, 0x4)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x15)
ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0)
write$P9_RAUTH(r2, &(0x7f0000000040)={0x14, 0x67, 0x1}, 0x14)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00')
write$P9_RGETATTR(r2, &(0x7f0000000500)={0xa0, 0x19, 0x1}, 0xa0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
request_key(&(0x7f0000000400)='trusted\x00', &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0xb)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000280)='/dev/cachefiles\x00', 0x300, 0x0)

20:42:35 executing program 5:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x21096, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x19)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
mremap(&(0x7f0000282000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000268000/0x2000)=nil)
openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200)='/dev/hwrng\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000240)="66ba4300b801380000ef0f22dc66b8a1008ec0c4e21db7eb5766baa000b093ee362e0f01ef65d9f9ea00480000aa00b98e0400000f32", 0x36}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000080)='security.selinux\x00', 0x0, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffffff, 0x0, 0xad, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f00000000c0), 0xc)
syz_open_pts(0xffffffffffffffff, 0x0)

20:42:35 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r1 = creat(&(0x7f0000001380)='./file0\x00', 0x0)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10)
close(0xffffffffffffffff)
ftruncate(r2, 0x2081ff)
r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
io_setup(0x8, &(0x7f0000000180)=<r4=>0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46600)
syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x84, 0x2000)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/relabel\x00', 0x2, 0x0)
pipe(&(0x7f00000001c0)={<r5=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r6=>0xffffffffffffffff})
close(r6)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = dup(r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$SIOCRSGL2CALL(r8, 0x89e5, &(0x7f0000000240)=@bcast)
io_setup(0x6, &(0x7f0000000140)=<r9=>0x0)
io_submit(r9, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r6, 0x0, 0x12f}])
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r6, 0x660c)
io_submit(r4, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}])
ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r5, 0x5386, &(0x7f0000000340))
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000200)={0x0, r1})
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r1, 0xc0406619, &(0x7f0000000100)={{0x0, 0x0, @descriptor="91f02ec85de5da0b"}})

20:42:35 executing program 3:
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
io_setup(0x2, &(0x7f00000000c0)=<r1=>0x0)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x8820, 0x0)
r3 = socket(0xa, 0x3, 0x8)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x89a2, &(0x7f0000000700)={'bridge0\x00\x00\x02\x00', 0x4})
setsockopt$inet_sctp_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000840)={0x41, 0x2, 0x80000040, 0x9, 0x1, 0x3f, 0x81, 0x0, 0x7d, 0xfffffffffffffff7, 0xfffffffffffffffd}, 0xb)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r4=>0xffffffffffffffff}, 0x13f, 0x1}}, 0x20)
r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_SET_LEDBIT(r5, 0x40045569, 0xa3c)
sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000003f00)=ANY=[@ANYBLOB="433440a71fd4bbb5ddd1e6a646cc571e7d4e9659e5ff3520071dae8753dc5e795034bb3dd723f9a77b48bc7c077d63afcf2ea7392700462f5f1fbfbefd521a1e684f9ef3d11cdaf530a0428caf9831677bf387e7554e30fd697d8891d3f9d072d8aef58bb80d045b662031e0d98974ed7435b1854358a379fc03fba4aacb1e8e3237c9d5624b7f377e655c49ff5104c7498ada73c2af07d1148fe0b74bdde006784780cf42a96d7d1f3c957abb96dfa3b0bfa208c9e7dd5d3e381a69f50267db8514efb9e1ad61a2aef79757829e4b9e91342ee5686449096e01e922110f66aa3d2e32a818fc781fe402dbd47122ddee328cbefe007d9abdb06f6c46289aaa6b65208fc6aea28b213fd8ea9e9794e65b1e343034d5c19ddebbd9e6c9eb42255903bc14be26592a21a8849034430399f987d3157b74418ce3702c535b28e99490531990a44c1182f57dc2c376d4ba9fc926a91cb8345b9462a441a3fc67c26a27dc5ee4038ace5e581750042eb8492c13df8b93c46de81675524466e354189a7681bf9b90b00b22d05e03598015974da0f7f0f7588cf69569e44c41034773ab121d938bb856caa8ffbac64c0accc1620c55ffb1329aee8e5b27378a6714b705423451dbff3457281f7c581a272242ad79f76c0f3a31752c0fdf038de14527794a582f1f3ba193d36d8f5e9d1dbaeef32284a0613792a4e10089af61baf4d9a0b85a511ba05120d40130681d3aa7fafdd592e555e98b56449af71001ddddb48ff31fc499209adc68ccd7171193c827c713b00b512ccdb6aba830af0773060353afbc5f1ff979503ae202c85ae1f28af752eb54d8cc51e5923852e7649a28f181e2fe67513b8df01172348ae8e9c9bfe1e77572b8c903bfee6575c5d7570b16c37d479ac86ae7669091be0ec16d60b8c769a528f9c290f73a81f01dc156d330b5b6ef95e4c97467eb39f041c6f1aedbb6776e70d8654cd06126d9f09b78db2606a47ae00787c7117c42581f049c333aba4b8a6a3f9e49f57c591763f188a47977e5d61e58d8d0252277fdc5f340d0dfb1c1417286b1acab753b4c8c3249eec2d533a3dfeba964e8fd6f16e8fb9af56b69056fa4e10022003d1f291d51d47d5077fc59e4872e7e12394ad2133d0ed683ea829f375220284ea90184e3e5d7cdc13a22a32ed10441e3b46a2845d590aa0b847895e4f2863b7a5d2077140eeb516e0e837c9df55d727b1a876fdc07d1103d86fc2e0f4d9f162e9b27fd2bcfcc4c1b54d42bee18e5a38a31df232de196ea06fa1a5ba4104b505d163dab734a00be126ae957f5491b8335cd45d313ecb743b493951172fadc5f0c4d192509ca9007ac2340b306a0b785eaa804ae65dfde62c84cb2a88171116931af13c54d0ff85356149c39e23c6c7b8cff2639137586297ba92f287cf8135c40e1c7d0a919ce681b1a90f8b63f93ffde5c0b5661ecfaa994a91eae497ae2a95da74b6a1b370a92705c4a38c8873ed45616b2a253fc8e3cb04dfa6b5472f455ea87ceeff9bcd0acc4fdd8f61e6fadabf672ab50478a4b94585174366bdff410965156a5a31b470e09465f400cc67952369c4cd7561bae414b153e546fa9b57e7a738842c864a5deb476fee2121b63b0bd036c64b04f360366f7a6e45dae1cfbf302c9f1f5b6ff95cfd61146f179001eae54ccaa6f568f8de6564cc818f45c734e47346f5c021f2b654c3e9fa84ebc879354f943b048db09367cfe1bef96ec0095ed162a3eb4abc49ccb54a439d97d272caef7ae8eb8f75fe3e7d2aafb509d2543f6a44f32d5067d64fc9a4de9d3cb4312f7d15db4728e3654e024b7d1a7db0cdb0562b0d041f48170a6266107697e7fdd976296f58677a9dc65d8a34f2b78c779d08e97787154660cd570726819663526ca3990316c4382586f7214428100f79ab948dff32775f4f9404ee44c53da8f0501ba5c1447fd47310a837f6a2a184dd0871348303ba2ddbf5d4e892682e6cb55fd5d0ae1fffc92d7a7088c4a96988b03de2bba0db1d31ae83dc5681f7f514bcdf844aca65fdf446b5f801dca6a0fe410348f470890cda39bd1a7bbd69c70f969abb9b089e471fb33375d7c25a47dccd4336b27dfd74506d802c8196fc3c1db187b91a05c1ed7d9a533b55b9e5434213777ff55c4cb636ba9e4a5e515e4a7926f5e79d91c78a91a6a65004ee17fe53d3eef56ddabcd979700e5e8d0da125be1ac928a4c58d5f05a614f08a7d318d2b02ef05db0a6edd9cdbd789fbbe0bca704c69f09a10dfe9bd0103cfded6a7b76a716ee9ae2aa00d55e9de9672853d5aa7f53a60fa9cbedd00a9e18ef985e2efd3737516cd6941fda6da37b424b06a8ff6e6482296645be77532bbac8a2fc1ad8d14b23ed57c7b2abc08faf9e26fcf8428efeae2e734458462c6c5d7330471490e79c249de7c8ed6ee98aca9f8de444bc46815d0ce662b7d119b8da2516648c1aea6df1ee82142fc22672321a6f9788553acf40971b7616dbabfd7fe726c78cbfb5dde16d84575bb3a6afb779a7d49f72e37604226eac54584ac1f6acbed97158f6d9a4cdd6dc3ca40f67a9bce89d9d0778923732072586d7ce13fe00d767c712f1cfc3bdc90103998d25b6f341805040fe5f269eeb689d4cbdb590239a0c7de2ebfa6bef3c77147c00ccaa89e7c035bf899ee84b4f5438362a3fc1a039d02fe28584b556e0ebbf6f41b0c47af701ddaddbcf99e7615d0bc8b6d37c1f92777f6f793ef219a1d89a2584289b2c31bc6250fe9b84b41fc30a35042f02c4e0d19defdc47468d229aba4d406dba41bf8422a396e95780b22fc5359ff30e4a09b8fc918dcd94a53c210594917607634b994b4f70e8cafcd08111c299ce7bbe64062f145819fbfba4cd4a30c3e9c3e806a618d78dad218e13e636a01f0530d54411e4848218054b2bff7af7f41b69b1835a496bc1a1935457ba4e37d746c425e28d1a69dbacfd5f12df6b8cb0d0dc176f9b29a22a6d61631ae8d8dd3fc1db119295b47278765e7b63b7cc09f6a15b75387fb310514974450bb4202ee61d0cf96a67a573fe78f5c5f61decd0370f27927a4b2c108e180f02aeb5dc19d190b86b4e0fd48ddccc2d498d4e3646da2f7337004f1f843618479427a0746a35c1268997ad330966ed9561190d6ac46bd3e489fe36665e209869d2ed972b17b67b1d438257ef59106bc4eb595d539fee8159dbe7552d14d10933d81a355a50b1b76bf60ff7fbebfb9958c04b3faa5f66711c9b94d521c3832cd152496ca1bb5d48be1207476e3ffd14769d205cf32f1a36ff73b14a095601541f2be9a5beb988cd2a05df24ecaee2d093b0cf4180160f7534d8b3901569877d74aa096033bc6be255391c4319d528ba178a30b802defb5bde800cdae8ba759c7f8cf73a83e6310898e87c98cc27b71016cbec4e194eaad7aae9f5174b2147592f968fd9f597086e1e0536abfceb7cf5bae3350ffff9425e1de052d6d903b24f6a3f8784faec9e4fd2ec036a19b12b9bf48f16520e447e310a7fa108830b3b1d7436e04a0d49cd6dbda74e3886bb9657c2a8948dd0fb479801a2f8d937db197fac74b0d354547d9c5c2974cfb68b209abf07553ac8d2d02130a9e92999d485211d805c787067c2b670b81f48f5e5cdb83101540d4d73584c250659946a55e358611c7751becde8cb31fc381c36f4123933af76b61a5af89a85610db3776109b8328d19615fe61ca3af60967a49174225c8c53aec7f3b6e3417e8e720597e004d18bea9f6d3e88ba29aedcef115bb85bdcc7e94cab68ab0eec8c3cba1ae0432349ed2749816994b7d496f066f7f31765ab5bc83b17249ca0395bddc5609a58bc04d7f9b22e5898a41b5f0c1dc8f8f2b1b99168fa111c7494a7ecdd07e359295ea8b8b8ef88e8354f3e713382b6a049243d9b575ef406b359c142fa3a7668ed2d026081c27582719b1fb87ecb732503d2c1b2163280b792857be5c05c1fa20ef7a8d3a17f1545749f17d503a48ef57dfa6e50f1e9acb1d5def86a6157d368a1e997f2504ee768fa75d49ed7a74be36ae40ab010bf9ab99b43ef946ce414f0f0f489484612d21106af095705da70b37ac496292f48b7efa7af2c472e4c34b9b60afc7832382aa9142b6a256e6fc96f69f5d4148d9dff64799d5acf1ee231040a52a7b850662f5bb6ad5da76a69c345fd373b5b4e2eaccee4cdc92b2f683e32a3ad78e72276507ab650e1c6be5976e93d543c32b7bf6006595642a70655d5b1c86659e7f489739fa44e117a685e094007fe403da3566a277786b3f085b915a00946c3971bee30e42a1e199ffab98624ac3e1d0204b7a453879f08bff3a3c2172d8c22608c0b3fbf87c93707088a1b689364189d1b849fcd3f85175888b58bd26372ab42fdc8b58726c9575413d6c40df1eac6a7b6c9df0188881942406f92132e68294007fa856d50e83f484676801566449106655825ecaf993896af67ec58c9325baca54aafb371ac3e7a9409cf44df06efc3adc6fa7b0ead620ab5030517a4e0179b99997acdf12cbd1e40d2517237ad9d9f23b21bdee56f037e8291dfd3e170601ce1641d0e992fc3d292c3f9a2650039cc85ea6a175df7df7048b3f166ee0ed026c224edf8c083052f8627b18e0da52e3324afe22eae90ca5e34833e5c6341db678724bffedf4c2db4578dbc2d15a4928bc22302dd948379e7656b43eee0a10616c433004d07a2fe04cdccacb4c8e71d9b6a9d27a4443fb6140eebd334b74c2cd04c946cc50c7e065aeb3f65c4f6911df2a1e1df78d0f80c519e9a4fa13b045b586a3c4c409c9840881dc394a5e5f02a3f8288a217f2ccde0fa466288f0d1f1842858a9d9a7bc76e3c4b2e5d5a4337935d8651fc85926a069fc27772713e66f94002952ff4f0e33c49a200f6700bbf90285b24531611d0b12a0265d34266b0e5d3a205c3127deec61948f3555aa877a99f55a943c4bdb566f21ec78dbfbd51787bf4b0938e32b82d4dd002235b5cc2235db4b19957861b421411c72bcbd0b56d8ea9540ba8dbfc4824b807d93b93ae9d298623f3a4cca8775d1c95c06fd9ea176674748287169a8e9bb4f2229db93e765a2840dc4481331cd3cdc6244969935a4a046aa38e751b22cf1214ee2cdbf265aa2e62183bdb330779c027d6bbe45bc06e8c1400ef6f1bba3829e0d2d62996ea88070b248eebef480760001e8fd3ef9558443bdfdac2321860a64ab24829e139d3d699bfcecbf325ac23c71547dd2f931ff6f1c6f0b0dcee8a81263bd9235ef9ce2a769685746bf50eb019d196a88d0a258cb9441414d8250f9812d091b3fe4118f7a0828b498707c75b3bd7e272bbb6856571354c2e9d04144ed9f55cb570ec300afbde1c5cb69d252632ff3ba22ba4b2e250e529c83b646dbcf72f8f8a74433992f6633953796e548140b522e117ef6acac697ebbabbf3bb8e9da3328cc4807b0a2116382560145b11af5c39fbb10de692dc323332801333a5f2a42d09eca879d02c2c318c1a4955f3b2071cdb6cbcc3eea1a064af2d1e6f00f4e7c59b307984c609c02df503babd00d1ed725f03af9cf56eda93005b8786edaa1600d884a3a94fa3db3362669c59a75de2c26cf486082ff718b833da545b25edfb26579bf751fae12c62f5b4aa1b5b4b5cc4b637b078c74d78ec66223340cd9233405df9fa1502648220c4f88480cc50cd5dc91198589f4a4cd5d9626e3a29f2c083de9f9f662051aa90d68aef2f778c02827e4f4ac3bfed37bb62f43c8567fe64e347553587cb9cb8e0000000000001139a2216c01d9e52fd33040cc8aa28a0191ee1afe1a8fcae1f18c7f81192339a7274c4849d0f42b3403cdb066adaa7dcd218e82ce6ce158335c018c6139fa905f858c0535e5669f4b1d48bd122c9023a5007c748c51f7783e5db719b5a9ecac20a9ce35b7839c1d281f66a9904501cd2322d100"/4222, @ANYRES32=r5, @ANYRESOCT, @ANYRES64=r4], 0x1023}}, 0xfffffffffffffff9)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000100)={0x15, 0x110, 0xfa00, {r4, 0x9, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @local}, @in6={0xa, 0x4e20, 0xffffffff, @mcast2, 0x8}}}, 0x118)
r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0)
ioctl$IOC_PR_REGISTER(r6, 0x401870c8, &(0x7f0000000040)={0x3, 0x74})
io_destroy(r1)

20:42:35 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x507, 0x8000000, 0x0, {0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_fq_codel={{0x10, 0x1, 'fq_codel\x00'}, {0x4}}]}, 0x38}}, 0x400c080)

20:42:35 executing program 1:
socket$nl_route(0x10, 0x3, 0x0)
getpid()
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000740)=@mangle={'mangle\x00', 0x1f, 0x6, 0x500, 0x2d0, 0x0, 0x1b8, 0x3b8, 0x3b8, 0x498, 0x498, 0x498, 0x498, 0x498, 0x6, 0x0, {[{{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x18}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@broadcast, @multicast2, 0xff, 0xff, 'syzkaller1\x00', 'syz_tun\x00', {}, {0xff}, 0xff, 0x0, 0x40}, 0x0, 0x98, 0xd0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffff, 0x2, 0x1}, {0x2, 0x81}, {0x7f, 0x22, 0xd1}, 0x2}}}, {{@ip={@multicast1, @loopback, 0x0, 0xffffffff, 'yam0\x00', 'ip6tnl0\x00', {0x7f}, {0xff}, 0xe1}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x8}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@icmp={0x28, 'icmp\x00', 0x0, {0x0, 0x3f, 0x8}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00'}}, {{@uncond, 0x0, 0xb8, 0xe0, 0x0, {}, [@common=@socket0={0x20, 'socket\x00'}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x20}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x560)
syz_genetlink_get_family_id$tipc2(0x0)
ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
r0 = creat(&(0x7f0000000280)='./file0\x00', 0x108)
write$binfmt_script(r0, &(0x7f0000000200)={'#! ', './file0', [{0x20, '#! '}]}, 0xf)
ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f0000000200)=ANY=[@ANYBLOB="0400000000000000000000c00900000003000000000000349a09000001000000030000000000000000000000000000090000000000100000010000000100dbc6b4ecb7a12d8de96804000006000000070000004000000000000000000000000000000007000000050000ffff0400000000000000000000000000000000000000ff0f0000090000000900000002000000020000000010000000"])
r1 = creat(&(0x7f0000000000)='./file1/file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='overlay\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
r2 = syz_open_dev$vivid(0x0, 0x0, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f00000003c0)={0x0, 0x7fffffff})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x800800, 0x0)
fsetxattr$security_evm(r3, &(0x7f0000000100)='security.evm\x00', &(0x7f00000002c0)=@sha1={0x1, "81a96d412c7d3ddb59856a552623cc59e89efee9"}, 0x15, 0x2)
chdir(&(0x7f0000000180)='./file0\x00')
link(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000300)=0x9)
ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6)
socket$netlink(0x10, 0x3, 0x2)
openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)

[  152.736301] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  152.794070] bridge0: port 3(gretap0) entered blocking state
[  152.813145] bridge0: port 3(gretap0) entered disabled state
[  152.857213] device gretap0 entered promiscuous mode
[  152.904626] bridge0: port 3(gretap0) entered blocking state
[  152.910587] bridge0: port 3(gretap0) entered forwarding state
[  152.983853] list_add double add: new=ffff88805e5b8958, prev=ffff88805e5b8958, next=ffff888099213540.
[  152.993842] ------------[ cut here ]------------
[  152.998705] kernel BUG at lib/list_debug.c:29!
[  153.003383] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[  153.008739] Modules linked in:
[  153.011943] CPU: 0 PID: 7018 Comm: syz-executor.4 Not tainted 4.14.149 #0
[  153.018869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  153.028235] task: ffff88805e568200 task.stack: ffff88805e7a0000
20:42:35 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2)
r2 = memfd_create(&(0x7f0000000340)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00', 0x5)
ftruncate(r2, 0x1000000)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, 0x0, &(0x7f000095dffc))
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000000), 0x90)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000940)={0x0, @in6={{0xa, 0x4e24, 0x3, @ipv4={[], [], @empty}, 0x8}}, 0x5, 0x800}, &(0x7f0000000a00)=0x90)
sendfile(r1, r2, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
ioctl$VIDIOC_TRY_DECODER_CMD(0xffffffffffffffff, 0xc0485661, &(0x7f00000007c0)={0x0, 0x1, @raw_data=[0x4, 0x4, 0x6584, 0x95914b1, 0x5, 0x7f, 0x80000000, 0x5, 0x400, 0x0, 0x80000001, 0x200, 0x10000000, 0x0, 0xb7]})
openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x220400, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$team(0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x5c, r5, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8}, {0x40, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x4}, {0x4}}, {0x8}}}]}}]}, 0x5c}}, 0x0)
r6 = socket(0x40000000002, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x269)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
getsockopt$SO_COOKIE(r7, 0x1, 0x39, &(0x7f0000000100), &(0x7f0000000200)=0x8)
sendmsg$unix(r6, &(0x7f0000000640)={&(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f0000000580)=[@rights={{0x10}}], 0x10}, 0x0)
pwrite64(r6, &(0x7f0000000840)="9e4a314b36586c447f00c7baf8420b17eca45119de99303dc8bdb1883c56347eef71e697bb3d8c5716411ca902ef8188af41585df97d8f1d829c104b448b4a325bc65f643ef8535170ec9d2f55857a351a6672855be65eee8c7b8cbfcc8c673a014ea9343f104decba8229aa27afdb780a1620d1bee0bda7bc64e283af7c4b3c349deb97fc3d0f5aff33f95da5f8c5733e94eae52f5020a9b821fc3c3138f2d233490fba624c4f2f85fc5bfa82f8343d89a80a1742fc0e23820520f3f2ebce7f6a35df0bf650915bb0d9558f4fe5b68a1df520bb29738c", 0xd7, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'veth0_to_bond\x00'})
accept$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000240)={{{@in=@broadcast, @in6=@loopback}}, {{@in=@remote}, 0x0, @in=@multicast2}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x0, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
sendmsg$nl_route(r8, 0x0, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00')

20:42:35 executing program 1:
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5, 0x3}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$FUSE_POLL(r3, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r4, &(0x7f0000000000), 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5)
memfd_create(&(0x7f0000000040)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x2)
r5 = socket$inet(0x2, 0x2, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
sendto$inet(r5, &(0x7f0000000140)="6812334f6743a747", 0x8, 0x0, 0x0, 0x0)
connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000f36000)={&(0x7f0000000100)=ANY=[@ANYBLOB="02038705c9670000ffffffffffffffff02001300020000000000000000000000030006000000000002004e20e0000001000000000000002402000100f8ffffff0000000200000000030005000000000002004e"], 0x53}}, 0x0)
epoll_create(0x0)

[  153.034321] RIP: 0010:__list_add_valid.cold+0x26/0x3c
[  153.039512] RSP: 0018:ffff88805e7a7a00 EFLAGS: 00010282
[  153.044886] RAX: 0000000000000058 RBX: ffff888099213500 RCX: 0000000000000000
[  153.052178] RDX: 000000000000d7d8 RSI: ffffffff814b3fa5 RDI: ffffed100bcf4f36
[  153.059543] RBP: ffff88805e7a7a18 R08: 0000000000000058 R09: ffff88805e568ac8
[  153.066829] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888099213540
[  153.074115] R13: ffff88805e5b8958 R14: ffff88805e5b8958 R15: ffff88805e5b8958
[  153.081583] FS:  00007fd44bae8700(0000) GS:ffff8880aee00000(0000) knlGS:0000000000000000
[  153.089794] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  153.095656] CR2: 000000c42b76e270 CR3: 0000000096617000 CR4: 00000000001426f0
[  153.102906] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  153.110158] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  153.117407] Call Trace:
[  153.119994]  ? _raw_spin_lock+0x37/0x40
[  153.123955]  p9_fd_request+0xe3/0x2b0
[  153.127737]  p9_client_rpc+0x21b/0x1180
[  153.131694]  ? p9_client_prepare_req.part.0+0xa90/0xa90
[  153.137040]  ? trace_hardirqs_on_caller+0x400/0x590
[  153.142036]  ? trace_hardirqs_on+0xd/0x10
[  153.146165]  ? finish_wait+0x260/0x260
[  153.150035]  ? destroy_inode+0xc7/0x120
[  153.153986]  ? evict+0x3e6/0x630
[  153.157331]  p9_client_clunk+0x89/0x150
[  153.161288]  v9fs_dentry_release+0x6d/0xd0
[  153.165501]  ? v9fs_cached_dentry_delete+0x40/0x40
[  153.170410]  __dentry_kill+0x39a/0x580
[  153.174274]  ? dput.part.0+0x2a/0x750
[  153.178052]  ? dput.part.0+0x2a/0x750
[  153.181843]  dput.part.0+0x59f/0x750
[  153.185535]  do_one_tree+0x44/0x50
[  153.189054]  shrink_dcache_for_umount+0x67/0x140
[  153.193791]  generic_shutdown_super+0x6d/0x370
[  153.198351]  kill_anon_super+0x3f/0x60
[  153.202218]  v9fs_kill_super+0x3e/0xa0
[  153.206090]  deactivate_locked_super+0x74/0xe0
[  153.210652]  deactivate_super+0x85/0xa0
[  153.214609]  cleanup_mnt+0xb2/0x150
[  153.218219]  __cleanup_mnt+0x16/0x20
[  153.221936]  task_work_run+0x114/0x190
[  153.225809]  exit_to_usermode_loop+0x1da/0x220
[  153.230458]  do_syscall_64+0x4bc/0x640
[  153.234323]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  153.239146]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  153.244320] RIP: 0033:0x459a59
[  153.247489] RSP: 002b:00007fd44bae7c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  153.255437] RAX: 0000000000000000 RBX: 0000000000000002 RCX: 0000000000459a59
[  153.262694] RDX: 0000000000000000 RSI: 000000000000000b RDI: 0000000020000140
[  153.269943] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000
[  153.277194] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd44bae86d4
[  153.284463] R13: 00000000004c9496 R14: 00000000004e0b60 R15: 00000000ffffffff
[  153.291737] Code: e9 56 ff ff ff 4c 89 e1 48 c7 c7 80 31 9d 86 e8 9f 9e 72 fe 0f 0b 48 89 f2 4c 89 e1 4c 89 ee 48 c7 c7 c0 32 9d 86 e8 88 9e 72 fe <0f> 0b 48 89 f1 48 c7 c7 40 32 9d 86 4c 89 e6 e8 74 9e 72 fe 0f 
[  153.311286] RIP: __list_add_valid.cold+0x26/0x3c RSP: ffff88805e7a7a00
[  153.318124] ---[ end trace 0a161c32fb64d680 ]---
[  153.322904] Kernel panic - not syncing: Fatal exception
[  153.329695] Kernel Offset: disabled
[  153.333335] Rebooting in 86400 seconds..