Warning: Permanently added '10.128.0.221' (ECDSA) to the list of known hosts.
[   43.571519] random: sshd: uninitialized urandom read (32 bytes read)
2019/11/18 21:43:31 fuzzer started
[   43.768898] audit: type=1400 audit(1574113411.382:36): avc:  denied  { map } for  pid=6952 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1
[   44.530784] random: cc1: uninitialized urandom read (8 bytes read)
2019/11/18 21:43:33 dialing manager at 10.128.0.105:37719
2019/11/18 21:43:33 syscalls: 2529
2019/11/18 21:43:33 code coverage: enabled
2019/11/18 21:43:33 comparison tracing: ioctl(KCOV_TRACE_CMP) failed: invalid argument
2019/11/18 21:43:33 extra coverage: extra coverage is not supported by the kernel
2019/11/18 21:43:33 setuid sandbox: enabled
2019/11/18 21:43:33 namespace sandbox: enabled
2019/11/18 21:43:33 Android sandbox: /sys/fs/selinux/policy does not exist
2019/11/18 21:43:33 fault injection: enabled
2019/11/18 21:43:33 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2019/11/18 21:43:33 net packet injection: enabled
2019/11/18 21:43:33 net device setup: enabled
2019/11/18 21:43:33 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2019/11/18 21:43:33 devlink PCI setup: PCI device 0000:00:10.0 is not available
[   46.561510] random: crng init done
21:45:51 executing program 5:
r0 = socket$inet6(0xa, 0x3, 0x6)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r0, r3, &(0x7f0000000240)=0x202, 0x4000000000dc)

21:45:51 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000a80)="ad56b6cc0400fb8b65d8b4ac2ca35c66", 0x10)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$unix(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000ac0)="4d6ed6991f2cbcf96ea0b6042922efae8ce406f5296a31496546f74d527700676f84081df7e14f58544f77f5c5eb33a36effdc8bcfa40a11acc5bb779a57987b1920fc13933d8d0f32457e718ceb7acac7fb57808c68887a823ba93bebadb646dced9363e404759c041b890322e05e56dfdd51dc85de2d6d1f6459e54396c2796a79f8891b8bf0d2d4bcfd50ae38a2da2a1e604943", 0x95}], 0x1}, 0x0)

21:45:51 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000180)={0x2, 0x4e23, @empty}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3)
write$binfmt_script(r0, &(0x7f00000009c0)=ANY=[], 0x8408)

21:45:51 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$KVM_SET_IRQCHIP(r2, 0xc00caee0, &(0x7f00000001c0)={0x80ffff})

21:45:52 executing program 2:
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0)
ioctl$RTC_EPOCH_SET(r0, 0x4004700e, 0x0)

21:45:52 executing program 4:
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000600)=""/142, 0x8e}], 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$FUSE_INIT(r0, &(0x7f0000000300)={0x50, 0x0, 0x1}, 0x50)

[  184.332217] audit: type=1400 audit(1574113551.952:37): avc:  denied  { map } for  pid=6952 comm="syz-fuzzer" path="/root/syzkaller-shm932013282" dev="sda1" ino=1426 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1
[  184.390157] audit: type=1400 audit(1574113551.972:38): avc:  denied  { map } for  pid=6970 comm="syz-executor.5" path="/sys/kernel/debug/kcov" dev="debugfs" ino=19 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1
[  184.532501] IPVS: ftp: loaded support on port[0] = 21
[  185.328588] chnl_net:caif_netlink_parms(): no params data found
[  185.361670] bridge0: port 1(bridge_slave_0) entered blocking state
[  185.368308] bridge0: port 1(bridge_slave_0) entered disabled state
[  185.375708] device bridge_slave_0 entered promiscuous mode
[  185.382844] bridge0: port 2(bridge_slave_1) entered blocking state
[  185.389216] bridge0: port 2(bridge_slave_1) entered disabled state
[  185.396184] device bridge_slave_1 entered promiscuous mode
[  185.403312] IPVS: ftp: loaded support on port[0] = 21
[  185.417568] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  185.426689] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  185.442682] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  185.449772] team0: Port device team_slave_0 added
[  185.455447] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  185.462748] team0: Port device team_slave_1 added
[  185.469829] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  185.477713] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  185.541815] device hsr_slave_0 entered promiscuous mode
[  185.580379] device hsr_slave_1 entered promiscuous mode
[  185.622990] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[  185.634143] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[  185.641670] audit: type=1400 audit(1574113553.262:39): avc:  denied  { create } for  pid=6977 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1
[  185.670139] audit: type=1400 audit(1574113553.292:40): avc:  denied  { write } for  pid=6977 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1
[  185.694055] audit: type=1400 audit(1574113553.292:41): avc:  denied  { read } for  pid=6977 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1
[  185.736866] bridge0: port 2(bridge_slave_1) entered blocking state
[  185.743305] bridge0: port 2(bridge_slave_1) entered forwarding state
[  185.750242] bridge0: port 1(bridge_slave_0) entered blocking state
[  185.756609] bridge0: port 1(bridge_slave_0) entered forwarding state
[  185.783554] IPVS: ftp: loaded support on port[0] = 21
[  185.812167] chnl_net:caif_netlink_parms(): no params data found
[  185.854651] bridge0: port 1(bridge_slave_0) entered blocking state
[  185.861180] bridge0: port 1(bridge_slave_0) entered disabled state
[  185.868022] device bridge_slave_0 entered promiscuous mode
[  185.882795] bridge0: port 2(bridge_slave_1) entered blocking state
[  185.889226] bridge0: port 2(bridge_slave_1) entered disabled state
[  185.896371] device bridge_slave_1 entered promiscuous mode
[  185.917912] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  185.928815] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  185.954351] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  185.961693] team0: Port device team_slave_0 added
[  185.971233] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready
[  185.977313] 8021q: adding VLAN 0 to HW filter on device bond0
[  185.983774] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  185.991792] team0: Port device team_slave_1 added
[  185.999670] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  186.007409] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  186.015571] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  186.023944] IPVS: ftp: loaded support on port[0] = 21
[  186.053731] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[  186.059815] 8021q: adding VLAN 0 to HW filter on device team0
[  186.102328] device hsr_slave_0 entered promiscuous mode
[  186.150336] device hsr_slave_1 entered promiscuous mode
[  186.191051] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[  186.199874] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[  186.209992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  186.217961] bridge0: port 1(bridge_slave_0) entered disabled state
[  186.235171] bridge0: port 2(bridge_slave_1) entered disabled state
[  186.288645] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  186.296437] bridge0: port 1(bridge_slave_0) entered blocking state
[  186.302796] bridge0: port 1(bridge_slave_0) entered forwarding state
[  186.309809] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  186.318238] bridge0: port 2(bridge_slave_1) entered blocking state
[  186.324624] bridge0: port 2(bridge_slave_1) entered forwarding state
[  186.341600] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  186.354908] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[  186.366102] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[  186.374960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  186.384181] IPVS: ftp: loaded support on port[0] = 21
[  186.384683] chnl_net:caif_netlink_parms(): no params data found
[  186.403668] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[  186.419329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  186.452698] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[  186.474109] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  186.482722] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  186.492603] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[  186.523866] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  186.532388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  186.539875] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  186.574910] 8021q: adding VLAN 0 to HW filter on device bond0
[  186.581814] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready
[  186.592068] bridge0: port 1(bridge_slave_0) entered blocking state
[  186.598433] bridge0: port 1(bridge_slave_0) entered disabled state
[  186.605620] device bridge_slave_0 entered promiscuous mode
[  186.612819] bridge0: port 2(bridge_slave_1) entered blocking state
[  186.619188] bridge0: port 2(bridge_slave_1) entered disabled state
[  186.626543] device bridge_slave_1 entered promiscuous mode
[  186.639425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  186.648344] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  186.657925] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  186.664797] chnl_net:caif_netlink_parms(): no params data found
[  186.679289] IPVS: ftp: loaded support on port[0] = 21
[  186.692337] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready
[  186.701703] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  186.711323] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  186.731740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  186.739601] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  186.749112] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[  186.755535] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  186.763886] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  186.786149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  186.793560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  186.803636] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  186.811233] team0: Port device team_slave_0 added
[  186.818068] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[  186.824349] 8021q: adding VLAN 0 to HW filter on device team0
[  186.840850] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  186.847921] team0: Port device team_slave_1 added
[  186.859849] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  186.883825] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  186.905665] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  186.925678] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready
[  186.935508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  186.943502] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  186.951516] bridge0: port 1(bridge_slave_0) entered blocking state
[  186.957970] bridge0: port 1(bridge_slave_0) entered forwarding state
[  186.965435] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  187.032375] device hsr_slave_0 entered promiscuous mode
[  187.070510] device hsr_slave_1 entered promiscuous mode
[  187.112708] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[  187.119986] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[  187.141398] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[  187.147709] chnl_net:caif_netlink_parms(): no params data found
[  187.157858] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  187.172708] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  187.182271] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  187.189001] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  187.196822] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  187.204514] bridge0: port 2(bridge_slave_1) entered blocking state
[  187.210908] bridge0: port 2(bridge_slave_1) entered forwarding state
[  187.260844] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[  187.269951] chnl_net:caif_netlink_parms(): no params data found
[  187.280759] bridge0: port 1(bridge_slave_0) entered blocking state
[  187.287136] bridge0: port 1(bridge_slave_0) entered disabled state
[  187.294032] device bridge_slave_0 entered promiscuous mode
[  187.300891] bridge0: port 2(bridge_slave_1) entered blocking state
[  187.307230] bridge0: port 2(bridge_slave_1) entered disabled state
[  187.314471] device bridge_slave_1 entered promiscuous mode
[  187.328008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  187.337449] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[  187.361083] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  187.369670] 8021q: adding VLAN 0 to HW filter on device batadv0
[  187.376637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  187.396334] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  187.410986] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[  187.438927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  187.452187] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  187.459746] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  187.469298] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[  187.487990] bridge0: port 1(bridge_slave_0) entered blocking state
[  187.494669] bridge0: port 1(bridge_slave_0) entered disabled state
[  187.501908] device bridge_slave_0 entered promiscuous mode
[  187.515195] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[  187.522683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  187.534841] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  187.543183] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  187.552772] team0: Port device team_slave_0 added
[  187.557990] bridge0: port 2(bridge_slave_1) entered blocking state
[  187.564613] bridge0: port 2(bridge_slave_1) entered disabled state
[  187.572247] device bridge_slave_1 entered promiscuous mode
[  187.591737] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready
[  187.601040] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  187.608083] team0: Port device team_slave_1 added
[  187.617924] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  187.625458] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  187.634492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  187.642580] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  187.658395] bridge0: port 1(bridge_slave_0) entered blocking state
[  187.666353] bridge0: port 1(bridge_slave_0) entered disabled state
[  187.673900] device bridge_slave_0 entered promiscuous mode
[  187.686412] bridge0: port 2(bridge_slave_1) entered blocking state
[  187.692844] bridge0: port 2(bridge_slave_1) entered disabled state
[  187.699986] device bridge_slave_1 entered promiscuous mode
[  187.714117] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready
[  187.731642] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  187.740054] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  187.749225] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  187.779452] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[  187.786780] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  187.795000] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  187.862147] device hsr_slave_0 entered promiscuous mode
[  187.890399] device hsr_slave_1 entered promiscuous mode
[  187.951057] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[  187.958270] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[  187.969998] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  187.979439] bond0: Enslaving bond_slave_1 as an active interface with an up link
21:45:55 executing program 5:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
r3 = socket$inet(0x2, 0x3, 0x7f)
write$P9_RAUTH(r1, &(0x7f0000000100)={0x14}, 0x14)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fcntl$dupfd(r5, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r7=>0x0})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, <r8=>0x0}, &(0x7f0000000280)=0xc)
write$P9_RGETATTR(r6, &(0x7f00000002c0)={0xa0, 0x19, 0x2, {0xa02, {0x8, 0x3, 0x5}, 0x52, r7, r8, 0x7, 0xc582, 0x47f, 0x200, 0x6, 0x200, 0x1, 0x1, 0x540, 0x4, 0x2, 0x3f, 0x6, 0x6, 0x70}}, 0xa0)
vmsplice(r1, &(0x7f00000013c0)=[{&(0x7f0000000200)="8f3a1e6aee7f2e97d036bfb16915805ba71e06b3", 0x14}], 0x1, 0x0)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
setsockopt$inet_int(r3, 0x0, 0x3, &(0x7f00000000c0)=0x7ff, 0x4)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
fcntl$dupfd(r10, 0x0, r9)
splice(r0, 0x0, r9, 0x0, 0x7, 0x1)
r11 = syz_open_dev$sndpcmp(&(0x7f0000000380)='/dev/snd/pcmC#D#p\x00', 0x2, 0x101000)
ioctl$SG_SET_COMMAND_Q(r11, 0x2271, &(0x7f00000003c0)=0x1)

[  188.004297] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  188.011873] team0: Port device team_slave_0 added
[  188.018133] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  188.026739] team0: Port device team_slave_1 added
[  188.034490] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  188.063556] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready
[  188.077295] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  188.089863] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[  188.099849] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
21:45:55 executing program 5:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000280)='./file0\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
ftruncate(r0, 0x208200)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x14103e, 0x0)
r3 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x0, 0xce62ba94d1a69874)
fcntl$getflags(r3, 0x3)
mmap(&(0x7f000047f000/0x1000)=nil, 0x1000, 0x7ffffe, 0x80013, r2, 0x0)
read(r2, &(0x7f0000000180)=""/19, 0xfffffe47)
r4 = syz_genetlink_get_family_id$tipc2(0x0)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="778741f35c00000000918f874555c11fe0a8a4ec52e633dc11b51bce84705d99f7708e7bc8f81d9b1411040b0e91cd05bc21b0770cbfd78373cf1a04d9020641a09392b5b0b076cdabce76eb97e37cb654b8734caf3cd8372c229e4f268cf85e3ed17c5bde8842888700", @ANYRES16=r4, @ANYBLOB="e54e000000000000000008000000180004001400010062726f61646342d6ac5556f14576c3d787022349f027227b1e1dad51c414bb807a56a056a392ff34ccfeca4319992cf612d6428bfea78c4b479826eb2ea8682d11309a4fdc67621511e05ad47aaf11f40009b27b9e953fc9cb29981757fc8f1e1e8692565a9ec6ef762e7c4aa638804eee076d3b629337b04bc45cfebe39dce49f5cf407713f9e2c7cc733782828dda15effa3d9369fd58d3cb25f682ecc268448c1c2b377ee0dde137211469d99993c98c732c1411a87edbb973eec4cda6cb956d26facd32e8454e78213ce5c1525203399d87e9dd8d7da4b6b"], 0x3}}, 0x0)
sendmsg$TIPC_NL_NET_SET(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8f33580d18fd21ff}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x2d9, r4, 0x1, 0x70bd2d, 0x25dfdbfb}, 0x14}}, 0x4000)

[  188.119665] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  188.126517] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  188.134114] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  188.141418] team0: Port device team_slave_0 added
[  188.147246] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  188.155404] team0: Port device team_slave_1 added
[  188.162153] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  188.198122] 8021q: adding VLAN 0 to HW filter on device bond0
[  188.208739] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  188.218634] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  188.253582] device hsr_slave_0 entered promiscuous mode
[  188.266949] audit: type=1804 audit(1574113555.882:42): pid=7015 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir818154398/syzkaller.iJxuAZ/2/file0/bus" dev="ramfs" ino=26392 res=1
[  188.290043] hrtimer: interrupt took 44310 ns
[  188.294507] audit: type=1804 audit(1574113555.892:43): pid=7015 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.5" name="/root/syzkaller-testdir818154398/syzkaller.iJxuAZ/2/file0/bus" dev="ramfs" ino=26392 res=1
[  188.326427] device hsr_slave_1 entered promiscuous mode
[  188.332620] audit: type=1400 audit(1574113555.902:44): avc:  denied  { map } for  pid=7014 comm="syz-executor.5" path="/root/syzkaller-testdir818154398/syzkaller.iJxuAZ/2/file0/bus" dev="ramfs" ino=26392 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:ramfs_t:s0 tclass=file permissive=1
[  188.362107] audit: type=1804 audit(1574113555.902:45): pid=7015 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.5" name="/root/syzkaller-testdir818154398/syzkaller.iJxuAZ/2/file0/bus" dev="ramfs" ino=26392 res=1
[  188.391252] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[  188.412533] 8021q: adding VLAN 0 to HW filter on device batadv0
[  188.422930] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  188.442791] audit: type=1804 audit(1574113556.062:46): pid=7016 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir818154398/syzkaller.iJxuAZ/2/file0/file0/bus" dev="ramfs" ino=26397 res=1
[  188.471899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  188.485370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  188.496280] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
21:45:56 executing program 5:
socket$inet_dccp(0x2, 0x6, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x4, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40000, 0x8}, [@IFLA_GROUP={0xae, 0x1b, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x1)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r2, 0x40505330, 0x0)
accept4(0xffffffffffffffff, &(0x7f0000000180)=@rc, &(0x7f0000000040)=0x80, 0x800)
pipe(0x0)
ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fcntl$dupfd(r4, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)=ANY=[@ANYBLOB="1001007d", @ANYRES16=r6, @ANYBLOB="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"], 0x110}, 0x1, 0x0, 0x0, 0x20000000}, 0x40081)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
dup(0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = fcntl$dupfd(r8, 0x0, r7)
ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f00000000c0)=@get={0x1, &(0x7f0000000340)=""/217, 0x28ab})
ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200)
ioctl$UI_SET_EVBIT(r9, 0x40045564, 0x1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = fcntl$dupfd(r11, 0x0, r10)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r12, 0x40045402, &(0x7f0000000240))

[  188.519585] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[  188.531337] 8021q: adding VLAN 0 to HW filter on device team0
[  188.583822] device hsr_slave_0 entered promiscuous mode
[  188.610541] device hsr_slave_1 entered promiscuous mode
[  188.630893] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[  188.638330] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  188.648227] 8021q: adding VLAN 0 to HW filter on device bond0
[  188.659125] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  188.668589] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[  188.675966] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  188.686632] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  188.695133] bridge0: port 1(bridge_slave_0) entered blocking state
[  188.701531] bridge0: port 1(bridge_slave_0) entered forwarding state
[  188.709118] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  188.717780] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[  188.741893] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  188.750715] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  188.773658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  188.781905] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  188.789905] bridge0: port 2(bridge_slave_1) entered blocking state
[  188.796478] bridge0: port 2(bridge_slave_1) entered forwarding state
[  188.804555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  188.812131] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  188.823215] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[  188.829340] 8021q: adding VLAN 0 to HW filter on device team0
21:45:56 executing program 5:
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$dupfd(r1, 0x0, r0)
mount(&(0x7f0000000180)=ANY=[], &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0)
r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x0, 0x0)
write$nbd(0xffffffffffffffff, 0x0, 0x0)
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x8000, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="7d19bb0ba76bf6", @ANYRESHEX=r3, @ANYBLOB=',\x00'])
syz_open_dev$amidi(&(0x7f0000000140)='/dev/amidi#\x00', 0x6, 0x4000)

[  188.863718] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  188.864485] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  188.894120] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[  188.931008] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[  188.935925] 9pnet: Insufficient options for proto=fd
[  188.945339] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[  188.952855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  188.963705] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  188.973203] bridge0: port 1(bridge_slave_0) entered blocking state
[  188.979619] bridge0: port 1(bridge_slave_0) entered forwarding state
[  188.986796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  189.021013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
21:45:56 executing program 1:
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x13, r0, 0x0)
shmget(0x2, 0x1000, 0x1c, &(0x7f000096d000/0x1000)=nil)
perf_event_open(&(0x7f000001d000)={0x1, 0x25a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = syz_open_dev$admmidi(&(0x7f00000015c0)='/dev/admmidi#\x00', 0x8, 0x0)
ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_PVERSION(0xffffffffffffffff, 0x80045300, 0x0)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
fsetxattr$security_smack_transmute(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x0, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x64)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$PPPIOCGIDLE(0xffffffffffffffff, 0x8010743f, 0x0)
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x4028010, &(0x7f0000e68000)={0x2, 0x4e24, @multicast1}, 0xffffffffffffff9e)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fcntl$dupfd(r4, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
sendto(r2, &(0x7f0000000000)="b6", 0x1, 0x1, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140), 0x47)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = fcntl$dupfd(r7, 0x0, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
setsockopt$inet_int(r8, 0x0, 0xd, &(0x7f0000000040)=0x7, 0x4)
write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a)
readv(r2, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/216, 0xd8}], 0x1)

[  189.032476] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  189.042612] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[  189.062188] 8021q: adding VLAN 0 to HW filter on device bond0
[  189.071470] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
21:45:56 executing program 5:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = fcntl$dupfd(r0, 0xc0a, 0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$dupfd(r3, 0x0, r2)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f0000000100)=@v2={0x2, @aes128, 0x1, [], "3e808d12126142a29bc074dbee2742ac"})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$P9_RCREATE(r1, &(0x7f0000000280)={0x18, 0x73, 0x1, {{0x34, 0x2, 0x4}, 0x8}}, 0x18)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_GUEST_DEBUG(r6, 0x4048ae9b, &(0x7f00000003c0)={0xe0003})
getgroups(0x2, &(0x7f00000005c0)=[0x0, <r7=>0x0])
setregid(0x0, r7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
r10 = fcntl$dupfd(r9, 0x0, r8)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
ioctl$MON_IOCQ_RING_SIZE(r10, 0x9205)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000300)="66b8ad008ed00f8d0808417b2c020f3548b800000100000000000f23c00f21f835010008000f23740fc778fc0f350fd8060f30", 0x33}], 0x1, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getresuid(&(0x7f0000000040), 0x0, &(0x7f00000000c0)=<r11=>0x0)
fstat(0xffffffffffffffff, 0x0)
getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x2)
prctl$PR_GET_TSC(0x19, &(0x7f0000000740))
lchown(&(0x7f0000000000)='./file0\x00', r11, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r12=>0xffffffffffffffff, <r13=>0xffffffffffffffff})
r14 = fcntl$dupfd(r13, 0x0, r12)
ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200)
r15 = getpid()
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r14, 0xc1105511, &(0x7f0000000440)={{0x8, 0x6, 0xffffff01, 0xffff, 'syz1\x00', 0x2}, 0x5, 0x20, 0x7ff, r15, 0x2, 0x100, 'syz0\x00', &(0x7f0000000080)=['\x00', '\x00'], 0x2, [], [0xff7f, 0x7, 0x7fff, 0xfc00]})
sched_setaffinity(r15, 0x8, &(0x7f0000000140)=0xfd6)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

[  189.080857] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[  189.088325] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  189.096460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  189.104671] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  189.114218] bridge0: port 2(bridge_slave_1) entered blocking state
[  189.120661] bridge0: port 2(bridge_slave_1) entered forwarding state
[  189.136633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  189.146609] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  189.155448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  189.163328] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  189.171011] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  189.179424] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  189.189395] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready
[  189.199307] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready
[  189.211111] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[  189.220549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  189.228089] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
21:45:56 executing program 1:
r0 = perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe2$9p(&(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
write$P9_RVERSION(r2, &(0x7f0000000980)=ANY=[@ANYBLOB="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"/528], 0x15)
eventfd2(0x4, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
mknod$loop(&(0x7f00000000c0)='./file0\x00', 0xa000, 0x0)
write$P9_RAUTH(r2, &(0x7f0000000040)={0x14, 0x67, 0x1}, 0x14)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0)
close(r3)
write$cgroup_type(0xffffffffffffffff, 0x0, 0x0)
write$P9_RLOPEN(r3, 0x0, 0x0)
write$P9_RGETATTR(r2, &(0x7f0000000500)={0xa0, 0x19, 0x1, {0x0, {0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0xa0)
ioctl$VIDIOC_DBG_G_CHIP_INFO(r0, 0xc0c85666, &(0x7f00000001c0)={{0x4}, "948676b89ad94220e7fe0da4a12c48de35c5be49a13e0fdb76a15be122bf8fa8", 0x4})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000140), 0x4)
connect$inet(r4, 0x0, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
r6 = dup3(r4, r5, 0x0)
r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000005140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000005100)={<r8=>0xffffffffffffffff}}}, 0x20)
write$RDMA_USER_CM_CMD_NOTIFY(r7, &(0x7f0000005180)={0xf, 0x8}, 0x10)
write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000340)={0xf, 0x8, 0xfa00, {r8, 0xb}}, 0x10)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
umount2(&(0x7f0000000140)='./file0\x00', 0xb)

[  189.235911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  189.243695] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  189.275602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  189.297248] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  189.307068] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[  189.339085] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  189.346459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  189.357666] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  189.367418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  189.378277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  189.387194] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[  189.400426] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  189.412136] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[  189.426562] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  189.435683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  189.450717] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  189.459916] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[  189.466183] 8021q: adding VLAN 0 to HW filter on device team0
[  189.478777] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready
[  189.490344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  189.497817] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  189.516568] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready
[  189.524891] list_add double add: new=ffff888056078898, prev=ffff888056078898, next=ffff88808de0c840.
[  189.532266] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready
[  189.534592] ------------[ cut here ]------------
[  189.542618] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[  189.545222] kernel BUG at lib/list_debug.c:29!
[  189.545305] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[  189.557523] 8021q: adding VLAN 0 to HW filter on device batadv0
[  189.561303] Modules linked in:
[  189.561315] CPU: 0 PID: 7060 Comm: syz-executor.1 Not tainted 4.14.154 #0
[  189.561320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  189.561325] task: ffff888055aee140 task.stack: ffff888055ab0000
[  189.561340] RIP: 0010:__list_add_valid.cold+0x26/0x3c
[  189.567460] kobject: 'vlan0' (ffff88809f57ea00): kobject_add_internal: parent: 'mesh', set: '<NULL>'
[  189.570553] RSP: 0018:ffff888055ab7a00 EFLAGS: 00010282
[  189.570560] RAX: 0000000000000058 RBX: ffff88808de0c800 RCX: 0000000000000000
[  189.570564] RDX: 000000000000dfb4 RSI: ffffffff814b8535 RDI: ffffed100ab56f36
[  189.570568] RBP: ffff888055ab7a18 R08: 0000000000000058 R09: ffff888055aeea08
[  189.570573] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88808de0c840
[  189.570580] R13: ffff888056078898 R14: ffff888056078898 R15: ffff888056078898
[  189.608778] 8021q: adding VLAN 0 to HW filter on device bond0
[  189.612775] FS:  00007ff3d73cf700(0000) GS:ffff8880aee00000(0000) knlGS:0000000000000000
[  189.612780] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  189.612784] CR2: 00007f496014d000 CR3: 00000000a0b37000 CR4: 00000000001406f0
[  189.612790] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  189.612794] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  189.612804] Call Trace:
[  189.612820]  ? _raw_spin_lock+0x37/0x40
[  189.612831]  p9_fd_request+0xe3/0x2b0
[  189.612841]  p9_client_rpc+0x21b/0x1180
[  189.612852]  ? p9_client_prepare_req.part.0+0xa90/0xa90
[  189.612863]  ? trace_hardirqs_on_caller+0x400/0x590
[  189.612871]  ? trace_hardirqs_on+0xd/0x10
[  189.612881]  ? finish_wait+0x260/0x260
[  189.612892]  ? destroy_inode+0xc7/0x120
[  189.622176] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  189.627449]  ? evict+0x3e6/0x630
[  189.636189] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[  189.641996]  ? do_raw_spin_unlock+0x16b/0x260
[  189.642008]  p9_client_clunk+0x89/0x150
[  189.642021]  v9fs_dentry_release+0x6d/0xd0
[  189.649415] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  189.655207]  ? v9fs_cached_dentry_delete+0x40/0x40
[  189.655221]  __dentry_kill+0x39a/0x580
[  189.655228]  ? dput.part.0+0x2a/0x750
[  189.655236]  ? dput.part.0+0x2a/0x750
[  189.655247]  dput.part.0+0x59f/0x750
[  189.664896] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  189.669346]  do_one_tree+0x44/0x50
[  189.678830] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  189.683871]  shrink_dcache_for_umount+0x67/0x140
[  189.683880]  generic_shutdown_super+0x6d/0x370
[  189.683887]  kill_anon_super+0x3f/0x60
[  189.683896]  v9fs_kill_super+0x3e/0xa0
[  189.683906]  deactivate_locked_super+0x74/0xe0
[  189.696278] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready
[  189.697707]  deactivate_super+0x85/0xa0
[  189.703924] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  189.705448]  cleanup_mnt+0xb2/0x150
[  189.713023] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  189.715793]  __cleanup_mnt+0x16/0x20
[  189.721305] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[  189.723837]  task_work_run+0x114/0x190
[  189.723849]  exit_to_usermode_loop+0x1da/0x220
[  189.723859]  do_syscall_64+0x4bc/0x640
[  189.730859] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[  189.737431]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  189.737445]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  189.743853] 8021q: adding VLAN 0 to HW filter on device batadv0
[  189.746763] RIP: 0033:0x45a639
[  189.752136] kobject: 'vlan0' (ffff8880970bcb80): kobject_add_internal: parent: 'mesh', set: '<NULL>'
[  189.755214] RSP: 002b:00007ff3d73cec78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  189.755223] RAX: 0000000000000000 RBX: 0000000000000002 RCX: 000000000045a639
[  189.755227] RDX: 0000000000000000 RSI: 000000000000000b RDI: 0000000020000140
[  189.755234] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000
[  189.761563] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[  189.765944] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff3d73cf6d4
[  189.771733] 8021q: adding VLAN 0 to HW filter on device team0
[  189.774725] R13: 00000000004ca580 R14: 00000000004e24f8 R15: 00000000ffffffff
[  189.774737] Code: 
[  189.780691] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[  189.782305] e9 
[  189.787801] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[  189.792912] 56 ff ff ff 4c 89 e1 48 c7 c7 00 1f 9d 86 e8 2f b1 72 fe 
[  189.798789] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  189.802607] 0f 0b 48 89 f2 4c 89 e1 4c 89 ee 48 c7 c7 40 20 9d 86 
[  189.809773] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[  189.811972] e8 18 b1 72 fe <0f> 0b 48 89 f1 48 c7 c7 c0 1f 9d 86 4c 
[  189.819741] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  189.819761] 89 
[  189.825109] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready
[  189.830563] e6 e8 04 b1 72 fe 0f 
[  189.830591] RIP: __list_add_valid.cold+0x26/0x3c RSP: ffff888055ab7a00
[  189.831870] ---[ end trace cdc2bd8d03c10727 ]---
[  189.837554] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[  189.841516] Kernel panic - not syncing: Fatal exception
[  189.843029] Kernel Offset: disabled
[  190.062823] Rebooting in 86400 seconds..