[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c.
[   58.390031][   T27] audit: type=1800 audit(1561411054.247:25): pid=8639 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0
[   58.432595][   T27] audit: type=1800 audit(1561411054.247:26): pid=8639 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0
[   58.464623][   T27] audit: type=1800 audit(1561411054.247:27): pid=8639 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0
[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c.

Debian GNU/Linux 7 syzkaller ttyS0

Warning: Permanently added '10.128.0.245' (ECDSA) to the list of known hosts.
2019/06/24 21:17:43 fuzzer started
2019/06/24 21:17:46 dialing manager at 10.128.0.26:42557
2019/06/24 21:17:47 syscalls: 1010
2019/06/24 21:17:47 code coverage: enabled
2019/06/24 21:17:47 comparison tracing: enabled
2019/06/24 21:17:47 extra coverage: extra coverage is not supported by the kernel
2019/06/24 21:17:47 setuid sandbox: enabled
2019/06/24 21:17:47 namespace sandbox: enabled
2019/06/24 21:17:47 Android sandbox: /sys/fs/selinux/policy does not exist
2019/06/24 21:17:47 fault injection: enabled
2019/06/24 21:17:47 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2019/06/24 21:17:47 net packet injection: enabled
2019/06/24 21:17:47 net device setup: enabled
21:19:02 executing program 0:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x7ff}, 0x10)
write(r0, &(0x7f0000000040)="200000001a00010200190d958d00a00880000000010400000000070000002000", 0x20)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00')
sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x28, r1, 0x201, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'nq\x00'}]}]}, 0x28}}, 0x0)

syzkaller login: [  146.902300][ T8807] IPVS: ftp: loaded support on port[0] = 21
21:19:02 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreqsrc(r0, 0x0, 0x46, &(0x7f0000000080)={@multicast1=0xe0000002, @multicast1, @loopback}, 0xc)

[  147.008856][ T8807] chnl_net:caif_netlink_parms(): no params data found
[  147.064777][ T8807] bridge0: port 1(bridge_slave_0) entered blocking state
[  147.074664][ T8807] bridge0: port 1(bridge_slave_0) entered disabled state
[  147.093992][ T8807] device bridge_slave_0 entered promiscuous mode
[  147.113455][ T8807] bridge0: port 2(bridge_slave_1) entered blocking state
[  147.120600][ T8807] bridge0: port 2(bridge_slave_1) entered disabled state
[  147.143550][ T8807] device bridge_slave_1 entered promiscuous mode
[  147.196564][ T8807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  147.210551][ T8807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  147.227993][ T8810] IPVS: ftp: loaded support on port[0] = 21
21:19:03 executing program 2:
poll(&(0x7f00000002c0), 0x1ab, 0x4e)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
recvfrom$inet(r0, 0x0, 0xfffffd26, 0x0, 0x0, 0x800e00e97)
poll(&(0x7f00000000c0)=[{}], 0x200000000000006b, 0x1000)
shutdown(r0, 0x0)

[  147.256554][ T8807] team0: Port device team_slave_0 added
[  147.280345][ T8807] team0: Port device team_slave_1 added
21:19:03 executing program 3:
socket$unix(0x1, 0x0, 0x0)
poll(&(0x7f00000002c0), 0x200000000000004a, 0x4e)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
recvfrom$inet(r0, 0x0, 0xfffffd26, 0x0, 0x0, 0x800e00c58)
poll(&(0x7f0000000000)=[{r0, 0x49}], 0x1, 0x0)
ppoll(&(0x7f0000001580)=[{}], 0x1, 0x0, 0x0, 0x0)
shutdown(r0, 0x0)

[  147.425713][ T8807] device hsr_slave_0 entered promiscuous mode
[  147.453986][ T8807] device hsr_slave_1 entered promiscuous mode
[  147.567418][ T8807] bridge0: port 2(bridge_slave_1) entered blocking state
[  147.574662][ T8807] bridge0: port 2(bridge_slave_1) entered forwarding state
[  147.582291][ T8807] bridge0: port 1(bridge_slave_0) entered blocking state
[  147.589414][ T8807] bridge0: port 1(bridge_slave_0) entered forwarding state
[  147.599980][ T8812] IPVS: ftp: loaded support on port[0] = 21
21:19:03 executing program 4:
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000b80)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c)
sendmsg(r0, &(0x7f0000001240)={0x0, 0x0, 0x0}, 0x8081)
sendmmsg$inet6(r0, &(0x7f0000003b80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000037c0)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c, 0x0}}], 0x2, 0x80c1)

[  147.749937][ T8815] IPVS: ftp: loaded support on port[0] = 21
[  147.766974][ T8810] chnl_net:caif_netlink_parms(): no params data found
[  147.851703][ T8807] 8021q: adding VLAN 0 to HW filter on device bond0
[  147.943418][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  147.956606][    T5] bridge0: port 1(bridge_slave_0) entered disabled state
[  147.985384][    T5] bridge0: port 2(bridge_slave_1) entered disabled state
[  147.994394][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  148.009385][ T8807] 8021q: adding VLAN 0 to HW filter on device team0
21:19:03 executing program 5:
socket$unix(0x1, 0x0, 0x0)
poll(&(0x7f00000002c0), 0x200000000000004a, 0x4e)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
recvfrom$inet(r0, 0x0, 0xfffffd26, 0x0, 0x0, 0x800e00c58)
poll(&(0x7f0000000000)=[{r0, 0x49}], 0x1, 0x0)
ppoll(&(0x7f0000001580)=[{}, {r0}], 0x2, 0x0, 0x0, 0x0)
shutdown(r0, 0x0)

[  148.030221][ T8810] bridge0: port 1(bridge_slave_0) entered blocking state
[  148.038780][ T8810] bridge0: port 1(bridge_slave_0) entered disabled state
[  148.050604][ T8810] device bridge_slave_0 entered promiscuous mode
[  148.079280][ T8818] IPVS: ftp: loaded support on port[0] = 21
[  148.100377][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  148.112088][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  148.129196][    T5] bridge0: port 1(bridge_slave_0) entered blocking state
[  148.136320][    T5] bridge0: port 1(bridge_slave_0) entered forwarding state
[  148.147121][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  148.155994][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  148.165931][    T5] bridge0: port 2(bridge_slave_1) entered blocking state
[  148.173025][    T5] bridge0: port 2(bridge_slave_1) entered forwarding state
[  148.181367][ T8810] bridge0: port 2(bridge_slave_1) entered blocking state
[  148.188621][ T8810] bridge0: port 2(bridge_slave_1) entered disabled state
[  148.196417][ T8810] device bridge_slave_1 entered promiscuous mode
[  148.231301][ T8810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  148.255221][ T8821] IPVS: ftp: loaded support on port[0] = 21
[  148.292823][ T3486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  148.304410][ T8810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  148.364872][ T8816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  148.375678][ T8812] chnl_net:caif_netlink_parms(): no params data found
[  148.400266][ T8810] team0: Port device team_slave_0 added
[  148.411036][ T8810] team0: Port device team_slave_1 added
[  148.419856][ T8816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  148.428774][ T8816] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  148.459032][ T8816] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  148.466984][ T8816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  148.476106][ T8816] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  148.514870][ T8815] chnl_net:caif_netlink_parms(): no params data found
[  148.575836][ T8810] device hsr_slave_0 entered promiscuous mode
[  148.612871][ T8810] device hsr_slave_1 entered promiscuous mode
[  148.664611][ T8816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  148.675657][ T8816] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  148.700690][ T8815] bridge0: port 1(bridge_slave_0) entered blocking state
[  148.708356][ T8815] bridge0: port 1(bridge_slave_0) entered disabled state
[  148.716433][ T8815] device bridge_slave_0 entered promiscuous mode
[  148.729607][ T8815] bridge0: port 2(bridge_slave_1) entered blocking state
[  148.736922][ T8815] bridge0: port 2(bridge_slave_1) entered disabled state
[  148.744817][ T8815] device bridge_slave_1 entered promiscuous mode
[  148.784916][ T8812] bridge0: port 1(bridge_slave_0) entered blocking state
[  148.792001][ T8812] bridge0: port 1(bridge_slave_0) entered disabled state
[  148.799961][ T8812] device bridge_slave_0 entered promiscuous mode
[  148.808045][ T8812] bridge0: port 2(bridge_slave_1) entered blocking state
[  148.815326][ T8812] bridge0: port 2(bridge_slave_1) entered disabled state
[  148.823173][ T8812] device bridge_slave_1 entered promiscuous mode
[  148.832105][ T8815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  148.843461][ T8815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  148.879445][ T8816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  148.888302][ T8816] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  148.904871][ T8807] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  148.958533][ T8812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  148.969526][ T8815] team0: Port device team_slave_0 added
[  149.001675][ T8812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  149.017414][ T8815] team0: Port device team_slave_1 added
[  149.049209][ T8821] chnl_net:caif_netlink_parms(): no params data found
[  149.067567][ T8818] chnl_net:caif_netlink_parms(): no params data found
[  149.104390][ T8807] 8021q: adding VLAN 0 to HW filter on device batadv0
[  149.117279][ T8812] team0: Port device team_slave_0 added
[  149.167924][ T8812] team0: Port device team_slave_1 added
[  149.255801][ T8815] device hsr_slave_0 entered promiscuous mode
[  149.293053][ T8815] device hsr_slave_1 entered promiscuous mode
[  149.343722][ T8821] bridge0: port 1(bridge_slave_0) entered blocking state
[  149.350778][ T8821] bridge0: port 1(bridge_slave_0) entered disabled state
[  149.358715][ T8821] device bridge_slave_0 entered promiscuous mode
[  149.426345][ T8812] device hsr_slave_0 entered promiscuous mode
[  149.484147][ T8812] device hsr_slave_1 entered promiscuous mode
[  149.534529][ T8821] bridge0: port 2(bridge_slave_1) entered blocking state
[  149.541608][ T8821] bridge0: port 2(bridge_slave_1) entered disabled state
[  149.549485][ T8821] device bridge_slave_1 entered promiscuous mode
[  149.557689][ T8818] bridge0: port 1(bridge_slave_0) entered blocking state
[  149.565406][ T8818] bridge0: port 1(bridge_slave_0) entered disabled state
[  149.573419][ T8818] device bridge_slave_0 entered promiscuous mode
[  149.580937][ T8818] bridge0: port 2(bridge_slave_1) entered blocking state
[  149.588150][ T8818] bridge0: port 2(bridge_slave_1) entered disabled state
[  149.596422][ T8818] device bridge_slave_1 entered promiscuous mode
[  149.671956][ T8833] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  149.706194][ T8821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
21:19:05 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x840000000000, 0xa, 0xff)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='ip6_vti0\x00 \x00', 0x10)
connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @initdev}, 0x10)
write$binfmt_elf32(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="4ef27f454c4600000033006c0800000000000000014423050300000000005ca3fcc387d750c2ca3800200000000000000000000000200000"], 0x38)

[  149.717499][ T8821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  149.734027][ T8834] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  149.785728][ T8818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  149.817114][ T8810] 8021q: adding VLAN 0 to HW filter on device bond0
[  149.856379][ T8818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  149.890343][ T8818] team0: Port device team_slave_0 added
21:19:05 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, 0x0)
r2 = socket(0x0, 0x0, 0x0)
ioctl$FIDEDUPERANGE(r2, 0xc0189436, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
ioctl$sock_SIOCGIFCONF(r1, 0x8912, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c)
ioctl$sock_proto_private(0xffffffffffffffff, 0x89e2, 0x0)
recvfrom$inet6(r3, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x57a)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00')
sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r5, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x84)
setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='vegas\x00', 0x6)
shutdown(r3, 0x1)
r6 = accept4(r0, 0x0, 0x0, 0x0)
r7 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r7, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070")
sendto$inet6(r6, &(0x7f00000000c0), 0xfffffef1, 0x0, 0x0, 0x1a)

[  149.902332][ T8821] team0: Port device team_slave_0 added
[  149.918888][ T8821] team0: Port device team_slave_1 added
[  149.938301][ T8810] 8021q: adding VLAN 0 to HW filter on device team0
[  149.948901][ T8818] team0: Port device team_slave_1 added
[  149.968664][ T8815] 8021q: adding VLAN 0 to HW filter on device bond0
[  149.985523][    C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  150.001211][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  150.009230][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  150.038121][ T3486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  150.047768][ T3486] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  150.056416][ T3486] bridge0: port 1(bridge_slave_0) entered blocking state
[  150.063936][ T3486] bridge0: port 1(bridge_slave_0) entered forwarding state
[  150.135615][ T8821] device hsr_slave_0 entered promiscuous mode
[  150.173051][ T8821] device hsr_slave_1 entered promiscuous mode
[  150.218181][ T3486] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  150.226366][ T3486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  150.235108][ T3486] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  150.243560][ T3486] bridge0: port 2(bridge_slave_1) entered blocking state
[  150.250593][ T3486] bridge0: port 2(bridge_slave_1) entered forwarding state
[  150.262040][ T8815] 8021q: adding VLAN 0 to HW filter on device team0
[  150.278349][ T8812] 8021q: adding VLAN 0 to HW filter on device bond0
[  150.315755][ T8818] device hsr_slave_0 entered promiscuous mode
[  150.332860][ T8818] device hsr_slave_1 entered promiscuous mode
[  150.383625][ T8816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  150.391312][ T8816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  150.399287][ T8816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  150.422698][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  150.431275][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  150.439982][   T22] bridge0: port 1(bridge_slave_0) entered blocking state
[  150.447106][   T22] bridge0: port 1(bridge_slave_0) entered forwarding state
[  150.456512][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  150.465513][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  150.474109][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  150.482935][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  150.490822][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  150.522082][ T8810] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  150.534225][ T8810] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  150.545964][ T8816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  150.555240][ T8816] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  150.564043][ T8816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  150.572577][ T8816] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  150.581249][ T8816] bridge0: port 2(bridge_slave_1) entered blocking state
[  150.588374][ T8816] bridge0: port 2(bridge_slave_1) entered forwarding state
[  150.596373][ T8816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  150.605974][ T8816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  150.614975][ T8816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  150.623232][ T8816] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  150.631520][ T8816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  150.641383][ T8816] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  150.650587][ T8816] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  150.664723][ T8812] 8021q: adding VLAN 0 to HW filter on device team0
[  150.684817][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  150.693014][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  150.700735][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  150.709788][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  150.718499][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  150.726970][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  150.761274][    C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  150.766462][ T8815] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  150.784911][ T8815] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  150.797600][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  150.806328][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  150.815210][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  150.823715][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  150.830797][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  150.838446][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  150.847408][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  150.855874][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  150.862960][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  150.870444][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  150.879027][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  150.887429][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  150.895780][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  150.904177][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  150.914294][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  150.922198][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  150.941325][ T8810] 8021q: adding VLAN 0 to HW filter on device batadv0
21:19:06 executing program 0:
socket$inet_udplite(0x2, 0x2, 0x88)
socket$vsock_dgram(0x28, 0x2, 0x0)
r0 = socket$netlink(0x10, 0x3, 0xf)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800020}, 0xc, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB="88000000d95631099a48838595aa2a3e8ecca5ac4f78b77c48f33aa4f6545a62b81f51023f50ae290ca128f4dd0e5e29da51600725fa9fe7866cffab57aaf0eefbc837ef53abdfc94d8d21fd5916f9495a9fdb06d2dbe0a38883956b4b57e2b5bb5cc632b0028d272b52103308e2943d7c489f34ac9cbf888d51cd4738ed389b3022367b1dc06db0909dc7ac0b696c56f6714de7bb35673590294c3ee47732fa751032590efefc12699b2d62080ebf5fb15f8e0ec9ecbbfcd577f89dc959611d1e07b8504778a1d8bb48231d308ce6097e6cd0df757f3a76c929aa4ad12c22ae74dc33f60a1e2fe4ceb4a4a6f20c398299eb4f083c7560bf4c37fa64ecdc386f70b07b3c636e0e5eb02e3b6d54713aef537aa5ab8e0015219892a3b6e17ac58095a5bd40b6d0195fbb8c04935b6f5708410d72372c24b0ff0e86b3cf5953c4eea5143bb8b1de97ef0b829a0cbdf24cdfe9448e1111ad0bcec758be2fdf87f6fad73ab63aa8b4b15290f9384e62b595c4ceef35f7563399934147a0bdc0f822b4fdc1bb19d0478d3af0ebf9063b6a2f228c0976c9c0254ebfa7b8e8c779acc26d", @ANYRES16=r1, @ANYBLOB="09042abd7000fcdbdf250c0000000400010008400500e5420000680001001400030000000000400000000000cef0e782cbff679cda0000000000000800080008000000080002002e00000008000b007369700008000100020000000c00070001000000140000ff070008000200000008000200000000000c0007000200000021000400080009004a000000e622ef0b54bd63bef188eeb7a60200a4a166c7dd7cf935adc44d582e67249a66e90aa237478eb4aa96"], 0x88}, 0x1, 0x0, 0x0, 0x50}, 0x1)
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r3 = openat$cgroup_ro(r2, 0x0, 0x7a05, 0x1700)
syz_genetlink_get_family_id$ipvs(0x0)
r4 = socket$inet6(0xa, 0x80001, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, 0x0)
ioctl$sock_rose_SIOCRSCLRRT(r3, 0x89e4)
recvfrom$rxrpc(r3, &(0x7f0000000280)=""/158, 0x9e, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00')
sendmsg$TIPC_NL_NET_GET(r3, &(0x7f0000000600)={&(0x7f0000000340), 0xc, 0x0}, 0x4)
ioctl(0xffffffffffffffff, 0x8912, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000f68000)={@ipv4={[], [], @remote}, 0x0, 0x0, 0xfb, 0xb, 0x2, 0x8002}, 0xfffffffffffffda0)
syz_emit_ethernet(0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaacd0800450000300000000068608478acffffff7fffff020000000000efb1db82d374a0fbffff"], 0x0)
unshare(0x40000000)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, 0x0, 0xfe26e439465db0cb)
socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
r5 = socket(0x11, 0x2, 0x0)
setsockopt(r5, 0x107, 0x1, &(0x7f0000000080), 0x0)
close(r5)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev, @in6=@local}}, {{@in6=@empty}, 0x0, @in6=@loopback}}, &(0x7f00000004c0)=0xe8)
r6 = socket$nl_generic(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r6, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="ae0000000000009a00000000"]})
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)

[  150.967672][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  151.034807][ T8812] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  151.051371][ T8812] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  151.077761][ T8852] IPVS: ftp: loaded support on port[0] = 21
[  151.084196][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  151.098939][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  151.107553][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  151.116432][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  151.125200][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  151.133710][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  151.141863][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  151.150387][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  151.159497][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  151.167689][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  151.209091][ T8818] 8021q: adding VLAN 0 to HW filter on device bond0
[  151.231275][ T8815] 8021q: adding VLAN 0 to HW filter on device batadv0
[  151.254557][ T8821] 8021q: adding VLAN 0 to HW filter on device bond0
[  151.283281][ T8822] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  151.291072][ T8822] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  151.316583][ T8812] 8021q: adding VLAN 0 to HW filter on device batadv0
[  151.349245][ T8818] 8021q: adding VLAN 0 to HW filter on device team0
21:19:07 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
pwrite64(r0, &(0x7f0000000080)='1', 0x1, 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0xed5e0000, 0x0, 0x0, 0x20000fff})
ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="153f623448")
ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x58111, r0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000100)={0xad, {{0x2, 0x4e21}}}, 0x88)
ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000240)='caif0\x00')
mkdirat$cgroup(r1, &(0x7f00000002c0)='syz0\x00', 0x1ff)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000800)=ANY=[@ANYBLOB="d1000000990606c34e149242382f2989fda2ab8110f7d7ea2fe700bdfcf7b7c744000007ff0000000600000013ffda000000000000000344666cde0a4385cdae72a4b20b8c09f354713303e1b103618a408f380084cf2321b2d315d2a101700086b8732a223e4f52b08e13400020cb00c722c35409462e5e4d55ab9e100000007be664cf71bc67226fdf866448d4cc614ab3c5d0827307000000ea13abb41b5e45592b8b894ed52f2445985185a8d719ce03b6595a6a40cf550ddda25a2998a0e455f7d2a6a4052d6a62182c65b1d1335bf5a1a4615540a0170ad6276cefb9557058"], 0xbc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280), 0xfffffe8f)
mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x300000a, 0x8013, r1, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000})
ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000640))
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000680)=@assoc_value={<r2=>0x0, 0x9}, &(0x7f00000006c0)=0x8)
getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000700)={r2, 0x8}, &(0x7f0000000740)=0x8)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000340)='SEG6\x00')
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000004300)='TIPC\x00')
sendmsg$TIPC_CMD_SET_LINK_TOL(r4, &(0x7f00000043c0)={&(0x7f00000042c0)={0x10, 0x0, 0x0, 0x10008004}, 0xc, &(0x7f0000004380)={&(0x7f0000004340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000025bd7000fbdbdf2501ae2400000000000741000000000000017564703a73797a0900000000"], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4000050)
sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x4c, r3, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRET={0x8, 0x4, [0x40]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xda63}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xe70000}, @SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x100000000}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x4)
getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f00000001c0), &(0x7f00000007c0)=0x4)
ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, &(0x7f0000000440)={'\x00', 0x10000, 0x7})
ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611)
r6 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/21, 0x3c000, 0x800}, 0x18)

[  151.398202][ T8821] 8021q: adding VLAN 0 to HW filter on device team0
21:19:07 executing program 1:
r0 = accept(0xffffffffffffff9c, &(0x7f0000000080)=@can, &(0x7f0000000000)=0x80)
connect$netlink(r0, &(0x7f0000000100)=@proc={0x10, 0x0, 0x25dfdbfb, 0x41000}, 0xc)
r1 = socket(0xa, 0x4000000000000001, 0x1)
ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x9)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, &(0x7f0000000040)=0x10)

[  151.452698][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  151.467574][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  151.506165][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  151.520213][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  151.530315][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  151.537443][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  151.555225][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  151.586284][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  151.606511][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  151.632840][   T22] bridge0: port 2(bridge_slave_1) entered blocking state
[  151.639999][   T22] bridge0: port 2(bridge_slave_1) entered forwarding state
[  151.664424][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  151.683722][ T8816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  151.692334][ T8816] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
21:19:07 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc9f123c1237319bc070")
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20)
r2 = accept$alg(r0, 0x0, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac-aes-ce\x00'}, 0x58)
recvmmsg(r2, &(0x7f0000003580)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000001c0)=""/10, 0x10}], 0x1}}, {{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000700)=""/181, 0xb5}], 0x1}}], 0x2, 0x0, 0x0)

[  151.717275][ T8816] bridge0: port 1(bridge_slave_0) entered blocking state
[  151.724422][ T8816] bridge0: port 1(bridge_slave_0) entered forwarding state
[  151.743270][ T8816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  151.769668][ T8816] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  151.806541][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  151.825908][ T8856] IPVS: ftp: loaded support on port[0] = 21
[  151.840199][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  151.872959][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  151.880214][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  151.899018][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  151.915650][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  151.925977][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  151.933677][ T8856] kasan: CONFIG_KASAN_INLINE enabled
[  151.935048][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  151.947707][ T8856] kasan: GPF could be caused by NULL-ptr deref or user memory access
[  151.956505][ T8856] general protection fault: 0000 [#1] PREEMPT SMP KASAN
[  151.963459][ T8856] CPU: 1 PID: 8856 Comm: syz-executor.0 Not tainted 5.2.0-rc5+ #41
[  151.969124][ T8818] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  151.971341][ T8856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  151.971363][ T8856] RIP: 0010:ovs_ct_exit+0x1ac/0x4ec
[  151.971384][ T8856] Code: 01 00 00 00 48 c7 c7 00 37 da 88 e8 ce 65 44 fa 49 8d 44 24 50 48 89 c2 48 89 45 d0 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 ee 02 00 00 48 b8 00 00 00 00 00 fc ff df 4d 8b
[  151.989356][ T8818] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  151.991741][ T8856] RSP: 0018:ffff888067f2fb10 EFLAGS: 00010206
[  152.007906][ T8818] 8021q: adding VLAN 0 to HW filter on device batadv0
[  152.016518][ T8856] RAX: dffffc0000000000 RBX: 0000000000000001 RCX: 1ffff1100cfe4d76
[  152.016526][ T8856] RDX: 000000000000000a RSI: 1ffff1100cfe4d7d RDI: 0000000000000286
[  152.016534][ T8856] RBP: ffff888067f2fb50 R08: ffff888067f26340 R09: 0000000000000002
[  152.016550][ T8856] R10: ffffed1015d26c77 R11: ffff8880ae9363bb R12: 0000000000000000
[  152.026945][ T8818] kobject: 'vlan0' (00000000b57f56a8): kobject_add_internal: parent: 'mesh', set: '<NULL>'
[  152.032975][ T8856] R13: ffff8880a90fc040 R14: ffff88808560ad80 R15: dffffc0000000000
[  152.032987][ T8856] FS:  00007fa79d172700(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000
[  152.033004][ T8856] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  152.104421][ T3879] kobject: 'loop4' (00000000d6ab3ebd): kobject_uevent_env
[  152.106060][ T8856] CR2: 00007fff65a5bfb8 CR3: 000000009bc54000 CR4: 00000000001406e0
21:19:08 executing program 4:
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000b80)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c)
sendmsg(r0, &(0x7f0000001240)={0x0, 0x0, 0x0}, 0x8081)
sendmmsg$inet6(r0, &(0x7f0000003b80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000037c0)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c, 0x0}}], 0x2, 0x80c1)

[  152.121575][ T3879] kobject: 'loop4' (00000000d6ab3ebd): fill_kobj_path: path = '/devices/virtual/block/loop4'
[  152.122633][ T8856] Call Trace:
[  152.122654][ T8856]  ? kasan_check_read+0x11/0x20
[  152.122674][ T8856]  ovs_exit_net+0x1f8/0xc30
[  152.145446][ T8856]  ? synchronize_rcu.part.0+0xcf/0xe0
[  152.150960][ T8856]  ? kfree_call_rcu+0x10/0x10
[  152.155952][ T8856]  ? ovs_dp_cmd_del+0x270/0x270
[  152.155960][ T3879] kobject: 'loop4' (00000000d6ab3ebd): kobject_uevent_env
21:19:08 executing program 4:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x8174, 0xdb5})
r1 = accept$unix(0xffffffffffffff9c, &(0x7f0000000100), &(0x7f00000001c0)=0x6e)
setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000200), 0x10)
r2 = openat$cgroup_int(r0, &(0x7f0000000080)='cpu.weight\x00', 0x2, 0x0)
write$cgroup_int(r2, &(0x7f0000000000)=0x401, 0x12)
write$cgroup_int(r2, &(0x7f00000002c0)=0x2, 0x12)
write$cgroup_int(r2, &(0x7f0000000040)=0x2, 0x12)
r3 = accept(r1, 0x0, &(0x7f0000000240))
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000280)={@loopback, 0x0, 0x2, 0x0, 0x1, 0x1ff, 0x7}, 0x20)

[  152.155994][ T3879] kobject: 'loop4' (00000000d6ab3ebd): fill_kobj_path: path = '/devices/virtual/block/loop4'
[  152.160826][ T8856]  ? ovs_dp_cmd_del+0x270/0x270
[  152.183599][ T8856]  ops_exit_list.isra.0+0xaa/0x150
[  152.188806][ T8856]  setup_net+0x518/0x870
[  152.193137][ T8856]  ? ops_init+0x410/0x410
[  152.195216][ T3879] kobject: 'loop4' (00000000d6ab3ebd): kobject_uevent_env
[  152.197703][ T8856]  ? kasan_check_write+0x14/0x20
[  152.209720][ T8856]  ? down_read_killable+0x51/0x220
[  152.212933][ T3879] kobject: 'loop4' (00000000d6ab3ebd): fill_kobj_path: path = '/devices/virtual/block/loop4'
[  152.214836][ T8856]  copy_net_ns+0x1df/0x340
[  152.229634][ T8856]  create_new_namespaces+0x400/0x7b0
[  152.234936][ T8856]  unshare_nsproxy_namespaces+0xc2/0x200
[  152.240580][ T8856]  ksys_unshare+0x440/0x980
[  152.245098][ T8856]  ? walk_process_tree+0x2c0/0x2c0
[  152.247801][ T3879] kobject: 'loop4' (00000000d6ab3ebd): kobject_uevent_env
[  152.250219][ T8856]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  152.257391][ T3879] kobject: 'loop4' (00000000d6ab3ebd): fill_kobj_path: path = '/devices/virtual/block/loop4'
[  152.262776][ T8856]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  152.262791][ T8856]  ? do_syscall_64+0x26/0x680
[  152.262813][ T8856]  ? lockdep_hardirqs_on+0x418/0x5d0
[  152.289032][ T8856]  __x64_sys_unshare+0x31/0x40
[  152.293805][ T8856]  do_syscall_64+0xfd/0x680
[  152.298310][ T8856]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  152.304180][ T8856] RIP: 0033:0x4592c9
[  152.308052][ T8856] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  152.327743][ T8856] RSP: 002b:00007fa79d171c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  152.336133][ T8856] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00000000004592c9
[  152.344082][ T8856] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000
[  152.352028][ T8856] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000
[  152.359978][ T8856] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa79d1726d4
[  152.368025][ T8856] R13: 00000000004c87c1 R14: 00000000004df260 R15: 00000000ffffffff
[  152.375977][ T8856] Modules linked in:
[  152.386644][ T8855] kobject: '®' (000000006d07610f): kobject_add_internal: parent: 'net', set: 'devices'
[  152.387677][ T8856] ---[ end trace 8e8c5e1863066f5a ]---
[  152.401907][ T8856] RIP: 0010:ovs_ct_exit+0x1ac/0x4ec
[  152.407302][ T8856] Code: 01 00 00 00 48 c7 c7 00 37 da 88 e8 ce 65 44 fa 49 8d 44 24 50 48 89 c2 48 89 45 d0 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 ee 02 00 00 48 b8 00 00 00 00 00 fc ff df 4d 8b
[  152.414344][ T8855] kobject: '®' (000000006d07610f): kobject_uevent_env
[  152.434164][ T8856] RSP: 0018:ffff888067f2fb10 EFLAGS: 00010206
[  152.447901][ T8856] RAX: dffffc0000000000 RBX: 0000000000000001 RCX: 1ffff1100cfe4d76
[  152.461160][ T3879] kobject: 'loop3' (00000000a0454167): kobject_uevent_env
[  152.463268][ T8856] RDX: 000000000000000a RSI: 1ffff1100cfe4d7d RDI: 0000000000000286
[  152.473481][ T3879] kobject: 'loop3' (00000000a0454167): fill_kobj_path: path = '/devices/virtual/block/loop3'
[  152.477129][ T8856] RBP: ffff888067f2fb50 R08: ffff888067f26340 R09: 0000000000000002
[  152.495176][ T8856] R10: ffffed1015d26c77 R11: ffff8880ae9363bb R12: 0000000000000000
[  152.503666][ T8856] R13: ffff8880a90fc040 R14: ffff88808560ad80 R15: dffffc0000000000
[  152.518948][ T8855] kobject: '®' (000000006d07610f): fill_kobj_path: path = '/devices/virtual/net/®'
[  152.519952][ T8856] FS:  00007fa79d172700(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000
[  152.538718][ T8856] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  152.548064][ T8856] CR2: 0000000000625208 CR3: 000000009bc54000 CR4: 00000000001406e0
[  152.565766][ T8856] Kernel panic - not syncing: Fatal exception
[  152.565840][ T8855] kobject: 'queues' (0000000068598b96): kobject_add_internal: parent: '®', set: '<NULL>'
[  152.572856][ T8856] Kernel Offset: disabled
[  152.586979][ T8856] Rebooting in 86400 seconds..