[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 72.025032][ T27] audit: type=1800 audit(1576098972.209:25): pid=8788 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 72.055636][ T27] audit: type=1800 audit(1576098972.219:26): pid=8788 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 72.097929][ T27] audit: type=1800 audit(1576098972.219:27): pid=8788 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.59' (ECDSA) to the list of known hosts. 2019/12/11 21:16:23 fuzzer started 2019/12/11 21:16:25 dialing manager at 10.128.0.26:33577 2019/12/11 21:16:25 syscalls: 2701 2019/12/11 21:16:25 code coverage: enabled 2019/12/11 21:16:25 comparison tracing: enabled 2019/12/11 21:16:25 extra coverage: enabled 2019/12/11 21:16:25 setuid sandbox: enabled 2019/12/11 21:16:25 namespace sandbox: enabled 2019/12/11 21:16:25 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/11 21:16:25 fault injection: enabled 2019/12/11 21:16:25 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/11 21:16:25 net packet injection: enabled 2019/12/11 21:16:25 net device setup: enabled 2019/12/11 21:16:25 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/12/11 21:16:25 devlink PCI setup: PCI device 0000:00:10.0 is not available 21:18:15 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x1ba, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0xd85003, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000340)) write(r3, &(0x7f0000000340), 0x41395527) openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x48570a556ba3f538, 0x0) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f00000002c0)) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) close(0xffffffffffffffff) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000004c0), 0x1}, 0x200000804, 0xffffffffffffffff, 0x8001, 0x0, 0xfffffffffffffffd, 0x0, 0x3}, 0x0, 0x2, 0xffffffffffffffff, 0x131311adf077de7a) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)) r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, r4, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000580)={"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"}) r6 = dup3(0xffffffffffffffff, r5, 0x0) dup2(r6, 0xffffffffffffffff) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x82) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) 21:18:15 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x6, 'pids'}]}, 0x6) ioctl$KVM_RUN(r2, 0xae80, 0x0) syzkaller login: [ 195.845437][ T8957] IPVS: ftp: loaded support on port[0] = 21 21:18:16 executing program 2: setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r0, &(0x7f0000000580)={0x8, "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", 0x1000}, 0x10000005c) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$P9_RLCREATE(r0, 0x0, 0xffffffffffffff43) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x4139569a) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) fadvise64(r0, 0x0, 0x0, 0x4) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) syz_open_procfs(0x0, 0x0) [ 196.046604][ T8957] chnl_net:caif_netlink_parms(): no params data found [ 196.049547][ T8960] IPVS: ftp: loaded support on port[0] = 21 [ 196.151520][ T8957] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.160697][ T8957] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.169805][ T8957] device bridge_slave_0 entered promiscuous mode [ 196.183461][ T8957] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.191899][ T8957] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.200302][ T8957] device bridge_slave_1 entered promiscuous mode [ 196.229842][ T8957] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 196.254735][ T8957] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 196.313349][ T8963] IPVS: ftp: loaded support on port[0] = 21 21:18:16 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1b6) setresuid(0x0, r4, 0xee00) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)={0x30, r6, 0x23f, 0x0, 0x0, {{}, 0x0, 0x410c, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) [ 196.362138][ T8957] team0: Port device team_slave_0 added [ 196.382827][ T8960] chnl_net:caif_netlink_parms(): no params data found [ 196.411362][ T8957] team0: Port device team_slave_1 added 21:18:16 executing program 4: add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) chdir(0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/dev_mcast\x00') sendfile(r4, 0xffffffffffffffff, 0xfffffffffffffffe, 0x2000003) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x200000000, 0x2, 0x5, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) syz_open_dev$loop(0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='/group.sta\x9f\xd4t\x00+\x96FR\bR\t\x12\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0W\xdfuE\xfe\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6J\x81W!\xf0\\\xa1O\x9f\x93\x19C\xceQCV\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1fM\xeba_\xa9\xcd\x10\xcd\x0e~\xc6\xed\xb6\x82\xf6\xee\x9aK\xdd\x86\xf8\x0f\x15Y-\xb8A1\x1bb\xff\xf0\xd2M\xf7)\xaa\x8a\x18\xb9_\x83>\xeb\xfc\xc18^\x1d\xb3Y\xdc#\xde\xdb\x89\x90L\x99o\x02\xb6\x98e\xc6b\xce\xb7\x99k3&\xaf\v\xc6\x80\xff\xdb\xb7\x0e\xb4K\xf8\x17\xba\xf8\xee\fe\xed]\x93\x13\xbc\xf5\xe2<\xa2\xaf\x83\xa3\xaabc\x95\x00\t:\xcc\xe1\t]\x84\x90\x17l\xd3\xa7M\xdb\x02J\x90\xe8\xe8\xb3\xc9\xf6\xea\xb2\xdeI\xe4\x0f\xd4\xca(\xcd\xfa\xb2\xb8@\xca\x17u\x02Rb\xad\xd0\xf7\x9bz#\xb8\x1d\x88\xf6?3,\x89\xb1-p\x8a\r\xdb\xd6,\xa4\x01y\x1bc\xb7\x19\xcey\xb5\xae\xc4\xe3\xc4\xe9=\x1e\x8c\xec\xfe\x05b\x7f`Y k\xc4\xa8 \xc3\x9b\v\xbbE\x8c\xb8\xe6\x8a\xa0s\b\xcb\xbb\xfa\xde\xf0\n`\x8az<\f\xf1\xbe\x85\xd1Wk\x17\xbc1q\x8b\x93Y|\x9e\xe2\xc9Ms/A\x98\xf2\x88\n\x92?7\xb1\xe0\xee\xe8yo\xb7\xb2p\xc5O~\x87\x17F\b\xb5\xd6\xdc\xe4u:$>\xd1\xaf\x1a\xcb\x18\x8a\x0e$\xbd\x94N\xc84}_\x06\x11\xd2\xdd7\xe0\b\x0f\xd0\xb0WZ\xfc\xb1\xc3\tS\x13\a6\xc0\xbc\vG\xe4p\x1b\xee\x89_=\xb8\x12\xddpk\x860\x03\xfd\xde\x0f\x9c\xc2\xe5.\xfe\xaf\x8f\xe2\x16\x8c\xdbS\xe6\xc26\xde\xf4I\x9f\x003P\xb5\x9fg\x82!\xf2\x82 \xc1Os\xd7C\\\xad\xb3n}t\xba|\x10\x05,rk\xd1\t|\x1e\x00\x9e\xfa\"\x85\xdd\xb7O\a\xfc\x14\xa8\x00\x1f6M\xb00\xbd\xb7\xd6\xa8\xffe\xb2\xcb\'', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x4030582a, &(0x7f0000000000)) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r5, &(0x7f0000000240)="fb7fa9884c00aa6b0d94f2bbc6184bedb05c214bc36844fcdfad658b292a050bf11afa80b97b6ac31a0201734e8e", &(0x7f00000003c0)=""/161, 0x1b9e46fef573b69e}, 0x20) keyctl$search(0xa, 0x0, 0x0, &(0x7f0000000140)={'syz', 0x2}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r6, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) [ 196.570669][ T8957] device hsr_slave_0 entered promiscuous mode [ 196.625720][ T8957] device hsr_slave_1 entered promiscuous mode [ 196.704928][ T8966] IPVS: ftp: loaded support on port[0] = 21 [ 196.716240][ T8960] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.723932][ T8960] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.732202][ T8960] device bridge_slave_0 entered promiscuous mode [ 196.782213][ T8960] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.792993][ T8960] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.802470][ T8960] device bridge_slave_1 entered promiscuous mode [ 196.849291][ T8957] netdevsim netdevsim0 netdevsim0: renamed from eth0 21:18:17 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) [ 196.949902][ T8957] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 197.013216][ T8957] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 197.059350][ T8957] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 197.108557][ T8968] IPVS: ftp: loaded support on port[0] = 21 [ 197.124399][ T8960] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.178446][ T8960] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.189666][ T8963] chnl_net:caif_netlink_parms(): no params data found [ 197.212052][ T8970] IPVS: ftp: loaded support on port[0] = 21 [ 197.267394][ T8960] team0: Port device team_slave_0 added [ 197.298656][ T8963] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.306394][ T8963] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.314175][ T8963] device bridge_slave_0 entered promiscuous mode [ 197.341475][ T8960] team0: Port device team_slave_1 added [ 197.347938][ T8963] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.355017][ T8963] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.364027][ T8963] device bridge_slave_1 entered promiscuous mode [ 197.398364][ T8966] chnl_net:caif_netlink_parms(): no params data found [ 197.451882][ T8963] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.497200][ T8960] device hsr_slave_0 entered promiscuous mode [ 197.545691][ T8960] device hsr_slave_1 entered promiscuous mode [ 197.585446][ T8960] debugfs: Directory 'hsr0' with parent '/' already present! [ 197.605467][ T8963] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.664047][ T8963] team0: Port device team_slave_0 added [ 197.677879][ T8963] team0: Port device team_slave_1 added [ 197.738486][ T8963] device hsr_slave_0 entered promiscuous mode [ 197.775658][ T8963] device hsr_slave_1 entered promiscuous mode [ 197.835407][ T8963] debugfs: Directory 'hsr0' with parent '/' already present! [ 197.865032][ T8960] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 197.921377][ T8966] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.928616][ T8966] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.936828][ T8966] device bridge_slave_0 entered promiscuous mode [ 197.973465][ T8960] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 198.020033][ T8960] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 198.077313][ T8960] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 198.133041][ T8966] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.140266][ T8966] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.148103][ T8966] device bridge_slave_1 entered promiscuous mode [ 198.207368][ T8966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.250580][ T8970] chnl_net:caif_netlink_parms(): no params data found [ 198.260871][ T8966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.274482][ T8968] chnl_net:caif_netlink_parms(): no params data found [ 198.283807][ T8963] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 198.350091][ T8963] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 198.412003][ T8963] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 198.510678][ T8963] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 198.552856][ T8966] team0: Port device team_slave_0 added [ 198.562430][ T8957] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.591907][ T8966] team0: Port device team_slave_1 added [ 198.602107][ T8968] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.609813][ T8968] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.618159][ T8968] device bridge_slave_0 entered promiscuous mode [ 198.641581][ T8970] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.649552][ T8970] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.657740][ T8970] device bridge_slave_0 entered promiscuous mode [ 198.666594][ T8970] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.673693][ T8970] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.681812][ T8970] device bridge_slave_1 entered promiscuous mode [ 198.694770][ T8968] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.702210][ T8968] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.710465][ T8968] device bridge_slave_1 entered promiscuous mode [ 198.733692][ T8957] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.788744][ T8966] device hsr_slave_0 entered promiscuous mode [ 198.845580][ T8966] device hsr_slave_1 entered promiscuous mode [ 198.895427][ T8966] debugfs: Directory 'hsr0' with parent '/' already present! [ 198.917016][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 198.926039][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 198.952454][ T8968] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.965424][ T8968] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.981661][ T8970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.993854][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 199.002632][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 199.011769][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.019070][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.028008][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 199.037206][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 199.045721][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.052787][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.062301][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 199.101192][ T8970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.120510][ T8962] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 199.159009][ T8968] team0: Port device team_slave_0 added [ 199.169575][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 199.178719][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 199.190116][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 199.199153][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 199.208105][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 199.229027][ T8970] team0: Port device team_slave_0 added [ 199.242821][ T8968] team0: Port device team_slave_1 added [ 199.252729][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 199.261925][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 199.270671][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 199.279379][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 199.288356][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 199.307301][ T8957] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 199.316791][ T8970] team0: Port device team_slave_1 added [ 199.399158][ T8968] device hsr_slave_0 entered promiscuous mode [ 199.455873][ T8968] device hsr_slave_1 entered promiscuous mode [ 199.485368][ T8968] debugfs: Directory 'hsr0' with parent '/' already present! [ 199.498927][ T8966] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 199.569115][ T8966] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 199.608199][ T8966] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 199.671628][ T8966] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 199.730399][ T8960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.791284][ T8970] device hsr_slave_0 entered promiscuous mode [ 199.855590][ T8970] device hsr_slave_1 entered promiscuous mode [ 199.895352][ T8970] debugfs: Directory 'hsr0' with parent '/' already present! [ 199.922662][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 199.930174][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 199.994591][ T8957] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.010137][ T8968] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 200.049942][ T8968] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 200.108349][ T8968] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 200.160513][ T8968] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 200.220715][ T8963] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.241782][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 200.271351][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 200.307406][ T8960] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.317755][ T8970] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 200.351675][ T8970] netdevsim netdevsim5 netdevsim1: renamed from eth1 21:18:20 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340080345367e200f1aaeb0000000a000000005935", @ANYRES32=0x0, @ANYBLOB="f1a1dd6405bc5f48b39f11c1c3c75230180594d028e95f1972d87d3e52c6cba2daccd5f68919dfab2f13a62f867b4d5b9d8a5b9af8652b7350ca26252ea61c5cb72029cf"], 0x3}}, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) setrlimit(0x9, &(0x7f0000000040)) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4018aefa, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) bind$inet(0xffffffffffffffff, 0x0, 0x0) setxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v2={0x2000000, [{0x9, 0x9}, {0x7, 0x6}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f0000000280)='s', 0x1, 0xfffffffffffffffb) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000240)={'rose0\x00', {0x2, 0x4e22, @loopback}}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000000)='asymmetric\x00', &(0x7f00000001c0)=@secondary='builtin_and_secondary_trusted\x00') keyctl$link(0x8, r3, 0x0) keyctl$reject(0x13, r2, 0x3ff, 0x401, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffff01}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r4 = getpid() tkill(r4, 0x9) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 200.400406][ T8970] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 200.421094][ C0] hrtimer: interrupt took 26785 ns [ 200.500184][ T8962] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 200.509371][ T8962] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 200.518066][ T8962] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.525150][ T8962] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.533424][ T8962] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 200.544157][ T8962] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 200.552939][ T8987] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 200.562940][ T8962] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.575990][ T8962] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.591337][ T8970] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 200.672752][ T8963] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.701453][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 200.710657][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 200.721842][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 200.730353][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 200.741753][ T8987] list_del corruption. prev->next should be ffff888096bb9ad0, but was ffff8880aa109d90 [ 200.752281][ T8987] ------------[ cut here ]------------ [ 200.757870][ T8987] kernel BUG at lib/list_debug.c:51! [ 200.763231][ T8987] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 200.769304][ T8987] CPU: 0 PID: 8987 Comm: syz-executor.0 Not tainted 5.5.0-rc1-next-20191211-syzkaller #0 [ 200.776158][ T8960] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 200.779120][ T8987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 200.779138][ T8987] RIP: 0010:__list_del_entry_valid.cold+0xf/0x4f [ 200.779167][ T8987] Code: e8 c9 00 cb fd 0f 0b 48 89 f1 48 c7 c7 c0 10 70 88 4c 89 e6 e8 b5 00 cb fd 0f 0b 4c 89 f6 48 c7 c7 60 12 70 88 e8 a4 00 cb fd <0f> 0b 4c 89 ea 4c 89 f6 48 c7 c7 a0 11 70 88 e8 90 00 cb fd 0f 0b [ 200.789551][ T8960] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 200.799519][ T8987] RSP: 0018:ffffc90002e07858 EFLAGS: 00010282 [ 200.799529][ T8987] RAX: 0000000000000054 RBX: ffff8880aa103420 RCX: 0000000000000000 [ 200.799536][ T8987] RDX: 0000000000000000 RSI: ffffffff815e8576 RDI: fffff520005c0efd [ 200.799543][ T8987] RBP: ffffc90002e07870 R08: 0000000000000054 R09: ffffed1015d06621 [ 200.799550][ T8987] R10: ffffed1015d06620 R11: ffff8880ae833107 R12: ffff8880aa103520 [ 200.799556][ T8987] R13: ffff8880aa109d90 R14: ffff888096bb9ad0 R15: ffff888096bb9ad0 [ 200.799571][ T8987] FS: 00007f55b5119700(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 200.823195][ T8960] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.825467][ T8987] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 200.825474][ T8987] CR2: 00007f98ce1f6000 CR3: 00000000a287e000 CR4: 00000000001426f0 [ 200.825484][ T8987] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 200.825490][ T8987] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 200.825500][ T8987] Call Trace: [ 200.835932][ T8960] kobject: 'vlan0' (000000009e5d6bc6): kobject_add_internal: parent: 'mesh', set: '' [ 200.841864][ T8987] __dentry_kill+0x1fd/0x600 [ 200.841879][ T8987] ? dput+0x38/0xe10 [ 200.912518][ T8970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.920086][ T8987] ? dput+0x38/0xe10 [ 200.920098][ T8987] dput+0x62f/0xe10 [ 200.920115][ T8987] simple_recursive_removal+0x5bc/0x6d0 [ 200.920128][ T8987] ? debugfs_rename+0x7f0/0x7f0 [ 200.920146][ T8987] debugfs_remove+0x5e/0x80 [ 200.938977][ T8970] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.941371][ T8987] kvm_put_kvm+0x136/0xcc0 [ 200.941390][ T8987] ? kvm_irqfd_release+0xe2/0x120 [ 200.972073][ T8970] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 200.974597][ T8987] ? kvm_irqfd_release+0xe2/0x120 [ 200.974616][ T8987] kvm_vm_release+0x44/0x60 [ 200.979170][ T8970] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 200.985675][ T8987] __fput+0x2ff/0x890 [ 200.985689][ T8987] ? kvm_dev_ioctl+0x17d0/0x17d0 [ 200.985701][ T8987] ____fput+0x16/0x20 [ 200.985721][ T8987] task_work_run+0x145/0x1c0 [ 201.005648][ T8970] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.010546][ T8987] do_exit+0x8e7/0x2ef0 [ 201.010564][ T8987] ? mm_update_next_owner+0x7c0/0x7c0 [ 201.015544][ T8970] kobject: 'vlan0' (00000000f182dc9b): kobject_add_internal: parent: 'mesh', set: '' [ 201.025372][ T8987] ? lock_downgrade+0x920/0x920 [ 201.025388][ T8987] ? _raw_spin_unlock_irq+0x23/0x80 [ 201.025404][ T8987] ? get_signal+0x392/0x24f0 [ 201.080220][ T8966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.083747][ T8987] ? _raw_spin_unlock_irq+0x23/0x80 [ 201.095507][ T8987] do_group_exit+0x135/0x360 [ 201.100104][ T8987] get_signal+0x47c/0x24f0 [ 201.104531][ T8987] ? do_vfs_ioctl+0x120/0x14e0 [ 201.105277][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 201.109295][ T8987] do_signal+0x87/0x1700 [ 201.119348][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 201.121666][ T8987] ? __fget+0x37f/0x550 [ 201.121685][ T8987] ? setup_sigcontext+0x7d0/0x7d0 [ 201.130734][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 201.133700][ T8987] ? ksys_dup3+0x3e0/0x3e0 [ 201.133719][ T8987] ? ns_to_kernel_old_timeval+0x100/0x100 [ 201.139694][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 201.146549][ T8987] ? exit_to_usermode_loop+0x43/0x380 [ 201.146561][ T8987] ? do_syscall_64+0x676/0x790 [ 201.146574][ T8987] ? exit_to_usermode_loop+0x43/0x380 [ 201.146591][ T8987] ? lockdep_hardirqs_on+0x421/0x5e0 [ 201.151916][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 201.156703][ T8987] ? trace_hardirqs_on+0x67/0x240 [ 201.156719][ T8987] exit_to_usermode_loop+0x286/0x380 [ 201.156732][ T8987] do_syscall_64+0x676/0x790 [ 201.156752][ T8987] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 201.165415][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 201.169969][ T8987] RIP: 0033:0x45a849 [ 201.169981][ T8987] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 201.169992][ T8987] RSP: 002b:00007f55b5118c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 201.176340][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 201.180227][ T8987] RAX: 0000000000000006 RBX: 0000000000000003 RCX: 000000000045a849 [ 201.186589][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 201.193403][ T8987] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000005 [ 201.193410][ T8987] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 201.193416][ T8987] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f55b51196d4 [ 201.193423][ T8987] R13: 00000000004c3c32 R14: 00000000004d9270 R15: 00000000ffffffff [ 201.193439][ T8987] Modules linked in: [ 201.199377][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 201.203779][ T8987] ---[ end trace 0cb8e616d189586c ]--- [ 201.213726][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 201.214267][ T8987] RIP: 0010:__list_del_entry_valid.cold+0xf/0x4f [ 201.214280][ T8987] Code: e8 c9 00 cb fd 0f 0b 48 89 f1 48 c7 c7 c0 10 70 88 4c 89 e6 e8 b5 00 cb fd 0f 0b 4c 89 f6 48 c7 c7 60 12 70 88 e8 a4 00 cb fd <0f> 0b 4c 89 ea 4c 89 f6 48 c7 c7 a0 11 70 88 e8 90 00 cb fd 0f 0b [ 201.214292][ T8987] RSP: 0018:ffffc90002e07858 EFLAGS: 00010282 [ 201.222681][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 201.226052][ T8987] RAX: 0000000000000054 RBX: ffff8880aa103420 RCX: 0000000000000000 [ 201.226062][ T8987] RDX: 0000000000000000 RSI: ffffffff815e8576 RDI: fffff520005c0efd [ 201.226070][ T8987] RBP: ffffc90002e07870 R08: 0000000000000054 R09: ffffed1015d06621 [ 201.226079][ T8987] R10: ffffed1015d06620 R11: ffff8880ae833107 R12: ffff8880aa103520 [ 201.226087][ T8987] R13: ffff8880aa109d90 R14: ffff888096bb9ad0 R15: ffff888096bb9ad0 [ 201.226107][ T8987] FS: 00007f55b5119700(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 201.246877][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 201.254272][ T8987] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 201.254281][ T8987] CR2: 00007f98ce1f6000 CR3: 00000000a287e000 CR4: 00000000001426f0 [ 201.254291][ T8987] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 201.254298][ T8987] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 201.254305][ T8987] Kernel panic - not syncing: Fatal exception [ 201.263568][ T8987] Kernel Offset: disabled [ 201.471530][ T8987] Rebooting in 86400 seconds..