[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 74.693042][ T27] audit: type=1800 audit(1576123646.377:25): pid=9177 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 74.714460][ T27] audit: type=1800 audit(1576123646.377:26): pid=9177 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 74.773040][ T27] audit: type=1800 audit(1576123646.377:27): pid=9177 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.1.20' (ECDSA) to the list of known hosts. 2019/12/12 04:07:38 fuzzer started 2019/12/12 04:07:39 dialing manager at 10.128.0.26:42497 2019/12/12 04:07:39 syscalls: 2701 2019/12/12 04:07:39 code coverage: enabled 2019/12/12 04:07:39 comparison tracing: enabled 2019/12/12 04:07:39 extra coverage: enabled 2019/12/12 04:07:39 setuid sandbox: enabled 2019/12/12 04:07:39 namespace sandbox: enabled 2019/12/12 04:07:39 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/12 04:07:39 fault injection: enabled 2019/12/12 04:07:39 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/12 04:07:39 net packet injection: enabled 2019/12/12 04:07:39 net device setup: enabled 2019/12/12 04:07:39 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/12/12 04:07:39 devlink PCI setup: PCI device 0000:00:10.0 is not available 04:09:51 executing program 0: 04:09:51 executing program 1: syzkaller login: [ 219.711916][ T9343] IPVS: ftp: loaded support on port[0] = 21 04:09:51 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000002e40)) [ 219.811838][ T9345] IPVS: ftp: loaded support on port[0] = 21 [ 220.040992][ T9343] chnl_net:caif_netlink_parms(): no params data found 04:09:51 executing program 3: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) link(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file1\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) mkdirat$cgroup(r1, &(0x7f0000000140)='syz1\x00', 0x1ff) [ 220.158560][ T9349] IPVS: ftp: loaded support on port[0] = 21 [ 220.208773][ T9345] chnl_net:caif_netlink_parms(): no params data found [ 220.236516][ T9343] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.254158][ T9343] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.275287][ T9343] device bridge_slave_0 entered promiscuous mode [ 220.315753][ T9343] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.322912][ T9343] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.331548][ T9343] device bridge_slave_1 entered promiscuous mode [ 220.372586][ T9351] IPVS: ftp: loaded support on port[0] = 21 [ 220.409979][ T9343] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 220.426284][ T9343] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 220.479300][ T9343] team0: Port device team_slave_0 added [ 220.485738][ T9345] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.492829][ T9345] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.506019][ T9345] device bridge_slave_0 entered promiscuous mode [ 220.521061][ T9343] team0: Port device team_slave_1 added 04:09:52 executing program 4: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000380)='threaded\x00', 0x20a9da14) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x200, 0x0) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f00000000c0)={'rose0\x00', {0x2, 0x4e23, @multicast2}}) clone(0x2102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvfrom$unix(r3, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000180)=0x366, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) recvmsg(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x2000) fsetxattr$system_posix_acl(r2, &(0x7f0000000040)='\xf3t\xd4s\x10ess\x00'/24, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) [ 220.543142][ T9345] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.551029][ T9345] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.561733][ T9345] device bridge_slave_1 entered promiscuous mode [ 220.632965][ T9345] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 220.727409][ T9343] device hsr_slave_0 entered promiscuous mode 04:09:52 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000140)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) r1 = creat(&(0x7f0000000180)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) dup2(r0, r1) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, 0x0) [ 220.804154][ T9343] device hsr_slave_1 entered promiscuous mode [ 220.901555][ T9345] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 220.933313][ T9354] IPVS: ftp: loaded support on port[0] = 21 [ 221.024855][ T9349] chnl_net:caif_netlink_parms(): no params data found [ 221.049070][ T9345] team0: Port device team_slave_0 added [ 221.104427][ T9345] team0: Port device team_slave_1 added [ 221.117282][ T9357] IPVS: ftp: loaded support on port[0] = 21 [ 221.152326][ T9349] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.160079][ T9349] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.168530][ T9349] device bridge_slave_0 entered promiscuous mode [ 221.184162][ T9351] chnl_net:caif_netlink_parms(): no params data found [ 221.197083][ T9349] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.204692][ T9349] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.213131][ T9349] device bridge_slave_1 entered promiscuous mode [ 221.227142][ T9343] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 221.301091][ T9343] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 221.351250][ T9343] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 221.400725][ T9343] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 221.506266][ T9349] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.559191][ T9345] device hsr_slave_0 entered promiscuous mode [ 221.604273][ T9345] device hsr_slave_1 entered promiscuous mode [ 221.644386][ T9345] debugfs: Directory 'hsr0' with parent '/' already present! [ 221.658664][ T9349] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.691552][ T9349] team0: Port device team_slave_0 added [ 221.730945][ T9349] team0: Port device team_slave_1 added [ 221.754310][ T9351] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.761632][ T9351] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.769908][ T9351] device bridge_slave_0 entered promiscuous mode [ 221.803433][ T9351] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.812309][ T9351] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.821032][ T9351] device bridge_slave_1 entered promiscuous mode [ 221.880386][ T9351] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.896219][ T9351] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.977429][ T9349] device hsr_slave_0 entered promiscuous mode [ 222.034396][ T9349] device hsr_slave_1 entered promiscuous mode [ 222.075320][ T9349] debugfs: Directory 'hsr0' with parent '/' already present! [ 222.087395][ T9345] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 222.137788][ T9345] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 222.200841][ T9345] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 222.320573][ T9345] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 222.381634][ T9351] team0: Port device team_slave_0 added [ 222.392604][ T9351] team0: Port device team_slave_1 added [ 222.409185][ T9357] chnl_net:caif_netlink_parms(): no params data found [ 222.419586][ T9354] chnl_net:caif_netlink_parms(): no params data found [ 222.476113][ T9349] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 222.516864][ T9349] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 222.615869][ T9351] device hsr_slave_0 entered promiscuous mode [ 222.644119][ T9351] device hsr_slave_1 entered promiscuous mode [ 222.703900][ T9351] debugfs: Directory 'hsr0' with parent '/' already present! [ 222.731727][ T9349] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 222.798241][ T9357] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.807026][ T9357] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.815895][ T9357] device bridge_slave_0 entered promiscuous mode [ 222.825035][ T9357] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.832111][ T9357] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.840761][ T9357] device bridge_slave_1 entered promiscuous mode [ 222.857800][ T9349] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 222.952062][ T9354] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.959486][ T9354] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.967839][ T9354] device bridge_slave_0 entered promiscuous mode [ 222.977306][ T9354] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.985165][ T9354] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.993019][ T9354] device bridge_slave_1 entered promiscuous mode [ 223.026092][ T9357] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.050051][ T9357] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.064654][ T9354] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.076430][ T9354] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.091537][ T9351] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 223.162063][ T9357] team0: Port device team_slave_0 added [ 223.181040][ T9354] team0: Port device team_slave_0 added [ 223.187976][ T9351] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 223.268543][ T9357] team0: Port device team_slave_1 added [ 223.297818][ T9354] team0: Port device team_slave_1 added [ 223.307647][ T9343] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.315298][ T9351] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 223.428861][ T9357] device hsr_slave_0 entered promiscuous mode [ 223.474176][ T9357] device hsr_slave_1 entered promiscuous mode [ 223.523927][ T9357] debugfs: Directory 'hsr0' with parent '/' already present! [ 223.566607][ T9345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.575477][ T9351] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 223.657519][ T9354] device hsr_slave_0 entered promiscuous mode [ 223.704429][ T9354] device hsr_slave_1 entered promiscuous mode [ 223.744099][ T9354] debugfs: Directory 'hsr0' with parent '/' already present! [ 223.762698][ T9343] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.795989][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 223.807631][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 223.841700][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 223.851397][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 223.860997][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.868474][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.878284][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 223.889618][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 223.898066][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.905154][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.913245][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 223.921712][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 223.934442][ T9345] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.961522][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 223.969736][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 223.983897][ T9354] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 224.017626][ T9354] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 224.071047][ T9354] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 224.125227][ T9357] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 224.158551][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 224.169306][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 224.178691][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 224.188778][ T3218] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.195989][ T3218] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.206905][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 224.217859][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 224.228536][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 224.242737][ T9354] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 224.286187][ T9357] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 224.356928][ T9357] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 224.416783][ T9357] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 224.487976][ T9359] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 224.521058][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 224.530860][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 224.542083][ T3218] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.549595][ T3218] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.558501][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 224.567839][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 224.576791][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 224.585949][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 224.608109][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 224.618065][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 224.627327][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 224.636670][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 224.646176][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 224.680921][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 224.691822][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 224.701069][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 224.711313][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 224.727942][ T9349] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.739685][ T9343] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 224.789591][ T9359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 224.798863][ T9359] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 224.809147][ T9359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 224.818290][ T9359] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 224.835778][ T9349] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.849807][ T9345] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 224.868648][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 224.877017][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 224.910202][ T9351] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.937911][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 224.947219][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 224.955853][ T3218] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.963352][ T3218] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.971802][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 224.980749][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 224.989470][ T3218] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.996601][ T3218] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.004854][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 225.014897][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 225.080265][ T9351] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.091879][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 225.101083][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 225.110729][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 225.120115][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 225.130656][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 225.139292][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 225.147634][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 225.156883][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 225.165991][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 225.174019][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 225.185930][ T9343] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.215030][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 225.232974][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 225.245358][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 225.255731][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 225.265425][ T3218] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.272735][ T3218] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.280896][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 225.290690][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 225.300073][ T3218] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.307376][ T3218] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.316748][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 225.353643][ T9357] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.377702][ T9354] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.387820][ T9345] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.397864][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 225.408471][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 225.418855][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 225.428515][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 225.438603][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready 04:09:57 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r2, &(0x7f0000003980), 0x400000000000002, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="7df700000000030000ff01000000561ac66684c4cd15"], 0x14}}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x0, 0x4}, 0x14}}, 0x0) [ 225.448923][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 225.459065][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 225.468704][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 225.480643][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 225.503431][ T9349] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 225.526591][ T9357] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.553240][ T9352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 225.565338][ T9352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 225.578291][ T9352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 225.589424][ T9352] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 225.623856][ T9351] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 225.640809][ T9351] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 225.669170][ T9354] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.679845][ T9352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 225.691841][ T9352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 225.702334][ T9352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 225.712907][ T9352] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 225.723694][ T9352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 225.739001][ T9352] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 225.748204][ T9352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 225.757218][ T9352] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 225.766151][ T9352] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.773211][ T9352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.781102][ T9352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 225.790012][ T9352] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 225.798992][ T9352] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.806743][ T9352] bridge0: port 2(bridge_slave_1) entered forwarding state 04:09:57 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x1}) socketpair$unix(0x1, 0x2, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)) [ 225.856432][ T9352] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 225.874876][ T9352] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 225.904450][ T9352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 225.921695][ T9352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 04:09:57 executing program 1: pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8476071") write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="80"], 0x1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0x3, 0x0) [ 225.944872][ T9375] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 225.968464][ T9352] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 225.977998][ T9352] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 225.987834][ T9352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 225.999305][ T9352] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 226.009806][ T9352] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.018407][ T9352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.032171][ T9352] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 226.041007][ T9352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 226.050487][ T9352] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 226.068360][ T9374] list_del corruption. prev->next should be ffff8880a56a7eb0, but was ffff88821b825670 [ 226.078765][ T9374] ------------[ cut here ]------------ [ 226.084246][ T9374] kernel BUG at lib/list_debug.c:51! [ 226.089621][ T9374] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 226.095697][ T9374] CPU: 1 PID: 9374 Comm: syz-executor.0 Not tainted 5.5.0-rc1-next-20191211-syzkaller #0 [ 226.105502][ T9374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 226.115606][ T9374] RIP: 0010:__list_del_entry_valid.cold+0xf/0x4f [ 226.121926][ T9374] Code: e8 c9 00 cb fd 0f 0b 48 89 f1 48 c7 c7 c0 10 70 88 4c 89 e6 e8 b5 00 cb fd 0f 0b 4c 89 f6 48 c7 c7 60 12 70 88 e8 a4 00 cb fd <0f> 0b 4c 89 ea 4c 89 f6 48 c7 c7 a0 11 70 88 e8 90 00 cb fd 0f 0b [ 226.141746][ T9374] RSP: 0018:ffffc9000301fc00 EFLAGS: 00010282 [ 226.147841][ T9374] RAX: 0000000000000054 RBX: ffff8882199bce40 RCX: 0000000000000000 [ 226.156018][ T9374] RDX: 0000000000000000 RSI: ffffffff815e8576 RDI: fffff52000603f72 [ 226.164120][ T9374] RBP: ffffc9000301fc18 R08: 0000000000000054 R09: fffffbfff165a7a6 [ 226.172223][ T9374] R10: fffffbfff165a7a5 R11: ffffffff8b2d3d2f R12: ffff8882199bcf40 [ 226.180306][ T9374] R13: ffff88821b825670 R14: ffff8880a56a7eb0 R15: ffff8880a56a7eb0 [ 226.188419][ T9374] FS: 0000000001ffa940(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 226.197364][ T9374] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 226.203979][ T9374] CR2: 0000001b33a24000 CR3: 0000000098e1c000 CR4: 00000000001426e0 [ 226.213489][ T9374] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 226.222380][ T9374] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 226.230356][ T9374] Call Trace: [ 226.233648][ T9374] __dentry_kill+0x1fd/0x600 [ 226.238246][ T9374] ? dput+0x38/0xe10 [ 226.242128][ T9374] ? dput+0x38/0xe10 [ 226.246022][ T9374] dput+0x62f/0xe10 [ 226.249889][ T9374] simple_recursive_removal+0x5bc/0x6d0 [ 226.255448][ T9374] ? debugfs_rename+0x7f0/0x7f0 [ 226.260715][ T9374] debugfs_remove+0x5e/0x80 [ 226.265460][ T9374] kvm_put_kvm+0x136/0xcc0 [ 226.270005][ T9374] ? kvm_irqfd_release+0xe2/0x120 [ 226.275022][ T9374] ? kvm_irqfd_release+0xe2/0x120 [ 226.280037][ T9374] kvm_vm_release+0x44/0x60 [ 226.284547][ T9374] __fput+0x2ff/0x890 [ 226.288532][ T9374] ? kvm_dev_ioctl+0x17d0/0x17d0 [ 226.293464][ T9374] ____fput+0x16/0x20 [ 226.297609][ T9374] task_work_run+0x145/0x1c0 [ 226.302216][ T9374] exit_to_usermode_loop+0x316/0x380 [ 226.307525][ T9374] do_syscall_64+0x676/0x790 [ 226.312231][ T9374] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 226.318172][ T9374] RIP: 0033:0x4144a1 [ 226.322057][ T9374] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 226.342022][ T9374] RSP: 002b:00007ffeb20ea5c0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 226.350604][ T9374] RAX: 0000000000000000 RBX: 0000000000000006 RCX: 00000000004144a1 [ 226.358603][ T9374] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 226.367007][ T9374] RBP: 0000000000000001 R08: 00000000fc2b66a5 R09: 00000000fc2b66a9 [ 226.374979][ T9374] R10: 00007ffeb20ea6a0 R11: 0000000000000293 R12: 000000000075c9a0 [ 226.383009][ T9374] R13: 000000000075c9a0 R14: 00000000007605b0 R15: 000000000075bfd4 [ 226.391991][ T9374] Modules linked in: [ 226.396601][ T9374] ---[ end trace 6f75ebd46e1351c0 ]--- [ 226.402213][ T9374] RIP: 0010:__list_del_entry_valid.cold+0xf/0x4f [ 226.408589][ T9374] Code: e8 c9 00 cb fd 0f 0b 48 89 f1 48 c7 c7 c0 10 70 88 4c 89 e6 e8 b5 00 cb fd 0f 0b 4c 89 f6 48 c7 c7 60 12 70 88 e8 a4 00 cb fd <0f> 0b 4c 89 ea 4c 89 f6 48 c7 c7 a0 11 70 88 e8 90 00 cb fd 0f 0b [ 226.428582][ T9374] RSP: 0018:ffffc9000301fc00 EFLAGS: 00010282 [ 226.435123][ T9374] RAX: 0000000000000054 RBX: ffff8882199bce40 RCX: 0000000000000000 [ 226.443270][ T9374] RDX: 0000000000000000 RSI: ffffffff815e8576 RDI: fffff52000603f72 [ 226.451295][ T9374] RBP: ffffc9000301fc18 R08: 0000000000000054 R09: fffffbfff165a7a6 [ 226.459585][ T9374] R10: fffffbfff165a7a5 R11: ffffffff8b2d3d2f R12: ffff8882199bcf40 [ 226.467624][ T9374] R13: ffff88821b825670 R14: ffff8880a56a7eb0 R15: ffff8880a56a7eb0 [ 226.476131][ T9374] FS: 0000000001ffa940(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 226.485550][ T9374] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 226.492169][ T9374] CR2: 0000001b33a24000 CR3: 0000000098e1c000 CR4: 00000000001426e0 [ 226.500450][ T9374] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 226.508571][ T9374] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 226.516585][ T9374] Kernel panic - not syncing: Fatal exception [ 226.524843][ T9374] Kernel Offset: disabled [ 226.529400][ T9374] Rebooting in 86400 seconds..