[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 61.596361][ T28] audit: type=1800 audit(1576133354.864:25): pid=8824 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 61.616713][ T28] audit: type=1800 audit(1576133354.864:26): pid=8824 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 61.640041][ T28] audit: type=1800 audit(1576133354.864:27): pid=8824 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.16' (ECDSA) to the list of known hosts. 2019/12/12 06:49:27 fuzzer started 2019/12/12 06:49:28 dialing manager at 10.128.0.26:42497 2019/12/12 06:49:29 syscalls: 2701 2019/12/12 06:49:29 code coverage: enabled 2019/12/12 06:49:29 comparison tracing: enabled 2019/12/12 06:49:29 extra coverage: enabled 2019/12/12 06:49:29 setuid sandbox: enabled 2019/12/12 06:49:29 namespace sandbox: enabled 2019/12/12 06:49:29 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/12 06:49:29 fault injection: enabled 2019/12/12 06:49:29 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/12 06:49:29 net packet injection: enabled 2019/12/12 06:49:29 net device setup: enabled 2019/12/12 06:49:29 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/12/12 06:49:29 devlink PCI setup: PCI device 0000:00:10.0 is not available 06:50:57 executing program 0: clock_adjtime(0x0, &(0x7f0000000300)={0x3b, 0x0, 0x0, 0x0, 0x0, 0x9}) 06:50:57 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) open(0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x0, 0x2, 0x0) setreuid(0xffffffffffffffff, 0x0) chown(&(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0x0) syzkaller login: [ 164.371763][ T8992] IPVS: ftp: loaded support on port[0] = 21 [ 164.502186][ T8992] chnl_net:caif_netlink_parms(): no params data found [ 164.553174][ T8992] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.560860][ T8992] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.571557][ T8992] device bridge_slave_0 entered promiscuous mode [ 164.581484][ T8992] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.588624][ T8992] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.599249][ T8992] device bridge_slave_1 entered promiscuous mode [ 164.645338][ T8995] IPVS: ftp: loaded support on port[0] = 21 [ 164.655273][ T8992] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 164.672516][ T8992] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 06:50:58 executing program 2: socket$vsock_stream(0x28, 0x1, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) getpgid(0x0) capset(0x0, 0x0) syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) write(r1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x40, 0x0, 0x3f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 164.727625][ T8992] team0: Port device team_slave_0 added [ 164.750740][ T8992] team0: Port device team_slave_1 added [ 164.843221][ T8992] device hsr_slave_0 entered promiscuous mode [ 164.880041][ T8992] device hsr_slave_1 entered promiscuous mode 06:50:58 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r2, 0x9000aea4, 0x0) [ 164.973317][ T8997] IPVS: ftp: loaded support on port[0] = 21 [ 165.097110][ T8992] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 165.156301][ T8992] netdevsim netdevsim0 netdevsim1: renamed from eth1 06:50:58 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f00000001c0)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x12, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f0000000080)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000600)={'ip_vti0\x00', 0x201e}) socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) inotify_init() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 165.242309][ T8995] chnl_net:caif_netlink_parms(): no params data found [ 165.262317][ T8992] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 165.303737][ T9000] IPVS: ftp: loaded support on port[0] = 21 [ 165.324170][ T8992] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 165.452449][ T9002] IPVS: ftp: loaded support on port[0] = 21 06:50:58 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f00000001c0)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x12, 0x1) r1 = getuid() r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={'ip_vti0\x00', 0x201e}) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNSETGROUP(r2, 0x400454ce, 0x0) fchown(0xffffffffffffffff, r1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) inotify_init() fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 165.563093][ T8995] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.575417][ T8995] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.590812][ T8995] device bridge_slave_0 entered promiscuous mode [ 165.606875][ T8997] chnl_net:caif_netlink_parms(): no params data found [ 165.636771][ T8995] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.659762][ T8995] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.668025][ T8995] device bridge_slave_1 entered promiscuous mode [ 165.791593][ T8995] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.812181][ T8997] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.819249][ T8997] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.833221][ T9006] IPVS: ftp: loaded support on port[0] = 21 [ 165.841317][ T8997] device bridge_slave_0 entered promiscuous mode [ 165.851569][ T8997] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.858623][ T8997] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.867033][ T8997] device bridge_slave_1 entered promiscuous mode [ 165.884517][ T8995] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.944208][ T8997] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.956674][ T8997] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.980369][ T8995] team0: Port device team_slave_0 added [ 165.993085][ T8992] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.014902][ T9000] chnl_net:caif_netlink_parms(): no params data found [ 166.032916][ T8995] team0: Port device team_slave_1 added [ 166.074240][ T8997] team0: Port device team_slave_0 added [ 166.082627][ T8997] team0: Port device team_slave_1 added [ 166.127366][ T8992] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.211707][ T8997] device hsr_slave_0 entered promiscuous mode [ 166.260545][ T8997] device hsr_slave_1 entered promiscuous mode [ 166.299842][ T8997] debugfs: Directory 'hsr0' with parent '/' already present! [ 166.314111][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 166.322249][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 166.381688][ T8995] device hsr_slave_0 entered promiscuous mode [ 166.440022][ T8995] device hsr_slave_1 entered promiscuous mode [ 166.490289][ T8995] debugfs: Directory 'hsr0' with parent '/' already present! [ 166.498293][ T9000] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.505819][ T9000] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.514262][ T9000] device bridge_slave_0 entered promiscuous mode [ 166.524486][ T9000] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.532317][ T9000] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.540414][ T9000] device bridge_slave_1 entered promiscuous mode [ 166.588450][ T9000] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.600169][ T9002] chnl_net:caif_netlink_parms(): no params data found [ 166.634354][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 166.643220][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 166.651959][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.659176][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.667459][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 166.677065][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 166.685726][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.692793][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.702003][ T9000] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.766763][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 166.776375][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 166.809059][ T8997] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 166.878255][ T9002] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.885438][ T9002] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.897069][ T9002] device bridge_slave_0 entered promiscuous mode [ 166.904568][ T9010] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 166.921646][ T8997] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 166.978274][ T9000] team0: Port device team_slave_0 added [ 166.984884][ T9002] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.992201][ T9002] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.000296][ T9002] device bridge_slave_1 entered promiscuous mode [ 167.022430][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 167.030966][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 167.039293][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 167.048475][ T8995] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 167.115286][ T8997] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 167.172318][ T9000] team0: Port device team_slave_1 added [ 167.178048][ T8997] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 167.253016][ T9002] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.265660][ T9002] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 167.276699][ T8995] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 167.331997][ T9006] chnl_net:caif_netlink_parms(): no params data found [ 167.368920][ T9008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 167.378709][ T9008] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 167.395879][ T8992] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 167.407261][ T8992] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 167.424138][ T8995] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 167.494107][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 167.504104][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 167.513371][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 167.521993][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 167.573356][ T9000] device hsr_slave_0 entered promiscuous mode [ 167.610124][ T9000] device hsr_slave_1 entered promiscuous mode [ 167.649830][ T9000] debugfs: Directory 'hsr0' with parent '/' already present! [ 167.657448][ T8995] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 167.704759][ T9002] team0: Port device team_slave_0 added [ 167.715260][ T9006] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.722533][ T9006] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.733188][ T9006] device bridge_slave_0 entered promiscuous mode [ 167.742246][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 167.769505][ T9002] team0: Port device team_slave_1 added [ 167.781158][ T9006] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.788281][ T9006] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.796859][ T9006] device bridge_slave_1 entered promiscuous mode [ 167.848106][ T9006] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.884085][ T9008] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 167.892499][ T9008] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 167.941765][ T9002] device hsr_slave_0 entered promiscuous mode [ 168.010304][ T9002] device hsr_slave_1 entered promiscuous mode [ 168.069797][ T9002] debugfs: Directory 'hsr0' with parent '/' already present! [ 168.079586][ T9006] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.106811][ T8992] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.120832][ T9000] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 168.151492][ T9000] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 168.210913][ T9000] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 168.259235][ T9006] team0: Port device team_slave_0 added [ 168.271546][ T9000] netdevsim netdevsim3 netdevsim3: renamed from eth3 06:51:01 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SELLOADLUT(0xffffffffffffffff, 0x541c, 0x0) r0 = gettid() setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) keyctl$set_reqkey_keyring(0xe, 0x0) syncfs(0xffffffffffffffff) r1 = epoll_create(0xffff) fcntl$setsig(r1, 0xa, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) keyctl$update(0x2, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) ioctl$TCGETA(0xffffffffffffffff, 0x5405, 0x0) tkill(r0, 0x1000000000016) [ 168.340614][ T9006] team0: Port device team_slave_1 added 06:51:01 executing program 0: r0 = gettid() setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) timer_gettime(0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) accept$unix(0xffffffffffffffff, 0x0, 0x0) clock_gettime(0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, 0x0) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) tkill(r0, 0x1000000000016) [ 168.513357][ T9006] device hsr_slave_0 entered promiscuous mode [ 168.570343][ T9006] device hsr_slave_1 entered promiscuous mode 06:51:01 executing program 0: perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xa, 0x80}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000028c0)=[{{0x0, 0x22f, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') fcntl$setpipe(r1, 0x407, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(r2, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) fcntl$setsig(0xffffffffffffffff, 0xa, 0xb) [ 168.620011][ T9006] debugfs: Directory 'hsr0' with parent '/' already present! [ 168.627779][ T9002] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 168.716939][ T9002] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 168.786275][ T8997] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.818046][ T9002] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 168.849449][ T9006] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 168.894181][ T8995] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.901769][ T9002] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 168.952061][ T9006] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 169.002885][ T9006] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 169.087022][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 169.095893][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 169.107603][ T8997] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.122858][ T9006] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 169.167384][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 169.175564][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 169.183685][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 169.192445][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 169.201720][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.208787][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.219958][ T8995] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.261017][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 169.269577][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 169.281503][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 169.290415][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.297460][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.305353][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 169.313982][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 169.322542][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.329630][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.338995][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 169.347170][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 169.355844][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 169.364142][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.371241][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.432958][ T9010] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 169.442964][ T9010] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 169.451776][ T9010] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 169.461716][ T9010] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 169.470436][ T9010] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready 06:51:02 executing program 0: r0 = open(0x0, 0x0, 0x0) symlinkat(&(0x7f0000000040)='./file1\x00', 0xffffffffffffffff, 0x0) mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40046602, &(0x7f0000000080)=0x20094042) open(&(0x7f0000000000)='.\x00', 0x0, 0xe784119d65323459) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac604ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) shutdown(r1, 0x1) [ 169.479118][ T9010] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 169.488335][ T9010] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 169.498258][ T9010] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 169.507462][ T9010] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 169.517177][ T9010] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 169.540842][ T9000] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.556789][ T8995] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 169.590981][ T8995] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 169.612801][ T9008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 169.624008][ T9008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 169.638519][ T9008] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 169.648604][ T9008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 169.664083][ T9008] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 169.673069][ T9008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 169.682501][ T9008] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready 06:51:03 executing program 0: r0 = open(0x0, 0x0, 0x0) symlinkat(&(0x7f0000000040)='./file1\x00', 0xffffffffffffffff, 0x0) mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40046602, &(0x7f0000000080)=0x20094042) open(&(0x7f0000000000)='.\x00', 0x0, 0xe784119d65323459) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac604ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) shutdown(r1, 0x1) [ 169.691600][ T9008] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 169.746804][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 169.756294][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 169.778888][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 169.794633][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 169.807601][ T8997] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 169.827572][ T8997] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 169.866624][ T9000] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.887077][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 169.899025][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready 06:51:03 executing program 0: r0 = open(0x0, 0x0, 0x0) symlinkat(&(0x7f0000000040)='./file1\x00', 0xffffffffffffffff, 0x0) mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40046602, &(0x7f0000000080)=0x20094042) open(&(0x7f0000000000)='.\x00', 0x0, 0xe784119d65323459) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac604ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) shutdown(r1, 0x1) [ 169.911196][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 169.939409][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 169.961501][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 169.977936][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 169.986860][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.994080][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.007722][ T9006] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.024031][ T8995] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.058785][ T2732] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 170.075016][ T2732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 170.087750][ T2732] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready 06:51:03 executing program 0: r0 = open(0x0, 0x0, 0x0) symlinkat(&(0x7f0000000040)='./file1\x00', 0xffffffffffffffff, 0x0) mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40046602, &(0x7f0000000080)=0x20094042) open(&(0x7f0000000000)='.\x00', 0x0, 0xe784119d65323459) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac604ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) shutdown(r1, 0x1) [ 170.106451][ T2732] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.113593][ T2732] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.173339][ T2732] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 170.184229][ T2732] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 170.229613][ T9006] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.274072][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 170.288218][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 170.298128][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 170.307680][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 170.317021][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 170.325851][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 170.338280][ T9002] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.351504][ T8997] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.372910][ T9008] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 170.393289][ T9008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 170.408351][ T9008] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 170.438043][ T9002] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.447735][ T9050] devpts: called with bogus options [ 170.456473][ T9008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 170.466886][ T9008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 170.475704][ T9008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 170.484523][ T9008] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 170.493374][ T9008] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.500505][ T9008] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.526669][ T9000] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 170.546949][ T9000] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 170.570228][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 170.578303][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 170.587531][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 170.596074][ C0] hrtimer: interrupt took 27289 ns [ 170.605070][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 170.613948][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 170.622970][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.630068][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.637777][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 170.647160][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 170.655568][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 170.693273][ T9008] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 170.701764][ T9008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 170.711692][ T9008] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 170.720890][ T9008] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.727929][ T9008] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.736062][ T9008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 170.744764][ T9008] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 170.753220][ T9008] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.760417][ T9008] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.768032][ T9008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 170.776678][ T9008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 170.785249][ T9008] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 170.793852][ T9008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 170.802406][ T9008] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 170.809902][ T9008] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 170.827797][ T9000] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.846066][ T2732] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 170.856837][ T2732] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 170.865235][ T2732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 170.874205][ T2732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 170.884275][ T2732] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 170.892856][ T2732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 170.901705][ T2732] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 170.920366][ T2732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 170.929159][ T2732] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 170.938489][ T2732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 170.948295][ T2732] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 170.957724][ T2732] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 170.978286][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 170.987537][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 170.996908][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 171.005921][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 171.029082][ T9002] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 171.042005][ T9002] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 171.063052][ T9010] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 171.076104][ T9010] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 171.088271][ T9060] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 171.097334][ T9006] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 171.145390][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 171.153810][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 171.183657][ T9059] list_del corruption. prev->next should be ffff8880aa033670, but was ffff8880a56650f0 [ 171.194061][ T9059] ------------[ cut here ]------------ [ 171.199618][ T9059] kernel BUG at lib/list_debug.c:51! [ 171.205184][ T9059] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 171.211255][ T9059] CPU: 0 PID: 9059 Comm: syz-executor.3 Not tainted 5.5.0-rc1-next-20191211-syzkaller #0 [ 171.221050][ T9059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 171.231145][ T9059] RIP: 0010:__list_del_entry_valid.cold+0xf/0x4f [ 171.237465][ T9059] Code: e8 c9 00 cb fd 0f 0b 48 89 f1 48 c7 c7 c0 10 70 88 4c 89 e6 e8 b5 00 cb fd 0f 0b 4c 89 f6 48 c7 c7 60 12 70 88 e8 a4 00 cb fd <0f> 0b 4c 89 ea 4c 89 f6 48 c7 c7 a0 11 70 88 e8 90 00 cb fd 0f 0b [ 171.252480][ T9002] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.257080][ T9059] RSP: 0018:ffffc90002b9fc00 EFLAGS: 00010282 [ 171.266491][ T9002] kobject: 'vlan0' (00000000f6be3eba): kobject_add_internal: parent: 'mesh', set: '' [ 171.269872][ T9059] RAX: 0000000000000054 RBX: ffff8880a56626e0 RCX: 0000000000000000 [ 171.269880][ T9059] RDX: 0000000000000000 RSI: ffffffff815e8576 RDI: fffff52000573f72 [ 171.269887][ T9059] RBP: ffffc90002b9fc18 R08: 0000000000000054 R09: fffffbfff165a7a6 [ 171.269896][ T9059] R10: fffffbfff165a7a5 R11: ffffffff8b2d3d2f R12: ffff8880a56627e0 [ 171.269902][ T9059] R13: ffff8880a56650f0 R14: ffff8880aa033670 R15: ffff8880aa033670 [ 171.269912][ T9059] FS: 000000000296e940(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 171.269919][ T9059] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 171.269926][ T9059] CR2: 0000001b2e323000 CR3: 00000000989ee000 CR4: 00000000001426f0 [ 171.269936][ T9059] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 171.269942][ T9059] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 171.269947][ T9059] Call Trace: [ 171.269975][ T9059] __dentry_kill+0x1fd/0x600 [ 171.368348][ T9059] ? dput+0x38/0xe10 [ 171.372249][ T9059] ? dput+0x38/0xe10 [ 171.376143][ T9059] dput+0x62f/0xe10 [ 171.379962][ T9059] simple_recursive_removal+0x5bc/0x6d0 [ 171.384431][ T4088] kobject: 'loop4' (00000000423f020d): kobject_uevent_env [ 171.385512][ T9059] ? debugfs_rename+0x7f0/0x7f0 [ 171.397449][ T9059] debugfs_remove+0x5e/0x80 [ 171.401963][ T9059] kvm_put_kvm+0x136/0xcc0 [ 171.403614][ T4088] kobject: 'loop4' (00000000423f020d): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 171.406381][ T9059] ? kvm_irqfd_release+0xe2/0x120 [ 171.406392][ T9059] ? kvm_irqfd_release+0xe2/0x120 [ 171.406408][ T9059] kvm_vm_release+0x44/0x60 [ 171.431052][ T9059] __fput+0x2ff/0x890 [ 171.435045][ T9059] ? kvm_dev_ioctl+0x17d0/0x17d0 [ 171.439996][ T9059] ____fput+0x16/0x20 [ 171.444070][ T9059] task_work_run+0x145/0x1c0 [ 171.448665][ T9059] exit_to_usermode_loop+0x316/0x380 [ 171.453962][ T9059] do_syscall_64+0x676/0x790 [ 171.458563][ T9059] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 171.464445][ T9059] RIP: 0033:0x4144a1 [ 171.468318][ T9059] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 171.487917][ T9059] RSP: 002b:00007fffd1759bd0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 171.496321][ T9059] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 00000000004144a1 [ 171.504302][ T9059] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 171.512267][ T9059] RBP: 0000000000000001 R08: 00000000fc2b66a5 R09: 00000000fc2b66a9 [ 171.512334][ T4088] kobject: 'loop2' (00000000def571a0): kobject_uevent_env [ 171.520247][ T9059] R10: 00007fffd1759cb0 R11: 0000000000000293 R12: 000000000075c9a0 [ 171.520254][ T9059] R13: 000000000075c9a0 R14: 0000000000760218 R15: 000000000075bfd4 [ 171.520266][ T9059] Modules linked in: [ 171.521774][ T9059] ---[ end trace 064ccd58a9831251 ]--- [ 171.535062][ T4088] kobject: 'loop2' (00000000def571a0): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 171.535659][ T9059] RIP: 0010:__list_del_entry_valid.cold+0xf/0x4f [ 171.569452][ T9059] Code: e8 c9 00 cb fd 0f 0b 48 89 f1 48 c7 c7 c0 10 70 88 4c 89 e6 e8 b5 00 cb fd 0f 0b 4c 89 f6 48 c7 c7 60 12 70 88 e8 a4 00 cb fd <0f> 0b 4c 89 ea 4c 89 f6 48 c7 c7 a0 11 70 88 e8 90 00 cb fd 0f 0b [ 171.589092][ T9059] RSP: 0018:ffffc90002b9fc00 EFLAGS: 00010282 [ 171.595172][ T9059] RAX: 0000000000000054 RBX: ffff8880a56626e0 RCX: 0000000000000000 [ 171.603166][ T9059] RDX: 0000000000000000 RSI: ffffffff815e8576 RDI: fffff52000573f72 [ 171.611161][ T9059] RBP: ffffc90002b9fc18 R08: 0000000000000054 R09: fffffbfff165a7a6 [ 171.619130][ T9059] R10: fffffbfff165a7a5 R11: ffffffff8b2d3d2f R12: ffff8880a56627e0 [ 171.625922][ T4088] kobject: 'loop1' (00000000d3967b59): kobject_uevent_env [ 171.627149][ T9059] R13: ffff8880a56650f0 R14: ffff8880aa033670 R15: ffff8880aa033670 [ 171.642246][ T9059] FS: 000000000296e940(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 171.651222][ T9059] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 171.654932][ T4088] kobject: 'loop1' (00000000d3967b59): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 171.657804][ T9059] CR2: 0000001b2e323000 CR3: 00000000989ee000 CR4: 00000000001426f0 [ 171.657815][ T9059] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 171.657822][ T9059] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 171.657830][ T9059] Kernel panic - not syncing: Fatal exception [ 171.669360][ T9059] Kernel Offset: disabled [ 171.703609][ T9059] Rebooting in 86400 seconds..