[   59.756137][   T27] audit: type=1800 audit(1576106256.207:25): pid=8841 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0
[   59.776214][   T27] audit: type=1800 audit(1576106256.207:26): pid=8841 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0
[   59.803549][   T27] audit: type=1800 audit(1576106256.207:27): pid=8841 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0
[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c.
[   60.312952][ T8916] sshd (8916) used greatest stack depth: 22728 bytes left
[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c.

Debian GNU/Linux 7 syzkaller ttyS0

Warning: Permanently added '10.128.0.124' (ECDSA) to the list of known hosts.
2019/12/11 23:17:48 fuzzer started
2019/12/11 23:17:50 dialing manager at 10.128.0.26:33577
2019/12/11 23:17:50 syscalls: 2701
2019/12/11 23:17:50 code coverage: enabled
2019/12/11 23:17:50 comparison tracing: enabled
2019/12/11 23:17:50 extra coverage: enabled
2019/12/11 23:17:50 setuid sandbox: enabled
2019/12/11 23:17:50 namespace sandbox: enabled
2019/12/11 23:17:50 Android sandbox: /sys/fs/selinux/policy does not exist
2019/12/11 23:17:50 fault injection: enabled
2019/12/11 23:17:50 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2019/12/11 23:17:50 net packet injection: enabled
2019/12/11 23:17:50 net device setup: enabled
2019/12/11 23:17:50 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2019/12/11 23:17:50 devlink PCI setup: PCI device 0000:00:10.0 is not available
23:19:43 executing program 0:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000006180)=[{{0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000003180)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/dev\x00')
preadv(r0, &(0x7f00000017c0), 0x315, 0x0)

23:19:43 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
semop(0x0, &(0x7f0000000140)=[{0x0, 0x3}], 0x1)
semop(0x0, &(0x7f0000000080)=[{}], 0x1)
semctl$IPC_RMID(0x0, 0x0, 0x10)

syzkaller login: [  187.554436][ T9006] IPVS: ftp: loaded support on port[0] = 21
[  187.689832][ T9008] IPVS: ftp: loaded support on port[0] = 21
23:19:44 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
socket(0x840000000002, 0x3, 0xff)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00 \x00', 0x10)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @rand_addr=0xdffffffe}, 0x10)
write$binfmt_elf32(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="51f2faff32460000002b006ce00078c47fffffff"], 0x14)

[  187.762728][ T9006] chnl_net:caif_netlink_parms(): no params data found
[  187.918581][ T9006] bridge0: port 1(bridge_slave_0) entered blocking state
[  187.933945][ T9006] bridge0: port 1(bridge_slave_0) entered disabled state
[  187.953653][ T9006] device bridge_slave_0 entered promiscuous mode
[  187.976803][ T9006] bridge0: port 2(bridge_slave_1) entered blocking state
[  187.993611][ T9006] bridge0: port 2(bridge_slave_1) entered disabled state
[  188.002029][ T9006] device bridge_slave_1 entered promiscuous mode
23:19:44 executing program 3:
r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$lock(r0, 0x6, &(0x7f0000000c00))
getdents(0xffffffffffffffff, 0x0, 0x0)
io_submit(0x0, 0x0, 0x0)
getdents(0xffffffffffffffff, 0x0, 0x0)

[  188.101918][ T9006] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  188.125726][ T9006] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  188.165541][ T9011] IPVS: ftp: loaded support on port[0] = 21
[  188.177116][ T9008] chnl_net:caif_netlink_parms(): no params data found
[  188.217838][ T9006] team0: Port device team_slave_0 added
[  188.265278][ T9006] team0: Port device team_slave_1 added
[  188.319862][ T9008] bridge0: port 1(bridge_slave_0) entered blocking state
[  188.327340][ T9008] bridge0: port 1(bridge_slave_0) entered disabled state
[  188.337423][ T9008] device bridge_slave_0 entered promiscuous mode
[  188.407225][ T9006] device hsr_slave_0 entered promiscuous mode
23:19:44 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
readv(r0, &(0x7f00000004c0)=[{&(0x7f0000000540)=""/232, 0xe8}], 0x1)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
recvfrom$inet(r1, 0x0, 0x8164, 0x0, 0x0, 0x800e00547)
shutdown(r0, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
recvmsg(r2, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000002c0)=""/28, 0x1c}, {0x0}, {0x0}], 0x3}, 0x0)
r3 = dup(r2)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
recvfrom$inet(r4, 0x0, 0xbf9d, 0x0, 0x0, 0x800e0053e)
shutdown(r3, 0x0)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
readv(r5, &(0x7f00000027c0)=[{&(0x7f0000001640)=""/4096, 0x1000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7)
shutdown(r4, 0x0)
shutdown(r1, 0x0)

[  188.474078][ T9006] device hsr_slave_1 entered promiscuous mode
[  188.536660][ T9008] bridge0: port 2(bridge_slave_1) entered blocking state
[  188.555622][ T9008] bridge0: port 2(bridge_slave_1) entered disabled state
[  188.564041][ T9008] device bridge_slave_1 entered promiscuous mode
[  188.630591][ T9008] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  188.645745][ T9014] IPVS: ftp: loaded support on port[0] = 21
[  188.658813][ T9008] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  188.745595][ T9008] team0: Port device team_slave_0 added
23:19:45 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crc32c-generic)\x00'}, 0x58)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r3, &(0x7f0000001580)=[{0x0, 0x0, 0x0}], 0x1, 0x0)

[  188.821936][ T9008] team0: Port device team_slave_1 added
[  188.855143][ T9006] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  188.948502][ T9006] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  189.016421][ T9006] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  189.089012][ T9011] chnl_net:caif_netlink_parms(): no params data found
[  189.100172][ T9017] IPVS: ftp: loaded support on port[0] = 21
[  189.121822][ T9020] IPVS: ftp: loaded support on port[0] = 21
[  189.185699][ T9008] device hsr_slave_0 entered promiscuous mode
[  189.243907][ T9008] device hsr_slave_1 entered promiscuous mode
[  189.293740][ T9008] debugfs: Directory 'hsr0' with parent '/' already present!
[  189.305536][ T9006] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  189.501825][ T9011] bridge0: port 1(bridge_slave_0) entered blocking state
[  189.510142][ T9011] bridge0: port 1(bridge_slave_0) entered disabled state
[  189.518391][ T9011] device bridge_slave_0 entered promiscuous mode
[  189.526273][ T9008] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  189.587261][ T9008] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  189.660140][ T9008] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  189.721237][ T9011] bridge0: port 2(bridge_slave_1) entered blocking state
[  189.729663][ T9011] bridge0: port 2(bridge_slave_1) entered disabled state
[  189.738400][ T9011] device bridge_slave_1 entered promiscuous mode
[  189.771065][ T9008] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  189.843407][ T9011] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  189.896311][ T9011] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  189.908005][ T9014] chnl_net:caif_netlink_parms(): no params data found
[  189.967126][ T9011] team0: Port device team_slave_0 added
[  189.988422][ T9017] chnl_net:caif_netlink_parms(): no params data found
[  190.002400][ T9011] team0: Port device team_slave_1 added
[  190.036832][ T9014] bridge0: port 1(bridge_slave_0) entered blocking state
[  190.044164][ T9014] bridge0: port 1(bridge_slave_0) entered disabled state
[  190.052102][ T9014] device bridge_slave_0 entered promiscuous mode
[  190.062063][ T9014] bridge0: port 2(bridge_slave_1) entered blocking state
[  190.069255][ T9014] bridge0: port 2(bridge_slave_1) entered disabled state
[  190.077229][ T9014] device bridge_slave_1 entered promiscuous mode
[  190.149424][ T9017] bridge0: port 1(bridge_slave_0) entered blocking state
[  190.157036][ T9017] bridge0: port 1(bridge_slave_0) entered disabled state
[  190.168133][ T9017] device bridge_slave_0 entered promiscuous mode
[  190.181365][ T9017] bridge0: port 2(bridge_slave_1) entered blocking state
[  190.188570][ T9017] bridge0: port 2(bridge_slave_1) entered disabled state
[  190.196663][ T9017] device bridge_slave_1 entered promiscuous mode
[  190.207758][ T9014] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  190.265841][ T9011] device hsr_slave_0 entered promiscuous mode
[  190.315423][ T9011] device hsr_slave_1 entered promiscuous mode
[  190.383612][ T9011] debugfs: Directory 'hsr0' with parent '/' already present!
[  190.408515][ T9017] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  190.419465][ T9014] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  190.447405][ T9017] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  190.490018][ T9011] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  190.548830][ T9020] chnl_net:caif_netlink_parms(): no params data found
[  190.578376][ T9017] team0: Port device team_slave_0 added
[  190.588344][ T9011] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  190.667016][ T9011] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  190.730230][ T9014] team0: Port device team_slave_0 added
[  190.739955][ T9017] team0: Port device team_slave_1 added
[  190.752567][ T9011] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  190.809964][ T9014] team0: Port device team_slave_1 added
[  190.819271][ T9006] 8021q: adding VLAN 0 to HW filter on device bond0
[  190.858182][ T9020] bridge0: port 1(bridge_slave_0) entered blocking state
[  190.866629][ T9020] bridge0: port 1(bridge_slave_0) entered disabled state
[  190.875776][ T9020] device bridge_slave_0 entered promiscuous mode
[  190.893226][ T9006] 8021q: adding VLAN 0 to HW filter on device team0
[  190.947043][ T9017] device hsr_slave_0 entered promiscuous mode
[  190.995609][ T9017] device hsr_slave_1 entered promiscuous mode
[  191.033692][ T9017] debugfs: Directory 'hsr0' with parent '/' already present!
[  191.041889][ T9020] bridge0: port 2(bridge_slave_1) entered blocking state
[  191.049246][ T9020] bridge0: port 2(bridge_slave_1) entered disabled state
[  191.057879][ T9020] device bridge_slave_1 entered promiscuous mode
[  191.071563][ T9019] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  191.080493][ T9019] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  191.105193][ T3528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  191.116963][ T3528] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  191.126748][ T3528] bridge0: port 1(bridge_slave_0) entered blocking state
[  191.133977][ T3528] bridge0: port 1(bridge_slave_0) entered forwarding state
[  191.179342][ T9017] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  191.217899][ T9017] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  191.286010][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  191.294081][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  191.302664][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  191.311290][   T22] bridge0: port 2(bridge_slave_1) entered blocking state
[  191.318414][   T22] bridge0: port 2(bridge_slave_1) entered forwarding state
[  191.347738][ T9020] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  191.376663][ T9008] 8021q: adding VLAN 0 to HW filter on device bond0
[  191.385794][ T9017] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  191.467074][ T9014] device hsr_slave_0 entered promiscuous mode
[  191.513947][ T9014] device hsr_slave_1 entered promiscuous mode
[  191.544279][ T9014] debugfs: Directory 'hsr0' with parent '/' already present!
[  191.571772][ T2730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  191.580576][ T2730] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  191.590391][ T2730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  191.599233][ T2730] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  191.607759][ T2730] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  191.620236][ T9020] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  191.642656][ T9017] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  191.714155][ T3115] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  191.722445][ T3115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  191.742727][ T9006] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  191.753550][ T9006] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  191.770562][ T9020] team0: Port device team_slave_0 added
[  191.798713][ T2730] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  191.807709][ T2730] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  191.816778][ T2730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  191.825635][ T2730] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  191.835336][ T2730] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  191.844301][ T2730] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  191.853814][ T9020] team0: Port device team_slave_1 added
[  191.864866][ T2730] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  191.889026][ T9008] 8021q: adding VLAN 0 to HW filter on device team0
[  191.910814][ T9011] 8021q: adding VLAN 0 to HW filter on device bond0
[  191.921405][ T9014] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  191.975658][ T9014] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  192.025706][ T9014] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  192.059817][ T9014] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  192.133029][ T2730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  192.143112][ T2730] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  192.153078][ T2730] bridge0: port 1(bridge_slave_0) entered blocking state
[  192.160272][ T2730] bridge0: port 1(bridge_slave_0) entered forwarding state
[  192.226140][ T9020] device hsr_slave_0 entered promiscuous mode
[  192.264103][ T9020] device hsr_slave_1 entered promiscuous mode
[  192.304078][ T9020] debugfs: Directory 'hsr0' with parent '/' already present!
[  192.341192][ T9019] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  192.350318][ T9019] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  192.358397][ T9019] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  192.367056][ T9019] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  192.377259][ T9019] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  192.385767][ T9019] bridge0: port 2(bridge_slave_1) entered blocking state
[  192.392794][ T9019] bridge0: port 2(bridge_slave_1) entered forwarding state
[  192.400520][ T9019] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  192.420515][ T9011] 8021q: adding VLAN 0 to HW filter on device team0
[  192.452854][ T9006] 8021q: adding VLAN 0 to HW filter on device batadv0
[  192.473852][ T2730] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  192.481731][ T2730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  192.491042][ T2730] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  192.527567][ T2730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  192.540150][ T2730] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  192.549095][ T2730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  192.558329][ T2730] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  192.567368][ T2730] bridge0: port 1(bridge_slave_0) entered blocking state
[  192.574483][ T2730] bridge0: port 1(bridge_slave_0) entered forwarding state
[  192.582051][ T2730] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  192.590929][ T2730] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  192.599421][ T2730] bridge0: port 2(bridge_slave_1) entered blocking state
[  192.606524][ T2730] bridge0: port 2(bridge_slave_1) entered forwarding state
[  192.619783][ T9017] 8021q: adding VLAN 0 to HW filter on device bond0
[  192.649223][ T9020] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  192.692946][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  192.701442][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  192.710932][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  192.722212][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  192.731356][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  192.742721][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  192.752004][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  192.761303][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  192.793702][ T9020] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  192.826818][ T9020] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  192.889317][ T3115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  192.898480][ T3115] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  192.912896][ T3115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  192.922668][ T3115] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  192.932287][ T3115] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  192.941291][ T3115] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  192.950500][ T3115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  192.959569][ T3115] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  192.968403][ T3115] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  192.980726][ T3115] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
23:19:49 executing program 0:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000006180)=[{{0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000003180)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/dev\x00')
preadv(r0, &(0x7f00000017c0), 0x315, 0x0)

[  192.996076][ T9017] 8021q: adding VLAN 0 to HW filter on device team0
[  193.017448][ T9011] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  193.032564][ T9020] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  193.068245][ T3115] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  193.099405][ T9008] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  193.123474][    C0] hrtimer: interrupt took 43453 ns
[  193.149096][ T9008] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  193.204340][ T3115] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  193.214282][ T3115] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  193.223091][ T3115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  193.232410][ T3115] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  193.241784][ T3115] bridge0: port 1(bridge_slave_0) entered blocking state
[  193.249033][ T3115] bridge0: port 1(bridge_slave_0) entered forwarding state
[  193.257408][ T3115] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  193.266286][ T3115] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  193.274969][ T3115] bridge0: port 2(bridge_slave_1) entered blocking state
[  193.282271][ T3115] bridge0: port 2(bridge_slave_1) entered forwarding state
[  193.295992][ T3115] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  193.312737][ T9019] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  193.320888][ T9019] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  193.329190][ T9019] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
23:19:49 executing program 0:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000006180)=[{{0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000003180)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/dev\x00')
preadv(r0, &(0x7f00000017c0), 0x315, 0x0)

[  193.367241][ T9011] 8021q: adding VLAN 0 to HW filter on device batadv0
[  193.393590][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  193.402679][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  193.413584][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  193.445207][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  193.453085][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  193.492017][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  193.501097][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  193.509802][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
23:19:50 executing program 0:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000006180)=[{{0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000003180)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/dev\x00')
preadv(r0, &(0x7f00000017c0), 0x315, 0x0)

[  193.540264][ T9017] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  193.553187][ T9017] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  193.606088][ T9014] 8021q: adding VLAN 0 to HW filter on device bond0
[  193.616403][ T9019] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  193.630159][ T9019] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  193.638165][ T9019] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  193.648646][ T9019] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  193.666233][ T9008] 8021q: adding VLAN 0 to HW filter on device batadv0
[  193.707163][ T9014] 8021q: adding VLAN 0 to HW filter on device team0
[  193.776366][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  193.794252][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  193.814459][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
23:19:50 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
recvfrom$inet(r0, 0x0, 0x8164, 0x0, 0x0, 0x800e00547)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
recvfrom$inet(r1, 0x0, 0x27c9, 0x0, 0x0, 0x800e0053d)
shutdown(r0, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
recvmsg(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000540)=""/20, 0x14}, {0x0}, {0x0}], 0x3}, 0x2)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
recvfrom$inet(r3, 0x0, 0xccf3, 0x0, 0x0, 0x800e00545)
shutdown(r2, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)=""/104, 0x68}, {0x0}], 0x2}, 0x0)
r5 = dup(r4)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
recvfrom$inet(r6, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549)
shutdown(r5, 0x0)
r7 = socket$inet_udplite(0x2, 0x2, 0x88)
recvmsg(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000900)=""/4096, 0x1000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6}, 0x0)
shutdown(r6, 0x0)
shutdown(r3, 0x0)
shutdown(r1, 0x0)

[  193.826156][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  193.855418][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  193.864846][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  193.893205][   T22] bridge0: port 1(bridge_slave_0) entered blocking state
[  193.900414][   T22] bridge0: port 1(bridge_slave_0) entered forwarding state
[  193.914368][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  193.923272][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  193.935770][   T22] bridge0: port 2(bridge_slave_1) entered blocking state
[  193.943110][   T22] bridge0: port 2(bridge_slave_1) entered forwarding state
[  193.958992][ T9017] 8021q: adding VLAN 0 to HW filter on device batadv0
[  193.972654][ T9020] 8021q: adding VLAN 0 to HW filter on device bond0
[  193.995375][ T3528] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  194.019397][ T3528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
23:19:50 executing program 0:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000006180)=[{{0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000003180)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x315, 0x0)

[  194.067729][ T3528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  194.084283][ T9019] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  194.117497][ T9019] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  194.162451][ T9019] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  194.180481][ T9019] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  194.196397][ T9019] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
23:19:50 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x58)
accept4(r0, 0x0, 0x0, 0x0)
bind$alg(r0, &(0x7f0000001240)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw-camellia-asm\x00'}, 0x58)

23:19:50 executing program 0:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000006180)=[{{0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000003180)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x315, 0x0)

[  194.207258][ T9019] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  194.217969][ T9019] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  194.235666][ T9020] 8021q: adding VLAN 0 to HW filter on device team0
[  194.274426][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  194.298660][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  194.324386][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  194.337900][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  194.361362][ T9014] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  194.384860][ T9019] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  194.397145][ T9019] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  194.421292][ T9019] bridge0: port 1(bridge_slave_0) entered blocking state
23:19:50 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @dev}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='netdevsim0\x00', 0x10)
sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6)

[  194.428446][ T9019] bridge0: port 1(bridge_slave_0) entered forwarding state
[  194.443712][ T9019] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  194.454925][ T9019] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  194.463704][ T9019] bridge0: port 2(bridge_slave_1) entered blocking state
[  194.470793][ T9019] bridge0: port 2(bridge_slave_1) entered forwarding state
23:19:50 executing program 0:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000006180)=[{{0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000003180)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x315, 0x0)

[  194.480672][ T9019] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  194.542778][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  194.558924][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  194.618276][ T2730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  194.629222][ T2730] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  194.668773][ T2730] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  194.696686][ T2730] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  194.711129][ T2730] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  194.720203][ T2730] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  194.735598][ T2730] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  194.752301][ T9014] 8021q: adding VLAN 0 to HW filter on device batadv0
[  194.774905][ T3115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  194.786585][ T3115] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  194.839625][ T9020] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  194.901347][ T9020] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  194.938750][ T3115] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  194.957431][ T3115] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  195.047233][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  195.060272][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  195.081581][ T9020] 8021q: adding VLAN 0 to HW filter on device batadv0
23:19:51 executing program 3:
r0 = socket$inet6(0xa, 0x80003, 0x80)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071")
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x24, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0xc, 0x5, [@IFLA_BRPORT_STATE={0x8}]}}}]}, 0x44}}, 0x0)

[  195.254943][ T9109] netlink: 'syz-executor.3': attribute type 1 has an invalid length.
[  195.263641][ T9109] bridge0: port 1(bridge_slave_0) entered disabled state
[  195.290950][ T9109] bridge0: port 1(bridge_slave_0) entered blocking state
[  195.298194][ T9109] bridge0: port 1(bridge_slave_0) entered forwarding state
23:19:51 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
readv(r0, &(0x7f00000004c0)=[{&(0x7f0000000540)=""/232, 0xe8}], 0x1)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
recvfrom$inet(r1, 0x0, 0x8164, 0x0, 0x0, 0x800e00547)
shutdown(r0, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
recvmsg(r2, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000002c0)=""/28, 0x1c}, {0x0}, {0x0}], 0x3}, 0x0)
r3 = dup(r2)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
recvfrom$inet(r4, 0x0, 0xbf9d, 0x0, 0x0, 0x800e0053e)
shutdown(r3, 0x0)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
readv(r5, &(0x7f00000027c0)=[{&(0x7f0000001640)=""/4096, 0x1000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6)
shutdown(r4, 0x0)
shutdown(r1, 0x0)

23:19:51 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setrlimit(0x7, &(0x7f0000000180))
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
dup(r0)

23:19:51 executing program 0:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/dev\x00')
preadv(r0, &(0x7f00000017c0), 0x315, 0x0)

23:19:51 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @dev}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='netdevsim0\x00', 0x10)
sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6)

23:19:51 executing program 5:
r0 = socket$inet(0x10, 0x2, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$unix(0x1, 0x10004000000002, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="24000000520007021dfffd946f6105000a0000001f00000000000800080006000400ff7e", 0x24}], 0x1}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

23:19:51 executing program 3:
r0 = socket$inet6(0xa, 0x80003, 0x80)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071")
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x24, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0xc, 0x5, [@IFLA_BRPORT_STATE={0x8}]}}}]}, 0x44}}, 0x0)

[  195.611267][ T9128] netlink: 'syz-executor.3': attribute type 1 has an invalid length.
[  195.627400][ T9128] bridge0: port 1(bridge_slave_0) entered disabled state
[  195.639402][ T9128] bridge0: port 1(bridge_slave_0) entered blocking state
[  195.646661][ T9128] bridge0: port 1(bridge_slave_0) entered forwarding state
23:19:52 executing program 2:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000022000535d25a80648c63940d0124fc60100002400a000000053582c137153e370900018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
r1 = socket$inet6_dccp(0xa, 0x6, 0x0)
dup2(r1, r0)

23:19:52 executing program 3:
r0 = socket$inet6(0xa, 0x80003, 0x80)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071")
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x24, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0xc, 0x5, [@IFLA_BRPORT_STATE={0x8}]}}}]}, 0x44}}, 0x0)

23:19:52 executing program 0:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/dev\x00')
preadv(r0, &(0x7f00000017c0), 0x315, 0x0)

[  195.807437][ T9141] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:19:52 executing program 2:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000022000535d25a80648c63940d0124fc60100002400a000000053582c137153e370900018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
r1 = socket$inet6_dccp(0xa, 0x6, 0x0)
dup2(r1, r0)

23:19:52 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000022000535d25a80648c63940d0124fc60100002400a000000053582c137153e370900018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
r1 = socket$inet6_dccp(0xa, 0x6, 0x0)
dup2(r1, r0)

23:19:52 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @dev}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='netdevsim0\x00', 0x10)
sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6)

[  195.889679][ T9141] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  195.916178][ T9147] netlink: 'syz-executor.3': attribute type 1 has an invalid length.
[  195.966332][ T9147] bridge0: port 1(bridge_slave_0) entered disabled state
[  195.990379][ T9147] bridge0: port 1(bridge_slave_0) entered blocking state
[  195.997648][ T9147] bridge0: port 1(bridge_slave_0) entered forwarding state
[  196.032739][ T9151] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  196.157796][ T9157] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
23:19:52 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x3]}, 0x5c)

23:19:52 executing program 3:
r0 = socket$inet6(0xa, 0x80003, 0x80)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071")
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x24, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0xc, 0x5, [@IFLA_BRPORT_STATE={0x8}]}}}]}, 0x44}}, 0x0)

23:19:52 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000080))
ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000040))

23:19:52 executing program 0:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/dev\x00')
preadv(r0, &(0x7f00000017c0), 0x315, 0x0)

23:19:52 executing program 2:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000022000535d25a80648c63940d0124fc60100002400a000000053582c137153e370900018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
r1 = socket$inet6_dccp(0xa, 0x6, 0x0)
dup2(r1, r0)

23:19:52 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @dev}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='netdevsim0\x00', 0x10)
sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6)

[  196.472962][ T9171] netlink: 'syz-executor.3': attribute type 1 has an invalid length.
[  196.481687][ T9172] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  196.484850][ T9174] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  196.492313][ T9171] bridge0: port 1(bridge_slave_0) entered disabled state
23:19:53 executing program 2:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000022000535d25a80648c63940d0124fc60100002400a000000053582c137153e370900018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
r1 = socket$inet6_dccp(0xa, 0x6, 0x0)
dup2(r1, r0)

[  196.573343][ T9171] bridge0: port 1(bridge_slave_0) entered blocking state
[  196.580609][ T9171] bridge0: port 1(bridge_slave_0) entered forwarding state
23:19:53 executing program 0:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000006180)=[{{0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000003180)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/dev\x00')
preadv(r0, &(0x7f00000017c0), 0x315, 0x0)

[  196.712066][ T9170] list_del corruption. prev->next should be ffff88809667c6b0, but was ffff88821b8543b0
[  196.718618][ T9185] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  196.722497][ T9170] ------------[ cut here ]------------
[  196.737335][ T9170] kernel BUG at lib/list_debug.c:51!
[  196.742762][ T9170] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[  196.748853][ T9170] CPU: 1 PID: 9170 Comm: syz-executor.5 Not tainted 5.5.0-rc1-next-20191211-syzkaller #0
[  196.758651][ T9170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  196.768728][ T9170] RIP: 0010:__list_del_entry_valid.cold+0xf/0x4f
[  196.775061][ T9170] Code: e8 c9 00 cb fd 0f 0b 48 89 f1 48 c7 c7 c0 10 70 88 4c 89 e6 e8 b5 00 cb fd 0f 0b 4c 89 f6 48 c7 c7 60 12 70 88 e8 a4 00 cb fd <0f> 0b 4c 89 ea 4c 89 f6 48 c7 c7 a0 11 70 88 e8 90 00 cb fd 0f 0b
[  196.794908][ T9170] RSP: 0018:ffffc90002a87c00 EFLAGS: 00010282
[  196.800983][ T9170] RAX: 0000000000000054 RBX: ffff8882199cbb80 RCX: 0000000000000000
[  196.808966][ T9170] RDX: 0000000000000000 RSI: ffffffff815e8576 RDI: fffff52000550f72
[  196.816945][ T9170] RBP: ffffc90002a87c18 R08: 0000000000000054 R09: fffffbfff165a7a6
[  196.824938][ T9170] R10: fffffbfff165a7a5 R11: ffffffff8b2d3d2f R12: ffff8882199cbc80
[  196.832918][ T9170] R13: ffff88821b8543b0 R14: ffff88809667c6b0 R15: ffff88809667c6b0
[  196.840895][ T9170] FS:  0000000000d54940(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000
[  196.849830][ T9170] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  196.856420][ T9170] CR2: 0000001b2f623000 CR3: 00000000a51e4000 CR4: 00000000001426e0
[  196.864409][ T9170] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  196.872385][ T9170] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  196.880786][ T9170] Call Trace:
[  196.884077][ T9170]  __dentry_kill+0x1fd/0x600
[  196.888650][ T9170]  ? dput+0x38/0xe10
[  196.892526][ T9170]  ? dput+0x38/0xe10
[  196.896402][ T9170]  dput+0x62f/0xe10
[  196.900194][ T9170]  simple_recursive_removal+0x5bc/0x6d0
[  196.905740][ T9170]  ? debugfs_rename+0x7f0/0x7f0
[  196.910575][ T9170]  debugfs_remove+0x5e/0x80
[  196.915060][ T9170]  kvm_put_kvm+0x136/0xcc0
[  196.919472][ T9170]  ? kvm_irqfd_release+0xe2/0x120
[  196.924482][ T9170]  ? kvm_irqfd_release+0xe2/0x120
[  196.929485][ T9170]  kvm_vm_release+0x44/0x60
[  196.933969][ T9170]  __fput+0x2ff/0x890
[  196.937935][ T9170]  ? kvm_dev_ioctl+0x17d0/0x17d0
[  196.942875][ T9170]  ____fput+0x16/0x20
[  196.946838][ T9170]  task_work_run+0x145/0x1c0
[  196.951409][ T9170]  exit_to_usermode_loop+0x316/0x380
[  196.956695][ T9170]  do_syscall_64+0x676/0x790
[  196.961293][ T9170]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  196.967177][ T9170] RIP: 0033:0x4143e1
[  196.971235][ T9170] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01
[  196.990818][ T9170] RSP: 002b:00007ffdc334bff0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
[  196.999228][ T9170] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 00000000004143e1
23:19:53 executing program 4:
syz_mount_image$xfs(&(0x7f0000000340)='xfs\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={[{@sunit={'sunit', 0x3d, 0x4}}]})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup3(r0, r1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)

23:19:53 executing program 3:
r0 = socket$inet6(0xa, 0x80003, 0x80)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071")
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0xc, 0x5, [@IFLA_BRPORT_STATE={0x8}]}}}]}, 0x44}}, 0x0)

23:19:53 executing program 2:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000022000535d25a80648c63940d0124fc60100002400a000000053582c137153e370900018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
dup2(0xffffffffffffffff, r0)

23:19:53 executing program 3:
r0 = socket$inet6(0xa, 0x80003, 0x80)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071")
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0xc, 0x5, [@IFLA_BRPORT_STATE={0x8}]}}}]}, 0x44}}, 0x0)

[  197.007269][ T9170] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[  197.015230][ T9170] RBP: 0000000000000001 R08: 00000000fc2b66a5 R09: 00000000fc2b66a9
[  197.023199][ T9170] R10: 00007ffdc334c0d0 R11: 0000000000000293 R12: 000000000075c9a0
[  197.031154][ T9170] R13: 000000000075c9a0 R14: 00000000007603a8 R15: 000000000075bfd4
[  197.039130][ T9170] Modules linked in:
[  197.044116][ T9170] ---[ end trace 147d3be3562de968 ]---
[  197.049611][ T9170] RIP: 0010:__list_del_entry_valid.cold+0xf/0x4f
[  197.056004][ T9170] Code: e8 c9 00 cb fd 0f 0b 48 89 f1 48 c7 c7 c0 10 70 88 4c 89 e6 e8 b5 00 cb fd 0f 0b 4c 89 f6 48 c7 c7 60 12 70 88 e8 a4 00 cb fd <0f> 0b 4c 89 ea 4c 89 f6 48 c7 c7 a0 11 70 88 e8 90 00 cb fd 0f 0b
[  197.075654][ T9170] RSP: 0018:ffffc90002a87c00 EFLAGS: 00010282
[  197.081222][ T4088] kobject: 'loop4' (00000000a126a21f): kobject_uevent_env
[  197.088860][ T9170] RAX: 0000000000000054 RBX: ffff8882199cbb80 RCX: 0000000000000000
[  197.088868][ T9170] RDX: 0000000000000000 RSI: ffffffff815e8576 RDI: fffff52000550f72
[  197.088875][ T9170] RBP: ffffc90002a87c18 R08: 0000000000000054 R09: fffffbfff165a7a6
[  197.088882][ T9170] R10: fffffbfff165a7a5 R11: ffffffff8b2d3d2f R12: ffff8882199cbc80
[  197.088889][ T9170] R13: ffff88821b8543b0 R14: ffff88809667c6b0 R15: ffff88809667c6b0
[  197.088898][ T9170] FS:  0000000000d54940(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000
[  197.088905][ T9170] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  197.088912][ T9170] CR2: 0000001b2f623000 CR3: 00000000a51e4000 CR4: 00000000001426e0
[  197.088921][ T9170] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  197.088929][ T9170] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  197.088937][ T9170] Kernel panic - not syncing: Fatal exception
[  197.090248][ T9170] Kernel Offset: disabled
[  197.179711][ T9170] Rebooting in 86400 seconds..