[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 72.488191][ T27] audit: type=1800 audit(1576116044.096:25): pid=8872 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 72.508155][ T27] audit: type=1800 audit(1576116044.106:26): pid=8872 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 72.617140][ T27] audit: type=1800 audit(1576116044.226:27): pid=8872 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.1.55' (ECDSA) to the list of known hosts. 2019/12/12 02:00:55 fuzzer started 2019/12/12 02:00:57 dialing manager at 10.128.0.26:42497 2019/12/12 02:00:57 syscalls: 2701 2019/12/12 02:00:57 code coverage: enabled 2019/12/12 02:00:57 comparison tracing: enabled 2019/12/12 02:00:57 extra coverage: enabled 2019/12/12 02:00:57 setuid sandbox: enabled 2019/12/12 02:00:57 namespace sandbox: enabled 2019/12/12 02:00:57 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/12 02:00:57 fault injection: enabled 2019/12/12 02:00:57 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/12 02:00:57 net packet injection: enabled 2019/12/12 02:00:57 net device setup: enabled 2019/12/12 02:00:57 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/12/12 02:00:57 devlink PCI setup: PCI device 0000:00:10.0 is not available 02:02:55 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x83) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={0x0, 0x8, 0x8}, 0xc) 02:02:56 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = accept$inet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) tee(r0, r1, 0x0, 0x0) syzkaller login: [ 204.557251][ T9039] IPVS: ftp: loaded support on port[0] = 21 02:02:56 executing program 2: r0 = socket$unix(0x1, 0x5, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) [ 204.778604][ T9039] chnl_net:caif_netlink_parms(): no params data found [ 204.791791][ T9041] IPVS: ftp: loaded support on port[0] = 21 [ 204.902826][ T9039] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.920641][ T9039] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.928653][ T9039] device bridge_slave_0 entered promiscuous mode [ 204.956048][ T9039] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.970063][ T9039] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.990799][ T9039] device bridge_slave_1 entered promiscuous mode [ 205.052532][ T9039] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.074317][ T9044] IPVS: ftp: loaded support on port[0] = 21 [ 205.103545][ T9039] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 02:02:56 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(0x0, r2, 0x0) fchdir(r0) [ 205.174068][ T9039] team0: Port device team_slave_0 added [ 205.181334][ T9041] chnl_net:caif_netlink_parms(): no params data found [ 205.211944][ T9039] team0: Port device team_slave_1 added [ 205.334934][ T9039] device hsr_slave_0 entered promiscuous mode [ 205.390411][ T9039] device hsr_slave_1 entered promiscuous mode 02:02:57 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r2, 0x202002) keyctl$chown(0x3, r2, 0x0, 0x0) [ 205.543920][ T9047] IPVS: ftp: loaded support on port[0] = 21 [ 205.589501][ T9041] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.612120][ T9041] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.620367][ T9041] device bridge_slave_0 entered promiscuous mode [ 205.708987][ T9041] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.717453][ T9041] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.725851][ T9041] device bridge_slave_1 entered promiscuous mode [ 205.754128][ T9050] IPVS: ftp: loaded support on port[0] = 21 02:02:57 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x103000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x1}, 0x1, 0x0, 0x0, 0x40010}, 0x41) r0 = getpid() tkill(r0, 0x9) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000140)="ff", 0x1, 0x0) r1 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) keyctl$unlink(0x9, 0x0, r1) recvmmsg(0xffffffffffffffff, &(0x7f0000000080), 0x21e, 0x0, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)='hugetlbfs\x00', 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 205.805941][ T9039] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 205.866327][ T9039] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 205.935391][ T9041] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.954440][ T9044] chnl_net:caif_netlink_parms(): no params data found [ 205.965092][ T9039] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 206.024419][ T9039] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 206.073435][ T9041] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.122108][ T9041] team0: Port device team_slave_0 added [ 206.135069][ T9053] IPVS: ftp: loaded support on port[0] = 21 [ 206.152272][ T9041] team0: Port device team_slave_1 added [ 206.223045][ T9041] device hsr_slave_0 entered promiscuous mode [ 206.270352][ T9041] device hsr_slave_1 entered promiscuous mode [ 206.330158][ T9041] debugfs: Directory 'hsr0' with parent '/' already present! [ 206.347526][ T9044] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.355237][ T9044] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.364968][ T9044] device bridge_slave_0 entered promiscuous mode [ 206.374508][ T9044] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.381777][ T9044] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.389539][ T9044] device bridge_slave_1 entered promiscuous mode [ 206.417027][ T9044] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.462573][ T9044] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.548102][ T9044] team0: Port device team_slave_0 added [ 206.571270][ T9041] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 206.661467][ T9044] team0: Port device team_slave_1 added [ 206.684498][ T9041] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 206.747304][ T9041] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 206.794164][ T9041] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 206.903471][ T9044] device hsr_slave_0 entered promiscuous mode [ 206.940506][ T9044] device hsr_slave_1 entered promiscuous mode [ 206.980108][ T9044] debugfs: Directory 'hsr0' with parent '/' already present! [ 206.992013][ T9047] chnl_net:caif_netlink_parms(): no params data found [ 207.122386][ T9047] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.129579][ T9047] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.138254][ T9047] device bridge_slave_0 entered promiscuous mode [ 207.146808][ T9047] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.154248][ T9047] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.162295][ T9047] device bridge_slave_1 entered promiscuous mode [ 207.180721][ T9053] chnl_net:caif_netlink_parms(): no params data found [ 207.195868][ T9039] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.219104][ T9044] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 207.300088][ T3003] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 207.308317][ T3003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 207.322380][ T9047] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.333352][ T9044] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 207.375229][ T9050] chnl_net:caif_netlink_parms(): no params data found [ 207.388783][ T9039] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.399191][ T9047] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.414141][ T9044] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 207.473307][ T9044] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 207.556880][ T9047] team0: Port device team_slave_0 added [ 207.581884][ T9053] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.589022][ T9053] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.597185][ T9053] device bridge_slave_0 entered promiscuous mode [ 207.617453][ T9047] team0: Port device team_slave_1 added [ 207.651758][ T9053] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.658840][ T9053] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.668091][ T9053] device bridge_slave_1 entered promiscuous mode [ 207.678999][ T9052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 207.688725][ T9052] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 207.697450][ T9052] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.704804][ T9052] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.714507][ T9052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 207.723388][ T9052] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 207.731905][ T9052] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.739019][ T9052] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.747342][ T9052] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 207.803593][ T9047] device hsr_slave_0 entered promiscuous mode [ 207.850594][ T9047] device hsr_slave_1 entered promiscuous mode [ 207.920143][ T9047] debugfs: Directory 'hsr0' with parent '/' already present! [ 207.937062][ T9050] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.945905][ T9050] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.954045][ T9050] device bridge_slave_0 entered promiscuous mode [ 207.986639][ T9050] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.994891][ T9050] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.004412][ T9050] device bridge_slave_1 entered promiscuous mode [ 208.034831][ T3003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 208.046323][ T9053] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.058038][ T9053] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.082579][ T9050] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.128037][ T9050] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.165500][ T9041] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.185126][ T3003] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 208.193916][ T3003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 208.202843][ T3003] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 208.212236][ T3003] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 208.221027][ T3003] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 208.229507][ T3003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 208.237904][ T3003] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 208.246540][ T3003] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 208.265102][ T9053] team0: Port device team_slave_0 added [ 208.277703][ T9053] team0: Port device team_slave_1 added [ 208.299862][ T9047] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 208.352670][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 208.361241][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 208.378336][ T9041] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.444285][ T9053] device hsr_slave_0 entered promiscuous mode [ 208.500494][ T9053] device hsr_slave_1 entered promiscuous mode [ 208.540188][ T9053] debugfs: Directory 'hsr0' with parent '/' already present! [ 208.553879][ T9047] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 208.606693][ T9050] team0: Port device team_slave_0 added [ 208.619045][ T3003] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 208.626892][ T3003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 208.638112][ T9039] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 208.660367][ T9047] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 208.713498][ T9050] team0: Port device team_slave_1 added [ 208.719263][ T9047] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 208.796928][ T9044] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.830128][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 208.838685][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 208.847434][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.854553][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.862566][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 208.932380][ T9050] device hsr_slave_0 entered promiscuous mode [ 208.984563][ T9050] device hsr_slave_1 entered promiscuous mode [ 209.041703][ T9050] debugfs: Directory 'hsr0' with parent '/' already present! [ 209.080939][ T9044] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.101150][ T3003] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 209.114573][ T3003] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 209.123837][ T3003] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.131019][ T3003] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.139460][ T3003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 209.148275][ T3003] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 209.156890][ T3003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 209.166003][ T3003] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 209.174679][ T3003] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 209.183820][ T3003] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 209.192805][ T3003] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 209.200553][ T3003] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 209.208010][ T3003] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 209.216035][ T3003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 209.224195][ T3003] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 209.236219][ T9053] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 209.286521][ T9053] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 209.346439][ T9053] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 209.407317][ T9041] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 209.418814][ T9041] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 209.433225][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 209.442130][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 209.452021][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 209.461071][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 209.469311][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 209.497653][ T9053] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 209.560317][ T9039] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.599042][ T9050] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 209.658843][ T9050] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 209.706649][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 209.722818][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 209.732469][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.739676][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.757849][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 209.766915][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 209.776341][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.783479][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.792386][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready 02:03:01 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x83) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={0x0, 0x8, 0x8}, 0xc) [ 209.803125][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 209.815101][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 209.839766][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 209.855302][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 209.865758][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 209.881803][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready 02:03:01 executing program 0: [ 209.907185][ T9050] netdevsim netdevsim4 netdevsim2: renamed from eth2 02:03:01 executing program 0: [ 209.945187][ T9050] netdevsim netdevsim4 netdevsim3: renamed from eth3 02:03:01 executing program 0: [ 210.012860][ T9044] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 210.029574][ T9044] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 210.049498][ T3003] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 210.058636][ T3003] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 210.073020][ T3003] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 210.093777][ T3003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready 02:03:01 executing program 0: [ 210.111524][ T3003] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 210.126722][ T3003] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 210.135752][ T3003] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready 02:03:01 executing program 0: [ 210.167298][ T9041] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.190416][ T3003] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 02:03:01 executing program 0: [ 210.279130][ T9052] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 210.288880][ T9052] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 210.327912][ T9044] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.368766][ T9047] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.500227][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 210.508066][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 210.523441][ T9047] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.544737][ T9053] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.572772][ T9050] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.590199][ T3003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 210.601762][ T3003] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 210.616942][ T3003] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.624119][ T3003] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.633709][ T3003] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 210.659554][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 210.674218][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 210.700620][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.707725][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state 02:03:02 executing program 1: [ 210.746861][ T9053] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.783986][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 210.796610][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 210.815414][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 210.826711][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 210.839409][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 210.855546][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 210.866760][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 210.882041][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 210.893082][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready 02:03:02 executing program 2: [ 210.916744][ T9050] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.945127][ T3003] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 210.976112][ T3003] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 210.985441][ T3003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 211.019033][ T3003] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 211.028251][ T3003] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.035397][ T3003] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.045342][ T3003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 211.056606][ T3003] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 211.065382][ T3003] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.072482][ T3003] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.088448][ T9047] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 211.099883][ T9047] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 211.124452][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 211.132869][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 211.143257][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 211.152316][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 211.163097][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 211.174787][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 211.183538][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 211.194114][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 211.203133][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.210260][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.218188][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 211.245906][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 211.254630][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 211.263710][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 211.273185][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.280870][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.311697][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 211.319155][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 211.328048][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 211.337156][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 211.346395][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 211.360406][ T9047] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.372067][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 211.383010][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 211.399016][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 211.408060][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 211.417230][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 211.425911][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 211.435847][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 211.444910][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 211.460124][ T9052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 211.469176][ T9052] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 211.478443][ T9052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 211.487191][ T9052] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 211.508076][ T9053] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 211.525525][ T9053] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 211.539156][ T9052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 211.547963][ T9052] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 211.556487][ T9052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 211.565288][ T9052] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 211.574302][ T9052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 211.582980][ T9052] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 211.592053][ T9052] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 211.610854][ T9050] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 211.659345][ T9052] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 211.668450][ T9052] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 211.690149][ T9052] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 02:03:03 executing program 3: [ 211.707086][ T9052] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 211.719323][ T9053] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.733754][ T9050] 8021q: adding VLAN 0 to HW filter on device batadv0 02:03:03 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r2, 0x202002) keyctl$chown(0x3, r2, 0x0, 0x0) [ 212.039958][ C0] hrtimer: interrupt took 64292 ns 02:03:03 executing program 5: 02:03:03 executing program 0: 02:03:03 executing program 1: 02:03:03 executing program 2: 02:03:03 executing program 3: 02:03:03 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r2, 0x202002) keyctl$chown(0x3, r2, 0x0, 0x0) 02:03:03 executing program 0: 02:03:03 executing program 2: 02:03:04 executing program 3: 02:03:04 executing program 5: 02:03:04 executing program 1: 02:03:04 executing program 0: 02:03:04 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r2, 0x202002) keyctl$chown(0x3, r2, 0x0, 0x0) 02:03:04 executing program 2: 02:03:04 executing program 5: 02:03:04 executing program 3: 02:03:04 executing program 1: 02:03:04 executing program 0: 02:03:04 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x3, r2, 0x0, 0x0) 02:03:04 executing program 3: 02:03:04 executing program 2: 02:03:04 executing program 5: 02:03:04 executing program 1: 02:03:04 executing program 0: 02:03:04 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x3, r2, 0x0, 0x0) 02:03:04 executing program 3: 02:03:04 executing program 5: 02:03:04 executing program 1: 02:03:04 executing program 2: 02:03:04 executing program 2: 02:03:04 executing program 5: 02:03:04 executing program 0: 02:03:04 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.stet\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) sendmsg$kcm(r1, &(0x7f0000000540)={&(0x7f0000000380)=@in={0x2, 0x4e23, @rand_addr=0x7fffffff}, 0x80, 0x0}, 0xfd00) write$cgroup_subtree(r1, &(0x7f0000000280), 0x0) 02:03:04 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x1}) 02:03:04 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x3, r2, 0x0, 0x0) 02:03:05 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) 02:03:05 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid_for_children\x00') clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 02:03:05 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) keyctl$setperm(0x5, 0x0, 0x202002) keyctl$chown(0x3, 0x0, 0x0, 0x0) [ 213.488105][ T9197] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 02:03:05 executing program 2: 02:03:05 executing program 3: [ 213.627909][ T9194] list_del corruption. prev->next should be ffff888090b75bf0, but was ffff8882199e39b0 [ 213.638963][ T9194] ------------[ cut here ]------------ [ 213.644448][ T9194] kernel BUG at lib/list_debug.c:51! [ 213.649805][ T9194] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 213.655880][ T9194] CPU: 1 PID: 9194 Comm: syz-executor.1 Not tainted 5.5.0-rc1-next-20191211-syzkaller #0 [ 213.665673][ T9194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 213.675751][ T9194] RIP: 0010:__list_del_entry_valid.cold+0xf/0x4f [ 213.682086][ T9194] Code: e8 c9 00 cb fd 0f 0b 48 89 f1 48 c7 c7 c0 10 70 88 4c 89 e6 e8 b5 00 cb fd 0f 0b 4c 89 f6 48 c7 c7 60 12 70 88 e8 a4 00 cb fd <0f> 0b 4c 89 ea 4c 89 f6 48 c7 c7 a0 11 70 88 e8 90 00 cb fd 0f 0b [ 213.701696][ T9194] RSP: 0018:ffffc90001757c00 EFLAGS: 00010282 [ 213.707771][ T9194] RAX: 0000000000000054 RBX: ffff8880aa0ca040 RCX: 0000000000000000 [ 213.715749][ T9194] RDX: 0000000000000000 RSI: ffffffff815e8576 RDI: fffff520002eaf72 02:03:05 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid_for_children\x00') clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 213.718400][ T4088] kobject: 'loop3' (0000000007023a9b): kobject_uevent_env [ 213.723717][ T9194] RBP: ffffc90001757c18 R08: 0000000000000054 R09: fffffbfff165a7a6 [ 213.723723][ T9194] R10: fffffbfff165a7a5 R11: ffffffff8b2d3d2f R12: ffff8880aa0ca140 [ 213.723729][ T9194] R13: ffff8882199e39b0 R14: ffff888090b75bf0 R15: ffff888090b75bf0 [ 213.723738][ T9194] FS: 000000000223f940(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 213.723746][ T9194] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 213.723752][ T9194] CR2: 0000001b30c23000 CR3: 000000009babe000 CR4: 00000000001426e0 02:03:05 executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid_for_children\x00') clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 213.723761][ T9194] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 213.723766][ T9194] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 213.723771][ T9194] Call Trace: [ 213.723796][ T9194] __dentry_kill+0x1fd/0x600 [ 213.723805][ T9194] ? dput+0x38/0xe10 [ 213.723822][ T9194] ? dput+0x38/0xe10 [ 213.756232][ T4088] kobject: 'loop3' (0000000007023a9b): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 213.763730][ T9194] dput+0x62f/0xe10 [ 213.763746][ T9194] simple_recursive_removal+0x5bc/0x6d0 [ 213.763761][ T9194] ? debugfs_rename+0x7f0/0x7f0 [ 213.763774][ T9194] debugfs_remove+0x5e/0x80 [ 213.763787][ T9194] kvm_put_kvm+0x136/0xcc0 [ 213.763801][ T9194] ? kvm_irqfd_release+0xe2/0x120 [ 213.763811][ T9194] ? kvm_irqfd_release+0xe2/0x120 [ 213.763821][ T9194] kvm_vm_release+0x44/0x60 [ 213.763839][ T9194] __fput+0x2ff/0x890 [ 213.842126][ T4088] kobject: 'loop5' (000000001279bb6c): kobject_uevent_env [ 213.843122][ T9194] ? kvm_dev_ioctl+0x17d0/0x17d0 [ 213.843142][ T9194] ____fput+0x16/0x20 02:03:05 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f00000000c0)={0x7a, 0x0, [0x3b], [0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) 02:03:05 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) keyctl$setperm(0x5, 0x0, 0x202002) keyctl$chown(0x3, 0x0, 0x0, 0x0) [ 213.868519][ T4088] kobject: 'loop5' (000000001279bb6c): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 213.868701][ T9194] task_work_run+0x145/0x1c0 [ 213.892300][ T9194] exit_to_usermode_loop+0x316/0x380 [ 213.897597][ T9194] do_syscall_64+0x676/0x790 [ 213.902211][ T9194] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 213.908113][ T9194] RIP: 0033:0x4144a1 [ 213.912013][ T9194] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 213.931616][ T9194] RSP: 002b:00007ffcc914d4d0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 213.940039][ T9194] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 00000000004144a1 [ 213.948099][ T9194] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 213.955457][ T4088] kobject: 'loop4' (00000000e68535e7): kobject_uevent_env [ 213.956074][ T9194] RBP: 0000000000000001 R08: 00000000fc2b66a5 R09: 00000000fc2b66a9 [ 213.971127][ T9194] R10: 00007ffcc914d5b0 R11: 0000000000000293 R12: 000000000075bfc8 02:03:05 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid_for_children\x00') clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 213.979359][ T9194] R13: 0000000000034249 R14: 00000000007604c0 R15: 000000000075bfd4 [ 213.987333][ T9194] Modules linked in: [ 213.988836][ T4088] kobject: 'loop4' (00000000e68535e7): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 213.991284][ T9194] ---[ end trace e46e7673aa3bb5be ]--- [ 213.991309][ T9194] RIP: 0010:__list_del_entry_valid.cold+0xf/0x4f [ 213.991321][ T9194] Code: e8 c9 00 cb fd 0f 0b 48 89 f1 48 c7 c7 c0 10 70 88 4c 89 e6 e8 b5 00 cb fd 0f 0b 4c 89 f6 48 c7 c7 60 12 70 88 e8 a4 00 cb fd <0f> 0b 4c 89 ea 4c 89 f6 48 c7 c7 a0 11 70 88 e8 90 00 cb fd 0f 0b [ 213.991334][ T9194] RSP: 0018:ffffc90001757c00 EFLAGS: 00010282 [ 214.039073][ T9194] RAX: 0000000000000054 RBX: ffff8880aa0ca040 RCX: 0000000000000000 [ 214.047079][ T9194] RDX: 0000000000000000 RSI: ffffffff815e8576 RDI: fffff520002eaf72 [ 214.055083][ T9194] RBP: ffffc90001757c18 R08: 0000000000000054 R09: fffffbfff165a7a6 [ 214.063091][ T9194] R10: fffffbfff165a7a5 R11: ffffffff8b2d3d2f R12: ffff8880aa0ca140 [ 214.071101][ T9194] R13: ffff8882199e39b0 R14: ffff888090b75bf0 R15: ffff888090b75bf0 [ 214.079082][ T9194] FS: 000000000223f940(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 214.088060][ T9194] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 214.093304][ T4088] kobject: 'loop2' (0000000045501d25): kobject_uevent_env [ 214.094678][ T9194] CR2: 0000001b30c23000 CR3: 000000009babe000 CR4: 00000000001426e0 [ 214.109766][ T9194] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 214.117786][ T9194] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 214.125799][ T9194] Kernel panic - not syncing: Fatal exception [ 214.133458][ T9194] Kernel Offset: disabled [ 214.137787][ T9194] Rebooting in 86400 seconds..