[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c.
[   63.804851][   T26] audit: type=1800 audit(1576115389.654:25): pid=8979 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0
[   63.825378][   T26] audit: type=1800 audit(1576115389.654:26): pid=8979 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0
[   63.878894][   T26] audit: type=1800 audit(1576115389.664:27): pid=8979 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0
[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c.

Debian GNU/Linux 7 syzkaller ttyS0

Warning: Permanently added '10.128.1.6' (ECDSA) to the list of known hosts.
2019/12/12 01:50:00 fuzzer started
2019/12/12 01:50:01 dialing manager at 10.128.0.26:42497
2019/12/12 01:50:01 syscalls: 2701
2019/12/12 01:50:01 code coverage: enabled
2019/12/12 01:50:01 comparison tracing: enabled
2019/12/12 01:50:01 extra coverage: enabled
2019/12/12 01:50:01 setuid sandbox: enabled
2019/12/12 01:50:01 namespace sandbox: enabled
2019/12/12 01:50:01 Android sandbox: /sys/fs/selinux/policy does not exist
2019/12/12 01:50:01 fault injection: enabled
2019/12/12 01:50:01 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2019/12/12 01:50:01 net packet injection: enabled
2019/12/12 01:50:01 net device setup: enabled
2019/12/12 01:50:01 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2019/12/12 01:50:01 devlink PCI setup: PCI device 0000:00:10.0 is not available
01:51:55 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
syz_open_dev$vcsa(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00')
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8)
ftruncate(r2, 0x200004)
sendfile(r0, r2, 0x0, 0x80001d00c0d0)
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x4020aea5, 0x0)
openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f0000000180)={0x0, {{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2b}}}}, 0x88)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x4020aea5, &(0x7f0000000a40)={0x0, 0x0, @ioapic})

01:51:55 executing program 1:
r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000580)={0x8, "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", 0x1000}, 0x10000005c)
write$P9_RLCREATE(r0, 0x0, 0xffffffffffffff43)

syzkaller login: [  189.447124][ T9145] IPVS: ftp: loaded support on port[0] = 21
01:51:55 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSIGACCEPT(r0, 0x5607, 0x19)

[  189.641537][ T9147] IPVS: ftp: loaded support on port[0] = 21
[  189.735811][ T9145] chnl_net:caif_netlink_parms(): no params data found
[  189.848403][ T9150] IPVS: ftp: loaded support on port[0] = 21
[  189.876365][ T9145] bridge0: port 1(bridge_slave_0) entered blocking state
[  189.884827][ T9145] bridge0: port 1(bridge_slave_0) entered disabled state
01:51:55 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000010000104000000000200000000000000", @ANYRES32, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800160001000000"], 0x3c}}, 0x0)

[  189.894526][ T9145] device bridge_slave_0 entered promiscuous mode
[  189.905787][ T9145] bridge0: port 2(bridge_slave_1) entered blocking state
[  189.912870][ T9145] bridge0: port 2(bridge_slave_1) entered disabled state
[  189.921170][ T9145] device bridge_slave_1 entered promiscuous mode
[  189.993713][ T9147] chnl_net:caif_netlink_parms(): no params data found
[  190.098934][ T9145] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  190.138262][ T9147] bridge0: port 1(bridge_slave_0) entered blocking state
[  190.154720][ T9147] bridge0: port 1(bridge_slave_0) entered disabled state
[  190.162520][ T9147] device bridge_slave_0 entered promiscuous mode
[  190.176221][ T9145] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  190.198466][ T9147] bridge0: port 2(bridge_slave_1) entered blocking state
[  190.213594][ T9147] bridge0: port 2(bridge_slave_1) entered disabled state
[  190.221697][ T9147] device bridge_slave_1 entered promiscuous mode
[  190.262561][ T9147] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  190.279213][ T9147] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  190.285483][ T9153] IPVS: ftp: loaded support on port[0] = 21
[  190.306126][ T9145] team0: Port device team_slave_0 added
[  190.343121][ T9145] team0: Port device team_slave_1 added
[  190.351473][ T9147] team0: Port device team_slave_0 added
01:51:56 executing program 4:
r0 = socket$inet6(0xa, 0x80003, 0x6b)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8476071")
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)}], 0x1}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00001c5d9f)={0x6, 0x4, 0x87, 0x1}, 0x2c)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r1, &(0x7f0000000280), 0x0}, 0x18)

[  190.417872][ T9147] team0: Port device team_slave_1 added
[  190.445881][ T9150] chnl_net:caif_netlink_parms(): no params data found
[  190.506545][ T9145] device hsr_slave_0 entered promiscuous mode
[  190.563425][ T9145] device hsr_slave_1 entered promiscuous mode
01:51:56 executing program 5:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000740)='/dev/full\x00', 0x80, 0x0)
r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, r0, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x54934df83be7a10c}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$vcsn(&(0x7f0000000600)='/\x0e\xfa\xff\xff\xee\xff\xff\xff\x00', 0x3, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
sendmsg$nl_route(r1, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
bind(0xffffffffffffffff, &(0x7f0000000240)=@pppoe={0x18, 0x0, {0x3, @remote, 'ip6gretap0\x00'}}, 0x80)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x12, r4, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f000000d000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f00000003c0), 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
socket(0x8, 0x5, 0x60)
prctl$PR_MCE_KILL_GET(0x22)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0)
openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0)

[  190.736385][ T9147] device hsr_slave_0 entered promiscuous mode
[  190.773734][ T9147] device hsr_slave_1 entered promiscuous mode
[  190.873323][ T9147] debugfs: Directory 'hsr0' with parent '/' already present!
[  190.900573][ T9150] bridge0: port 1(bridge_slave_0) entered blocking state
[  190.908289][ T9150] bridge0: port 1(bridge_slave_0) entered disabled state
[  190.916360][ T9150] device bridge_slave_0 entered promiscuous mode
[  190.939524][ T9158] IPVS: ftp: loaded support on port[0] = 21
[  190.967735][ T9150] bridge0: port 2(bridge_slave_1) entered blocking state
[  190.975716][ T9150] bridge0: port 2(bridge_slave_1) entered disabled state
[  190.984069][ T9150] device bridge_slave_1 entered promiscuous mode
[  190.986079][ T9156] IPVS: ftp: loaded support on port[0] = 21
[  191.051198][ T9145] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  191.138194][ T9145] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  191.206828][ T9145] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  191.268324][ T9145] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  191.325804][ T9147] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  191.386861][ T9150] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  191.407741][ T9150] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  191.439479][ T9150] team0: Port device team_slave_0 added
[  191.445635][ T9147] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  191.498221][ T9147] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  191.576889][ T9150] team0: Port device team_slave_1 added
[  191.597612][ T9147] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  191.775271][ T9150] device hsr_slave_0 entered promiscuous mode
[  191.823421][ T9150] device hsr_slave_1 entered promiscuous mode
[  191.873211][ T9150] debugfs: Directory 'hsr0' with parent '/' already present!
[  191.882137][ T9153] chnl_net:caif_netlink_parms(): no params data found
[  191.921009][ T9153] bridge0: port 1(bridge_slave_0) entered blocking state
[  191.928284][ T9153] bridge0: port 1(bridge_slave_0) entered disabled state
[  191.936254][ T9153] device bridge_slave_0 entered promiscuous mode
[  191.958581][ T9153] bridge0: port 2(bridge_slave_1) entered blocking state
[  191.966267][ T9153] bridge0: port 2(bridge_slave_1) entered disabled state
[  191.975648][ T9153] device bridge_slave_1 entered promiscuous mode
[  192.042068][ T9153] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  192.099432][ T9153] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  192.143740][ T9153] team0: Port device team_slave_0 added
[  192.155190][ T9158] chnl_net:caif_netlink_parms(): no params data found
[  192.174404][ T9156] chnl_net:caif_netlink_parms(): no params data found
[  192.191517][ T9153] team0: Port device team_slave_1 added
[  192.267986][ T9153] device hsr_slave_0 entered promiscuous mode
[  192.303393][ T9153] device hsr_slave_1 entered promiscuous mode
[  192.353110][ T9153] debugfs: Directory 'hsr0' with parent '/' already present!
[  192.377336][ T9150] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  192.465711][ T9150] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  192.519496][ T9150] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  192.579229][ T9150] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  192.654906][ T9158] bridge0: port 1(bridge_slave_0) entered blocking state
[  192.661998][ T9158] bridge0: port 1(bridge_slave_0) entered disabled state
[  192.670181][ T9158] device bridge_slave_0 entered promiscuous mode
[  192.680709][ T9158] bridge0: port 2(bridge_slave_1) entered blocking state
[  192.689420][ T9158] bridge0: port 2(bridge_slave_1) entered disabled state
[  192.697944][ T9158] device bridge_slave_1 entered promiscuous mode
[  192.722004][ T9158] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  192.731867][ T9156] bridge0: port 1(bridge_slave_0) entered blocking state
[  192.740158][ T9156] bridge0: port 1(bridge_slave_0) entered disabled state
[  192.748111][ T9156] device bridge_slave_0 entered promiscuous mode
[  192.756664][ T9156] bridge0: port 2(bridge_slave_1) entered blocking state
[  192.763894][ T9156] bridge0: port 2(bridge_slave_1) entered disabled state
[  192.771800][ T9156] device bridge_slave_1 entered promiscuous mode
[  192.798899][ T9158] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  192.828361][ T9156] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  192.844330][ T9156] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  192.860231][ T9158] team0: Port device team_slave_0 added
[  192.871825][ T9158] team0: Port device team_slave_1 added
[  192.891721][ T9145] 8021q: adding VLAN 0 to HW filter on device bond0
[  192.930288][ T9156] team0: Port device team_slave_0 added
[  192.939421][ T9156] team0: Port device team_slave_1 added
[  192.946472][ T9153] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  193.005136][ T9153] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  193.048925][ T9153] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  193.101479][ T9153] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  193.238573][ T9158] device hsr_slave_0 entered promiscuous mode
[  193.304822][ T9158] device hsr_slave_1 entered promiscuous mode
[  193.343065][ T9158] debugfs: Directory 'hsr0' with parent '/' already present!
[  193.380884][ T9147] 8021q: adding VLAN 0 to HW filter on device bond0
[  193.456477][ T9156] device hsr_slave_0 entered promiscuous mode
[  193.493811][ T9156] device hsr_slave_1 entered promiscuous mode
[  193.553025][ T9156] debugfs: Directory 'hsr0' with parent '/' already present!
[  193.587229][ T9145] 8021q: adding VLAN 0 to HW filter on device team0
[  193.595773][ T9160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  193.604736][ T9160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  193.655886][ T9158] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  193.687542][ T9158] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  193.736700][ T9158] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  193.793036][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  193.801784][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  193.814177][ T3082] bridge0: port 1(bridge_slave_0) entered blocking state
[  193.821462][ T3082] bridge0: port 1(bridge_slave_0) entered forwarding state
[  193.829971][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  193.839050][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  193.847690][ T3082] bridge0: port 2(bridge_slave_1) entered blocking state
[  193.854777][ T3082] bridge0: port 2(bridge_slave_1) entered forwarding state
[  193.863021][ T9156] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  193.897963][ T9156] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  193.958408][ T9156] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  194.025411][ T9156] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  194.080309][ T9158] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  194.126414][ T9164] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  194.138499][ T9164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  194.147111][ T9164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  194.160072][ T9147] 8021q: adding VLAN 0 to HW filter on device team0
[  194.198159][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  194.210563][ T9150] 8021q: adding VLAN 0 to HW filter on device bond0
[  194.228155][ T9160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  194.249398][ T9160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  194.259202][ T9160] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  194.268200][ T9160] bridge0: port 1(bridge_slave_0) entered blocking state
[  194.275670][ T9160] bridge0: port 1(bridge_slave_0) entered forwarding state
[  194.284238][ T9160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  194.295754][ T9160] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  194.307043][ T3541] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  194.315732][ T3541] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  194.334611][ T9150] 8021q: adding VLAN 0 to HW filter on device team0
[  194.366191][ T9153] 8021q: adding VLAN 0 to HW filter on device bond0
[  194.374575][ T3541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  194.387781][ T3541] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  194.397899][ T3541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  194.406357][ T3541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  194.416287][ T3541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  194.424861][ T3541] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  194.466984][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  194.476201][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  194.485766][ T3082] bridge0: port 2(bridge_slave_1) entered blocking state
[  194.492842][ T3082] bridge0: port 2(bridge_slave_1) entered forwarding state
[  194.502564][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  194.512232][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  194.521070][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  194.529718][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  194.539670][ T3082] bridge0: port 1(bridge_slave_0) entered blocking state
[  194.546793][ T3082] bridge0: port 1(bridge_slave_0) entered forwarding state
[  194.555280][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  194.564068][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  194.572468][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  194.581469][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  194.590054][ T3082] bridge0: port 2(bridge_slave_1) entered blocking state
[  194.597193][ T3082] bridge0: port 2(bridge_slave_1) entered forwarding state
[  194.605501][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  194.614194][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  194.623994][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  194.631972][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  194.653468][ T9145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  194.666220][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  194.677037][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  194.686060][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  194.695277][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  194.704851][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  194.728700][ T9147] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  194.739376][ T9147] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  194.762638][ T9153] 8021q: adding VLAN 0 to HW filter on device team0
[  194.774164][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  194.782611][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  194.797184][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  194.806410][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  194.815084][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  194.823520][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  194.832153][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  194.841685][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  194.850504][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  194.885815][ T9160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  194.895180][ T9160] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  194.904981][ T9160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  194.913850][ T9160] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  194.922098][ T9160] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  194.929922][ T9160] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  194.947959][ T9150] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  194.960213][ T9150] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  194.971616][ T9160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  194.981688][ T9160] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  194.990796][ T9160] bridge0: port 1(bridge_slave_0) entered blocking state
[  194.998182][ T9160] bridge0: port 1(bridge_slave_0) entered forwarding state
[  195.006575][ T9160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  195.015243][ T9160] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  195.023955][ T9160] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  195.047988][ T9147] 8021q: adding VLAN 0 to HW filter on device batadv0
[  195.077234][ T9160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  195.086075][ T9160] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  195.095189][ T9160] bridge0: port 2(bridge_slave_1) entered blocking state
[  195.102242][ T9160] bridge0: port 2(bridge_slave_1) entered forwarding state
[  195.158789][ T3541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  195.178538][ T3541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  195.191121][ T3541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  195.206405][ T3541] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  195.215321][ T3541] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  195.222760][ T3541] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  195.230396][ T3541] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  195.238437][ T3541] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  195.259918][ T9145] 8021q: adding VLAN 0 to HW filter on device batadv0
[  195.283858][ T9160] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  195.292468][ T9160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  195.302401][ T9160] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  195.313859][ T9160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  195.322445][ T9160] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  195.367454][ T3541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  195.387014][ T3541] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  195.431759][ T9158] 8021q: adding VLAN 0 to HW filter on device bond0
[  195.473246][ T9156] 8021q: adding VLAN 0 to HW filter on device bond0
[  195.482363][ T9150] 8021q: adding VLAN 0 to HW filter on device batadv0
[  195.537496][ T9153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  195.578817][ T9156] 8021q: adding VLAN 0 to HW filter on device team0
[  195.596485][    C0] hrtimer: interrupt took 50419 ns
[  195.612504][ T9164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  195.625213][ T9164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  195.644001][ T9164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  195.652175][ T9164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  195.689292][ T9164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  195.721531][ T9164] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  195.743711][ T9164] bridge0: port 1(bridge_slave_0) entered blocking state
[  195.750832][ T9164] bridge0: port 1(bridge_slave_0) entered forwarding state
[  195.765357][ T9158] 8021q: adding VLAN 0 to HW filter on device team0
[  195.793661][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  195.805501][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  195.829605][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  195.848175][ T3082] bridge0: port 1(bridge_slave_0) entered blocking state
[  195.855364][ T3082] bridge0: port 1(bridge_slave_0) entered forwarding state
[  195.881338][   T26] kauditd_printk_skb: 3 callbacks suppressed
01:52:01 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSIGACCEPT(r0, 0x5607, 0x19)

[  195.881350][   T26] audit: type=1800 audit(1576115521.724:31): pid=9173 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=16524 res=0
[  195.923868][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  195.932048][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  195.949758][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  195.965839][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  195.973013][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  195.979469][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
01:52:01 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
syz_open_dev$vcsa(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00')
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8)
ftruncate(r2, 0x200004)
sendfile(r0, r2, 0x0, 0x80001d00c0d0)
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x4020aea5, 0x0)
openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f0000000180)={0x0, {{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2b}}}}, 0x88)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x4020aea5, &(0x7f0000000a40)={0x0, 0x0, @ioapic})

01:52:01 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSIGACCEPT(r0, 0x5607, 0x19)

[  195.996803][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  196.011089][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  196.018280][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  196.038558][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
01:52:02 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSIGACCEPT(r0, 0x5607, 0x19)

[  196.091399][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  196.100485][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  196.128049][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
01:52:02 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x5607, 0x19)

[  196.167604][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  196.202550][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
01:52:02 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x5607, 0x19)

[  196.271513][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  196.347808][ T3541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  196.378316][ T3541] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  196.404187][ T3541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  196.440487][ T3541] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
01:52:02 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x5607, 0x19)

[  196.466471][ T3541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
01:52:02 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
syz_open_dev$vcsa(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00')
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8)
ftruncate(r2, 0x200004)
sendfile(r0, r2, 0x0, 0x80001d00c0d0)
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x4020aea5, 0x0)
openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f0000000180)={0x0, {{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2b}}}}, 0x88)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x4020aea5, &(0x7f0000000a40)={0x0, 0x0, @ioapic})

01:52:02 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSIGACCEPT(r0, 0x5607, 0x19)

[  196.554097][ T3541] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  196.562828][ T3541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  196.579540][ T3541] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  196.591599][ T3541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  196.617825][ T3541] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  196.630196][ T3541] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  196.641432][ T3541] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  196.658148][ T3541] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  196.669392][ T3541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  196.687757][ T3541] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  196.719799][ T9158] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  196.750533][ T9158] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  196.763357][ T9156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  196.793437][ T9160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  196.802057][ T9160] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  196.820952][ T9153] 8021q: adding VLAN 0 to HW filter on device batadv0
[  196.879869][ T9164] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  196.888113][ T9164] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  196.941040][ T9156] 8021q: adding VLAN 0 to HW filter on device batadv0
[  196.962694][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  196.976159][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  197.004620][ T9158] 8021q: adding VLAN 0 to HW filter on device batadv0
[  197.119646][ T9226] netlink: 'syz-executor.3': attribute type 22 has an invalid length.
[  197.149430][ T9229] netlink: 'syz-executor.3': attribute type 22 has an invalid length.
01:52:03 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000010000104000000000200000000000000", @ANYRES32, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800160001000000"], 0x3c}}, 0x0)

[  197.540679][ T9238] netlink: 'syz-executor.3': attribute type 22 has an invalid length.
01:52:03 executing program 1:
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]})
r0 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, 0x0, 0x0)

[  198.184997][ T9249] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  198.348201][ T9248] list_del corruption. prev->next should be ffff888092e4da90, but was ffff8882199ecbf0
[  198.358860][ T9248] ------------[ cut here ]------------
[  198.364355][ T9248] kernel BUG at lib/list_debug.c:51!
[  198.369941][ T9248] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[  198.376019][ T9248] CPU: 1 PID: 9248 Comm: syz-executor.5 Not tainted 5.5.0-rc1-next-20191211-syzkaller #0
[  198.385815][ T9248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  198.395880][ T9248] RIP: 0010:__list_del_entry_valid.cold+0xf/0x4f
[  198.402204][ T9248] Code: e8 c9 00 cb fd 0f 0b 48 89 f1 48 c7 c7 c0 10 70 88 4c 89 e6 e8 b5 00 cb fd 0f 0b 4c 89 f6 48 c7 c7 60 12 70 88 e8 a4 00 cb fd <0f> 0b 4c 89 ea 4c 89 f6 48 c7 c7 a0 11 70 88 e8 90 00 cb fd 0f 0b
[  198.422084][ T9248] RSP: 0018:ffffc900026b7c00 EFLAGS: 00010282
[  198.428158][ T9248] RAX: 0000000000000054 RBX: ffff8882199e9420 RCX: 0000000000000000
[  198.436112][ T9248] RDX: 0000000000000000 RSI: ffffffff815e8576 RDI: fffff520004d6f72
[  198.444071][ T9248] RBP: ffffc900026b7c18 R08: 0000000000000054 R09: fffffbfff165a7a6
[  198.452024][ T9248] R10: fffffbfff165a7a5 R11: ffffffff8b2d3d2f R12: ffff8882199e9520
[  198.459982][ T9248] R13: ffff8882199ecbf0 R14: ffff888092e4da90 R15: ffff888092e4da90
[  198.467939][ T9248] FS:  0000000000f6e940(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000
[  198.476900][ T9248] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  198.483466][ T9248] CR2: 0000001b3012a000 CR3: 00000000a80a8000 CR4: 00000000001426e0
[  198.491520][ T9248] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  198.499474][ T9248] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  198.507587][ T9248] Call Trace:
[  198.511004][ T9248]  __dentry_kill+0x1fd/0x600
[  198.515597][ T9248]  ? dput+0x38/0xe10
[  198.519488][ T9248]  ? dput+0x38/0xe10
[  198.523380][ T9248]  dput+0x62f/0xe10
[  198.527194][ T9248]  simple_recursive_removal+0x5bc/0x6d0
[  198.532740][ T9248]  ? debugfs_rename+0x7f0/0x7f0
[  198.537613][ T9248]  debugfs_remove+0x5e/0x80
[  198.542114][ T9248]  kvm_put_kvm+0x136/0xcc0
[  198.546600][ T9248]  ? kvm_irqfd_release+0xe2/0x120
[  198.551615][ T9248]  ? kvm_irqfd_release+0xe2/0x120
[  198.556632][ T9248]  kvm_vm_release+0x44/0x60
[  198.561116][ T9248]  __fput+0x2ff/0x890
[  198.565091][ T9248]  ? kvm_dev_ioctl+0x17d0/0x17d0
[  198.570010][ T9248]  ____fput+0x16/0x20
[  198.573989][ T9248]  task_work_run+0x145/0x1c0
[  198.578562][ T9248]  exit_to_usermode_loop+0x316/0x380
[  198.583839][ T9248]  do_syscall_64+0x676/0x790
[  198.588414][ T9248]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  198.594288][ T9248] RIP: 0033:0x4144a1
[  198.598170][ T9248] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01
[  198.617885][ T9248] RSP: 002b:00007ffdd40bd170 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
[  198.626493][ T9248] RAX: 0000000000000000 RBX: 000000000000000a RCX: 00000000004144a1
[  198.634604][ T9248] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000009
[  198.642653][ T9248] RBP: 0000000000000001 R08: 00000000a3f6c470 R09: 00000000a3f6c474
[  198.650642][ T9248] R10: 00007ffdd40bd250 R11: 0000000000000293 R12: 000000000075c9a0
[  198.658651][ T9248] R13: 000000000075c9a0 R14: 0000000000762668 R15: 000000000075bfd4
[  198.666617][ T9248] Modules linked in:
[  198.671482][ T9248] ---[ end trace 8a55786498d0c06e ]---
[  198.677046][ T9248] RIP: 0010:__list_del_entry_valid.cold+0xf/0x4f
[  198.683429][ T9248] Code: e8 c9 00 cb fd 0f 0b 48 89 f1 48 c7 c7 c0 10 70 88 4c 89 e6 e8 b5 00 cb fd 0f 0b 4c 89 f6 48 c7 c7 60 12 70 88 e8 a4 00 cb fd <0f> 0b 4c 89 ea 4c 89 f6 48 c7 c7 a0 11 70 88 e8 90 00 cb fd 0f 0b
[  198.703497][ T9248] RSP: 0018:ffffc900026b7c00 EFLAGS: 00010282
[  198.709570][ T9248] RAX: 0000000000000054 RBX: ffff8882199e9420 RCX: 0000000000000000
[  198.717595][ T9248] RDX: 0000000000000000 RSI: ffffffff815e8576 RDI: fffff520004d6f72
[  198.725702][ T9248] RBP: ffffc900026b7c18 R08: 0000000000000054 R09: fffffbfff165a7a6
[  198.734361][ T9248] R10: fffffbfff165a7a5 R11: ffffffff8b2d3d2f R12: ffff8882199e9520
[  198.742361][ T9248] R13: ffff8882199ecbf0 R14: ffff888092e4da90 R15: ffff888092e4da90
[  198.750395][ T9248] FS:  0000000000f6e940(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000
[  198.759360][ T9248] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  198.765972][ T9248] CR2: 0000001b3012a000 CR3: 00000000a80a8000 CR4: 00000000001426e0
[  198.773983][ T9248] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  198.781968][ T9248] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  198.789982][ T9248] Kernel panic - not syncing: Fatal exception
[  198.797530][ T9248] Kernel Offset: disabled
[  198.801864][ T9248] Rebooting in 86400 seconds..