[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 60.647416][ T27] audit: type=1800 audit(1576131153.318:25): pid=8775 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 60.668341][ T27] audit: type=1800 audit(1576131153.328:26): pid=8775 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 60.722581][ T27] audit: type=1800 audit(1576131153.328:27): pid=8775 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.47' (ECDSA) to the list of known hosts. 2019/12/12 06:12:44 fuzzer started 2019/12/12 06:12:45 dialing manager at 10.128.0.26:42497 2019/12/12 06:12:46 syscalls: 2701 2019/12/12 06:12:46 code coverage: enabled 2019/12/12 06:12:46 comparison tracing: enabled 2019/12/12 06:12:46 extra coverage: enabled 2019/12/12 06:12:46 setuid sandbox: enabled 2019/12/12 06:12:46 namespace sandbox: enabled 2019/12/12 06:12:46 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/12 06:12:46 fault injection: enabled 2019/12/12 06:12:46 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/12 06:12:46 net packet injection: enabled 2019/12/12 06:12:46 net device setup: enabled 2019/12/12 06:12:46 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/12/12 06:12:46 devlink PCI setup: PCI device 0000:00:10.0 is not available 06:14:40 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet(0x2, 0x0, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x2f) 06:14:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(0xffffffffffffffff) shutdown(0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) shutdown(0xffffffffffffffff, 0x0) setsockopt$sock_timeval(r1, 0xffff, 0x1006, &(0x7f0000000280)={0x0, 0xffff}, 0x10) r2 = dup2(r1, r0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_MCAST_LEAVE_GROUP(r3, 0x0, 0x51, 0x0, 0x0) recvfrom$inet(r2, 0x0, 0xffffff51, 0x0, 0x0, 0x800e00511) shutdown(r0, 0x0) syzkaller login: [ 187.767084][ T8943] IPVS: ftp: loaded support on port[0] = 21 [ 187.929409][ T8943] chnl_net:caif_netlink_parms(): no params data found 06:14:40 executing program 2: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000480)) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0, 0x8004}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x405a020000000000, &(0x7f0000000040)={0x20000000005, 0x1ff, 0x6000, 0xff, 0x0, 0xffffffffffffffff, 0x0, [0xa003000000000000]}, 0x3c) [ 188.000798][ T8946] IPVS: ftp: loaded support on port[0] = 21 [ 188.023838][ T8943] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.043322][ T8943] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.070125][ T8943] device bridge_slave_0 entered promiscuous mode [ 188.102551][ T8943] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.119754][ T8943] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.128922][ T8943] device bridge_slave_1 entered promiscuous mode [ 188.191004][ T8943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.222831][ T8943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.245238][ T8948] IPVS: ftp: loaded support on port[0] = 21 06:14:41 executing program 3: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000480)) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0, 0x8004}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000000)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x405a020000000000, &(0x7f0000000040)={0x20000000005, 0x1ff, 0x6000, 0xff, 0x0, 0xffffffffffffffff, 0x0, [0xa003000000000000]}, 0x3c) [ 188.302734][ T8943] team0: Port device team_slave_0 added [ 188.367345][ T8943] team0: Port device team_slave_1 added [ 188.473004][ T8943] device hsr_slave_0 entered promiscuous mode 06:14:41 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000200)={@local, 0x0, 0x0, 0x0, 0xe}, 0x20) [ 188.529059][ T8943] device hsr_slave_1 entered promiscuous mode [ 188.585193][ T8946] chnl_net:caif_netlink_parms(): no params data found [ 188.646232][ T8951] IPVS: ftp: loaded support on port[0] = 21 [ 188.731176][ T8946] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.738319][ T8946] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.759826][ T8946] device bridge_slave_0 entered promiscuous mode [ 188.769458][ T8946] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.776520][ T8946] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.809919][ T8946] device bridge_slave_1 entered promiscuous mode [ 188.832789][ T8943] netdevsim netdevsim0 netdevsim0: renamed from eth0 06:14:41 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000480)) bpf$OBJ_GET_MAP(0x7, &(0x7f0000001280)={0x0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x405a020000000000, &(0x7f0000000040)={0x20000000005, 0x1ff, 0x6000, 0xff, 0x0, 0xffffffffffffffff, 0x0, [0xa003000000000000]}, 0x3c) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 188.927790][ T8943] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 189.026500][ T8943] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 189.071799][ T8946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.115762][ T8943] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 189.176832][ T8953] IPVS: ftp: loaded support on port[0] = 21 [ 189.185668][ T8946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.220616][ T8956] IPVS: ftp: loaded support on port[0] = 21 [ 189.272400][ T8946] team0: Port device team_slave_0 added [ 189.278312][ T8948] chnl_net:caif_netlink_parms(): no params data found [ 189.307721][ T8946] team0: Port device team_slave_1 added [ 189.368820][ T8951] chnl_net:caif_netlink_parms(): no params data found [ 189.408059][ T8948] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.415447][ T8948] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.423987][ T8948] device bridge_slave_0 entered promiscuous mode [ 189.433559][ T8948] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.440766][ T8948] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.448569][ T8948] device bridge_slave_1 entered promiscuous mode [ 189.477441][ T8948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.561934][ T8946] device hsr_slave_0 entered promiscuous mode [ 189.629143][ T8946] device hsr_slave_1 entered promiscuous mode [ 189.678938][ T8946] debugfs: Directory 'hsr0' with parent '/' already present! [ 189.695716][ T8948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.724048][ T8951] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.731518][ T8951] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.739371][ T8951] device bridge_slave_0 entered promiscuous mode [ 189.749298][ T8951] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.756416][ T8951] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.764226][ T8951] device bridge_slave_1 entered promiscuous mode [ 189.801234][ T8948] team0: Port device team_slave_0 added [ 189.817744][ T8951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.843924][ T8948] team0: Port device team_slave_1 added [ 189.860222][ T8951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.024084][ T8948] device hsr_slave_0 entered promiscuous mode [ 190.089157][ T8948] device hsr_slave_1 entered promiscuous mode [ 190.138839][ T8948] debugfs: Directory 'hsr0' with parent '/' already present! [ 190.149193][ T8953] chnl_net:caif_netlink_parms(): no params data found [ 190.160397][ T8951] team0: Port device team_slave_0 added [ 190.168386][ T8946] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 190.201677][ T8946] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 190.266316][ T8951] team0: Port device team_slave_1 added [ 190.287439][ T8946] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 190.335779][ T8946] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 190.462088][ T8951] device hsr_slave_0 entered promiscuous mode [ 190.509238][ T8951] device hsr_slave_1 entered promiscuous mode [ 190.548923][ T8951] debugfs: Directory 'hsr0' with parent '/' already present! [ 190.557105][ T8956] chnl_net:caif_netlink_parms(): no params data found [ 190.581438][ T8953] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.588601][ T8953] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.596867][ T8953] device bridge_slave_0 entered promiscuous mode [ 190.605656][ T8953] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.612812][ T8953] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.621871][ T8953] device bridge_slave_1 entered promiscuous mode [ 190.644039][ T8943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.672009][ T8953] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.684951][ T8953] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.706516][ T8948] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 190.772550][ T8948] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 190.841642][ T8948] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 190.910137][ T8953] team0: Port device team_slave_0 added [ 190.926486][ T8953] team0: Port device team_slave_1 added [ 190.935147][ T8948] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 190.992789][ T8955] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 191.002206][ T8955] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 191.044423][ T8943] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.052795][ T8956] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.060203][ T8956] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.067952][ T8956] device bridge_slave_0 entered promiscuous mode [ 191.075831][ T8951] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 191.131891][ T8951] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 191.205090][ T8951] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 191.312131][ T8953] device hsr_slave_0 entered promiscuous mode [ 191.340225][ T8953] device hsr_slave_1 entered promiscuous mode [ 191.388931][ T8953] debugfs: Directory 'hsr0' with parent '/' already present! [ 191.397152][ T8956] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.406200][ T8956] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.417390][ T8956] device bridge_slave_1 entered promiscuous mode [ 191.438746][ T8951] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 191.499727][ T8956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 191.518790][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 191.527476][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 191.536145][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.543382][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.551473][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 191.560986][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 191.569526][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.576568][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.584560][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 191.607782][ T8956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 191.627835][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 191.637782][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 191.683149][ T8956] team0: Port device team_slave_0 added [ 191.704530][ T8953] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 191.741392][ T8963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 191.750170][ T8963] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 191.758551][ T8963] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 191.770329][ T8956] team0: Port device team_slave_1 added [ 191.784183][ T8953] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 191.851162][ T8963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 191.860052][ T8963] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 191.901144][ T8953] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 191.941503][ T8963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 191.952586][ T8963] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 191.961610][ T8963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 191.970180][ T8963] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 191.981068][ T8943] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 192.040991][ T8956] device hsr_slave_0 entered promiscuous mode [ 192.085027][ T8956] device hsr_slave_1 entered promiscuous mode [ 192.118920][ T8956] debugfs: Directory 'hsr0' with parent '/' already present! [ 192.126533][ T8953] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 192.193594][ T8946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.266400][ T8963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 192.274172][ T8963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 192.298826][ T8946] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.305713][ T8956] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 192.354145][ T8956] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 192.405522][ T8956] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 192.460839][ T8956] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 192.511639][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 192.519282][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 192.555730][ T8951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.567956][ T8943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.580703][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 192.591255][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 192.599804][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.606850][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.614885][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 192.623903][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 192.632520][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.639644][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.647356][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 192.657301][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 192.669738][ T8948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.704054][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 192.712337][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 192.723441][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 192.738256][ T8951] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.764049][ T3467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 192.774972][ T3467] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 192.783541][ T3467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 192.791530][ T3467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 192.812973][ T8948] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.862578][ T3467] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 192.873176][ T3467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 192.889748][ T3467] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 192.898489][ T3467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 192.907754][ T3467] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 192.922013][ T3467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 192.931313][ T3467] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 192.940679][ T3467] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.947949][ T3467] bridge0: port 1(bridge_slave_0) entered forwarding state 06:14:45 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x4}]}}, &(0x7f0000000380)=""/155, 0x26, 0x9b, 0x1}, 0x20) [ 192.956179][ T3467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 192.967431][ T3467] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 192.977646][ T3467] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.984817][ T3467] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.995236][ T3467] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 193.003485][ T3467] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 06:14:45 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r1, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r2, 0x29, 0xc9, 0x0, 0x0) [ 193.035726][ T8946] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 193.050689][ T8946] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 193.082328][ T8953] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.104086][ T8955] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 193.123621][ T8955] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 193.137065][ T8955] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.144755][ T8955] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.154072][ T8955] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 193.162742][ T8955] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 193.171619][ T8955] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 193.180528][ T8955] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 193.189598][ T8955] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.196663][ T8955] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.204501][ T8955] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 193.213765][ T8955] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 193.248021][ T8953] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.256025][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 193.264950][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 193.274149][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 193.283195][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 193.291453][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 193.299608][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 06:14:46 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, &(0x7f0000000080)) [ 193.339584][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 193.347439][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 193.361884][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 193.375328][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 193.388485][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 193.397134][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 193.414709][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready 06:14:46 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x32, 0x0, 0x0) [ 193.435385][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 193.451666][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 193.460822][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 193.470123][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready 06:14:46 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap='nodevmap'}, {@afid={'afid', 0x3d, 0x48000000}}, {@mmap='mmap'}, {@cache_mmap='cache=mma\n'}]}}) [ 193.494557][ T8951] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 193.532272][ T8951] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 193.545879][ T8946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.571898][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 193.586274][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 193.592193][ T8985] 9p: Unknown Cache mode mma [ 193.592193][ T8985] [ 193.596559][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 193.613944][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 193.622758][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 193.632347][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 193.640953][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 193.649456][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 193.658157][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 193.668835][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.675897][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.683579][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 193.692644][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 193.701166][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.708352][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.717709][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 193.728450][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 193.738275][ T8986] 9p: Unknown Cache mode mma [ 193.738275][ T8986] 06:14:46 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/112, 0x70}], 0x1}, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xcf1c, 0x0, 0x0, 0x800e00551) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) shutdown(r3, 0x0) recvmsg(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000300)=""/199, 0xc7}, {0x0}], 0x2}, 0x0) shutdown(r1, 0x0) [ 193.754182][ T8948] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 193.784485][ T8963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 193.793527][ T8963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 193.810383][ T8963] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 193.882295][ T8963] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 193.897420][ T8963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 193.908463][ T8963] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 193.924374][ T8963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 193.935297][ T8963] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 193.960676][ T8963] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 193.971497][ T8963] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 06:14:46 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@remote, @in6=@local}, {@in6=@mcast2, 0x0, 0x6c}, @in=@dev, {}, {}, {}, 0x1}}}, 0xf8}}, 0x0) [ 193.994770][ T8963] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 194.003013][ T8963] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 194.011826][ T8963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 194.020433][ T8963] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 194.037453][ T8953] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 06:14:46 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffef) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000000)={0x0, 0x0, @name="ad6579cc00cde381a452bbe1f40d7867e917616b50828a471d38f90f1bba988b"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 194.092573][ T8951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.143161][ T8948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.152926][ T9003] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 194.177598][ T8956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.209477][ T8956] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.221042][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 194.231183][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 194.252229][ T8999] list_del corruption. prev->next should be ffff888096bbef30, but was ffff8880a56ae6b0 [ 194.262849][ T8999] ------------[ cut here ]------------ [ 194.268312][ T8999] kernel BUG at lib/list_debug.c:51! [ 194.273643][ T8999] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 194.279722][ T8999] CPU: 0 PID: 8999 Comm: syz-executor.1 Not tainted 5.5.0-rc1-next-20191211-syzkaller #0 [ 194.289509][ T8999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 194.299568][ T8999] RIP: 0010:__list_del_entry_valid.cold+0xf/0x4f [ 194.305878][ T8999] Code: e8 c9 00 cb fd 0f 0b 48 89 f1 48 c7 c7 c0 10 70 88 4c 89 e6 e8 b5 00 cb fd 0f 0b 4c 89 f6 48 c7 c7 60 12 70 88 e8 a4 00 cb fd <0f> 0b 4c 89 ea 4c 89 f6 48 c7 c7 a0 11 70 88 e8 90 00 cb fd 0f 0b [ 194.325459][ T8999] RSP: 0018:ffffc90002b57c00 EFLAGS: 00010282 [ 194.331517][ T8999] RAX: 0000000000000054 RBX: ffff8880a56aac60 RCX: 0000000000000000 [ 194.339561][ T8999] RDX: 0000000000000000 RSI: ffffffff815e8576 RDI: fffff5200056af72 [ 194.347524][ T8999] RBP: ffffc90002b57c18 R08: 0000000000000054 R09: fffffbfff165a7a6 [ 194.355909][ T8999] R10: fffffbfff165a7a5 R11: ffffffff8b2d3d2f R12: ffff8880a56aad60 [ 194.363879][ T8999] R13: ffff8880a56ae6b0 R14: ffff888096bbef30 R15: ffff888096bbef30 [ 194.371930][ T8999] FS: 00000000020fd940(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 194.380943][ T8999] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 194.387512][ T8999] CR2: 0000001b32c24000 CR3: 000000009280a000 CR4: 00000000001426f0 [ 194.395465][ T8999] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 194.403433][ T8999] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 194.411402][ T8999] Call Trace: [ 194.414676][ T8999] __dentry_kill+0x1fd/0x600 [ 194.419247][ T8999] ? dput+0x38/0xe10 [ 194.423121][ T8999] ? dput+0x38/0xe10 [ 194.427075][ T8999] dput+0x62f/0xe10 [ 194.430883][ T8999] simple_recursive_removal+0x5bc/0x6d0 [ 194.436412][ T8999] ? debugfs_rename+0x7f0/0x7f0 [ 194.441245][ T8999] debugfs_remove+0x5e/0x80 [ 194.445728][ T8999] kvm_put_kvm+0x136/0xcc0 [ 194.450135][ T8999] ? kvm_irqfd_release+0xe2/0x120 [ 194.455146][ T8999] ? kvm_irqfd_release+0xe2/0x120 [ 194.460154][ T8999] kvm_vm_release+0x44/0x60 [ 194.464650][ T8999] __fput+0x2ff/0x890 [ 194.468669][ T8999] ? kvm_dev_ioctl+0x17d0/0x17d0 [ 194.473724][ T8999] ____fput+0x16/0x20 [ 194.477706][ T8999] task_work_run+0x145/0x1c0 [ 194.482294][ T8999] exit_to_usermode_loop+0x316/0x380 [ 194.487562][ T8999] do_syscall_64+0x676/0x790 [ 194.492134][ T8999] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 194.498006][ T8999] RIP: 0033:0x4144a1 [ 194.501880][ T8999] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 194.521471][ T8999] RSP: 002b:00007ffe77c8c330 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 194.529886][ T8999] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 00000000004144a1 [ 194.537882][ T8999] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 194.545922][ T8999] RBP: 0000000000000001 R08: 00000000fc2b66a5 R09: 00000000fc2b66a9 [ 194.553874][ T8999] R10: 00007ffe77c8c410 R11: 0000000000000293 R12: 000000000075c9a0 [ 194.561822][ T8999] R13: 000000000075c9a0 R14: 00000000007605c0 R15: 000000000075bfd4 [ 194.569876][ T8999] Modules linked in: [ 194.573950][ T8999] ---[ end trace 813c02f59c0bdb7d ]--- [ 194.579869][ T8999] RIP: 0010:__list_del_entry_valid.cold+0xf/0x4f [ 194.586280][ T8999] Code: e8 c9 00 cb fd 0f 0b 48 89 f1 48 c7 c7 c0 10 70 88 4c 89 e6 e8 b5 00 cb fd 0f 0b 4c 89 f6 48 c7 c7 60 12 70 88 e8 a4 00 cb fd <0f> 0b 4c 89 ea 4c 89 f6 48 c7 c7 a0 11 70 88 e8 90 00 cb fd 0f 0b [ 194.606138][ T8999] RSP: 0018:ffffc90002b57c00 EFLAGS: 00010282 [ 194.612248][ T8999] RAX: 0000000000000054 RBX: ffff8880a56aac60 RCX: 0000000000000000 [ 194.620266][ T8999] RDX: 0000000000000000 RSI: ffffffff815e8576 RDI: fffff5200056af72 [ 194.628239][ T8999] RBP: ffffc90002b57c18 R08: 0000000000000054 R09: fffffbfff165a7a6 [ 194.636242][ T8999] R10: fffffbfff165a7a5 R11: ffffffff8b2d3d2f R12: ffff8880a56aad60 [ 194.644973][ T8999] R13: ffff8880a56ae6b0 R14: ffff888096bbef30 R15: ffff888096bbef30 [ 194.653006][ T8999] FS: 00000000020fd940(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 194.662096][ T8999] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 194.668703][ T8999] CR2: 0000001b32c24000 CR3: 000000009280a000 CR4: 00000000001426f0 [ 194.676682][ T8999] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 194.684684][ T8999] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 194.692940][ T8999] Kernel panic - not syncing: Fatal exception [ 194.700308][ T8999] Kernel Offset: disabled [ 194.704638][ T8999] Rebooting in 86400 seconds..