[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 82.407206][ T27] audit: type=1800 audit(1577653513.402:25): pid=8952 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 82.426992][ T27] audit: type=1800 audit(1577653513.402:26): pid=8952 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 82.496052][ T27] audit: type=1800 audit(1577653513.402:27): pid=8952 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.189' (ECDSA) to the list of known hosts. 2019/12/29 21:05:22 fuzzer started 2019/12/29 21:05:24 dialing manager at 10.128.0.26:35753 2019/12/29 21:05:30 syscalls: 2685 2019/12/29 21:05:30 code coverage: enabled 2019/12/29 21:05:30 comparison tracing: enabled 2019/12/29 21:05:30 extra coverage: enabled 2019/12/29 21:05:30 setuid sandbox: enabled 2019/12/29 21:05:30 namespace sandbox: enabled 2019/12/29 21:05:30 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/29 21:05:30 fault injection: enabled 2019/12/29 21:05:30 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/29 21:05:30 net packet injection: enabled 2019/12/29 21:05:30 net device setup: enabled 2019/12/29 21:05:30 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/12/29 21:05:30 devlink PCI setup: PCI device 0000:00:10.0 is not available 21:07:03 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000140)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x11\x00', 0x19, 0x2, 0x268, [0x20000540, 0x0, 0x0, 0x20000748, 0x20000778], 0x90, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"]}, 0x2e0) 21:07:03 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) write$eventfd(r0, 0x0, 0x0) syzkaller login: [ 192.550393][ T9121] IPVS: ftp: loaded support on port[0] = 21 [ 192.744767][ T9121] chnl_net:caif_netlink_parms(): no params data found [ 192.767674][ T9124] IPVS: ftp: loaded support on port[0] = 21 [ 192.832774][ T9121] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.840910][ T9121] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.850487][ T9121] device bridge_slave_0 entered promiscuous mode 21:07:03 executing program 2: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000010307841da508000000000000200a0009000100031d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) [ 192.874971][ T9121] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.882796][ T9121] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.892074][ T9121] device bridge_slave_1 entered promiscuous mode [ 192.939562][ T9121] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 192.966172][ T9121] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.075097][ T9121] team0: Port device team_slave_0 added [ 193.083197][ T9121] team0: Port device team_slave_1 added [ 193.105119][ T9124] chnl_net:caif_netlink_parms(): no params data found [ 193.107235][ T9127] IPVS: ftp: loaded support on port[0] = 21 21:07:04 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="fbbfaccdbdd1e27c3300000079abd58233e3e4692201d1932a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x306, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x14}]}, 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002a00)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x306, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r5, 0x5}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) [ 193.193572][ T9121] device hsr_slave_0 entered promiscuous mode [ 193.240406][ T9121] device hsr_slave_1 entered promiscuous mode [ 193.371647][ T9124] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.378734][ T9124] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.410188][ T9124] device bridge_slave_0 entered promiscuous mode [ 193.441972][ T9124] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.462677][ T9124] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.480004][ T9124] device bridge_slave_1 entered promiscuous mode 21:07:04 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000002c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000e000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000300)="640f4bef0f01cb66b8c74400000f23c00f21f8663500000b000f23f8660fd2b005000f3266b8010000000f01c1baf80c66b848e2658e66efbafc0c66b80e00000066ef0f01c50f090fae01"}], 0x338, 0x0, 0x0, 0x184) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000100)) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000004cb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, &(0x7f0000000440)) [ 193.497533][ T9121] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 193.570659][ T9121] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 193.603029][ T9121] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 193.668201][ T9129] IPVS: ftp: loaded support on port[0] = 21 [ 193.698829][ T9124] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.719677][ T9121] netdevsim netdevsim0 netdevsim3: renamed from eth3 21:07:04 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af22, &(0x7f0000000080)) [ 193.772004][ T9124] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.807138][ T9131] IPVS: ftp: loaded support on port[0] = 21 [ 193.938982][ T9124] team0: Port device team_slave_0 added [ 193.982858][ T9127] chnl_net:caif_netlink_parms(): no params data found [ 193.993171][ T9124] team0: Port device team_slave_1 added [ 193.994519][ T9134] IPVS: ftp: loaded support on port[0] = 21 [ 194.114529][ T9127] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.124372][ T9127] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.132774][ T9127] device bridge_slave_0 entered promiscuous mode [ 194.143860][ T9127] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.151039][ T9127] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.158659][ T9127] device bridge_slave_1 entered promiscuous mode [ 194.242651][ T9124] device hsr_slave_0 entered promiscuous mode [ 194.281027][ T9124] device hsr_slave_1 entered promiscuous mode [ 194.329186][ T9124] debugfs: Directory 'hsr0' with parent '/' already present! [ 194.396905][ T9129] chnl_net:caif_netlink_parms(): no params data found [ 194.414774][ T9127] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.430175][ T9127] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.462691][ T9131] chnl_net:caif_netlink_parms(): no params data found [ 194.485202][ T9127] team0: Port device team_slave_0 added [ 194.536119][ T9127] team0: Port device team_slave_1 added [ 194.562915][ T9124] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 194.645520][ T9124] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 194.703949][ T9124] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 194.761573][ T9124] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 194.824812][ T9131] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.832444][ T9131] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.840434][ T9131] device bridge_slave_0 entered promiscuous mode [ 194.848648][ T9129] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.859090][ T9129] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.866811][ T9129] device bridge_slave_0 entered promiscuous mode [ 194.875585][ T9129] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.882726][ T9129] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.892005][ T9129] device bridge_slave_1 entered promiscuous mode [ 194.911764][ T9131] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.918820][ T9131] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.926862][ T9131] device bridge_slave_1 entered promiscuous mode [ 194.956874][ T9129] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.034412][ T9127] device hsr_slave_0 entered promiscuous mode [ 195.099288][ T9127] device hsr_slave_1 entered promiscuous mode [ 195.169160][ T9127] debugfs: Directory 'hsr0' with parent '/' already present! [ 195.178388][ T9129] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.201804][ T9121] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.246724][ T9131] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.266898][ T9129] team0: Port device team_slave_0 added [ 195.275015][ T9129] team0: Port device team_slave_1 added [ 195.288138][ T9131] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.314837][ T9131] team0: Port device team_slave_0 added [ 195.334385][ T9131] team0: Port device team_slave_1 added [ 195.356578][ T9134] chnl_net:caif_netlink_parms(): no params data found [ 195.422395][ T9131] device hsr_slave_0 entered promiscuous mode [ 195.472675][ T9131] device hsr_slave_1 entered promiscuous mode [ 195.519195][ T9131] debugfs: Directory 'hsr0' with parent '/' already present! [ 195.546687][ T9127] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 195.600834][ T9127] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 195.701866][ T9129] device hsr_slave_0 entered promiscuous mode [ 195.739516][ T9129] device hsr_slave_1 entered promiscuous mode [ 195.779105][ T9129] debugfs: Directory 'hsr0' with parent '/' already present! [ 195.792650][ T9121] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.806530][ T3025] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 195.815446][ T3025] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 195.836686][ T9127] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 195.871561][ T9127] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 195.962040][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 195.970627][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 195.979685][ T3078] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.986891][ T3078] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.994986][ T9134] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.002871][ T9134] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.011040][ T9134] device bridge_slave_0 entered promiscuous mode [ 196.035876][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 196.046385][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 196.055273][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 196.063949][ T3078] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.071057][ T3078] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.079814][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 196.088268][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 196.110094][ T9124] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.117131][ T9134] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.125111][ T9134] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.132946][ T9134] device bridge_slave_1 entered promiscuous mode [ 196.151063][ T9131] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 196.222915][ T9134] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 196.236703][ T9134] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 196.246870][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 196.255595][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 196.264178][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 196.272966][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 196.281650][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 196.289436][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 196.297431][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 196.305434][ T9131] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 196.364835][ T9129] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 196.414348][ T9129] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 196.475672][ T9129] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 196.525371][ T9131] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 196.586351][ T9131] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 196.641420][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 196.649821][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 196.658304][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 196.666973][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 196.677317][ T9124] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.693424][ T9129] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 196.744842][ T9121] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 196.762449][ T9134] team0: Port device team_slave_0 added [ 196.789575][ T9134] team0: Port device team_slave_1 added [ 196.801423][ T3025] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 196.808821][ T3025] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 196.820443][ T3025] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 196.829096][ T3025] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 196.837521][ T3025] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.844691][ T3025] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.855195][ T3025] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 196.865540][ T3025] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 196.874445][ T3025] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.881552][ T3025] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.889553][ T3025] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 196.901815][ T9121] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.938024][ T9127] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.964024][ T3025] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 196.974057][ T3025] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 196.982991][ T3025] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 196.992507][ T3025] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 197.001418][ T3025] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 197.048179][ T9127] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.125256][ T9134] device hsr_slave_0 entered promiscuous mode [ 197.159793][ T9134] device hsr_slave_1 entered promiscuous mode [ 197.199140][ T9134] debugfs: Directory 'hsr0' with parent '/' already present! [ 197.234364][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 197.243063][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 197.254711][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 197.263269][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 197.272249][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 197.280118][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 197.287700][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 197.296475][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 197.308700][ T9124] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 197.361346][ T2879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 197.387817][ T2879] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 197.399899][ T2879] bridge0: port 1(bridge_slave_0) entered blocking state 21:07:08 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000140)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x11\x00', 0x19, 0x2, 0x268, [0x20000540, 0x0, 0x0, 0x20000748, 0x20000778], 0x90, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"]}, 0x2e0) [ 197.406982][ T2879] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.415278][ T2879] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 197.437059][ T2879] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 197.446219][ T2879] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.453360][ T2879] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.501844][ T9129] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.509359][ T3027] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 21:07:08 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000140)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x11\x00', 0x19, 0x2, 0x268, [0x20000540, 0x0, 0x0, 0x20000748, 0x20000778], 0x90, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"]}, 0x2e0) [ 197.544001][ T3027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 197.553687][ T3027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 21:07:08 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000140)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x11\x00', 0x19, 0x2, 0x268, [0x20000540, 0x0, 0x0, 0x20000748, 0x20000778], 0x90, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"]}, 0x2e0) [ 197.593941][ T9134] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 197.664663][ T9129] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.685356][ T9124] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.699275][ T3025] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready 21:07:08 executing program 0: getpgid(0x0) ppoll(0x0, 0x0, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) [ 197.708118][ T3025] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 197.717308][ T3025] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 197.738256][ T3025] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 197.747469][ T3025] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 197.755668][ T3025] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 197.763665][ T3025] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 197.774404][ T3025] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 197.788495][ T3025] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 197.797575][ T3025] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 197.807005][ T3025] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready 21:07:08 executing program 0: getpgid(0x0) ppoll(0x0, 0x0, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) [ 197.818879][ T9134] netdevsim netdevsim5 netdevsim1: renamed from eth1 21:07:08 executing program 0: getpgid(0x0) ppoll(0x0, 0x0, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) [ 197.871538][ T9134] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 197.901693][ T9134] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 197.958786][ T9127] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 197.972139][ T9127] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 21:07:09 executing program 0: getpgid(0x0) ppoll(0x0, 0x0, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) [ 198.023281][ T9131] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.044918][ T3025] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 198.065393][ T3025] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 198.077395][ T3025] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 198.090053][ T3025] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 198.099803][ T3025] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.106873][ T3025] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.125847][ T3025] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 198.137406][ T3025] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 198.152341][ T3025] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.159470][ T3025] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.167747][ T3025] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 198.177310][ T3025] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 198.217481][ T3025] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 198.226204][ T3025] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 198.236825][ T3025] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 198.248796][ T3025] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 198.265097][ T3025] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 21:07:09 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) write$eventfd(r0, 0x0, 0x0) [ 198.275092][ T3025] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 198.290771][ T3025] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 198.305218][ T3025] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 198.317632][ T3025] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 198.335129][ T9127] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.377441][ T3027] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 198.386232][ T3027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 198.408425][ T3027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 198.421774][ T9129] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 198.436025][ T9129] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 198.445517][ T9131] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.479394][ T2879] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 198.487750][ T2879] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 198.536944][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 198.556328][ T9177] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 198.559740][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 198.577338][ T9177] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 21:07:09 executing program 2: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000010307841da508000000000000200a0009000100031d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) [ 198.584355][ T3078] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.593663][ T3078] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.646886][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 198.655891][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 198.664345][ T9181] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 198.665101][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 198.697176][ T3085] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.704327][ T3085] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.712212][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 198.729942][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 198.738802][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 198.752817][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 198.760379][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 198.771707][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 198.783147][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 198.794396][ T9129] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.819532][ T9134] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.834122][ T2736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 198.843655][ T2736] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 198.852881][ T2736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 198.861659][ T2736] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 198.877567][ T9131] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 198.893352][ T9131] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 198.901950][ T2736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 198.911225][ T2736] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 198.920161][ T2736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 198.936991][ T2736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 198.948501][ T9134] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.976221][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 198.985800][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 199.005350][ T9185] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 199.021295][ T9131] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.039795][ T2736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 199.048373][ T2736] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 199.065433][ T2736] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.072606][ T2736] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.081329][ T2736] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 21:07:10 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="fbbfaccdbdd1e27c3300000079abd58233e3e4692201d1932a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x306, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x14}]}, 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002a00)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x306, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r5, 0x5}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) [ 199.100402][ T3027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 199.111551][ T3027] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 199.138296][ T3027] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.145448][ T3027] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.169928][ T9192] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 199.188354][ T9192] batman_adv: batadv0: Adding interface: erspan0 [ 199.196418][ T9192] batman_adv: batadv0: The MTU of interface erspan0 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.224692][ T9192] batman_adv: batadv0: Interface activated: erspan0 [ 199.237253][ T9194] batman_adv: batadv0: Interface deactivated: erspan0 [ 199.248022][ T9194] batman_adv: batadv0: Removing interface: erspan0 [ 199.260634][ C0] ------------[ cut here ]------------ [ 199.266092][ C0] DEBUG_LOCKS_WARN_ON(1) [ 199.266160][ C0] WARNING: CPU: 0 PID: 9194 at kernel/locking/lockdep.c:167 mark_lock+0x22b/0x1220 [ 199.279644][ C0] Kernel panic - not syncing: panic_on_warn set ... [ 199.286214][ C0] CPU: 0 PID: 9194 Comm: syz-executor.3 Not tainted 5.5.0-rc3-syzkaller #0 [ 199.294822][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 199.304903][ C0] Call Trace: [ 199.308204][ C0] [ 199.311040][ C0] dump_stack+0x197/0x210 [ 199.315351][ C0] ? mark_lock+0x190/0x1220 [ 199.319876][ C0] panic+0x2e3/0x75c [ 199.323746][ C0] ? add_taint.cold+0x16/0x16 [ 199.328512][ C0] ? __kasan_check_write+0x14/0x20 [ 199.333607][ C0] ? __warn.cold+0x14/0x3e [ 199.338023][ C0] ? __warn+0xd9/0x1cf [ 199.342072][ C0] ? mark_lock+0x22b/0x1220 [ 199.346553][ C0] __warn.cold+0x2f/0x3e [ 199.350791][ C0] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 199.356488][ C0] ? mark_lock+0x22b/0x1220 [ 199.360977][ C0] report_bug+0x289/0x300 [ 199.365291][ C0] do_error_trap+0x11b/0x200 [ 199.369908][ C0] do_invalid_op+0x37/0x50 [ 199.374343][ C0] ? mark_lock+0x22b/0x1220 [ 199.378825][ C0] invalid_op+0x23/0x30 [ 199.382955][ C0] RIP: 0010:mark_lock+0x22b/0x1220 [ 199.388041][ C0] Code: d0 7c 08 84 d2 0f 85 a8 0e 00 00 44 8b 1d 0d 32 1f 09 45 85 db 75 b6 48 c7 c6 e0 95 2b 88 48 c7 c7 20 96 2b 88 e8 c4 38 eb ff <0f> 0b 31 db e9 aa fe ff ff 48 c7 c7 60 b5 63 8b e8 00 4a 58 00 e9 [ 199.407629][ C0] RSP: 0018:ffffc90000007398 EFLAGS: 00010086 [ 199.413678][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 199.421630][ C0] RDX: 0000000000000100 RSI: ffffffff815e8b56 RDI: fffff52000000e65 [ 199.429581][ C0] RBP: ffffc900000073e8 R08: ffff888097ea6140 R09: fffffbfff1333579 [ 199.437530][ C0] R10: fffffbfff1333578 R11: ffffffff8999abc3 R12: 0000000000000004 [ 199.445530][ C0] R13: ffff888097ea6af0 R14: 0000000000000001 R15: 0000000000042763 [ 199.453521][ C0] ? vprintk_func+0x86/0x189 [ 199.458105][ C0] ? mark_lock+0x22b/0x1220 [ 199.462594][ C0] __lock_acquire+0x1e8e/0x4a00 [ 199.467431][ C0] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 199.473657][ C0] ? netif_skb_features+0x6c2/0xb90 [ 199.478864][ C0] ? mark_held_locks+0xf0/0xf0 [ 199.483607][ C0] ? mark_lock+0xc2/0x1220 [ 199.488008][ C0] lock_acquire+0x190/0x410 [ 199.492539][ C0] ? sch_direct_xmit+0x2e0/0xd30 [ 199.497477][ C0] _raw_spin_lock+0x2f/0x40 [ 199.501966][ C0] ? sch_direct_xmit+0x2e0/0xd30 [ 199.506943][ C0] sch_direct_xmit+0x2e0/0xd30 [ 199.511711][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 199.517935][ C0] ? dev_watchdog+0xca0/0xca0 [ 199.522655][ C0] ? lock_acquire+0xf0/0x410 [ 199.527234][ C0] __dev_queue_xmit+0x2707/0x35c0 [ 199.532248][ C0] ? __kasan_check_read+0x11/0x20 [ 199.537263][ C0] ? __lock_acquire+0x16f2/0x4a00 [ 199.542267][ C0] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 199.547541][ C0] ? __kasan_check_read+0x11/0x20 [ 199.552543][ C0] ? mark_lock+0xc2/0x1220 [ 199.556950][ C0] ? mark_held_locks+0xa4/0xf0 [ 199.561694][ C0] ? ip6_finish_output2+0xc98/0x25c0 [ 199.566955][ C0] ? __ip6_finish_output+0x444/0xaa0 [ 199.572224][ C0] ? ip6_finish_output2+0xc98/0x25c0 [ 199.577504][ C0] dev_queue_xmit+0x18/0x20 [ 199.581984][ C0] ? dev_queue_xmit+0x18/0x20 [ 199.586640][ C0] ip6_finish_output2+0xfbe/0x25c0 [ 199.591731][ C0] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 199.597949][ C0] ? ip6_frag_next+0xb20/0xb20 [ 199.602701][ C0] ? __kasan_check_read+0x11/0x20 [ 199.607714][ C0] __ip6_finish_output+0x444/0xaa0 [ 199.612817][ C0] ? __ip6_finish_output+0x444/0xaa0 [ 199.618090][ C0] ip6_finish_output+0x38/0x1f0 [ 199.622972][ C0] ip6_output+0x25e/0x880 [ 199.627286][ C0] ? ip6_finish_output+0x1f0/0x1f0 [ 199.632416][ C0] ? __local_bh_enable_ip+0x15a/0x270 [ 199.637767][ C0] ? __ip6_finish_output+0xaa0/0xaa0 [ 199.643030][ C0] ? xfrm_lookup+0x38/0x50 [ 199.647450][ C0] mld_sendpack+0x9c2/0xed0 [ 199.651935][ C0] ? nf_hook.constprop.0+0x560/0x560 [ 199.657303][ C0] ? mld_ifc_timer_expire+0x43e/0x950 [ 199.662652][ C0] ? __local_bh_enable_ip+0x15a/0x270 [ 199.668023][ C0] mld_ifc_timer_expire+0x454/0x950 [ 199.673214][ C0] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 199.678747][ C0] call_timer_fn+0x1ac/0x780 [ 199.683332][ C0] ? mld_dad_timer_expire+0x230/0x230 [ 199.688699][ C0] ? msleep_interruptible+0x150/0x150 [ 199.694231][ C0] ? run_timer_softirq+0x6b1/0x1790 [ 199.699448][ C0] ? trace_hardirqs_on+0x67/0x240 [ 199.704504][ C0] ? mld_dad_timer_expire+0x230/0x230 [ 199.709857][ C0] ? mld_dad_timer_expire+0x230/0x230 [ 199.715208][ C0] run_timer_softirq+0x6c3/0x1790 [ 199.720266][ C0] ? add_timer+0x930/0x930 [ 199.724664][ C0] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 199.730797][ C0] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 199.736317][ C0] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 199.742272][ C0] ? trace_hardirqs_on+0x67/0x240 [ 199.747281][ C0] __do_softirq+0x262/0x98c [ 199.751762][ C0] ? sched_clock_cpu+0x1b/0x1b0 [ 199.756592][ C0] irq_exit+0x19b/0x1e0 [ 199.760746][ C0] smp_apic_timer_interrupt+0x1a3/0x610 [ 199.766283][ C0] apic_timer_interrupt+0xf/0x20 [ 199.771196][ C0] [ 199.774127][ C0] RIP: 0010:lockdep_unregister_key+0x32c/0x4c0 [ 199.780309][ C0] Code: ba 00 00 00 00 00 fc ff df 48 c1 e8 03 80 3c 10 00 0f 85 ed 00 00 00 48 83 3d 17 eb 38 08 00 0f 84 ac 00 00 00 4c 89 f7 57 9d <0f> 1f 44 00 00 e8 2a 0c 08 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 [ 199.799900][ C0] RSP: 0018:ffffc90002b76dc8 EFLAGS: 00000282 ORIG_RAX: ffffffffffffff13 [ 199.808294][ C0] RAX: 1ffffffff132669b RBX: ffff888097ea6140 RCX: ffffffff815a48f6 [ 199.816303][ C0] RDX: dffffc0000000000 RSI: 0000000000000004 RDI: 0000000000000282 [ 199.824268][ C0] RBP: ffffc90002b76df8 R08: 0000000000000004 R09: fffffbfff16bee59 [ 199.832225][ C0] R10: fffffbfff16bee58 R11: 0000000000000003 R12: ffff88806210ab30 [ 199.840186][ C0] R13: ffffffff8b4358d0 R14: 0000000000000282 R15: ffffffff8b2c9d18 [ 199.848168][ C0] ? lockdep_unregister_key+0x256/0x4c0 [ 199.853712][ C0] ? dev_set_allmulti+0x30/0x30 [ 199.858557][ C0] ? batadv_softif_destroy_vlan+0xf0/0xf0 [ 199.864261][ C0] netdev_update_lockdep_key+0x31/0x180 [ 199.869800][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 199.876030][ C0] ? batadv_softif_destroy_vlan+0xf0/0xf0 [ 199.881733][ C0] do_set_master+0x118/0x240 [ 199.886316][ C0] do_setlink+0xad2/0x3720 [ 199.890718][ C0] ? rtnl_getlink+0xb40/0xb40 [ 199.895433][ C0] ? __kasan_check_read+0x11/0x20 [ 199.900450][ C0] ? mark_lock+0xc2/0x1220 [ 199.904873][ C0] ? __kasan_check_read+0x11/0x20 [ 199.909893][ C0] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 199.915776][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 199.922014][ C0] ? __nla_validate_parse+0x2d0/0x1ee0 [ 199.927471][ C0] ? nla_memcpy+0xb0/0xb0 [ 199.931810][ C0] ? mark_lock+0xc2/0x1220 [ 199.936206][ C0] ? is_bpf_text_address+0xac/0x160 [ 199.941394][ C0] ? __kasan_check_read+0x11/0x20 [ 199.946411][ C0] __rtnl_newlink+0xbf0/0x1790 [ 199.951170][ C0] ? rtnl_link_unregister+0x250/0x250 [ 199.956544][ C0] ? is_bpf_text_address+0xce/0x160 [ 199.961729][ C0] ? kernel_text_address+0x73/0xf0 [ 199.966824][ C0] ? unwind_get_return_address+0x61/0xa0 [ 199.972437][ C0] ? profile_setup.cold+0xbb/0xbb [ 199.977448][ C0] ? arch_stack_walk+0x97/0xf0 [ 199.982192][ C0] ? stack_trace_save+0xac/0xe0 [ 199.987020][ C0] ? stack_trace_consume_entry+0x190/0x190 [ 199.992806][ C0] ? save_stack+0x5c/0x90 [ 199.997109][ C0] ? save_stack+0x23/0x90 [ 200.001416][ C0] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 200.007210][ C0] ? kasan_kmalloc+0x9/0x10 [ 200.011694][ C0] ? kmem_cache_alloc_trace+0x158/0x790 [ 200.017228][ C0] ? rtnl_newlink+0x4b/0xa0 [ 200.021712][ C0] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 200.027238][ C0] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 200.033246][ C0] ? __kasan_kmalloc.constprop.0+0x80/0xe0 [ 200.039029][ C0] ? kmem_cache_alloc_trace+0x397/0x790 [ 200.044554][ C0] rtnl_newlink+0x69/0xa0 [ 200.048864][ C0] ? __rtnl_newlink+0x1790/0x1790 [ 200.053864][ C0] rtnetlink_rcv_msg+0x45e/0xaf0 [ 200.058776][ C0] ? rtnl_bridge_getlink+0x910/0x910 [ 200.064037][ C0] ? netlink_deliver_tap+0x228/0xbe0 [ 200.069347][ C0] ? find_held_lock+0x35/0x130 [ 200.074137][ C0] netlink_rcv_skb+0x177/0x450 [ 200.078880][ C0] ? rtnl_bridge_getlink+0x910/0x910 [ 200.084143][ C0] ? netlink_ack+0xb50/0xb50 [ 200.088710][ C0] ? __kasan_check_read+0x11/0x20 [ 200.093711][ C0] ? netlink_deliver_tap+0x24a/0xbe0 [ 200.098979][ C0] rtnetlink_rcv+0x1d/0x30 [ 200.103375][ C0] netlink_unicast+0x58c/0x7d0 [ 200.108119][ C0] ? netlink_attachskb+0x870/0x870 [ 200.113236][ C0] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 200.118933][ C0] ? __check_object_size+0x3d/0x437 [ 200.124130][ C0] netlink_sendmsg+0x91c/0xea0 [ 200.128873][ C0] ? netlink_unicast+0x7d0/0x7d0 [ 200.133788][ C0] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 200.139309][ C0] ? apparmor_socket_sendmsg+0x2a/0x30 [ 200.144758][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 200.151040][ C0] ? security_socket_sendmsg+0x8d/0xc0 [ 200.156502][ C0] ? netlink_unicast+0x7d0/0x7d0 [ 200.161420][ C0] sock_sendmsg+0xd7/0x130 [ 200.165827][ C0] ____sys_sendmsg+0x753/0x880 [ 200.170578][ C0] ? kernel_sendmsg+0x50/0x50 [ 200.175235][ C0] ? __fget+0x35d/0x550 [ 200.179404][ C0] ? find_held_lock+0x35/0x130 [ 200.184162][ C0] ___sys_sendmsg+0x100/0x170 [ 200.188818][ C0] ? sendmsg_copy_msghdr+0x70/0x70 [ 200.193925][ C0] ? __kasan_check_read+0x11/0x20 [ 200.199018][ C0] ? __fget+0x37f/0x550 [ 200.203155][ C0] ? ksys_dup3+0x3e0/0x3e0 [ 200.207602][ C0] ? __fget_light+0x1a9/0x230 [ 200.212262][ C0] ? __fdget+0x1b/0x20 [ 200.216330][ C0] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 200.222550][ C0] __sys_sendmsg+0x105/0x1d0 [ 200.227123][ C0] ? __sys_sendmsg_sock+0xc0/0xc0 [ 200.232133][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 200.237568][ C0] ? do_syscall_64+0x26/0x790 [ 200.242222][ C0] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 200.248265][ C0] ? do_syscall_64+0x26/0x790 [ 200.252920][ C0] __x64_sys_sendmsg+0x78/0xb0 [ 200.257662][ C0] do_syscall_64+0xfa/0x790 [ 200.262144][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 200.268040][ C0] RIP: 0033:0x45a919 [ 200.271913][ C0] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 200.291493][ C0] RSP: 002b:00007fc2ed779c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 200.299881][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a919 [ 200.307844][ C0] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000006 [ 200.315792][ C0] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 200.323762][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc2ed77a6d4 [ 200.331723][ C0] R13: 00000000004c9a29 R14: 00000000004e1930 R15: 00000000ffffffff [ 200.341022][ C0] Kernel Offset: disabled [ 200.345359][ C0] Rebooting in 86400 seconds..