[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 66.172454][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 66.172464][ T26] audit: type=1800 audit(1564820206.190:29): pid=9734 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 66.210016][ T26] audit: type=1800 audit(1564820206.190:30): pid=9734 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.16' (ECDSA) to the list of known hosts. 2019/08/03 08:16:57 fuzzer started 2019/08/03 08:17:01 dialing manager at 10.128.0.26:45731 2019/08/03 08:17:01 syscalls: 2484 2019/08/03 08:17:01 code coverage: enabled 2019/08/03 08:17:01 comparison tracing: enabled 2019/08/03 08:17:01 extra coverage: extra coverage is not supported by the kernel 2019/08/03 08:17:01 setuid sandbox: enabled 2019/08/03 08:17:01 namespace sandbox: enabled 2019/08/03 08:17:01 Android sandbox: /sys/fs/selinux/policy does not exist 2019/08/03 08:17:01 fault injection: enabled 2019/08/03 08:17:01 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/08/03 08:17:01 net packet injection: enabled 2019/08/03 08:17:01 net device setup: enabled 08:18:31 executing program 0: clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='/dev/snd/timer\x00', 0xffffffffffffffff) 08:18:32 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000540)=""/11, 0x1ec) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) r1 = creat(&(0x7f0000004980)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) dup2(r0, r1) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, 0x0) syzkaller login: [ 172.094951][ T9902] IPVS: ftp: loaded support on port[0] = 21 [ 172.289895][ T9902] chnl_net:caif_netlink_parms(): no params data found [ 172.316670][ T9904] IPVS: ftp: loaded support on port[0] = 21 [ 172.367925][ T9902] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.388914][ T9902] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.396698][ T9902] device bridge_slave_0 entered promiscuous mode 08:18:32 executing program 2: clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f00000001c0)='./file1\x00', 0xc042, 0x0) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x200010a) close(r0) execve(&(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200800000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x131f64) open$dir(&(0x7f0000000240)='./file0\x00', 0x841, 0x0) clone(0x3103101ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000000)='./file1\x00', 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, 0x0, 0x0) [ 172.430669][ T9902] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.437797][ T9902] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.459496][ T9902] device bridge_slave_1 entered promiscuous mode [ 172.578806][ T9902] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.592303][ T9902] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.607261][ T9908] IPVS: ftp: loaded support on port[0] = 21 [ 172.642267][ T9904] chnl_net:caif_netlink_parms(): no params data found [ 172.655070][ T9902] team0: Port device team_slave_0 added [ 172.672627][ T9902] team0: Port device team_slave_1 added 08:18:32 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x9d, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000580)='keyring\x00', &(0x7f00000005c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0) keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0) [ 172.726854][ T9904] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.735076][ T9904] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.743234][ T9904] device bridge_slave_0 entered promiscuous mode [ 172.792222][ T9902] device hsr_slave_0 entered promiscuous mode [ 172.829915][ T9902] device hsr_slave_1 entered promiscuous mode 08:18:32 executing program 4: getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000080)={0x0, @in={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x0) syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0x0, 0x2) write$FUSE_WRITE(0xffffffffffffffff, 0x0, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) [ 172.913320][ T9904] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.926712][ T9904] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.941547][ T9904] device bridge_slave_1 entered promiscuous mode [ 172.973423][ T9910] IPVS: ftp: loaded support on port[0] = 21 [ 173.054365][ T9904] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.080474][ T9908] chnl_net:caif_netlink_parms(): no params data found [ 173.112321][ T9904] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.147371][ T9902] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.154937][ T9902] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.162271][ T9902] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.164165][ T9913] IPVS: ftp: loaded support on port[0] = 21 [ 173.169358][ T9902] bridge0: port 1(bridge_slave_0) entered forwarding state 08:18:33 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x4, 0x8}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 173.203374][ T9904] team0: Port device team_slave_0 added [ 173.211717][ T9904] team0: Port device team_slave_1 added [ 173.245338][ T9908] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.254324][ T9908] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.263486][ T9908] device bridge_slave_0 entered promiscuous mode [ 173.322617][ T9908] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.331019][ T9908] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.339194][ T9908] device bridge_slave_1 entered promiscuous mode [ 173.352156][ T3490] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.359745][ T3490] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.390474][ T9917] IPVS: ftp: loaded support on port[0] = 21 [ 173.450925][ T9904] device hsr_slave_0 entered promiscuous mode [ 173.489227][ T9904] device hsr_slave_1 entered promiscuous mode [ 173.548919][ T9904] debugfs: Directory 'hsr0' with parent '/' already present! [ 173.582146][ T9910] chnl_net:caif_netlink_parms(): no params data found [ 173.595148][ T9908] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.605397][ T9908] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.672449][ T9902] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.685573][ T9908] team0: Port device team_slave_0 added [ 173.696094][ T9913] chnl_net:caif_netlink_parms(): no params data found [ 173.719765][ T9902] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.727316][ T9908] team0: Port device team_slave_1 added [ 173.746448][ T9910] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.754065][ T9910] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.761921][ T9910] device bridge_slave_0 entered promiscuous mode [ 173.771229][ T3490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 173.779197][ T3490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 173.794604][ T3490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 173.803273][ T3490] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 173.811925][ T3490] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.819006][ T3490] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.826642][ T3490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 173.835157][ T3490] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 173.843441][ T3490] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.850510][ T3490] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.858381][ T9910] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.865746][ T9910] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.874063][ T9910] device bridge_slave_1 entered promiscuous mode [ 173.903509][ T9918] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 173.912842][ T9918] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 173.960507][ T9908] device hsr_slave_0 entered promiscuous mode [ 174.000584][ T9908] device hsr_slave_1 entered promiscuous mode [ 174.038911][ T9908] debugfs: Directory 'hsr0' with parent '/' already present! [ 174.070224][ T9910] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.087279][ T9904] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.104494][ T9913] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.111672][ T9913] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.121605][ T9913] device bridge_slave_0 entered promiscuous mode [ 174.129461][ T9914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 174.146360][ T9914] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 174.154739][ T9914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 174.163152][ T9914] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 174.171778][ T9914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 174.180162][ T9914] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 174.189277][ T9910] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.198588][ T9914] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 174.211719][ T9902] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 174.222936][ T9902] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 174.233783][ T9913] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.241663][ T9913] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.249474][ T9913] device bridge_slave_1 entered promiscuous mode [ 174.260412][ T9920] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 174.268639][ T9920] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 174.283638][ T9904] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.304622][ T9917] chnl_net:caif_netlink_parms(): no params data found [ 174.313510][ T9918] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 174.321833][ T9918] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 174.334125][ T9913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.345057][ T9913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.355648][ T9910] team0: Port device team_slave_0 added [ 174.378202][ T9910] team0: Port device team_slave_1 added [ 174.385886][ T9920] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 174.394671][ T9920] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 174.403540][ T9920] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.410635][ T9920] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.418382][ T9918] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 174.432479][ T9913] team0: Port device team_slave_0 added [ 174.454776][ T9917] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.461899][ T9917] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.471032][ T9917] device bridge_slave_0 entered promiscuous mode [ 174.486355][ T3490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 174.495776][ T3490] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 174.504103][ T3490] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.511177][ T3490] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.521058][ T9913] team0: Port device team_slave_1 added [ 174.527714][ T9917] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.535047][ T9917] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.543992][ T9917] device bridge_slave_1 entered promiscuous mode [ 174.601337][ T9910] device hsr_slave_0 entered promiscuous mode [ 174.639208][ T9910] device hsr_slave_1 entered promiscuous mode [ 174.678999][ T9910] debugfs: Directory 'hsr0' with parent '/' already present! [ 174.690950][ T9917] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.718360][ T3490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 174.727257][ T3490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 174.736105][ T3490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 174.745033][ T3490] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 174.753567][ T3490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 174.762299][ T3490] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 174.770886][ T3490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 174.779192][ T3490] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 174.788304][ T9917] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.841206][ T9913] device hsr_slave_0 entered promiscuous mode [ 174.889142][ T9913] device hsr_slave_1 entered promiscuous mode [ 174.929638][ T9913] debugfs: Directory 'hsr0' with parent '/' already present! [ 174.940340][ T9904] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 174.952024][ T9904] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 174.961324][ T3490] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 174.969746][ T3490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 174.979592][ T3490] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 174.992444][ T9908] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.005288][ T9902] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.028312][ T9904] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.040185][ T9917] team0: Port device team_slave_0 added [ 175.071341][ T9917] team0: Port device team_slave_1 added [ 175.087154][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 175.099441][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 175.129061][ T9908] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.172158][ T9917] device hsr_slave_0 entered promiscuous mode [ 175.209176][ T9917] device hsr_slave_1 entered promiscuous mode [ 175.248926][ T9917] debugfs: Directory 'hsr0' with parent '/' already present! [ 175.259615][ T9918] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 175.268226][ T9918] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 175.278686][ T9918] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.285975][ T9918] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.295034][ T9918] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 175.316784][ T9910] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.340490][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 175.358450][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 175.367068][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.374151][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state 08:18:35 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x822102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000019c0)=ANY=[@ANYBLOB="a8000000000000000000000000000000940000002557750361337a6b244bc43aad71be506c3aec2653ff1bfe5db955b598cfe308d0405750e1344b23d22f08e8fe0136e63b990cbef17b261c9f771817a6c2e2eecda2358db45519ccd0f9700800000000000000438a2207a08de66fd84f00b55c22810bdc4335019708a86cac8030f267437c1e01c20000000028a3852ef49f18236e54cd704730acaf8b591e8800000004000000"], 0xa8}], 0x4}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x4) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 175.405776][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 175.414584][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 175.436375][ T9910] 8021q: adding VLAN 0 to HW filter on device team0 08:18:35 executing program 1: unshare(0x400) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x200000, 0x0) listen(r0, 0x0) [ 175.481407][ T2985] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 175.493663][ T2985] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 175.508370][ T2985] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready 08:18:35 executing program 0: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x6, &(0x7f00000004c0)=0x0) io_getevents(r1, 0x81, 0xa, &(0x7f0000000500)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000640)={0x77359400}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffffc1, 0x0, 0x0, 0x1201000000003618) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vcs\x00', 0x20001, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000380), &(0x7f00000003c0)=0x4) r4 = dup3(r0, r2, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000080)={0x2, [0x0, 0x0]}, &(0x7f0000000100)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000440)={r5, 0x2c, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x7fffffff80000, @remote, 0x1cec3d71}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x26}}]}, &(0x7f0000000480)=0x10) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r4, 0x84, 0x77, 0x0, 0x0) r6 = syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_NODE_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x34, r6, 0x405, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_SOCK={0x10, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_NODE={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x80) mmap(&(0x7f0000e4a000/0x3000)=nil, 0x3000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 08:18:35 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000000)=""/27) [ 175.526414][ T2985] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 175.546469][ T2985] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 175.565155][ T2985] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 175.590581][ T2985] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 175.609148][ T2985] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 175.621755][ T2985] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready 08:18:35 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffffffffffeaf, 0x0, 0x0, 0xffffffae) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x0, 0x102000}) fsetxattr$security_smack_transmute(0xffffffffffffffff, &(0x7f0000000040)='security.SMACK64TRANSMUTE\x00', 0x0, 0x147, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x73, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 175.633147][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 175.655321][ C1] hrtimer: interrupt took 26193 ns [ 175.655990][ T9908] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 175.694052][ T9962] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 175.696405][ T9908] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 175.730821][ T9914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 175.749144][ T9914] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 175.785931][ T9914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready 08:18:35 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'wp384\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000006a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 175.819624][ T9914] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 175.834165][ T9914] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.841290][ T9914] bridge0: port 1(bridge_slave_0) entered forwarding state 08:18:35 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000080), 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffffffffffeaf, 0x0, 0x0, 0xffffffae) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x0, 0x102000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x73, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:18:35 executing program 0: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x6, &(0x7f00000004c0)=0x0) io_getevents(r1, 0x81, 0xa, &(0x7f0000000500)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000640)={0x77359400}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffffc1, 0x0, 0x0, 0x1201000000003618) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vcs\x00', 0x20001, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000380), &(0x7f00000003c0)=0x4) r4 = dup3(r0, r2, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000080)={0x2, [0x0, 0x0]}, &(0x7f0000000100)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000440)={r5, 0x2c, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x7fffffff80000, @remote, 0x1cec3d71}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x26}}]}, &(0x7f0000000480)=0x10) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r4, 0x84, 0x77, 0x0, 0x0) r6 = syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_NODE_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x34, r6, 0x405, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_SOCK={0x10, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_NODE={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x80) mmap(&(0x7f0000e4a000/0x3000)=nil, 0x3000, 0x2, 0x31, 0xffffffffffffffff, 0x0) [ 175.866663][ T9914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 175.875542][ T9914] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 175.884337][ T9914] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.891429][ T9914] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.910959][ T9914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 175.922437][ T9914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 175.951179][ T9913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.985436][ T9908] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.003399][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 176.023569][ T9917] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.033923][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 176.050210][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 176.054071][ T9982] kvm: emulating exchange as write [ 176.089544][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 176.136093][ T9917] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.157235][ T9914] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 176.168675][ T9914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 176.201740][ T9914] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 176.221201][ T9914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 176.237929][ T9914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 176.247576][ T9914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 176.258311][ T9914] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 176.267710][ T9914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 176.277101][ T9914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 176.287556][ T9913] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.298421][ T9910] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 176.311774][ T9910] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 176.334769][ T3490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 176.344187][ T3490] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 176.356015][ T3490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 176.364865][ T3490] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 176.373461][ T3490] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.380641][ T3490] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.388332][ T3490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 176.404719][ T3490] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 176.413568][ T3490] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.420710][ T3490] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.428431][ T3490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 176.437214][ T3490] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 176.445624][ T3490] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.452726][ T3490] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.502008][ T9920] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 176.517596][ T9920] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 176.526916][ T9920] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 176.537730][ T9920] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 176.550814][ T9920] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 176.560321][ T9920] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 176.568883][ T9920] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 176.577527][ T9920] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 176.586270][ T9920] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.593363][ T9920] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.601515][ T9920] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 176.610262][ T9920] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 176.619201][ T9920] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 176.627810][ T9920] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 176.636252][ T9920] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 176.645135][ T9920] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 176.661560][ T9913] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 176.674416][ T9913] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network 08:18:36 executing program 2: perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() sigaltstack(&(0x7f00002dc000/0x1000)=nil, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) [ 176.692818][ T9917] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 176.706619][ T9917] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 176.720471][ T9920] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 176.728360][ T9920] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 176.736365][ T9920] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 176.745452][ T9920] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 176.754084][ T9920] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 176.762714][ T9920] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 176.771293][ T9920] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 176.786009][ T9920] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 176.792657][ T9980] kasan: CONFIG_KASAN_INLINE enabled [ 176.800953][ T9920] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 176.819497][ T9920] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 176.823096][ T9980] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 176.828742][ T9920] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 176.844675][ T9920] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 176.852910][ T9980] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 176.859859][ T9980] CPU: 1 PID: 9980 Comm: syz-executor.0 Not tainted 5.3.0-rc2-next-20190802 #58 [ 176.868881][ T9980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 176.879049][ T9980] RIP: 0010:tls_trim_both_msgs+0x54/0x130 [ 176.884771][ T9980] Code: 48 c1 ea 03 80 3c 02 00 0f 85 e3 00 00 00 4d 8b b5 b0 06 00 00 48 b8 00 00 00 00 00 fc ff df 49 8d 7e 28 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 b3 00 00 00 48 b8 00 00 00 00 00 fc ff df 49 8b [ 176.904372][ T9980] RSP: 0018:ffff888061407ac0 EFLAGS: 00010206 [ 176.911120][ T9980] RAX: dffffc0000000000 RBX: ffff888061371180 RCX: ffffc90005f4d000 [ 176.919338][ T9980] RDX: 0000000000000005 RSI: ffffffff862e29d6 RDI: 0000000000000028 [ 176.927289][ T9980] RBP: ffff888061407ae0 R08: ffff888061bba300 R09: ffffed1014d4deb1 [ 176.935236][ T9980] R10: ffffed1014d4deb0 R11: ffff8880a6a6f583 R12: 0000000000000000 [ 176.943186][ T9980] R13: ffff8880626c2c80 R14: 0000000000000000 R15: 00000000ffffffe0 [ 176.951145][ T9980] FS: 00007f0993b37700(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 176.960143][ T9980] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 176.966715][ T9980] CR2: 0000000000876e80 CR3: 00000000a81df000 CR4: 00000000001406e0 [ 176.974669][ T9980] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 176.982620][ T9980] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 176.990659][ T9980] Call Trace: [ 176.993943][ T9980] tls_sw_sendmsg+0xe38/0x17b0 [ 176.998699][ T9980] ? tx_work_handler+0x180/0x180 [ 177.003615][ T9980] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 177.009141][ T9980] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 177.015370][ T9980] inet6_sendmsg+0x9e/0xe0 [ 177.019773][ T9980] ? inet6_ioctl+0x1c0/0x1c0 [ 177.024341][ T9980] sock_sendmsg+0xd7/0x130 [ 177.028749][ T9980] __sys_sendto+0x262/0x380 [ 177.033262][ T9980] ? __ia32_sys_getpeername+0xb0/0xb0 [ 177.038618][ T9980] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 177.044059][ T9980] ? __this_cpu_preempt_check+0x3a/0x210 [ 177.049682][ T9980] ? retint_kernel+0x2b/0x2b [ 177.054254][ T9980] __x64_sys_sendto+0xe1/0x1a0 [ 177.059007][ T9980] do_syscall_64+0xfa/0x760 [ 177.071914][ T9980] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 177.077803][ T9980] RIP: 0033:0x459829 [ 177.081679][ T9980] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 177.101464][ T9980] RSP: 002b:00007f0993b36c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 177.109946][ T9980] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000459829 [ 177.117903][ T9980] RDX: ffffffffffffffc1 RSI: 00000000200005c0 RDI: 0000000000000004 [ 177.125887][ T9980] RBP: 000000000075bf20 R08: 0000000000000000 R09: 1201000000003618 [ 177.133851][ T9980] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0993b376d4 [ 177.141812][ T9980] R13: 00000000004c77d9 R14: 00000000004dcf90 R15: 00000000ffffffff [ 177.149776][ T9980] Modules linked in: [ 177.158715][ T9910] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.166096][ T9980] ---[ end trace 89ac8c557bc09c43 ]--- [ 177.166127][ T9980] RIP: 0010:tls_trim_both_msgs+0x54/0x130 [ 177.166142][ T9980] Code: 48 c1 ea 03 80 3c 02 00 0f 85 e3 00 00 00 4d 8b b5 b0 06 00 00 48 b8 00 00 00 00 00 fc ff df 49 8d 7e 28 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 b3 00 00 00 48 b8 00 00 00 00 00 fc ff df 49 8b [ 177.166150][ T9980] RSP: 0018:ffff888061407ac0 EFLAGS: 00010206 [ 177.166162][ T9980] RAX: dffffc0000000000 RBX: ffff888061371180 RCX: ffffc90005f4d000 [ 177.166170][ T9980] RDX: 0000000000000005 RSI: ffffffff862e29d6 RDI: 0000000000000028 [ 177.166179][ T9980] RBP: ffff888061407ae0 R08: ffff888061bba300 R09: ffffed1014d4deb1 [ 177.166187][ T9980] R10: ffffed1014d4deb0 R11: ffff8880a6a6f583 R12: 0000000000000000 [ 177.166195][ T9980] R13: ffff8880626c2c80 R14: 0000000000000000 R15: 00000000ffffffe0 [ 177.166205][ T9980] FS: 00007f0993b37700(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 177.166214][ T9980] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 177.166222][ T9980] CR2: 0000000000876e80 CR3: 00000000a81df000 CR4: 00000000001406e0 [ 177.166234][ T9980] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 177.166241][ T9980] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 177.166249][ T9980] Kernel panic - not syncing: Fatal exception [ 177.167532][ T9980] Kernel Offset: disabled [ 177.293823][ T9980] Rebooting in 86400 seconds..