[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 60.015496][ T27] audit: type=1800 audit(1576123012.829:25): pid=8878 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 60.035445][ T27] audit: type=1800 audit(1576123012.829:26): pid=8878 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 60.086383][ T27] audit: type=1800 audit(1576123012.829:27): pid=8878 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.178' (ECDSA) to the list of known hosts. 2019/12/12 03:57:02 fuzzer started 2019/12/12 03:57:04 dialing manager at 10.128.0.26:42497 2019/12/12 03:57:04 syscalls: 2701 2019/12/12 03:57:04 code coverage: enabled 2019/12/12 03:57:04 comparison tracing: enabled 2019/12/12 03:57:04 extra coverage: enabled 2019/12/12 03:57:04 setuid sandbox: enabled 2019/12/12 03:57:04 namespace sandbox: enabled 2019/12/12 03:57:04 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/12 03:57:04 fault injection: enabled 2019/12/12 03:57:04 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/12 03:57:04 net packet injection: enabled 2019/12/12 03:57:04 net device setup: enabled 2019/12/12 03:57:04 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/12/12 03:57:04 devlink PCI setup: PCI device 0000:00:10.0 is not available 03:58:49 executing program 0: clone(0xffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000000140)='user\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000280)='uservboxnet1\x00', 0x0) 03:58:49 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000540)={0x5, 0x0, [{0x1, 0xe5, &(0x7f0000000200)=""/229}, {0x0, 0x20, &(0x7f0000000000)=""/32}, {0x0, 0xab, &(0x7f0000000400)=""/171}, {0x6000, 0x2, &(0x7f0000000340)=""/2}, {0x0, 0x0, 0x0}]}) syzkaller login: [ 177.113843][ T9045] IPVS: ftp: loaded support on port[0] = 21 [ 177.317499][ T9045] chnl_net:caif_netlink_parms(): no params data found [ 177.343016][ T9049] IPVS: ftp: loaded support on port[0] = 21 [ 177.405408][ T9045] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.413732][ T9045] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.423758][ T9045] device bridge_slave_0 entered promiscuous mode [ 177.434536][ T9045] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.441659][ T9045] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.451607][ T9045] device bridge_slave_1 entered promiscuous mode 03:58:50 executing program 2: syz_emit_ethernet(0x36, &(0x7f00000006c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x6000, 0x0, 0x6, 0x0, @remote, @remote}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 177.486638][ T9045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.507087][ T9045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.535408][ T9045] team0: Port device team_slave_0 added [ 177.546104][ T9045] team0: Port device team_slave_1 added [ 177.704607][ T9045] device hsr_slave_0 entered promiscuous mode 03:58:50 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup(r0, 0x0, 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup.net//yz0\xfe', 0x1ff) r1 = perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) close(0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x10) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000380)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iyn\ft:\xe1\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8o\xe4\x9b\x8cO;<\xadH\x90+[-l\xfd\n\xbc\xf5\xd7\r\xf3\xfd5.\x8dD\x11\x88\xc6\x0f\xd7\x14\x0f\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4N') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000040)='nr0\x01\x00') r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_procs(r2, &(0x7f0000000140)='tasks\x00', 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x802}) [ 177.752574][ T9045] device hsr_slave_1 entered promiscuous mode [ 177.855643][ T9052] IPVS: ftp: loaded support on port[0] = 21 [ 177.881149][ T9049] chnl_net:caif_netlink_parms(): no params data found 03:58:50 executing program 4: symlink(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00') stat(0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chown(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(0xffffffffffffffff, 0x111, 0x3, 0x0, 0x4) [ 177.994852][ T9045] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 178.093461][ T9045] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 178.166481][ T9045] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 178.215913][ T9049] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.232011][ T9049] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.239720][ T9049] device bridge_slave_0 entered promiscuous mode [ 178.251564][ T9049] bridge0: port 2(bridge_slave_1) entered blocking state 03:58:51 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8476071") r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040), 0x4) [ 178.261219][ T9049] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.269805][ T9049] device bridge_slave_1 entered promiscuous mode [ 178.288658][ T9056] IPVS: ftp: loaded support on port[0] = 21 [ 178.294764][ T9045] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 178.350444][ T9054] IPVS: ftp: loaded support on port[0] = 21 [ 178.443668][ T9049] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 178.473469][ T9049] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.525971][ T9049] team0: Port device team_slave_0 added [ 178.579595][ T9058] IPVS: ftp: loaded support on port[0] = 21 [ 178.586483][ T9049] team0: Port device team_slave_1 added [ 178.604045][ T9052] chnl_net:caif_netlink_parms(): no params data found [ 178.705244][ T9049] device hsr_slave_0 entered promiscuous mode [ 178.762251][ T9049] device hsr_slave_1 entered promiscuous mode [ 178.812100][ T9049] debugfs: Directory 'hsr0' with parent '/' already present! [ 178.830546][ T9052] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.838652][ T9052] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.846538][ T9052] device bridge_slave_0 entered promiscuous mode [ 178.857195][ T9052] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.864663][ T9052] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.872893][ T9052] device bridge_slave_1 entered promiscuous mode [ 178.923423][ T9052] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 178.966722][ T9052] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.988476][ T9056] chnl_net:caif_netlink_parms(): no params data found [ 179.038542][ T9052] team0: Port device team_slave_0 added [ 179.049493][ T9052] team0: Port device team_slave_1 added [ 179.074194][ T9045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.099840][ T9049] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 179.144040][ T9049] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 179.195082][ T9054] chnl_net:caif_netlink_parms(): no params data found [ 179.255105][ T9052] device hsr_slave_0 entered promiscuous mode [ 179.302353][ T9052] device hsr_slave_1 entered promiscuous mode [ 179.352016][ T9052] debugfs: Directory 'hsr0' with parent '/' already present! [ 179.364433][ T9049] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 179.408351][ T9049] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 179.508039][ T9056] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.515779][ T9056] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.523793][ T9056] device bridge_slave_0 entered promiscuous mode [ 179.532281][ T9056] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.539604][ T9056] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.547875][ T9056] device bridge_slave_1 entered promiscuous mode [ 179.602942][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 179.611785][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 179.627175][ T9045] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.663227][ T9056] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.681151][ T9054] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.688431][ T9054] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.696393][ T9054] device bridge_slave_0 entered promiscuous mode [ 179.706385][ T9054] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.713548][ T9054] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.721505][ T9054] device bridge_slave_1 entered promiscuous mode [ 179.731731][ T9056] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.770371][ T9054] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.780394][ T9058] chnl_net:caif_netlink_parms(): no params data found [ 179.792969][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 179.801647][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 179.810722][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.818168][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.828167][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 179.851627][ T9052] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 179.896425][ T9054] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.918600][ T9056] team0: Port device team_slave_0 added [ 179.926860][ T9052] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 180.003368][ T9056] team0: Port device team_slave_1 added [ 180.010729][ T9054] team0: Port device team_slave_0 added [ 180.023495][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 180.036199][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 180.045012][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.052139][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.060532][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 180.069636][ T9052] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 180.148716][ T9054] team0: Port device team_slave_1 added [ 180.169287][ T9052] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 180.244073][ T2951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 180.253813][ T9058] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.260898][ T9058] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.269561][ T9058] device bridge_slave_0 entered promiscuous mode [ 180.280501][ T9058] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.287693][ T9058] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.296709][ T9058] device bridge_slave_1 entered promiscuous mode [ 180.355250][ T9056] device hsr_slave_0 entered promiscuous mode [ 180.392402][ T9056] device hsr_slave_1 entered promiscuous mode [ 180.422213][ T9056] debugfs: Directory 'hsr0' with parent '/' already present! [ 180.473228][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 180.482199][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 180.490597][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 180.499642][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 180.508629][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 180.517125][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 180.525566][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 180.562273][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 180.570689][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 180.605335][ T9054] device hsr_slave_0 entered promiscuous mode [ 180.652445][ T9054] device hsr_slave_1 entered promiscuous mode [ 180.692124][ T9054] debugfs: Directory 'hsr0' with parent '/' already present! [ 180.704990][ T9058] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 180.717475][ T9045] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 180.763953][ T9049] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.772397][ T9058] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 180.784610][ T9056] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 180.879094][ T9058] team0: Port device team_slave_0 added [ 180.885990][ T9056] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 180.956323][ T9056] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 181.017109][ T9056] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 181.099455][ T9058] team0: Port device team_slave_1 added [ 181.144210][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 181.152936][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 181.164014][ T9049] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.215557][ T9058] device hsr_slave_0 entered promiscuous mode [ 181.252313][ T9058] device hsr_slave_1 entered promiscuous mode [ 181.282473][ T9058] debugfs: Directory 'hsr0' with parent '/' already present! [ 181.290289][ T9054] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 181.345407][ T9054] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 181.410729][ T9054] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 181.454781][ T9054] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 181.506428][ T9065] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 181.514093][ T9065] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 181.521489][ T9065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 181.530948][ T9065] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 181.539625][ T9065] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.546732][ T9065] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.556408][ T9065] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 181.575545][ T9052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.607335][ T9045] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.638589][ T2951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 181.648208][ T2951] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 181.657240][ T2951] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.664394][ T2951] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.673233][ T2951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 181.689584][ T9052] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.721976][ T9060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 181.729819][ T9060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 181.739220][ T9060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 181.782587][ T9060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 181.791220][ T9060] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 181.800790][ T9060] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.807950][ T9060] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.816890][ T9060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 181.825983][ T9060] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 181.834926][ T9060] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.842040][ T9060] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.850196][ T9060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 181.859252][ T9060] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 181.868161][ T9058] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 181.939523][ T9065] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 181.949612][ T9065] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 181.957984][ T9065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 181.969503][ T9065] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 181.978498][ T9065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 181.987717][ T9065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 181.996514][ T9065] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 182.005394][ T9065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 182.015373][ T9058] netdevsim netdevsim5 netdevsim1: renamed from eth1 03:58:54 executing program 0: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffff7}}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000003, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fanotify_mark(0xffffffffffffffff, 0x0, 0x8, 0xffffffffffffffff, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) r2 = socket(0x10, 0x0, 0x0) kcmp(0x0, 0x0, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000) [ 182.093187][ T9049] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 182.108975][ T9049] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 182.150278][ T9056] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.168882][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 182.178433][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 182.192847][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 182.198673][ T9076] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 182.201673][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 182.228750][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 182.237805][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 182.246752][ T9058] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 182.302747][ T9058] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 182.322886][ T9075] list_del corruption. prev->next should be ffff888092de4dd0, but was ffff888092de4f30 [ 182.333442][ T9075] ------------[ cut here ]------------ [ 182.338934][ T9075] kernel BUG at lib/list_debug.c:51! [ 182.344278][ T9075] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 182.350360][ T9075] CPU: 0 PID: 9075 Comm: syz-executor.0 Not tainted 5.5.0-rc1-next-20191211-syzkaller #0 [ 182.360297][ T9075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 182.370356][ T9075] RIP: 0010:__list_del_entry_valid.cold+0xf/0x4f [ 182.376679][ T9075] Code: e8 c9 00 cb fd 0f 0b 48 89 f1 48 c7 c7 c0 10 70 88 4c 89 e6 e8 b5 00 cb fd 0f 0b 4c 89 f6 48 c7 c7 60 12 70 88 e8 a4 00 cb fd <0f> 0b 4c 89 ea 4c 89 f6 48 c7 c7 a0 11 70 88 e8 90 00 cb fd 0f 0b [ 182.396293][ T9075] RSP: 0018:ffffc90002697c88 EFLAGS: 00010282 [ 182.402359][ T9075] RAX: 0000000000000054 RBX: ffff888092d7e600 RCX: 0000000000000000 [ 182.410321][ T9075] RDX: 0000000000000000 RSI: ffffffff815e8576 RDI: fffff520004d2f83 [ 182.418284][ T9075] RBP: ffffc90002697ca0 R08: 0000000000000054 R09: ffffed1015d06621 [ 182.426256][ T9075] R10: ffffed1015d06620 R11: ffff8880ae833107 R12: ffff888092d7e700 [ 182.434222][ T9075] R13: ffff888092de4f30 R14: ffff888092de4dd0 R15: ffff888092de4dd0 [ 182.442306][ T9075] FS: 000000000255d940(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 182.451228][ T9075] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 182.457879][ T9075] CR2: 0000001b3102e000 CR3: 00000000a39e6000 CR4: 00000000001426f0 [ 182.465847][ T9075] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 182.473807][ T9075] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 182.481765][ T9075] Call Trace: [ 182.485052][ T9075] __dentry_kill+0x1fd/0x600 [ 182.489703][ T9075] ? dput+0x38/0xe10 [ 182.493641][ T9075] ? dput+0x38/0xe10 [ 182.497530][ T9075] dput+0x62f/0xe10 [ 182.501328][ T9075] simple_recursive_removal+0x5bc/0x6d0 [ 182.506869][ T9075] ? debugfs_rename+0x7f0/0x7f0 [ 182.511711][ T9075] debugfs_remove+0x5e/0x80 [ 182.516220][ T9075] kvm_vcpu_release+0x5c/0xa0 [ 182.520882][ T9075] __fput+0x2ff/0x890 [ 182.524844][ T9075] ? kvm_vm_release+0x60/0x60 [ 182.529527][ T9075] ____fput+0x16/0x20 [ 182.533521][ T9075] task_work_run+0x145/0x1c0 [ 182.538112][ T9075] exit_to_usermode_loop+0x316/0x380 [ 182.543392][ T9075] do_syscall_64+0x676/0x790 [ 182.547993][ T9075] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 182.553865][ T9075] RIP: 0033:0x4144a1 [ 182.557746][ T9075] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 182.577335][ T9075] RSP: 002b:00007ffc4d589190 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 182.585744][ T9075] RAX: 0000000000000000 RBX: 0000000000000006 RCX: 00000000004144a1 [ 182.593696][ T9075] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 182.601659][ T9075] RBP: 0000000000000001 R08: 00000000205d57bf R09: 00000000205d57c3 [ 182.609632][ T9075] R10: 00007ffc4d589270 R11: 0000000000000293 R12: 000000000075bf20 [ 182.617587][ T9075] R13: 000000000002c7ee R14: 0000000000760ed8 R15: 000000000075bf2c [ 182.625596][ T9075] Modules linked in: [ 182.629554][ T9075] ---[ end trace f5f4481bebb51bcf ]--- [ 182.635059][ T9075] RIP: 0010:__list_del_entry_valid.cold+0xf/0x4f [ 182.641364][ T9075] Code: e8 c9 00 cb fd 0f 0b 48 89 f1 48 c7 c7 c0 10 70 88 4c 89 e6 e8 b5 00 cb fd 0f 0b 4c 89 f6 48 c7 c7 60 12 70 88 e8 a4 00 cb fd <0f> 0b 4c 89 ea 4c 89 f6 48 c7 c7 a0 11 70 88 e8 90 00 cb fd 0f 0b [ 182.661250][ T9075] RSP: 0018:ffffc90002697c88 EFLAGS: 00010282 [ 182.667338][ T9075] RAX: 0000000000000054 RBX: ffff888092d7e600 RCX: 0000000000000000 [ 182.675332][ T9075] RDX: 0000000000000000 RSI: ffffffff815e8576 RDI: fffff520004d2f83 [ 182.683321][ T9075] RBP: ffffc90002697ca0 R08: 0000000000000054 R09: ffffed1015d06621 [ 182.691276][ T9075] R10: ffffed1015d06620 R11: ffff8880ae833107 R12: ffff888092d7e700 [ 182.699283][ T9075] R13: ffff888092de4f30 R14: ffff888092de4dd0 R15: ffff888092de4dd0 [ 182.707463][ T9075] FS: 000000000255d940(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 182.716535][ T9075] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 182.723145][ T9075] CR2: 0000001b3102e000 CR3: 00000000a39e6000 CR4: 00000000001426f0 [ 182.731102][ T9075] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 182.739117][ T9075] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 182.747174][ T9075] Kernel panic - not syncing: Fatal exception [ 182.754723][ T9075] Kernel Offset: disabled [ 182.759066][ T9075] Rebooting in 86400 seconds..