[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c.
[   73.631671][   T27] audit: type=1800 audit(1578978478.070:25): pid=9400 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0
[   73.654929][   T27] audit: type=1800 audit(1578978478.070:26): pid=9400 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0
[   73.693074][   T27] audit: type=1800 audit(1578978478.070:27): pid=9400 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0
[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c.

Debian GNU/Linux 7 syzkaller ttyS0

Warning: Permanently added '10.128.0.57' (ECDSA) to the list of known hosts.
2020/01/14 05:08:10 fuzzer started
2020/01/14 05:08:11 dialing manager at 10.128.0.26:34807
2020/01/14 05:08:11 syscalls: 2860
2020/01/14 05:08:11 code coverage: enabled
2020/01/14 05:08:11 comparison tracing: enabled
2020/01/14 05:08:11 extra coverage: enabled
2020/01/14 05:08:11 setuid sandbox: enabled
2020/01/14 05:08:11 namespace sandbox: enabled
2020/01/14 05:08:11 Android sandbox: /sys/fs/selinux/policy does not exist
2020/01/14 05:08:11 fault injection: enabled
2020/01/14 05:08:11 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2020/01/14 05:08:11 net packet injection: enabled
2020/01/14 05:08:11 net device setup: enabled
2020/01/14 05:08:11 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2020/01/14 05:08:11 devlink PCI setup: PCI device 0000:00:10.0 is not available
05:08:13 executing program 0:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
sendmsg$sock(r0, &(0x7f0000003b00)={0x0, 0x0, 0x0}, 0x10)

05:08:13 executing program 1:
r0 = socket(0x22, 0x2, 0x23)
getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000000), &(0x7f0000000040)=0x1)

syzkaller login: [   88.752449][ T9569] IPVS: ftp: loaded support on port[0] = 21
[   88.929256][ T9569] chnl_net:caif_netlink_parms(): no params data found
05:08:13 executing program 2:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x802, 0x0)
write(r0, &(0x7f0000000640)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001000000", 0x24)

[   88.984927][ T9569] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.995854][ T9569] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.005141][ T9569] device bridge_slave_0 entered promiscuous mode
[   89.023667][ T9572] IPVS: ftp: loaded support on port[0] = 21
[   89.028486][ T9569] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.064868][ T9569] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.081286][ T9569] device bridge_slave_1 entered promiscuous mode
[   89.145161][ T9569] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   89.171298][ T9574] IPVS: ftp: loaded support on port[0] = 21
[   89.176911][ T9569] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   89.250339][ T9569] team0: Port device team_slave_0 added
[   89.287592][ T9569] team0: Port device team_slave_1 added
05:08:13 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0xc7)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$kcm(0xa, 0x2, 0x73)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69)
connect(r2, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x3f)
sendmmsg$inet_sctp(r2, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934)

[   89.439864][ T9569] device hsr_slave_0 entered promiscuous mode
[   89.515417][ T9569] device hsr_slave_1 entered promiscuous mode
05:08:14 executing program 4:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xa, 0x18, 0x4, 0x3}, 0x3c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000540)={r0, &(0x7f0000000480)}, 0x10)

[   89.580715][ T9578] IPVS: ftp: loaded support on port[0] = 21
[   89.586909][ T9572] chnl_net:caif_netlink_parms(): no params data found
[   89.609549][ T9574] chnl_net:caif_netlink_parms(): no params data found
[   89.777321][ T9574] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.784452][ T9574] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.805773][ T9574] device bridge_slave_0 entered promiscuous mode
[   89.834798][ T9574] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.841899][ T9574] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.850274][ T9574] device bridge_slave_1 entered promiscuous mode
[   89.857528][ T9572] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.865501][ T9572] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.873606][ T9572] device bridge_slave_0 entered promiscuous mode
[   89.882275][ T9572] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.889413][ T9572] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.897723][ T9572] device bridge_slave_1 entered promiscuous mode
[   89.932128][ T9580] IPVS: ftp: loaded support on port[0] = 21
[   89.970205][ T9574] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
05:08:14 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/current\x00', 0x2, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0)
write$sndseq(r3, &(0x7f0000000080)=[{0x10081, 0x5}], 0x30)
write$sndseq(r3, &(0x7f0000000080)=[{0x10081, 0x6, 0x0, 0x0, @tick, {}, {}, @raw8={"26fca6df95f88cd60bc421c2"}}], 0x30)

[   90.019317][ T9572] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   90.034531][ T9569] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   90.099875][ T9574] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   90.131897][ T9572] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   90.143344][ T9569] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   90.191015][ T9569] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   90.239119][ T9569] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   90.310583][ T9574] team0: Port device team_slave_0 added
[   90.344517][ T9572] team0: Port device team_slave_0 added
[   90.365931][ T9574] team0: Port device team_slave_1 added
[   90.381608][ T9582] IPVS: ftp: loaded support on port[0] = 21
[   90.382145][ T9578] chnl_net:caif_netlink_parms(): no params data found
[   90.400148][ T9572] team0: Port device team_slave_1 added
[   90.477966][ T9572] device hsr_slave_0 entered promiscuous mode
[   90.514980][ T9572] device hsr_slave_1 entered promiscuous mode
[   90.584895][ T9572] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   90.592707][ T9572] Cannot create hsr debugfs directory
[   90.677882][ T9574] device hsr_slave_0 entered promiscuous mode
[   90.715192][ T9574] device hsr_slave_1 entered promiscuous mode
[   90.764774][ T9574] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   90.772333][ T9574] Cannot create hsr debugfs directory
[   90.784049][ T9578] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.792240][ T9578] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.802321][ T9578] device bridge_slave_0 entered promiscuous mode
[   90.812122][ T9578] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.819323][ T9578] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.826959][ T9578] device bridge_slave_1 entered promiscuous mode
[   90.925405][ T9578] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   90.938834][ T9578] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   91.004549][ T9574] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   91.089342][ T9574] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   91.159209][ T9578] team0: Port device team_slave_0 added
[   91.169895][ T9578] team0: Port device team_slave_1 added
[   91.187001][ T9574] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   91.247707][ T9572] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   91.286502][ T9580] chnl_net:caif_netlink_parms(): no params data found
[   91.320779][ T9574] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   91.376996][ T9572] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   91.427875][ T9572] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   91.488053][ T9572] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   91.570310][ T9580] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.578016][ T9580] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.586458][ T9580] device bridge_slave_0 entered promiscuous mode
[   91.648639][ T9578] device hsr_slave_0 entered promiscuous mode
[   91.705014][ T9578] device hsr_slave_1 entered promiscuous mode
[   91.754774][ T9578] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   91.762346][ T9578] Cannot create hsr debugfs directory
[   91.776379][ T9580] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.783441][ T9580] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.791525][ T9580] device bridge_slave_1 entered promiscuous mode
[   91.814589][ T9569] 8021q: adding VLAN 0 to HW filter on device bond0
[   91.856606][ T9580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   91.869430][ T9580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   91.893836][ T9582] chnl_net:caif_netlink_parms(): no params data found
[   91.947560][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   91.956226][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   91.983910][ T9569] 8021q: adding VLAN 0 to HW filter on device team0
[   91.996765][ T9580] team0: Port device team_slave_0 added
[   92.024176][ T9580] team0: Port device team_slave_1 added
[   92.063705][ T9582] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.071328][ T9582] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.079274][ T9582] device bridge_slave_0 entered promiscuous mode
[   92.088650][ T9582] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.096009][ T9582] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.103647][ T9582] device bridge_slave_1 entered promiscuous mode
[   92.131386][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   92.140193][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   92.149151][ T2721] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.156355][ T2721] bridge0: port 1(bridge_slave_0) entered forwarding state
[   92.167626][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   92.175749][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   92.184281][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   92.192918][ T2721] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.200014][ T2721] bridge0: port 2(bridge_slave_1) entered forwarding state
[   92.226335][ T9582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   92.238476][ T9582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   92.298852][ T9580] device hsr_slave_0 entered promiscuous mode
[   92.365147][ T9580] device hsr_slave_1 entered promiscuous mode
[   92.404799][ T9580] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   92.412384][ T9580] Cannot create hsr debugfs directory
[   92.441207][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   92.471751][ T9574] 8021q: adding VLAN 0 to HW filter on device bond0
[   92.486588][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   92.518593][ T9578] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   92.607528][ T9582] team0: Port device team_slave_0 added
[   92.627244][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   92.636379][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   92.644634][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   92.652823][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   92.660773][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   92.669868][ T9578] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   92.741390][ T9574] 8021q: adding VLAN 0 to HW filter on device team0
[   92.749710][ T9582] team0: Port device team_slave_1 added
[   92.773341][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   92.782799][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   92.792286][ T9578] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   92.898000][ T9582] device hsr_slave_0 entered promiscuous mode
[   92.936118][ T9582] device hsr_slave_1 entered promiscuous mode
[   92.975075][ T9582] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   92.982654][ T9582] Cannot create hsr debugfs directory
[   92.991593][ T9572] 8021q: adding VLAN 0 to HW filter on device bond0
[   93.004868][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   93.013178][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   93.026255][ T9578] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   93.097608][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   93.106288][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   93.115368][ T2986] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.122408][ T2986] bridge0: port 1(bridge_slave_0) entered forwarding state
[   93.130358][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   93.139318][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   93.147599][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   93.155466][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   93.163555][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   93.206334][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   93.220177][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   93.228706][ T2974] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.235813][ T2974] bridge0: port 2(bridge_slave_1) entered forwarding state
[   93.255011][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   93.263656][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   93.272622][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   93.281351][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   93.292477][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   93.310993][ T9572] 8021q: adding VLAN 0 to HW filter on device team0
[   93.343617][ T9569] 8021q: adding VLAN 0 to HW filter on device batadv0
[   93.368118][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   93.382771][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   93.392126][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   93.400773][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   93.409587][ T9580] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   93.467501][ T9580] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   93.508120][ T9580] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   93.550226][ T9580] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   93.617556][ T2691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   93.626197][ T2691] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   93.634463][ T2691] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.641561][ T2691] bridge0: port 1(bridge_slave_0) entered forwarding state
[   93.649243][ T2691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   93.658100][ T2691] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   93.667132][ T2691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   93.675656][ T2691] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   93.684627][ T2691] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   93.714112][ T9574] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   93.766787][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   93.779602][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   93.788635][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   93.797434][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   93.805995][ T2721] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.813023][ T2721] bridge0: port 2(bridge_slave_1) entered forwarding state
[   93.823451][ T9582] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   93.900251][ T9569] device veth0_vlan entered promiscuous mode
[   93.909866][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   93.918482][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   93.927114][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   93.935676][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   93.944264][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   93.952839][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   93.964153][ T9582] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   94.018248][ T9582] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   94.081999][ T9582] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   94.150318][ T9569] device veth1_vlan entered promiscuous mode
[   94.181460][ T9574] 8021q: adding VLAN 0 to HW filter on device batadv0
[   94.198036][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   94.206501][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   94.215750][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   94.224071][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   94.233326][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   94.242051][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   94.249848][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   94.292072][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   94.301320][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   94.310341][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   94.319420][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   94.328705][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   94.369706][ T9572] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   94.383933][ T9572] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   94.398296][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   94.407451][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   94.432098][ T9574] device veth0_vlan entered promiscuous mode
[   94.451933][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   94.464967][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   94.482987][ T9574] device veth1_vlan entered promiscuous mode
[   94.502543][ T9578] 8021q: adding VLAN 0 to HW filter on device bond0
[   94.512352][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   94.536041][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   94.543781][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   94.582307][ T9580] 8021q: adding VLAN 0 to HW filter on device bond0
05:08:19 executing program 0:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
sendmsg$sock(r0, &(0x7f0000003b00)={0x0, 0x0, 0x0}, 0x10)

[   94.632295][ T9578] 8021q: adding VLAN 0 to HW filter on device team0
[   94.641583][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   94.650941][ T9569] ------------[ cut here ]------------
[   94.652996][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   94.656423][ T9569] kernel BUG at fs/namei.c:684!
[   94.662516][ T9569] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[   94.664330][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   94.668930][ T9569] CPU: 1 PID: 9569 Comm: syz-executor.0 Not tainted 5.5.0-rc5-next-20200113-syzkaller #0
[   94.668937][ T9569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   94.668954][ T9569] RIP: 0010:unlazy_walk+0x306/0x3b0
[   94.668968][ T9569] Code: ff ff ff e8 6c 3f a1 ff e8 e7 d8 b3 ff 48 c7 c6 74 6c c1 81 48 c7 c7 00 f7 ba 89 e8 e4 97 99 ff e9 d8 fe ff ff e8 ca d8 b3 ff <0f> 0b e8 c3 d8 b3 ff 0f 0b e8 bc d8 b3 ff e8 27 86 a0 ff 31 ff 89
[   94.668976][ T9569] RSP: 0018:ffffc9000647fba0 EFLAGS: 00010293
[   94.668988][ T9569] RAX: ffff88808c626040 RBX: ffffc9000647fc60 RCX: ffffffff81c16a16
[   94.668996][ T9569] RDX: 0000000000000000 RSI: ffffffff81c16ca6 RDI: 0000000000000005
[   94.669004][ T9569] RBP: ffffc9000647fbd0 R08: ffff88808c626040 R09: ffff88808c6268d8
[   94.669012][ T9569] R10: fffffbfff1549b88 R11: ffffffff8aa4dc47 R12: 0000000000000009
[   94.669021][ T9569] R13: ffffc9000647fc68 R14: ffff88808eacc9e0 R15: 0000000000000000
[   94.669032][ T9569] FS:  0000000001b60940(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000
[   94.669040][ T9569] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   94.669047][ T9569] CR2: 0000000001b69978 CR3: 000000007def9000 CR4: 00000000001406e0
[   94.669060][ T9569] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   94.677460][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   94.682367][ T9569] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   94.692874][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   94.702298][ T9569] Call Trace:
[   94.702320][ T9569]  path_mountpoint.isra.0+0x1d5/0x340
[   94.702335][ T9569]  filename_mountpoint+0x181/0x380
[   94.702349][ T9569]  ? filename_parentat.isra.0+0x400/0x400
[   94.702366][ T9569]  ? rcu_lockdep_current_cpu_online+0xe3/0x130
[   94.702387][ T9569]  ? __sanitizer_cov_trace_cmp8+0x18/0x20
[   94.702406][ T9569]  ? strncpy_from_user+0x2b4/0x400
[   94.702424][ T9569]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[   94.702434][ T9569]  ? getname_flags+0x277/0x5b0
[   94.702447][ T9569]  user_path_mountpoint_at+0x3a/0x50
[   94.702459][ T9569]  ksys_umount+0x164/0xef0
[   94.702475][ T9569]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[   94.702488][ T9569]  ? __detach_mounts+0x290/0x290
[   94.702502][ T9569]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[   94.702521][ T9569]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[   94.722428][ T9582] 8021q: adding VLAN 0 to HW filter on device bond0
[   94.727302][ T9569]  ? do_syscall_64+0x26/0x790
[   94.727318][ T9569]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[   94.727331][ T9569]  ? do_syscall_64+0x26/0x790
[   94.727346][ T9569]  ? lockdep_hardirqs_on+0x421/0x5e0
[   94.727359][ T9569]  __x64_sys_umount+0x54/0x80
[   94.727380][ T9569]  do_syscall_64+0xfa/0x790
[   94.743970][ T9582] 8021q: adding VLAN 0 to HW filter on device team0
[   94.749370][ T9569]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[   94.749381][ T9569] RIP: 0033:0x45d977
[   94.749395][ T9569] Code: 64 89 04 25 d0 02 00 00 58 5f ff d0 48 89 c7 e8 2f be ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 4d 8c fb ff c3 66 2e 0f 1f 84 00 00 00 00
[   94.749402][ T9569] RSP: 002b:00007ffd94074b98 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6
[   94.749414][ T9569] RAX: ffffffffffffffda RBX: 000000000001717c RCX: 000000000045d977
[   94.749422][ T9569] RDX: 0000000000403720 RSI: 0000000000000002 RDI: 00007ffd94074c40
[   94.749428][ T9569] RBP: 0000000000000002 R08: 0000000000000000 R09: 000000000000000e
[   94.749442][ T9569] R10: 000000000000000a R11: 0000000000000206 R12: 00007ffd94075cd0
[   94.769907][ T9580] 8021q: adding VLAN 0 to HW filter on device team0
[   94.773344][ T9569] R13: 0000000001b61940 R14: 0000000000000000 R15: 00007ffd94075cd0
[   94.808326][ T9580] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   94.811929][ T9569] Modules linked in:
[   94.819997][ T9580] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   95.006970][ T9569] ---[ end trace 1e330058231bafab ]---
[   95.065800][ T9569] RIP: 0010:unlazy_walk+0x306/0x3b0
[   95.071010][ T9569] Code: ff ff ff e8 6c 3f a1 ff e8 e7 d8 b3 ff 48 c7 c6 74 6c c1 81 48 c7 c7 00 f7 ba 89 e8 e4 97 99 ff e9 d8 fe ff ff e8 ca d8 b3 ff <0f> 0b e8 c3 d8 b3 ff 0f 0b e8 bc d8 b3 ff e8 27 86 a0 ff 31 ff 89
[   95.078599][ T9572] 8021q: adding VLAN 0 to HW filter on device batadv0
[   95.097608][ T9569] RSP: 0018:ffffc9000647fba0 EFLAGS: 00010293
[   95.105290][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   95.112895][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   95.121504][ T9569] RAX: ffff88808c626040 RBX: ffffc9000647fc60 RCX: ffffffff81c16a16
[   95.130739][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   95.134737][ T9569] RDX: 0000000000000000 RSI: ffffffff81c16ca6 RDI: 0000000000000005
[   95.140037][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   95.149141][ T9569] RBP: ffffc9000647fbd0 R08: ffff88808c626040 R09: ffff88808c6268d8
[   95.155725][ T2721] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.162951][ T9569] R10: fffffbfff1549b88 R11: ffffffff8aa4dc47 R12: 0000000000000009
[   95.169986][ T2721] bridge0: port 1(bridge_slave_0) entered forwarding state
[   95.171247][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   95.181495][ T9569] R13: ffffc9000647fc68 R14: ffff88808eacc9e0 R15: 0000000000000000
[   95.186622][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   95.193902][ T9569] FS:  0000000001b60940(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000
[   95.202420][ T2721] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.212459][ T9569] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   95.218865][ T2721] bridge0: port 2(bridge_slave_1) entered forwarding state
[   95.228121][ T9569] CR2: ffffffffff600400 CR3: 000000007def9000 CR4: 00000000001406e0
[   95.234154][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   95.239720][ T9569] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   95.239729][ T9569] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   95.239738][ T9569] Kernel panic - not syncing: Fatal exception
[   95.241082][ T9569] Kernel Offset: disabled
[   95.282482][ T9569] Rebooting in 86400 seconds..