[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 70.818388][ T27] audit: type=1800 audit(1578970637.628:25): pid=9693 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 70.838226][ T27] audit: type=1800 audit(1578970637.628:26): pid=9693 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 70.890836][ T27] audit: type=1800 audit(1578970637.638:27): pid=9693 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.35' (ECDSA) to the list of known hosts. 2020/01/14 02:57:29 fuzzer started 2020/01/14 02:57:32 dialing manager at 10.128.0.26:43159 2020/01/14 02:57:32 syscalls: 2860 2020/01/14 02:57:32 code coverage: enabled 2020/01/14 02:57:32 comparison tracing: enabled 2020/01/14 02:57:32 extra coverage: enabled 2020/01/14 02:57:32 setuid sandbox: enabled 2020/01/14 02:57:32 namespace sandbox: enabled 2020/01/14 02:57:32 Android sandbox: /sys/fs/selinux/policy does not exist 2020/01/14 02:57:32 fault injection: enabled 2020/01/14 02:57:32 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/01/14 02:57:32 net packet injection: enabled 2020/01/14 02:57:32 net device setup: enabled 2020/01/14 02:57:32 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/01/14 02:57:32 devlink PCI setup: PCI device 0000:00:10.0 is not available 02:57:33 executing program 0: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) r1 = socket(0x200000100000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) bind$packet(r1, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000240)=0x9, 0x4) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)=0x400, 0xfffffea2) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f00000001c0)=0x8, 0x4) io_setup(0x1000000007, &(0x7f0000000100)=0x0) io_submit(r3, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000040), 0xfdef}]) 02:57:33 executing program 1: r0 = socket(0x2, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x3, &(0x7f0000000280)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0x54}}, &(0x7f0000000140)='GPL\x00', 0x1, 0xfc76, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000040)}, 0x48) syzkaller login: [ 86.679752][ T9861] IPVS: ftp: loaded support on port[0] = 21 [ 86.856683][ T9861] chnl_net:caif_netlink_parms(): no params data found 02:57:33 executing program 2: r0 = syz_open_dev$mouse(0x0, 0x0, 0x70eb1d9907064668) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000640)={0xffffffffffffffff}) r2 = socket$packet(0x11, 0x3, 0x300) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, &(0x7f0000000a40)) connect$can_bcm(r0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) pipe(&(0x7f0000000100)={0xffffffffffffffff}) close(r5) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r7}}, 0x10) close(r5) ioctl$TIOCCBRK(0xffffffffffffffff, 0x5428) execve(&(0x7f0000000440)='./file0\x00', &(0x7f00000006c0)=[0x0], 0x0) [ 86.906398][ T9864] IPVS: ftp: loaded support on port[0] = 21 [ 86.938758][ T9861] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.963588][ T9861] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.972392][ T9861] device bridge_slave_0 entered promiscuous mode [ 87.015027][ T9861] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.022141][ T9861] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.045673][ T9861] device bridge_slave_1 entered promiscuous mode [ 87.094706][ T9861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.108354][ T9861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.111775][ T9866] IPVS: ftp: loaded support on port[0] = 21 [ 87.140949][ T9861] team0: Port device team_slave_0 added [ 87.182848][ T9861] team0: Port device team_slave_1 added [ 87.238537][ T9864] chnl_net:caif_netlink_parms(): no params data found 02:57:34 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000140)=ANY=[@ANYBLOB='D'], 0x1) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) [ 87.287829][ T9861] device hsr_slave_0 entered promiscuous mode [ 87.354018][ T9861] device hsr_slave_1 entered promiscuous mode 02:57:34 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, 0x0, &(0x7f0000002900)) [ 87.555082][ T9864] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.562799][ T9869] IPVS: ftp: loaded support on port[0] = 21 [ 87.573480][ T9864] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.581695][ T9864] device bridge_slave_0 entered promiscuous mode [ 87.609654][ T9864] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.623625][ T9864] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.631676][ T9864] device bridge_slave_1 entered promiscuous mode [ 87.723689][ T9864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.769305][ T9864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.796915][ T9861] netdevsim netdevsim0 netdevsim0: renamed from eth0 02:57:34 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000001200)='SEG6\x00') pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x800000000000000) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0xfdcd542d30714ab3, 0x0) write$nbd(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000140)) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r2, &(0x7f0000000040)={0x1a, 0x0, 0x1f}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000000)={&(0x7f0000000200), 0x10, &(0x7f00000002c0)={0x0}}, 0x0) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r3, 0x16) [ 87.880167][ T9861] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.884619][ T9871] IPVS: ftp: loaded support on port[0] = 21 [ 87.928830][ T9861] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.993515][ T9864] team0: Port device team_slave_0 added [ 88.014659][ T9866] chnl_net:caif_netlink_parms(): no params data found [ 88.033641][ T9861] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.076050][ T9864] team0: Port device team_slave_1 added [ 88.108765][ T9874] IPVS: ftp: loaded support on port[0] = 21 [ 88.206544][ T9864] device hsr_slave_0 entered promiscuous mode [ 88.243778][ T9864] device hsr_slave_1 entered promiscuous mode [ 88.294355][ T9864] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.302082][ T9864] Cannot create hsr debugfs directory [ 88.310945][ T9866] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.318698][ T9866] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.326588][ T9866] device bridge_slave_0 entered promiscuous mode [ 88.370854][ T9866] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.379529][ T9866] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.387454][ T9866] device bridge_slave_1 entered promiscuous mode [ 88.426972][ T9869] chnl_net:caif_netlink_parms(): no params data found [ 88.445072][ T9866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.460128][ T9866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.521657][ T9866] team0: Port device team_slave_0 added [ 88.564918][ T9869] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.572019][ T9869] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.580583][ T9869] device bridge_slave_0 entered promiscuous mode [ 88.590216][ T9869] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.597420][ T9869] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.605709][ T9869] device bridge_slave_1 entered promiscuous mode [ 88.617903][ T9866] team0: Port device team_slave_1 added [ 88.657014][ T9869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.668511][ T9869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.696705][ T9869] team0: Port device team_slave_0 added [ 88.716976][ T9871] chnl_net:caif_netlink_parms(): no params data found [ 88.734592][ T9869] team0: Port device team_slave_1 added [ 88.758385][ T9864] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.877794][ T9866] device hsr_slave_0 entered promiscuous mode [ 88.933924][ T9866] device hsr_slave_1 entered promiscuous mode [ 88.973617][ T9866] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.981243][ T9866] Cannot create hsr debugfs directory [ 88.987111][ T9864] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.048079][ T9864] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.125913][ T9869] device hsr_slave_0 entered promiscuous mode [ 89.174008][ T9869] device hsr_slave_1 entered promiscuous mode [ 89.213563][ T9869] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.221167][ T9869] Cannot create hsr debugfs directory [ 89.246426][ T9864] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.382702][ T9861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.404714][ T9871] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.412822][ T9871] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.420779][ T9871] device bridge_slave_0 entered promiscuous mode [ 89.428219][ T9874] chnl_net:caif_netlink_parms(): no params data found [ 89.467592][ T9871] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.478183][ T9871] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.486232][ T9871] device bridge_slave_1 entered promiscuous mode [ 89.508741][ T9871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.524623][ T9861] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.538335][ T9871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.557165][ T3365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 89.566482][ T3365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 89.619266][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 89.631189][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 89.642408][ T19] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.649644][ T19] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.659486][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 89.668793][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 89.677509][ T19] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.684616][ T19] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.692171][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 89.708241][ T9871] team0: Port device team_slave_0 added [ 89.719214][ T9871] team0: Port device team_slave_1 added [ 89.796800][ T9871] device hsr_slave_0 entered promiscuous mode [ 89.833982][ T9871] device hsr_slave_1 entered promiscuous mode [ 89.874134][ T9871] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.881736][ T9871] Cannot create hsr debugfs directory [ 89.889702][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 89.900163][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 89.937598][ T2708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 89.946559][ T2708] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 89.967095][ T9874] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.975318][ T9874] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.983046][ T9874] device bridge_slave_0 entered promiscuous mode [ 90.008538][ T2723] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 90.017701][ T2723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 90.026763][ T2723] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 90.036569][ T2723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 90.045199][ T2723] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 90.054077][ T2723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 90.062404][ T2723] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 90.084049][ T9874] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.091141][ T9874] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.099303][ T9874] device bridge_slave_1 entered promiscuous mode [ 90.106999][ T9869] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.166096][ T9869] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.246413][ T9869] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.309962][ T9866] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.360464][ T9866] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.396269][ T9869] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.457943][ T9874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.473970][ T9866] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.539767][ T9874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.566189][ T9866] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.623349][ T9864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.637117][ T9874] team0: Port device team_slave_0 added [ 90.660020][ T2710] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 90.667694][ T2710] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 90.685938][ T9861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.698544][ T9874] team0: Port device team_slave_1 added [ 90.719023][ T9871] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 90.796962][ T9871] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 90.850029][ T9871] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 90.933127][ T9864] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.997279][ T9874] device hsr_slave_0 entered promiscuous mode [ 91.053759][ T9874] device hsr_slave_1 entered promiscuous mode [ 91.103891][ T9874] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.111496][ T9874] Cannot create hsr debugfs directory [ 91.129006][ T3365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 91.137021][ T3365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 91.145692][ T9871] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 91.236781][ T3365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 91.246250][ T3365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 91.255378][ T3365] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.262527][ T3365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.270964][ T3365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 91.279943][ T3365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 91.288755][ T3365] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.295898][ T3365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.304394][ T3365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 91.312942][ T3365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 91.366396][ T2710] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 91.375890][ T2710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 91.384750][ T2710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 91.393322][ T2710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 91.402030][ T2710] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 91.410831][ T2710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 91.419596][ T2710] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 91.428855][ T2710] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 91.473332][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 91.485577][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 91.526218][ T9861] device veth0_vlan entered promiscuous mode [ 91.534474][ T2710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 91.542694][ T2710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 91.552010][ T2710] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 91.559877][ T2710] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 91.579921][ T9864] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.593047][ T9864] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 91.619720][ T2710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 91.629217][ T2710] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 91.647654][ T9869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.662024][ T9866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.684209][ T9861] device veth1_vlan entered promiscuous mode [ 91.707342][ T2708] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 91.715703][ T2708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 91.724175][ T2708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 91.732303][ T9874] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 91.777270][ T9866] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.792633][ T9874] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 91.826357][ T2723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 91.834424][ T2723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 91.842099][ T2723] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 91.849815][ T2723] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 91.857364][ T2723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 91.866875][ T2723] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 91.875692][ T2723] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.882840][ T2723] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.892358][ T9869] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.917819][ T9864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.936193][ T9874] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 91.986012][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 91.994445][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 92.024887][ T9874] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 92.100927][ T2708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 92.109869][ T2708] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 92.119267][ T2708] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.126507][ T2708] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.134218][ T2708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 92.142820][ T2708] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 92.151493][ T2708] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.158601][ T2708] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.166534][ T2708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 92.175215][ T2708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 92.184085][ T2708] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 02:57:39 executing program 0: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) r1 = socket(0x200000100000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) bind$packet(r1, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000240)=0x9, 0x4) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)=0x400, 0xfffffea2) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f00000001c0)=0x8, 0x4) io_setup(0x1000000007, &(0x7f0000000100)=0x0) io_submit(r3, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000040), 0xfdef}]) [ 92.225083][ T2708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 92.241979][ T2708] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 92.242907][ T9861] ------------[ cut here ]------------ [ 92.251130][ T2708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 92.255304][ T9861] kernel BUG at fs/namei.c:684! [ 92.268565][ T9861] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 92.269484][ T2708] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 92.274649][ T9861] CPU: 1 PID: 9861 Comm: syz-executor.0 Not tainted 5.5.0-rc5-next-20200113-syzkaller #0 [ 92.274662][ T9861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 92.274680][ T9861] RIP: 0010:unlazy_walk+0x306/0x3b0 [ 92.274693][ T9861] Code: ff ff ff e8 6c 3f a1 ff e8 e7 d8 b3 ff 48 c7 c6 74 6c c1 81 48 c7 c7 00 f7 ba 89 e8 e4 97 99 ff e9 d8 fe ff ff e8 ca d8 b3 ff <0f> 0b e8 c3 d8 b3 ff 0f 0b e8 bc d8 b3 ff e8 27 86 a0 ff 31 ff 89 [ 92.274700][ T9861] RSP: 0018:ffffc90006547ba0 EFLAGS: 00010293 [ 92.274712][ T9861] RAX: ffff88807dc784c0 RBX: ffffc90006547c60 RCX: ffffffff81c16a16 [ 92.274720][ T9861] RDX: 0000000000000000 RSI: ffffffff81c16ca6 RDI: 0000000000000005 [ 92.274729][ T9861] RBP: ffffc90006547bd0 R08: ffff88807dc784c0 R09: ffff88807dc78d58 [ 92.274737][ T9861] R10: fffffbfff1549b88 R11: ffffffff8aa4dc47 R12: 0000000000000009 [ 92.274745][ T9861] R13: ffffc90006547c68 R14: ffff888092a959e0 R15: 0000000000000000 [ 92.274756][ T9861] FS: 00000000016c1940(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 92.274765][ T9861] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 92.274773][ T9861] CR2: 0000000001a44d00 CR3: 000000007dc56000 CR4: 00000000001406e0 [ 92.274784][ T9861] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 92.274792][ T9861] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 92.274796][ T9861] Call Trace: [ 92.274813][ T9861] path_mountpoint.isra.0+0x1d5/0x340 [ 92.274825][ T9861] ? find_held_lock+0x35/0x130 [ 92.274840][ T9861] filename_mountpoint+0x181/0x380 [ 92.274854][ T9861] ? filename_parentat.isra.0+0x400/0x400 [ 92.274874][ T9861] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 92.283734][ T2708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 92.292562][ T9861] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 92.303670][ T2708] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 92.307791][ T9861] ? strncpy_from_user+0x2b4/0x400 [ 92.328752][ T2708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 92.334226][ T9861] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 92.334239][ T9861] ? getname_flags+0x277/0x5b0 [ 92.334255][ T9861] user_path_mountpoint_at+0x3a/0x50 [ 92.334275][ T9861] ksys_umount+0x164/0xef0 [ 92.343617][ T2708] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 92.350219][ T9861] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 92.359129][ T2708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 92.366383][ T9861] ? __detach_mounts+0x290/0x290 [ 92.366399][ T9861] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 92.366413][ T9861] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 92.366427][ T9861] ? do_syscall_64+0x26/0x790 [ 92.366440][ T9861] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 92.366460][ T9861] ? do_syscall_64+0x26/0x790 [ 92.375356][ T2708] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 92.383628][ T9861] ? lockdep_hardirqs_on+0x421/0x5e0 [ 92.383643][ T9861] __x64_sys_umount+0x54/0x80 [ 92.383659][ T9861] do_syscall_64+0xfa/0x790 [ 92.383675][ T9861] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 92.383685][ T9861] RIP: 0033:0x45d977 [ 92.383700][ T9861] Code: 64 89 04 25 d0 02 00 00 58 5f ff d0 48 89 c7 e8 2f be ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 4d 8c fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 92.383708][ T9861] RSP: 002b:00007ffe9218ace8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 92.383719][ T9861] RAX: ffffffffffffffda RBX: 0000000000016797 RCX: 000000000045d977 [ 92.383727][ T9861] RDX: 0000000000403720 RSI: 0000000000000002 RDI: 00007ffe9218ad90 [ 92.383734][ T9861] RBP: 0000000000000002 R08: 0000000000000000 R09: 000000000000000e [ 92.383741][ T9861] R10: 000000000000000a R11: 0000000000000206 R12: 00007ffe9218be20 [ 92.383747][ T9861] R13: 00000000016c2940 R14: 0000000000000000 R15: 00007ffe9218be20 [ 92.383756][ T9861] Modules linked in: [ 92.386184][ T9861] ---[ end trace 875a92570d168c57 ]--- [ 92.393792][ T2708] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.398943][ T9861] RIP: 0010:unlazy_walk+0x306/0x3b0 [ 92.406642][ T2708] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.409427][ T2708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 92.415101][ T9861] Code: ff ff ff e8 6c 3f a1 ff e8 e7 d8 b3 ff 48 c7 c6 74 6c c1 81 48 c7 c7 00 f7 ba 89 e8 e4 97 99 ff e9 d8 fe ff ff e8 ca d8 b3 ff <0f> 0b e8 c3 d8 b3 ff 0f 0b e8 bc d8 b3 ff e8 27 86 a0 ff 31 ff 89 [ 92.418830][ T2708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 92.423486][ T9861] RSP: 0018:ffffc90006547ba0 EFLAGS: 00010293 [ 92.449285][ T9871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.483397][ T9861] RAX: ffff88807dc784c0 RBX: ffffc90006547c60 RCX: ffffffff81c16a16 [ 92.740619][ T9861] RDX: 0000000000000000 RSI: ffffffff81c16ca6 RDI: 0000000000000005 [ 92.749002][ T9861] RBP: ffffc90006547bd0 R08: ffff88807dc784c0 R09: ffff88807dc78d58 [ 92.757922][ T9866] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 92.768978][ T2723] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 92.776674][ T9861] R10: fffffbfff1549b88 R11: ffffffff8aa4dc47 R12: 0000000000000009 [ 92.785781][ T2723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 92.794264][ T9861] R13: ffffc90006547c68 R14: ffff888092a959e0 R15: 0000000000000000 [ 92.802234][ T9861] FS: 00000000016c1940(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 92.811612][ T9861] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 92.811912][ T2723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 92.820945][ T9861] CR2: 000000000075c000 CR3: 000000007dc56000 CR4: 00000000001406f0 [ 92.827022][ T2723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 92.837054][ T9861] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 92.843081][ T2723] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 92.850671][ T9861] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 92.865889][ T9864] device veth0_vlan entered promiscuous mode [ 92.867078][ T9861] Kernel panic - not syncing: Fatal exception [ 92.879896][ T9861] Kernel Offset: disabled [ 92.884221][ T9861] Rebooting in 86400 seconds..