[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 45.041515][ T26] audit: type=1800 audit(1562451840.536:25): pid=7955 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 45.084118][ T26] audit: type=1800 audit(1562451840.536:26): pid=7955 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 45.135133][ T26] audit: type=1800 audit(1562451840.536:27): pid=7955 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.5' (ECDSA) to the list of known hosts. 2019/07/06 22:24:08 fuzzer started 2019/07/06 22:24:11 dialing manager at 10.128.0.26:33339 2019/07/06 22:24:11 syscalls: 2465 2019/07/06 22:24:11 code coverage: enabled 2019/07/06 22:24:11 comparison tracing: enabled 2019/07/06 22:24:11 extra coverage: extra coverage is not supported by the kernel 2019/07/06 22:24:11 setuid sandbox: enabled 2019/07/06 22:24:11 namespace sandbox: enabled 2019/07/06 22:24:11 Android sandbox: /sys/fs/selinux/policy does not exist 2019/07/06 22:24:11 fault injection: enabled 2019/07/06 22:24:11 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/07/06 22:24:11 net packet injection: enabled 2019/07/06 22:24:11 net device setup: enabled 22:25:05 executing program 0: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) munlock(&(0x7f0000704000/0x1000)=nil, 0x1000) syzkaller login: [ 109.626347][ T8120] IPVS: ftp: loaded support on port[0] = 21 22:25:05 executing program 1: getcwd(&(0x7f0000000000)=""/232, 0xe8) [ 109.730304][ T8120] chnl_net:caif_netlink_parms(): no params data found [ 109.772474][ T8120] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.782516][ T8120] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.791365][ T8120] device bridge_slave_0 entered promiscuous mode [ 109.801300][ T8120] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.808989][ T8120] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.818519][ T8120] device bridge_slave_1 entered promiscuous mode [ 109.847119][ T8120] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 109.865806][ T8120] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 109.876695][ T8123] IPVS: ftp: loaded support on port[0] = 21 [ 109.897396][ T8120] team0: Port device team_slave_0 added [ 109.904898][ T8120] team0: Port device team_slave_1 added 22:25:05 executing program 2: syz_open_dev$sndseq(&(0x7f0000001840)='/dev/snd/seq\x00', 0x0, 0x4000000044200) [ 109.966709][ T8120] device hsr_slave_0 entered promiscuous mode [ 110.045177][ T8120] device hsr_slave_1 entered promiscuous mode [ 110.142529][ T8125] IPVS: ftp: loaded support on port[0] = 21 [ 110.153620][ T8120] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.160964][ T8120] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.168947][ T8120] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.176123][ T8120] bridge0: port 1(bridge_slave_0) entered forwarding state 22:25:05 executing program 3: capset(&(0x7f0000000000)={0x19980330}, &(0x7f00009b3000)={0x0, 0x0, 0xffffffffffffffff}) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x0, 0x6}) [ 110.289985][ T8120] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.342432][ T8120] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.383361][ T3497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 110.406864][ T3497] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.426266][ T3497] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.435734][ T3497] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 110.470156][ T8128] IPVS: ftp: loaded support on port[0] = 21 22:25:06 executing program 4: clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) open(&(0x7f0000000000)='./file0\x00', 0x40, 0x0) mount$fuse(0x20000000, &(0x7f0000000180)='./file0\x00', 0x0, 0x2008007801, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x20024, &(0x7f0000000040)=ANY=[@ANYBLOB="2c636f6e746578743dd0e87f01197dceb481b2b7f8c80f49b5fb91984eb1dbc42b35c98dca2e0c92cc9f3c62e1710a2467f195789ea786f4c3784e81ff97fa1cc6039c013cceaa127248da17e7b91d0f258260a9893dc01c3b3bd43a639188"]) [ 110.505796][ T3497] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 110.514882][ T3497] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.522003][ T3497] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.533304][ T3497] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 110.554487][ T3497] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.561600][ T3497] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.649658][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 110.659155][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 110.680348][ T8125] chnl_net:caif_netlink_parms(): no params data found [ 110.710650][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 110.719766][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 110.730072][ T8123] chnl_net:caif_netlink_parms(): no params data found [ 110.752340][ T8134] IPVS: ftp: loaded support on port[0] = 21 [ 110.762048][ T8120] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 110.781794][ T8120] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 110.799508][ T8129] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready 22:25:06 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x3}]}]}}, &(0x7f00000000c0)=""/202, 0x32, 0xca, 0x1}, 0x20) [ 110.809153][ T8129] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 110.909886][ T8125] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.918215][ T8125] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.926627][ T8125] device bridge_slave_0 entered promiscuous mode [ 110.934852][ T8125] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.941939][ T8125] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.950123][ T8125] device bridge_slave_1 entered promiscuous mode [ 110.990447][ T8125] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 111.001339][ T8120] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.009077][ T8123] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.019328][ T8123] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.027772][ T8123] device bridge_slave_0 entered promiscuous mode [ 111.038123][ T8123] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.045511][ T8123] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.053474][ T8123] device bridge_slave_1 entered promiscuous mode [ 111.066320][ T8125] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 111.066435][ T8136] IPVS: ftp: loaded support on port[0] = 21 [ 111.131495][ T8125] team0: Port device team_slave_0 added [ 111.151694][ T8123] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 111.165502][ T8125] team0: Port device team_slave_1 added [ 111.209761][ T8123] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 111.248022][ T8123] team0: Port device team_slave_0 added 22:25:06 executing program 0: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) munlock(&(0x7f0000704000/0x1000)=nil, 0x1000) 22:25:06 executing program 0: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) munlock(&(0x7f0000704000/0x1000)=nil, 0x1000) [ 111.286204][ T8128] chnl_net:caif_netlink_parms(): no params data found [ 111.298576][ T8123] team0: Port device team_slave_1 added 22:25:06 executing program 0: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) munlock(&(0x7f0000704000/0x1000)=nil, 0x1000) 22:25:06 executing program 0: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000704000/0x1000)=nil, 0x1000) [ 111.356740][ T8125] device hsr_slave_0 entered promiscuous mode [ 111.374730][ T8125] device hsr_slave_1 entered promiscuous mode 22:25:06 executing program 0: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000704000/0x1000)=nil, 0x1000) 22:25:07 executing program 0: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000704000/0x1000)=nil, 0x1000) [ 111.520691][ T8125] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.527881][ T8125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.535319][ T8125] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.542406][ T8125] bridge0: port 1(bridge_slave_0) entered forwarding state 22:25:07 executing program 0: mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) munlock(&(0x7f0000704000/0x1000)=nil, 0x1000) [ 111.577600][ T8134] chnl_net:caif_netlink_parms(): no params data found [ 111.656847][ T8123] device hsr_slave_0 entered promiscuous mode [ 111.684247][ T8123] device hsr_slave_1 entered promiscuous mode [ 111.786589][ T8128] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.793689][ T8128] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.801780][ T8128] device bridge_slave_0 entered promiscuous mode [ 111.820890][ T8129] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.829094][ T8129] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.843596][ T8128] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.851213][ T8128] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.859644][ T8128] device bridge_slave_1 entered promiscuous mode [ 111.870619][ T8134] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.879508][ T8134] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.887387][ T8134] device bridge_slave_0 entered promiscuous mode [ 111.895884][ T8134] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.902970][ T8134] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.911677][ T8134] device bridge_slave_1 entered promiscuous mode [ 111.961687][ T8134] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 111.971743][ T8128] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 111.987182][ T8128] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 112.026629][ T8128] team0: Port device team_slave_0 added [ 112.033663][ T8134] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 112.063229][ T8125] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.074705][ T8128] team0: Port device team_slave_1 added [ 112.082388][ T8134] team0: Port device team_slave_0 added [ 112.089816][ T8134] team0: Port device team_slave_1 added [ 112.099519][ T8136] chnl_net:caif_netlink_parms(): no params data found [ 112.196290][ T8134] device hsr_slave_0 entered promiscuous mode [ 112.234434][ T8134] device hsr_slave_1 entered promiscuous mode [ 112.311594][ T8136] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.319455][ T8136] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.328329][ T8136] device bridge_slave_0 entered promiscuous mode [ 112.337245][ T8136] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.344545][ T8136] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.352186][ T8136] device bridge_slave_1 entered promiscuous mode [ 112.376170][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 112.384305][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 112.435815][ T8128] device hsr_slave_0 entered promiscuous mode [ 112.494896][ T8128] device hsr_slave_1 entered promiscuous mode [ 112.540048][ T8136] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 112.557673][ T8136] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 112.568839][ T8125] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.588096][ T8123] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.607379][ T8136] team0: Port device team_slave_0 added [ 112.615013][ T8136] team0: Port device team_slave_1 added [ 112.637837][ T3497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 112.646932][ T3497] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 112.656335][ T3497] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.663595][ T3497] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.694859][ T8123] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.727367][ T8136] device hsr_slave_0 entered promiscuous mode [ 112.764562][ T8136] device hsr_slave_1 entered promiscuous mode [ 112.825082][ T8126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 112.833383][ T8126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 112.843228][ T8126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 112.852037][ T8126] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 112.861042][ T8126] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.868142][ T8126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.905798][ T8125] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 112.917571][ T8125] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 112.930287][ T3497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 112.939218][ T3497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 112.948788][ T3497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 112.957776][ T3497] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 112.966433][ T3497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 112.976083][ T3497] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 112.984654][ T3497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 112.992940][ T3497] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 113.001454][ T3497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 113.009706][ T3497] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 113.018076][ T3497] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 113.026385][ T3497] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 113.044755][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 113.053817][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 113.065070][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.072134][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.081570][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 113.090378][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 113.098823][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.105906][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.115274][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 113.128820][ T8128] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.150443][ T3497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 113.180975][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 113.190902][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 113.201096][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 113.209765][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 113.218583][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 113.227201][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 113.235038][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 113.242686][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 113.252735][ T8125] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.282025][ T8134] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.292786][ T8128] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.311000][ T8126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 113.320320][ T8126] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 113.343264][ T8123] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 113.356368][ T8123] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 113.366087][ T8129] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 113.375644][ T8129] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 113.383528][ T8129] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 113.392333][ T8129] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 113.401221][ T8129] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 113.410244][ T8129] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 113.418851][ T8129] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.425990][ T8129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.434278][ T8129] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 113.444566][ T8134] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.469713][ T8129] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 113.478815][ T8129] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 113.487436][ T8129] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.494587][ T8129] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.513087][ T8136] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.536657][ T8136] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.543583][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 113.563745][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 113.593543][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.600699][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.610219][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 113.619492][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 113.636940][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.644121][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.651688][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 113.660360][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 113.668142][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 113.692739][ T8123] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.702183][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 113.710915][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 113.720214][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 113.730383][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 113.741152][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 113.749901][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 113.776336][ T8126] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 113.790057][ T8126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 113.799270][ T8126] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 113.808150][ T8126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 113.818101][ T8126] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 113.828034][ T8126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 113.836623][ T8126] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 113.845359][ T8126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 113.856793][ T8126] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 113.865380][ T8126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 113.874225][ T8126] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 113.895513][ T8134] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 113.910423][ T8126] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 113.919233][ T8126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 113.931149][ T8126] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 113.940062][ T8126] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.947285][ T8126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.955385][ T8126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 113.964097][ T8126] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 113.972425][ T8126] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.980000][ T8126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.987827][ T8126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 113.996582][ T8126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 114.005315][ T8126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 114.013550][ T8126] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 114.022658][ T8126] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 22:25:09 executing program 1: socket$packet(0x11, 0xa, 0x300) syz_emit_ethernet(0xfdef, &(0x7f0000005fc0)=ANY=[@ANYBLOB="00000000000000000000f6ffb8f5351b41176a2ae99671dea06184c0654d57a23f95ca080a95d117041ac40e15831aee43676cca04b4b07948c99a5117408b20710c"], 0x0) 22:25:09 executing program 0: mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) munlock(&(0x7f0000704000/0x1000)=nil, 0x1000) [ 114.059083][ T8126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 114.069818][ T8126] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 114.082133][ T8126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 114.091231][ T8126] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 114.101218][ T8126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 114.109774][ T8126] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 114.118724][ T8126] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 114.130561][ T8128] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 114.153494][ T8134] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.177636][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 114.187172][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 114.210681][ T8136] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 114.230002][ T8136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 114.262976][ T8128] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.290297][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 114.306912][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 114.342178][ T8136] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.527247][ T8215] kasan: CONFIG_KASAN_INLINE enabled [ 114.544710][ T8217] capability: warning: `syz-executor.3' uses 32-bit capabilities (legacy support in use) [ 114.555117][ T8215] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 114.563664][ T8215] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 114.570625][ T8215] CPU: 0 PID: 8215 Comm: syz-executor.5 Not tainted 5.2.0-rc7+ #16 [ 114.578519][ T8215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 114.588597][ T8215] RIP: 0010:btf_struct_resolve+0x42d/0xfc0 [ 114.594411][ T8215] Code: e8 03 42 80 3c 28 00 4d 89 e7 74 08 48 89 df e8 e9 57 25 00 4c 8b 23 49 8d 5c 24 04 48 89 d8 48 c1 e8 03 48 89 85 68 ff ff ff <42> 0f b6 04 28 84 c0 48 8b 55 c8 0f 85 19 04 00 00 4c 8d 6a fc 48 [ 114.614033][ T8215] RSP: 0018:ffff888062ee75f0 EFLAGS: 00010247 [ 114.620127][ T8215] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000040000 [ 114.628087][ T8215] RDX: ffffc90010872000 RSI: 00000000000008ee RDI: 00000000000008ef [ 114.636054][ T8215] RBP: ffff888062ee7690 R08: ffffffff81897da8 R09: fffffbfff1178d03 [ 114.644026][ T8215] R10: fffffbfff1178d03 R11: 1ffffffff1178d02 R12: 0000000000000000 [ 114.651995][ T8215] R13: dffffc0000000000 R14: ffff88809ce99240 R15: ffff888062e06e40 [ 114.659957][ T8215] FS: 00007fc4a956e700(0000) GS:ffff8880aea00000(0000) knlGS:0000000000000000 [ 114.668883][ T8215] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 114.675463][ T8215] CR2: 00007ffd2d1a3cec CR3: 000000009000a000 CR4: 00000000001406f0 [ 114.683430][ T8215] Call Trace: [ 114.686736][ T8215] btf_resolve+0x3ed/0xda0 [ 114.691138][ T8215] ? btf_sec_info_cmp+0x110/0x110 [ 114.696152][ T8215] ? kasan_kmalloc+0x9/0x10 [ 114.700646][ T8215] ? __kmalloc_node+0x4d/0x60 [ 114.705308][ T8215] btf_new_fd+0x216a/0x37b0 [ 114.709796][ T8215] ? __might_fault+0xf9/0x160 [ 114.714464][ T8215] ? btf_release+0xd0/0xd0 [ 114.718875][ T8215] __do_sys_bpf+0x1212/0xc5d0 [ 114.723532][ T8215] ? tomoyo_file_ioctl+0x23/0x30 [ 114.728451][ T8215] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 114.734514][ T8215] ? __bfs+0x550/0x550 [ 114.738591][ T8215] ? __lock_acquire+0xcf7/0x1a40 [ 114.743521][ T8215] ? __bpf_prog_put_rcu+0x320/0x320 [ 114.748709][ T8215] ? __lock_acquire+0xcf7/0x1a40 [ 114.753815][ T8215] ? trace_lock_acquire+0x190/0x190 [ 114.759000][ T8215] ? kasan_check_read+0x11/0x20 [ 114.763834][ T8215] ? do_raw_spin_unlock+0x49/0x260 [ 114.768941][ T8215] ? __might_fault+0xf9/0x160 [ 114.773712][ T8215] ? kasan_check_read+0x11/0x20 [ 114.778547][ T8215] ? _copy_to_user+0xca/0xf0 [ 114.783216][ T8215] ? put_timespec64+0x106/0x150 [ 114.788055][ T8215] ? ktime_get_raw+0xf0/0xf0 [ 114.792647][ T8215] ? prepare_exit_to_usermode+0x1e1/0x4f0 [ 114.798353][ T8215] ? __x64_sys_clock_gettime+0x1c5/0x220 [ 114.803979][ T8215] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 114.809603][ T8215] ? trace_irq_disable_rcuidle+0x23/0x1c0 [ 114.815324][ T8215] ? do_syscall_64+0x1d/0x140 [ 114.820011][ T8215] __x64_sys_bpf+0x7a/0x90 [ 114.824418][ T8215] do_syscall_64+0xfe/0x140 [ 114.828913][ T8215] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 114.834806][ T8215] RIP: 0033:0x4597c9 [ 114.838693][ T8215] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 114.858284][ T8215] RSP: 002b:00007fc4a956dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 114.866683][ T8215] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000004597c9 22:25:10 executing program 3: capset(&(0x7f0000000000)={0x19980330}, &(0x7f00009b3000)={0x0, 0x0, 0xffffffffffffffff}) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x0, 0x6}) 22:25:10 executing program 2: [ 114.874849][ T8215] RDX: 0000000000000020 RSI: 00000000200001c0 RDI: 0000000000000012 [ 114.882826][ T8215] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 114.890806][ T8215] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc4a956e6d4 [ 114.898768][ T8215] R13: 00000000004bfa25 R14: 00000000004d13a0 R15: 00000000ffffffff [ 114.906732][ T8215] Modules linked in: [ 114.918616][ T3890] kobject: 'loop3' (000000003e92a6e7): kobject_uevent_env [ 114.933804][ T8215] ---[ end trace c13e0d12177224aa ]--- [ 114.934809][ T3890] kobject: 'loop3' (000000003e92a6e7): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 114.945284][ T8215] RIP: 0010:btf_struct_resolve+0x42d/0xfc0 [ 114.959836][ T8215] Code: e8 03 42 80 3c 28 00 4d 89 e7 74 08 48 89 df e8 e9 57 25 00 4c 8b 23 49 8d 5c 24 04 48 89 d8 48 c1 e8 03 48 89 85 68 ff ff ff <42> 0f b6 04 28 84 c0 48 8b 55 c8 0f 85 19 04 00 00 4c 8d 6a fc 48 [ 114.970281][ T3890] kobject: 'loop2' (00000000c9ce6777): kobject_uevent_env [ 114.988407][ T8215] RSP: 0018:ffff888062ee75f0 EFLAGS: 00010247 [ 114.994652][ T8215] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000040000 [ 114.999631][ T3890] kobject: 'loop2' (00000000c9ce6777): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 115.002640][ T8215] RDX: ffffc90010872000 RSI: 00000000000008ee RDI: 00000000000008ef [ 115.002646][ T8215] RBP: ffff888062ee7690 R08: ffffffff81897da8 R09: fffffbfff1178d03 [ 115.002651][ T8215] R10: fffffbfff1178d03 R11: 1ffffffff1178d02 R12: 0000000000000000 [ 115.002657][ T8215] R13: dffffc0000000000 R14: ffff88809ce99240 R15: ffff888062e06e40 [ 115.002666][ T8215] FS: 00007fc4a956e700(0000) GS:ffff8880aea00000(0000) knlGS:0000000000000000 [ 115.002680][ T8215] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 115.062099][ T8215] CR2: 00000000007116b4 CR3: 000000009000a000 CR4: 00000000001406f0 [ 115.070417][ T8215] Kernel panic - not syncing: Fatal exception [ 115.077725][ T8215] Kernel Offset: disabled [ 115.082066][ T8215] Rebooting in 86400 seconds..