[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 86.252343][ T27] audit: type=1800 audit(1578984615.766:25): pid=9487 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 86.283736][ T27] audit: type=1800 audit(1578984615.766:26): pid=9487 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 86.326900][ T27] audit: type=1800 audit(1578984615.766:27): pid=9487 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.203' (ECDSA) to the list of known hosts. 2020/01/14 06:50:28 fuzzer started 2020/01/14 06:50:29 dialing manager at 10.128.0.26:34807 2020/01/14 06:50:29 syscalls: 2860 2020/01/14 06:50:29 code coverage: enabled 2020/01/14 06:50:29 comparison tracing: enabled 2020/01/14 06:50:29 extra coverage: enabled 2020/01/14 06:50:29 setuid sandbox: enabled 2020/01/14 06:50:29 namespace sandbox: enabled 2020/01/14 06:50:29 Android sandbox: /sys/fs/selinux/policy does not exist 2020/01/14 06:50:29 fault injection: enabled 2020/01/14 06:50:29 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/01/14 06:50:29 net packet injection: enabled 2020/01/14 06:50:29 net device setup: enabled 2020/01/14 06:50:29 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/01/14 06:50:29 devlink PCI setup: PCI device 0000:00:10.0 is not available 06:50:30 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r0, &(0x7f00000000c0)="e8", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000280), 0x8) 06:50:30 executing program 1: setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000fc7000), 0x3c) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) timer_create(0x6, 0x0, &(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0, 0x4}, 0x127c1, 0x0, 0x4, 0x3, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) syzkaller login: [ 101.155425][ T9654] IPVS: ftp: loaded support on port[0] = 21 [ 101.307863][ T9654] chnl_net:caif_netlink_parms(): no params data found [ 101.358404][ T9654] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.367295][ T9654] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.375956][ T9654] device bridge_slave_0 entered promiscuous mode [ 101.386891][ T9654] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.394091][ T9654] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.402128][ T9654] device bridge_slave_1 entered promiscuous mode [ 101.427905][ T9654] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.439868][ T9654] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 06:50:31 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000440)=""/134) [ 101.468955][ T9654] team0: Port device team_slave_0 added [ 101.470576][ T9657] IPVS: ftp: loaded support on port[0] = 21 [ 101.478110][ T9654] team0: Port device team_slave_1 added [ 101.548217][ T9654] device hsr_slave_0 entered promiscuous mode [ 101.634050][ T9654] device hsr_slave_1 entered promiscuous mode [ 101.723526][ T9659] IPVS: ftp: loaded support on port[0] = 21 06:50:31 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0xc) write(r0, &(0x7f0000000100)="130000001000ffdde200f49ff60f050000230a00", 0x14) [ 101.931065][ T9654] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 102.003789][ T9654] netdevsim netdevsim0 netdevsim1: renamed from eth1 06:50:31 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_read_part_table(0x0, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="0201a6ffffff01000000ff07000000000000550008000000000000000040000000006300000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) [ 102.062563][ T9662] IPVS: ftp: loaded support on port[0] = 21 [ 102.074659][ T9657] chnl_net:caif_netlink_parms(): no params data found [ 102.094556][ T9654] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 102.127663][ T9654] netdevsim netdevsim0 netdevsim3: renamed from eth3 06:50:31 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x412, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) gettid() r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x3, 0x7, 0x1, 0x0, 0x0, {0x0, 0xf0ffff}}, 0x14}}, 0x0) [ 102.297659][ T9659] chnl_net:caif_netlink_parms(): no params data found [ 102.337178][ T9665] IPVS: ftp: loaded support on port[0] = 21 [ 102.447451][ T9657] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.458552][ T9657] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.467012][ T9657] device bridge_slave_0 entered promiscuous mode [ 102.525657][ T9657] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.536786][ T9657] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.544616][ T9657] device bridge_slave_1 entered promiscuous mode [ 102.563628][ T9662] chnl_net:caif_netlink_parms(): no params data found [ 102.621463][ T9657] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.625832][ T9667] IPVS: ftp: loaded support on port[0] = 21 [ 102.630995][ T9659] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.646799][ T9659] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.654699][ T9659] device bridge_slave_0 entered promiscuous mode [ 102.679380][ T9657] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.694560][ T9659] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.701640][ T9659] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.711751][ T9659] device bridge_slave_1 entered promiscuous mode [ 102.719027][ T9662] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.728468][ T9662] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.736410][ T9662] device bridge_slave_0 entered promiscuous mode [ 102.744957][ T9662] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.752011][ T9662] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.759951][ T9662] device bridge_slave_1 entered promiscuous mode [ 102.821886][ T9657] team0: Port device team_slave_0 added [ 102.834716][ T9662] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.849870][ T9662] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.860552][ T9659] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.872418][ T9659] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.883848][ T9657] team0: Port device team_slave_1 added [ 102.930606][ T9662] team0: Port device team_slave_0 added [ 102.978874][ T9654] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.987280][ T9662] team0: Port device team_slave_1 added [ 102.999104][ T9659] team0: Port device team_slave_0 added [ 103.009547][ T9659] team0: Port device team_slave_1 added [ 103.077139][ T9657] device hsr_slave_0 entered promiscuous mode [ 103.124663][ T9657] device hsr_slave_1 entered promiscuous mode [ 103.184891][ T9657] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 103.192710][ T9657] Cannot create hsr debugfs directory [ 103.246288][ T9665] chnl_net:caif_netlink_parms(): no params data found [ 103.325753][ T9662] device hsr_slave_0 entered promiscuous mode [ 103.384022][ T9662] device hsr_slave_1 entered promiscuous mode [ 103.434066][ T9662] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 103.441665][ T9662] Cannot create hsr debugfs directory [ 103.517113][ T9659] device hsr_slave_0 entered promiscuous mode [ 103.565164][ T9659] device hsr_slave_1 entered promiscuous mode [ 103.604083][ T9659] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 103.611643][ T9659] Cannot create hsr debugfs directory [ 103.675586][ T9654] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.682766][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 103.692013][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 103.759868][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 103.768882][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 103.777646][ T2764] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.784933][ T2764] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.812102][ T9665] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.820732][ T9665] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.832378][ T9665] device bridge_slave_0 entered promiscuous mode [ 103.849788][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 103.858657][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 103.867340][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 103.875997][ T2763] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.883051][ T2763] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.892134][ T9667] chnl_net:caif_netlink_parms(): no params data found [ 103.907820][ T9657] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 103.956382][ T9665] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.963471][ T9665] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.972643][ T9665] device bridge_slave_1 entered promiscuous mode [ 104.013741][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 104.023056][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 104.034220][ T9657] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 104.086466][ T9665] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.117824][ T9657] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 104.181603][ T9665] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.199366][ T3046] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 104.207942][ T3046] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 104.223862][ T3046] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 104.232332][ T3046] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 104.241566][ T3046] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 104.250441][ T3046] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 104.259628][ T3046] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 104.273482][ T9657] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 104.351768][ T9667] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.363060][ T9667] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.371023][ T9667] device bridge_slave_0 entered promiscuous mode [ 104.382637][ T9667] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.389827][ T9667] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.397813][ T9667] device bridge_slave_1 entered promiscuous mode [ 104.427404][ T9665] team0: Port device team_slave_0 added [ 104.434870][ T9654] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 104.449138][ T9654] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 104.458304][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 104.470400][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 104.491241][ T9662] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 104.545517][ T9665] team0: Port device team_slave_1 added [ 104.551338][ T9662] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 104.613129][ T9667] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.633557][ T9662] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 104.695802][ T9667] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.717638][ T9659] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 104.765314][ T9662] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 104.877017][ T9665] device hsr_slave_0 entered promiscuous mode [ 104.914510][ T9665] device hsr_slave_1 entered promiscuous mode [ 104.963883][ T9665] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 104.971503][ T9665] Cannot create hsr debugfs directory [ 104.978347][ T9659] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 105.033890][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 105.041378][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 105.053384][ T9659] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 105.088672][ T9667] team0: Port device team_slave_0 added [ 105.096781][ T9667] team0: Port device team_slave_1 added [ 105.122845][ T9654] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.131963][ T9659] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 105.226650][ T9667] device hsr_slave_0 entered promiscuous mode [ 105.274226][ T9667] device hsr_slave_1 entered promiscuous mode [ 105.323856][ T9667] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 105.332064][ T9667] Cannot create hsr debugfs directory [ 105.388637][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 105.398563][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 105.499986][ T9665] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 105.541000][ T9665] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 105.615346][ T9665] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 105.676478][ T9665] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 105.754482][ T9662] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.764590][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 105.772792][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 105.785431][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 105.793219][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 105.822309][ T9659] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.837948][ T9657] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.851294][ T9654] device veth0_vlan entered promiscuous mode [ 105.871272][ T9667] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 105.903104][ T9667] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 105.996140][ T3046] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 106.007282][ T3046] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 106.015856][ T3046] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 106.023486][ T3046] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 106.032340][ T3046] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 106.040417][ T3046] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 106.053242][ T9659] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.063458][ T9662] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.073226][ T9667] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 106.126835][ T9667] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 106.198024][ T9657] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.206810][ T9654] device veth1_vlan entered promiscuous mode [ 106.249821][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 106.259271][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 106.268223][ T2944] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.275332][ T2944] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.283103][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 106.291929][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 106.300296][ T2944] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.307378][ T2944] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.315128][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 106.323623][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 106.331980][ T2944] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.339163][ T2944] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.379215][ T3046] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 106.393756][ T3046] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 106.401636][ T3046] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 106.410351][ T3046] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 106.420403][ T3046] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 106.429971][ T3046] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.437089][ T3046] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.445409][ T3046] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 106.454283][ T3046] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 106.462824][ T3046] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 106.471397][ T3046] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.478479][ T3046] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.487130][ T3046] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 106.495920][ T3046] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 106.504948][ T3046] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.511988][ T3046] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.519634][ T3046] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 106.561954][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 106.571749][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 106.581504][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 106.590854][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 106.599533][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 106.608524][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 106.617012][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 106.626034][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 106.634993][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 106.674514][ T9657] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 106.685023][ T9657] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 106.701596][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 106.710760][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 106.745243][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 106.760198][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 106.769773][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 106.779548][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 106.788396][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 106.797110][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 106.806115][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 106.814805][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 106.823282][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 106.832257][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 106.841088][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 106.855207][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 106.863504][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 106.872087][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 106.880519][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 106.897855][ T9662] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 106.925784][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 106.934240][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 106.941809][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 106.950582][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 106.979997][ T9659] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 106.991494][ T9659] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 107.004082][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 107.011492][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 107.019220][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 107.027716][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 107.055459][ T9657] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.085342][ T9667] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.093156][ T2963] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 107.102488][ T2963] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 107.118900][ T9665] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.129059][ T9662] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.144880][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 107.152356][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 107.190230][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 107.199194][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 107.207454][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 107.216887][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 107.227826][ T9659] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.237072][ T9667] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.256312][ T9665] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.265134][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 107.272890][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 107.333437][ T3046] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 107.343699][ T3046] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 107.352602][ T3046] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 107.362282][ T3046] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 107.371160][ T3046] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.378257][ T3046] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.386706][ T3046] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 107.395520][ T3046] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 107.404625][ T3046] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.411675][ T3046] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.419556][ T3046] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 107.428310][ T3046] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 107.457111][ T9657] device veth0_vlan entered promiscuous mode [ 107.468348][ T3046] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 107.478504][ T3046] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 107.490886][ T3046] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 107.498829][ T3046] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 107.507346][ T3046] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 107.518680][ T3046] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 107.527493][ T3046] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.534607][ T3046] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.544071][ T3046] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 107.552945][ T3046] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 107.562644][ T3046] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 107.571355][ T3046] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.578413][ T3046] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.587178][ T3046] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 107.596106][ T3046] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready 06:50:37 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r0, &(0x7f00000000c0)="e8", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000280), 0x8) [ 107.613185][ T9654] ------------[ cut here ]------------ [ 107.618661][ T9654] kernel BUG at fs/namei.c:684! [ 107.639922][ T9659] device veth0_vlan entered promiscuous mode [ 107.646609][ T9654] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 107.652682][ T9654] CPU: 1 PID: 9654 Comm: syz-executor.0 Not tainted 5.5.0-rc5-next-20200113-syzkaller #0 [ 107.661316][ T9662] device veth0_vlan entered promiscuous mode [ 107.662500][ T9654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 107.674439][ T9662] device veth1_vlan entered promiscuous mode [ 107.678544][ T9654] RIP: 0010:unlazy_walk+0x306/0x3b0 [ 107.689679][ T9654] Code: ff ff ff e8 6c 3f a1 ff e8 e7 d8 b3 ff 48 c7 c6 74 6c c1 81 48 c7 c7 00 f7 ba 89 e8 e4 97 99 ff e9 d8 fe ff ff e8 ca d8 b3 ff <0f> 0b e8 c3 d8 b3 ff 0f 0b e8 bc d8 b3 ff e8 27 86 a0 ff 31 ff 89 [ 107.709405][ T9654] RSP: 0018:ffffc9000260fba0 EFLAGS: 00010293 [ 107.715460][ T9654] RAX: ffff888094ec4180 RBX: ffffc9000260fc60 RCX: ffffffff81c16a16 [ 107.723408][ T9654] RDX: 0000000000000000 RSI: ffffffff81c16ca6 RDI: 0000000000000005 [ 107.731357][ T9654] RBP: ffffc9000260fbd0 R08: ffff888094ec4180 R09: ffff888094ec4a18 [ 107.739306][ T9654] R10: fffffbfff1549b88 R11: ffffffff8aa4dc47 R12: 0000000000000009 [ 107.747279][ T9654] R13: ffffc9000260fc68 R14: ffff888091f9ae40 R15: 0000000000000000 [ 107.755235][ T9654] FS: 0000000000b7b940(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 107.764148][ T9654] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 107.770722][ T9654] CR2: 000000c00048d000 CR3: 000000007d64c000 CR4: 00000000001406e0 [ 107.778689][ T9654] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 107.786650][ T9654] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 107.794695][ T9654] Call Trace: [ 107.797994][ T9654] path_mountpoint.isra.0+0x1d5/0x340 [ 107.803353][ T9654] ? find_held_lock+0x35/0x130 [ 107.808147][ T9654] filename_mountpoint+0x181/0x380 [ 107.813240][ T9654] ? filename_parentat.isra.0+0x400/0x400 [ 107.819458][ T9654] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 107.825592][ T9654] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 107.831300][ T9654] ? strncpy_from_user+0x2b4/0x400 [ 107.836388][ T9654] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 107.842618][ T9654] ? getname_flags+0x277/0x5b0 [ 107.847381][ T9654] user_path_mountpoint_at+0x3a/0x50 [ 107.852648][ T9654] ksys_umount+0x164/0xef0 [ 107.857062][ T9654] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 107.863296][ T9654] ? __detach_mounts+0x290/0x290 [ 107.868221][ T9654] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 107.873663][ T9654] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 107.879099][ T9654] ? do_syscall_64+0x26/0x790 [ 107.883753][ T9654] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 107.889907][ T9654] ? do_syscall_64+0x26/0x790 [ 107.894573][ T9654] ? lockdep_hardirqs_on+0x421/0x5e0 [ 107.899839][ T9654] __x64_sys_umount+0x54/0x80 [ 107.904499][ T9654] do_syscall_64+0xfa/0x790 [ 107.908984][ T9654] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 107.914852][ T9654] RIP: 0033:0x45d977 [ 107.918723][ T9654] Code: 64 89 04 25 d0 02 00 00 58 5f ff d0 48 89 c7 e8 2f be ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 4d 8c fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 107.938476][ T9654] RSP: 002b:00007fffb95eaec8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 107.946865][ T9654] RAX: ffffffffffffffda RBX: 000000000001a3ee RCX: 000000000045d977 [ 107.954984][ T9654] RDX: 0000000000403720 RSI: 0000000000000002 RDI: 00007fffb95eaf70 [ 107.962943][ T9654] RBP: 0000000000000002 R08: 0000000000000000 R09: 000000000000000e [ 107.970903][ T9654] R10: 000000000000000a R11: 0000000000000206 R12: 00007fffb95ec000 [ 107.978858][ T9654] R13: 0000000000b7c940 R14: 0000000000000000 R15: 00007fffb95ec000 [ 107.986821][ T9654] Modules linked in: [ 107.995923][ T9654] ---[ end trace 5d55e60d2bb74bed ]--- [ 108.001461][ T9654] RIP: 0010:unlazy_walk+0x306/0x3b0 [ 108.007217][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 108.017422][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 108.025670][ T9654] Code: ff ff ff e8 6c 3f a1 ff e8 e7 d8 b3 ff 48 c7 c6 74 6c c1 81 48 c7 c7 00 f7 ba 89 e8 e4 97 99 ff e9 d8 fe ff ff e8 ca d8 b3 ff <0f> 0b e8 c3 d8 b3 ff 0f 0b e8 bc d8 b3 ff e8 27 86 a0 ff 31 ff 89 [ 108.031074][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 108.046097][ T9654] RSP: 0018:ffffc9000260fba0 EFLAGS: 00010293 [ 108.057309][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 108.060173][ T9654] RAX: ffff888094ec4180 RBX: ffffc9000260fc60 RCX: ffffffff81c16a16 [ 108.068915][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 108.076234][ T9654] RDX: 0000000000000000 RSI: ffffffff81c16ca6 RDI: 0000000000000005 [ 108.087710][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 108.092352][ T9654] RBP: ffffc9000260fbd0 R08: ffff888094ec4180 R09: ffff888094ec4a18 [ 108.100915][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 108.108674][ T9654] R10: fffffbfff1549b88 R11: ffffffff8aa4dc47 R12: 0000000000000009 [ 108.119832][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 108.125691][ T9654] R13: ffffc9000260fc68 R14: ffff888091f9ae40 R15: 0000000000000000 [ 108.132920][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 108.140456][ T9654] FS: 0000000000b7b940(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 108.151362][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 108.157232][ T9654] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 108.157241][ T9654] CR2: 0000000000b84978 CR3: 000000007d64c000 CR4: 00000000001406f0 [ 108.157253][ T9654] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 108.157260][ T9654] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 108.157272][ T9654] Kernel panic - not syncing: Fatal exception [ 108.167965][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 108.180774][ T9654] Kernel Offset: disabled [ 108.214638][ T9654] Rebooting in 86400 seconds..