[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 83.843643][ T27] audit: type=1800 audit(1578970124.233:25): pid=9429 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 83.863560][ T27] audit: type=1800 audit(1578970124.233:26): pid=9429 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 83.918449][ T27] audit: type=1800 audit(1578970124.243:27): pid=9429 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.249' (ECDSA) to the list of known hosts. 2020/01/14 02:48:52 fuzzer started 2020/01/14 02:48:54 dialing manager at 10.128.0.26:43159 2020/01/14 02:48:54 syscalls: 2860 2020/01/14 02:48:54 code coverage: enabled 2020/01/14 02:48:54 comparison tracing: enabled 2020/01/14 02:48:54 extra coverage: enabled 2020/01/14 02:48:54 setuid sandbox: enabled 2020/01/14 02:48:54 namespace sandbox: enabled 2020/01/14 02:48:54 Android sandbox: /sys/fs/selinux/policy does not exist 2020/01/14 02:48:54 fault injection: enabled 2020/01/14 02:48:54 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/01/14 02:48:54 net packet injection: enabled 2020/01/14 02:48:54 net device setup: enabled 2020/01/14 02:48:54 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/01/14 02:48:54 devlink PCI setup: PCI device 0000:00:10.0 is not available 02:48:55 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000001380)=[{0x0}, {0x0}, {&(0x7f0000000100)=""/47, 0x2f}], 0x3, &(0x7f0000001480)=[{&(0x7f0000001400)=""/77, 0x7ffff000}], 0x1, 0x0) 02:48:55 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x0, 0x0, 0x0, 0x0) syzkaller login: [ 95.146012][ T9598] IPVS: ftp: loaded support on port[0] = 21 [ 95.315561][ T9598] chnl_net:caif_netlink_parms(): no params data found [ 95.368164][ T9598] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.375870][ T9598] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.386501][ T9598] device bridge_slave_0 entered promiscuous mode [ 95.396370][ T9598] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.405008][ T9598] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.413562][ T9598] device bridge_slave_1 entered promiscuous mode [ 95.439954][ T9598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.442908][ T9601] IPVS: ftp: loaded support on port[0] = 21 [ 95.453367][ T9598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 02:48:55 executing program 2: r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000005f00)={'filter\x00', 0x4}, 0x68) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) recvmmsg(0xffffffffffffffff, &(0x7f0000009000)=[{{0x0, 0x0, &(0x7f0000004200)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) [ 95.486491][ T9598] team0: Port device team_slave_0 added [ 95.518578][ T9598] team0: Port device team_slave_1 added [ 95.624688][ T9598] device hsr_slave_0 entered promiscuous mode [ 95.672678][ T9598] device hsr_slave_1 entered promiscuous mode 02:48:56 executing program 3: r0 = perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x20000000) openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x6}, 0x8) r1 = syz_open_procfs(0x0, &(0x7f0000001380)='uid_map\x00') preadv(r1, &(0x7f0000001680)=[{&(0x7f0000000300)=""/4096, 0x1000}], 0x1, 0x21) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000500)={0x0, 0x3f000000, &(0x7f0000000000)={&(0x7f0000000300)={0x58, r3, 0x101, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}]}]}, 0x58}}, 0x0) [ 95.792074][ T9603] IPVS: ftp: loaded support on port[0] = 21 [ 95.940554][ T9605] IPVS: ftp: loaded support on port[0] = 21 [ 95.951480][ T9601] chnl_net:caif_netlink_parms(): no params data found 02:48:56 executing program 4: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r0, 0x26, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x11, r2, 0x0) [ 96.060701][ T9598] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.155327][ T9598] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.206168][ T9598] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 96.265259][ T9598] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.307643][ T9601] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.316943][ T9601] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.325188][ T9601] device bridge_slave_0 entered promiscuous mode [ 96.345711][ T9608] IPVS: ftp: loaded support on port[0] = 21 02:48:56 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000680)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000680)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x3) [ 96.374481][ T9601] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.381552][ T9601] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.390359][ T9601] device bridge_slave_1 entered promiscuous mode [ 96.519900][ T9601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.557843][ T9605] chnl_net:caif_netlink_parms(): no params data found [ 96.568424][ T9601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.604412][ T9603] chnl_net:caif_netlink_parms(): no params data found [ 96.609269][ T9612] IPVS: ftp: loaded support on port[0] = 21 [ 96.625601][ T9601] team0: Port device team_slave_0 added [ 96.671611][ T9601] team0: Port device team_slave_1 added [ 96.699266][ T9605] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.707455][ T9605] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.715876][ T9605] device bridge_slave_0 entered promiscuous mode [ 96.744846][ T9605] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.751934][ T9605] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.760196][ T9605] device bridge_slave_1 entered promiscuous mode [ 96.814461][ T9601] device hsr_slave_0 entered promiscuous mode [ 96.862792][ T9601] device hsr_slave_1 entered promiscuous mode [ 96.902510][ T9601] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.910335][ T9601] Cannot create hsr debugfs directory [ 96.920153][ T9603] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.927333][ T9603] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.935578][ T9603] device bridge_slave_0 entered promiscuous mode [ 96.956658][ T9603] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.964512][ T9603] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.972197][ T9603] device bridge_slave_1 entered promiscuous mode [ 96.987556][ T9605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.035493][ T9605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.076467][ T9603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.100525][ T9605] team0: Port device team_slave_0 added [ 97.122878][ T9603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.132217][ T9608] chnl_net:caif_netlink_parms(): no params data found [ 97.144766][ T9605] team0: Port device team_slave_1 added [ 97.235621][ T9605] device hsr_slave_0 entered promiscuous mode [ 97.292836][ T9605] device hsr_slave_1 entered promiscuous mode [ 97.332500][ T9605] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 97.340110][ T9605] Cannot create hsr debugfs directory [ 97.376204][ T9598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.400532][ T9603] team0: Port device team_slave_0 added [ 97.439246][ T9603] team0: Port device team_slave_1 added [ 97.459619][ T9601] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 97.520545][ T9598] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.534527][ T9601] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 97.588879][ T9601] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 97.650580][ T2850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 97.658956][ T2850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 97.701699][ T9601] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 97.786001][ T9603] device hsr_slave_0 entered promiscuous mode [ 97.812644][ T9603] device hsr_slave_1 entered promiscuous mode [ 97.862400][ T9603] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 97.870010][ T9603] Cannot create hsr debugfs directory [ 97.877521][ T9612] chnl_net:caif_netlink_parms(): no params data found [ 97.887081][ T9608] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.897617][ T9608] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.905512][ T9608] device bridge_slave_0 entered promiscuous mode [ 97.920872][ T9608] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.928392][ T9608] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.939060][ T9608] device bridge_slave_1 entered promiscuous mode [ 97.949598][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 97.958601][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 97.967248][ T3228] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.974519][ T3228] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.984376][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 98.022045][ T3227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 98.031471][ T3227] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 98.040070][ T3227] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.047139][ T3227] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.056860][ T3227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 98.105718][ T9612] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.112951][ T9612] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.120784][ T9612] device bridge_slave_0 entered promiscuous mode [ 98.150456][ T9608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.160743][ T9612] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.169029][ T9612] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.177127][ T9612] device bridge_slave_1 entered promiscuous mode [ 98.185365][ T3227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 98.213249][ T9608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.227553][ T2850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 98.236696][ T2850] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 98.246196][ T2850] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 98.261024][ T9605] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 98.305287][ T9605] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 98.370925][ T9605] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 98.441169][ T9608] team0: Port device team_slave_0 added [ 98.447415][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 98.457271][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 98.472202][ T9612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.482922][ T9605] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 98.539181][ T9608] team0: Port device team_slave_1 added [ 98.553585][ T9612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.568744][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 98.577626][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 98.591415][ T9598] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 98.604064][ T9598] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 98.631418][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 98.640008][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 98.673827][ T9612] team0: Port device team_slave_0 added [ 98.692861][ T9612] team0: Port device team_slave_1 added [ 98.701618][ T9603] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 98.805250][ T9608] device hsr_slave_0 entered promiscuous mode [ 98.852880][ T9608] device hsr_slave_1 entered promiscuous mode [ 98.892428][ T9608] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 98.900138][ T9608] Cannot create hsr debugfs directory [ 98.906159][ T9603] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 98.989573][ T9603] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 99.085653][ T9612] device hsr_slave_0 entered promiscuous mode [ 99.154728][ T9612] device hsr_slave_1 entered promiscuous mode [ 99.202633][ T9612] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 99.210328][ T9612] Cannot create hsr debugfs directory [ 99.218479][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 99.226074][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 99.243288][ T9598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.263910][ T9603] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 99.341633][ T9601] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.401709][ T9605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.454607][ T9608] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 99.527580][ T9601] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.536883][ T9608] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 99.582362][ T3227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 99.590211][ T3227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 99.609289][ T9608] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 99.688716][ T9608] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 99.756861][ T9605] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.770796][ T3227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 99.780124][ T3227] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 99.789630][ T3227] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.796783][ T3227] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.805062][ T3227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 99.813210][ T3227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 99.820882][ T3227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 99.830090][ T3227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 99.838835][ T3227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 99.848174][ T3227] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 99.857056][ T3227] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.864191][ T3227] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.872609][ T3227] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 99.880539][ T3227] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 99.905607][ T3227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 99.918722][ T3227] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 99.928024][ T3227] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.935388][ T3227] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.951346][ T9612] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 100.030593][ T3226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 100.040103][ T3226] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 100.048736][ T3226] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.056170][ T3226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.064893][ T3226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 100.073574][ T3226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 100.082156][ T3226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 100.107932][ T9612] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 100.157245][ T9612] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 100.217317][ T9598] device veth0_vlan entered promiscuous mode [ 100.228933][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 100.237268][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 100.246453][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 100.255445][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 100.264637][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 100.273809][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 100.282854][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 100.313030][ T9612] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 100.360263][ T9598] device veth1_vlan entered promiscuous mode [ 100.370971][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 100.379356][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 100.390845][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 100.399863][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 100.409909][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 100.418840][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 100.427830][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 100.437222][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 100.449735][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 100.470020][ T9605] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 100.482903][ T9605] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 100.522591][ T2850] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 100.530893][ T2850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 100.541392][ T2850] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 100.550573][ T2850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 100.559066][ T2850] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 100.568077][ T2850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 100.576659][ T2850] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 100.621300][ T9601] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 100.640968][ T9601] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 100.650718][ T2850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 100.664205][ T2850] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 100.690468][ T9608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.728456][ T3227] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 100.747130][ T3227] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 100.776266][ T9605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.788294][ T9603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.799732][ T2850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 100.810739][ T2850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 100.852290][ C1] hrtimer: interrupt took 47110 ns [ 100.855964][ T9608] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.874391][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 100.887879][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 02:49:01 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000001380)=[{0x0}, {0x0}, {&(0x7f0000000100)=""/47, 0x2f}], 0x3, &(0x7f0000001480)=[{&(0x7f0000001400)=""/77, 0x7ffff000}], 0x1, 0x0) [ 100.897075][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 100.915662][ T9598] ------------[ cut here ]------------ [ 100.916312][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 100.921326][ T9598] kernel BUG at fs/namei.c:684! [ 100.921637][ T9598] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 100.939824][ T9598] CPU: 1 PID: 9598 Comm: syz-executor.0 Not tainted 5.5.0-rc5-next-20200113-syzkaller #0 [ 100.949889][ T9598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 100.960335][ T9598] RIP: 0010:unlazy_walk+0x306/0x3b0 [ 100.965575][ T9598] Code: ff ff ff e8 6c 3f a1 ff e8 e7 d8 b3 ff 48 c7 c6 74 6c c1 81 48 c7 c7 00 f7 ba 89 e8 e4 97 99 ff e9 d8 fe ff ff e8 ca d8 b3 ff <0f> 0b e8 c3 d8 b3 ff 0f 0b e8 bc d8 b3 ff e8 27 86 a0 ff 31 ff 89 [ 100.985593][ T9598] RSP: 0018:ffffc90002217ba0 EFLAGS: 00010293 [ 100.991907][ T9598] RAX: ffff88808bb40040 RBX: ffffc90002217c60 RCX: ffffffff81c16a16 [ 100.999879][ T9598] RDX: 0000000000000000 RSI: ffffffff81c16ca6 RDI: 0000000000000005 [ 101.008130][ T9598] RBP: ffffc90002217bd0 R08: ffff88808bb40040 R09: ffff88808bb408d8 [ 101.016304][ T9598] R10: fffffbfff1549b88 R11: ffffffff8aa4dc47 R12: 0000000000000009 [ 101.024837][ T9598] R13: ffffc90002217c68 R14: ffff8880967d09e0 R15: 0000000000000000 [ 101.032855][ T9598] FS: 0000000001beb940(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 101.041939][ T9598] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 101.048586][ T9598] CR2: 00007ffcf37b0d5c CR3: 000000007d741000 CR4: 00000000001406e0 [ 101.056633][ T9598] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 101.064600][ T9598] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 101.072610][ T9598] Call Trace: [ 101.075924][ T9598] path_mountpoint.isra.0+0x1d5/0x340 [ 101.081289][ T9598] ? find_held_lock+0x35/0x130 [ 101.086045][ T9598] filename_mountpoint+0x181/0x380 [ 101.091211][ T9598] ? filename_parentat.isra.0+0x400/0x400 [ 101.097059][ T9598] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 101.103244][ T9598] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 101.108954][ T9598] ? strncpy_from_user+0x2b4/0x400 [ 101.114372][ T9598] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 101.120601][ T9598] ? getname_flags+0x277/0x5b0 [ 101.125530][ T9598] user_path_mountpoint_at+0x3a/0x50 [ 101.130984][ T9598] ksys_umount+0x164/0xef0 [ 101.135450][ T9598] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 101.140997][ T9598] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 101.147043][ T9598] ? __detach_mounts+0x290/0x290 [ 101.151975][ T9598] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 101.157555][ T9598] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 101.163270][ T9598] ? do_syscall_64+0x26/0x790 [ 101.167933][ T9598] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 101.173975][ T9598] ? do_syscall_64+0x26/0x790 [ 101.178648][ T9598] ? lockdep_hardirqs_on+0x421/0x5e0 [ 101.183924][ T9598] __x64_sys_umount+0x54/0x80 [ 101.188591][ T9598] do_syscall_64+0xfa/0x790 [ 101.193178][ T9598] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 101.199061][ T9598] RIP: 0033:0x45d977 [ 101.202948][ T9598] Code: 64 89 04 25 d0 02 00 00 58 5f ff d0 48 89 c7 e8 2f be ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 4d 8c fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 101.222756][ T9598] RSP: 002b:00007ffcf37b1468 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6 [ 101.231337][ T9598] RAX: ffffffffffffffda RBX: 00000000000189dd RCX: 000000000045d977 [ 101.239386][ T9598] RDX: 0000000000403720 RSI: 0000000000000002 RDI: 00007ffcf37b1510 [ 101.247436][ T9598] RBP: 0000000000000002 R08: 0000000000000000 R09: 000000000000000e [ 101.255573][ T9598] R10: 000000000000000a R11: 0000000000000202 R12: 00007ffcf37b25a0 [ 101.263752][ T9598] R13: 0000000001bec940 R14: 0000000000000000 R15: 00007ffcf37b25a0 [ 101.271725][ T9598] Modules linked in: [ 101.282166][ T9598] ---[ end trace f3573344c1e74e86 ]--- [ 101.287811][ T9598] RIP: 0010:unlazy_walk+0x306/0x3b0 [ 101.292209][ T9601] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.293277][ T9598] Code: ff ff ff e8 6c 3f a1 ff e8 e7 d8 b3 ff 48 c7 c6 74 6c c1 81 48 c7 c7 00 f7 ba 89 e8 e4 97 99 ff e9 d8 fe ff ff e8 ca d8 b3 ff <0f> 0b e8 c3 d8 b3 ff 0f 0b e8 bc d8 b3 ff e8 27 86 a0 ff 31 ff 89 [ 101.293286][ T9598] RSP: 0018:ffffc90002217ba0 EFLAGS: 00010293 [ 101.293298][ T9598] RAX: ffff88808bb40040 RBX: ffffc90002217c60 RCX: ffffffff81c16a16 [ 101.293307][ T9598] RDX: 0000000000000000 RSI: ffffffff81c16ca6 RDI: 0000000000000005 [ 101.293316][ T9598] RBP: ffffc90002217bd0 R08: ffff88808bb40040 R09: ffff88808bb408d8 [ 101.293324][ T9598] R10: fffffbfff1549b88 R11: ffffffff8aa4dc47 R12: 0000000000000009 [ 101.293332][ T9598] R13: ffffc90002217c68 R14: ffff8880967d09e0 R15: 0000000000000000 [ 101.293342][ T9598] FS: 0000000001beb940(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 101.293350][ T9598] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 101.293358][ T9598] CR2: ffffffffff600400 CR3: 000000007d741000 CR4: 00000000001406e0 [ 101.293374][ T9598] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 101.293382][ T9598] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 101.293390][ T9598] Kernel panic - not syncing: Fatal exception [ 101.294226][ T9598] Kernel Offset: disabled [ 101.418314][ T9598] Rebooting in 86400 seconds..