[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c.
[   85.658326][   T27] audit: type=1800 audit(1578968725.296:25): pid=9521 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0
[   85.678161][   T27] audit: type=1800 audit(1578968725.296:26): pid=9521 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0
[   85.704797][   T27] audit: type=1800 audit(1578968725.296:27): pid=9521 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0
[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c.

Debian GNU/Linux 7 syzkaller ttyS0

Warning: Permanently added '10.128.0.72' (ECDSA) to the list of known hosts.
2020/01/14 02:25:37 fuzzer started
2020/01/14 02:25:39 dialing manager at 10.128.0.26:43159
2020/01/14 02:25:39 syscalls: 2860
2020/01/14 02:25:39 code coverage: enabled
2020/01/14 02:25:39 comparison tracing: enabled
2020/01/14 02:25:39 extra coverage: enabled
2020/01/14 02:25:39 setuid sandbox: enabled
2020/01/14 02:25:39 namespace sandbox: enabled
2020/01/14 02:25:39 Android sandbox: /sys/fs/selinux/policy does not exist
2020/01/14 02:25:39 fault injection: enabled
2020/01/14 02:25:39 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2020/01/14 02:25:39 net packet injection: enabled
2020/01/14 02:25:39 net device setup: enabled
2020/01/14 02:25:39 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2020/01/14 02:25:39 devlink PCI setup: PCI device 0000:00:10.0 is not available
02:25:40 executing program 0:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f0000fa8fe4)={0xa, 0x4e23}, 0x1c)
connect$inet6(r0, &(0x7f0000966fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = dup(r0)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000000), 0xc)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x19}, 0x3c)

02:25:40 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="1b259b340000000000000000000000006d"], 0x11)

syzkaller login: [  100.747074][ T9691] IPVS: ftp: loaded support on port[0] = 21
[  100.960364][ T9694] IPVS: ftp: loaded support on port[0] = 21
[  100.964963][ T9691] chnl_net:caif_netlink_parms(): no params data found
02:25:40 executing program 2:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x9)
dup3(r0, r1, 0x0)
connect$ax25(r1, &(0x7f0000000000)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}}, [@bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast]}, 0x48)

[  101.063110][ T9691] bridge0: port 1(bridge_slave_0) entered blocking state
[  101.071247][ T9691] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.079924][ T9691] device bridge_slave_0 entered promiscuous mode
[  101.105522][ T9691] bridge0: port 2(bridge_slave_1) entered blocking state
[  101.112939][ T9691] bridge0: port 2(bridge_slave_1) entered disabled state
[  101.121565][ T9691] device bridge_slave_1 entered promiscuous mode
[  101.176783][ T9691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  101.217776][ T9691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  101.241076][ T9694] chnl_net:caif_netlink_parms(): no params data found
02:25:41 executing program 3:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @remote, @mcast2, 0x0, 0xd3})

[  101.295371][ T9691] team0: Port device team_slave_0 added
[  101.303474][ T9691] team0: Port device team_slave_1 added
[  101.329287][ T9697] IPVS: ftp: loaded support on port[0] = 21
[  101.448743][ T9691] device hsr_slave_0 entered promiscuous mode
[  101.515151][ T9691] device hsr_slave_1 entered promiscuous mode
02:25:41 executing program 4:
r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x8447, 0x0)
ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285628, &(0x7f0000000040)={0x3, 0x0, 0x2, [], &(0x7f0000000140)})

[  101.645356][ T9694] bridge0: port 1(bridge_slave_0) entered blocking state
[  101.652433][ T9694] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.679184][ T9694] device bridge_slave_0 entered promiscuous mode
[  101.700713][ T9694] bridge0: port 2(bridge_slave_1) entered blocking state
[  101.724857][ T9694] bridge0: port 2(bridge_slave_1) entered disabled state
[  101.732930][ T9694] device bridge_slave_1 entered promiscuous mode
[  101.776585][ T9699] IPVS: ftp: loaded support on port[0] = 21
[  101.801852][ T9694] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  101.833863][ T9701] IPVS: ftp: loaded support on port[0] = 21
[  101.848063][ T9694] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
02:25:41 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)

[  101.975626][ T9694] team0: Port device team_slave_0 added
[  102.000344][ T9694] team0: Port device team_slave_1 added
[  102.133091][ T9691] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  102.203771][ T9699] chnl_net:caif_netlink_parms(): no params data found
[  102.225924][ T9691] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  102.288931][ T9705] IPVS: ftp: loaded support on port[0] = 21
[  102.316739][ T9694] device hsr_slave_0 entered promiscuous mode
[  102.365162][ T9694] device hsr_slave_1 entered promiscuous mode
[  102.425127][ T9694] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  102.432903][ T9694] Cannot create hsr debugfs directory
[  102.439490][ T9697] chnl_net:caif_netlink_parms(): no params data found
[  102.449897][ T9691] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  102.524196][ T9691] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  102.616297][ T9699] bridge0: port 1(bridge_slave_0) entered blocking state
[  102.623453][ T9699] bridge0: port 1(bridge_slave_0) entered disabled state
[  102.632265][ T9699] device bridge_slave_0 entered promiscuous mode
[  102.642425][ T9699] bridge0: port 2(bridge_slave_1) entered blocking state
[  102.649562][ T9699] bridge0: port 2(bridge_slave_1) entered disabled state
[  102.657938][ T9699] device bridge_slave_1 entered promiscuous mode
[  102.713328][ T9701] chnl_net:caif_netlink_parms(): no params data found
[  102.729714][ T9697] bridge0: port 1(bridge_slave_0) entered blocking state
[  102.737171][ T9697] bridge0: port 1(bridge_slave_0) entered disabled state
[  102.745019][ T9697] device bridge_slave_0 entered promiscuous mode
[  102.756397][ T9697] bridge0: port 2(bridge_slave_1) entered blocking state
[  102.763463][ T9697] bridge0: port 2(bridge_slave_1) entered disabled state
[  102.771360][ T9697] device bridge_slave_1 entered promiscuous mode
[  102.781309][ T9699] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  102.811828][ T9697] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  102.824486][ T9697] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  102.838730][ T9699] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  102.897487][ T9697] team0: Port device team_slave_0 added
[  102.931465][ T9701] bridge0: port 1(bridge_slave_0) entered blocking state
[  102.941395][ T9701] bridge0: port 1(bridge_slave_0) entered disabled state
[  102.950190][ T9701] device bridge_slave_0 entered promiscuous mode
[  102.961052][ T9697] team0: Port device team_slave_1 added
[  102.969368][ T9699] team0: Port device team_slave_0 added
[  102.989266][ T9701] bridge0: port 2(bridge_slave_1) entered blocking state
[  102.996518][ T9701] bridge0: port 2(bridge_slave_1) entered disabled state
[  103.004198][ T9701] device bridge_slave_1 entered promiscuous mode
[  103.013663][ T9699] team0: Port device team_slave_1 added
[  103.098176][ T9697] device hsr_slave_0 entered promiscuous mode
[  103.135228][ T9697] device hsr_slave_1 entered promiscuous mode
[  103.194838][ T9697] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  103.202437][ T9697] Cannot create hsr debugfs directory
[  103.226892][ T9694] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  103.281300][ T9694] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  103.363481][ T9694] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  103.407992][ T9701] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  103.420495][ T9701] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  103.468040][ T9699] device hsr_slave_0 entered promiscuous mode
[  103.505182][ T9699] device hsr_slave_1 entered promiscuous mode
[  103.544826][ T9699] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  103.552404][ T9699] Cannot create hsr debugfs directory
[  103.564283][ T9694] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  103.650155][ T9705] chnl_net:caif_netlink_parms(): no params data found
[  103.680526][ T9701] team0: Port device team_slave_0 added
[  103.696700][ T9701] team0: Port device team_slave_1 added
[  103.783870][ T9705] bridge0: port 1(bridge_slave_0) entered blocking state
[  103.791242][ T9705] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.799706][ T9705] device bridge_slave_0 entered promiscuous mode
[  103.810649][ T9705] bridge0: port 2(bridge_slave_1) entered blocking state
[  103.818214][ T9705] bridge0: port 2(bridge_slave_1) entered disabled state
[  103.826808][ T9705] device bridge_slave_1 entered promiscuous mode
[  103.897962][ T9701] device hsr_slave_0 entered promiscuous mode
[  103.935078][ T9701] device hsr_slave_1 entered promiscuous mode
[  103.984830][ T9701] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  103.992399][ T9701] Cannot create hsr debugfs directory
[  104.015862][ T9705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  104.063576][ T9705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  104.080648][ T9691] 8021q: adding VLAN 0 to HW filter on device bond0
[  104.118865][ T9697] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  104.191997][ T9705] team0: Port device team_slave_0 added
[  104.202458][ T9697] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  104.256584][ T9705] team0: Port device team_slave_1 added
[  104.269621][ T2896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  104.278689][ T2896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  104.307954][ T9697] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  104.347845][ T9699] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  104.478038][ T9705] device hsr_slave_0 entered promiscuous mode
[  104.515225][ T9705] device hsr_slave_1 entered promiscuous mode
[  104.554877][ T9705] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  104.562517][ T9705] Cannot create hsr debugfs directory
[  104.568697][ T9697] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  104.642223][ T9699] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  104.702000][ T9699] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  104.748078][ T9691] 8021q: adding VLAN 0 to HW filter on device team0
[  104.771616][ T9694] 8021q: adding VLAN 0 to HW filter on device bond0
[  104.794969][ T9699] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  104.833061][ T9701] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  104.872489][ T9701] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  104.931325][ T9701] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  104.978220][ T2862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  104.989159][ T2862] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  104.997825][ T2862] bridge0: port 1(bridge_slave_0) entered blocking state
[  105.005046][ T2862] bridge0: port 1(bridge_slave_0) entered forwarding state
[  105.013073][ T2862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  105.022825][ T2862] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  105.031284][ T2862] bridge0: port 2(bridge_slave_1) entered blocking state
[  105.038376][ T2862] bridge0: port 2(bridge_slave_1) entered forwarding state
[  105.067544][ T9701] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  105.107918][ T2864] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  105.118231][ T2864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  105.126275][ T2864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  105.133860][ T2864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  105.156499][ T9694] 8021q: adding VLAN 0 to HW filter on device team0
[  105.181135][ T2893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  105.189947][ T2893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  105.199779][ T2893] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  105.233471][ T2864] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  105.241813][ T2864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  105.251610][ T2864] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  105.260363][ T2864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  105.269171][ T2864] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  105.278048][ T2864] bridge0: port 1(bridge_slave_0) entered blocking state
[  105.285152][ T2864] bridge0: port 1(bridge_slave_0) entered forwarding state
[  105.303251][ T9691] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  105.314404][ T9691] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  105.346388][ T2893] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  105.354310][ T2893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  105.368579][ T2893] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  105.378237][ T2893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  105.387002][ T2893] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  105.395707][ T2893] bridge0: port 2(bridge_slave_1) entered blocking state
[  105.402746][ T2893] bridge0: port 2(bridge_slave_1) entered forwarding state
[  105.410427][ T2893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  105.419758][ T2893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  105.428703][ T2893] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  105.437157][ T2893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  105.485751][ T2862] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  105.493381][ T2862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  105.506993][ T2862] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  105.515857][ T2862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  105.524426][ T2862] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  105.533326][ T2862] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  105.563382][ T9705] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  105.627305][ T2864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  105.636204][ T2864] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  105.644344][ T2864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  105.652774][ T2864] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  105.667260][ T9694] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  105.687643][ T9705] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  105.748946][ T9705] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  105.838769][ T9705] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  105.874845][ T2893] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  105.882295][ T2893] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  105.893672][ T2893] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  105.901391][ T2893] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  105.919639][ T9691] 8021q: adding VLAN 0 to HW filter on device batadv0
[  105.934505][ T9697] 8021q: adding VLAN 0 to HW filter on device bond0
[  105.960929][ T9697] 8021q: adding VLAN 0 to HW filter on device team0
[  105.972537][ T9701] 8021q: adding VLAN 0 to HW filter on device bond0
[  105.989979][ T2893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  105.998416][ T2893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  106.006820][ T2893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  106.014498][ T2893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  106.027004][ T9694] 8021q: adding VLAN 0 to HW filter on device batadv0
[  106.049120][ T9699] 8021q: adding VLAN 0 to HW filter on device bond0
[  106.064266][ T2864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  106.076895][ T2864] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  106.085968][ T2864] bridge0: port 1(bridge_slave_0) entered blocking state
[  106.093088][ T2864] bridge0: port 1(bridge_slave_0) entered forwarding state
[  106.100764][ T2864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  106.110282][ T2864] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  106.118946][ T2864] bridge0: port 2(bridge_slave_1) entered blocking state
[  106.126077][ T2864] bridge0: port 2(bridge_slave_1) entered forwarding state
[  106.134317][ T2864] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  106.144681][ T9701] 8021q: adding VLAN 0 to HW filter on device team0
[  106.186461][ T2893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  106.198263][ T2893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  106.207966][ T2893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  106.240475][ T9691] device veth0_vlan entered promiscuous mode
[  106.253101][ T2893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  106.263201][ T2893] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  106.272103][ T2893] bridge0: port 1(bridge_slave_0) entered blocking state
[  106.279224][ T2893] bridge0: port 1(bridge_slave_0) entered forwarding state
[  106.287451][ T2893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  106.296317][ T2893] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  106.305690][ T2893] bridge0: port 2(bridge_slave_1) entered blocking state
[  106.312884][ T2893] bridge0: port 2(bridge_slave_1) entered forwarding state
[  106.320691][ T2893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  106.329730][ T2893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  106.337986][ T2893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  106.346637][ T2893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  106.355644][ T2893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  106.364150][ T2893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  106.374882][ T2893] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  106.382754][ T2893] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  106.392036][ T2893] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  106.400392][ T2893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  106.429660][ T9699] 8021q: adding VLAN 0 to HW filter on device team0
[  106.445176][ T2893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  106.453816][ T2893] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  106.462832][ T2893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  106.471106][ T2893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  106.479163][ T2893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  106.487812][ T2893] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  106.496325][ T2893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  106.504519][ T2893] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  106.513139][ T2893] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  106.528259][ T9691] device veth1_vlan entered promiscuous mode
[  106.550746][ T9697] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  106.563230][ T9697] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  106.581540][ T9694] device veth0_vlan entered promiscuous mode
[  106.595081][ T2896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  106.603751][ T2896] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  106.612725][ T2896] bridge0: port 1(bridge_slave_0) entered blocking state
[  106.619829][ T2896] bridge0: port 1(bridge_slave_0) entered forwarding state
[  106.628385][ T2896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  106.637104][ T2896] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  106.645532][ T2896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  106.653647][ T2896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  106.662209][ T2896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  106.671231][ T2896] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  106.680510][ T2896] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  106.689154][ T2896] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  106.697100][ T2896] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  106.704871][ T2896] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  106.740124][ T9705] 8021q: adding VLAN 0 to HW filter on device bond0
[  106.751464][ T9694] device veth1_vlan entered promiscuous mode
[  106.776028][   T16] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  106.784151][   T16] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  106.800081][   T16] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  106.810549][   T16] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  106.819368][   T16] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  106.828032][   T16] bridge0: port 2(bridge_slave_1) entered blocking state
[  106.835145][   T16] bridge0: port 2(bridge_slave_1) entered forwarding state
[  106.872258][ T9697] 8021q: adding VLAN 0 to HW filter on device batadv0
[  106.901355][ T2862] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  106.922303][ T2862] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  106.930102][ T2862] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  106.938326][ T2862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  106.947393][ T2862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  106.957487][ T2862] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  106.966297][ T2862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  106.975211][ T2862] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  106.983448][ T2862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  107.002499][ T9701] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  107.017527][ T2695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  107.030503][ T2695] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  107.040532][ T2695] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  107.056659][ T2893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  107.117324][ T2893] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  107.151797][ T9705] 8021q: adding VLAN 0 to HW filter on device team0
02:25:46 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="1b259b340000000000000000000000006d"], 0x11)

[  107.194109][ T9699] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  107.214806][ T9699] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  107.231799][ T9694] ------------[ cut here ]------------
[  107.237284][ T9694] kernel BUG at fs/namei.c:684!
[  107.245993][ T2862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  107.253866][ T2862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  107.262236][ T2862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  107.275649][ T2862] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  107.283649][ T9694] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[  107.284053][ T2862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  107.289736][ T9694] CPU: 1 PID: 9694 Comm: syz-executor.1 Not tainted 5.5.0-rc5-next-20200113-syzkaller #0
[  107.289743][ T9694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  107.289761][ T9694] RIP: 0010:unlazy_walk+0x306/0x3b0
[  107.289775][ T9694] Code: ff ff ff e8 6c 3f a1 ff e8 e7 d8 b3 ff 48 c7 c6 74 6c c1 81 48 c7 c7 00 f7 ba 89 e8 e4 97 99 ff e9 d8 fe ff ff e8 ca d8 b3 ff <0f> 0b e8 c3 d8 b3 ff 0f 0b e8 bc d8 b3 ff e8 27 86 a0 ff 31 ff 89
[  107.289782][ T9694] RSP: 0018:ffffc90002297ba0 EFLAGS: 00010293
[  107.289792][ T9694] RAX: ffff8880a22a04c0 RBX: ffffc90002297c60 RCX: ffffffff81c16a16
[  107.289799][ T9694] RDX: 0000000000000000 RSI: ffffffff81c16ca6 RDI: 0000000000000005
[  107.289808][ T9694] RBP: ffffc90002297bd0 R08: ffff8880a22a04c0 R09: ffff8880a22a0d58
[  107.289816][ T9694] R10: fffffbfff1549b88 R11: ffffffff8aa4dc47 R12: 0000000000000009
[  107.289824][ T9694] R13: ffffc90002297c68 R14: ffff8880967ede40 R15: 0000000000000000
[  107.289835][ T9694] FS:  0000000001403940(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000
[  107.289844][ T9694] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  107.289852][ T9694] CR2: 0000000020000000 CR3: 00000000796fe000 CR4: 00000000001406e0
[  107.289863][ T9694] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  107.289870][ T9694] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  107.289874][ T9694] Call Trace:
[  107.289905][ T9694]  path_mountpoint.isra.0+0x1d5/0x340
[  107.289918][ T9694]  ? find_held_lock+0x35/0x130
[  107.289933][ T9694]  filename_mountpoint+0x181/0x380
[  107.289945][ T9694]  ? filename_parentat.isra.0+0x400/0x400
[  107.289966][ T9694]  ? rcu_lockdep_current_cpu_online+0xe3/0x130
[  107.298938][ T2862] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  107.307533][ T9694]  ? __sanitizer_cov_trace_cmp8+0x18/0x20
[  107.307552][ T9694]  ? strncpy_from_user+0x2b4/0x400
[  107.307568][ T9694]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  107.307581][ T9694]  ? getname_flags+0x277/0x5b0
[  107.307595][ T9694]  user_path_mountpoint_at+0x3a/0x50
[  107.307610][ T9694]  ksys_umount+0x164/0xef0
[  107.307624][ T9694]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  107.307638][ T9694]  ? __detach_mounts+0x290/0x290
[  107.307653][ T9694]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  107.307666][ T9694]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  107.307679][ T9694]  ? do_syscall_64+0x26/0x790
[  107.307693][ T9694]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  107.307706][ T9694]  ? do_syscall_64+0x26/0x790
[  107.307725][ T9694]  ? lockdep_hardirqs_on+0x421/0x5e0
[  107.332606][ T9701] 8021q: adding VLAN 0 to HW filter on device batadv0
[  107.342553][ T9694]  __x64_sys_umount+0x54/0x80
[  107.342570][ T9694]  do_syscall_64+0xfa/0x790
[  107.342586][ T9694]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  107.342597][ T9694] RIP: 0033:0x45d977
[  107.342613][ T9694] Code: 64 89 04 25 d0 02 00 00 58 5f ff d0 48 89 c7 e8 2f be ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 4d 8c fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  107.342620][ T9694] RSP: 002b:00007ffedebb9c68 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6
[  107.342632][ T9694] RAX: ffffffffffffffda RBX: 000000000001a28a RCX: 000000000045d977
[  107.342638][ T9694] RDX: 0000000000403720 RSI: 0000000000000002 RDI: 00007ffedebb9d10
[  107.342646][ T9694] RBP: 0000000000000002 R08: 0000000000000000 R09: 000000000000000e
[  107.342654][ T9694] R10: 000000000000000a R11: 0000000000000202 R12: 00007ffedebbada0
[  107.342662][ T9694] R13: 0000000001404940 R14: 0000000000000000 R15: 00007ffedebbada0
[  107.342672][ T9694] Modules linked in:
[  107.498799][ T9694] ---[ end trace 571d023a29fb53fa ]---
[  107.644435][ T9694] RIP: 0010:unlazy_walk+0x306/0x3b0
[  107.656431][ T9694] Code: ff ff ff e8 6c 3f a1 ff e8 e7 d8 b3 ff 48 c7 c6 74 6c c1 81 48 c7 c7 00 f7 ba 89 e8 e4 97 99 ff e9 d8 fe ff ff e8 ca d8 b3 ff <0f> 0b e8 c3 d8 b3 ff 0f 0b e8 bc d8 b3 ff e8 27 86 a0 ff 31 ff 89
[  107.686068][ T9694] RSP: 0018:ffffc90002297ba0 EFLAGS: 00010293
[  107.691633][ T9697] device veth0_vlan entered promiscuous mode
[  107.694794][ T9694] RAX: ffff8880a22a04c0 RBX: ffffc90002297c60 RCX: ffffffff81c16a16
[  107.706706][ T2893] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  107.714186][ T2893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  107.722409][ T9694] RDX: 0000000000000000 RSI: ffffffff81c16ca6 RDI: 0000000000000005
[  107.730829][ T2893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  107.735010][ T9694] RBP: ffffc90002297bd0 R08: ffff8880a22a04c0 R09: ffff8880a22a0d58
[  107.740223][ T2893] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  107.747877][ T9694] R10: fffffbfff1549b88 R11: ffffffff8aa4dc47 R12: 0000000000000009
[  107.760003][ T2893] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  107.762866][ T9694] R13: ffffc90002297c68 R14: ffff8880967ede40 R15: 0000000000000000
[  107.770699][ T2893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  107.778182][ T9694] FS:  0000000001403940(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000
[  107.789550][ T2893] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  107.795462][ T9694] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  107.795470][ T9694] CR2: 0000001b31625000 CR3: 00000000796fe000 CR4: 00000000001406e0
[  107.795481][ T9694] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  107.795488][ T9694] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  107.795496][ T9694] Kernel panic - not syncing: Fatal exception
[  107.796732][ T9694] Kernel Offset: disabled
[  107.845489][ T9694] Rebooting in 86400 seconds..