[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 81.790757][ T27] audit: type=1800 audit(1578972389.894:25): pid=9569 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 81.822586][ T27] audit: type=1800 audit(1578972389.894:26): pid=9569 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 81.822612][ T27] audit: type=1800 audit(1578972389.894:27): pid=9569 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.1.38' (ECDSA) to the list of known hosts. 2020/01/14 03:26:38 fuzzer started 2020/01/14 03:26:40 dialing manager at 10.128.0.26:34807 2020/01/14 03:26:40 syscalls: 2860 2020/01/14 03:26:40 code coverage: enabled 2020/01/14 03:26:40 comparison tracing: enabled 2020/01/14 03:26:40 extra coverage: enabled 2020/01/14 03:26:40 setuid sandbox: enabled 2020/01/14 03:26:40 namespace sandbox: enabled 2020/01/14 03:26:40 Android sandbox: /sys/fs/selinux/policy does not exist 2020/01/14 03:26:40 fault injection: enabled 2020/01/14 03:26:40 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/01/14 03:26:40 net packet injection: enabled 2020/01/14 03:26:40 net device setup: enabled 2020/01/14 03:26:40 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/01/14 03:26:40 devlink PCI setup: PCI device 0000:00:10.0 is not available 03:26:41 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)) 03:26:41 executing program 1: r0 = socket(0x400020000000010, 0x2, 0x0) write(r0, &(0x7f0000000100)="1f00000055000d0000000000fc07ff1b070304000d00000007000100010039", 0x1f) syzkaller login: [ 93.630220][ T9738] IPVS: ftp: loaded support on port[0] = 21 [ 93.780308][ T9738] chnl_net:caif_netlink_parms(): no params data found [ 93.798436][ T9742] IPVS: ftp: loaded support on port[0] = 21 [ 93.883894][ T9738] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.891452][ T9738] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.899874][ T9738] device bridge_slave_0 entered promiscuous mode [ 93.916751][ T9738] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.924415][ T9738] bridge0: port 2(bridge_slave_1) entered disabled state 03:26:42 executing program 2: syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0x0) [ 93.934714][ T9738] device bridge_slave_1 entered promiscuous mode [ 94.018468][ T9738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.060786][ T9738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.088123][ T9742] chnl_net:caif_netlink_parms(): no params data found [ 94.115248][ T9745] IPVS: ftp: loaded support on port[0] = 21 [ 94.153348][ T9738] team0: Port device team_slave_0 added [ 94.178767][ T9738] team0: Port device team_slave_1 added [ 94.206353][ T9742] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.213832][ T9742] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.221911][ T9742] device bridge_slave_0 entered promiscuous mode 03:26:42 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) gettid() socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) [ 94.285887][ T9738] device hsr_slave_0 entered promiscuous mode [ 94.313724][ T9738] device hsr_slave_1 entered promiscuous mode [ 94.386927][ T9742] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.395019][ T9742] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.412959][ T9742] device bridge_slave_1 entered promiscuous mode [ 94.463684][ T9742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.494386][ T9747] IPVS: ftp: loaded support on port[0] = 21 [ 94.507021][ T9742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 03:26:42 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000006c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000006, &(0x7f00000000c0)=0x2000000000000074, 0x4) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x10) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000001c0), 0x0) [ 94.586769][ T9742] team0: Port device team_slave_0 added [ 94.595888][ T9742] team0: Port device team_slave_1 added [ 94.746374][ T9742] device hsr_slave_0 entered promiscuous mode 03:26:42 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18}}}]}, 0x48}}, 0x0) [ 94.843492][ T9742] device hsr_slave_1 entered promiscuous mode [ 94.892808][ T9742] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.900625][ T9742] Cannot create hsr debugfs directory [ 94.947020][ T9750] IPVS: ftp: loaded support on port[0] = 21 [ 94.968708][ T9738] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.038793][ T9738] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.096199][ T9738] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.189285][ T9738] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.192090][ T9753] IPVS: ftp: loaded support on port[0] = 21 [ 95.228260][ T9745] chnl_net:caif_netlink_parms(): no params data found [ 95.253303][ T9747] chnl_net:caif_netlink_parms(): no params data found [ 95.358251][ T9745] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.367682][ T9745] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.375699][ T9745] device bridge_slave_0 entered promiscuous mode [ 95.396907][ T9745] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.404383][ T9745] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.412047][ T9745] device bridge_slave_1 entered promiscuous mode [ 95.435600][ T9747] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.445062][ T9747] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.455360][ T9747] device bridge_slave_0 entered promiscuous mode [ 95.469129][ T9742] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 95.535592][ T9742] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 95.588928][ T9742] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 95.652367][ T9745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.662870][ T9747] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.669947][ T9747] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.678389][ T9747] device bridge_slave_1 entered promiscuous mode [ 95.721099][ T9742] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 95.762066][ T9745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.797977][ T9747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.810238][ T9750] chnl_net:caif_netlink_parms(): no params data found [ 95.853042][ T9747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.881579][ T9745] team0: Port device team_slave_0 added [ 95.892017][ T9745] team0: Port device team_slave_1 added [ 95.924604][ T9747] team0: Port device team_slave_0 added [ 95.933686][ T9747] team0: Port device team_slave_1 added [ 95.940765][ T9753] chnl_net:caif_netlink_parms(): no params data found [ 95.979857][ T9750] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.989793][ T9750] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.997877][ T9750] device bridge_slave_0 entered promiscuous mode [ 96.006802][ T9750] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.013956][ T9750] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.022850][ T9750] device bridge_slave_1 entered promiscuous mode [ 96.126492][ T9747] device hsr_slave_0 entered promiscuous mode [ 96.176336][ T9747] device hsr_slave_1 entered promiscuous mode [ 96.242673][ T9747] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.250261][ T9747] Cannot create hsr debugfs directory [ 96.304738][ T9745] device hsr_slave_0 entered promiscuous mode [ 96.343089][ T9745] device hsr_slave_1 entered promiscuous mode [ 96.382759][ T9745] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.390363][ T9745] Cannot create hsr debugfs directory [ 96.400028][ T9750] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.421024][ T9750] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.479454][ T9750] team0: Port device team_slave_0 added [ 96.491810][ T9750] team0: Port device team_slave_1 added [ 96.510416][ T9753] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.519881][ T9753] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.528972][ T9753] device bridge_slave_0 entered promiscuous mode [ 96.537821][ T9753] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.545069][ T9753] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.553416][ T9753] device bridge_slave_1 entered promiscuous mode [ 96.612328][ T9738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.629069][ T9753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.664835][ T9750] device hsr_slave_0 entered promiscuous mode [ 96.713502][ T9750] device hsr_slave_1 entered promiscuous mode [ 96.752618][ T9750] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.760243][ T9750] Cannot create hsr debugfs directory [ 96.778119][ T9753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.811262][ T2690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 96.821830][ T2690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 96.854217][ T9738] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.861092][ T9747] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 96.955128][ T2690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 96.963958][ T2690] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 96.972328][ T2690] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.979548][ T2690] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.988022][ T9747] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 97.047372][ T9747] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 97.110034][ T9753] team0: Port device team_slave_0 added [ 97.119517][ T9753] team0: Port device team_slave_1 added [ 97.136975][ T2706] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 97.148141][ T9747] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 97.207939][ T9742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.228004][ T9745] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 97.257389][ T9745] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 97.318323][ T2962] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 97.328045][ T2962] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 97.339927][ T2962] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.347077][ T2962] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.355630][ T2962] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 97.424533][ T9753] device hsr_slave_0 entered promiscuous mode [ 97.473656][ T9753] device hsr_slave_1 entered promiscuous mode [ 97.512592][ T9753] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 97.520186][ T9753] Cannot create hsr debugfs directory [ 97.545337][ T2856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 97.554504][ T9745] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 97.596201][ T9745] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 97.702121][ T2690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 97.711522][ T2690] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 97.720655][ T2690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 97.728877][ T2690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 97.759014][ T2690] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 97.771948][ T2690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 97.780672][ T2690] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 97.789494][ T2690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 97.797980][ T2690] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 97.808041][ T9742] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.828282][ T9750] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 97.874974][ T9750] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 97.944830][ T2883] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 97.953559][ T2883] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 97.967425][ T9738] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 97.990403][ T9750] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 98.049440][ T9750] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 98.094618][ T2883] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 98.104681][ T2883] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 98.113404][ T2883] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.120482][ T2883] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.128667][ T2883] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 98.149929][ T2706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 98.159304][ T2706] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 98.168858][ T2706] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.175976][ T2706] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.210612][ T2929] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 98.219329][ T2929] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 98.227087][ T2929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 98.245098][ T9753] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 98.292053][ T9738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.315434][ T2706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 98.325019][ T9753] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 98.366640][ T9753] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 98.435413][ T9753] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 98.502624][ T2856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 98.512150][ T2856] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 98.521382][ T2856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 98.530642][ T2856] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 98.539369][ T2856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 98.547838][ T2856] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 98.556440][ T2856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 98.565191][ T2856] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 98.576660][ T2856] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 98.599602][ T2690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 98.612662][ T2690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 98.622349][ T9742] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 98.667964][ T9747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.691151][ T9738] device veth0_vlan entered promiscuous mode [ 98.704969][ T2856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 98.714663][ T2856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 98.724555][ T2856] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 98.732386][ T2856] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 98.757071][ T9738] device veth1_vlan entered promiscuous mode [ 98.780315][ T2706] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 98.789324][ T2706] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 98.798660][ T2706] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 98.806478][ T2706] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 98.825224][ T9742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.855713][ T9745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.864097][ T2706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 98.871766][ T2706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 98.881347][ T9747] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.919930][ T2706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 98.928882][ T2706] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 98.938240][ T2706] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.945409][ T2706] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.955457][ T2706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 98.964127][ T2706] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 98.972406][ T2706] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.979514][ T2706] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.987827][ T2706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 98.997159][ T2706] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 99.048189][ T9742] device veth0_vlan entered promiscuous mode [ 99.077015][ T9745] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.085216][ T2706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 99.097020][ T2706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 99.106206][ T2706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 99.114781][ T2706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 99.123318][ T2706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 99.131980][ T2706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 99.140419][ T2706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 99.151679][ T9750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.177597][ T9753] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.202923][ T2706] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 99.210615][ T2706] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 99.230744][ T2706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 99.247638][ T2706] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 99.256158][ T2706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 99.264878][ T2706] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 99.274403][ T2706] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready 03:26:47 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)) [ 99.300750][ T9747] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 99.314105][ T9738] ------------[ cut here ]------------ [ 99.319610][ T9738] kernel BUG at fs/namei.c:684! [ 99.321234][ T9747] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 99.337145][ T9738] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 99.343320][ T9738] CPU: 1 PID: 9738 Comm: syz-executor.0 Not tainted 5.5.0-rc5-next-20200113-syzkaller #0 [ 99.353120][ T9738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 99.363189][ T9738] RIP: 0010:unlazy_walk+0x306/0x3b0 [ 99.368080][ T9745] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 99.368402][ T9738] Code: ff ff ff e8 6c 3f a1 ff e8 e7 d8 b3 ff 48 c7 c6 74 6c c1 81 48 c7 c7 00 f7 ba 89 e8 e4 97 99 ff e9 d8 fe ff ff e8 ca d8 b3 ff <0f> 0b e8 c3 d8 b3 ff 0f 0b e8 bc d8 b3 ff e8 27 86 a0 ff 31 ff 89 [ 99.381530][ T9745] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 99.398279][ T9738] RSP: 0018:ffffc900062afba0 EFLAGS: 00010293 [ 99.398289][ T9738] RAX: ffff8880a5850200 RBX: ffffc900062afc60 RCX: ffffffff81c16a16 [ 99.398296][ T9738] RDX: 0000000000000000 RSI: ffffffff81c16ca6 RDI: 0000000000000005 [ 99.398303][ T9738] RBP: ffffc900062afbd0 R08: ffff8880a5850200 R09: ffff8880a5850a98 [ 99.398310][ T9738] R10: fffffbfff1549b88 R11: ffffffff8aa4dc47 R12: 0000000000000009 [ 99.398317][ T9738] R13: ffffc900062afc68 R14: ffff8880967dc9e0 R15: 0000000000000000 [ 99.398327][ T9738] FS: 0000000002398940(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 99.398336][ T9738] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 99.398344][ T9738] CR2: 00000000023a1978 CR3: 000000007d555000 CR4: 00000000001406e0 [ 99.398354][ T9738] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 99.398362][ T9738] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 99.398367][ T9738] Call Trace: [ 99.398393][ T9738] path_mountpoint.isra.0+0x1d5/0x340 [ 99.431684][ T9745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.438618][ T9738] ? find_held_lock+0x35/0x130 [ 99.438635][ T9738] filename_mountpoint+0x181/0x380 [ 99.438649][ T9738] ? filename_parentat.isra.0+0x400/0x400 [ 99.438664][ T9738] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 99.438683][ T9738] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 99.438704][ T9738] ? strncpy_from_user+0x2b4/0x400 [ 99.476349][ T9745] device veth0_vlan entered promiscuous mode [ 99.478208][ T9738] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 99.494969][ T9745] device veth1_vlan entered promiscuous mode [ 99.497406][ T9738] ? getname_flags+0x277/0x5b0 [ 99.565006][ T9738] user_path_mountpoint_at+0x3a/0x50 [ 99.570330][ T9738] ksys_umount+0x164/0xef0 [ 99.574737][ T9738] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 99.580959][ T9738] ? __detach_mounts+0x290/0x290 [ 99.585895][ T9738] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 99.591351][ T9738] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 99.596807][ T9738] ? do_syscall_64+0x26/0x790 [ 99.601466][ T9738] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 99.607517][ T9738] ? do_syscall_64+0x26/0x790 [ 99.612238][ T9738] ? lockdep_hardirqs_on+0x421/0x5e0 [ 99.617515][ T9738] __x64_sys_umount+0x54/0x80 [ 99.622176][ T9738] do_syscall_64+0xfa/0x790 [ 99.626675][ T9738] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 99.632562][ T9738] RIP: 0033:0x45d977 [ 99.636520][ T9738] Code: 64 89 04 25 d0 02 00 00 58 5f ff d0 48 89 c7 e8 2f be ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 4d 8c fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 99.656113][ T9738] RSP: 002b:00007fff5d4d67f8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 99.664522][ T9738] RAX: ffffffffffffffda RBX: 000000000001839f RCX: 000000000045d977 [ 99.672521][ T9738] RDX: 0000000000403720 RSI: 0000000000000002 RDI: 00007fff5d4d68a0 [ 99.680496][ T9738] RBP: 0000000000000002 R08: 0000000000000000 R09: 000000000000000e [ 99.688503][ T9738] R10: 000000000000000a R11: 0000000000000206 R12: 00007fff5d4d7930 [ 99.696465][ T9738] R13: 0000000002399940 R14: 0000000000000000 R15: 00007fff5d4d7930 [ 99.704439][ T9738] Modules linked in: [ 99.709948][ T9738] ---[ end trace 9dac568d181a2849 ]--- [ 99.717072][ T9738] RIP: 0010:unlazy_walk+0x306/0x3b0 [ 99.717332][ T2929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 99.722290][ T9738] Code: ff ff ff e8 6c 3f a1 ff e8 e7 d8 b3 ff 48 c7 c6 74 6c c1 81 48 c7 c7 00 f7 ba 89 e8 e4 97 99 ff e9 d8 fe ff ff e8 ca d8 b3 ff <0f> 0b e8 c3 d8 b3 ff 0f 0b e8 bc d8 b3 ff e8 27 86 a0 ff 31 ff 89 [ 99.730944][ T2929] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 99.755667][ T9738] RSP: 0018:ffffc900062afba0 EFLAGS: 00010293 [ 99.761100][ T2929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 99.766270][ T9738] RAX: ffff8880a5850200 RBX: ffffc900062afc60 RCX: ffffffff81c16a16 [ 99.777704][ T2929] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 99.782076][ T9738] RDX: 0000000000000000 RSI: ffffffff81c16ca6 RDI: 0000000000000005 [ 99.790610][ T2929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 99.806809][ T9738] RBP: ffffc900062afbd0 R08: ffff8880a5850200 R09: ffff8880a5850a98 [ 99.806962][ T2929] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 99.815139][ T9738] R10: fffffbfff1549b88 R11: ffffffff8aa4dc47 R12: 0000000000000009 [ 99.826557][ T2929] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.831440][ T9738] R13: ffffc900062afc68 R14: ffff8880967dc9e0 R15: 0000000000000000 [ 99.838347][ T2929] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.846408][ T9738] FS: 0000000002398940(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 99.856983][ T2929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 99.863781][ T9738] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 99.871808][ T2929] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 99.880271][ T9738] CR2: 0000000001a47e60 CR3: 000000007d555000 CR4: 00000000001406f0 [ 99.886680][ T2929] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.896582][ T9738] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 99.901241][ T2929] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.909359][ T9738] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 99.917557][ T2929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 99.926936][ T9738] Kernel panic - not syncing: Fatal exception [ 99.933334][ T2929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 99.947840][ T9738] Kernel Offset: disabled [ 99.952172][ T9738] Rebooting in 86400 seconds..