[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 91.695121][ T27] audit: type=1800 audit(1578979875.957:25): pid=9537 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 91.715064][ T27] audit: type=1800 audit(1578979875.967:26): pid=9537 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 91.752698][ T27] audit: type=1800 audit(1578979875.967:27): pid=9537 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.7' (ECDSA) to the list of known hosts. 2020/01/14 05:31:27 fuzzer started 2020/01/14 05:31:29 dialing manager at 10.128.0.26:34807 2020/01/14 05:31:29 syscalls: 2860 2020/01/14 05:31:29 code coverage: enabled 2020/01/14 05:31:29 comparison tracing: enabled 2020/01/14 05:31:29 extra coverage: enabled 2020/01/14 05:31:29 setuid sandbox: enabled 2020/01/14 05:31:29 namespace sandbox: enabled 2020/01/14 05:31:29 Android sandbox: /sys/fs/selinux/policy does not exist 2020/01/14 05:31:29 fault injection: enabled 2020/01/14 05:31:29 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/01/14 05:31:29 net packet injection: enabled 2020/01/14 05:31:29 net device setup: enabled 2020/01/14 05:31:29 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/01/14 05:31:29 devlink PCI setup: PCI device 0000:00:10.0 is not available 05:31:30 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup(r0, &(0x7f00000001c0)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100)='cgroup.subtree_control\x00', 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net/udp6\x00') mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) 05:31:30 executing program 1: keyctl$instantiate_iov(0x14, 0x0, 0x0, 0xfffffffffffffd66, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1, 0x8101, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0xff, &(0x7f0000000100)=0x0) io_getevents(r0, 0x0, 0x1, &(0x7f0000000140)=[{}], &(0x7f0000000180)={0x0, 0x1c9c380}) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000240)="580000001400192340834b80043f679a10ffff7f4e32f61bcdf1e422000000000100804824ca945f64009400050028925aaa000000000000008400f0fffeff2c707f8f00ff050000000010000100090a0000000000000000", 0x58}], 0x1) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/net/pfkey\x00', 0x80900, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'veth1_to_team\x00', 0x1}, 0xfffffffffffffdf9) gettid() ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000600)={0x0, 0xffffffffffffffff, 0x0, 0x5, &(0x7f00000005c0)='/dev/snapshot\x00'}, 0x30) syz_open_procfs(r2, &(0x7f00000001c0)='net/ipv6_route\x00') r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000000)) syz_open_procfs(0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f00000000c0)={0x20}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000380), 0x1040c) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r6, 0x660c) write$binfmt_elf64(r5, &(0x7f0000000140)=ANY=[@ANYPTR64], 0x8) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f00000000c0)={0x20}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000380), 0x1040c) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r8, 0x660c) write$binfmt_elf64(r7, &(0x7f0000000140)=ANY=[@ANYPTR64], 0x8) ioctl$EXT4_IOC_MOVE_EXT(r8, 0xc028660f, &(0x7f0000000500)={0x0, r7}) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000200)={0x0, r8, 0x0, 0x9, 0xfffffffffffffffa}) ioctl$sock_inet_tcp_SIOCINQ(r6, 0x541b, &(0x7f00000000c0)) r9 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video35\x00', 0x2, 0x0) sendfile(0xffffffffffffffff, r9, 0x0, 0x7fff) write$P9_RWRITE(0xffffffffffffffff, 0x0, 0x0) close(r3) close(0xffffffffffffffff) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000340)) syzkaller login: [ 106.365338][ T9704] IPVS: ftp: loaded support on port[0] = 21 05:31:30 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@ipv6_newrule={0x44, 0x20, 0x1, 0x0, 0x0, {0xa, 0x10}, [@FRA_DST={0x14, 0x1, @mcast1}, @FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'syzkaller1\x00'}]}, 0x44}}, 0x0) [ 106.550294][ T9704] chnl_net:caif_netlink_parms(): no params data found [ 106.584411][ T9707] IPVS: ftp: loaded support on port[0] = 21 [ 106.660733][ T9704] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.669081][ T9704] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.678576][ T9704] device bridge_slave_0 entered promiscuous mode [ 106.710462][ T9704] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.728068][ T9704] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.746538][ T9704] device bridge_slave_1 entered promiscuous mode [ 106.781451][ T9709] IPVS: ftp: loaded support on port[0] = 21 05:31:31 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r0, 0x208200) setxattr$security_ima(&(0x7f0000001d00)='./bus\x00', &(0x7f0000001d40)='security.ima\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="04a04ec447d26b6409"], 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) [ 106.823045][ T9704] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.862768][ T9704] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.932885][ T9707] chnl_net:caif_netlink_parms(): no params data found [ 106.970452][ T9704] team0: Port device team_slave_0 added [ 106.988561][ T9704] team0: Port device team_slave_1 added 05:31:31 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8476071") bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x9, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x2, 0x1, 0x30}]}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) [ 107.161734][ T9704] device hsr_slave_0 entered promiscuous mode [ 107.208827][ T9704] device hsr_slave_1 entered promiscuous mode [ 107.340585][ T9707] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.356369][ T9707] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.369982][ T9707] device bridge_slave_0 entered promiscuous mode [ 107.395815][ T9709] chnl_net:caif_netlink_parms(): no params data found [ 107.412592][ T9707] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.417740][ T9714] IPVS: ftp: loaded support on port[0] = 21 [ 107.420707][ T9707] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.435885][ T9707] device bridge_slave_1 entered promiscuous mode 05:31:31 executing program 5: gettid() capset(&(0x7f0000000140)={0x19980330}, &(0x7f0000000180)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) [ 107.452382][ T9715] IPVS: ftp: loaded support on port[0] = 21 [ 107.561624][ T9709] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.576333][ T9709] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.584523][ T9709] device bridge_slave_0 entered promiscuous mode [ 107.595205][ T9707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.607303][ T9707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.627541][ T9709] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.634637][ T9709] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.643927][ T9709] device bridge_slave_1 entered promiscuous mode [ 107.684700][ T9707] team0: Port device team_slave_0 added [ 107.697100][ T9707] team0: Port device team_slave_1 added [ 107.715673][ T9709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.728837][ T9709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.744522][ T9717] IPVS: ftp: loaded support on port[0] = 21 [ 107.820317][ T9707] device hsr_slave_0 entered promiscuous mode [ 107.896931][ T9707] device hsr_slave_1 entered promiscuous mode [ 107.936403][ T9707] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 107.944964][ T9707] Cannot create hsr debugfs directory [ 107.993836][ T9709] team0: Port device team_slave_0 added [ 108.012912][ T9704] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 108.080044][ T9709] team0: Port device team_slave_1 added [ 108.104345][ T9704] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 108.149986][ T9704] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 108.237351][ T9704] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 108.349705][ T9709] device hsr_slave_0 entered promiscuous mode [ 108.386867][ T9709] device hsr_slave_1 entered promiscuous mode [ 108.426538][ T9709] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 108.434305][ T9709] Cannot create hsr debugfs directory [ 108.577220][ T9715] chnl_net:caif_netlink_parms(): no params data found [ 108.593772][ T9707] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 108.672958][ T9707] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 108.728697][ T9714] chnl_net:caif_netlink_parms(): no params data found [ 108.764905][ T9707] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 108.871508][ T9707] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 108.968181][ T9714] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.975372][ T9714] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.983887][ T9714] device bridge_slave_0 entered promiscuous mode [ 108.994908][ T9714] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.003102][ T9714] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.011354][ T9714] device bridge_slave_1 entered promiscuous mode [ 109.028042][ T9715] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.035146][ T9715] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.046108][ T9715] device bridge_slave_0 entered promiscuous mode [ 109.090122][ T9714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.099562][ T9717] chnl_net:caif_netlink_parms(): no params data found [ 109.115151][ T9715] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.122632][ T9715] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.131833][ T9715] device bridge_slave_1 entered promiscuous mode [ 109.151089][ T9709] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 109.209882][ T9714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.234284][ T9715] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.252472][ T9709] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 109.317040][ T9715] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.336888][ T9709] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 109.383137][ T9709] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 109.431371][ T9714] team0: Port device team_slave_0 added [ 109.458416][ T9715] team0: Port device team_slave_0 added [ 109.471236][ T9714] team0: Port device team_slave_1 added [ 109.483396][ T9717] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.491025][ T9717] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.499571][ T9717] device bridge_slave_0 entered promiscuous mode [ 109.516745][ T9715] team0: Port device team_slave_1 added [ 109.550869][ T9717] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.558748][ T9717] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.566912][ T9717] device bridge_slave_1 entered promiscuous mode [ 109.628445][ T9714] device hsr_slave_0 entered promiscuous mode [ 109.666800][ T9714] device hsr_slave_1 entered promiscuous mode [ 109.736463][ T9714] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 109.744198][ T9714] Cannot create hsr debugfs directory [ 109.767103][ T9704] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.808222][ T9715] device hsr_slave_0 entered promiscuous mode [ 109.867299][ T9715] device hsr_slave_1 entered promiscuous mode [ 109.926388][ T9715] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 109.933986][ T9715] Cannot create hsr debugfs directory [ 109.962994][ T9717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.016933][ T9717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.065019][ T2797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 110.074198][ T2797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 110.114909][ T9717] team0: Port device team_slave_0 added [ 110.131920][ T9704] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.151834][ T9717] team0: Port device team_slave_1 added [ 110.160019][ T9714] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 110.204969][ T9714] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 110.269253][ T9707] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.285770][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 110.294706][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 110.303932][ T2763] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.311159][ T2763] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.320931][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 110.330269][ T9714] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 110.393042][ T9714] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 110.465498][ T2792] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 110.476097][ T2792] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 110.485330][ T2792] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.492444][ T2792] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.501070][ T2792] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 110.509113][ T2792] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 110.569724][ T9717] device hsr_slave_0 entered promiscuous mode [ 110.626677][ T9717] device hsr_slave_1 entered promiscuous mode [ 110.677929][ T9717] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 110.685971][ T9717] Cannot create hsr debugfs directory [ 110.712212][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 110.738858][ T9715] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 110.800735][ T9715] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 110.849436][ T9715] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 110.910029][ T9715] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 110.972316][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 110.981712][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 110.990975][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 111.016592][ T9707] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.037724][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 111.045871][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 111.055546][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 111.064515][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 111.073106][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 111.082012][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 111.090353][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 111.109245][ T9704] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 111.122618][ T2797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 111.131832][ T2797] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 111.140590][ T2797] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.147714][ T2797] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.186456][ T2793] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 111.194421][ T2793] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 111.209191][ T2793] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 111.219547][ T2793] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.226825][ T2793] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.235569][ T2793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 111.288419][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 111.296025][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 111.304261][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 111.316914][ T9709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.346529][ T9704] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.354901][ T9717] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 111.408649][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 111.417545][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 111.425974][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 111.434709][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 111.444622][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 111.453325][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 111.461923][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 111.491956][ T9717] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 111.529597][ T9717] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 111.595517][ T9709] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.627642][ T2797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 111.635438][ T2797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 111.643853][ T2797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 111.653270][ T2797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 111.664350][ T9714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.672742][ T9717] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 111.770732][ T9707] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 111.783572][ T9707] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 111.801822][ T2797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 111.810811][ T2797] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 111.819780][ T2797] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.827062][ T2797] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.835040][ T2797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 111.844320][ T2797] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 111.852805][ T2797] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.859984][ T2797] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.868505][ T2797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 111.877309][ T2797] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 111.885559][ T2797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 111.893924][ T2797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 111.904383][ T2797] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 111.912487][ T2797] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 111.920497][ T2797] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 111.933521][ T9704] device veth0_vlan entered promiscuous mode [ 111.959189][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 111.968684][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 111.976532][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 111.991561][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 112.006845][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 112.024528][ T9714] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.038268][ T2797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 112.054810][ T9707] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.089543][ T2793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 112.100251][ T2793] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 112.108881][ T2793] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 112.118702][ T2793] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 112.127496][ T2793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 112.136156][ T2793] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 112.144722][ T2793] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.151854][ T2793] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.159578][ T2793] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 112.168353][ T2793] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 112.177180][ T2793] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.184220][ T2793] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.192954][ T2793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 112.201524][ T2793] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 112.215112][ T9704] device veth1_vlan entered promiscuous mode [ 112.238816][ T2793] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 112.248152][ T2793] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 112.256829][ T2793] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 112.265218][ T2793] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 112.274272][ T2793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 112.303091][ T9709] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 112.318260][ T9715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.329263][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 112.387883][ T2793] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 112.404015][ T2793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 112.454571][ T9717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.510640][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 112.525109][ T9723] 9pnet: Insufficient options for proto=fd [ 112.528938][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 112.534231][ T9724] 9pnet: Insufficient options for proto=fd 05:31:36 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup(r0, &(0x7f00000001c0)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100)='cgroup.subtree_control\x00', 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net/udp6\x00') mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) [ 112.554610][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 112.570811][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 112.572742][ T9704] ------------[ cut here ]------------ [ 112.579086][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 112.583638][ T9704] kernel BUG at fs/namei.c:684! [ 112.591561][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 112.597789][ T9704] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 112.606908][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 112.608939][ T9704] CPU: 0 PID: 9704 Comm: syz-executor.0 Not tainted 5.5.0-rc5-next-20200113-syzkaller #0 [ 112.617553][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 112.626607][ T9704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 112.626626][ T9704] RIP: 0010:unlazy_walk+0x306/0x3b0 [ 112.626646][ T9704] Code: ff ff ff e8 6c 3f a1 ff e8 e7 d8 b3 ff 48 c7 c6 74 6c c1 81 48 c7 c7 00 f7 ba 89 e8 e4 97 99 ff e9 d8 fe ff ff e8 ca d8 b3 ff <0f> 0b e8 c3 d8 b3 ff 0f 0b e8 bc d8 b3 ff e8 27 86 a0 ff 31 ff 89 [ 112.636187][ T9707] device veth0_vlan entered promiscuous mode [ 112.644477][ T9704] RSP: 0018:ffffc90002487ba0 EFLAGS: 00010293 [ 112.654182][ T9709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.669676][ T9704] RAX: ffff88808c45c540 RBX: ffffc90002487c60 RCX: ffffffff81c16a16 [ 112.669683][ T9704] RDX: 0000000000000000 RSI: ffffffff81c16ca6 RDI: 0000000000000005 [ 112.669689][ T9704] RBP: ffffc90002487bd0 R08: ffff88808c45c540 R09: ffff88808c45cdd8 [ 112.669696][ T9704] R10: fffffbfff1549b88 R11: ffffffff8aa4dc47 R12: 0000000000000009 [ 112.669703][ T9704] R13: ffffc90002487c68 R14: ffff888091f14e40 R15: 0000000000000000 [ 112.669720][ T9704] FS: 00000000016f2940(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 112.679143][ T9715] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.681736][ T9704] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 112.715031][ T9715] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 112.720446][ T9704] CR2: 00000000016fb978 CR3: 000000007d4b6000 CR4: 00000000001406f0 [ 112.720456][ T9704] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 112.720462][ T9704] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 112.720467][ T9704] Call Trace: [ 112.720494][ T9704] path_mountpoint.isra.0+0x1d5/0x340 [ 112.728464][ T9715] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 112.737369][ T9704] filename_mountpoint+0x181/0x380 [ 112.737388][ T9704] ? filename_parentat.isra.0+0x400/0x400 [ 112.762194][ T9715] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.769102][ T9704] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 112.769123][ T9704] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 112.769144][ T9704] ? strncpy_from_user+0x2b4/0x400 [ 112.838720][ T9704] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 112.841212][ T9715] device veth0_vlan entered promiscuous mode [ 112.844977][ T9704] ? getname_flags+0x277/0x5b0 [ 112.855693][ T9704] user_path_mountpoint_at+0x3a/0x50 [ 112.856951][ T9715] device veth1_vlan entered promiscuous mode [ 112.860985][ T9704] ksys_umount+0x164/0xef0 [ 112.871589][ T9704] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 112.877940][ T9704] ? __detach_mounts+0x290/0x290 [ 112.883248][ T9704] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 112.888725][ T9704] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 112.894212][ T9704] ? do_syscall_64+0x26/0x790 [ 112.898880][ T9704] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 112.904962][ T9704] ? do_syscall_64+0x26/0x790 [ 112.909633][ T9704] ? lockdep_hardirqs_on+0x421/0x5e0 [ 112.914916][ T9704] __x64_sys_umount+0x54/0x80 [ 112.919840][ T9704] do_syscall_64+0xfa/0x790 [ 112.924353][ T9704] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 112.930250][ T9704] RIP: 0033:0x45d977 [ 112.934169][ T9704] Code: 64 89 04 25 d0 02 00 00 58 5f ff d0 48 89 c7 e8 2f be ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 4d 8c fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 112.953893][ T9704] RSP: 002b:00007ffd07eef068 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6 [ 112.962401][ T9704] RAX: ffffffffffffffda RBX: 000000000001b770 RCX: 000000000045d977 [ 112.970877][ T9704] RDX: 0000000000403720 RSI: 0000000000000002 RDI: 00007ffd07eef110 [ 112.978949][ T9704] RBP: 0000000000000002 R08: 0000000000000000 R09: 000000000000000e [ 112.987080][ T9704] R10: 000000000000000a R11: 0000000000000202 R12: 00007ffd07ef01a0 [ 112.995158][ T9704] R13: 00000000016f3940 R14: 0000000000000000 R15: 00007ffd07ef01a0 [ 113.003132][ T9704] Modules linked in: [ 113.018371][ T9704] ---[ end trace f6a42a2d9b2b593d ]--- [ 113.023931][ T9704] RIP: 0010:unlazy_walk+0x306/0x3b0 [ 113.029269][ T9704] Code: ff ff ff e8 6c 3f a1 ff e8 e7 d8 b3 ff 48 c7 c6 74 6c c1 81 48 c7 c7 00 f7 ba 89 e8 e4 97 99 ff e9 d8 fe ff ff e8 ca d8 b3 ff <0f> 0b e8 c3 d8 b3 ff 0f 0b e8 bc d8 b3 ff e8 27 86 a0 ff 31 ff 89 [ 113.037544][ T9717] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.049242][ T9704] RSP: 0018:ffffc90002487ba0 EFLAGS: 00010293 [ 113.049256][ T9704] RAX: ffff88808c45c540 RBX: ffffc90002487c60 RCX: ffffffff81c16a16 [ 113.049265][ T9704] RDX: 0000000000000000 RSI: ffffffff81c16ca6 RDI: 0000000000000005 [ 113.049272][ T9704] RBP: ffffc90002487bd0 R08: ffff88808c45c540 R09: ffff88808c45cdd8 [ 113.049280][ T9704] R10: fffffbfff1549b88 R11: ffffffff8aa4dc47 R12: 0000000000000009 [ 113.049288][ T9704] R13: ffffc90002487c68 R14: ffff888091f14e40 R15: 0000000000000000 [ 113.049301][ T9704] FS: 00000000016f2940(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 113.049310][ T9704] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 113.049318][ T9704] CR2: 00000000016fb978 CR3: 000000007d4b6000 CR4: 00000000001406f0 [ 113.049333][ T9704] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 113.049341][ T9704] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 113.049350][ T9704] Kernel panic - not syncing: Fatal exception [ 113.050701][ T9704] Kernel Offset: disabled [ 113.153422][ T9704] Rebooting in 86400 seconds..