Warning: Permanently added '10.128.0.184' (ECDSA) to the list of known hosts. 2020/01/14 03:49:23 fuzzer started 2020/01/14 03:49:25 dialing manager at 10.128.0.26:34807 2020/01/14 03:49:25 syscalls: 2860 2020/01/14 03:49:25 code coverage: enabled 2020/01/14 03:49:25 comparison tracing: enabled 2020/01/14 03:49:25 extra coverage: enabled 2020/01/14 03:49:25 setuid sandbox: enabled 2020/01/14 03:49:25 namespace sandbox: enabled 2020/01/14 03:49:25 Android sandbox: /sys/fs/selinux/policy does not exist 2020/01/14 03:49:25 fault injection: enabled 2020/01/14 03:49:25 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/01/14 03:49:25 net packet injection: enabled 2020/01/14 03:49:25 net device setup: enabled 2020/01/14 03:49:25 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/01/14 03:49:25 devlink PCI setup: PCI device 0000:00:10.0 is not available 03:49:26 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000180), 0x214, 0x0, 0x0, 0x31b) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) sendmmsg$alg(r1, &(0x7f0000002b00)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000180)="99", 0x1}], 0x1}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x0, 0x2}, 0xc4cbfd162f1c6832) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x0, 0x3ff}, 0x8) 03:49:26 executing program 1: r0 = syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)={0x0, 0x3f000002}) syzkaller login: [ 100.878336][ T9727] IPVS: ftp: loaded support on port[0] = 21 03:49:26 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x800454cf, &(0x7f0000000040)) [ 101.093810][ T9730] IPVS: ftp: loaded support on port[0] = 21 [ 101.102705][ T9727] chnl_net:caif_netlink_parms(): no params data found [ 101.254765][ T9727] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.269848][ T9727] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.290060][ T9727] device bridge_slave_0 entered promiscuous mode [ 101.322497][ T9727] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.322928][ T9733] IPVS: ftp: loaded support on port[0] = 21 [ 101.330036][ T9727] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.359637][ T9727] device bridge_slave_1 entered promiscuous mode [ 101.422190][ T9727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.442709][ T9727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 03:49:27 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x2, 0x1, 0x88}]}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) [ 101.504981][ T9730] chnl_net:caif_netlink_parms(): no params data found [ 101.521366][ T9727] team0: Port device team_slave_0 added [ 101.549839][ T9727] team0: Port device team_slave_1 added [ 101.642625][ T9730] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.659780][ T9730] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.667878][ T9730] device bridge_slave_0 entered promiscuous mode [ 101.733724][ T9727] device hsr_slave_0 entered promiscuous mode 03:49:27 executing program 4: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @rand_addr=0xdd}}, 0x24) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x18}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa2}}], 0x400000000000953, 0x42, 0x0) [ 101.789099][ T9727] device hsr_slave_1 entered promiscuous mode [ 101.882970][ T9730] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.898749][ T9730] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.919207][ T9730] device bridge_slave_1 entered promiscuous mode [ 101.962098][ T9736] IPVS: ftp: loaded support on port[0] = 21 [ 101.989852][ T9733] chnl_net:caif_netlink_parms(): no params data found [ 102.043661][ T9730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link 03:49:27 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@const={0x0, 0x0, 0x0, 0xd}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2}}]}}, &(0x7f0000000340)=""/142, 0x4e, 0x8e, 0x8}, 0x20) [ 102.095921][ T9730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.214133][ T9740] IPVS: ftp: loaded support on port[0] = 21 [ 102.260051][ T9730] team0: Port device team_slave_0 added [ 102.278817][ T9733] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.285945][ T9733] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.298741][ T9733] device bridge_slave_0 entered promiscuous mode [ 102.323682][ T9730] team0: Port device team_slave_1 added [ 102.354392][ T9733] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.361941][ T9733] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.370456][ T9733] device bridge_slave_1 entered promiscuous mode [ 102.392286][ T9727] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 102.500628][ T9730] device hsr_slave_0 entered promiscuous mode [ 102.538904][ T9730] device hsr_slave_1 entered promiscuous mode [ 102.588800][ T9730] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 102.596604][ T9730] Cannot create hsr debugfs directory [ 102.617232][ T9741] IPVS: ftp: loaded support on port[0] = 21 [ 102.626454][ T9733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.645167][ T9727] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 102.702841][ T9727] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 102.772597][ T9727] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 102.836647][ T9733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.885933][ T9733] team0: Port device team_slave_0 added [ 102.909070][ T9733] team0: Port device team_slave_1 added [ 103.001914][ T9733] device hsr_slave_0 entered promiscuous mode [ 103.059043][ T9733] device hsr_slave_1 entered promiscuous mode [ 103.118749][ T9733] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 103.126543][ T9733] Cannot create hsr debugfs directory [ 103.140266][ T9736] chnl_net:caif_netlink_parms(): no params data found [ 103.264250][ T9740] chnl_net:caif_netlink_parms(): no params data found [ 103.290019][ T9730] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 103.355628][ T9730] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 103.462428][ T9730] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 103.523164][ T9736] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.531824][ T9736] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.539861][ T9736] device bridge_slave_0 entered promiscuous mode [ 103.554596][ T9741] chnl_net:caif_netlink_parms(): no params data found [ 103.564136][ T9730] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 103.614028][ T9736] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.621533][ T9736] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.633782][ T9736] device bridge_slave_1 entered promiscuous mode [ 103.702867][ T9733] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 103.774056][ T9733] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 103.814088][ T9736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.823414][ T9740] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.831781][ T9740] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.839889][ T9740] device bridge_slave_0 entered promiscuous mode [ 103.857168][ T9741] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.864334][ T9741] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.873743][ T9741] device bridge_slave_0 entered promiscuous mode [ 103.885680][ T9741] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.897466][ T9741] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.905513][ T9741] device bridge_slave_1 entered promiscuous mode [ 103.913230][ T9733] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 103.972531][ T9736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.986225][ T9740] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.994047][ T9740] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.001971][ T9740] device bridge_slave_1 entered promiscuous mode [ 104.017919][ T9733] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 104.083595][ T9740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.103243][ T9736] team0: Port device team_slave_0 added [ 104.111945][ T9741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.130329][ T9740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.150230][ T9736] team0: Port device team_slave_1 added [ 104.158292][ T9741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.182191][ T9727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.271964][ T9736] device hsr_slave_0 entered promiscuous mode [ 104.309163][ T9736] device hsr_slave_1 entered promiscuous mode [ 104.359106][ T9736] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 104.366708][ T9736] Cannot create hsr debugfs directory [ 104.397650][ T9740] team0: Port device team_slave_0 added [ 104.433188][ T2823] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 104.446869][ T2823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 104.456892][ T9741] team0: Port device team_slave_0 added [ 104.464700][ T9740] team0: Port device team_slave_1 added [ 104.475643][ T9727] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.491387][ T9741] team0: Port device team_slave_1 added [ 104.552609][ T2823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 104.562003][ T2823] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 104.570885][ T2823] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.578054][ T2823] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.586111][ T2823] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 104.595726][ T2823] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 104.604218][ T2823] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.611310][ T2823] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.620372][ T2823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 104.629132][ T2823] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 104.637734][ T2823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 104.646442][ T2823] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 104.655908][ T2823] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 104.663956][ T2823] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 104.732115][ T9740] device hsr_slave_0 entered promiscuous mode [ 104.769134][ T9740] device hsr_slave_1 entered promiscuous mode [ 104.808716][ T9740] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 104.816400][ T9740] Cannot create hsr debugfs directory [ 104.850669][ T2827] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 104.863456][ T2827] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 104.878302][ T9730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.960735][ T9741] device hsr_slave_0 entered promiscuous mode [ 105.009633][ T9741] device hsr_slave_1 entered promiscuous mode [ 105.048758][ T9741] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 105.056386][ T9741] Cannot create hsr debugfs directory [ 105.075182][ T3168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 105.083672][ T3168] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 105.102859][ T9727] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 105.121543][ T9727] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 105.152304][ T3169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 105.161111][ T3169] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 105.170135][ T3169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 105.177939][ T3169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 105.186186][ T9736] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 105.252680][ T9730] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.273077][ T9736] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 105.331964][ T9736] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 105.404023][ T9736] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 105.480268][ T3168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 105.492952][ T3168] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 105.501331][ T3168] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.508359][ T3168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.516889][ T3168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 105.525462][ T3168] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 105.533975][ T3168] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.541083][ T3168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.556324][ T3168] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 105.603488][ T2823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 105.643025][ T9733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.654084][ T2823] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 105.664375][ T2823] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 105.676238][ T2823] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 105.695950][ T2823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 105.704539][ T2823] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 105.727035][ T9740] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 105.787241][ T2823] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 105.801474][ T2823] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 105.810413][ T2823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 105.818207][ T2823] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 105.826979][ T2823] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 105.835530][ T2823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 105.844349][ T2823] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 105.856552][ T9727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.865703][ T9740] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 105.927968][ T9730] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 105.942640][ T9730] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 105.950691][ T9741] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 106.002722][ T9733] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.010063][ T2827] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 106.018398][ T2827] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 106.028205][ T9740] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 106.116303][ T9741] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 106.168446][ T9741] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 106.203625][ T9740] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 106.258255][ T3169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 106.266978][ T3169] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 106.275651][ T3169] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.282764][ T3169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.292126][ T3169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 106.301073][ T3169] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 106.309573][ T3169] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.317155][ T3169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.325338][ T3169] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 106.334442][ T9741] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 106.421806][ T9736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.448468][ T3166] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 106.461710][ T3166] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 106.471343][ T3166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 106.482551][ T3166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 106.491811][ T3166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 106.500952][ T3166] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 106.510043][ T3166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 106.519773][ T3166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 106.549220][ T3166] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 106.576142][ T3166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 106.585646][ T3166] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 106.595272][ T3166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 106.603777][ T3166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 106.612354][ T3166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 106.620282][ T3166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 106.628338][ T9727] device veth0_vlan entered promiscuous mode [ 106.642184][ T9736] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.655089][ T9730] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.663310][ T3166] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 106.671294][ T3166] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 106.699144][ T2827] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 106.707522][ T2827] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 106.720332][ T2827] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 106.730955][ T2827] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 106.740780][ T2827] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.747862][ T2827] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.757217][ T2810] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 106.766804][ T9727] device veth1_vlan entered promiscuous mode [ 106.812090][ T3166] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 106.821417][ T3166] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 106.830318][ T3166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 106.840556][ T3166] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 106.849605][ T3166] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.856671][ T3166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.864602][ T3166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 106.873093][ T3166] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 106.883794][ T9733] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 106.946310][ T2827] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 106.956799][ T2827] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 106.966684][ T2827] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 106.976639][ T2827] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 106.986194][ T2827] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 106.995118][ T2827] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 107.038944][ T2827] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 107.046861][ T2827] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 107.058442][ T2827] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 107.067496][ T2827] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 107.081073][ T2827] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 107.097887][ T9740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.112031][ T9733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.128378][ T9736] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 107.140084][ T9736] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 107.164160][ T9730] device veth0_vlan entered promiscuous mode [ 107.199601][ T2827] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 107.207945][ T2827] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 107.218002][ T2827] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 107.227349][ T2827] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 107.236907][ T2827] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 107.248261][ T2827] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 107.258051][ T2827] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 107.266864][ T2827] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 107.275760][ T2827] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 03:49:32 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000180), 0x214, 0x0, 0x0, 0x31b) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) sendmmsg$alg(r1, &(0x7f0000002b00)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000180)="99", 0x1}], 0x1}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x0, 0x2}, 0xc4cbfd162f1c6832) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x0, 0x3ff}, 0x8) [ 107.341574][ T9741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.349428][ T2823] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 107.357326][ T2823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 107.369262][ T9730] device veth1_vlan entered promiscuous mode [ 107.374628][ T9727] ------------[ cut here ]------------ [ 107.380936][ T9727] kernel BUG at fs/namei.c:684! [ 107.393023][ T9727] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 107.399161][ T9727] CPU: 1 PID: 9727 Comm: syz-executor.0 Not tainted 5.5.0-rc5-next-20200113-syzkaller #0 [ 107.399659][ T9733] device veth0_vlan entered promiscuous mode [ 107.408975][ T9727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 107.408993][ T9727] RIP: 0010:unlazy_walk+0x306/0x3b0 [ 107.409005][ T9727] Code: ff ff ff e8 6c 3f a1 ff e8 e7 d8 b3 ff 48 c7 c6 74 6c c1 81 48 c7 c7 00 f7 ba 89 e8 e4 97 99 ff e9 d8 fe ff ff e8 ca d8 b3 ff <0f> 0b e8 c3 d8 b3 ff 0f 0b e8 bc d8 b3 ff e8 27 86 a0 ff 31 ff 89 [ 107.409019][ T9727] RSP: 0018:ffffc90006837ba0 EFLAGS: 00010293 [ 107.421212][ T9733] device veth1_vlan entered promiscuous mode [ 107.425050][ T9727] RAX: ffff888088a7a280 RBX: ffffc90006837c60 RCX: ffffffff81c16a16 [ 107.470351][ T9727] RDX: 0000000000000000 RSI: ffffffff81c16ca6 RDI: 0000000000000005 [ 107.478481][ T9727] RBP: ffffc90006837bd0 R08: ffff888088a7a280 R09: ffff888088a7ab18 [ 107.486447][ T9727] R10: fffffbfff1549b88 R11: ffffffff8aa4dc47 R12: 0000000000000009 [ 107.494403][ T9727] R13: ffffc90006837c68 R14: ffff8880a5342e40 R15: 0000000000000000 [ 107.502356][ T9727] FS: 00000000014f5940(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 107.511363][ T9727] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 107.518012][ T9727] CR2: 00000000014fe978 CR3: 000000007da21000 CR4: 00000000001406e0 [ 107.525976][ T9727] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 107.533927][ T9727] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 107.541875][ T9727] Call Trace: [ 107.545165][ T9727] path_mountpoint.isra.0+0x1d5/0x340 [ 107.550532][ T9727] ? find_held_lock+0x35/0x130 [ 107.555274][ T9727] filename_mountpoint+0x181/0x380 [ 107.560410][ T9727] ? filename_parentat.isra.0+0x400/0x400 [ 107.566217][ T9727] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 107.572376][ T9727] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 107.578379][ T9727] ? strncpy_from_user+0x2b4/0x400 [ 107.583540][ T9727] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 107.589776][ T9727] ? getname_flags+0x277/0x5b0 [ 107.594608][ T9727] user_path_mountpoint_at+0x3a/0x50 [ 107.599878][ T9727] ksys_umount+0x164/0xef0 [ 107.604279][ T9727] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 107.610945][ T9727] ? __detach_mounts+0x290/0x290 [ 107.615872][ T9727] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 107.621316][ T9727] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 107.626771][ T9727] ? do_syscall_64+0x26/0x790 [ 107.631433][ T9727] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 107.637510][ T9727] ? do_syscall_64+0x26/0x790 [ 107.642187][ T9727] ? lockdep_hardirqs_on+0x421/0x5e0 [ 107.647456][ T9727] __x64_sys_umount+0x54/0x80 [ 107.652125][ T9727] do_syscall_64+0xfa/0x790 [ 107.656626][ T9727] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 107.662506][ T9727] RIP: 0033:0x45d977 [ 107.666470][ T9727] Code: 64 89 04 25 d0 02 00 00 58 5f ff d0 48 89 c7 e8 2f be ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 4d 8c fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 107.686052][ T9727] RSP: 002b:00007ffcd9c71878 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6 [ 107.694474][ T9727] RAX: ffffffffffffffda RBX: 000000000001a2f9 RCX: 000000000045d977 [ 107.702423][ T9727] RDX: 0000000000403720 RSI: 0000000000000002 RDI: 00007ffcd9c71920 [ 107.710568][ T9727] RBP: 0000000000000002 R08: 0000000000000000 R09: 000000000000000e [ 107.719411][ T9727] R10: 000000000000000a R11: 0000000000000202 R12: 00007ffcd9c729b0 [ 107.727390][ T9727] R13: 00000000014f6940 R14: 0000000000000000 R15: 00007ffcd9c729b0 [ 107.735356][ T9727] Modules linked in: [ 107.748008][ T9727] ---[ end trace 0183aead4c3d7774 ]--- [ 107.753743][ T9727] RIP: 0010:unlazy_walk+0x306/0x3b0 [ 107.758543][ T9741] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.765603][ T9727] Code: ff ff ff e8 6c 3f a1 ff e8 e7 d8 b3 ff 48 c7 c6 74 6c c1 81 48 c7 c7 00 f7 ba 89 e8 e4 97 99 ff e9 d8 fe ff ff e8 ca d8 b3 ff <0f> 0b e8 c3 d8 b3 ff 0f 0b e8 bc d8 b3 ff e8 27 86 a0 ff 31 ff 89 [ 107.766107][ T2823] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 107.785626][ T9727] RSP: 0018:ffffc90006837ba0 EFLAGS: 00010293 [ 107.797177][ T2823] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 107.800305][ T9727] RAX: ffff888088a7a280 RBX: ffffc90006837c60 RCX: ffffffff81c16a16 [ 107.812604][ T2823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 107.816340][ T9727] RDX: 0000000000000000 RSI: ffffffff81c16ca6 RDI: 0000000000000005 [ 107.827795][ T2823] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 107.832170][ T9727] RBP: ffffc90006837bd0 R08: ffff888088a7a280 R09: ffff888088a7ab18 [ 107.840730][ T2823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 107.847913][ T9727] R10: fffffbfff1549b88 R11: ffffffff8aa4dc47 R12: 0000000000000009 [ 107.859457][ T2823] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 107.864698][ T9727] R13: ffffc90006837c68 R14: ffff8880a5342e40 R15: 0000000000000000 [ 107.874080][ T2823] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 107.879863][ T9727] FS: 00000000014f5940(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 107.888144][ T2823] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 107.896204][ T9727] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 107.896213][ T9727] CR2: 00000000014fe978 CR3: 000000007da21000 CR4: 00000000001406e0 [ 107.896225][ T9727] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 107.896233][ T9727] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 107.896241][ T9727] Kernel panic - not syncing: Fatal exception [ 107.897865][ T9727] Kernel Offset: disabled [ 107.946178][ T9727] Rebooting in 86400 seconds..