[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 84.755784][ T28] audit: type=1800 audit(1578967347.273:25): pid=9380 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 84.782835][ T28] audit: type=1800 audit(1578967347.273:26): pid=9380 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 84.822776][ T28] audit: type=1800 audit(1578967347.273:27): pid=9380 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.202' (ECDSA) to the list of known hosts. 2020/01/14 02:02:35 fuzzer started 2020/01/14 02:02:37 dialing manager at 10.128.0.26:43159 2020/01/14 02:02:37 syscalls: 2860 2020/01/14 02:02:37 code coverage: enabled 2020/01/14 02:02:37 comparison tracing: enabled 2020/01/14 02:02:37 extra coverage: enabled 2020/01/14 02:02:37 setuid sandbox: enabled 2020/01/14 02:02:37 namespace sandbox: enabled 2020/01/14 02:02:37 Android sandbox: /sys/fs/selinux/policy does not exist 2020/01/14 02:02:37 fault injection: enabled 2020/01/14 02:02:37 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/01/14 02:02:37 net packet injection: enabled 2020/01/14 02:02:37 net device setup: enabled 2020/01/14 02:02:37 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/01/14 02:02:37 devlink PCI setup: PCI device 0000:00:10.0 is not available 02:02:38 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) getsockopt$inet6_int(r0, 0x29, 0x18, 0x0, &(0x7f0000000140)) 02:02:38 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r0 = socket(0x25, 0x801, 0x0) recvfrom$netrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) syzkaller login: [ 96.504891][ T9547] IPVS: ftp: loaded support on port[0] = 21 02:02:39 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105882) r1 = memfd_create(&(0x7f00000009c0)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Z\x04\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86/\x9f\x8f\xc0)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000000200)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x129b) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r0, r1, 0x0, 0x20000102000007) [ 96.695539][ T9547] chnl_net:caif_netlink_parms(): no params data found [ 96.704202][ T9550] IPVS: ftp: loaded support on port[0] = 21 [ 96.741716][ T9547] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.749301][ T9547] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.757742][ T9547] device bridge_slave_0 entered promiscuous mode [ 96.769221][ T9547] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.776507][ T9547] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.784722][ T9547] device bridge_slave_1 entered promiscuous mode [ 96.813287][ T9547] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.827250][ T9547] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.856300][ T9547] team0: Port device team_slave_0 added [ 96.865960][ T9547] team0: Port device team_slave_1 added 02:02:39 executing program 3: sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x9, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000008, 0x0) getpid() sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r2, 0x0) lstat(0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) getgroups(0x2, &(0x7f0000000100)=[0xee01, 0x0]) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) getegid() getpid() sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) socket$inet_udplite(0x2, 0x2, 0x88) [ 97.036950][ T9547] device hsr_slave_0 entered promiscuous mode [ 97.113032][ T9547] device hsr_slave_1 entered promiscuous mode [ 97.177969][ T9552] IPVS: ftp: loaded support on port[0] = 21 [ 97.217306][ T9554] IPVS: ftp: loaded support on port[0] = 21 02:02:39 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x10000000000443) writev(r1, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) read(r1, &(0x7f00000003c0)=""/72, 0x100000104) sendmsg$xdp(r1, &(0x7f0000000300)={&(0x7f0000000140), 0x10, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) [ 97.276071][ T9550] chnl_net:caif_netlink_parms(): no params data found [ 97.453959][ T9547] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 97.526787][ T9550] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.544901][ T9550] bridge0: port 1(bridge_slave_0) entered disabled state 02:02:40 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0xfa848ac7810fda81) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300)=@known='user.syz\x00', 0x0, 0x0, 0x0) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@known='user.syz\x00', 0x0, 0x893fa394a7f8915) [ 97.572768][ T9550] device bridge_slave_0 entered promiscuous mode [ 97.587073][ T9550] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.603424][ T9550] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.611531][ T9550] device bridge_slave_1 entered promiscuous mode [ 97.620939][ T9547] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 97.689876][ T9557] IPVS: ftp: loaded support on port[0] = 21 [ 97.696620][ T9559] IPVS: ftp: loaded support on port[0] = 21 [ 97.729876][ T9550] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.739655][ T9547] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 97.796195][ T9547] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 97.897611][ T9550] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.929045][ T9550] team0: Port device team_slave_0 added [ 97.960709][ T9552] chnl_net:caif_netlink_parms(): no params data found [ 97.971645][ T9550] team0: Port device team_slave_1 added [ 98.019574][ T9554] chnl_net:caif_netlink_parms(): no params data found [ 98.094596][ T9550] device hsr_slave_0 entered promiscuous mode [ 98.132909][ T9550] device hsr_slave_1 entered promiscuous mode [ 98.202860][ T9550] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 98.203047][ T9550] Cannot create hsr debugfs directory [ 98.279980][ T9554] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.287712][ T9554] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.295578][ T9554] device bridge_slave_0 entered promiscuous mode [ 98.320669][ T9552] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.327956][ T9552] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.336069][ T9552] device bridge_slave_0 entered promiscuous mode [ 98.343653][ T9554] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.350708][ T9554] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.359137][ T9554] device bridge_slave_1 entered promiscuous mode [ 98.366296][ T9559] chnl_net:caif_netlink_parms(): no params data found [ 98.395729][ T9552] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.405686][ T9552] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.414528][ T9552] device bridge_slave_1 entered promiscuous mode [ 98.490227][ T9554] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.500724][ T9557] chnl_net:caif_netlink_parms(): no params data found [ 98.528868][ T9559] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.539859][ T9559] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.547780][ T9559] device bridge_slave_0 entered promiscuous mode [ 98.556498][ T9559] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.563988][ T9559] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.571569][ T9559] device bridge_slave_1 entered promiscuous mode [ 98.580620][ T9554] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.608644][ T9552] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.634955][ T9559] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.648802][ T9559] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.663525][ T9554] team0: Port device team_slave_0 added [ 98.670850][ T9552] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.698838][ T9554] team0: Port device team_slave_1 added [ 98.711472][ T9552] team0: Port device team_slave_0 added [ 98.737603][ T9550] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 98.796595][ T9552] team0: Port device team_slave_1 added [ 98.802389][ T9550] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 98.848451][ T9559] team0: Port device team_slave_0 added [ 98.916000][ T9554] device hsr_slave_0 entered promiscuous mode [ 98.952941][ T9554] device hsr_slave_1 entered promiscuous mode [ 99.002958][ T9554] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 99.010670][ T9554] Cannot create hsr debugfs directory [ 99.016419][ T9550] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 99.070784][ T9550] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 99.127189][ T9559] team0: Port device team_slave_1 added [ 99.185974][ T9547] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.255920][ T9559] device hsr_slave_0 entered promiscuous mode [ 99.293206][ T9559] device hsr_slave_1 entered promiscuous mode [ 99.352836][ T9559] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 99.360401][ T9559] Cannot create hsr debugfs directory [ 99.366628][ T9557] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.373780][ T9557] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.381414][ T9557] device bridge_slave_0 entered promiscuous mode [ 99.391199][ T9557] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.398369][ T9557] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.406877][ T9557] device bridge_slave_1 entered promiscuous mode [ 99.452211][ T9557] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.504604][ T9552] device hsr_slave_0 entered promiscuous mode [ 99.553234][ T9552] device hsr_slave_1 entered promiscuous mode [ 99.592836][ T9552] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 99.600403][ T9552] Cannot create hsr debugfs directory [ 99.621422][ T9557] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.636379][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 99.644816][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 99.689780][ T9547] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.712140][ T9557] team0: Port device team_slave_0 added [ 99.753250][ T9557] team0: Port device team_slave_1 added [ 99.761068][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 99.770453][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 99.779499][ T3228] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.786693][ T3228] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.796777][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 99.805277][ T9554] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 99.860791][ T9554] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 99.932429][ T9554] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 99.988671][ T9554] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 100.051916][ T3235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 100.060441][ T3235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 100.069620][ T3235] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.076696][ T3235] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.165661][ T9557] device hsr_slave_0 entered promiscuous mode [ 100.213122][ T9557] device hsr_slave_1 entered promiscuous mode [ 100.272839][ T9557] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 100.280406][ T9557] Cannot create hsr debugfs directory [ 100.293787][ T2694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 100.323735][ T9559] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 100.368214][ T2694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 100.381401][ T9559] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 100.478872][ T9559] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 100.514358][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 100.523195][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 100.531455][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 100.540147][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 100.557385][ T9547] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 100.568305][ T9547] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 100.588138][ T9559] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 100.642806][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 100.650597][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 100.661739][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 100.670444][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 100.679469][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 100.687838][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 100.696601][ T9552] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 100.751321][ T9552] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 100.812006][ T9550] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.837698][ T9552] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 100.874841][ T9552] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 100.976736][ T9550] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.003927][ T3235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 101.011705][ T3235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 101.019771][ T3235] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 101.027446][ T3235] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 101.064325][ T2694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 101.078681][ T2694] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 101.087124][ T2694] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.094228][ T2694] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.104134][ T9547] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.111218][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 101.144307][ T9557] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 101.185143][ T9557] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 101.239115][ T2691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 101.247724][ T2691] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 101.256309][ T2691] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.263413][ T2691] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.272278][ T2691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 101.303870][ T2691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 101.312459][ T2691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 101.327002][ T2691] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 101.335908][ T2691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 101.348077][ T2691] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 101.356558][ T9557] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 101.411594][ T9554] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.427020][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 101.437602][ T9557] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 101.482929][ T2691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 101.492314][ T2691] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 101.500891][ T2691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 101.509436][ T2691] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 101.518151][ T2691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 101.525945][ T2691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 101.541330][ T9559] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.560310][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 101.569521][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 101.596943][ T9554] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.604936][ T9550] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 101.625312][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 101.634623][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 101.649984][ T9547] device veth0_vlan entered promiscuous mode [ 101.670519][ T9559] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.681324][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 101.690519][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 101.699335][ T2689] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.706526][ T2689] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.715978][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 101.724306][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 101.732945][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 101.740789][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 101.748690][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 101.765906][ T9547] device veth1_vlan entered promiscuous mode [ 101.782528][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 101.791135][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 101.800534][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 101.808420][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 101.816112][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 101.825302][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 101.834170][ T3228] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.841224][ T3228] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.849095][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 101.858596][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 101.867335][ T3228] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.874449][ T3228] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.884802][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 101.899435][ T9552] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.922087][ T9550] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.947584][ T3235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 101.958771][ T3235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 101.969062][ T3235] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.976206][ T3235] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.013399][ T2691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 102.014176][ T2691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 102.030779][ T2691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 102.043969][ T2691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 102.052218][ T2691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 102.060258][ T2691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 102.073486][ T9552] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.107733][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 102.135012][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 102.156962][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 102.166456][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 102.183603][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 102.192423][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready 02:02:44 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) getsockopt$inet6_int(r0, 0x29, 0x18, 0x0, &(0x7f0000000140)) [ 102.209967][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 102.212051][ T9547] ------------[ cut here ]------------ [ 102.219371][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 102.223257][ T9547] kernel BUG at fs/namei.c:684! [ 102.223968][ T9547] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 102.233230][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 102.236061][ T9547] CPU: 1 PID: 9547 Comm: syz-executor.0 Not tainted 5.5.0-rc5-next-20200113-syzkaller #0 [ 102.244797][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 102.249967][ T9547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 102.262192][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 102.267528][ T9547] RIP: 0010:unlazy_walk+0x306/0x3b0 [ 102.267543][ T9547] Code: ff ff ff e8 6c 3f a1 ff e8 e7 d8 b3 ff 48 c7 c6 74 6c c1 81 48 c7 c7 00 f7 ba 89 e8 e4 97 99 ff e9 d8 fe ff ff e8 ca d8 b3 ff <0f> 0b e8 c3 d8 b3 ff 0f 0b e8 bc d8 b3 ff e8 27 86 a0 ff 31 ff 89 [ 102.267551][ T9547] RSP: 0018:ffffc900062efba0 EFLAGS: 00010293 [ 102.267562][ T9547] RAX: ffff8880a26240c0 RBX: ffffc900062efc60 RCX: ffffffff81c16a16 [ 102.267569][ T9547] RDX: 0000000000000000 RSI: ffffffff81c16ca6 RDI: 0000000000000005 [ 102.267578][ T9547] RBP: ffffc900062efbd0 R08: ffff8880a26240c0 R09: ffff8880a2624958 [ 102.267586][ T9547] R10: fffffbfff1549b88 R11: ffffffff8aa4dc47 R12: 0000000000000009 [ 102.267594][ T9547] R13: ffffc900062efc68 R14: ffff8880919399e0 R15: 0000000000000000 [ 102.267606][ T9547] FS: 0000000002681940(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 102.267615][ T9547] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 102.267623][ T9547] CR2: 000000000268a978 CR3: 000000007d706000 CR4: 00000000001406e0 [ 102.267634][ T9547] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 102.267642][ T9547] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 102.267646][ T9547] Call Trace: [ 102.267666][ T9547] path_mountpoint.isra.0+0x1d5/0x340 [ 102.267679][ T9547] ? find_held_lock+0x35/0x130 [ 102.267692][ T9547] filename_mountpoint+0x181/0x380 [ 102.267710][ T9547] ? filename_parentat.isra.0+0x400/0x400 [ 102.280927][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 102.284943][ T9547] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 102.284969][ T9547] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 102.341896][ T9552] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 102.347607][ T9547] ? strncpy_from_user+0x2b4/0x400 [ 102.347626][ T9547] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 102.347641][ T9547] ? getname_flags+0x277/0x5b0 [ 102.347656][ T9547] user_path_mountpoint_at+0x3a/0x50 [ 102.347670][ T9547] ksys_umount+0x164/0xef0 [ 102.347686][ T9547] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 102.347698][ T9547] ? __detach_mounts+0x290/0x290 [ 102.347713][ T9547] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 102.347728][ T9547] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 102.347744][ T9547] ? do_syscall_64+0x26/0x790 [ 102.347758][ T9547] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 102.347773][ T9547] ? do_syscall_64+0x26/0x790 [ 102.347787][ T9547] ? lockdep_hardirqs_on+0x421/0x5e0 [ 102.347801][ T9547] __x64_sys_umount+0x54/0x80 [ 102.347817][ T9547] do_syscall_64+0xfa/0x790 [ 102.347832][ T9547] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 102.347842][ T9547] RIP: 0033:0x45d977 [ 102.347858][ T9547] Code: 64 89 04 25 d0 02 00 00 58 5f ff d0 48 89 c7 e8 2f be ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 4d 8c fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 102.347865][ T9547] RSP: 002b:00007ffce0a81ad8 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6 [ 102.347878][ T9547] RAX: ffffffffffffffda RBX: 0000000000018f1e RCX: 000000000045d977 [ 102.347887][ T9547] RDX: 0000000000403720 RSI: 0000000000000002 RDI: 00007ffce0a81b80 [ 102.347894][ T9547] RBP: 0000000000000002 R08: 0000000000000000 R09: 000000000000000e [ 102.347901][ T9547] R10: 000000000000000a R11: 0000000000000202 R12: 00007ffce0a82c10 [ 102.347908][ T9547] R13: 0000000002682940 R14: 0000000000000000 R15: 00007ffce0a82c10 [ 102.347919][ T9547] Modules linked in: [ 102.483328][ T9547] ---[ end trace 1f2cee3c8ba23747 ]--- [ 102.487675][ T9552] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 102.489513][ T9547] RIP: 0010:unlazy_walk+0x306/0x3b0 [ 102.540320][ T9557] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.622665][ T9547] Code: ff ff ff e8 6c 3f a1 ff e8 e7 d8 b3 ff 48 c7 c6 74 6c c1 81 48 c7 c7 00 f7 ba 89 e8 e4 97 99 ff e9 d8 fe ff ff e8 ca d8 b3 ff <0f> 0b e8 c3 d8 b3 ff 0f 0b e8 bc d8 b3 ff e8 27 86 a0 ff 31 ff 89 [ 102.666438][ T9550] device veth0_vlan entered promiscuous mode [ 102.673053][ T9547] RSP: 0018:ffffc900062efba0 EFLAGS: 00010293 [ 102.678314][ T9559] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 102.679174][ T9547] RAX: ffff8880a26240c0 RBX: ffffc900062efc60 RCX: ffffffff81c16a16 [ 102.692189][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 102.700076][ T9547] RDX: 0000000000000000 RSI: ffffffff81c16ca6 RDI: 0000000000000005 [ 102.706691][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 102.713986][ T9547] RBP: ffffc900062efbd0 R08: ffff8880a26240c0 R09: ffff8880a2624958 [ 102.723133][ T3228] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.729987][ T9547] R10: fffffbfff1549b88 R11: ffffffff8aa4dc47 R12: 0000000000000009 [ 102.736774][ T3228] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.740065][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 102.745122][ T9547] R13: ffffc900062efc68 R14: ffff8880919399e0 R15: 0000000000000000 [ 102.753218][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 102.763795][ T9547] FS: 0000000002681940(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 102.768717][ T3228] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.776347][ T9547] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 102.785028][ T3228] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.792705][ T9547] CR2: 000000000268a978 CR3: 000000007d706000 CR4: 00000000001406e0 [ 102.802696][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 102.806410][ T9547] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 102.816847][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 102.821745][ T9547] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 102.830394][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 102.838381][ T9547] Kernel panic - not syncing: Fatal exception [ 102.849239][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 102.854949][ T9547] Kernel Offset: disabled [ 102.873072][ T9547] Rebooting in 86400 seconds..