[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 80.719378][ T27] audit: type=1800 audit(1578980805.249:25): pid=9364 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 80.739068][ T27] audit: type=1800 audit(1578980805.249:26): pid=9364 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 80.785803][ T27] audit: type=1800 audit(1578980805.249:27): pid=9364 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.187' (ECDSA) to the list of known hosts. 2020/01/14 05:46:55 fuzzer started 2020/01/14 05:46:57 dialing manager at 10.128.0.26:34807 2020/01/14 05:46:57 syscalls: 2860 2020/01/14 05:46:57 code coverage: enabled 2020/01/14 05:46:57 comparison tracing: enabled 2020/01/14 05:46:57 extra coverage: enabled 2020/01/14 05:46:57 setuid sandbox: enabled 2020/01/14 05:46:57 namespace sandbox: enabled 2020/01/14 05:46:57 Android sandbox: /sys/fs/selinux/policy does not exist 2020/01/14 05:46:57 fault injection: enabled 2020/01/14 05:46:57 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/01/14 05:46:57 net packet injection: enabled 2020/01/14 05:46:57 net device setup: enabled 2020/01/14 05:46:57 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/01/14 05:46:57 devlink PCI setup: PCI device 0000:00:10.0 is not available 05:46:58 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@gettfilter={0x4c, 0x2e, 0xb544a90c0329fc4b, 0x0, 0x0, {}, [{0x7}, {0x8}, {0x8}, {0x8}, {0x8}]}, 0x4c}}, 0x0) 05:46:58 executing program 1: r0 = getpgrp(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f00000000c0)={0x800007fb}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0xb, &(0x7f0000000000)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) rt_sigtimedwait(&(0x7f0000000240)={0xfffffffffffffffa}, &(0x7f0000a77ff0), 0x0, 0x8) syzkaller login: [ 94.182766][ T9531] IPVS: ftp: loaded support on port[0] = 21 05:46:58 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) sendmmsg$inet_sctp(r0, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x42b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_DOWNDELAY={0x8, 0x9}]}}}]}, 0x3c}}, 0x0) [ 94.382130][ T9531] chnl_net:caif_netlink_parms(): no params data found [ 94.463162][ T9531] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.470858][ T9531] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.486284][ T9531] device bridge_slave_0 entered promiscuous mode [ 94.512758][ T9531] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.532908][ T9531] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.545625][ T9534] IPVS: ftp: loaded support on port[0] = 21 [ 94.552371][ T9531] device bridge_slave_1 entered promiscuous mode [ 94.606729][ T9536] IPVS: ftp: loaded support on port[0] = 21 [ 94.615735][ T9531] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.645395][ T9531] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.701510][ T9531] team0: Port device team_slave_0 added [ 94.722394][ T9531] team0: Port device team_slave_1 added 05:46:59 executing program 3: socket$rds(0x15, 0x5, 0x0) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x80044d76, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) semget(0x3, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) connect$l2tp(0xffffffffffffffff, 0x0, 0x0) r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, &(0x7f00005fafd2), 0x2e) socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) [ 94.866839][ T9531] device hsr_slave_0 entered promiscuous mode [ 94.931372][ T9531] device hsr_slave_1 entered promiscuous mode 05:46:59 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r0, 0x400443c9, 0x0) [ 95.002392][ T9534] chnl_net:caif_netlink_parms(): no params data found [ 95.036500][ T9539] IPVS: ftp: loaded support on port[0] = 21 [ 95.155761][ T9536] chnl_net:caif_netlink_parms(): no params data found [ 95.262702][ T9542] IPVS: ftp: loaded support on port[0] = 21 [ 95.279910][ T9534] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.288146][ T9534] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.299871][ T9534] device bridge_slave_0 entered promiscuous mode 05:46:59 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {0xa}, [@TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) [ 95.354966][ T9534] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.363029][ T9534] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.374446][ T9534] device bridge_slave_1 entered promiscuous mode [ 95.420579][ T9539] chnl_net:caif_netlink_parms(): no params data found [ 95.506504][ T9536] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.515315][ T9536] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.527961][ T9536] device bridge_slave_0 entered promiscuous mode [ 95.564198][ T9534] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.574475][ T9536] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.581971][ T9536] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.589634][ T9536] device bridge_slave_1 entered promiscuous mode [ 95.627144][ T9534] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.638045][ T9536] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.651039][ T9539] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.658096][ T9539] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.667780][ T9539] device bridge_slave_0 entered promiscuous mode [ 95.669257][ T9545] IPVS: ftp: loaded support on port[0] = 21 [ 95.676350][ T9539] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.687882][ T9539] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.696380][ T9539] device bridge_slave_1 entered promiscuous mode [ 95.707077][ T9531] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.763397][ T9536] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.783997][ T9531] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.868143][ T9534] team0: Port device team_slave_0 added [ 95.876036][ T9539] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.891882][ T9531] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.955998][ T9531] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.020236][ T9534] team0: Port device team_slave_1 added [ 96.027877][ T9539] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.072059][ T9536] team0: Port device team_slave_0 added [ 96.085552][ T9539] team0: Port device team_slave_0 added [ 96.094604][ T9539] team0: Port device team_slave_1 added [ 96.113197][ T9536] team0: Port device team_slave_1 added [ 96.193940][ T9539] device hsr_slave_0 entered promiscuous mode [ 96.231668][ T9539] device hsr_slave_1 entered promiscuous mode [ 96.271065][ T9539] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.278961][ T9539] Cannot create hsr debugfs directory [ 96.342817][ T9534] device hsr_slave_0 entered promiscuous mode [ 96.381169][ T9534] device hsr_slave_1 entered promiscuous mode [ 96.440855][ T9534] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.448566][ T9534] Cannot create hsr debugfs directory [ 96.455039][ T9542] chnl_net:caif_netlink_parms(): no params data found [ 96.544066][ T9536] device hsr_slave_0 entered promiscuous mode [ 96.591191][ T9536] device hsr_slave_1 entered promiscuous mode [ 96.630899][ T9536] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.638483][ T9536] Cannot create hsr debugfs directory [ 96.763373][ T9542] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.770465][ T9542] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.778431][ T9542] device bridge_slave_0 entered promiscuous mode [ 96.788893][ T9542] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.796111][ T9542] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.804203][ T9542] device bridge_slave_1 entered promiscuous mode [ 96.865779][ T9539] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 96.936170][ T9539] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 96.987619][ T9545] chnl_net:caif_netlink_parms(): no params data found [ 97.008302][ T9542] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.020511][ T9539] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 97.076761][ T9542] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.094159][ T9539] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 97.198824][ T9542] team0: Port device team_slave_0 added [ 97.228441][ T9536] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 97.254366][ T9542] team0: Port device team_slave_1 added [ 97.260150][ T9536] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 97.322217][ T9545] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.329299][ T9545] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.337803][ T9545] device bridge_slave_0 entered promiscuous mode [ 97.348605][ T9545] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.355717][ T9545] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.368057][ T9545] device bridge_slave_1 entered promiscuous mode [ 97.389976][ T9536] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 97.453465][ T9534] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 97.515054][ T9534] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 97.582167][ T9536] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 97.652258][ T9534] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 97.699038][ T9534] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 97.765990][ T9545] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.780387][ T9545] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.817971][ T9531] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.833294][ T9545] team0: Port device team_slave_0 added [ 97.893257][ T9542] device hsr_slave_0 entered promiscuous mode [ 97.961220][ T9542] device hsr_slave_1 entered promiscuous mode [ 98.000831][ T9542] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 98.008415][ T9542] Cannot create hsr debugfs directory [ 98.040419][ T9531] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.049429][ T9545] team0: Port device team_slave_1 added [ 98.134923][ T9545] device hsr_slave_0 entered promiscuous mode [ 98.181046][ T9545] device hsr_slave_1 entered promiscuous mode [ 98.240811][ T9545] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 98.248733][ T9545] Cannot create hsr debugfs directory [ 98.259022][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 98.267518][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 98.291337][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 98.300360][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 98.313796][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.320988][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.366716][ T2990] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 98.418480][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 98.430067][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 98.439353][ T2724] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.446539][ T2724] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.462043][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 98.518933][ T2791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 98.544911][ T9542] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 98.590032][ T2990] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 98.598990][ T2990] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 98.608282][ T2990] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 98.617071][ T2990] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 98.629292][ T9542] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 98.697592][ T9539] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.714877][ T2990] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 98.722963][ T9545] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 98.763114][ T9542] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 98.805098][ T9542] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 98.875549][ T9545] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 98.933163][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 98.941597][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 98.949812][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 98.958301][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 98.983889][ T9531] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 98.998002][ T9545] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 99.034811][ T9539] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.047713][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 99.056045][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 99.073975][ T9536] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.092195][ T9545] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 99.153487][ T9534] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.162879][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 99.170320][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 99.180226][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 99.191634][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 99.199937][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.207025][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.239523][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 99.247693][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 99.255631][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 99.263302][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 99.272942][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 99.281719][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.288758][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.298839][ T9536] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.311962][ T2791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 99.319647][ T2791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 99.345182][ T9531] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.364711][ T9534] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.372505][ T2791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 99.383477][ T2791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 99.392365][ T2791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 99.401173][ T2791] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 99.411437][ T2791] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 99.439551][ T9539] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 99.450226][ T9539] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 99.475134][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 99.484323][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 99.493726][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 99.502189][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 99.511082][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 99.519339][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 99.527671][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 99.536842][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 99.545690][ T2748] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.553777][ T2748] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.562025][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 99.570585][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 99.579091][ T2748] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.586165][ T2748] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.594580][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 99.602418][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 99.661589][ T2750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 99.671861][ T2750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 99.680471][ T2750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 99.689720][ T2750] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 99.698339][ T2750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 99.707922][ T2750] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 99.716605][ T2750] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 99.724697][ T2750] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 99.732858][ T2750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 99.742193][ T2750] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 99.750641][ T2750] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.757740][ T2750] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.765695][ T2750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 99.774525][ T2750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 99.783186][ T2750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 99.792037][ T2750] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 99.800336][ T2750] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.807484][ T2750] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.815353][ T2750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 99.853108][ T2750] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 99.863766][ T2750] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 99.874650][ T2750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 99.883872][ T2750] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 99.892117][ T2750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 99.900408][ T2750] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 99.931516][ T9539] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.940635][ T9536] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 99.977336][ T2750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 99.989547][ T2750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 99.998328][ T2750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 100.007610][ T2750] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 100.015685][ T2750] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 100.023593][ T2750] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 100.031793][ T2750] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 100.044854][ T9542] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.057728][ T9531] device veth0_vlan entered promiscuous mode [ 100.070049][ T9545] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.078719][ T2750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 100.088000][ T2750] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 100.096675][ T2750] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 100.127365][ T9536] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.139501][ T2791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 100.148809][ T2791] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 100.157883][ T2791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 100.165700][ T2791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 100.173928][ T2791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 100.181706][ T2791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 100.194090][ T9531] device veth1_vlan entered promiscuous mode [ 100.205589][ T9545] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.216417][ T9542] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.241515][ T2791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 100.251320][ T2791] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 100.279012][ T9534] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 100.297901][ T9534] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 100.338626][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 100.348856][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 100.358039][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 100.368140][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 100.376964][ T2724] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.384074][ T2724] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.393050][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 100.401596][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 100.409757][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 100.418696][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 100.427127][ T2724] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.434221][ T2724] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.442830][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 100.451678][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 100.460192][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 100.469513][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 100.477934][ T2724] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.485340][ T2724] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.493578][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 100.503285][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 100.513340][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 100.521786][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 100.565076][ T2750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 100.587038][ T9549] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 100.596740][ T2750] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 100.606915][ T2750] bridge0: port 2(bridge_slave_1) entered blocking state 05:47:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@gettfilter={0x4c, 0x2e, 0xb544a90c0329fc4b, 0x0, 0x0, {}, [{0x7}, {0x8}, {0x8}, {0x8}, {0x8}]}, 0x4c}}, 0x0) [ 100.614042][ T2750] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.623185][ T2750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 100.632526][ T2750] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 100.641533][ T2750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 100.650293][ T2750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 100.653203][ T9531] ------------[ cut here ]------------ [ 100.659299][ T2750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 100.663392][ T9531] kernel BUG at fs/namei.c:684! [ 100.669637][ T9531] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 100.672201][ T2750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 100.675948][ T9531] CPU: 1 PID: 9531 Comm: syz-executor.0 Not tainted 5.5.0-rc5-next-20200113-syzkaller #0 [ 100.683159][ T2750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 100.689620][ T9531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 100.717399][ T9531] RIP: 0010:unlazy_walk+0x306/0x3b0 [ 100.722619][ T9531] Code: ff ff ff e8 6c 3f a1 ff e8 e7 d8 b3 ff 48 c7 c6 74 6c c1 81 48 c7 c7 00 f7 ba 89 e8 e4 97 99 ff e9 d8 fe ff ff e8 ca d8 b3 ff <0f> 0b e8 c3 d8 b3 ff 0f 0b e8 bc d8 b3 ff e8 27 86 a0 ff 31 ff 89 [ 100.733747][ T9539] device veth0_vlan entered promiscuous mode [ 100.742247][ T9531] RSP: 0018:ffffc90002127ba0 EFLAGS: 00010293 [ 100.742258][ T9531] RAX: ffff88807d580340 RBX: ffffc90002127c60 RCX: ffffffff81c16a16 [ 100.742265][ T9531] RDX: 0000000000000000 RSI: ffffffff81c16ca6 RDI: 0000000000000005 [ 100.742271][ T9531] RBP: ffffc90002127bd0 R08: ffff88807d580340 R09: ffff88807d580bd8 [ 100.742277][ T9531] R10: fffffbfff1549b88 R11: ffffffff8aa4dc47 R12: 0000000000000009 [ 100.742284][ T9531] R13: ffffc90002127c68 R14: ffff88809294be40 R15: 0000000000000000 [ 100.742293][ T9531] FS: 0000000002416940(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 100.742309][ T9531] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 100.755932][ T9539] device veth1_vlan entered promiscuous mode [ 100.762400][ T9531] CR2: 000000000241f978 CR3: 000000007d588000 CR4: 00000000001406e0 [ 100.762411][ T9531] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 100.762418][ T9531] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 100.762423][ T9531] Call Trace: [ 100.762449][ T9531] path_mountpoint.isra.0+0x1d5/0x340 [ 100.786026][ T9536] device veth0_vlan entered promiscuous mode [ 100.786330][ T9531] filename_mountpoint+0x181/0x380 [ 100.800314][ T9536] device veth1_vlan entered promiscuous mode [ 100.804171][ T9531] ? filename_parentat.isra.0+0x400/0x400 [ 100.804187][ T9531] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 100.804220][ T9531] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 100.884232][ T9531] ? strncpy_from_user+0x2b4/0x400 [ 100.889329][ T9531] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 100.895609][ T9531] ? getname_flags+0x277/0x5b0 [ 100.900367][ T9531] user_path_mountpoint_at+0x3a/0x50 [ 100.905758][ T9531] ksys_umount+0x164/0xef0 [ 100.910168][ T9531] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 100.916404][ T9531] ? __detach_mounts+0x290/0x290 [ 100.921350][ T9531] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 100.926807][ T9531] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 100.932257][ T9531] ? do_syscall_64+0x26/0x790 [ 100.936927][ T9531] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 100.943037][ T9531] ? do_syscall_64+0x26/0x790 [ 100.947712][ T9531] ? lockdep_hardirqs_on+0x421/0x5e0 [ 100.953079][ T9531] __x64_sys_umount+0x54/0x80 [ 100.957739][ T9531] do_syscall_64+0xfa/0x790 [ 100.962235][ T9531] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 100.968158][ T9531] RIP: 0033:0x45d977 [ 100.972043][ T9531] Code: 64 89 04 25 d0 02 00 00 58 5f ff d0 48 89 c7 e8 2f be ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 4d 8c fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 100.991634][ T9531] RSP: 002b:00007ffd8fd41bf8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 101.000066][ T9531] RAX: ffffffffffffffda RBX: 00000000000188f3 RCX: 000000000045d977 [ 101.008032][ T9531] RDX: 0000000000403720 RSI: 0000000000000002 RDI: 00007ffd8fd41ca0 [ 101.016043][ T9531] RBP: 0000000000000002 R08: 0000000000000000 R09: 000000000000000e [ 101.024009][ T9531] R10: 000000000000000a R11: 0000000000000206 R12: 00007ffd8fd42d30 [ 101.031970][ T9531] R13: 0000000002417940 R14: 0000000000000000 R15: 00007ffd8fd42d30 [ 101.039986][ T9531] Modules linked in: [ 101.047353][ T9531] ---[ end trace 939e6cb9ec3aaa8b ]--- [ 101.053395][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 101.061429][ T9531] RIP: 0010:unlazy_walk+0x306/0x3b0 [ 101.066646][ T9531] Code: ff ff ff e8 6c 3f a1 ff e8 e7 d8 b3 ff 48 c7 c6 74 6c c1 81 48 c7 c7 00 f7 ba 89 e8 e4 97 99 ff e9 d8 fe ff ff e8 ca d8 b3 ff <0f> 0b e8 c3 d8 b3 ff 0f 0b e8 bc d8 b3 ff e8 27 86 a0 ff 31 ff 89 [ 101.088466][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 101.096254][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 101.104263][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 101.111777][ T9531] RSP: 0018:ffffc90002127ba0 EFLAGS: 00010293 [ 101.118746][ T9531] RAX: ffff88807d580340 RBX: ffffc90002127c60 RCX: ffffffff81c16a16 [ 101.119260][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 101.129837][ T9531] RDX: 0000000000000000 RSI: ffffffff81c16ca6 RDI: 0000000000000005 [ 101.134777][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 101.145312][ T9531] RBP: ffffc90002127bd0 R08: ffff88807d580340 R09: ffff88807d580bd8 [ 101.149990][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 101.159134][ T9531] R10: fffffbfff1549b88 R11: ffffffff8aa4dc47 R12: 0000000000000009 [ 101.166701][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 101.176321][ T9531] R13: ffffc90002127c68 R14: ffff88809294be40 R15: 0000000000000000 [ 101.182784][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 101.189812][ T9531] FS: 0000000002416940(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 101.197992][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 101.208578][ T9531] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 101.215401][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 101.223343][ T9531] CR2: 000000000241f978 CR3: 000000007d588000 CR4: 00000000001406e0 [ 101.229625][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 101.238132][ T9531] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 101.246977][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 101.256787][ T9531] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 101.263104][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 101.272088][ T9531] Kernel panic - not syncing: Fatal exception [ 101.280116][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 101.285693][ T9531] Kernel Offset: disabled [ 101.297705][ T9531] Rebooting in 86400 seconds..