[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 77.175677][ T27] audit: type=1800 audit(1578982731.440:25): pid=9479 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 77.196528][ T27] audit: type=1800 audit(1578982731.440:26): pid=9479 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 77.226164][ T27] audit: type=1800 audit(1578982731.440:27): pid=9479 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.30' (ECDSA) to the list of known hosts. 2020/01/14 06:19:00 fuzzer started 2020/01/14 06:19:02 dialing manager at 10.128.0.26:34807 2020/01/14 06:19:02 syscalls: 2860 2020/01/14 06:19:02 code coverage: enabled 2020/01/14 06:19:02 comparison tracing: enabled 2020/01/14 06:19:02 extra coverage: enabled 2020/01/14 06:19:02 setuid sandbox: enabled 2020/01/14 06:19:02 namespace sandbox: enabled 2020/01/14 06:19:02 Android sandbox: /sys/fs/selinux/policy does not exist 2020/01/14 06:19:02 fault injection: enabled 2020/01/14 06:19:02 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/01/14 06:19:02 net packet injection: enabled 2020/01/14 06:19:02 net device setup: enabled 2020/01/14 06:19:02 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/01/14 06:19:02 devlink PCI setup: PCI device 0000:00:10.0 is not available 06:19:03 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBENT(r0, 0x4bfb, &(0x7f0000000080)) 06:19:03 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, 0x0) fchmod(r2, 0x0) syzkaller login: [ 89.248028][ T9650] IPVS: ftp: loaded support on port[0] = 21 [ 89.416317][ T9650] chnl_net:caif_netlink_parms(): no params data found [ 89.474222][ T9650] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.482065][ T9650] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.491457][ T9650] device bridge_slave_0 entered promiscuous mode [ 89.501833][ T9650] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.510101][ T9650] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.518396][ T9650] device bridge_slave_1 entered promiscuous mode 06:19:03 executing program 2: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000040)={0x3}, 0x8, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000f00f88)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) msgsnd(r0, &(0x7f0000000000)=ANY=[], 0x0, 0x0) msgrcv(r0, &(0x7f0000000300)={0x0, ""/210}, 0xda, 0x0, 0x0) [ 89.546077][ T9650] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.559112][ T9650] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.560838][ T9654] IPVS: ftp: loaded support on port[0] = 21 [ 89.599002][ T9650] team0: Port device team_slave_0 added [ 89.625983][ T9650] team0: Port device team_slave_1 added [ 89.739741][ T9650] device hsr_slave_0 entered promiscuous mode 06:19:04 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x8, &(0x7f0000000100)=0x0) close(r0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) [ 89.805008][ T9650] device hsr_slave_1 entered promiscuous mode [ 89.890783][ T9656] IPVS: ftp: loaded support on port[0] = 21 [ 90.099061][ T9654] chnl_net:caif_netlink_parms(): no params data found 06:19:04 executing program 4: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r0, 0x104, 0x5, &(0x7f0000000180), 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='auxv\x00') fcntl$setstatus(r1, 0x4, 0x64600) socket$alg(0x26, 0x5, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0xcb, 0xfa00, {0x2, &(0x7f00000000c0), 0x2, 0x6}}, 0x20) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x80, 0x2, 0x0, 0x1001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x80002, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r3 = getpid() r4 = getpid() r5 = getpid() rt_tgsigqueueinfo(r5, r4, 0x16, &(0x7f0000000100)) prctl$PR_GET_SECUREBITS(0x1b) ptrace(0x10, r4) ptrace$pokeuser(0x6, r4, 0x388, 0xb8) ptrace$pokeuser(0x6, r3, 0x388, 0xfffffffffffffffe) bind$netlink(r2, &(0x7f00000004c0)={0x10, 0x0, 0x25dfdbff, 0x100000000}, 0xc) ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f0000000180)=0x2) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000180)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x2}, 0xd8) socket$alg(0x26, 0x5, 0x0) [ 90.180222][ T9659] IPVS: ftp: loaded support on port[0] = 21 [ 90.276496][ T9650] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.360421][ T9650] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.415754][ T9654] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.422976][ T9654] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.434861][ T9654] device bridge_slave_0 entered promiscuous mode 06:19:04 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') socket$inet_tcp(0x2, 0x1, 0x0) getpid() dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00') [ 90.473229][ T9650] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.481632][ T9662] IPVS: ftp: loaded support on port[0] = 21 [ 90.559447][ T9650] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.659036][ T9654] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.666313][ T9654] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.676018][ T9654] device bridge_slave_1 entered promiscuous mode [ 90.702432][ T9654] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.712879][ T9656] chnl_net:caif_netlink_parms(): no params data found [ 90.739583][ T9654] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.788999][ T9664] IPVS: ftp: loaded support on port[0] = 21 [ 90.817137][ T9654] team0: Port device team_slave_0 added [ 90.827832][ T9654] team0: Port device team_slave_1 added [ 90.889441][ T9656] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.899026][ T9656] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.907589][ T9656] device bridge_slave_0 entered promiscuous mode [ 90.916830][ T9656] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.924119][ T9656] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.932179][ T9656] device bridge_slave_1 entered promiscuous mode [ 90.996849][ T9654] device hsr_slave_0 entered promiscuous mode [ 91.053964][ T9654] device hsr_slave_1 entered promiscuous mode [ 91.093703][ T9654] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.102164][ T9654] Cannot create hsr debugfs directory [ 91.152803][ T9659] chnl_net:caif_netlink_parms(): no params data found [ 91.191741][ T9656] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.216255][ T9656] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.258785][ T9656] team0: Port device team_slave_0 added [ 91.312211][ T9656] team0: Port device team_slave_1 added [ 91.346264][ T9659] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.356732][ T9659] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.364963][ T9659] device bridge_slave_0 entered promiscuous mode [ 91.382637][ T9650] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.401713][ T9662] chnl_net:caif_netlink_parms(): no params data found [ 91.429719][ T9659] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.436980][ T9659] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.445473][ T9659] device bridge_slave_1 entered promiscuous mode [ 91.496706][ T9656] device hsr_slave_0 entered promiscuous mode [ 91.533998][ T9656] device hsr_slave_1 entered promiscuous mode [ 91.574032][ T9656] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.581997][ T9656] Cannot create hsr debugfs directory [ 91.618236][ T9664] chnl_net:caif_netlink_parms(): no params data found [ 91.647534][ T2888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 91.660832][ T2888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 91.702557][ T9659] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.720109][ T9659] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.742997][ T9654] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.817589][ T9654] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.884343][ T9650] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.901822][ T9659] team0: Port device team_slave_0 added [ 91.914082][ T9659] team0: Port device team_slave_1 added [ 91.925943][ T9654] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.995684][ T9654] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.045887][ T9664] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.052988][ T9664] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.060961][ T9664] device bridge_slave_0 entered promiscuous mode [ 92.081268][ T9662] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.088927][ T9662] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.098070][ T9662] device bridge_slave_0 entered promiscuous mode [ 92.117111][ T9664] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.125186][ T9664] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.133310][ T9664] device bridge_slave_1 entered promiscuous mode [ 92.157022][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 92.166128][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 92.175611][ T2909] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.183501][ T2909] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.191673][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 92.200899][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 92.209580][ T2909] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.216660][ T2909] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.224422][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 92.232552][ T9662] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.239936][ T9662] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.249387][ T9662] device bridge_slave_1 entered promiscuous mode [ 92.336749][ T9659] device hsr_slave_0 entered promiscuous mode [ 92.373923][ T9659] device hsr_slave_1 entered promiscuous mode [ 92.414168][ T9659] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.421899][ T9659] Cannot create hsr debugfs directory [ 92.438400][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 92.476863][ T2888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 92.488780][ T2888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 92.498265][ T2888] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 92.509943][ T2888] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 92.520563][ T9664] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.550783][ T9662] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.565029][ T9662] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.587576][ T9664] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.616849][ T9662] team0: Port device team_slave_0 added [ 92.632644][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 92.641492][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 92.688973][ T9662] team0: Port device team_slave_1 added [ 92.711632][ T2791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 92.724930][ T2791] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 92.737247][ T9664] team0: Port device team_slave_0 added [ 92.761221][ T9654] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.785654][ T2791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 92.797930][ T2791] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 92.809836][ T9664] team0: Port device team_slave_1 added [ 92.886324][ T9662] device hsr_slave_0 entered promiscuous mode [ 92.944024][ T9662] device hsr_slave_1 entered promiscuous mode [ 93.003683][ T9662] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.011294][ T9662] Cannot create hsr debugfs directory [ 93.025451][ T9650] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 93.040917][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 93.052886][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 93.072823][ T9656] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 93.127462][ T9656] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 93.203083][ T9656] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 93.272261][ T9656] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 93.342134][ T9654] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.395730][ T9664] device hsr_slave_0 entered promiscuous mode [ 93.444898][ T9664] device hsr_slave_1 entered promiscuous mode [ 93.483638][ T9664] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.491251][ T9664] Cannot create hsr debugfs directory [ 93.504012][ T2888] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 93.511574][ T2888] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 93.543712][ T9659] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 93.586359][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 93.595699][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 93.604963][ T2748] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.612110][ T2748] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.634955][ T9659] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 93.675863][ T9659] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.730328][ T9659] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 93.789993][ T2888] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 93.798400][ T2888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 93.807602][ T2888] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 93.816945][ T2888] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.824357][ T2888] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.838827][ T9650] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.867739][ T2746] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 93.923723][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 93.932608][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 93.941854][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 93.950645][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 94.003609][ T2888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 94.012264][ T2888] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 94.021216][ T2888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 94.030561][ T2888] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 94.070664][ T9654] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.083892][ T9654] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 94.095733][ T2791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 94.108320][ T2791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 94.117210][ T2791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 94.126010][ T2791] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 94.169879][ T9664] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 94.207368][ T9664] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 94.271298][ T9664] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 94.336198][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 94.344831][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 94.353981][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 94.361773][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 94.370277][ T9662] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 94.429945][ T9650] device veth0_vlan entered promiscuous mode [ 94.439162][ T9664] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 94.492739][ T9662] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 94.536529][ T9662] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 94.627297][ T9659] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.640547][ T9650] device veth1_vlan entered promiscuous mode [ 94.654835][ T2888] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 94.664106][ T2888] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 94.672192][ T2888] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 94.680233][ T9662] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 94.740150][ T9654] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.803222][ T9656] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.813173][ T2791] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 94.824285][ T2791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 94.832183][ T2791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 94.843081][ T9659] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.880126][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 94.898691][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 94.910514][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 94.921150][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 94.947908][ T9656] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.975187][ T2791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 94.988581][ T2791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 94.999092][ T2791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 95.013135][ T2791] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 95.023300][ T2791] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.030446][ T2791] bridge0: port 1(bridge_slave_0) entered forwarding state 06:19:09 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBENT(r0, 0x4bfb, &(0x7f0000000080)) [ 95.048030][ T9654] device veth0_vlan entered promiscuous mode [ 95.085725][ T2791] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 95.095454][ T9650] ------------[ cut here ]------------ [ 95.101115][ T9650] kernel BUG at fs/namei.c:684! [ 95.102846][ T2791] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 95.106474][ T9650] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 95.115039][ T2791] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 95.119436][ T9650] CPU: 1 PID: 9650 Comm: syz-executor.0 Not tainted 5.5.0-rc5-next-20200113-syzkaller #0 [ 95.127445][ T2791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 95.136604][ T9650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 95.136625][ T9650] RIP: 0010:unlazy_walk+0x306/0x3b0 [ 95.136639][ T9650] Code: ff ff ff e8 6c 3f a1 ff e8 e7 d8 b3 ff 48 c7 c6 74 6c c1 81 48 c7 c7 00 f7 ba 89 e8 e4 97 99 ff e9 d8 fe ff ff e8 ca d8 b3 ff <0f> 0b e8 c3 d8 b3 ff 0f 0b e8 bc d8 b3 ff e8 27 86 a0 ff 31 ff 89 [ 95.136658][ T9650] RSP: 0018:ffffc9000216fba0 EFLAGS: 00010293 [ 95.145335][ T2791] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 95.154861][ T9650] RAX: ffff8880a21940c0 RBX: ffffc9000216fc60 RCX: ffffffff81c16a16 [ 95.154868][ T9650] RDX: 0000000000000000 RSI: ffffffff81c16ca6 RDI: 0000000000000005 [ 95.154876][ T9650] RBP: ffffc9000216fbd0 R08: ffff8880a21940c0 R09: ffff8880a2194958 [ 95.154883][ T9650] R10: fffffbfff1549b88 R11: ffffffff8aa4dc47 R12: 0000000000000009 [ 95.154897][ T9650] R13: ffffc9000216fc68 R14: ffff8880921819e0 R15: 0000000000000000 [ 95.160465][ T2791] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.180096][ T9650] FS: 0000000001080940(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 95.180104][ T9650] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 95.180111][ T9650] CR2: 00007ffe883ceffc CR3: 000000007d476000 CR4: 00000000001406e0 [ 95.180127][ T9650] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 95.186728][ T2791] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.194728][ T9650] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 95.194733][ T9650] Call Trace: [ 95.194759][ T9650] path_mountpoint.isra.0+0x1d5/0x340 [ 95.203082][ T2791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 95.210670][ T9650] filename_mountpoint+0x181/0x380 [ 95.210683][ T9650] ? filename_parentat.isra.0+0x400/0x400 [ 95.210705][ T9650] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 95.219221][ T2791] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 95.226620][ T9650] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 95.226642][ T9650] ? strncpy_from_user+0x2b4/0x400 [ 95.234970][ T2791] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.241604][ T9650] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 95.250562][ T2791] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.257436][ T9650] ? getname_flags+0x277/0x5b0 [ 95.257455][ T9650] user_path_mountpoint_at+0x3a/0x50 [ 95.266180][ T2791] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 95.273376][ T9650] ksys_umount+0x164/0xef0 [ 95.383503][ T9650] ? up_read+0x1cd/0x810 [ 95.387749][ T9650] ? __detach_mounts+0x290/0x290 [ 95.392665][ T9650] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 95.398113][ T9650] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 95.403551][ T9650] ? do_syscall_64+0x26/0x790 [ 95.408205][ T9650] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 95.414267][ T9650] ? do_syscall_64+0x26/0x790 [ 95.418922][ T9650] ? lockdep_hardirqs_on+0x421/0x5e0 [ 95.424183][ T9650] __x64_sys_umount+0x54/0x80 [ 95.428864][ T9650] do_syscall_64+0xfa/0x790 [ 95.433343][ T9650] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 95.439299][ T9650] RIP: 0033:0x45d977 [ 95.443171][ T9650] Code: 64 89 04 25 d0 02 00 00 58 5f ff d0 48 89 c7 e8 2f be ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 4d 8c fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 95.462766][ T9650] RSP: 002b:00007ffe883cf708 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6 [ 95.471157][ T9650] RAX: ffffffffffffffda RBX: 0000000000017341 RCX: 000000000045d977 [ 95.479114][ T9650] RDX: 0000000000403720 RSI: 0000000000000002 RDI: 00007ffe883cf7b0 [ 95.487062][ T9650] RBP: 0000000000000002 R08: 0000000000000000 R09: 000000000000000e [ 95.495025][ T9650] R10: 000000000000000a R11: 0000000000000202 R12: 00007ffe883d0840 [ 95.504102][ T9650] R13: 0000000001081940 R14: 0000000000000000 R15: 00007ffe883d0840 [ 95.512065][ T9650] Modules linked in: [ 95.521916][ T9650] ---[ end trace b001dc44677ee21e ]--- [ 95.527815][ T9650] RIP: 0010:unlazy_walk+0x306/0x3b0 [ 95.533032][ T9650] Code: ff ff ff e8 6c 3f a1 ff e8 e7 d8 b3 ff 48 c7 c6 74 6c c1 81 48 c7 c7 00 f7 ba 89 e8 e4 97 99 ff e9 d8 fe ff ff e8 ca d8 b3 ff <0f> 0b e8 c3 d8 b3 ff 0f 0b e8 bc d8 b3 ff e8 27 86 a0 ff 31 ff 89 [ 95.552841][ T9650] RSP: 0018:ffffc9000216fba0 EFLAGS: 00010293 [ 95.561176][ T9650] RAX: ffff8880a21940c0 RBX: ffffc9000216fc60 RCX: ffffffff81c16a16 [ 95.562711][ T9654] device veth1_vlan entered promiscuous mode [ 95.569560][ T9650] RDX: 0000000000000000 RSI: ffffffff81c16ca6 RDI: 0000000000000005 [ 95.580081][ T2791] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 95.584027][ T9650] RBP: ffffc9000216fbd0 R08: ffff8880a21940c0 R09: ffff8880a2194958 [ 95.592374][ T2791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 95.599570][ T9650] R10: fffffbfff1549b88 R11: ffffffff8aa4dc47 R12: 0000000000000009 [ 95.611131][ T2791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 95.623340][ T9650] R13: ffffc9000216fc68 R14: ffff8880921819e0 R15: 0000000000000000 [ 95.624589][ T2791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 95.632725][ T9650] FS: 0000000001080940(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 95.643151][ T2791] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 95.648997][ T9650] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 95.659127][ T2791] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.663169][ T9650] CR2: 00007ffe883ceffc CR3: 000000007d476000 CR4: 00000000001406e0 [ 95.670129][ T2791] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.679881][ T9650] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 95.695867][ T9650] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 95.704237][ T9650] Kernel panic - not syncing: Fatal exception [ 95.712356][ T9662] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.720613][ T9650] Kernel Offset: disabled [ 95.724991][ T9650] Rebooting in 86400 seconds..