[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 76.782573][ T28] audit: type=1800 audit(1578967780.912:25): pid=9489 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 76.802812][ T28] audit: type=1800 audit(1578967780.922:26): pid=9489 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 76.823774][ T28] audit: type=1800 audit(1578967780.922:27): pid=9489 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.214' (ECDSA) to the list of known hosts. 2020/01/14 02:09:51 fuzzer started 2020/01/14 02:09:53 dialing manager at 10.128.0.26:43159 2020/01/14 02:09:53 syscalls: 2860 2020/01/14 02:09:53 code coverage: enabled 2020/01/14 02:09:53 comparison tracing: enabled 2020/01/14 02:09:53 extra coverage: enabled 2020/01/14 02:09:53 setuid sandbox: enabled 2020/01/14 02:09:53 namespace sandbox: enabled 2020/01/14 02:09:53 Android sandbox: /sys/fs/selinux/policy does not exist 2020/01/14 02:09:53 fault injection: enabled 2020/01/14 02:09:53 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/01/14 02:09:53 net packet injection: enabled 2020/01/14 02:09:53 net device setup: enabled 2020/01/14 02:09:53 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/01/14 02:09:53 devlink PCI setup: PCI device 0000:00:10.0 is not available 02:09:54 executing program 0: r0 = socket$inet6(0xa, 0x400000000005, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) pipe(0x0) r2 = getpid() sched_setscheduler(r2, 0x0, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff000, 0x0, @perf_config_ext={0x0, 0x40000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000300)=0x100000001) ftruncate(r3, 0x200004) sendfile(r0, r3, 0x0, 0x80001d00c0d0) 02:09:54 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000080)) syzkaller login: [ 90.355447][ T9658] IPVS: ftp: loaded support on port[0] = 21 [ 90.472028][ T9658] chnl_net:caif_netlink_parms(): no params data found [ 90.520365][ T9658] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.528123][ T9658] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.537732][ T9658] device bridge_slave_0 entered promiscuous mode [ 90.549127][ T9658] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.557510][ T9658] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.566256][ T9658] device bridge_slave_1 entered promiscuous mode [ 90.587416][ T9661] IPVS: ftp: loaded support on port[0] = 21 [ 90.591429][ T9658] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.608425][ T9658] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 02:09:54 executing program 2: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x2, 0x0) socket$kcm(0x2b, 0x1, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) r2 = open(0x0, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f00000006c0)=ANY=[@ANYBLOB="66520ad1eac6091cee3fadf8f5251f8cade8bd2749b1e443ef6eec082aecd284df72c71607f6c346f5f8dc9b6981b1e0833cfb22dc2ab0ae24c54993b97c87f6694a4c802462d3fb8077e91ed57786ad45c57e7716ce42fc2ef43d93d218daab9b1ca4d3eb44ca0fc12a57ebd5375b4f0acd3dd60d2c23f6015f706870a9ca298c7b3e99ebffde3daf286b5ec24183db7986420e773541411ff933f1c2b1f56cb5bb1bfc131e74e6cfa09efa975d93f64c5d8b5f2e00455d045aa72c7f1380"], 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(r1, 0xffffffffffffffff) dup2(r0, r1) shmctl$IPC_INFO(0x0, 0x3, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x10000, 0x20000000209, 0x0, 0xffffffffffffffff}) dup2(r3, r4) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000000)={0x9cf0000008, 0x9, 0x0, 0xffffffffffffffff, 0x8}) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r6 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x40400, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000080)={0x10000, 0x20000000209, 0x0, 0xffffffffffffffff}) r8 = dup2(r6, r7) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f0000000080)={0x20024e, 0x20000000209, 0x0, 0xffffffffffffffff}) r10 = dup2(r5, r9) ioctl$ION_IOC_ALLOC(r10, 0xc0184900, &(0x7f0000000000)={0x9cf0000008, 0x9, 0x0, 0xffffffffffffffff, 0x8}) socket(0x10, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/dlm_plock\x00', 0x800, 0x0) socket$inet6(0xa, 0x3, 0x6) [ 90.645524][ T9658] team0: Port device team_slave_0 added [ 90.670149][ T9658] team0: Port device team_slave_1 added [ 90.768927][ T9658] device hsr_slave_0 entered promiscuous mode [ 90.835677][ T9658] device hsr_slave_1 entered promiscuous mode 02:09:55 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) socket$inet(0x2, 0x803, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @rand_addr, 0x17045e083f1af11d}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10004, 0x0) [ 90.913561][ T9663] IPVS: ftp: loaded support on port[0] = 21 [ 91.049553][ T9661] chnl_net:caif_netlink_parms(): no params data found 02:09:55 executing program 4: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timerfd_create(0x2, 0x0) [ 91.188957][ T9666] IPVS: ftp: loaded support on port[0] = 21 [ 91.298955][ T9661] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.317622][ T9661] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.326374][ T9661] device bridge_slave_0 entered promiscuous mode [ 91.334193][ T9658] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.408877][ T9661] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.425435][ T9661] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.445839][ T9661] device bridge_slave_1 entered promiscuous mode 02:09:55 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x401, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 91.466088][ T9658] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.538209][ T9658] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.605470][ T9663] chnl_net:caif_netlink_parms(): no params data found [ 91.638158][ T9658] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.704248][ T9661] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.731112][ T9669] IPVS: ftp: loaded support on port[0] = 21 [ 91.736516][ T9671] IPVS: ftp: loaded support on port[0] = 21 [ 91.744260][ T9661] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.759901][ T9663] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.767706][ T9663] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.775597][ T9663] device bridge_slave_0 entered promiscuous mode [ 91.806633][ T9663] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.813736][ T9663] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.822606][ T9663] device bridge_slave_1 entered promiscuous mode [ 91.850872][ T9661] team0: Port device team_slave_0 added [ 91.867662][ T9663] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.879392][ T9663] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.893308][ T9661] team0: Port device team_slave_1 added [ 91.921157][ T9663] team0: Port device team_slave_0 added [ 91.929561][ T9663] team0: Port device team_slave_1 added [ 92.017213][ T9661] device hsr_slave_0 entered promiscuous mode [ 92.065721][ T9661] device hsr_slave_1 entered promiscuous mode [ 92.127170][ T9661] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.135033][ T9661] Cannot create hsr debugfs directory [ 92.207154][ T9663] device hsr_slave_0 entered promiscuous mode [ 92.256195][ T9663] device hsr_slave_1 entered promiscuous mode [ 92.305351][ T9663] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.312936][ T9663] Cannot create hsr debugfs directory [ 92.374347][ T9666] chnl_net:caif_netlink_parms(): no params data found [ 92.484770][ T9666] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.493503][ T9666] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.502161][ T9666] device bridge_slave_0 entered promiscuous mode [ 92.511879][ T9666] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.519065][ T9666] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.526912][ T9666] device bridge_slave_1 entered promiscuous mode [ 92.547792][ T9666] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.559403][ T9666] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.610039][ T9666] team0: Port device team_slave_0 added [ 92.650326][ T9666] team0: Port device team_slave_1 added [ 92.698980][ T9658] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.706846][ T9669] chnl_net:caif_netlink_parms(): no params data found [ 92.768178][ T9666] device hsr_slave_0 entered promiscuous mode [ 92.815759][ T9666] device hsr_slave_1 entered promiscuous mode [ 92.855659][ T9666] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.863384][ T9666] Cannot create hsr debugfs directory [ 92.876272][ T9671] chnl_net:caif_netlink_parms(): no params data found [ 92.915155][ T9661] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.951018][ T9661] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 93.010617][ T9661] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 93.067383][ T9663] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 93.132024][ T9663] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 93.192511][ T9663] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 93.257976][ T9661] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 93.336647][ T9663] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 93.392980][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 93.401308][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 93.430588][ T9671] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.439486][ T9671] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.448727][ T9671] device bridge_slave_0 entered promiscuous mode [ 93.459187][ T9671] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.466817][ T9671] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.474799][ T9671] device bridge_slave_1 entered promiscuous mode [ 93.490277][ T9658] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.497642][ T9669] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.504749][ T9669] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.513575][ T9669] device bridge_slave_0 entered promiscuous mode [ 93.536187][ T9669] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.543664][ T9669] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.552591][ T9669] device bridge_slave_1 entered promiscuous mode [ 93.584149][ T9669] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.607641][ T9671] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.624688][ T9671] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.636345][ T9669] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.660967][ T9669] team0: Port device team_slave_0 added [ 93.669840][ T9669] team0: Port device team_slave_1 added [ 93.696486][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 93.705119][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 93.713794][ T19] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.721051][ T19] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.739391][ T9671] team0: Port device team_slave_0 added [ 93.767924][ T2699] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 93.777649][ T2699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 93.787032][ T2699] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 93.796137][ T2699] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.803221][ T2699] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.811769][ T2699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 93.820523][ T2699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 93.831609][ T9671] team0: Port device team_slave_1 added [ 93.889167][ T9669] device hsr_slave_0 entered promiscuous mode [ 93.935673][ T9669] device hsr_slave_1 entered promiscuous mode [ 93.975368][ T9669] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.983140][ T9669] Cannot create hsr debugfs directory [ 93.990056][ T9666] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 94.050790][ T9666] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 94.110899][ T9666] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 94.227406][ T9671] device hsr_slave_0 entered promiscuous mode [ 94.265849][ T9671] device hsr_slave_1 entered promiscuous mode [ 94.325857][ T9671] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.333907][ T9671] Cannot create hsr debugfs directory [ 94.350786][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 94.360024][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 94.371763][ T9666] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 94.454577][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 94.466070][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 94.474977][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 94.492771][ T9658] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 94.503494][ T9658] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.547685][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 94.556693][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 94.566085][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 94.574426][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 94.583373][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 94.668653][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 94.677168][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 94.714017][ T9658] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.733157][ T9663] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.784423][ T9669] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 94.845531][ T2699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 94.853828][ T2699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 94.879524][ T9669] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 94.938694][ T9669] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 95.004448][ T9661] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.015060][ T9671] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 95.071516][ T9663] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.086629][ T9669] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 95.131347][ T9671] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 95.192225][ T9671] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 95.258289][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 95.267359][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 95.276072][ T19] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.283129][ T19] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.291299][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 95.300110][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 95.312950][ T9671] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 95.379706][ T9666] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.401276][ T9661] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.411929][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 95.420577][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 95.429510][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 95.438073][ T2763] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.445179][ T2763] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.453623][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 95.461844][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 95.469961][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 95.507620][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 95.518278][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 95.527264][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 95.536179][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 95.544675][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 95.553535][ T2763] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.560683][ T2763] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.569276][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 95.578398][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 95.587199][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 95.604613][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 95.613130][ T2763] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.620211][ T2763] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.628594][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 95.637308][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 95.646015][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 95.654204][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 95.683990][ T9658] device veth0_vlan entered promiscuous mode [ 95.712178][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 95.722299][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 95.731056][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 95.741704][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 95.750426][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 95.759650][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 95.767667][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 95.776826][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 95.791639][ T9658] device veth1_vlan entered promiscuous mode [ 95.814182][ T9666] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.825091][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 95.836930][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 95.846006][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 95.854722][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 95.863734][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 95.881790][ T9663] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 95.920752][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 95.931615][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 95.941398][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 95.951015][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 95.960569][ T19] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.967705][ T19] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.975893][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 95.984574][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 95.993294][ T19] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.000734][ T19] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.009190][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 96.017673][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 96.036541][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 96.059810][ T9661] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 96.072911][ T9661] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 96.100760][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 96.110524][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 96.139017][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 96.174372][ T9669] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.229061][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 96.244726][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 96.257675][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 96.267011][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 96.274522][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 96.302068][ T9663] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.333114][ T9669] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.335157][ C1] hrtimer: interrupt took 47283 ns [ 96.352889][ T9661] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.361498][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 96.371079][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 96.388130][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 96.401970][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 96.413000][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 96.425005][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 96.440803][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 96.450238][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 96.464618][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 96.474929][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 96.488267][ T28] kauditd_printk_skb: 3 callbacks suppressed 02:10:00 executing program 0: r0 = socket$inet6(0xa, 0x400000000005, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) pipe(0x0) r2 = getpid() sched_setscheduler(r2, 0x0, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff000, 0x0, @perf_config_ext={0x0, 0x40000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000300)=0x100000001) ftruncate(r3, 0x200004) sendfile(r0, r3, 0x0, 0x80001d00c0d0) [ 96.488281][ T28] audit: type=1800 audit(1578967800.622:31): pid=9678 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=16520 res=0 [ 96.507298][ T9658] ------------[ cut here ]------------ [ 96.519072][ T9658] kernel BUG at fs/namei.c:684! [ 96.527118][ T9658] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 96.529000][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 96.533246][ T9658] CPU: 1 PID: 9658 Comm: syz-executor.0 Not tainted 5.5.0-rc5-next-20200113-syzkaller #0 [ 96.551424][ T9658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 96.556253][ T9671] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.561507][ T9658] RIP: 0010:unlazy_walk+0x306/0x3b0 [ 96.573641][ T9658] Code: ff ff ff e8 6c 3f a1 ff e8 e7 d8 b3 ff 48 c7 c6 74 6c c1 81 48 c7 c7 00 f7 ba 89 e8 e4 97 99 ff e9 d8 fe ff ff e8 ca d8 b3 ff <0f> 0b e8 c3 d8 b3 ff 0f 0b e8 bc d8 b3 ff e8 27 86 a0 ff 31 ff 89 [ 96.585887][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 96.593300][ T9658] RSP: 0018:ffffc9000665fba0 EFLAGS: 00010293 [ 96.606598][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 96.607447][ T9658] RAX: ffff88807c97e040 RBX: ffffc9000665fc60 RCX: ffffffff81c16a16 [ 96.618611][ T18] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.623395][ T9658] RDX: 0000000000000000 RSI: ffffffff81c16ca6 RDI: 0000000000000005 [ 96.630480][ T18] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.638362][ T9658] RBP: ffffc9000665fbd0 R08: ffff88807c97e040 R09: ffff88807c97e8d8 [ 96.638370][ T9658] R10: fffffbfff1549b88 R11: ffffffff8aa4dc47 R12: 0000000000000009 [ 96.638377][ T9658] R13: ffffc9000665fc68 R14: ffff8880928929e0 R15: 0000000000000000 [ 96.638393][ T9658] FS: 0000000001cc9940(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 96.648720][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 96.653533][ T9658] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 96.662197][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 96.669492][ T9658] CR2: 0000000001cd2978 CR3: 000000007c963000 CR4: 00000000001406e0 [ 96.669504][ T9658] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 96.669510][ T9658] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 96.669515][ T9658] Call Trace: [ 96.669539][ T9658] path_mountpoint.isra.0+0x1d5/0x340 [ 96.669551][ T9658] ? find_held_lock+0x35/0x130 [ 96.669564][ T9658] filename_mountpoint+0x181/0x380 [ 96.669577][ T9658] ? filename_parentat.isra.0+0x400/0x400 [ 96.669594][ T9658] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 96.669614][ T9658] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 96.669633][ T9658] ? strncpy_from_user+0x2b4/0x400 [ 96.669647][ T9658] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 96.669658][ T9658] ? getname_flags+0x277/0x5b0 [ 96.669671][ T9658] user_path_mountpoint_at+0x3a/0x50 [ 96.669683][ T9658] ksys_umount+0x164/0xef0 [ 96.669700][ T9658] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 96.669715][ T9658] ? __detach_mounts+0x290/0x290 [ 96.669729][ T9658] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 96.669744][ T9658] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 96.669761][ T9658] ? do_syscall_64+0x26/0x790 [ 96.669775][ T9658] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 96.669796][ T9658] ? do_syscall_64+0x26/0x790 [ 96.669809][ T9658] ? lockdep_hardirqs_on+0x421/0x5e0 [ 96.669821][ T9658] __x64_sys_umount+0x54/0x80 [ 96.669837][ T9658] do_syscall_64+0xfa/0x790 [ 96.669851][ T9658] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 96.669861][ T9658] RIP: 0033:0x45d977 [ 96.669874][ T9658] Code: 64 89 04 25 d0 02 00 00 58 5f ff d0 48 89 c7 e8 2f be ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 4d 8c fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 96.669887][ T9658] RSP: 002b:00007ffe2972d0e8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 96.683988][ T18] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.686872][ T9658] RAX: ffffffffffffffda RBX: 0000000000017882 RCX: 000000000045d977 [ 96.686879][ T9658] RDX: 0000000000403720 RSI: 0000000000000002 RDI: 00007ffe2972d190 [ 96.686886][ T9658] RBP: 0000000000000002 R08: 0000000000000000 R09: 000000000000000e [ 96.686892][ T9658] R10: 000000000000000a R11: 0000000000000206 R12: 00007ffe2972e220 [ 96.686899][ T9658] R13: 0000000001cca940 R14: 0000000000000000 R15: 00007ffe2972e220 [ 96.686911][ T9658] Modules linked in: [ 96.693531][ T18] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.845267][ T9658] ---[ end trace 1652764d3e065157 ]--- [ 96.853871][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 96.895286][ T9658] RIP: 0010:unlazy_walk+0x306/0x3b0 [ 96.895310][ T9658] Code: ff ff ff e8 6c 3f a1 ff e8 e7 d8 b3 ff 48 c7 c6 74 6c c1 81 48 c7 c7 00 f7 ba 89 e8 e4 97 99 ff e9 d8 fe ff ff e8 ca d8 b3 ff <0f> 0b e8 c3 d8 b3 ff 0f 0b e8 bc d8 b3 ff e8 27 86 a0 ff 31 ff 89 [ 96.978344][ T9658] RSP: 0018:ffffc9000665fba0 EFLAGS: 00010293 [ 96.984452][ T9658] RAX: ffff88807c97e040 RBX: ffffc9000665fc60 RCX: ffffffff81c16a16 [ 96.994345][ T9666] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 97.020031][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 97.029425][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 97.039675][ T9658] RDX: 0000000000000000 RSI: ffffffff81c16ca6 RDI: 0000000000000005 [ 97.048802][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 97.055343][ T9658] RBP: ffffc9000665fbd0 R08: ffff88807c97e040 R09: ffff88807c97e8d8 [ 97.058902][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 97.066223][ T9658] R10: fffffbfff1549b88 R11: ffffffff8aa4dc47 R12: 0000000000000009 [ 97.084076][ T9658] R13: ffffc9000665fc68 R14: ffff8880928929e0 R15: 0000000000000000 [ 97.110392][ T9658] FS: 0000000001cc9940(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 97.110855][ T9671] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.121512][ T9658] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 97.128000][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 97.134128][ T9658] CR2: ffffffffff600400 CR3: 000000007c963000 CR4: 00000000001406e0 [ 97.142902][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 97.159951][ T9658] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 97.160091][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 97.170181][ T9658] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 97.177323][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 97.185317][ T9658] Kernel panic - not syncing: Fatal exception [ 97.193229][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 97.199918][ T9658] Kernel Offset: disabled [ 97.211454][ T9658] Rebooting in 86400 seconds..