[ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Started Serial Getty on ttyS0. [ OK ] Started Getty on tty1. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.10.13' (ECDSA) to the list of known hosts. 2020/06/27 16:02:10 fuzzer started 2020/06/27 16:02:11 dialing manager at 10.128.0.26:40759 2020/06/27 16:02:11 syscalls: 3120 2020/06/27 16:02:11 code coverage: enabled 2020/06/27 16:02:11 comparison tracing: enabled 2020/06/27 16:02:11 extra coverage: enabled 2020/06/27 16:02:11 setuid sandbox: enabled 2020/06/27 16:02:11 namespace sandbox: enabled 2020/06/27 16:02:11 Android sandbox: /sys/fs/selinux/policy does not exist 2020/06/27 16:02:11 fault injection: enabled 2020/06/27 16:02:11 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/06/27 16:02:11 net packet injection: enabled 2020/06/27 16:02:11 net device setup: enabled 2020/06/27 16:02:11 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/06/27 16:02:11 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/06/27 16:02:11 USB emulation: enabled 16:04:53 executing program 0: open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000200)=ANY=[@ANYBLOB="5b2e5c31fbb63cf17742036fafa0640a3a"], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0) syzkaller login: [ 216.652801][ T6816] IPVS: ftp: loaded support on port[0] = 21 16:04:53 executing program 1: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) [ 216.840874][ T6816] chnl_net:caif_netlink_parms(): no params data found [ 216.902773][ T6915] IPVS: ftp: loaded support on port[0] = 21 [ 216.940717][ T6816] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.948349][ T6816] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.957160][ T6816] device bridge_slave_0 entered promiscuous mode [ 216.976003][ T6816] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.983326][ T6816] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.993354][ T6816] device bridge_slave_1 entered promiscuous mode [ 217.023729][ T6816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.037385][ T6816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.083912][ T6816] team0: Port device team_slave_0 added [ 217.095146][ T6816] team0: Port device team_slave_1 added [ 217.121785][ T6816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.129511][ T6816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.156375][ T6816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.170454][ T6816] batman_adv: batadv0: Adding interface: batadv_slave_1 16:04:53 executing program 2: r0 = open(&(0x7f0000000080)='./file0\x00', 0x1850c5, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000180)=0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$9p(r0, 0x0, 0x0) [ 217.177467][ T6816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.228884][ T6816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active 16:04:54 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x20, 0x6d, 0x705}, 0x20}}, 0x0) [ 217.412623][ T6816] device hsr_slave_0 entered promiscuous mode [ 217.480653][ T6816] device hsr_slave_1 entered promiscuous mode [ 217.602186][ T6915] chnl_net:caif_netlink_parms(): no params data found [ 217.611059][ T7005] IPVS: ftp: loaded support on port[0] = 21 [ 217.752501][ T7096] IPVS: ftp: loaded support on port[0] = 21 16:04:54 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc0405519, &(0x7f0000001000)) [ 217.934318][ T6915] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.948878][ T6915] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.957345][ T6915] device bridge_slave_0 entered promiscuous mode [ 217.999653][ T6816] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 218.060337][ T6915] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.067536][ T6915] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.092577][ T6915] device bridge_slave_1 entered promiscuous mode [ 218.120950][ T6816] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 218.152818][ T6816] netdevsim netdevsim0 netdevsim2: renamed from eth2 16:04:54 executing program 5: open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000200)=ANY=[@ANYBLOB="5b2e5c31fbb63cf177420e6fafa0641c3a"], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0) [ 218.297527][ T6915] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.320252][ T6816] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 218.401234][ T6915] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.412254][ T7202] IPVS: ftp: loaded support on port[0] = 21 [ 218.559335][ T6915] team0: Port device team_slave_0 added [ 218.569257][ T6915] team0: Port device team_slave_1 added [ 218.584495][ T7005] chnl_net:caif_netlink_parms(): no params data found [ 218.603353][ T7253] IPVS: ftp: loaded support on port[0] = 21 [ 218.606258][ T7096] chnl_net:caif_netlink_parms(): no params data found [ 218.634152][ T6915] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.642361][ T6915] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.674163][ T6915] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.717323][ T6915] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.725711][ T6915] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.755193][ T6915] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.871539][ T6915] device hsr_slave_0 entered promiscuous mode [ 218.909385][ T6915] device hsr_slave_1 entered promiscuous mode [ 218.949939][ T6915] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 218.958615][ T6915] Cannot create hsr debugfs directory [ 219.077109][ T7005] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.085600][ T7005] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.095869][ T7005] device bridge_slave_0 entered promiscuous mode [ 219.148234][ T7096] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.156816][ T7096] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.166611][ T7096] device bridge_slave_0 entered promiscuous mode [ 219.177056][ T7005] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.185127][ T7005] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.194107][ T7005] device bridge_slave_1 entered promiscuous mode [ 219.219705][ T6816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.244765][ T7096] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.253364][ T7096] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.262594][ T7096] device bridge_slave_1 entered promiscuous mode [ 219.285632][ T7005] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 219.355485][ T7005] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 219.464300][ T7096] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 219.485545][ T7005] team0: Port device team_slave_0 added [ 219.520911][ T7253] chnl_net:caif_netlink_parms(): no params data found [ 219.555177][ T7096] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 219.567974][ T7005] team0: Port device team_slave_1 added [ 219.602966][ T6915] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 219.644258][ T6915] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 219.716597][ T7202] chnl_net:caif_netlink_parms(): no params data found [ 219.738473][ T6915] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 219.807159][ T6915] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 219.862001][ T7005] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.869911][ T7005] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.898488][ T7005] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.919147][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 219.928169][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 219.948418][ T7096] team0: Port device team_slave_0 added [ 219.971834][ T7005] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.982009][ T7005] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.011633][ T7005] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 220.025699][ T6816] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.057190][ T7096] team0: Port device team_slave_1 added [ 220.094564][ T7253] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.102462][ T7253] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.111577][ T7253] device bridge_slave_0 entered promiscuous mode [ 220.233719][ T7005] device hsr_slave_0 entered promiscuous mode [ 220.299616][ T7005] device hsr_slave_1 entered promiscuous mode [ 220.340081][ T7005] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 220.349288][ T7005] Cannot create hsr debugfs directory [ 220.355796][ T7253] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.363760][ T7253] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.373275][ T7253] device bridge_slave_1 entered promiscuous mode [ 220.381626][ T7096] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 220.391015][ T7096] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.420112][ T7096] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 220.436155][ T7096] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 220.444431][ T7096] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.474921][ T7096] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 220.487155][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 220.502572][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 220.513681][ T2513] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.521893][ T2513] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.534465][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 220.545223][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 220.558274][ T2513] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.566794][ T2513] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.575394][ T7202] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.583925][ T7202] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.594093][ T7202] device bridge_slave_0 entered promiscuous mode [ 220.608670][ T7202] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.617802][ T7202] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.627072][ T7202] device bridge_slave_1 entered promiscuous mode [ 220.683835][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 220.693645][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 220.791662][ T7096] device hsr_slave_0 entered promiscuous mode [ 220.860318][ T7096] device hsr_slave_1 entered promiscuous mode [ 220.909506][ T7096] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 220.919167][ T7096] Cannot create hsr debugfs directory [ 220.926351][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 220.943097][ T7253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 220.957838][ T7202] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 220.984899][ T7202] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 220.997428][ T7253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.024043][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 221.040026][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 221.103661][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 221.112407][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 221.123495][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 221.150332][ T7202] team0: Port device team_slave_0 added [ 221.158365][ T7253] team0: Port device team_slave_0 added [ 221.192391][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 221.201670][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 221.220251][ T7202] team0: Port device team_slave_1 added [ 221.226842][ T6816] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 221.240217][ T6816] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 221.254318][ T7253] team0: Port device team_slave_1 added [ 221.292982][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 221.305735][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 221.378079][ T7253] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 221.388451][ T7253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.417557][ T7253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 221.430533][ T7202] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 221.437593][ T7202] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.466946][ T7202] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 221.480307][ T7202] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 221.487359][ T7202] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.514647][ T7202] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 221.528075][ T7005] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 221.568042][ T7253] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 221.577116][ T7253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.605012][ T7253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 221.632954][ T7005] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 221.703288][ T7005] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 221.768432][ T7005] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 221.821312][ T7201] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 221.830016][ T7201] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 221.893655][ T7202] device hsr_slave_0 entered promiscuous mode [ 221.950359][ T7202] device hsr_slave_1 entered promiscuous mode [ 221.999028][ T7202] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 222.006611][ T7202] Cannot create hsr debugfs directory [ 222.047445][ T6915] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.124827][ T7253] device hsr_slave_0 entered promiscuous mode [ 222.169242][ T7253] device hsr_slave_1 entered promiscuous mode [ 222.219006][ T7253] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 222.226859][ T7253] Cannot create hsr debugfs directory [ 222.242388][ T6816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.290521][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 222.303787][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 222.367317][ T6915] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.374901][ T7096] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 222.411322][ T7096] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 222.496926][ T7096] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 222.521929][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 222.532549][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 222.541713][ T2513] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.548866][ T2513] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.592047][ T7096] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 222.675125][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 222.683486][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 222.695802][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 222.706793][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 222.719754][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 222.728457][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.735702][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.747456][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 222.800589][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 222.828131][ T6816] device veth0_vlan entered promiscuous mode [ 222.884481][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 222.893462][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 222.902540][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 222.913843][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 222.928465][ T6816] device veth1_vlan entered promiscuous mode [ 222.962680][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 222.971010][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 222.980675][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 222.989598][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 222.997327][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 223.006590][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 223.043061][ T7201] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 223.055598][ T7201] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 223.065015][ T7201] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 223.076900][ T7201] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 223.085808][ T7201] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 223.113499][ T6816] device veth0_macvtap entered promiscuous mode [ 223.133222][ T7005] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.147998][ T6915] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 223.172456][ T7201] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 223.186830][ T7201] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 223.199819][ T6816] device veth1_macvtap entered promiscuous mode [ 223.210346][ T7202] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 223.264103][ T7202] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 223.325909][ T7202] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 223.394313][ T7202] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 223.461531][ T7201] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 223.469838][ T7201] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 223.511462][ T7201] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 223.521744][ T7201] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 223.534697][ T7005] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.569090][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 223.576766][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 223.588171][ T6816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.609425][ T7253] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 223.642043][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 223.652482][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 223.663311][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 223.672708][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 223.681952][ T2513] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.689368][ T2513] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.716884][ T6915] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.735163][ T6816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.746853][ T7253] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 223.800593][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 223.808628][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 223.818513][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 223.827619][ T7785] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.835084][ T7785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.843636][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 223.852579][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 223.881867][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 223.891062][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 223.907577][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 223.916939][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 223.929713][ T7253] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 223.997174][ T7253] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 224.119289][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 224.142454][ T7096] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.228255][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 224.236945][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 224.249769][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 224.258488][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 224.271471][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 224.281379][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 224.345622][ T6915] device veth0_vlan entered promiscuous mode [ 224.358640][ T7005] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 224.373603][ T7005] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 224.393170][ T7201] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 224.403363][ T7201] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 224.413535][ T7201] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 224.423494][ T7201] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 224.433048][ T7201] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 224.449726][ T7201] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 224.464851][ T6915] device veth1_vlan entered promiscuous mode [ 224.490330][ T7096] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.515865][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 224.524728][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 224.534567][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 224.596970][ T7201] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 224.606081][ T7201] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 224.615387][ T7201] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.622534][ T7201] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.630960][ T7201] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 224.639807][ T7201] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 224.648143][ T7201] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.655363][ T7201] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.699534][ T2601] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 224.711688][ T2601] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 224.722131][ T2601] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 224.730540][ T2601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 224.739868][ T2601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 224.751717][ T7202] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.774330][ T7005] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.800092][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 224.808528][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 224.818320][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 224.829127][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 224.839985][ T6915] device veth0_macvtap entered promiscuous mode [ 224.850181][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 224.858276][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 224.880692][ T6915] device veth1_macvtap entered promiscuous mode [ 224.888044][ T8080] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 224.897547][ T8080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 224.909305][ T8080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 224.929411][ T7202] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.944624][ T7253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.958593][ T7096] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 224.970944][ T7096] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 224.984103][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 224.993635][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 225.003260][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 225.012659][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 225.021949][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 225.030420][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 225.051278][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 225.059595][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 225.068168][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 225.076966][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.084074][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.092154][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 225.102036][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 225.110551][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.117590][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.137640][ T7253] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.147864][ T6915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 225.160226][ T6915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.171330][ T6915] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 225.195463][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 225.203458][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 225.214888][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 225.223109][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 225.232696][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 225.248112][ T6915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 225.269808][ T6915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.282378][ T6915] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.298954][ T2601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 225.307773][ T2601] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 225.316954][ T2601] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.324081][ T2601] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.332579][ T2601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 225.341596][ T2601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 225.350394][ T2601] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 225.359043][ T2601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 225.367642][ T2601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 225.377298][ T2601] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 225.385256][ T2601] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 225.393112][ T2601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 225.403629][ T2601] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 225.419456][ T7096] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.511105][ T8080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 225.519938][ T8080] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 225.528278][ T8080] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.535392][ T8080] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.544068][ T8080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 225.553075][ T8080] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 225.561620][ T8080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 225.570445][ T8080] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 225.578701][ T8080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 225.590285][ T8080] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 225.665552][ T7202] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 225.676756][ T7202] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 225.688878][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 225.697137][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 225.706356][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 225.715177][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 225.724097][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 225.732442][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 225.741717][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 225.750173][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 225.758397][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 225.787782][ T7005] device veth0_vlan entered promiscuous mode [ 225.795974][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 225.806271][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 225.815174][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 225.824528][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 225.832877][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 225.842223][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 225.851557][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 225.860599][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 225.868736][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 225.878918][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 225.973692][ T7253] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 225.999720][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 226.008454][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 226.053372][ T7096] device veth0_vlan entered promiscuous mode [ 226.064610][ C0] hrtimer: interrupt took 54809 ns [ 226.066173][ T7005] device veth1_vlan entered promiscuous mode [ 226.097016][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 226.106617][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 226.126227][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 226.137423][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 226.173231][ T28] audit: type=1804 audit(1593273902.734:2): pid=8085 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir556445964/syzkaller.nyulys/0/bus" dev="sda1" ino=15746 res=1 [ 226.202340][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 226.268479][ T7096] device veth1_vlan entered promiscuous mode [ 226.272920][ T28] audit: type=1804 audit(1593273902.824:3): pid=8087 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir556445964/syzkaller.nyulys/0/bus" dev="sda1" ino=15746 res=1 [ 226.342749][ T7202] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.382786][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 226.392342][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 226.404638][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 226.415590][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 226.435911][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 16:05:03 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) dup(0xffffffffffffffff) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='illinois\x00', 0x9) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) [ 226.450194][ T28] audit: type=1804 audit(1593273903.014:4): pid=8083 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir556445964/syzkaller.nyulys/0/bus" dev="sda1" ino=15746 res=1 [ 226.465209][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 226.522564][ T28] audit: type=1804 audit(1593273903.034:5): pid=8083 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir556445964/syzkaller.nyulys/0/bus" dev="sda1" ino=15746 res=1 [ 226.563169][ T7253] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.579843][ T8081] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 226.588056][ T8081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 226.597892][ T8081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 226.635252][ T7096] device veth0_macvtap entered promiscuous mode [ 226.669025][ T7005] device veth0_macvtap entered promiscuous mode [ 226.696423][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 226.707867][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 226.745507][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 226.770355][ T7096] device veth1_macvtap entered promiscuous mode 16:05:03 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) dup(0xffffffffffffffff) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='illinois\x00', 0x9) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) [ 226.795508][ T7005] device veth1_macvtap entered promiscuous mode [ 226.849319][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 226.865097][ T2513] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready 16:05:03 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r1 = socket(0x10, 0x803, 0x0) write(r1, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x12, 0x0, 0x0) [ 226.963957][ T7005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 226.975323][ T7005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.993535][ T7005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 227.005791][ T7005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.023997][ T7005] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 227.035439][ T7096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 227.048208][ T7096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.059138][ T7096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 227.070505][ T7096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.081206][ T7096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 227.092819][ T7096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.105023][ T7096] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 227.115092][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 227.124891][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 227.136211][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 227.146265][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 227.158038][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 227.168724][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 227.204654][ T7096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 16:05:03 executing program 1: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0xfffffffffffffff0, 0x3, &(0x7f0000000100)={0x77359400}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) [ 227.226708][ T7096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.252648][ T7096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 227.278805][ T7096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.311075][ T7096] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 227.325097][ T7005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 227.342521][ T7005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.368274][ T7005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 227.384906][ T7005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.395538][ T7005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 227.406068][ T7005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.417297][ T7005] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 227.429954][ T8080] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 227.439266][ T8080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 227.447797][ T8080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 227.456964][ T8080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 227.466088][ T8080] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 227.474789][ T8080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 227.483813][ T8080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 227.492505][ T8080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 227.518168][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 227.526404][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 227.539888][ T7202] device veth0_vlan entered promiscuous mode [ 227.640755][ T2601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 227.649476][ T2601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 227.658608][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 227.669548][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 227.692317][ T7253] device veth0_vlan entered promiscuous mode [ 227.825184][ T7202] device veth1_vlan entered promiscuous mode 16:05:04 executing program 3: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote}, 0x20) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x6, 0x3, 0x0, &(0x7f00000004c0)) [ 227.924907][ T7253] device veth1_vlan entered promiscuous mode 16:05:04 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0x10, 0x1f}) pipe(0x0) bind$inet(0xffffffffffffffff, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) [ 228.036883][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 228.048158][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 228.071324][ T7202] device veth0_macvtap entered promiscuous mode [ 228.095600][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 228.115682][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 228.144082][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 228.167091][ T7253] device veth0_macvtap entered promiscuous mode [ 228.176374][ T7202] device veth1_macvtap entered promiscuous mode [ 228.196592][ T7253] device veth1_macvtap entered promiscuous mode [ 228.261938][ T7202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 228.261966][ T7202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.261985][ T7202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 228.263197][ T7202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.263211][ T7202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 228.263217][ T7202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.263226][ T7202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 228.263232][ T7202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.266145][ T7202] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.297615][ T7253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 228.297623][ T7253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.297635][ T7253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 228.297640][ T7253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.297651][ T7253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 228.297656][ T7253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.297665][ T7253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 228.297671][ T7253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.297682][ T7253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 228.297688][ T7253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.305637][ T7253] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.318919][ T7202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 228.539811][ T7202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.555823][ T7202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 228.566355][ T7202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.582493][ T7202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 228.595019][ T7202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.611044][ T7202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 228.625982][ T7202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.647408][ T7202] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.656438][ T7253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 228.667566][ T7253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.677466][ T7253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 228.687957][ T7253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.698488][ T7253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 228.711339][ T7253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.721271][ T7253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 228.731764][ T7253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.741654][ T7253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 228.753493][ T7253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.764645][ T7253] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.774769][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 228.784775][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 228.794147][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 228.803554][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 228.812438][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 228.821545][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 228.830488][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 228.839432][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 228.847880][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 228.857045][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 228.866294][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 229.741652][ T0] NOHZ: local_softirq_pending 08 [ 268.780435][ T0] NOHZ: local_softirq_pending 08 [ 311.662196][ T0] NOHZ: local_softirq_pending 08 [ 370.548997][ T1151] INFO: task syz-executor.0:8073 can't die for more than 143 seconds. [ 370.557311][ T1151] syz-executor.0 D27208 8073 6816 0x00004004 [ 370.565661][ T1151] Call Trace: [ 370.578943][ T1151] __schedule+0x8e1/0x1eb0 [ 370.583375][ T1151] ? io_schedule_timeout+0x140/0x140 [ 370.588713][ T1151] ? lockdep_hardirqs_on+0x6a/0xe0 [ 370.602588][ T1151] ? _raw_spin_unlock_irqrestore+0x9b/0xe0 [ 370.608399][ T1151] ? prepare_to_wait+0x121/0x2a0 [ 370.620949][ T1151] schedule+0xd0/0x2a0 [ 370.625030][ T1151] bit_wait+0x12/0xa0 [ 370.633612][ T1151] __wait_on_bit+0x60/0x190 [ 370.638129][ T1151] ? out_of_line_wait_on_bit_lock+0x110/0x110 [ 370.648890][ T1151] out_of_line_wait_on_bit+0xd5/0x110 [ 370.654294][ T1151] ? __wait_on_bit+0x190/0x190 [ 370.666825][ T1151] ? var_wake_function+0x130/0x130 [ 370.673636][ T1151] wait_for_key_construction+0x10b/0x140 [ 370.688904][ T1151] request_key_tag+0x7a/0xb0 [ 370.693587][ T1151] dns_query+0x257/0x6c3 [ 370.697837][ T1151] ceph_parse_ips+0x77f/0x8c0 [ 370.713358][ T1151] ? ceph_con_opened+0x50/0x50 [ 370.718143][ T1151] ? lookup_constant+0xf0/0xf0 [ 370.727558][ T1151] ? __fs_parse+0x269/0x810 [ 370.737858][ T1151] ceph_parse_mon_ips+0x59/0xc0 [ 370.747608][ T1151] ceph_parse_mount_param+0x1239/0x17e0 [ 370.757812][ T1151] ? lock_is_held_type+0xb0/0xe0 [ 370.767327][ T1151] ? vfs_parse_fs_string+0xc0/0x150 [ 370.777135][ T1151] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 370.790365][ T1151] ? extra_mon_dispatch+0x130/0x130 [ 370.795575][ T1151] ? vfs_parse_fs_string+0xc0/0x150 [ 370.809808][ T1151] ? extra_mon_dispatch+0x130/0x130 [ 370.815018][ T1151] vfs_parse_fs_param+0x203/0x550 [ 370.827654][ T1151] vfs_parse_fs_string+0xe6/0x150 [ 370.834424][ T1151] ? vfs_parse_fs_param+0x550/0x550 [ 370.847232][ T1151] ? alloc_fs_context+0x56e/0x880 [ 370.853960][ T1151] do_mount+0x1222/0x1df0 [ 370.858455][ T1151] ? copy_mount_string+0x40/0x40 [ 370.871434][ T1151] ? __might_fault+0x190/0x1d0 [ 370.876209][ T1151] ? _copy_from_user+0x138/0x190 [ 370.885847][ T1151] ? memdup_user+0x7c/0xd0 [ 370.894924][ T1151] __x64_sys_mount+0x18f/0x230 [ 370.904435][ T1151] do_syscall_64+0x60/0xe0 [ 370.911813][ T1151] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 370.917690][ T1151] RIP: 0033:0x45cb19 [ 370.923992][ T1151] Code: Bad RIP value. [ 370.928043][ T1151] RSP: 002b:00007fc7a350ac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 370.938545][ T1151] RAX: ffffffffffffffda RBX: 00000000004f7240 RCX: 000000000045cb19 [ 370.953739][ T1151] RDX: 0000000020000040 RSI: 00000000200000c0 RDI: 0000000020000200 [ 370.961778][ T1151] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 370.969833][ T1151] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 370.977796][ T1151] R13: 0000000000000771 R14: 00000000004ca736 R15: 00007fc7a350b6d4 [ 370.985854][ T1151] INFO: task syz-executor.0:8073 blocked for more than 143 seconds. [ 370.993888][ T1151] Not tainted 5.8.0-rc2-next-20200626-syzkaller #0 [ 371.000978][ T1151] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 371.009722][ T1151] syz-executor.0 D27208 8073 6816 0x00004004 [ 371.016070][ T1151] Call Trace: [ 371.022393][ T1151] __schedule+0x8e1/0x1eb0 [ 371.026825][ T1151] ? io_schedule_timeout+0x140/0x140 [ 371.032182][ T1151] ? lockdep_hardirqs_on+0x6a/0xe0 [ 371.037290][ T1151] ? _raw_spin_unlock_irqrestore+0x9b/0xe0 [ 371.043138][ T1151] ? prepare_to_wait+0x121/0x2a0 [ 371.048079][ T1151] schedule+0xd0/0x2a0 [ 371.052226][ T1151] bit_wait+0x12/0xa0 [ 371.056205][ T1151] __wait_on_bit+0x60/0x190 [ 371.060821][ T1151] ? out_of_line_wait_on_bit_lock+0x110/0x110 [ 371.066886][ T1151] out_of_line_wait_on_bit+0xd5/0x110 [ 371.072331][ T1151] ? __wait_on_bit+0x190/0x190 [ 371.077098][ T1151] ? var_wake_function+0x130/0x130 [ 371.082287][ T1151] wait_for_key_construction+0x10b/0x140 [ 371.087926][ T1151] request_key_tag+0x7a/0xb0 [ 371.092594][ T1151] dns_query+0x257/0x6c3 [ 371.096836][ T1151] ceph_parse_ips+0x77f/0x8c0 [ 371.101591][ T1151] ? ceph_con_opened+0x50/0x50 [ 371.106356][ T1151] ? lookup_constant+0xf0/0xf0 [ 371.111200][ T1151] ? __fs_parse+0x269/0x810 [ 371.115701][ T1151] ceph_parse_mon_ips+0x59/0xc0 [ 371.120617][ T1151] ceph_parse_mount_param+0x1239/0x17e0 [ 371.126167][ T1151] ? lock_is_held_type+0xb0/0xe0 [ 371.133510][ T1151] ? vfs_parse_fs_string+0xc0/0x150 [ 371.138893][ T1151] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 371.144435][ T1151] ? extra_mon_dispatch+0x130/0x130 [ 371.149687][ T1151] ? vfs_parse_fs_string+0xc0/0x150 [ 371.154893][ T1151] ? extra_mon_dispatch+0x130/0x130 [ 371.160331][ T1151] vfs_parse_fs_param+0x203/0x550 [ 371.165382][ T1151] vfs_parse_fs_string+0xe6/0x150 [ 371.170484][ T1151] ? vfs_parse_fs_param+0x550/0x550 [ 371.175688][ T1151] ? alloc_fs_context+0x56e/0x880 [ 371.180805][ T1151] do_mount+0x1222/0x1df0 [ 371.185154][ T1151] ? copy_mount_string+0x40/0x40 [ 371.190155][ T1151] ? __might_fault+0x190/0x1d0 [ 371.194933][ T1151] ? _copy_from_user+0x138/0x190 [ 371.199935][ T1151] ? memdup_user+0x7c/0xd0 [ 371.204363][ T1151] __x64_sys_mount+0x18f/0x230 [ 371.209200][ T1151] do_syscall_64+0x60/0xe0 [ 371.213628][ T1151] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 371.219604][ T1151] RIP: 0033:0x45cb19 [ 371.223489][ T1151] Code: Bad RIP value. [ 371.227941][ T1151] RSP: 002b:00007fc7a350ac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 371.236427][ T1151] RAX: ffffffffffffffda RBX: 00000000004f7240 RCX: 000000000045cb19 [ 371.245773][ T1151] RDX: 0000000020000040 RSI: 00000000200000c0 RDI: 0000000020000200 [ 371.253999][ T1151] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 371.262596][ T1151] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 371.271299][ T1151] R13: 0000000000000771 R14: 00000000004ca736 R15: 00007fc7a350b6d4 [ 371.279464][ T1151] INFO: task syz-executor.0:8076 can't die for more than 144 seconds. [ 371.287601][ T1151] syz-executor.0 D29304 8076 6816 0x00004006 [ 371.293976][ T1151] Call Trace: [ 371.297307][ T1151] __schedule+0x8e1/0x1eb0 [ 371.301904][ T1151] ? io_schedule_timeout+0x140/0x140 [ 371.307200][ T1151] ? lockdep_hardirqs_on+0x6a/0xe0 [ 371.312430][ T1151] ? _raw_spin_unlock_irqrestore+0x9b/0xe0 [ 371.318235][ T1151] ? prepare_to_wait+0x121/0x2a0 [ 371.323242][ T1151] schedule+0xd0/0x2a0 [ 371.327313][ T1151] bit_wait+0x12/0xa0 [ 371.331378][ T1151] __wait_on_bit+0x60/0x190 [ 371.335900][ T1151] ? out_of_line_wait_on_bit_lock+0x110/0x110 [ 371.342126][ T1151] out_of_line_wait_on_bit+0xd5/0x110 [ 371.347531][ T1151] ? __wait_on_bit+0x190/0x190 [ 371.354528][ T1151] ? var_wake_function+0x130/0x130 [ 371.359721][ T1151] wait_for_key_construction+0x10b/0x140 [ 371.365362][ T1151] request_key_tag+0x7a/0xb0 [ 371.370169][ T1151] dns_query+0x257/0x6c3 [ 371.374426][ T1151] ceph_parse_ips+0x77f/0x8c0 [ 371.379183][ T1151] ? ceph_con_opened+0x50/0x50 [ 371.383963][ T1151] ? lookup_constant+0xf0/0xf0 [ 371.389669][ T1151] ? __fs_parse+0x269/0x810 [ 371.394186][ T1151] ceph_parse_mon_ips+0x59/0xc0 [ 371.399112][ T1151] ceph_parse_mount_param+0x1239/0x17e0 [ 371.404658][ T1151] ? lock_is_held_type+0xb0/0xe0 [ 371.409660][ T1151] ? vfs_parse_fs_string+0xc0/0x150 [ 371.414853][ T1151] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 371.420634][ T1151] ? extra_mon_dispatch+0x130/0x130 [ 371.425852][ T1151] ? vfs_parse_fs_string+0xc0/0x150 [ 371.431125][ T1151] ? extra_mon_dispatch+0x130/0x130 [ 371.436320][ T1151] vfs_parse_fs_param+0x203/0x550 [ 371.441405][ T1151] vfs_parse_fs_string+0xe6/0x150 [ 371.446441][ T1151] ? vfs_parse_fs_param+0x550/0x550 [ 371.451707][ T1151] ? alloc_fs_context+0x56e/0x880 [ 371.456730][ T1151] do_mount+0x1222/0x1df0 [ 371.462876][ T1151] ? copy_mount_string+0x40/0x40 [ 371.467801][ T1151] ? __might_fault+0x190/0x1d0 [ 371.472634][ T1151] ? _copy_from_user+0x138/0x190 [ 371.477587][ T1151] ? memdup_user+0x7c/0xd0 [ 371.482079][ T1151] __x64_sys_mount+0x18f/0x230 [ 371.486847][ T1151] do_syscall_64+0x60/0xe0 [ 371.491329][ T1151] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 371.497217][ T1151] RIP: 0033:0x45cb19 [ 371.501247][ T1151] Code: Bad RIP value. [ 371.505308][ T1151] RSP: 002b:00007fc7a34e9c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 371.513777][ T1151] RAX: ffffffffffffffda RBX: 00000000004f7240 RCX: 000000000045cb19 [ 371.521819][ T1151] RDX: 0000000020000040 RSI: 00000000200000c0 RDI: 0000000020000200 [ 371.529882][ T1151] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 371.537846][ T1151] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 371.545853][ T1151] R13: 0000000000000771 R14: 00000000004ca736 R15: 00007fc7a34ea6d4 [ 371.553922][ T1151] INFO: task syz-executor.0:8076 blocked for more than 144 seconds. [ 371.561938][ T1151] Not tainted 5.8.0-rc2-next-20200626-syzkaller #0 [ 371.571445][ T1151] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 371.580464][ T1151] syz-executor.0 D29304 8076 6816 0x00004006 [ 371.586799][ T1151] Call Trace: [ 371.590151][ T1151] __schedule+0x8e1/0x1eb0 [ 371.594582][ T1151] ? io_schedule_timeout+0x140/0x140 [ 371.599916][ T1151] ? lockdep_hardirqs_on+0x6a/0xe0 [ 371.605034][ T1151] ? _raw_spin_unlock_irqrestore+0x9b/0xe0 [ 371.610912][ T1151] ? prepare_to_wait+0x121/0x2a0 [ 371.615847][ T1151] schedule+0xd0/0x2a0 [ 371.619980][ T1151] bit_wait+0x12/0xa0 [ 371.623981][ T1151] __wait_on_bit+0x60/0x190 [ 371.628464][ T1151] ? out_of_line_wait_on_bit_lock+0x110/0x110 [ 371.634572][ T1151] out_of_line_wait_on_bit+0xd5/0x110 [ 371.640008][ T1151] ? __wait_on_bit+0x190/0x190 [ 371.644769][ T1151] ? var_wake_function+0x130/0x130 [ 371.650330][ T1151] wait_for_key_construction+0x10b/0x140 [ 371.655964][ T1151] request_key_tag+0x7a/0xb0 [ 371.660598][ T1151] dns_query+0x257/0x6c3 [ 371.664847][ T1151] ceph_parse_ips+0x77f/0x8c0 [ 371.669608][ T1151] ? ceph_con_opened+0x50/0x50 [ 371.674385][ T1151] ? lookup_constant+0xf0/0xf0 [ 371.681108][ T1151] ? __fs_parse+0x269/0x810 [ 371.685604][ T1151] ceph_parse_mon_ips+0x59/0xc0 [ 371.690537][ T1151] ceph_parse_mount_param+0x1239/0x17e0 [ 371.696087][ T1151] ? lock_is_held_type+0xb0/0xe0 [ 371.701092][ T1151] ? vfs_parse_fs_string+0xc0/0x150 [ 371.706304][ T1151] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 371.711912][ T1151] ? extra_mon_dispatch+0x130/0x130 [ 371.717105][ T1151] ? vfs_parse_fs_string+0xc0/0x150 [ 371.722358][ T1151] ? extra_mon_dispatch+0x130/0x130 [ 371.727558][ T1151] vfs_parse_fs_param+0x203/0x550 [ 371.732646][ T1151] vfs_parse_fs_string+0xe6/0x150 [ 371.737666][ T1151] ? vfs_parse_fs_param+0x550/0x550 [ 371.743093][ T1151] ? alloc_fs_context+0x56e/0x880 [ 371.748125][ T1151] do_mount+0x1222/0x1df0 [ 371.752538][ T1151] ? copy_mount_string+0x40/0x40 [ 371.757470][ T1151] ? __might_fault+0x190/0x1d0 [ 371.762277][ T1151] ? _copy_from_user+0x138/0x190 [ 371.767219][ T1151] ? memdup_user+0x7c/0xd0 [ 371.771701][ T1151] __x64_sys_mount+0x18f/0x230 [ 371.776464][ T1151] do_syscall_64+0x60/0xe0 [ 371.780924][ T1151] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 371.786814][ T1151] RIP: 0033:0x45cb19 [ 371.793233][ T1151] Code: Bad RIP value. [ 371.797289][ T1151] RSP: 002b:00007fc7a34e9c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 371.805731][ T1151] RAX: ffffffffffffffda RBX: 00000000004f7240 RCX: 000000000045cb19 [ 371.813769][ T1151] RDX: 0000000020000040 RSI: 00000000200000c0 RDI: 0000000020000200 [ 371.821841][ T1151] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 371.829883][ T1151] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 371.837848][ T1151] R13: 0000000000000771 R14: 00000000004ca736 R15: 00007fc7a34ea6d4 [ 371.845900][ T1151] [ 371.845900][ T1151] Showing all locks held in the system: [ 371.853701][ T1151] 2 locks held by kworker/u4:0/7: [ 371.858828][ T1151] 1 lock held by khungtaskd/1151: [ 371.863844][ T1151] #0: ffffffff89bc3180 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 371.873739][ T1151] [ 371.876061][ T1151] ============================================= [ 371.876061][ T1151] [ 371.884520][ T1151] NMI backtrace for cpu 0 [ 371.888920][ T1151] CPU: 0 PID: 1151 Comm: khungtaskd Not tainted 5.8.0-rc2-next-20200626-syzkaller #0 [ 371.898360][ T1151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 371.908388][ T1151] Call Trace: [ 371.911671][ T1151] dump_stack+0x18f/0x20d [ 371.915992][ T1151] nmi_cpu_backtrace.cold+0x70/0xb1 [ 371.921178][ T1151] ? lapic_can_unplug_cpu.cold+0x38/0x38 [ 371.926797][ T1151] nmi_trigger_cpumask_backtrace+0x1b3/0x223 [ 371.932765][ T1151] watchdog+0xd89/0xf30 [ 371.936909][ T1151] ? trace_sched_process_hang+0x2e0/0x2e0 [ 371.942627][ T1151] kthread+0x3b5/0x4a0 [ 371.946673][ T1151] ? __kthread_bind_mask+0xc0/0xc0 [ 371.951769][ T1151] ? __kthread_bind_mask+0xc0/0xc0 [ 371.956869][ T1151] ret_from_fork+0x1f/0x30 [ 371.961387][ T1151] Sending NMI from CPU 0 to CPUs 1: [ 371.967121][ C1] NMI backtrace for cpu 1 [ 371.967128][ C1] CPU: 1 PID: 3875 Comm: systemd-journal Not tainted 5.8.0-rc2-next-20200626-syzkaller #0 [ 371.967134][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 371.967138][ C1] RIP: 0010:unwind_next_frame+0x367/0x1f90 [ 371.967149][ C1] Code: e8 7e f5 ff ff 49 89 c0 4d 85 c0 0f 84 56 02 00 00 4d 8d 48 04 48 b8 00 00 00 00 00 fc ff df 4c 89 ca 48 c1 ea 03 0f b6 04 02 <4c> 89 ca 83 e2 07 38 d0 7f 08 84 c0 0f 85 6f 08 00 00 41 0f b6 40 [ 371.967153][ C1] RSP: 0018:ffffc900015779c8 EFLAGS: 00000a02 [ 371.967162][ C1] RAX: 0000000000000000 RBX: 1ffff920002aef41 RCX: ffffffff81b34e3e [ 371.967167][ C1] RDX: 1ffffffff164518c RSI: ffffffff8b228c2e RDI: ffffffff8ac2a644 [ 371.967172][ C1] RBP: 0000000000000001 R08: ffffffff8b228c5e R09: ffffffff8b228c62 [ 371.967177][ C1] R10: 000000000007201e R11: 00000000000293d1 R12: ffffc90001577ae8 [ 371.967182][ C1] R13: ffffc90001577ad5 R14: ffffc90001577af0 R15: ffffc90001577aa0 [ 371.967188][ C1] FS: 00007f607095a8c0(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 371.967192][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 371.967198][ C1] CR2: 00007f606dd34000 CR3: 00000000932e8000 CR4: 00000000001506e0 [ 371.967203][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 371.967208][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 371.967211][ C1] Call Trace: [ 371.967215][ C1] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 371.967218][ C1] ? deref_stack_reg+0x150/0x150 [ 371.967222][ C1] ? __unwind_start+0x4dd/0x7c0 [ 371.967226][ C1] ? profile_setup.cold+0xc1/0xc1 [ 371.967229][ C1] arch_stack_walk+0x81/0xf0 [ 371.967234][ C1] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 371.967237][ C1] stack_trace_save+0x8c/0xc0 [ 371.967241][ C1] ? stack_trace_consume_entry+0x160/0x160 [ 371.967245][ C1] ? mark_lock+0xbc/0x1710 [ 371.967249][ C1] ? __lock_acquire+0x16e3/0x56e0 [ 371.967252][ C1] save_stack+0x1b/0x40 [ 371.967255][ C1] ? save_stack+0x1b/0x40 [ 371.967259][ C1] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 371.967264][ C1] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 371.967268][ C1] ? debug_object_active_state+0x10b/0x350 [ 371.967271][ C1] ? find_held_lock+0x2d/0x110 [ 371.967276][ C1] ? debug_object_active_state+0x260/0x350 [ 371.967279][ C1] ? lock_acquire+0x1f1/0xad0 [ 371.967283][ C1] ? fs_reclaim_acquire+0xa1/0x110 [ 371.967287][ C1] ? find_held_lock+0x2d/0x110 [ 371.967290][ C1] ? fs_reclaim_release+0x94/0xf0 [ 371.967294][ C1] ? lock_downgrade+0x820/0x820 [ 371.967298][ C1] ? seccomp_notify_ioctl+0xd90/0xd90 [ 371.967302][ C1] ? kasan_unpoison_shadow+0x33/0x40 [ 371.967306][ C1] __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 371.967310][ C1] kmem_cache_alloc+0x148/0x550 [ 371.967313][ C1] prepare_creds+0x39/0x6c0 [ 371.967317][ C1] do_faccessat+0x3d7/0x820 [ 371.967321][ C1] ? __ia32_sys_fallocate+0x140/0x140 [ 371.967324][ C1] ? syscall_trace_enter+0x14a/0x340 [ 371.967328][ C1] do_syscall_64+0x60/0xe0 [ 371.967332][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 371.967336][ C1] RIP: 0033:0x7f606fc169c7 [ 371.967339][ C1] Code: Bad RIP value. [ 371.967343][ C1] RSP: 002b:00007ffe04dea938 EFLAGS: 00000246 ORIG_RAX: 0000000000000015 [ 371.967352][ C1] RAX: ffffffffffffffda RBX: 00007ffe04ded960 RCX: 00007f606fc169c7 [ 371.967357][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055796053e9a3 [ 371.967362][ C1] RBP: 00007ffe04deaa80 R08: 00005579605343e5 R09: 0000000000000018 [ 371.967368][ C1] R10: 0000000000000069 R11: 0000000000000246 R12: 0000000000000000 [ 371.967373][ C1] R13: 0000000000000000 R14: 000055796156f8a0 R15: 00007ffe04deaf70 [ 371.968768][ T1151] Kernel panic - not syncing: hung_task: blocked tasks [ 372.331583][ T1151] CPU: 0 PID: 1151 Comm: khungtaskd Not tainted 5.8.0-rc2-next-20200626-syzkaller #0 [ 372.341021][ T1151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 372.351055][ T1151] Call Trace: [ 372.354335][ T1151] dump_stack+0x18f/0x20d [ 372.358659][ T1151] panic+0x2e3/0x75c [ 372.362581][ T1151] ? __warn_printk+0xf3/0xf3 [ 372.367160][ T1151] ? lapic_can_unplug_cpu.cold+0x38/0x38 [ 372.372778][ T1151] ? preempt_schedule_thunk+0x16/0x18 [ 372.378137][ T1151] ? watchdog.cold+0x22d/0x24b [ 372.382877][ T1151] ? watchdog+0xc59/0xf30 [ 372.387181][ T1151] watchdog.cold+0x23e/0x24b [ 372.391763][ T1151] ? trace_sched_process_hang+0x2e0/0x2e0 [ 372.397468][ T1151] kthread+0x3b5/0x4a0 [ 372.401512][ T1151] ? __kthread_bind_mask+0xc0/0xc0 [ 372.406596][ T1151] ? __kthread_bind_mask+0xc0/0xc0 [ 372.411693][ T1151] ret_from_fork+0x1f/0x30 [ 372.417313][ T1151] Kernel Offset: disabled [ 372.421649][ T1151] Rebooting in 86400 seconds..