[ 36.833072][ T27] audit: type=1800 audit(1557271688.774:27): pid=7550 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [ 36.854720][ T27] audit: type=1800 audit(1557271688.774:28): pid=7550 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 37.941313][ T27] audit: type=1800 audit(1557271689.944:29): pid=7550 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 37.966929][ T27] audit: type=1800 audit(1557271689.954:30): pid=7550 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.34' (ECDSA) to the list of known hosts. 2019/05/07 23:28:20 fuzzer started 2019/05/07 23:28:23 dialing manager at 10.128.0.26:41005 2019/05/07 23:28:24 syscalls: 2440 2019/05/07 23:28:24 code coverage: enabled 2019/05/07 23:28:24 comparison tracing: enabled 2019/05/07 23:28:24 extra coverage: extra coverage is not supported by the kernel 2019/05/07 23:28:24 setuid sandbox: enabled 2019/05/07 23:28:24 namespace sandbox: enabled 2019/05/07 23:28:24 Android sandbox: /sys/fs/selinux/policy does not exist 2019/05/07 23:28:24 fault injection: enabled 2019/05/07 23:28:24 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/05/07 23:28:24 net packet injection: enabled 2019/05/07 23:28:24 net device setup: enabled 23:32:16 executing program 0: setuid(0xee01) shmget(0x0, 0x3000, 0x27d, &(0x7f0000ffc000/0x3000)=nil) syzkaller login: [ 284.128329][ T7715] IPVS: ftp: loaded support on port[0] = 21 23:32:16 executing program 1: mknod(&(0x7f0000000100)='./bus\x00', 0x2080008005, 0x28ad) open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) [ 284.239240][ T7715] chnl_net:caif_netlink_parms(): no params data found [ 284.327119][ T7715] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.334764][ T7715] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.354853][ T7715] device bridge_slave_0 entered promiscuous mode [ 284.375333][ T7715] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.382922][ T7715] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.400729][ T7715] device bridge_slave_1 entered promiscuous mode [ 284.426149][ T7715] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 284.436872][ T7715] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 284.461801][ T7715] team0: Port device team_slave_0 added [ 284.463754][ T7719] IPVS: ftp: loaded support on port[0] = 21 23:32:16 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)="230000001a0081aee4050c00000f00fe0a8bc36f16000002000000bfd77ea14af3a311", 0x23}], 0x1}, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40043, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x6, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x1}, 0xfffffffffffffff3) sendmsg(r1, &(0x7f0000001740)={&(0x7f00000002c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x0, 0x0, 0x2, 0x0, {0xa, 0x4e22, 0xffffffffffffff33, @mcast2}}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000440)="7dceef6b39d3e7fe6f9288ec3df19eab95430d6f67a563db2e4a5c78f9a1077e67e24983723e58313ffd8821a12fb04a68e31a586f4c83509eb7d4aec5d3d9f77d1f5a39329af95b1c00a9d32fd54ac5004970de60d88e6d747c01e8d20fed2b2d4209e33f2f53c7d33e93dfb5a47a4108278dea7936f3483c3c1b2453492baf6e319938a63827df7bb7d27821c2b0e006221a2b63e4bd589c1bc6ef39a798f88971e1a34d6d9e961fb958a16cff371827bff0b64ab6e30e0e8bbe8c4e1b56ff0fd3dcc038805e22a84c9b2d0574c115e58db77db739708ee3f7dc20f4339dd9903e13e52e08f8c694b725a895ef45b44592f5469264d16cf83bfdc99c6b4b545d5dcd8bff76ff3737da4c80cad7a43c35a987f2316cecd9e159243492150e16a86b182001076c693f23afcb6b71348d738c30abecf2308af2b93ddc9c4cca6949d80eb3d8c37b06bba2c1400582604afbf6572275537df273e1dc46b9d02ff1368f427e1d1abbd53f93e78f6e3abccdb92368873406f2141b4aba62576bf89a7502c0922b030d7bbcaf579aec9d5fae415c5753847ff02421739806a55eea9153b1e9a9842b3baf861a6f02c4cabc10865dd5290f3027fa248343f98fb7ffc836bcdebbc703731b21b973cb00349efec9f9d8de212c41dfaf2bfc9bc8a9c9557227a612617198377e10b493117ff61e37a6a426f01613088c26717b2ecf198af92dce524f5bc188bb74fb31118524edc345ba71252803751c3c91d9c4d2e73be23de931ff7b817c5f594cf958efe5f3841078770ca81963afee790ea4b77f8d9bac08e2f65dfb66629b3536264174a363b39fe23a454630c1681d3c9d489fdd18ea6291f65d52ec85fbce1a37587cc53543ffa92381f6e91f9b0ce03176b824b002a7dbc68c383212a36c5b9108b6607d8f5b30dfaf53ac33915e1c6ec595ddcd9b9589ed7dda0c24cb46c8dcf024eadac48f4a811299b02c88034212b2f5ea529040145862f7fb39b762f89e0af907efc4a658f2bb4bb0583cdec7142be40d3063327f17490cbc9782a41e5e7989cf778c520af61ec9355245ffed3ba977808f194af2948fac32c2e4c7de7b65e8404ae9e41809336ad01479004a4d678534c1a005f3f2844babc1b869964d86e8ccc999baa16b700964733c79402cf5c9753197f6a680056eae1bd5960efdea6bc41f91f29b46c7caf4a16065d2a27195d100303e9e593a7c7d0a0ee9e8144185d586a0dd93fde3373345a92f602f466e24304d6401b190ea360dce67775165032cb0e0ae93cef7172aeb4f8008a85b72ff398c4233f45ab50f4ff4d1649fce1090d324be0bdd6a704ded011100990ce25a7a1d43ad643de7d8441317727dce7faf0dbb18741a4b761345f31aba6497a56e0ab056d25c00370860afd6cb6474da256987b6b7fe076e2e303089497c480add816036d63632ce4f50c248c4b7f8b9fedd64425a23bb8ad0b605de57967a2e1ffd29a4ac1c7c4e8b898744017eec664f2e9a7f27203463fad7be53323f16db5af46fac1c1204a7877527cf8ac02213011cd6bde6bd940dfad48d50c4dd167464f1ede442f7074f85699d927657c65f5917bba164c75caf99ba9be7aebbfb7d681270d1dc0f7e5f968d92a287501439f334a8c571a9caf49a2486dd0b2ed0f39ed9b8c2a4f0c95d79c52186a6491cffd5b3d86e7c783a8a77786c316eac3fab287b35b5b4682f57f649bc1c485815d1179e79c7662e5b26067450f448e836f22fb2b496df01537d88b6b24facc31af723fd65e13681b0ac6a99becc4490fa51a7c1ff11a435d91492f977f96539a032e5a210abb8e9cfe2fad753055a76ade20b8f1e789bbc1bb7c48819fe7c628f821ee3a3819767682da7c8684e592d63f996b2601997712cf1fb7d7bdcb2abc9e653e74679a33adb39facc74150b3438a2a21a67c952766ac7d0df9c6bcc29c657be4ed606ed7561d763ff6ae8dfdedcfa20fa1dae94e81208715123313534a3c84601cc113d4d18e3d3d206d3cf7d19896b8a2a4f467617780f6fba94daf59a95122fcc54086cbabeffda2bf32817dfee0005f277c7b7f4b89586615445af321432c859c9b3989f639da0781c4b8ec73a0265027a78f7199133d5dbc746aeeb62a310604865d6187d69d836baf708351a31af4099d59037bffb5f6a226c13a08b25cc7f0aef0ea62701940a7792721cfbac02e5bd10f5d0a7270eefc58229f65cf0c6a89393e6332efcb7a2d4631307fd8cce3a76de979e708d569f33b2cd0789621e6918189edf5b212b06c458fab6a767b41d1dafd6092b89bd1539cd04ed3780075dc1ec0d013b7dd6bdf3014658e554e7f3822269c4ed61eb446b67cb442c28bb7944cec84b0ddf2fa556714c10fdbdb6aee92441f5a058fba29193f1901aa54248110dda84124d9cc07e72f16aff8700130e4b10bc40279c6ca14bef773906bba7563e23668d72306e100f412d9a27a29a36d831f736f03043006d60c8ba6eab2b732443ebb3b6bab2e7f617a1893c5bd204382f3392438b5edd0414070bce091dbd12101bae386890d8cfabbec9065a8134731f669c70bdb053d0a843339926ca4cec6b1bd71c770337adb81c260ea55d8794e664bce5af074f977d0b2afbf2b070f78e4409094c23e4c4ad1fae4a61300d4df2b2725499246cfef92c9c4a785fd5067fb90302ddc26faf7ae6f9c69e7ff87d07c4c5c396d4395590c876c9f8698aea8b966bb5ca399d98cac5dbde89d510b5fbb9478b5a0c57013b3363e504305223ff7bef6dcd10aec6cb9433350d0c9a8877a154f1e9088ca83949284d5d060084ace8203f91844c7f28ea9833236a3b3e512bd8df9662a344b30a749cf4b4d783f115ca09f703127e86ea344599fb71ea3cbcfa23704e8ddd91acb4b908b0db71f3ed326c6e7f87f5e3030711c080e57407c9b0359abcd68801c0f0915f2435cc1382043ce9dafce198e246999ca1424405fd4facf83f49e6981bbf366eedc25dad64ce941c69fe57cd983cd93b8b85012e4e3f68736f8ff76538447aca6c1f1cf419b4065f10b7de1af5d99f30366fcad727e012f1a24598a6d7d6c06f3113dfb136c17d666a384c5c8d5545036e472289fb24c254fdec6b9f5327fa48a2edaf9456db72921f6551b8e39b170221e0282c2a05ad8206deb2b303143b92cef8a889b21f2aaedd09d3001e9e1041df296a489a4a0b83fdeb17c4541353ad6739048a5e0a0885edd4f055b1c72a4addd81978916dc5ac8996040ea190778dab084c6e4e0997e3efc17e479033b4cd16fbeb2d3415cfd910ca766c1c09c3b816bf08db953ce1a3aacc18b69ce7932c95fd67c44973347fe9475daa5351f1c410c5852fb8b30a5fdf35608722571b087326f29040a759f3f96d125ed86645f7f89d961ddd86a7f84c3e3bb52e3e9ffcffe03f83908972b7b2e160224e8eff697d22dae6ae4357152950feb4cce57b1ef6c6f9436d1b7084b502b558878847f57466d667920470e538c1998a4e9e892a56f0e06207ab7497fe1e5e7e542d1376d8285fe1302de270f1b65999adcab2bb8b4c006d4f76b6ffe832999b77e89679cbcab401b34f14442195b6dca0339d28bd1d34bdd1ea6514dcef1024b896cb5b9d01d89568fe3bd65b4f629842d79d8328337feec240f39f7098fac870de90bace9ba8d34d74a7532590f26005502c2df4551034b374d34447ef7f222a38db480419ef7c8e536b379268ce47de99ebec36fa01412adb2358ecbcc70c3bdc5fcbe3e41adfc3ac16d87aee511666e927c6dc6ca55fce122064cfd440fba6c09ec431cbf3c287cd724db4947a4268e72ba0acc127d7365b3b975e0fe81973025468e153735d120137da820dcf4e9461c4d37b769424a7fb77e0753026d2cfc969f64a72e4f9170d0b854edd395357f35d49e6a30086c1421f85b5895c306f6e39e4ce6bfd362fccdd2037358f27f0bceb05c1ee53af2675a411318d350a049a7b3f166db28b99447c84792ea7f3bfd099ed3bc52e039a158141b50e0365ad7d6a6b7cd1bd320dedefd0a943981966801f70e439e3421d59f7a43f3d54477359fd9466f8df6f3fbbf9c019384430ea5583b9211d9180ea54fff4cd967670d8552796f58269504bc1bf131a6b04573fefa976c6cf114ef5928627a2f05b6e1f29a23d85e5473a9cb0b6ca31e78adce33aec34c1998f3d35bb4d5c94113ecd9459ab3c6631f0e08a40bb1bccbe970b708e0bc78fd3e4b3056bf53148956ba8b5da58bc71119372aa4ff3c41eb1e655106ec668d689f5758389c5bd67afff87e2575dda6cc089afca195749d5b33e2916eb8c2faac7ae6a51a0509223ed8d16b038b1606b9755e5b4975bddd3cb1884a88ec4d12ff7d0b9370ddb7aa2d8adfc21d34772169ba65e317d8572f80ea7b02f6038f5b77c3e0da8c4edd70242df1001fdfaeb3a993b9791319e1939f51af47a1082bbb29bb6b159a5d0d6af295cfdc7b6b020bafab3f97f252b5b43302fb94876d84fca74712c903e612fab14347436d0aa78116fa25fc29ce6abb7955160bf4c569693961afbae6ff4fdb9b009b515bf82f14db0151e90a0f2dfc463591c667f46e23767731abbae99a8d893cbd3e7d05aeeaca9b3a7601c436f1f9aacd291dca0342916716185cbb3c3995fac8c15af32f833ca4b7d42f6d67952e1f1676f0ef8099c9498c00a06b0b658beccb12b6b546d831e25c06c897ad3a0f23c2177740b2dd600bbfde02c77d10df99de74d11840f4414f0e7c742932a57db2c05f07f1d2d15162267a150023afc543f171f69440760b4b36dd986e4250c926ad0cced02bbda8d49610c3643cfa76fff1e8ff650992964274ff5d5294a05571d1ccd60a3ece5e8fd4d0f0067e0694796dc37b2e1542088a77f197f0e0a73442e9af556408fb1f4b1c0b8ba4025e80bddc5babce0bd8f730559b6a8300e35fee1f40a9978a40fde31ff739095c0753bd431728d153b65a0b7bedc7bc1b313ddeb0ac2914621bdbdf8a83ae643e6607b09cbfb341a261a70500d113b96e4aa243c90c702e3f491c307813890526b8a90ae86c11b4a5e3a8c742300c6227d74f0c93d403632e34167d12b2c61bac3690b9af1fcd0307c3f6972664cd4f09682f34eae5613795b993a8974718c00fad957630f5c4d5a89ed9fc5ed80f999d7ee3a7d5602ab98efcf0f1f050e2a19071399a81a087e4d6d523073fdf86813169abff3a8ad53c87f90f91e5e5dd050cc23b2543eef14d2ba878c472eca94735fef10f8c63c70a899d15f9550430756104d52542f97ef417a28ec8c43f156d47a1b020057d63c78935845245ffe877edf3792fba9aabbb9329ec2d8b1259eecd8f1a4f51ca74bdde0b0d6cc48fd3eaa6cc8475122da6d095890601cba442092fb7cb2dbc81752caadbc346bfe7d06384f95b4d9514f4af431a5a6e198222a6f17cfe4ad150507fd82c5aea730d19a6efa1140c3b10e9a25de8df40f324870d1da5d15de2ccd9d055992b0cbf732009789f52e80645d880bad25e4b7cc6a480552dccbbed21d5456f61d865fd0f331aff295bbeca9c157191b0df5d08b8e89feb9fa4fbb208e13ab236d0e2d54297039210f37a740b931630c9481e1e5a1f1fba8a84fb744be0c41e8d0aaf3e87fcdcf70b42e28172f8177084e84cc6fd6282d63a3b722201c99aa1b08714e987935257be91b218f4e26d5a1f78095193428d2833755aec9094ea79f1b9c0fe7b18c7f552087812dce89a0fd685756e6c70b481db0f6e247781bfc", 0x1000}], 0x1}, 0x8000000000) sendmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000080)=@nfc={0x27, 0x0, 0x1, 0x6}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000140)="2b028cf609966f555b6be28f7f0408796c3db7caeb88cf4ea137c6ebb93746f571c3153cb28fbde84a88d89e3d54d6c27cf0a76cc6f0838de65a93ae15a9920fb2a9b1ddfe7babce0e59d946b1d470108de70e1655316dd7dbdcc4f91cd6b6284ee87e0dd5f51175778f6344ce6856a8005e797cc059a57d21a90b", 0x7b}], 0x1}, 0x400c0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890c, &(0x7f0000000000)) r2 = socket$kcm(0x2, 0x3, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x280000, 0x0) r4 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r5, &(0x7f0000001440)=ANY=[@ANYBLOB="2f70696473202f72646d61202d637075200063701d1876d070752003db6c753e609a0bbd5a1a87b800da99b93fe4e065a87ae312d8740f3d1c9000b6fb171a6de7a26d907c4bab873828c8b6efb0c14eab01cd5ba1ef08fd11248471e5cc085680cd23bb2a7bce03ed99ff9fc1f62272de49cf7d08f7a5ca5a2cbcd89baf2ae667c43d649806d10cce9d9cd5d419c3a04902e46273dc48420499d335e2e94b24868cd4e06a17fcb091cae10edefba934fc46c8c5f8cde094f16c025903118220a34362a0c8935185914e25a2d430c8e938b971d13d292d1b7a212646cfb2d19e4deb282a61a7f685ccd4002632fc17672e7c8768c95d55b20a"], 0xf9) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r5, &(0x7f00000001c0), 0x12) write$cgroup_subtree(r6, &(0x7f0000000000)={[{0x2dcd3, 'memory', 0xe}]}, 0x200600) openat$cgroup_ro(r4, &(0x7f0000000400)='cpuset.effective_mems\x00', 0x0, 0x0) ioctl$TUNSETVNETLE(r3, 0x400454dc, &(0x7f0000000040)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz1\x00', 0x200002, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000800)={'caif0\x00', @broadcast}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="2e0000001e000507ed0080648c6394f20531d200050011404b48000d01000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) [ 284.470414][ T7715] team0: Port device team_slave_1 added [ 284.548268][ T7715] device hsr_slave_0 entered promiscuous mode [ 284.614911][ T7715] device hsr_slave_1 entered promiscuous mode 23:32:16 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000280)="2300000022008152915a655267d7d1370a2ff96e27bf28b285fe3903a44a6017edcaa3", 0x23}], 0x1}, 0x0) [ 284.710905][ T7715] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.718219][ T7715] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.726221][ T7715] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.733317][ T7715] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.808568][ T7722] IPVS: ftp: loaded support on port[0] = 21 [ 284.854923][ T7725] IPVS: ftp: loaded support on port[0] = 21 23:32:17 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008105e00f80ecdb4cb9d90163190405000000000000fb12000200ac14141840d819a9060015000000", 0x2e}], 0x1}, 0x0) [ 284.956616][ T7715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 285.052501][ T7719] chnl_net:caif_netlink_parms(): no params data found [ 285.127207][ T7715] 8021q: adding VLAN 0 to HW filter on device team0 [ 285.157365][ T7722] chnl_net:caif_netlink_parms(): no params data found [ 285.172349][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 285.185631][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.205559][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.218759][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready 23:32:17 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x5, 0x0, 0x0, {}, {0x77359400}, {0x3}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "388dbba2b150d176"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x6, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x8, @can={{}, 0x0, 0x0, 0x0, 0x0, "c4d981ae211e6951"}}, 0x48}}, 0x0) [ 285.253416][ T7729] IPVS: ftp: loaded support on port[0] = 21 [ 285.254509][ T7719] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.272007][ T7719] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.287158][ T7719] device bridge_slave_0 entered promiscuous mode [ 285.320157][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 285.330771][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.338299][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.361705][ T7719] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.369734][ T7719] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.378289][ T7719] device bridge_slave_1 entered promiscuous mode [ 285.409918][ T7732] IPVS: ftp: loaded support on port[0] = 21 [ 285.422893][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 285.432129][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 285.440863][ T2992] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.448005][ T2992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.456336][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 285.465331][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 285.473998][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 285.482651][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 285.493226][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 285.504891][ T7719] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 285.557942][ T7718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 285.566671][ T7718] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 285.589928][ T7719] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 285.623904][ T7722] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.631741][ T7722] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.640208][ T7722] device bridge_slave_0 entered promiscuous mode [ 285.648059][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 285.658342][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 285.668920][ T7715] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 285.680739][ T7715] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 285.702577][ T7725] chnl_net:caif_netlink_parms(): no params data found [ 285.716484][ T7722] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.723740][ T7722] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.732427][ T7722] device bridge_slave_1 entered promiscuous mode [ 285.739785][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 285.749853][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 285.761428][ T7719] team0: Port device team_slave_0 added [ 285.770740][ T7719] team0: Port device team_slave_1 added [ 285.808555][ T7722] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 285.819577][ T7722] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 285.896424][ T7719] device hsr_slave_0 entered promiscuous mode [ 285.944955][ T7719] device hsr_slave_1 entered promiscuous mode [ 286.009965][ T7715] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 286.017323][ T7725] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.026313][ T7725] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.034443][ T7725] device bridge_slave_0 entered promiscuous mode [ 286.042646][ T7722] team0: Port device team_slave_0 added [ 286.050460][ T7722] team0: Port device team_slave_1 added [ 286.088487][ T7725] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.096994][ T7725] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.105475][ T7725] device bridge_slave_1 entered promiscuous mode [ 286.160265][ T7729] chnl_net:caif_netlink_parms(): no params data found [ 286.176635][ T7725] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 286.187614][ T7725] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 286.244904][ T7725] team0: Port device team_slave_0 added [ 286.254126][ T7725] team0: Port device team_slave_1 added [ 286.286710][ T7722] device hsr_slave_0 entered promiscuous mode [ 286.324715][ T7722] device hsr_slave_1 entered promiscuous mode [ 286.375287][ T7729] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.382383][ T7729] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.390614][ T7729] device bridge_slave_0 entered promiscuous mode [ 286.398512][ T7729] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.405672][ T7729] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.413345][ T7729] device bridge_slave_1 entered promiscuous mode [ 286.420553][ T7732] chnl_net:caif_netlink_parms(): no params data found 23:32:18 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000200)="b136916969ef69dc00d9c4a2d1920cec38c4ab39fd5bf9e2f9e2c7c7e4c653fb0fc4014cb63a3af4a95ff9c44149f216c421fc51c1c461a1f8a100000021c4815572d38f0f186746f3400faee47e50cb8fc9c09b7cd0f626400f0d18c401fe5ff6e7df0804f4dbea54111d54111d00") epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) creat(0x0, 0x0) syz_execute_func(&(0x7f0000000800)="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") [ 286.556891][ T7725] device hsr_slave_0 entered promiscuous mode [ 286.594955][ T7725] device hsr_slave_1 entered promiscuous mode 23:32:18 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) link(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100)='./file0\x00') [ 286.656224][ T7729] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 286.667835][ T7729] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 286.684910][ T7732] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.692474][ T7732] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.701859][ T7732] device bridge_slave_0 entered promiscuous mode 23:32:18 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x12) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = dup(r1) sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) [ 286.764850][ T7732] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.773499][ T7732] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.782606][ T7732] device bridge_slave_1 entered promiscuous mode [ 286.797760][ T7719] 8021q: adding VLAN 0 to HW filter on device bond0 23:32:18 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffffb4, 0x0, 0x0, 0x100000000000000, 0x0, 0x65}}, &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp+\xdbx\xa5\x01\xcaK\xee\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x98\x86f\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\x00\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x70) [ 286.823451][ T7729] team0: Port device team_slave_0 added [ 286.837136][ T7729] team0: Port device team_slave_1 added 23:32:18 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x4106}) ioctl$sock_ifreq(r1, 0x8914, &(0x7f0000000180)={'eql\x00\x00\x00\xa9[\x00', @ifru_flags=0x1}) dup3(r0, r2, 0x0) 23:32:18 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=ANY=[@ANYBLOB="6d616e676c650000000000000000000000181b526bb50700004100000000000000000000000000000000001f00000006000000a0050000ab0d8dd0d93c7d71c54a8a0000000000004000b004000000e8050000e8050000e8"], 0x1) ptrace$setopts(0x4206, r2, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) tkill(r2, 0x3c) [ 286.899945][ T7729] device hsr_slave_0 entered promiscuous mode [ 286.954790][ T7729] device hsr_slave_1 entered promiscuous mode [ 287.028068][ T7732] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 287.039675][ T7719] 8021q: adding VLAN 0 to HW filter on device team0 [ 287.056126][ T7724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 287.063962][ T7724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 287.086759][ T7732] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 287.107122][ T7765] WARNING: CPU: 0 PID: 7765 at kernel/cgroup/cgroup.c:6008 cgroup_exit+0x51a/0x5d0 [ 287.121299][ T7765] Kernel panic - not syncing: panic_on_warn set ... [ 287.127885][ T7765] CPU: 0 PID: 7765 Comm: syz-executor.0 Not tainted 5.1.0-next-20190507 #2 [ 287.136774][ T7765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 287.146817][ T7765] Call Trace: [ 287.150149][ T7765] dump_stack+0x172/0x1f0 [ 287.154470][ T7765] ? cgroup_exit+0x430/0x5d0 [ 287.159101][ T7765] panic+0x2cb/0x75a [ 287.162990][ T7765] ? __warn_printk+0xf3/0xf3 [ 287.167568][ T7765] ? cgroup_exit+0x51a/0x5d0 [ 287.172171][ T7765] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 287.178399][ T7765] ? __warn.cold+0x5/0x47 [ 287.182712][ T7765] ? __warn+0xe8/0x1d0 [ 287.186772][ T7765] ? cgroup_exit+0x51a/0x5d0 [ 287.191374][ T7765] __warn.cold+0x20/0x47 [ 287.195650][ T7765] ? mark_held_locks+0xf0/0xf0 [ 287.200421][ T7765] ? cgroup_exit+0x51a/0x5d0 [ 287.205003][ T7765] report_bug+0x263/0x2b0 [ 287.209366][ T7765] do_error_trap+0x11b/0x200 [ 287.213946][ T7765] do_invalid_op+0x37/0x50 [ 287.218370][ T7765] ? cgroup_exit+0x51a/0x5d0 [ 287.222946][ T7765] invalid_op+0x14/0x20 [ 287.227099][ T7765] RIP: 0010:cgroup_exit+0x51a/0x5d0 [ 287.232285][ T7765] Code: 00 48 c7 c2 20 7f 6d 87 be d3 01 00 00 48 c7 c7 20 80 6d 87 c6 05 01 93 f1 07 01 e8 fb 03 ed ff e9 b1 fb ff ff e8 96 f9 05 00 <0f> 0b e9 75 fc ff ff e8 8a f9 05 00 48 c7 c2 e0 82 6d 87 be 85 02 [ 287.251896][ T7765] RSP: 0018:ffff8880595d7a80 EFLAGS: 00010093 [ 287.258039][ T7765] RAX: ffff888099a6e440 RBX: 0000000000000001 RCX: ffffffff816b0b5e [ 287.266015][ T7765] RDX: 0000000000000000 RSI: ffffffff816b0eea RDI: 0000000000000001 [ 287.273981][ T7765] RBP: ffff8880595d7b18 R08: ffff888099a6e440 R09: ffffed100b2baf3e [ 287.281950][ T7765] R10: ffffed100b2baf3d R11: 0000000000000003 R12: ffff888099a6e440 [ 287.289908][ T7765] R13: ffff888088e62d80 R14: ffff8880595d7af0 R15: 1ffff1100b2baf52 [ 287.297884][ T7765] ? cgroup_exit+0x18e/0x5d0 [ 287.304277][ T7765] ? cgroup_exit+0x51a/0x5d0 [ 287.308868][ T7765] ? cgroup_post_fork+0x540/0x540 [ 287.313935][ T7765] do_exit+0x97a/0x2fa0 [ 287.318080][ T7765] ? __switch_to_asm+0x40/0x70 [ 287.322877][ T7765] ? get_signal+0xa7d/0x2270 [ 287.327457][ T7765] ? mm_update_next_owner+0x640/0x640 [ 287.332817][ T7765] ? lock_acquire+0x16f/0x3f0 [ 287.337484][ T7765] ? _raw_spin_unlock_irq+0x28/0x90 [ 287.342673][ T7765] ? get_signal+0xa7d/0x2270 [ 287.347249][ T7765] ? _raw_spin_unlock_irq+0x28/0x90 [ 287.352437][ T7765] do_group_exit+0x135/0x370 [ 287.357033][ T7765] get_signal+0x425/0x2270 [ 287.361451][ T7765] do_signal+0x87/0x1900 [ 287.365813][ T7765] ? kasan_check_read+0x11/0x20 [ 287.370686][ T7765] ? _copy_to_user+0xc9/0x120 [ 287.375354][ T7765] ? setup_sigcontext+0x7d0/0x7d0 [ 287.380412][ T7765] ? do_syscall_64+0x57e/0x670 [ 287.385174][ T7765] ? exit_to_usermode_loop+0x43/0x2c0 [ 287.390537][ T7765] ? lockdep_hardirqs_on+0x418/0x5d0 [ 287.395976][ T7765] ? trace_hardirqs_on+0x67/0x230 [ 287.400999][ T7765] exit_to_usermode_loop+0x244/0x2c0 [ 287.406279][ T7765] do_syscall_64+0x57e/0x670 [ 287.410870][ T7765] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 287.416756][ T7765] RIP: 0033:0x458da9 [ 287.420638][ T7765] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 287.440228][ T7765] RSP: 002b:00007f4990cd7cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 287.448633][ T7765] RAX: 0000000000000000 RBX: 000000000073bfa8 RCX: 0000000000458da9 [ 287.456595][ T7765] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000073bfa8 [ 287.464652][ T7765] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 287.472619][ T7765] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000073bfac [ 287.480584][ T7765] R13: 00007ffcc73dfb2f R14: 00007f4990cd89c0 R15: 000000000073bfac [ 288.643047][ T7765] Shutting down cpus with NMI [ 288.649061][ T7765] Kernel Offset: disabled [ 288.653479][ T7765] Rebooting in 86400 seconds..