[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 44.281679][ T7488] IPVS: ftp: loaded support on port[0] = 21 [ 44.684124][ T7472] can: request_module (can-proto-0) failed. [ 47.796601][ T7472] can: request_module (can-proto-0) failed. [ 47.807022][ T7472] can: request_module (can-proto-0) failed. Warning: Permanently added '10.128.1.50' (ECDSA) to the list of known hosts. 2019/11/08 02:26:51 parsed 1 programs 2019/11/08 02:26:51 executed programs: 0 [ 55.174194][ T7561] IPVS: ftp: loaded support on port[0] = 21 [ 55.182142][ T7564] IPVS: ftp: loaded support on port[0] = 21 [ 55.226867][ T7566] IPVS: ftp: loaded support on port[0] = 21 [ 55.251460][ T7568] IPVS: ftp: loaded support on port[0] = 21 [ 55.292546][ T7570] IPVS: ftp: loaded support on port[0] = 21 [ 55.307281][ T7571] IPVS: ftp: loaded support on port[0] = 21 [ 55.320667][ T7561] chnl_net:caif_netlink_parms(): no params data found [ 55.387952][ T7561] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.395712][ T7561] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.403195][ T7561] device bridge_slave_0 entered promiscuous mode [ 55.412236][ T7561] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.419325][ T7561] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.426945][ T7561] device bridge_slave_1 entered promiscuous mode [ 55.443643][ T7561] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.454808][ T7561] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.476171][ T7561] team0: Port device team_slave_0 added [ 55.484834][ T7561] team0: Port device team_slave_1 added [ 55.537097][ T7561] device hsr_slave_0 entered promiscuous mode [ 55.575511][ T7561] device hsr_slave_1 entered promiscuous mode [ 55.685656][ T7564] chnl_net:caif_netlink_parms(): no params data found [ 55.929626][ T7566] chnl_net:caif_netlink_parms(): no params data found [ 55.963775][ T7561] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.971006][ T7561] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.978812][ T7561] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.985936][ T7561] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.058630][ T7564] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.085144][ T7564] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.093061][ T7564] device bridge_slave_0 entered promiscuous mode [ 56.143365][ T7570] chnl_net:caif_netlink_parms(): no params data found [ 56.153336][ T7568] chnl_net:caif_netlink_parms(): no params data found [ 56.172798][ T7571] chnl_net:caif_netlink_parms(): no params data found [ 56.209701][ T7564] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.217915][ T7564] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.226211][ T7564] device bridge_slave_1 entered promiscuous mode [ 56.338796][ T7566] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.346860][ T7566] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.354816][ T7566] device bridge_slave_0 entered promiscuous mode [ 56.369094][ T7564] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.382715][ T7564] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.397537][ T2947] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.405918][ T2947] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.415195][ T7566] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.422231][ T7566] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.430474][ T7566] device bridge_slave_1 entered promiscuous mode [ 56.449658][ T7571] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.456833][ T7571] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.464284][ T7571] device bridge_slave_0 entered promiscuous mode [ 56.474007][ T7561] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.481014][ T7568] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.488361][ T7568] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.496614][ T7568] device bridge_slave_0 entered promiscuous mode [ 56.507999][ T7570] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.516477][ T7570] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.524081][ T7570] device bridge_slave_0 entered promiscuous mode [ 56.537792][ T7571] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.544858][ T7571] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.554486][ T7571] device bridge_slave_1 entered promiscuous mode [ 56.563180][ T7566] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.573274][ T7568] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.580489][ T7568] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.588345][ T7568] device bridge_slave_1 entered promiscuous mode [ 56.595686][ T7570] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.602739][ T7570] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.611362][ T7570] device bridge_slave_1 entered promiscuous mode [ 56.619868][ T7564] team0: Port device team_slave_0 added [ 56.631385][ T7561] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.642776][ T7566] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.669197][ T7566] team0: Port device team_slave_0 added [ 56.678817][ T7564] team0: Port device team_slave_1 added [ 56.687894][ T7600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.696621][ T7600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.717874][ T7566] team0: Port device team_slave_1 added [ 56.733362][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.741938][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.750431][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.757482][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.764955][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.773615][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.781952][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.789008][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.797938][ T7571] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.810240][ T7568] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.821976][ T7568] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.833683][ T7570] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.855112][ T7600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.863895][ T7600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.875477][ T7600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.883945][ T7600] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.892362][ T7600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.900954][ T7600] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.910820][ T7571] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.939532][ T7571] team0: Port device team_slave_0 added [ 56.947639][ T7570] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.007771][ T7564] device hsr_slave_0 entered promiscuous mode [ 57.055455][ T7564] device hsr_slave_1 entered promiscuous mode [ 57.115235][ T7564] debugfs: Directory 'hsr0' with parent '/' already present! [ 57.126637][ T7600] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.134816][ T7600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.143098][ T7600] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.161623][ T7571] team0: Port device team_slave_1 added [ 57.183312][ T7568] team0: Port device team_slave_0 added [ 57.237848][ T7566] device hsr_slave_0 entered promiscuous mode [ 57.285350][ T7566] device hsr_slave_1 entered promiscuous mode [ 57.335255][ T7566] debugfs: Directory 'hsr0' with parent '/' already present! [ 57.345557][ T7570] team0: Port device team_slave_0 added [ 57.367867][ T7568] team0: Port device team_slave_1 added [ 57.388287][ T7570] team0: Port device team_slave_1 added [ 57.424140][ T7600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.455591][ T7600] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.502085][ T7571] device hsr_slave_0 entered promiscuous mode [ 57.566277][ T7571] device hsr_slave_1 entered promiscuous mode [ 57.586742][ T7571] debugfs: Directory 'hsr0' with parent '/' already present! [ 57.598701][ T7561] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.650495][ T7568] device hsr_slave_0 entered promiscuous mode [ 57.705936][ T7568] device hsr_slave_1 entered promiscuous mode [ 57.747565][ T7568] debugfs: Directory 'hsr0' with parent '/' already present! [ 57.888459][ T7570] device hsr_slave_0 entered promiscuous mode [ 57.925418][ T7570] device hsr_slave_1 entered promiscuous mode [ 57.965162][ T7570] debugfs: Directory 'hsr0' with parent '/' already present! [ 57.993713][ T7609] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.016343][ T7609] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.025849][ T7561] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.406973][ T7564] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.473412][ T7607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.525751][ T7607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.628935][ T7566] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.709465][ T7564] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.762910][ T7566] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.879849][ T7571] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.935328][ T7607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.943566][ T7607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.084658][ T7568] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.183768][ T7570] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.271889][ T7571] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.355627][ T7609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.364309][ T7609] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.429646][ T7731] overlayfs: conflicting lowerdir path [ 59.479378][ T7609] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.486547][ T7609] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.547568][ T7739] overlayfs: upper fs does not support xattr, falling back to index=off and metacopy=off. [ 59.577656][ T7609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.644818][ T7609] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.707640][ T7609] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.714763][ T7609] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.803295][ T7609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.855345][ T7739] overlayfs: conflicting lowerdir path [ 59.872142][ T7609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.941203][ T7609] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.000469][ T7609] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.007711][ T7609] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.023071][ T7609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.032879][ T7609] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.041626][ T7609] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.048714][ T7609] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.056474][ T7609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.064194][ T7609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.084030][ T7561] BUG: Dentry 000000009aada1a5{i=6d48,n=#27976} still in use (1) [unmount of hugetlbfs hugetlbfs] [ 60.088836][ T7568] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.095229][ T7561] ------------[ cut here ]------------ [ 60.107021][ T7561] WARNING: CPU: 1 PID: 7561 at fs/dcache.c:1595 umount_check.cold.53+0xd2/0x13f [ 60.116028][ T7561] Kernel panic - not syncing: panic_on_warn set ... [ 60.122637][ T7561] CPU: 1 PID: 7561 Comm: syz-executor.2 Not tainted 5.4.0-rc6+ #0 [ 60.122912][ T7568] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 60.130426][ T7561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 60.130429][ T7561] Call Trace: [ 60.130441][ T7561] dump_stack+0x12d/0x187 [ 60.130453][ T7561] ? umount_check.cold.53+0xd2/0x13f [ 60.130459][ T7561] panic+0x22a/0x4e3 [ 60.130468][ T7561] ? add_taint.cold.8+0x11/0x11 [ 60.130482][ T7561] __warn.cold.11+0x25/0x30 [ 60.141111][ T7568] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.151143][ T7561] ? __irq_work_queue_local+0xe0/0x120 [ 60.151150][ T7561] ? umount_check.cold.53+0xd2/0x13f [ 60.151156][ T7561] report_bug+0x1b0/0x270 [ 60.151164][ T7561] do_error_trap+0x11b/0x200 [ 60.151172][ T7561] do_invalid_op+0x36/0x40 [ 60.151176][ T7561] ? umount_check.cold.53+0xd2/0x13f [ 60.151183][ T7561] invalid_op+0x23/0x30 [ 60.151189][ T7561] RIP: 0010:umount_check.cold.53+0xd2/0x13f [ 60.168202][ T7568] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.173043][ T7561] Code: c1 ea 03 80 3c 02 00 75 79 49 81 c4 88 06 00 00 41 89 d8 48 89 f1 41 54 4d 8b 0e 4c 89 ea 48 c7 c7 20 90 35 87 e8 5b d9 aa ff <0f> 0b 58 e9 b0 3b ff ff 48 89 75 d8 e8 7b ff f1 ff 48 8b 75 d8 e9 [ 60.177622][ T7568] kobject: 'vlan0' (00000000ea2a2eae): kobject_add_internal: parent: 'mesh', set: '' [ 60.187828][ T7561] RSP: 0018:ffff888098e8fbf8 EFLAGS: 00010282 [ 60.187833][ T7561] RAX: 0000000000000060 RBX: 0000000000000001 RCX: 0000000000000000 [ 60.187836][ T7561] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff89fe01a0 [ 60.187839][ T7561] RBP: ffff888098e8fc28 R08: ffffed1015d66159 R09: ffffed1015d66159 [ 60.187841][ T7561] R10: ffffed1015d66158 R11: ffff8880aeb30ac7 R12: ffff88807ffe8688 [ 60.187844][ T7561] R13: 0000000000006d48 R14: ffffffff886f3de0 R15: ffff88808983a930 [ 60.187867][ T7561] ? umount_check.cold.53+0xd2/0x13f [ 60.187875][ T7561] d_walk+0x257/0x6b0 [ 60.209720][ T7570] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.211878][ T7561] ? d_find_alias+0x250/0x250 [ 60.231583][ T7571] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 60.234192][ T7561] do_one_tree+0x1f/0x40 [ 60.253820][ T7571] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.263735][ T7561] shrink_dcache_for_umount+0x56/0x120 [ 60.263743][ T7561] generic_shutdown_super+0x61/0x330 [ 60.263748][ T7561] kill_anon_super+0x38/0x60 [ 60.263754][ T7561] kill_litter_super+0x39/0x50 [ 60.263759][ T7561] deactivate_locked_super+0x77/0xd0 [ 60.263765][ T7561] deactivate_super+0x136/0x150 [ 60.263771][ T7561] ? mount_bdev+0x330/0x330 [ 60.263777][ T7561] ? dput.part.30+0x129/0xab0 [ 60.281266][ T7571] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.287966][ T7561] ? mnt_get_writers.isra.28+0xb3/0x140 [ 60.287975][ T7561] cleanup_mnt+0x204/0x440 [ 60.287981][ T7561] ? trace_hardirqs_on+0x28/0x1a0 [ 60.287987][ T7561] ? __kasan_check_read+0x11/0x20 [ 60.287994][ T7561] __cleanup_mnt+0xd/0x10 [ 60.287999][ T7561] task_work_run+0x108/0x180 [ 60.288010][ T7561] exit_to_usermode_loop+0x24e/0x2e0 [ 60.296056][ T7571] kobject: 'vlan0' (0000000054d2fe41): kobject_add_internal: parent: 'mesh', set: '' [ 60.304080][ T7561] do_syscall_64+0x4e8/0x5d0 [ 60.304092][ T7561] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 60.304098][ T7561] RIP: 0033:0x45cc47 [ 60.304105][ T7561] Code: 64 89 04 25 d0 02 00 00 58 5f ff d0 48 89 c7 e8 2f be ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 4d 8c fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 60.304108][ T7561] RSP: 002b:00007ffe3ecc3768 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6 [ 60.491043][ T7561] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000000045cc47 [ 60.499018][ T7561] RDX: 0000000000403a90 RSI: 0000000000000002 RDI: 00007ffe3ecc3810 [ 60.507050][ T7561] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000009 [ 60.515092][ T7561] R10: 0000000000000005 R11: 0000000000000202 R12: 00007ffe3ecc48a0 [ 60.523295][ T7561] R13: 0000000001b1d940 R14: 0000000000000000 R15: 00007ffe3ecc48a0 [ 60.533169][ T7561] Kernel Offset: disabled [ 60.537659][ T7561] Rebooting in 86400 seconds..