[ 42.230031][ T25] audit: type=1800 audit(1575339357.325:25): pid=8045 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 42.263800][ T25] audit: type=1800 audit(1575339357.325:26): pid=8045 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 42.323659][ T25] audit: type=1800 audit(1575339357.325:27): pid=8045 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [ 42.349379][ T25] audit: type=1800 audit(1575339357.325:28): pid=8045 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.1.4' (ECDSA) to the list of known hosts. 2019/12/03 02:16:09 fuzzer started 2019/12/03 02:16:11 dialing manager at 10.128.0.26:38907 2019/12/03 02:16:11 syscalls: 2697 2019/12/03 02:16:11 code coverage: enabled 2019/12/03 02:16:11 comparison tracing: enabled 2019/12/03 02:16:11 extra coverage: extra coverage is not supported by the kernel 2019/12/03 02:16:11 setuid sandbox: enabled 2019/12/03 02:16:11 namespace sandbox: enabled 2019/12/03 02:16:11 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/03 02:16:11 fault injection: enabled 2019/12/03 02:16:11 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/03 02:16:11 net packet injection: enabled 2019/12/03 02:16:11 net device setup: enabled 2019/12/03 02:16:11 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/12/03 02:16:11 devlink PCI setup: PCI device 0000:00:10.0 is not available 02:16:12 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x1a, &(0x7f00000006c0)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000900000003000000e802000030010000300100003001000000000000000000001802000018020000180200001802000018020000030000000000000000000000fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000000000000000000000000000000000000000000000000000000000007465716c3000000000000000000000006966623000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c800300100000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000000000000000736e6d7000000000000000000000000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffff0000000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000006c6f0000000000000000000000000000766c616e30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c800e80000000000000000000000000000000000000000000000000020005452414345000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000f23d16db95d8c0e55c1143ee475b9d3164736495edcb2da215eb00000000000000"], 0x348) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f00000003c0)=[@in]}, &(0x7f0000000480)=0x10) 02:16:12 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x400000000040006f, 0x8041) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syzkaller login: [ 57.342156][ T8209] IPVS: ftp: loaded support on port[0] = 21 02:16:12 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000340)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) [ 57.514158][ T8212] IPVS: ftp: loaded support on port[0] = 21 [ 57.528119][ T8209] chnl_net:caif_netlink_parms(): no params data found [ 57.609581][ T8209] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.633761][ T8209] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.653580][ T8209] device bridge_slave_0 entered promiscuous mode [ 57.673541][ T8209] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.680780][ T8209] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.689584][ T8209] device bridge_slave_1 entered promiscuous mode [ 57.691595][ T8214] IPVS: ftp: loaded support on port[0] = 21 [ 57.734041][ T8209] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.756083][ T8209] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 02:16:12 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080), 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) [ 57.847014][ T8209] team0: Port device team_slave_0 added [ 57.859131][ T8212] chnl_net:caif_netlink_parms(): no params data found [ 57.871310][ T8209] team0: Port device team_slave_1 added 02:16:13 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0xa808) [ 58.106694][ T8209] device hsr_slave_0 entered promiscuous mode [ 58.163133][ T8209] device hsr_slave_1 entered promiscuous mode [ 58.208234][ T8212] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.222834][ T8212] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.230654][ T8212] device bridge_slave_0 entered promiscuous mode [ 58.274368][ T8220] IPVS: ftp: loaded support on port[0] = 21 [ 58.293120][ T8212] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.300235][ T8212] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.308559][ T8217] IPVS: ftp: loaded support on port[0] = 21 [ 58.321103][ T8212] device bridge_slave_1 entered promiscuous mode 02:16:13 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x2, 0x0) r1 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, r2) keyctl$KEYCTL_MOVE(0x1e, r3, r1, r2, 0x0) r4 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r5 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r4) r6 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, r5) keyctl$KEYCTL_MOVE(0x1e, r6, r4, r5, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x8084, &(0x7f0000000140), 0x10) sendmmsg$sock(r0, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000700)="318533735b5bae", 0x7}], 0x1}}], 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000000), 0x4) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f00000002c0)=0x7, 0x4) recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x4000000000000ac, 0x43, 0x0) [ 58.381368][ T8214] chnl_net:caif_netlink_parms(): no params data found [ 58.404759][ T8209] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 58.470824][ T8209] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 58.515541][ T8212] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.528326][ T8212] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.557329][ T8223] IPVS: ftp: loaded support on port[0] = 21 [ 58.565269][ T8212] team0: Port device team_slave_0 added [ 58.571559][ T8209] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 58.616282][ T8209] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 58.677670][ T8214] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.685347][ T8214] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.693045][ T8214] device bridge_slave_0 entered promiscuous mode [ 58.700835][ T8212] team0: Port device team_slave_1 added [ 58.775267][ T8212] device hsr_slave_0 entered promiscuous mode [ 58.823107][ T8212] device hsr_slave_1 entered promiscuous mode [ 58.862891][ T8212] debugfs: Directory 'hsr0' with parent '/' already present! [ 58.872544][ T8214] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.879826][ T8214] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.887534][ T8214] device bridge_slave_1 entered promiscuous mode [ 58.919864][ T8214] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.950045][ T8214] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.051975][ T8220] chnl_net:caif_netlink_parms(): no params data found [ 59.062949][ T8214] team0: Port device team_slave_0 added [ 59.071674][ T8214] team0: Port device team_slave_1 added [ 59.085095][ T8212] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 59.136616][ T8212] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 59.187079][ T8212] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 59.244602][ T8217] chnl_net:caif_netlink_parms(): no params data found [ 59.268330][ T8212] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 59.375482][ T8214] device hsr_slave_0 entered promiscuous mode [ 59.413129][ T8214] device hsr_slave_1 entered promiscuous mode [ 59.462965][ T8214] debugfs: Directory 'hsr0' with parent '/' already present! [ 59.529718][ T8214] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 59.596815][ T8214] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 59.635797][ T8214] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 59.674800][ T8220] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.681909][ T8220] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.690463][ T8220] device bridge_slave_0 entered promiscuous mode [ 59.699319][ T8220] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.706478][ T8220] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.715932][ T8220] device bridge_slave_1 entered promiscuous mode [ 59.723754][ T8217] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.730800][ T8217] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.738713][ T8217] device bridge_slave_0 entered promiscuous mode [ 59.749765][ T8217] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.757242][ T8217] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.765005][ T8217] device bridge_slave_1 entered promiscuous mode [ 59.772491][ T8214] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 59.874065][ T8220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.887492][ T8220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.903271][ T8217] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.915114][ T8209] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.928894][ T8220] team0: Port device team_slave_0 added [ 59.951407][ T8223] chnl_net:caif_netlink_parms(): no params data found [ 59.961275][ T8217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.974461][ T8220] team0: Port device team_slave_1 added [ 59.990125][ T8217] team0: Port device team_slave_0 added [ 60.005799][ T8217] team0: Port device team_slave_1 added [ 60.032381][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.041930][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.065321][ T8209] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.105960][ T8217] device hsr_slave_0 entered promiscuous mode [ 60.143498][ T8217] device hsr_slave_1 entered promiscuous mode [ 60.182927][ T8217] debugfs: Directory 'hsr0' with parent '/' already present! [ 60.207728][ T8223] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.215590][ T8223] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.225062][ T8223] device bridge_slave_0 entered promiscuous mode [ 60.255362][ T8220] device hsr_slave_0 entered promiscuous mode [ 60.303135][ T8220] device hsr_slave_1 entered promiscuous mode [ 60.342890][ T8220] debugfs: Directory 'hsr0' with parent '/' already present! [ 60.384602][ T8223] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.391681][ T8223] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.400683][ T8223] device bridge_slave_1 entered promiscuous mode [ 60.408941][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.418009][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.426535][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.433744][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.441598][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.450566][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.459142][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.466209][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.473784][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.482181][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.490866][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.499615][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.508241][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.516232][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.550071][ T8223] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.564561][ T8223] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.575101][ T8220] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 60.616752][ T8220] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 60.674305][ T8221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.682870][ T8221] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.697495][ T8209] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 60.708568][ T8209] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.724742][ T8220] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 60.784539][ T8220] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 60.832996][ T8228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.841366][ T8228] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.853314][ T8228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.861496][ T8228] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.880430][ T8217] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 60.933492][ T8223] team0: Port device team_slave_0 added [ 60.947105][ T8212] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.954488][ T8228] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.965797][ T8217] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 60.995302][ T8223] team0: Port device team_slave_1 added [ 61.001076][ T8217] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 61.045752][ T8217] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 61.092506][ T8209] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.102360][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.110149][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.148722][ T8212] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.206468][ T8223] device hsr_slave_0 entered promiscuous mode [ 61.263201][ T8223] device hsr_slave_1 entered promiscuous mode [ 61.302846][ T8223] debugfs: Directory 'hsr0' with parent '/' already present! [ 61.310474][ T8228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.318352][ T8228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.346963][ T8220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.366588][ T8228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.376277][ T8228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.385074][ T8228] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.392104][ T8228] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.400213][ T8228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.409681][ T8228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.418102][ T8228] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.425180][ T8228] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.432660][ T8228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.441293][ T8228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.449813][ T8228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.458339][ T8228] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.467815][ T8228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.475684][ T8228] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.507890][ T8220] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.527659][ T8228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.541701][ T8228] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.556406][ T8228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.565421][ T8228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.579286][ T8212] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 61.592536][ T8212] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 166.602683][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 166.609458][ C1] rcu: 1-...!: (10499 ticks this GP) idle=7b2/1/0x4000000000000002 softirq=10419/10419 fqs=2 [ 166.619928][ C1] (t=10501 jiffies g=6401 q=238) [ 166.624938][ C1] rcu: rcu_preempt kthread starved for 10497 jiffies! g6401 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 166.636017][ C1] rcu: RCU grace-period kthread stack dump: [ 166.641903][ C1] rcu_preempt R running task 29104 10 2 0x80004000 [ 166.649787][ C1] Call Trace: [ 166.653160][ C1] __schedule+0x9a0/0xcc0 [ 166.657483][ C1] schedule+0x181/0x210 [ 166.661628][ C1] schedule_timeout+0x14f/0x240 [ 166.666463][ C1] ? run_local_timers+0x120/0x120 [ 166.671483][ C1] rcu_gp_kthread+0xed8/0x1770 [ 166.676243][ C1] kthread+0x332/0x350 [ 166.680294][ C1] ? rcu_report_qs_rsp+0x140/0x140 [ 166.685387][ C1] ? kthread_blkcg+0xe0/0xe0 [ 166.690224][ C1] ret_from_fork+0x24/0x30 [ 166.694637][ C1] NMI backtrace for cpu 1 [ 166.698950][ C1] CPU: 1 PID: 8230 Comm: syz-executor.0 Not tainted 5.4.0-syzkaller #0 [ 166.707164][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 166.717202][ C1] Call Trace: [ 166.720469][ C1] [ 166.723915][ C1] dump_stack+0x1fb/0x318 [ 166.728237][ C1] nmi_cpu_backtrace+0xaf/0x1a0 [ 166.733069][ C1] ? nmi_trigger_cpumask_backtrace+0x16d/0x290 [ 166.739208][ C1] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 166.745269][ C1] nmi_trigger_cpumask_backtrace+0x174/0x290 [ 166.751236][ C1] arch_trigger_cpumask_backtrace+0x10/0x20 [ 166.757199][ C1] rcu_dump_cpu_stacks+0x15a/0x220 [ 166.762301][ C1] rcu_sched_clock_irq+0xe25/0x1ad0 [ 166.767572][ C1] ? trace_hardirqs_off+0x74/0x80 [ 166.772595][ C1] update_process_times+0x12d/0x180 [ 166.777785][ C1] tick_sched_timer+0x263/0x420 [ 166.782620][ C1] ? tick_setup_sched_timer+0x3d0/0x3d0 [ 166.788150][ C1] __hrtimer_run_queues+0x403/0x840 [ 166.793353][ C1] hrtimer_interrupt+0x38c/0xda0 [ 166.798290][ C1] ? debug_smp_processor_id+0x9/0x20 [ 166.803570][ C1] smp_apic_timer_interrupt+0x109/0x280 [ 166.809200][ C1] apic_timer_interrupt+0xf/0x20 [ 166.814117][ C1] [ 166.817044][ C1] RIP: 0010:__memcg_kmem_uncharge+0x8/0x2e0 [ 166.822931][ C1] Code: 07 00 74 12 48 81 c3 08 02 00 00 48 89 df 4c 89 f6 e8 dc 7d ff ff 5b 41 5e 5d c3 0f 1f 80 00 00 00 00 55 48 89 e5 41 57 41 56 <41> 55 41 54 53 50 89 f3 49 89 fc 48 b8 00 00 00 00 00 fc ff df 4c [ 166.843057][ C1] RSP: 0018:ffffc90002357b08 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 166.851459][ C1] RAX: ffffffff81486ea4 RBX: ffffea00024a5cc0 RCX: ffff8880a8af01c0 [ 166.859415][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffea00024a5cc0 [ 166.867374][ C1] RBP: ffffc90002357b18 R08: dffffc0000000000 R09: fffffbfff1287025 [ 166.875330][ C1] R10: fffffbfff1287025 R11: 0000000000000000 R12: ffff88808f7d7920 [ 166.883287][ C1] R13: dffffc0000000000 R14: 1ffff11011efaf24 R15: ffff8880a89815e8 [ 166.891260][ C1] ? free_thread_stack+0x124/0x590 [ 166.896364][ C1] free_thread_stack+0x12e/0x590 [ 166.901288][ C1] put_task_stack+0xa3/0x130 [ 166.905884][ C1] finish_task_switch+0x3f1/0x550 [ 166.910899][ C1] __schedule+0x9a8/0xcc0 [ 166.915225][ C1] preempt_schedule_irq+0xc1/0x140 [ 166.920324][ C1] retint_kernel+0x1b/0x2b [ 166.924724][ C1] RIP: 0010:acct_update_integrals+0x169/0x1a0 [ 166.930772][ C1] Code: c1 e8 03 42 80 3c 20 00 74 0c 48 c7 c7 28 96 0a 89 e8 7b 14 3a 00 48 83 3d 9b 97 92 07 00 74 2d e8 6c 9d fe ff 4c 89 f7 57 9d <0f> 1f 44 00 00 5b 41 5c 41 5e 41 5f 5d c3 e8 54 9d fe ff 0f 0b e8 [ 166.950360][ C1] RSP: 0018:ffffc90002357d70 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff02 [ 166.958754][ C1] RAX: ffffffff8177fe94 RBX: ffff8880a8af01c0 RCX: ffff8880a8af01c0 [ 166.966708][ C1] RDX: 0000000000000000 RSI: ffffffff81496047 RDI: 0000000000000286 [ 166.974667][ C1] RBP: ffffc90002357d90 R08: ffff8880a8af0a18 R09: ffffed1015da6fcd [ 166.982632][ C1] R10: ffffed1015da6fcd R11: 0000000000000000 R12: dffffc0000000000 [ 166.990587][ C1] R13: 0000000000000000 R14: 0000000000000286 R15: 0000000000000000 [ 166.998558][ C1] ? acct_update_integrals+0x164/0x1a0 [ 167.004031][ C1] ? do_exit+0x267/0x2020 [ 167.008362][ C1] do_exit+0x267/0x2020 [ 167.012537][ C1] ? _raw_spin_unlock_irq+0x22/0x80 [ 167.017746][ C1] do_group_exit+0x15c/0x2b0 [ 167.022337][ C1] __do_sys_exit_group+0x17/0x20 [ 167.027263][ C1] __se_sys_exit_group+0x14/0x20 [ 167.032198][ C1] __x64_sys_exit_group+0x3b/0x40 [ 167.037209][ C1] do_syscall_64+0xf7/0x1c0 [ 167.041699][ C1] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 167.047574][ C1] RIP: 0033:0x45a679 [ 167.051458][ C1] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 167.071667][ C1] RSP: 002b:00007fff4bd41d18 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 167.080062][ C1] RAX: ffffffffffffffda RBX: 000000000000001e RCX: 000000000045a679 [ 167.088020][ C1] RDX: 0000000000414211 RSI: fffffffffffffff7 RDI: 0000000000000000 [ 167.095978][ C1] RBP: 0000000000000000 R08: ffffffffffffffff R09: 00007fff4bd41d70 [ 167.103937][ C1] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 167.111890][ C1] R13: 00007fff4bd41d70 R14: 0000000000000000 R15: 00007fff4bd41d80