[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 50.030393][ T27] audit: type=1800 audit(1575366300.258:25): pid=8358 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 50.051185][ T27] audit: type=1800 audit(1575366300.268:26): pid=8358 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 50.072964][ T27] audit: type=1800 audit(1575366300.268:27): pid=8358 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.1.56' (ECDSA) to the list of known hosts. 2019/12/03 09:45:08 fuzzer started 2019/12/03 09:45:10 dialing manager at 10.128.0.26:38907 2019/12/03 09:45:10 syscalls: 2697 2019/12/03 09:45:10 code coverage: enabled 2019/12/03 09:45:10 comparison tracing: enabled 2019/12/03 09:45:10 extra coverage: extra coverage is not supported by the kernel 2019/12/03 09:45:10 setuid sandbox: enabled 2019/12/03 09:45:10 namespace sandbox: enabled 2019/12/03 09:45:10 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/03 09:45:10 fault injection: enabled 2019/12/03 09:45:10 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/03 09:45:10 net packet injection: enabled 2019/12/03 09:45:10 net device setup: enabled 2019/12/03 09:45:10 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/12/03 09:45:10 devlink PCI setup: PCI device 0000:00:10.0 is not available 09:45:11 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x1, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0x76e0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="3400000010000104000009040000000000000000", @ANYRES32=r5, @ANYBLOB="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"], 0x34}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_FLAGS={0x8, 0x8, 0x3778bcbaae6b531f}, @IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x34}}, 0x0) 09:45:11 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) tkill(r1, 0x401004000000016) syzkaller login: [ 61.252910][ T8529] IPVS: ftp: loaded support on port[0] = 21 [ 61.278400][ T8531] IPVS: ftp: loaded support on port[0] = 21 09:45:11 executing program 2: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) [ 61.529510][ T8529] chnl_net:caif_netlink_parms(): no params data found [ 61.547212][ T8531] chnl_net:caif_netlink_parms(): no params data found [ 61.602369][ T8535] IPVS: ftp: loaded support on port[0] = 21 [ 61.613653][ T8531] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.622995][ T8531] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.631609][ T8531] device bridge_slave_0 entered promiscuous mode 09:45:11 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @mss, @mss, @timestamp, @timestamp], 0x21be) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000240)="76fd0ba8a34e000000f7ff9701dc4953d4d37807e705ebe1d64024b2ad00000000000000003f8c3c8d2d418f72fa4811a6d1bc46a84c54823af1f35d0500143160fc7397e6d939ddcde6ad4104db8c5f894881cbedadd86ab4e3c611e9c32c", 0xffffffffffffff9b, 0x400c081, 0x0, 0xffffff9a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 61.663919][ T8531] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.671093][ T8531] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.686377][ T8531] device bridge_slave_1 entered promiscuous mode [ 61.737802][ T8529] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.745924][ T8529] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.755476][ T8529] device bridge_slave_0 entered promiscuous mode [ 61.787494][ T8531] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.815263][ T8529] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.822450][ T8529] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.831881][ T8529] device bridge_slave_1 entered promiscuous mode [ 61.856231][ T8531] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.924217][ T8529] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.950845][ T8531] team0: Port device team_slave_0 added [ 61.964927][ T8531] team0: Port device team_slave_1 added [ 61.972026][ T8529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.988396][ T8538] IPVS: ftp: loaded support on port[0] = 21 [ 62.005012][ T8535] chnl_net:caif_netlink_parms(): no params data found 09:45:12 executing program 4: clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000001a000cfaff000c0000000200000000"], &(0x7f00000002c0)=""/236, 0x19, 0xec, 0x8}, 0x20) [ 62.048506][ T8529] team0: Port device team_slave_0 added [ 62.087800][ T8529] team0: Port device team_slave_1 added [ 62.156281][ T8531] device hsr_slave_0 entered promiscuous mode 09:45:12 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) ioctl$int_out(r0, 0x100810080804523, &(0x7f0000000040)) [ 62.253467][ T8531] device hsr_slave_1 entered promiscuous mode [ 62.381389][ T8540] IPVS: ftp: loaded support on port[0] = 21 [ 62.446201][ T8529] device hsr_slave_0 entered promiscuous mode [ 62.523448][ T8529] device hsr_slave_1 entered promiscuous mode [ 62.583024][ T8529] debugfs: Directory 'hsr0' with parent '/' already present! [ 62.614853][ T8535] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.623991][ T8535] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.634143][ T8535] device bridge_slave_0 entered promiscuous mode [ 62.664617][ T8535] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.674173][ T8535] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.682575][ T8535] device bridge_slave_1 entered promiscuous mode [ 62.715349][ T8535] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.729988][ T8535] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.747261][ T8542] IPVS: ftp: loaded support on port[0] = 21 [ 62.776409][ T8529] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.820811][ T8529] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.867154][ T8529] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.925728][ T8531] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 62.987494][ T8531] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.035264][ T8531] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.079253][ T8531] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.126940][ T8529] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.213657][ T8535] team0: Port device team_slave_0 added [ 63.223637][ T8535] team0: Port device team_slave_1 added [ 63.295983][ T8535] device hsr_slave_0 entered promiscuous mode [ 63.343310][ T8535] device hsr_slave_1 entered promiscuous mode [ 63.412998][ T8535] debugfs: Directory 'hsr0' with parent '/' already present! [ 63.466308][ T8538] chnl_net:caif_netlink_parms(): no params data found [ 63.591801][ T8538] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.601141][ T8538] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.609948][ T8538] device bridge_slave_0 entered promiscuous mode [ 63.627996][ T8540] chnl_net:caif_netlink_parms(): no params data found [ 63.647008][ T8535] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.675213][ T8535] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.726060][ T8538] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.733462][ T8538] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.742409][ T8538] device bridge_slave_1 entered promiscuous mode [ 63.777854][ T8535] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.826463][ T8535] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.903914][ T8540] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.911419][ T8540] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.920948][ T8540] device bridge_slave_0 entered promiscuous mode [ 63.931269][ T8540] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.938918][ T8540] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.947837][ T8540] device bridge_slave_1 entered promiscuous mode [ 63.992723][ T8538] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.011346][ T8531] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.033830][ T8542] chnl_net:caif_netlink_parms(): no params data found [ 64.052008][ T8538] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.070283][ T8531] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.089209][ T8540] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.101872][ T8540] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.116004][ T3186] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.127015][ T3186] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.148013][ T8538] team0: Port device team_slave_0 added [ 64.174341][ T8538] team0: Port device team_slave_1 added [ 64.217175][ T8529] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.225744][ T3344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.235802][ T3344] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.245184][ T3344] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.252488][ T3344] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.261245][ T3344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.270398][ T3344] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.279844][ T3344] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.287123][ T3344] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.294937][ T3344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.310643][ T3344] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.324095][ T8540] team0: Port device team_slave_0 added [ 64.331665][ T8542] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.341056][ T8542] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.349950][ T8542] device bridge_slave_0 entered promiscuous mode [ 64.406079][ T8538] device hsr_slave_0 entered promiscuous mode [ 64.473416][ T8538] device hsr_slave_1 entered promiscuous mode [ 64.513056][ T8538] debugfs: Directory 'hsr0' with parent '/' already present! [ 64.537886][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.547130][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.556285][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.564781][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.575019][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.585007][ T8540] team0: Port device team_slave_1 added [ 64.592370][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.601137][ T8542] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.609252][ T8542] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.618831][ T8542] device bridge_slave_1 entered promiscuous mode [ 64.716663][ T8540] device hsr_slave_0 entered promiscuous mode [ 64.773422][ T8540] device hsr_slave_1 entered promiscuous mode [ 64.813110][ T8540] debugfs: Directory 'hsr0' with parent '/' already present! [ 64.828951][ T8529] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.841187][ T3344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.850225][ T3344] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.859233][ T3344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.868396][ T3344] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.877104][ T3344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.886677][ T3344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.908011][ T8531] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.921250][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.931222][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.941400][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.949797][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.959518][ T8542] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.975010][ T8542] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.017059][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.027130][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.037423][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.046520][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.054406][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.063044][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.077483][ T8538] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 65.136653][ T8535] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.166158][ T8542] team0: Port device team_slave_0 added [ 65.181042][ T8538] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 65.236276][ T8540] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 65.286272][ T8542] team0: Port device team_slave_1 added [ 65.292411][ T8540] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 65.337424][ T8545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.347327][ T8545] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.356298][ T8545] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.365013][ T8545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.376859][ T8545] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.385888][ T8545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.395085][ T8545] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.404266][ T8538] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 65.436424][ T8538] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 65.490182][ T8531] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.507689][ T8540] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 65.536882][ T8540] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 65.585195][ T8548] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.594872][ T8548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.604826][ T8548] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.615029][ T8548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.623682][ T8548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.634888][ T8535] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.686258][ T8542] device hsr_slave_0 entered promiscuous mode [ 65.753553][ T8542] device hsr_slave_1 entered promiscuous mode [ 65.793050][ T8542] debugfs: Directory 'hsr0' with parent '/' already present! [ 65.802404][ T3344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.811509][ T3344] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.820888][ T3344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.829873][ T3344] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.839029][ T3344] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.846645][ T3344] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.857256][ T8529] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.891011][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.911741][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.921677][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.931757][ T2707] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.939044][ T2707] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.968359][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.988456][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.999729][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.009976][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.019444][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.029040][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.039685][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.074429][ T8548] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.092446][ T8548] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.113618][ T8548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.123810][ T8548] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.134073][ T8548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.144702][ T8548] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.157684][ T8529] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.206985][ T8538] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.227889][ T8538] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.245306][ T8535] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.301417][ T8535] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.132803][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 171.139719][ C1] rcu: 1-....: (10499 ticks this GP) idle=972/1/0x4000000000000002 softirq=11646/11646 fqs=2715 [ 171.151453][ C1] (t=10500 jiffies g=7357 q=511) [ 171.156734][ C1] rcu: rcu_preempt kthread starved for 5013 jiffies! g7357 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 171.167940][ C1] rcu: RCU grace-period kthread stack dump: [ 171.173843][ C1] rcu_preempt R running task 29032 10 2 0x80004000 [ 171.182276][ C1] Call Trace: [ 171.185687][ C1] __schedule+0x9a0/0xcc0 [ 171.190904][ C1] schedule+0x181/0x210 [ 171.195242][ C1] schedule_timeout+0x14f/0x240 [ 171.200173][ C1] ? run_local_timers+0x120/0x120 [ 171.207369][ C1] rcu_gp_kthread+0xed8/0x1770 [ 171.212228][ C1] kthread+0x332/0x350 [ 171.216285][ C1] ? rcu_report_qs_rsp+0x140/0x140 [ 171.221737][ C1] ? kthread_blkcg+0xe0/0xe0 [ 171.226382][ C1] ret_from_fork+0x24/0x30 [ 171.230805][ C1] NMI backtrace for cpu 1 [ 171.235216][ C1] CPU: 1 PID: 8550 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0 [ 171.243628][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 171.254210][ C1] Call Trace: [ 171.257489][ C1] [ 171.260334][ C1] dump_stack+0x1fb/0x318 [ 171.264803][ C1] nmi_cpu_backtrace+0xaf/0x1a0 [ 171.269734][ C1] ? nmi_trigger_cpumask_backtrace+0x16d/0x290 [ 171.290211][ C1] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 171.296535][ C1] nmi_trigger_cpumask_backtrace+0x174/0x290 [ 171.304410][ C1] arch_trigger_cpumask_backtrace+0x10/0x20 [ 171.310933][ C1] rcu_dump_cpu_stacks+0x15a/0x220 [ 171.316876][ C1] rcu_sched_clock_irq+0xe25/0x1ad0 [ 171.322964][ C1] ? trace_hardirqs_off+0x74/0x80 [ 171.328165][ C1] update_process_times+0x12d/0x180 [ 171.334078][ C1] tick_sched_timer+0x263/0x420 [ 171.338929][ C1] ? tick_setup_sched_timer+0x3d0/0x3d0 [ 171.344672][ C1] __hrtimer_run_queues+0x403/0x840 [ 171.350142][ C1] hrtimer_interrupt+0x38c/0xda0 [ 171.355089][ C1] ? debug_smp_processor_id+0x9/0x20 [ 171.360369][ C1] smp_apic_timer_interrupt+0x109/0x280 [ 171.365922][ C1] apic_timer_interrupt+0xf/0x20 [ 171.371219][ C1] [ 171.374173][ C1] RIP: 0010:__memcg_kmem_uncharge+0xd/0x2e0 [ 171.380340][ C1] Code: 81 c3 08 02 00 00 48 89 df 4c 89 f6 e8 dc 7d ff ff 5b 41 5e 5d c3 0f 1f 80 00 00 00 00 55 48 89 e5 41 57 41 56 41 55 41 54 53 <50> 89 f3 49 89 fc 48 b8 00 00 00 00 00 fc ff df 4c 8d 77 38 4d 89 [ 171.399972][ C1] RSP: 0018:ffffc900023c7850 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 171.408481][ C1] RAX: ffffffff81486ea4 RBX: ffffea0002412700 RCX: ffff8880930c2280 [ 171.416448][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffea0002412700 [ 171.425304][ C1] RBP: ffffc900023c7878 R08: dffffc0000000000 R09: fffffbfff120248a [ 171.433270][ C1] R10: fffffbfff120248a R11: 0000000000000000 R12: ffff88809a9bd920 [ 171.442240][ C1] R13: dffffc0000000000 R14: 1ffff11013537b24 R15: ffff88808f761668 [ 171.450729][ C1] ? free_thread_stack+0x124/0x590 [ 171.455953][ C1] free_thread_stack+0x12e/0x590 [ 171.460891][ C1] put_task_stack+0xa3/0x130 [ 171.465478][ C1] finish_task_switch+0x3f1/0x550 [ 171.472128][ C1] __schedule+0x9a8/0xcc0 [ 171.476552][ C1] ? ___preempt_schedule+0x16/0x18 [ 171.481681][ C1] preempt_schedule+0xdb/0x120 [ 171.487535][ C1] ___preempt_schedule+0x16/0x18 [ 171.492711][ C1] ? page_poisoning_enabled+0x1c/0x30 [ 171.498109][ C1] prep_new_page+0x161/0x2e0 [ 171.502707][ C1] get_page_from_freelist+0x850/0xaa0 [ 171.508082][ C1] __alloc_pages_nodemask+0x264/0x5d0 [ 171.513471][ C1] alloc_pages_vma+0x94a/0xd50 [ 171.518752][ C1] do_huge_pmd_anonymous_page+0x883/0xe50 [ 171.524466][ C1] handle_mm_fault+0x2017/0x2890 [ 171.529419][ C1] do_user_addr_fault+0x589/0xaf0 [ 171.534450][ C1] __do_page_fault+0xd3/0x1f0 [ 171.539207][ C1] do_page_fault+0x99/0xb0 [ 171.544053][ C1] page_fault+0x39/0x40 [ 171.548290][ C1] RIP: 0033:0x4418d1 [ 171.552173][ C1] Code: 2e 0f 1f 84 00 00 00 00 00 48 83 fa 20 48 89 f8 73 77 f6 c2 01 74 0b 0f b6 0e 88 0f 48 ff c6 48 ff c7 f6 c2 02 74 12 0f b7 0e <66> 89 0f 48 83 c6 02 48 83 c7 02 0f 1f 40 00 f6 c2 04 74 0c 8b 0e [ 171.572128][ C1] RSP: 002b:00007fffd0162458 EFLAGS: 00010202 [ 171.578226][ C1] RAX: 00000000200009c0 RBX: 0000000000000000 RCX: 000000000000642f [ 171.586203][ C1] RDX: 0000000000000012 RSI: 0000000000760020 RDI: 00000000200009c0 [ 171.594168][ C1] RBP: 0000000000760000 R08: 0000000000000000 R09: 0000000000000004 [ 171.602302][ C1] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000001 [ 171.610624][ C1] R13: 00007fffd0162640 R14: 0000000000760008 R15: 00007fffd0162650