[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 44.852668][ T26] audit: type=1800 audit(1575406504.116:25): pid=8154 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 44.871884][ T26] audit: type=1800 audit(1575406504.116:26): pid=8154 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 44.917314][ T26] audit: type=1800 audit(1575406504.116:27): pid=8154 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.123' (ECDSA) to the list of known hosts. 2019/12/03 20:55:11 fuzzer started 2019/12/03 20:55:13 dialing manager at 10.128.0.26:42111 2019/12/03 20:55:13 syscalls: 2689 2019/12/03 20:55:13 code coverage: enabled 2019/12/03 20:55:13 comparison tracing: enabled 2019/12/03 20:55:13 extra coverage: extra coverage is not supported by the kernel 2019/12/03 20:55:13 setuid sandbox: enabled 2019/12/03 20:55:13 namespace sandbox: enabled 2019/12/03 20:55:13 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/03 20:55:13 fault injection: enabled 2019/12/03 20:55:13 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/03 20:55:13 net packet injection: enabled 2019/12/03 20:55:13 net device setup: enabled 2019/12/03 20:55:13 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/12/03 20:55:13 devlink PCI setup: PCI device 0000:00:10.0 is not available 20:55:14 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = gettid() sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x0, 0x7, 0x1, 0x0, 0x0, {0x0, 0xf0ffff}, [@typed={0x8, 0x100000001, @pid=r1}]}, 0x1c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = gettid() sendmsg$nl_netfilter(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x2, 0x7, 0x1, 0x0, 0x0, {0x0, 0xf0ffff}, [@typed={0x8, 0x100000001, @pid=r3}]}, 0x1c}}, 0x0) 20:55:14 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) perf_event_open(0x0, r1, 0x3, r0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1000000004, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a3a, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x3ff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet6(0xa, 0x2, 0x0) dup2(r2, r3) r4 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r4, &(0x7f00000000c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24) listen(r4, 0x9) fcntl$setsig(r2, 0xa, 0x3b) lsetxattr$security_selinux(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='security.selinux\x00', &(0x7f00000002c0)='system_u:object_r:lib_t:s0\x00', 0x1b, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000009000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) r5 = inotify_init1(0x0) fcntl$setown(r5, 0x8, 0xffffffffffffffff) syz_genetlink_get_family_id$SEG6(&(0x7f0000000200)='SEG6\x00') fcntl$getownex(r5, 0x10, &(0x7f0000000100)={0x0, 0x0}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pbkey\x00', 0x6c001, 0x0) getpid() clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) process_vm_readv(r6, &(0x7f0000000380)=[{&(0x7f0000000340)=""/61, 0x3d}], 0x1, &(0x7f0000002540)=[{&(0x7f00000003c0)=""/63, 0x7ffff002}], 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3a8, 0x0) syzkaller login: [ 55.309072][ T8321] IPVS: ftp: loaded support on port[0] = 21 [ 55.413004][ T8323] IPVS: ftp: loaded support on port[0] = 21 20:55:14 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) dup2(r0, r1) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) [ 55.491667][ T8321] chnl_net:caif_netlink_parms(): no params data found [ 55.600967][ T8321] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.623493][ T8321] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.631580][ T8321] device bridge_slave_0 entered promiscuous mode [ 55.666815][ T8321] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.677211][ T8327] IPVS: ftp: loaded support on port[0] = 21 [ 55.683497][ T8321] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.691249][ T8321] device bridge_slave_1 entered promiscuous mode [ 55.711970][ T8321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.724001][ T8321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.751642][ T8323] chnl_net:caif_netlink_parms(): no params data found [ 55.803539][ T8321] team0: Port device team_slave_0 added 20:55:15 executing program 3: pipe(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x802, 0x0) bind$inet(r2, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000040)=[{{0x0, 0x191e7216d1513356, 0x0, 0x0, 0x0, 0x122}}], 0x1fde89c074144f, 0x43, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 55.846986][ T8321] team0: Port device team_slave_1 added [ 55.858414][ T8323] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.867362][ T8323] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.875387][ T8323] device bridge_slave_0 entered promiscuous mode [ 55.906445][ T8323] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.915352][ T8323] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.923194][ T8323] device bridge_slave_1 entered promiscuous mode [ 55.961861][ T8327] chnl_net:caif_netlink_parms(): no params data found [ 56.016149][ T8321] device hsr_slave_0 entered promiscuous mode [ 56.053781][ T8321] device hsr_slave_1 entered promiscuous mode 20:55:15 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000080)=[{}, {}], 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$can_raw(r0, &(0x7f00000001c0), 0x10) setsockopt(r0, 0x65, 0x1, 0x0, 0x0) [ 56.211934][ T8330] IPVS: ftp: loaded support on port[0] = 21 [ 56.227805][ T8323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.278303][ T8323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.300053][ T8327] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.308276][ T8327] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.316496][ T8327] device bridge_slave_0 entered promiscuous mode [ 56.338778][ T8327] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.346920][ T8327] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.356871][ T8327] device bridge_slave_1 entered promiscuous mode [ 56.380528][ T8332] IPVS: ftp: loaded support on port[0] = 21 [ 56.390950][ T8323] team0: Port device team_slave_0 added [ 56.400778][ T8323] team0: Port device team_slave_1 added [ 56.421740][ T8327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link 20:55:15 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="0d00000000002a73c11115d81839408fa3a3ba27660199159dff51120000000000000005e260c650b5edacdec6fdb69d5a415918beba0c51a72f0100d9441e2173a65a48530607c748dc7fc4f4b52b07155fcb2aa544534d14dc0acc24d6c010628ab7073496678d306bed5163f10e2e", 0x70}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 56.458122][ T8321] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.532801][ T8327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.567327][ T8321] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.635837][ T8321] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 56.676314][ T8327] team0: Port device team_slave_0 added [ 56.682146][ T8321] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 56.749157][ T8327] team0: Port device team_slave_1 added [ 56.781501][ T8334] IPVS: ftp: loaded support on port[0] = 21 [ 56.815350][ T8323] device hsr_slave_0 entered promiscuous mode [ 56.853691][ T8323] device hsr_slave_1 entered promiscuous mode [ 56.903637][ T8323] debugfs: Directory 'hsr0' with parent '/' already present! [ 56.965390][ T8327] device hsr_slave_0 entered promiscuous mode [ 57.013831][ T8327] device hsr_slave_1 entered promiscuous mode [ 57.103577][ T8327] debugfs: Directory 'hsr0' with parent '/' already present! [ 57.192294][ T8330] chnl_net:caif_netlink_parms(): no params data found [ 57.238891][ T8327] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 57.300668][ T8327] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 57.380220][ T8327] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 57.427438][ T8327] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 57.556274][ T8330] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.564544][ T8330] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.572399][ T8330] device bridge_slave_0 entered promiscuous mode [ 57.580112][ T8323] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 57.647120][ T8323] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 57.718790][ T8334] chnl_net:caif_netlink_parms(): no params data found [ 57.730315][ T8332] chnl_net:caif_netlink_parms(): no params data found [ 57.738480][ T8330] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.748786][ T8330] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.756717][ T8330] device bridge_slave_1 entered promiscuous mode [ 57.770143][ T8323] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 57.828251][ T8321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.856752][ T8323] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 57.937684][ T8330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.949592][ T8330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.966724][ T8334] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.973965][ T8334] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.981918][ T8334] device bridge_slave_0 entered promiscuous mode [ 57.989991][ T8334] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.997176][ T8334] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.005244][ T8334] device bridge_slave_1 entered promiscuous mode [ 58.028614][ T8332] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.036298][ T8332] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.044431][ T8332] device bridge_slave_0 entered promiscuous mode [ 58.061317][ T2912] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.069948][ T2912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.086544][ T8321] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.094798][ T8334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.109089][ T8330] team0: Port device team_slave_0 added [ 58.115391][ T8332] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.122457][ T8332] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.130778][ T8332] device bridge_slave_1 entered promiscuous mode [ 58.158073][ T8334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.168713][ T8330] team0: Port device team_slave_1 added [ 58.182389][ T2722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.191151][ T2722] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.199661][ T2722] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.206979][ T2722] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.222439][ T8332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.235851][ T8332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.259314][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.267953][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.276600][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.285174][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.292215][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.319352][ T8332] team0: Port device team_slave_0 added [ 58.327258][ T2912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.336750][ T2912] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.364600][ T8334] team0: Port device team_slave_0 added [ 58.372267][ T8332] team0: Port device team_slave_1 added [ 58.386290][ T2722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.395387][ T2722] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.404310][ T2722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.412774][ T2722] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.465704][ T8330] device hsr_slave_0 entered promiscuous mode [ 58.503778][ T8330] device hsr_slave_1 entered promiscuous mode [ 58.563547][ T8330] debugfs: Directory 'hsr0' with parent '/' already present! [ 58.574871][ T8334] team0: Port device team_slave_1 added [ 58.583433][ T8323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.594705][ T2722] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.602448][ T2722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.611602][ T2722] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.685795][ T8334] device hsr_slave_0 entered promiscuous mode [ 58.733935][ T8334] device hsr_slave_1 entered promiscuous mode [ 58.783577][ T8334] debugfs: Directory 'hsr0' with parent '/' already present! [ 58.808059][ T8321] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.820749][ T8321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.831134][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.839040][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.847488][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.856089][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.877325][ T8327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.885512][ T8323] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.892317][ T8330] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 58.996176][ T8332] device hsr_slave_0 entered promiscuous mode [ 59.034510][ T8332] device hsr_slave_1 entered promiscuous mode [ 59.093603][ T8332] debugfs: Directory 'hsr0' with parent '/' already present! [ 59.125281][ T8330] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 59.156924][ T8330] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 59.205490][ T2912] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.213147][ T2912] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.222760][ T2912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.232543][ T2912] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.243010][ T2912] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.250118][ T2912] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.258614][ T2912] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.266471][ T2912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.276827][ T2912] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.288952][ T8321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.299119][ T8327] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.308118][ T2722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.320836][ T2722] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.330186][ T2722] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.337512][ T2722] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.345504][ T8330] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 59.433191][ T2722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.443546][ T2722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.452494][ T2722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.463114][ T2722] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.474631][ T2722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.484198][ T2722] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.492785][ T2722] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.500252][ T2722] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.508516][ T2722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.517958][ T2722] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.526807][ T2722] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.534291][ T2722] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.542127][ T2722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.569559][ T8323] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 59.581627][ T8323] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.598663][ T2722] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.606804][ T2722] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.615586][ T2722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.625426][ T2722] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.634912][ T2722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.644993][ T2722] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.654089][ T2722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.662672][ T2722] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.671123][ T2722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.693471][ T8334] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 164.673339][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 164.680115][ C1] rcu: 1-...!: (10498 ticks this GP) idle=a4e/1/0x4000000000000002 softirq=11393/11393 fqs=2 [ 164.690620][ C1] (t=10500 jiffies g=6341 q=97) [ 164.695634][ C1] rcu: rcu_preempt kthread starved for 10496 jiffies! g6341 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 164.706715][ C1] rcu: RCU grace-period kthread stack dump: [ 164.712588][ C1] rcu_preempt R running task 29104 10 2 0x80004000 [ 164.724639][ C1] Call Trace: [ 164.727921][ C1] __schedule+0x9a0/0xcc0 [ 164.732248][ C1] schedule+0x181/0x210 [ 164.736393][ C1] schedule_timeout+0x14f/0x240 [ 164.741229][ C1] ? run_local_timers+0x120/0x120 [ 164.746246][ C1] rcu_gp_kthread+0xed8/0x1770 [ 164.751019][ C1] kthread+0x332/0x350 [ 164.755082][ C1] ? rcu_report_qs_rsp+0x140/0x140 [ 164.760204][ C1] ? kthread_blkcg+0xe0/0xe0 [ 164.764782][ C1] ret_from_fork+0x24/0x30 [ 164.769196][ C1] NMI backtrace for cpu 1 [ 164.773513][ C1] CPU: 1 PID: 8321 Comm: syz-executor.0 Not tainted 5.4.0-syzkaller #0 [ 164.781743][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 164.791781][ C1] Call Trace: [ 164.795137][ C1] [ 164.797980][ C1] dump_stack+0x1fb/0x318 [ 164.802300][ C1] nmi_cpu_backtrace+0xaf/0x1a0 [ 164.807140][ C1] ? nmi_trigger_cpumask_backtrace+0x16d/0x290 [ 164.813291][ C1] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 164.819345][ C1] nmi_trigger_cpumask_backtrace+0x174/0x290 [ 164.825316][ C1] arch_trigger_cpumask_backtrace+0x10/0x20 [ 164.831190][ C1] rcu_dump_cpu_stacks+0x15a/0x220 [ 164.836293][ C1] rcu_sched_clock_irq+0xe25/0x1ad0 [ 164.841479][ C1] ? trace_hardirqs_off+0x74/0x80 [ 164.846491][ C1] update_process_times+0x12d/0x180 [ 164.851711][ C1] tick_sched_timer+0x263/0x420 [ 164.856547][ C1] ? tick_setup_sched_timer+0x3d0/0x3d0 [ 164.862078][ C1] __hrtimer_run_queues+0x403/0x840 [ 164.867281][ C1] hrtimer_interrupt+0x38c/0xda0 [ 164.872225][ C1] ? debug_smp_processor_id+0x9/0x20 [ 164.877501][ C1] smp_apic_timer_interrupt+0x109/0x280 [ 164.883160][ C1] apic_timer_interrupt+0xf/0x20 [ 164.888086][ C1] [ 164.891039][ C1] RIP: 0010:__memcg_kmem_uncharge+0x42/0x2e0 [ 164.897003][ C1] Code: 00 00 fc ff df 4c 8d 77 38 4d 89 f5 49 c1 ed 03 41 80 7c 05 00 00 74 08 4c 89 f7 e8 d8 f4 fa ff 4d 8b 3e b8 01 00 00 00 89 d9 e0 4d 85 ff 0f 84 bf 01 00 00 4c 39 3d 04 ce 8c 07 0f 84 6e 02 [ 164.916757][ C1] RSP: 0018:ffffc90002127b90 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 164.925249][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000000 [ 164.933212][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffea00029b7680 [ 164.941172][ C1] RBP: ffffc90002127bc0 R08: dffffc0000000000 R09: fffffbfff12877ed [ 164.949134][ C1] R10: fffffbfff12877ed R11: 0000000000000000 R12: ffffea00029b7680 [ 164.957089][ C1] R13: 1ffffd4000536ed7 R14: ffffea00029b76b8 R15: 0000000000000000 [ 164.965090][ C1] ? free_thread_stack+0x124/0x590 [ 164.970406][ C1] free_thread_stack+0x12e/0x590 [ 164.975444][ C1] put_task_stack+0xa3/0x130 [ 164.980023][ C1] finish_task_switch+0x3f1/0x550 [ 164.985040][ C1] __schedule+0x9a8/0xcc0 [ 164.989369][ C1] schedule+0x181/0x210 [ 164.993510][ C1] do_nanosleep+0x1d0/0x6c0 [ 164.998098][ C1] hrtimer_nanosleep+0x3a6/0x5b0 [ 165.003026][ C1] ? trace_hrtimer_expire_exit+0x2d0/0x2d0 [ 165.008821][ C1] __x64_sys_nanosleep+0x186/0x1d0 [ 165.013923][ C1] do_syscall_64+0xf7/0x1c0 [ 165.018416][ C1] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 165.024295][ C1] RIP: 0033:0x458b20 [ 165.028175][ C1] Code: c0 5b 5d c3 66 0f 1f 44 00 00 8b 04 24 48 83 c4 18 5b 5d c3 66 0f 1f 44 00 00 83 3d 11 fe 61 00 00 75 14 b8 23 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 d4 d1 fb ff c3 48 83 ec 08 e8 ea 46 00 00 [ 165.047765][ C1] RSP: 002b:00007ffdd5fa50f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000023 [ 165.056166][ C1] RAX: ffffffffffffffda RBX: 000000000000e904 RCX: 0000000000458b20 [ 165.064738][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007ffdd5fa5100 [ 165.072695][ C1] RBP: 0000000000000002 R08: 0000000000000001 R09: 0000000000edb940 [ 165.080811][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 165.088778][ C1] R13: 00007ffdd5fa5150 R14: 000000000000e8ef R15: 00007ffdd5fa5160