[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 49.664202][ T26] audit: type=1800 audit(1578455657.363:25): pid=8282 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 49.683272][ T26] audit: type=1800 audit(1578455657.363:26): pid=8282 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 49.727893][ T26] audit: type=1800 audit(1578455657.363:27): pid=8282 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.1.8' (ECDSA) to the list of known hosts. 2020/01/08 03:54:30 fuzzer started 2020/01/08 03:54:31 dialing manager at 10.128.0.26:35703 2020/01/08 03:54:31 syscalls: 2824 2020/01/08 03:54:31 code coverage: enabled 2020/01/08 03:54:31 comparison tracing: enabled 2020/01/08 03:54:31 extra coverage: enabled 2020/01/08 03:54:31 setuid sandbox: enabled 2020/01/08 03:54:31 namespace sandbox: enabled 2020/01/08 03:54:31 Android sandbox: /sys/fs/selinux/policy does not exist 2020/01/08 03:54:31 fault injection: enabled 2020/01/08 03:54:31 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/01/08 03:54:31 net packet injection: enabled 2020/01/08 03:54:31 net device setup: enabled 2020/01/08 03:54:31 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/01/08 03:54:31 devlink PCI setup: PCI device 0000:00:10.0 is not available 03:54:32 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_int(r0, 0x0, 0xa, 0x0, &(0x7f0000000040)) 03:54:32 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40045108, &(0x7f0000de3000)={{}, {0x0, 0xff}}) syzkaller login: [ 65.072030][ T8449] IPVS: ftp: loaded support on port[0] = 21 [ 65.223309][ T8449] chnl_net:caif_netlink_parms(): no params data found [ 65.283708][ T8452] IPVS: ftp: loaded support on port[0] = 21 [ 65.312249][ T8449] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.320020][ T8449] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.328065][ T8449] device bridge_slave_0 entered promiscuous mode [ 65.337705][ T8449] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.344796][ T8449] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.352904][ T8449] device bridge_slave_1 entered promiscuous mode 03:54:33 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xa7}, {&(0x7f0000003580)=""/4096, 0x7fffef59}], 0x2}}], 0x1, 0x0, 0x0) [ 65.376835][ T8449] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.389220][ T8449] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.418357][ T8449] team0: Port device team_slave_0 added [ 65.427312][ T8449] team0: Port device team_slave_1 added [ 65.499758][ T8449] device hsr_slave_0 entered promiscuous mode 03:54:33 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000002f80)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000740)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) [ 65.615175][ T8449] device hsr_slave_1 entered promiscuous mode [ 65.673156][ T8454] IPVS: ftp: loaded support on port[0] = 21 [ 65.804272][ T8457] IPVS: ftp: loaded support on port[0] = 21 03:54:33 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x6c, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0xfc000000]}, 0x8000}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast2}}}}]}]}, 0x6c}}, 0x0) [ 65.878031][ T8452] chnl_net:caif_netlink_parms(): no params data found [ 66.006820][ T8449] netdevsim netdevsim0 netdevsim0: renamed from eth0 03:54:33 executing program 5: r0 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) getpid() dup(0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) shutdown(r1, 0x1) recvmsg(r1, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) fcntl$setstatus(r1, 0x4, 0x2400) [ 66.057271][ T8449] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 66.185088][ T8449] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 66.193660][ T8460] IPVS: ftp: loaded support on port[0] = 21 [ 66.220880][ T8449] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 66.269907][ T8454] chnl_net:caif_netlink_parms(): no params data found [ 66.294739][ T8452] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.302056][ T8452] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.309723][ T8452] device bridge_slave_0 entered promiscuous mode [ 66.318207][ T8452] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.325338][ T8452] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.332849][ T8452] device bridge_slave_1 entered promiscuous mode [ 66.367887][ T8462] IPVS: ftp: loaded support on port[0] = 21 [ 66.387701][ T8452] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.428877][ T8452] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.439109][ T8454] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.446603][ T8454] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.454211][ T8454] device bridge_slave_0 entered promiscuous mode [ 66.464364][ T8454] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.471749][ T8454] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.479331][ T8454] device bridge_slave_1 entered promiscuous mode [ 66.544538][ T8452] team0: Port device team_slave_0 added [ 66.562575][ T8454] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.573462][ T8457] chnl_net:caif_netlink_parms(): no params data found [ 66.583601][ T8452] team0: Port device team_slave_1 added [ 66.637127][ T8452] device hsr_slave_0 entered promiscuous mode [ 66.685437][ T8452] device hsr_slave_1 entered promiscuous mode [ 66.735411][ T8452] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.743206][ T8452] Cannot create hsr debugfs directory [ 66.750246][ T8454] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.800073][ T8457] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.807292][ T8457] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.814873][ T8457] device bridge_slave_0 entered promiscuous mode [ 66.831725][ T8454] team0: Port device team_slave_0 added [ 66.858775][ T8457] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.866741][ T8457] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.874242][ T8457] device bridge_slave_1 entered promiscuous mode [ 66.889902][ T8454] team0: Port device team_slave_1 added [ 66.919385][ T8457] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.951002][ T8457] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.977514][ T8462] chnl_net:caif_netlink_parms(): no params data found [ 67.057921][ T8454] device hsr_slave_0 entered promiscuous mode [ 67.095203][ T8454] device hsr_slave_1 entered promiscuous mode [ 67.135192][ T8454] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.142768][ T8454] Cannot create hsr debugfs directory [ 67.179264][ T8460] chnl_net:caif_netlink_parms(): no params data found [ 67.197676][ T8457] team0: Port device team_slave_0 added [ 67.218577][ T8449] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.234760][ T8457] team0: Port device team_slave_1 added [ 67.254100][ T8452] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 67.320122][ T2782] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.328485][ T2782] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.337079][ T8452] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 67.404273][ T8462] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.411551][ T8462] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.419451][ T8462] device bridge_slave_0 entered promiscuous mode [ 67.427375][ T8452] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 67.470563][ T8452] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 67.532942][ T8449] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.576666][ T8457] device hsr_slave_0 entered promiscuous mode [ 67.625426][ T8457] device hsr_slave_1 entered promiscuous mode [ 67.675060][ T8457] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.675091][ T8457] Cannot create hsr debugfs directory [ 67.694305][ T8462] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.702324][ T8462] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.710317][ T8462] device bridge_slave_1 entered promiscuous mode [ 67.749472][ T8460] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.756712][ T8460] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.764555][ T8460] device bridge_slave_0 entered promiscuous mode [ 67.780754][ T8460] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.789012][ T8460] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.797184][ T8460] device bridge_slave_1 entered promiscuous mode [ 67.816566][ T3117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.825847][ T3117] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.834205][ T3117] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.841727][ T3117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.850888][ T3117] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.859418][ T8454] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 67.908929][ T8454] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 67.969028][ T8462] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.985537][ T8460] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.999084][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.007713][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.016524][ T2721] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.023579][ T2721] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.033896][ T8454] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 68.080803][ T8454] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 68.127538][ T8462] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.140693][ T8460] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.184206][ T8460] team0: Port device team_slave_0 added [ 68.201374][ T2782] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.227655][ T8460] team0: Port device team_slave_1 added [ 68.236646][ T8462] team0: Port device team_slave_0 added [ 68.249370][ T2782] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.258845][ T2782] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.268692][ T2782] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.277520][ T2782] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.286094][ T2782] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.294285][ T2782] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.302616][ T2782] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.330569][ T8462] team0: Port device team_slave_1 added [ 68.341880][ T2782] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.350129][ T2782] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.359178][ T2782] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.368366][ T8449] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.438245][ T8460] device hsr_slave_0 entered promiscuous mode [ 68.485155][ T8460] device hsr_slave_1 entered promiscuous mode [ 68.535159][ T8460] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.542768][ T8460] Cannot create hsr debugfs directory [ 68.627803][ T8462] device hsr_slave_0 entered promiscuous mode [ 68.675688][ T8462] device hsr_slave_1 entered promiscuous mode [ 68.745251][ T8462] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.752840][ T8462] Cannot create hsr debugfs directory [ 68.778777][ T8452] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.791153][ T8457] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 68.842523][ T8457] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 68.898018][ T2703] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.907353][ T2703] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.919112][ T8449] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.937136][ T8457] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 69.015867][ T8454] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.033898][ T8457] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 69.072399][ T8452] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.100598][ T2703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.109334][ T2703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.117964][ T2703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.126712][ T2703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.139190][ T2782] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.147186][ T2782] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.154728][ T2782] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.163431][ T2782] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.171966][ T2782] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.179142][ T2782] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.189576][ T2782] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.206931][ T8454] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.255469][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.264330][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.277252][ T2721] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.284384][ T2721] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.292057][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.300937][ T2721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.315136][ T2782] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.323660][ T2782] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.336216][ T2782] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.343364][ T2782] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.351232][ T2782] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.359524][ T2782] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.367765][ T2782] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.376501][ T2782] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.384777][ T2782] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.391864][ T2782] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.436497][ T2703] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.444762][ T2703] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.452777][ T2703] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.460791][ T2703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.472236][ T2703] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.480724][ T2703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.489182][ T2703] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.497673][ T2703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.506559][ T2703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.515379][ T2703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.523951][ T2703] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.537203][ T8462] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 69.580222][ T8449] device veth0_vlan entered promiscuous mode [ 69.594406][ T8452] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 69.608251][ T8452] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.620869][ T2703] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.629558][ T2703] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.637444][ T2703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.645837][ T2703] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.654306][ T2703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.662803][ T2703] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.671195][ T8460] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 69.737348][ T8462] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 69.778496][ T8462] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 69.837894][ T8462] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 69.886191][ T2703] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.893829][ T2703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.905370][ T2703] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.913868][ T8460] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 69.960493][ T8449] device veth1_vlan entered promiscuous mode [ 69.991714][ T8460] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 70.041415][ T8454] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 70.052416][ T8454] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.075165][ T2782] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.083905][ T2782] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.092444][ T2782] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.100186][ T2782] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.107700][ T2782] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.116127][ T2782] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.124492][ T2782] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.136809][ T8452] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.147382][ T8460] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 70.211979][ T8454] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.251280][ T8454] device veth0_vlan entered promiscuous mode [ 70.267490][ T8454] device veth1_vlan entered promiscuous mode [ 175.204850][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 175.211735][ C0] rcu: 0-...!: (1 GPs behind) idle=806/1/0x4000000000000002 softirq=13141/13142 fqs=7 [ 175.221795][ C0] (t=10500 jiffies g=6457 q=567) [ 175.226817][ C0] rcu: rcu_preempt kthread starved for 10483 jiffies! g6457 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 175.237904][ C0] rcu: RCU grace-period kthread stack dump: [ 175.243795][ C0] rcu_preempt R running task 29032 10 2 0x80004000 [ 175.251701][ C0] Call Trace: [ 175.255084][ C0] __schedule+0x9a0/0xcc0 [ 175.259416][ C0] schedule+0x181/0x210 [ 175.263655][ C0] schedule_timeout+0x14f/0x240 [ 175.268495][ C0] ? run_local_timers+0x120/0x120 [ 175.273529][ C0] rcu_gp_kthread+0xed8/0x1770 [ 175.278291][ C0] kthread+0x332/0x350 [ 175.282347][ C0] ? rcu_report_qs_rsp+0x140/0x140 [ 175.287448][ C0] ? kthread_blkcg+0xe0/0xe0 [ 175.292026][ C0] ret_from_fork+0x24/0x30 [ 175.296446][ C0] NMI backtrace for cpu 0 [ 175.300764][ C0] CPU: 0 PID: 8468 Comm: syz-executor.0 Not tainted 5.5.0-rc5-syzkaller #0 [ 175.309328][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 175.319366][ C0] Call Trace: [ 175.322635][ C0] [ 175.325481][ C0] dump_stack+0x1fb/0x318 [ 175.329826][ C0] nmi_cpu_backtrace+0xaf/0x1a0 [ 175.334668][ C0] ? nmi_trigger_cpumask_backtrace+0x16d/0x290 [ 175.340830][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 175.346892][ C0] nmi_trigger_cpumask_backtrace+0x174/0x290 [ 175.352871][ C0] arch_trigger_cpumask_backtrace+0x10/0x20 [ 175.358762][ C0] rcu_dump_cpu_stacks+0x15a/0x220 [ 175.363873][ C0] rcu_sched_clock_irq+0xe25/0x1ad0 [ 175.369065][ C0] ? trace_hardirqs_off+0x74/0x80 [ 175.374079][ C0] update_process_times+0x12d/0x180 [ 175.379269][ C0] tick_sched_timer+0x263/0x420 [ 175.384107][ C0] ? tick_setup_sched_timer+0x3d0/0x3d0 [ 175.389673][ C0] __hrtimer_run_queues+0x403/0x840 [ 175.394875][ C0] hrtimer_interrupt+0x38c/0xda0 [ 175.399814][ C0] ? debug_smp_processor_id+0x9/0x20 [ 175.405109][ C0] smp_apic_timer_interrupt+0x109/0x280 [ 175.410667][ C0] apic_timer_interrupt+0xf/0x20 [ 175.415599][ C0] [ 175.418560][ C0] RIP: 0010:free_thread_stack+0x16d/0x590 [ 175.424286][ C0] Code: c3 08 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 55 94 6a 00 48 8b 3b be fc ff ff ff e8 28 04 00 00 43 80 3c 2e 00 <74> 08 4c 89 e7 e8 39 94 6a 00 49 8b 1c 24 48 83 c3 08 48 89 d8 48 [ 175.443898][ C0] RSP: 0018:ffffc900021878f8 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 175.452318][ C0] RAX: ffffffff814897d3 RBX: ffff888095603488 RCX: ffff88808fbde040 [ 175.460279][ C0] RDX: 0000000000000000 RSI: 00000000fffffffc RDI: ffffea0002a19940 [ 175.468241][ C0] RBP: ffffc90002187930 R08: 000000000003a728 R09: ffffed101513e329 [ 175.476202][ C0] R10: ffffed101513e329 R11: 0000000000000000 R12: ffff888095603520 [ 175.484163][ C0] R13: dffffc0000000000 R14: 1ffff11012ac06a4 R15: ffff8880a89f1938 [ 175.492139][ C0] ? mod_memcg_page_state+0x123/0x190 [ 175.497523][ C0] ? free_thread_stack+0x168/0x590 [ 175.502638][ C0] put_task_stack+0xa3/0x130 [ 175.507221][ C0] finish_task_switch+0x3f1/0x550 [ 175.512237][ C0] __schedule+0x9a8/0xcc0 [ 175.516568][ C0] preempt_schedule_irq+0xc1/0x140 [ 175.521667][ C0] retint_kernel+0x1b/0x2b [ 175.526094][ C0] RIP: 0010:strstr+0xa3/0x1a0 [ 175.530895][ C0] Code: 48 89 df 49 89 f5 e8 0c da b6 f9 4c 89 ee 4c 89 e7 eb 14 0f 1f 40 00 48 89 d8 48 c1 e8 03 42 0f b6 04 38 84 c0 75 cd 80 3b 00 <48> 8d 5b 01 75 e7 49 89 f8 49 f7 d0 49 01 d8 31 c0 4d 39 f0 73 16 [ 175.550500][ C0] RSP: 0018:ffffc90002187b40 EFLAGS: 00000206 ORIG_RAX: ffffffffffffff13 [ 175.558994][ C0] RAX: 0000000000000000 RBX: ffff888093ffb505 RCX: ffff88808fbde040 [ 175.566962][ C0] RDX: 0000000000000000 RSI: ffffffff88ee8ec4 RDI: ffff888093ffb400 [ 175.574927][ C0] RBP: ffffc90002187b80 R08: 0000000000000011 R09: ffffc90002187834 [ 175.582912][ C0] R10: 000000000000000b R11: 0000000000000000 R12: 0000000000000000 [ 175.590871][ C0] R13: 0000000000000021 R14: 0000000000000011 R15: dffffc0000000000 [ 175.598859][ C0] tomoyo_supervisor+0xb53/0x1330 [ 175.603875][ C0] ? vsnprintf+0x139/0x1c00 [ 175.608364][ C0] ? snprintf+0x6f/0x90 [ 175.612524][ C0] tomoyo_path_number_perm+0x471/0x640 [ 175.617999][ C0] ? smack_file_ioctl+0x226/0x2e0 [ 175.623016][ C0] ? __fget+0x431/0x510 [ 175.627169][ C0] tomoyo_file_ioctl+0x23/0x30 [ 175.631921][ C0] security_file_ioctl+0x6d/0xd0 [ 175.636851][ C0] __x64_sys_ioctl+0xa3/0x120 [ 175.641521][ C0] do_syscall_64+0xf7/0x1c0 [ 175.646034][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 175.651924][ C0] RIP: 0033:0x45adb7 [ 175.655825][ C0] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 175.675434][ C0] RSP: 002b:00007fba206a6c88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 175.684647][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000045adb7 [ 175.692613][ C0] RDX: 0000000000000000 RSI: 0000000000006364 RDI: 00000000000000e8 [ 175.700577][ C0] RBP: 000000000075bfa8 R08: 00007fba206a7700 R09: 00007fba206a7700 [ 175.708540][ C0] R10: 00007fba206a79d0 R11: 0000000000000246 R12: 0000000000000000 [ 175.716505][ C0] R13: 00007ffd15a3cd7f R14: 00007fba206a79c0 R15: 000000000075bf2c