[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 54.791009][ T24] audit: type=1800 audit(1578449393.862:25): pid=8348 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 54.817754][ T24] audit: type=1800 audit(1578449393.862:26): pid=8348 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 54.857476][ T24] audit: type=1800 audit(1578449393.862:27): pid=8348 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.30' (ECDSA) to the list of known hosts. 2020/01/08 02:10:05 fuzzer started 2020/01/08 02:10:07 dialing manager at 10.128.0.26:35703 2020/01/08 02:10:07 syscalls: 2824 2020/01/08 02:10:07 code coverage: enabled 2020/01/08 02:10:07 comparison tracing: enabled 2020/01/08 02:10:07 extra coverage: enabled 2020/01/08 02:10:07 setuid sandbox: enabled 2020/01/08 02:10:07 namespace sandbox: enabled 2020/01/08 02:10:07 Android sandbox: /sys/fs/selinux/policy does not exist 2020/01/08 02:10:07 fault injection: enabled 2020/01/08 02:10:07 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/01/08 02:10:07 net packet injection: enabled 2020/01/08 02:10:07 net device setup: enabled 2020/01/08 02:10:07 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/01/08 02:10:07 devlink PCI setup: PCI device 0000:00:10.0 is not available 02:10:08 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="5001000024000705000001010000000000000000", @ANYRES32=r4, @ANYBLOB="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"], 0x150}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x4000000000002bc, 0x0) 02:10:08 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r2, &(0x7f0000000140)='threaded\x00', 0x5dc291) clone(0x80020100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) lseek(r2, 0x0, 0x0) write$binfmt_misc(r2, 0x0, 0x0) syzkaller login: [ 69.285240][ T8513] IPVS: ftp: loaded support on port[0] = 21 [ 69.435348][ T8513] chnl_net:caif_netlink_parms(): no params data found [ 69.485539][ T8513] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.494314][ T8513] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.502678][ T8513] device bridge_slave_0 entered promiscuous mode [ 69.512068][ T8513] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.519768][ T8513] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.527962][ T8513] device bridge_slave_1 entered promiscuous mode [ 69.550774][ T8513] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.563297][ T8513] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.585559][ T8516] IPVS: ftp: loaded support on port[0] = 21 [ 69.586230][ T8513] team0: Port device team_slave_0 added 02:10:08 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x14}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xdba3dd835d632db6, 0x10, &(0x7f0000000000), 0xfdd1}, 0x48) [ 69.601556][ T8513] team0: Port device team_slave_1 added [ 69.669202][ T8513] device hsr_slave_0 entered promiscuous mode [ 69.717530][ T8513] device hsr_slave_1 entered promiscuous mode [ 69.810223][ T8518] IPVS: ftp: loaded support on port[0] = 21 02:10:09 executing program 3: unshare(0x400) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x260900, 0x0) pwritev(r0, 0x0, 0x0, 0x0) [ 69.936642][ T8516] chnl_net:caif_netlink_parms(): no params data found [ 69.959898][ T8513] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.019491][ T8513] netdevsim netdevsim0 netdevsim1: renamed from eth1 02:10:09 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x4, @broadcast, 'ip_vti0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000080)={0x18, 0x0, {0x0, @dev}}) [ 70.114949][ T8521] IPVS: ftp: loaded support on port[0] = 21 [ 70.121171][ T8513] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.170838][ T8513] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.296834][ T8518] chnl_net:caif_netlink_parms(): no params data found [ 70.305779][ T8516] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.326664][ T8516] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.334722][ T8516] device bridge_slave_0 entered promiscuous mode [ 70.363742][ T8513] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.371081][ T8513] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.378889][ T8513] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.385989][ T8513] bridge0: port 1(bridge_slave_0) entered forwarding state 02:10:09 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) r1 = socket(0x80000000000000a, 0x2, 0x0) dup3(r1, r0, 0x80000) [ 70.438165][ T8516] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.445246][ T8516] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.458108][ T8516] device bridge_slave_1 entered promiscuous mode [ 70.473311][ T8524] IPVS: ftp: loaded support on port[0] = 21 [ 70.490013][ T3219] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.499335][ T3219] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.588851][ T8518] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.596052][ T8518] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.605315][ T8518] device bridge_slave_0 entered promiscuous mode [ 70.621856][ T8516] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.642769][ T8518] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.649977][ T8518] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.657967][ T8518] device bridge_slave_1 entered promiscuous mode [ 70.685385][ T8526] IPVS: ftp: loaded support on port[0] = 21 [ 70.696139][ T8516] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.719542][ T8518] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.765212][ T8518] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.799261][ T8516] team0: Port device team_slave_0 added [ 70.820684][ T8513] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.834662][ T8521] chnl_net:caif_netlink_parms(): no params data found [ 70.859718][ T8516] team0: Port device team_slave_1 added [ 70.881290][ T8518] team0: Port device team_slave_0 added [ 70.921698][ T8518] team0: Port device team_slave_1 added [ 70.943692][ T8524] chnl_net:caif_netlink_parms(): no params data found [ 71.018554][ T8516] device hsr_slave_0 entered promiscuous mode [ 71.056803][ T8516] device hsr_slave_1 entered promiscuous mode [ 71.096598][ T8516] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.104599][ T8516] Cannot create hsr debugfs directory [ 71.119074][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.128274][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.140517][ T8513] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.219236][ T8518] device hsr_slave_0 entered promiscuous mode [ 71.276874][ T8518] device hsr_slave_1 entered promiscuous mode [ 71.336647][ T8518] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.344502][ T8518] Cannot create hsr debugfs directory [ 71.355541][ T8521] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.363046][ T8521] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.370941][ T8521] device bridge_slave_0 entered promiscuous mode [ 71.383687][ T8521] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.391273][ T8521] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.399636][ T8521] device bridge_slave_1 entered promiscuous mode [ 71.433847][ T8521] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.459309][ T2955] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.468273][ T2955] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.477224][ T2955] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.484306][ T2955] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.510308][ T8521] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.529700][ T2955] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.538245][ T2955] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.546728][ T2955] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.553876][ T2955] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.561971][ T2955] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.603286][ T2955] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.628802][ T8524] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.636049][ T8524] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.644423][ T8524] device bridge_slave_0 entered promiscuous mode [ 71.682985][ T8521] team0: Port device team_slave_0 added [ 71.692898][ T8521] team0: Port device team_slave_1 added [ 71.702701][ T2996] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.711665][ T2996] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.720541][ T8524] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.720567][ T8524] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.735515][ T8524] device bridge_slave_1 entered promiscuous mode [ 71.757563][ T8524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.777788][ T2996] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.787313][ T8524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.812206][ T8524] team0: Port device team_slave_0 added [ 71.822547][ T8524] team0: Port device team_slave_1 added [ 71.878333][ T8521] device hsr_slave_0 entered promiscuous mode [ 71.937227][ T8521] device hsr_slave_1 entered promiscuous mode [ 71.996643][ T8521] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.004279][ T8521] Cannot create hsr debugfs directory [ 72.010228][ T8526] chnl_net:caif_netlink_parms(): no params data found [ 72.028022][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.037498][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.048963][ T8518] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.112229][ T8518] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.188252][ T2996] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.200253][ T2996] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.259394][ T8524] device hsr_slave_0 entered promiscuous mode [ 72.297147][ T8524] device hsr_slave_1 entered promiscuous mode [ 72.336590][ T8524] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.344192][ T8524] Cannot create hsr debugfs directory [ 72.350811][ T8518] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.408427][ T8518] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.453751][ T8516] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.516343][ T8513] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.528810][ T8513] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.551795][ T8516] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.610837][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.619609][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.638087][ T8526] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.645171][ T8526] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.653663][ T8526] device bridge_slave_0 entered promiscuous mode [ 72.661397][ T8516] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.720410][ T8516] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.778137][ T8526] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.785358][ T8526] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.793903][ T8526] device bridge_slave_1 entered promiscuous mode [ 72.820398][ T8526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.837819][ T8526] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.883753][ T3220] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.892771][ T3220] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.915135][ T8513] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.929951][ T8526] team0: Port device team_slave_0 added [ 72.938449][ T8526] team0: Port device team_slave_1 added [ 73.019246][ T8526] device hsr_slave_0 entered promiscuous mode [ 73.076942][ T8526] device hsr_slave_1 entered promiscuous mode [ 73.116602][ T8526] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.124205][ T8526] Cannot create hsr debugfs directory [ 73.183421][ T8521] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.261995][ T8524] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 73.321742][ T8524] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 73.392452][ T8524] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 73.448508][ T8521] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.499213][ T8521] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.554932][ T8524] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 73.583409][ T3220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.592229][ T3220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.604046][ T8521] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.664822][ T8518] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.679096][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.687315][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.695839][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.703781][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.715153][ T8513] device veth0_vlan entered promiscuous mode [ 73.738128][ T8516] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.754143][ T8513] device veth1_vlan entered promiscuous mode [ 73.762350][ T3220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.770670][ T3220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.802234][ T8516] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.813855][ T8518] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.828408][ T8526] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 73.857866][ T2996] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.865731][ T2996] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.897202][ T8526] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 73.929441][ T3220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.940878][ T3220] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.949450][ T3220] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.957485][ T3220] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.966018][ T3220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.975124][ T3220] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.983611][ T3220] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.990701][ T3220] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.998720][ T3220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.007508][ T3220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.015918][ T3220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.024480][ T3220] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.032787][ T3220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.041923][ T3220] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.050504][ T3220] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.057612][ T3220] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.066691][ T3220] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.074547][ T3220] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.082377][ T3220] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.106566][ T8526] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 74.139585][ T8526] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 74.199981][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.210371][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.219250][ T3219] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.226298][ T3219] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.235054][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.243554][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.252523][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.260946][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.269851][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.278593][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.287008][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.295760][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.304457][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.312776][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.322408][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.332189][ T8516] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.351999][ T8518] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 74.362477][ T8518] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.401972][ T2955] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.411475][ T2955] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.420274][ T2955] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.429672][ T2955] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.439275][ T2955] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.447885][ T2955] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.456365][ T2955] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.475449][ T8518] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.513434][ T2996] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.525053][ T2996] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.573763][ T8524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.601521][ T8516] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.649320][ T8516] device veth0_vlan entered promiscuous mode [ 74.667739][ T8516] device veth1_vlan entered promiscuous mode [ 179.566404][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 179.573315][ C0] rcu: 0-....: (1 GPs behind) idle=f6e/1/0x4000000000000002 softirq=14592/14593 fqs=2721 [ 179.583468][ C0] (t=10500 jiffies g=7065 q=512) [ 179.588484][ C0] rcu: rcu_preempt kthread starved for 5025 jiffies! g7065 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 179.599483][ C0] rcu: RCU grace-period kthread stack dump: [ 179.605364][ C0] rcu_preempt R running task 29032 10 2 0x80004000 [ 179.613263][ C0] Call Trace: [ 179.616557][ C0] __schedule+0x9a0/0xcc0 [ 179.620978][ C0] schedule+0x181/0x210 [ 179.625127][ C0] schedule_timeout+0x14f/0x240 [ 179.629969][ C0] ? run_local_timers+0x120/0x120 [ 179.634996][ C0] rcu_gp_kthread+0xed8/0x1770 [ 179.639759][ C0] kthread+0x332/0x350 [ 179.643826][ C0] ? rcu_report_qs_rsp+0x140/0x140 [ 179.648926][ C0] ? kthread_blkcg+0xe0/0xe0 [ 179.653510][ C0] ret_from_fork+0x24/0x30 [ 179.657945][ C0] NMI backtrace for cpu 0 [ 179.662265][ C0] CPU: 0 PID: 8531 Comm: syz-executor.0 Not tainted 5.5.0-rc5-syzkaller #0 [ 179.671003][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 179.681060][ C0] Call Trace: [ 179.684944][ C0] [ 179.687787][ C0] dump_stack+0x1fb/0x318 [ 179.692201][ C0] nmi_cpu_backtrace+0xaf/0x1a0 [ 179.697063][ C0] ? nmi_trigger_cpumask_backtrace+0x16d/0x290 [ 179.703224][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 179.709308][ C0] nmi_trigger_cpumask_backtrace+0x174/0x290 [ 179.715290][ C0] arch_trigger_cpumask_backtrace+0x10/0x20 [ 179.721179][ C0] rcu_dump_cpu_stacks+0x15a/0x220 [ 179.726287][ C0] rcu_sched_clock_irq+0xe25/0x1ad0 [ 179.731482][ C0] ? trace_hardirqs_off+0x74/0x80 [ 179.736500][ C0] update_process_times+0x12d/0x180 [ 179.742734][ C0] tick_sched_timer+0x263/0x420 [ 179.747595][ C0] ? tick_setup_sched_timer+0x3d0/0x3d0 [ 179.753153][ C0] __hrtimer_run_queues+0x403/0x840 [ 179.758361][ C0] hrtimer_interrupt+0x38c/0xda0 [ 179.763328][ C0] ? debug_smp_processor_id+0x9/0x20 [ 179.768640][ C0] smp_apic_timer_interrupt+0x109/0x280 [ 179.774250][ C0] apic_timer_interrupt+0xf/0x20 [ 179.779176][ C0] [ 179.782110][ C0] RIP: 0010:mod_memcg_page_state+0x6/0x190 [ 179.787993][ C0] Code: 60 00 eb 0c e8 eb 27 2e 00 eb 05 e8 e4 27 2e 00 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d c3 0f 1f 44 00 00 55 48 89 e5 41 57 <41> 56 41 54 53 41 89 f6 48 89 fb e8 ba 27 2e 00 48 83 c3 38 48 89 [ 179.807596][ C0] RSP: 0018:ffffc90001f17750 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 179.816000][ C0] RAX: 1ffff1101469b661 RBX: ffff8880a34db308 RCX: 0000000000000000 [ 179.824049][ C0] RDX: 0000000000000000 RSI: 00000000fffffffc RDI: ffffea00024d2b00 [ 179.832012][ C0] RBP: ffffc90001f17758 R08: dffffc0000000000 R09: fffffbfff124248a [ 179.839990][ C0] R10: fffffbfff124248a R11: 0000000000000000 R12: ffff8880a34db3a0 [ 179.847966][ C0] R13: dffffc0000000000 R14: 1ffff1101469b674 R15: ffff88808f3c5578 [ 179.855962][ C0] free_thread_stack+0x168/0x590 [ 179.860895][ C0] put_task_stack+0xa3/0x130 [ 179.865489][ C0] finish_task_switch+0x3f1/0x550 [ 179.870527][ C0] __schedule+0x9a8/0xcc0 [ 179.874861][ C0] preempt_schedule_irq+0xc1/0x140 [ 179.879961][ C0] retint_kernel+0x1b/0x2b [ 179.884368][ C0] RIP: 0010:kmem_cache_alloc_trace+0x1ad/0x2f0 [ 179.890511][ C0] Code: 8b 7d d0 57 9d 0f 1f 44 00 00 e8 8e c5 c9 ff eb 1e e8 27 c3 c9 ff 48 83 3d d7 f3 77 07 00 0f 84 45 01 00 00 48 8b 7d d0 57 9d <0f> 1f 44 00 00 41 0f 18 0e e9 21 00 00 00 89 d8 c1 e8 08 83 e0 01 [ 179.910124][ C0] RSP: 0018:ffffc90001f179b8 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff02 [ 179.918543][ C0] RAX: ffff88808bc76c14 RBX: 0000000000000c40 RCX: ffffffff815c1e17 [ 179.926615][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000286 [ 179.935043][ C0] RBP: ffffc90001f179f8 R08: ffff88808bc76bd8 R09: fffffbfff140cf2e [ 179.943058][ C0] R10: fffffbfff140cf2e R11: 0000000000000000 R12: 0000000000000c40 [ 179.951048][ C0] R13: ffff8880aa402000 R14: ffff888095fa8000 R15: ffff8880aa402000 [ 179.959469][ C0] ? mark_lock+0x107/0x1650 [ 179.964204][ C0] ? tomoyo_init_log+0x151/0x1e70 [ 179.970582][ C0] tomoyo_init_log+0x151/0x1e70 [ 179.975497][ C0] ? tomoyo_profile+0x11/0x50 [ 179.980233][ C0] ? tomoyo_profile+0x11/0x50 [ 179.984906][ C0] ? tomoyo_domain_quota_is_ok+0x446/0x580 [ 179.990721][ C0] tomoyo_supervisor+0x2c7/0x1330 [ 179.995765][ C0] ? rcu_read_lock_sched_held+0x10b/0x170 [ 180.001486][ C0] ? tomoyo_path_matches_pattern+0x1a8/0x280 [ 180.007597][ C0] ? tomoyo_check_acl+0x2dc/0x3a0 [ 180.012634][ C0] tomoyo_path_perm+0x5c3/0x850 [ 180.017509][ C0] tomoyo_path_symlink+0x95/0xc0 [ 180.022464][ C0] security_path_symlink+0xed/0x170 [ 180.027686][ C0] do_symlinkat+0xf3/0x3f0 [ 180.032126][ C0] __x64_sys_symlink+0x60/0x70 [ 180.036900][ C0] do_syscall_64+0xf7/0x1c0 [ 180.041406][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 180.047307][ C0] RIP: 0033:0x45ac77 [ 180.051407][ C0] Code: 0f 1f 00 b8 5c 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 6d b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 4d b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 180.071275][ C0] RSP: 002b:00007ffc43802d78 EFLAGS: 00000206 ORIG_RAX: 0000000000000058 [ 180.080831][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000045ac77 [ 180.088817][ C0] RDX: 00007ffc43802e13 RSI: 00000000004c0a2a RDI: 00007ffc43802e00 [ 180.096972][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000013 [ 180.104962][ C0] R10: 0000000000000075 R11: 0000000000000206 R12: 0000000000000001 [ 180.113069][ C0] R13: 00007ffc43802db0 R14: 0000000000000000 R15: 00007ffc43802dc0