[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 53.848715][ T27] audit: type=1800 audit(1578486334.385:25): pid=8253 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 53.878674][ T27] audit: type=1800 audit(1578486334.385:26): pid=8253 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 53.898593][ T27] audit: type=1800 audit(1578486334.385:27): pid=8253 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.135' (ECDSA) to the list of known hosts. 2020/01/08 12:25:42 fuzzer started 2020/01/08 12:25:43 dialing manager at 10.128.0.26:35703 2020/01/08 12:25:44 syscalls: 2824 2020/01/08 12:25:44 code coverage: enabled 2020/01/08 12:25:44 comparison tracing: enabled 2020/01/08 12:25:44 extra coverage: enabled 2020/01/08 12:25:44 setuid sandbox: enabled 2020/01/08 12:25:44 namespace sandbox: enabled 2020/01/08 12:25:44 Android sandbox: /sys/fs/selinux/policy does not exist 2020/01/08 12:25:44 fault injection: enabled 2020/01/08 12:25:44 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/01/08 12:25:44 net packet injection: enabled 2020/01/08 12:25:44 net device setup: enabled 2020/01/08 12:25:44 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/01/08 12:25:44 devlink PCI setup: PCI device 0000:00:10.0 is not available 12:25:45 executing program 0: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x200000001f3}) r2 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0x40bc5311, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue1\x00'}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 12:25:45 executing program 1: mkdir(&(0x7f00000003c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x8}, 0x2a939}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000), &(0x7f0000000080)=0x8) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = syz_open_dev$mice(0x0, 0x0, 0x8400) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/vga_arbiter\x00', 0x420000, 0x0) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f0000000000)=0xa2ea) getsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, &(0x7f0000000100)) ioctl$TIOCGISO7816(r2, 0x80285442, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000001580)={0x53d2b708009d0c60, &(0x7f0000001540), 0x1}) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x8, &(0x7f0000000280)) r6 = syz_open_dev$usbmon(0x0, 0x0, 0x0) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) socket$packet(0x11, 0x2, 0x300) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000002380)={{0x0, 0x0, 0x0, 0xffffffffffffffff}}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='fuse\x00', 0x8888, &(0x7f0000000640)=ANY=[@ANYBLOB, @ANYRESHEX=r6, @ANYBLOB=',rootmode=0000000@00000000004000', @ANYRESDEC=r7, @ANYRESDEC, @ANYBLOB=',allow_other,func=CREDS_']) io_setup(0x8, 0x0) syzkaller login: [ 64.739539][ T8421] IPVS: ftp: loaded support on port[0] = 21 [ 64.824375][ T8423] IPVS: ftp: loaded support on port[0] = 21 12:25:45 executing program 2: r0 = socket(0x18, 0x0, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0xe, &(0x7f0000000000), 0x20a154cc) r1 = socket(0x18, 0x0, 0x0) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0xe, &(0x7f0000000000), 0x20a154cc) [ 64.942734][ T8421] chnl_net:caif_netlink_parms(): no params data found [ 64.958961][ T8423] chnl_net:caif_netlink_parms(): no params data found [ 65.063267][ T8421] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.072513][ T8421] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.090350][ T8421] device bridge_slave_0 entered promiscuous mode [ 65.119020][ T8421] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.126076][ T8421] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.148707][ T8421] device bridge_slave_1 entered promiscuous mode 12:25:45 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r2, &(0x7f0000008480)=[{{&(0x7f0000000100)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f0000001340)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x8, 0x2, 0x0, [0x0]}]}}}], 0x20}}], 0x2, 0x0) [ 65.172022][ T8423] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.180382][ T8423] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.189300][ T8423] device bridge_slave_0 entered promiscuous mode [ 65.205318][ T8427] IPVS: ftp: loaded support on port[0] = 21 [ 65.222685][ T8421] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.238485][ T8423] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.245549][ T8423] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.257064][ T8423] device bridge_slave_1 entered promiscuous mode [ 65.265318][ T8421] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.317798][ T8423] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.345417][ T8421] team0: Port device team_slave_0 added [ 65.352835][ T8423] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.382134][ T8421] team0: Port device team_slave_1 added [ 65.442597][ T8423] team0: Port device team_slave_0 added [ 65.457111][ T8427] chnl_net:caif_netlink_parms(): no params data found [ 65.465477][ T8429] IPVS: ftp: loaded support on port[0] = 21 [ 65.484613][ T8423] team0: Port device team_slave_1 added 12:25:46 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000380)='./file0\x00', 0xf, 0x0, 0x0, 0x0, 0x0) [ 65.541533][ T8421] device hsr_slave_0 entered promiscuous mode [ 65.578167][ T8421] device hsr_slave_1 entered promiscuous mode 12:25:46 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000240)={'\x00', 0x3802}) close(r2) [ 65.720785][ T8423] device hsr_slave_0 entered promiscuous mode [ 65.774309][ T8423] device hsr_slave_1 entered promiscuous mode [ 65.830784][ T8423] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.838686][ T8423] Cannot create hsr debugfs directory [ 65.879507][ T8427] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.886614][ T8427] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.894354][ T8427] device bridge_slave_0 entered promiscuous mode [ 65.902252][ T8427] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.909550][ T8427] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.917086][ T8427] device bridge_slave_1 entered promiscuous mode [ 65.941037][ T8432] IPVS: ftp: loaded support on port[0] = 21 [ 65.975493][ T8434] IPVS: ftp: loaded support on port[0] = 21 [ 65.995407][ T8427] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.037824][ T8427] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.084995][ T8427] team0: Port device team_slave_0 added [ 66.100940][ T8421] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 66.151976][ T8421] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 66.222244][ T8421] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 66.290421][ T8427] team0: Port device team_slave_1 added [ 66.296153][ T8421] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 66.397205][ T8423] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 66.489575][ T8427] device hsr_slave_0 entered promiscuous mode [ 66.528155][ T8427] device hsr_slave_1 entered promiscuous mode [ 66.577995][ T8427] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.585695][ T8427] Cannot create hsr debugfs directory [ 66.591892][ T8429] chnl_net:caif_netlink_parms(): no params data found [ 66.607324][ T8423] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 66.694849][ T8429] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.702347][ T8429] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.710166][ T8429] device bridge_slave_0 entered promiscuous mode [ 66.717398][ T8423] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 66.774520][ T8423] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 66.839616][ T8429] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.846708][ T8429] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.855526][ T8429] device bridge_slave_1 entered promiscuous mode [ 66.896277][ T8429] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.938541][ T8429] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.983999][ T8429] team0: Port device team_slave_0 added [ 67.012897][ T8429] team0: Port device team_slave_1 added [ 67.023348][ T8427] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 67.069830][ T8432] chnl_net:caif_netlink_parms(): no params data found [ 67.094526][ T8427] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 67.142790][ T8427] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 67.189337][ T8434] chnl_net:caif_netlink_parms(): no params data found [ 67.224446][ T8432] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.232672][ T8432] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.240863][ T8432] device bridge_slave_0 entered promiscuous mode [ 67.252353][ T8427] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 67.351167][ T8429] device hsr_slave_0 entered promiscuous mode [ 67.389226][ T8429] device hsr_slave_1 entered promiscuous mode [ 67.428080][ T8429] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.436004][ T8429] Cannot create hsr debugfs directory [ 67.442575][ T8432] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.449932][ T8432] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.457668][ T8432] device bridge_slave_1 entered promiscuous mode [ 67.491507][ T8421] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.511688][ T8434] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.519127][ T8434] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.526975][ T8434] device bridge_slave_0 entered promiscuous mode [ 67.538314][ T8434] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.546870][ T8434] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.555205][ T8434] device bridge_slave_1 entered promiscuous mode [ 67.567664][ T8432] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.581246][ T8432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.615746][ T8434] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.641037][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.649825][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.662957][ T8421] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.674660][ T8434] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.693424][ T8432] team0: Port device team_slave_0 added [ 67.705057][ T8432] team0: Port device team_slave_1 added [ 67.723525][ T8434] team0: Port device team_slave_0 added [ 67.801059][ T8432] device hsr_slave_0 entered promiscuous mode [ 67.848243][ T8432] device hsr_slave_1 entered promiscuous mode [ 67.898442][ T8432] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.906183][ T8432] Cannot create hsr debugfs directory [ 67.920254][ T8434] team0: Port device team_slave_1 added [ 67.954577][ T8423] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.971872][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.981181][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.990277][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.997404][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.005632][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.014907][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.023253][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.030337][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.038171][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.094387][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.139752][ T8434] device hsr_slave_0 entered promiscuous mode [ 68.188757][ T8434] device hsr_slave_1 entered promiscuous mode [ 68.248064][ T8434] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.255754][ T8434] Cannot create hsr debugfs directory [ 68.266464][ T8423] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.274670][ T3220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.283537][ T3220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.291429][ T3220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.310268][ T8429] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 68.374716][ T8429] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 68.435713][ T8429] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 68.490180][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.499584][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.522627][ T8427] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.534119][ T8429] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 68.591311][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.600252][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.609598][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.618458][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.626811][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.642511][ T8421] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.654241][ T8421] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.676674][ T8432] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 68.749952][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.758542][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.766776][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.776472][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.785236][ T2674] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.792321][ T2674] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.801263][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.819858][ T8427] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.834769][ T8432] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 68.869351][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.877001][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.906274][ T8421] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.920139][ T8432] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 68.940827][ T8432] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 68.990555][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.000354][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.009263][ T2674] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.016562][ T2674] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.024386][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.033168][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.041669][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.050741][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.059279][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.068498][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.076784][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.084334][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.091813][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.100517][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.109142][ T2674] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.116180][ T2674] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.123767][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.132403][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.141004][ T2674] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.148099][ T2674] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.164477][ T8423] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 69.176517][ T8423] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.207401][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.215875][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.224122][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.232790][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.241458][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.250375][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.259102][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.267461][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.275674][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.284243][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.293928][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.301558][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.310612][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.319129][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.348327][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.357010][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.393121][ T3220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.403213][ T3220] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.412169][ T3220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.420734][ T3220] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.429252][ T3220] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.436656][ T3220] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.468780][ T8423] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.484548][ T8427] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.499869][ T8434] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 69.561584][ T8434] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 69.621431][ T8421] device veth0_vlan entered promiscuous mode [ 69.628182][ T3220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.636435][ T3220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.646416][ T3220] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.654675][ T3220] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.669312][ T8434] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 69.712996][ T8434] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 69.790350][ T8432] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.802983][ T8421] device veth1_vlan entered promiscuous mode [ 69.832008][ T8429] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.840221][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.850952][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.858650][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.873068][ T8432] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.893003][ T8427] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.907695][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.917317][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.925920][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.933951][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.942885][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.979253][ T8429] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.996688][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.010927][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.021560][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.030672][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.040027][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.047272][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.056934][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.089660][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.101966][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.111021][ T2674] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.119228][ T2674] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.128937][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.137631][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.146757][ T2674] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.154147][ T2674] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.162696][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.171375][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.179850][ T2674] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.187177][ T2674] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.195169][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.204978][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.214080][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.222533][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.231490][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.262949][ T8423] device veth0_vlan entered promiscuous mode [ 70.272222][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.282544][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.291133][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.300716][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.310080][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.319131][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.328574][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.337028][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.345956][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.354522][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.364301][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.385772][ T8434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.405520][ T8427] device veth0_vlan entered promiscuous mode [ 70.422109][ T8423] device veth1_vlan entered promiscuous mode [ 70.466727][ T8432] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 70.483154][ T8432] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.523586][ T8432] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.357890][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 175.364659][ C1] rcu: 1-...!: (10499 ticks this GP) idle=d0a/1/0x4000000000000002 softirq=13631/13631 fqs=8 [ 175.375221][ C1] (t=10500 jiffies g=6513 q=335) [ 175.380241][ C1] rcu: rcu_preempt kthread starved for 10482 jiffies! g6513 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 175.391330][ C1] rcu: RCU grace-period kthread stack dump: [ 175.397208][ C1] rcu_preempt R running task 28984 10 2 0x80004000 [ 175.405099][ C1] Call Trace: [ 175.408383][ C1] __schedule+0x9a0/0xcc0 [ 175.412819][ C1] schedule+0x181/0x210 [ 175.416965][ C1] schedule_timeout+0x14f/0x240 [ 175.421808][ C1] ? run_local_timers+0x120/0x120 [ 175.426825][ C1] rcu_gp_kthread+0xed8/0x1770 [ 175.431590][ C1] kthread+0x332/0x350 [ 175.435643][ C1] ? rcu_report_qs_rsp+0x140/0x140 [ 175.440762][ C1] ? kthread_blkcg+0xe0/0xe0 [ 175.445351][ C1] ret_from_fork+0x24/0x30 [ 175.449780][ C1] NMI backtrace for cpu 1 [ 175.454103][ C1] CPU: 1 PID: 69 Comm: kworker/u4:2 Not tainted 5.5.0-rc5-syzkaller #0 [ 175.462375][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 175.472520][ C1] Workqueue: 0x0 (bat_events) [ 175.477271][ C1] Call Trace: [ 175.480545][ C1] [ 175.483387][ C1] dump_stack+0x1fb/0x318 [ 175.487708][ C1] nmi_cpu_backtrace+0xaf/0x1a0 [ 175.492545][ C1] ? nmi_trigger_cpumask_backtrace+0x16d/0x290 [ 175.498684][ C1] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 175.504751][ C1] nmi_trigger_cpumask_backtrace+0x174/0x290 [ 175.510722][ C1] arch_trigger_cpumask_backtrace+0x10/0x20 [ 175.516616][ C1] rcu_dump_cpu_stacks+0x15a/0x220 [ 175.521849][ C1] rcu_sched_clock_irq+0xe25/0x1ad0 [ 175.527170][ C1] ? trace_hardirqs_off+0x74/0x80 [ 175.532447][ C1] update_process_times+0x12d/0x180 [ 175.537640][ C1] tick_sched_timer+0x263/0x420 [ 175.542484][ C1] ? tick_setup_sched_timer+0x3d0/0x3d0 [ 175.548025][ C1] __hrtimer_run_queues+0x403/0x840 [ 175.554014][ C1] hrtimer_interrupt+0x38c/0xda0 [ 175.558958][ C1] ? debug_smp_processor_id+0x9/0x20 [ 175.564239][ C1] smp_apic_timer_interrupt+0x109/0x280 [ 175.569780][ C1] apic_timer_interrupt+0xf/0x20 [ 175.574704][ C1] [ 175.577672][ C1] RIP: 0010:free_thread_stack+0x151/0x590 [ 175.583382][ C1] Code: 31 f6 e8 02 8d 6f 00 43 80 3c 2e 00 74 08 4c 89 e7 e8 73 94 6a 00 49 8b 1c 24 48 83 c3 08 48 89 d8 48 c1 e8 03 42 80 3c 28 00 <74> 08 48 89 df e8 55 94 6a 00 48 8b 3b be fc ff ff ff e8 28 04 00 [ 175.603148][ C1] RSP: 0018:ffffc90001017c30 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 175.611561][ C1] RAX: 1ffff11012e17e01 RBX: ffff8880970bf008 RCX: 0000000000000000 [ 175.619522][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffea00025c2340 [ 175.627481][ C1] RBP: ffffc90001017c68 R08: 000000000003a728 R09: ffffed1011f25719 [ 175.635453][ C1] R10: ffffed1011f25719 R11: 0000000000000000 R12: ffff8880970bf0a0 [ 175.643419][ C1] R13: dffffc0000000000 R14: 1ffff11012e17e14 R15: ffff88808f92b8b8 [ 175.651400][ C1] put_task_stack+0xa3/0x130 [ 175.655978][ C1] finish_task_switch+0x3f1/0x550 [ 175.660995][ C1] __schedule+0x9a8/0xcc0 [ 175.665322][ C1] schedule+0x181/0x210 [ 175.669468][ C1] worker_thread+0x10d6/0x1630 [ 175.674243][ C1] kthread+0x332/0x350 [ 175.678311][ C1] ? rcu_lock_release+0x30/0x30 [ 175.683154][ C1] ? kthread_blkcg+0xe0/0xe0 [ 175.687740][ C1] ret_from_fork+0x24/0x30