[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 56.298569][ T27] audit: type=1800 audit(1578462240.736:25): pid=8454 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 56.317562][ T27] audit: type=1800 audit(1578462240.736:26): pid=8454 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 56.337776][ T27] audit: type=1800 audit(1578462240.736:27): pid=8454 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.12' (ECDSA) to the list of known hosts. 2020/01/08 05:44:12 fuzzer started 2020/01/08 05:44:14 dialing manager at 10.128.0.26:35703 2020/01/08 05:44:14 syscalls: 2824 2020/01/08 05:44:14 code coverage: enabled 2020/01/08 05:44:14 comparison tracing: enabled 2020/01/08 05:44:14 extra coverage: enabled 2020/01/08 05:44:14 setuid sandbox: enabled 2020/01/08 05:44:14 namespace sandbox: enabled 2020/01/08 05:44:14 Android sandbox: /sys/fs/selinux/policy does not exist 2020/01/08 05:44:14 fault injection: enabled 2020/01/08 05:44:14 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/01/08 05:44:14 net packet injection: enabled 2020/01/08 05:44:14 net device setup: enabled 2020/01/08 05:44:14 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/01/08 05:44:14 devlink PCI setup: PCI device 0000:00:10.0 is not available 05:44:15 executing program 0: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f43", 0x5d, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000580)='keyring\x00', &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000100)="cf", 0x1, r1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924924924924f0, 0x0) keyctl$dh_compute(0x17, 0x0, &(0x7f0000000840)=""/229, 0xe5, 0x0) keyctl$set_timeout(0xf, r0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) close(r3) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x41041, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x40a42, 0x0) ftruncate(r4, 0x200004) sendfile(r3, r4, 0x0, 0x80001d000010) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x40, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f00000007c0)={0x53, 0xcfda226e936929db, 0x6a, 0x6, @scatter={0x6, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000200)=""/114, 0x72}, {&(0x7f0000000280)=""/197, 0xc5}, {&(0x7f0000000380)=""/196, 0xc4}, {&(0x7f0000000480)=""/168, 0xa8}, {&(0x7f0000000540)=""/134, 0x86}]}, &(0x7f0000000680)="ca9e4934383af050c23dc12dc236c2ead5318c0a165a810a8b6726342c5b6bb444d446b42e55c461a690aed6dfc20241c20ed3cc5045dd6be0cdffc836a033db5266c568fd7d978ca8598106bdf1eceea7a08fd33dcf0d28f1953a152f7607eaf862a56f956d3702cfb0", &(0x7f0000000700)=""/137, 0x1f, 0x2, 0x7, 0x0}) fchmod(0xffffffffffffffff, 0x2) 05:44:15 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x87fff, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f0000000000)={0x40000000003, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) ioctl$VIDIOC_DECODER_CMD(0xffffffffffffffff, 0xc0485660, &(0x7f0000000500)={0x0, 0x0, @start}) syzkaller login: [ 71.120683][ T8621] IPVS: ftp: loaded support on port[0] = 21 05:44:15 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r3, @ANYBLOB="000020000000000024001200140001006272696467655f736c617665000000000c0005"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) [ 71.307992][ T8621] chnl_net:caif_netlink_parms(): no params data found [ 71.325657][ T8624] IPVS: ftp: loaded support on port[0] = 21 [ 71.385916][ T8621] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.393838][ T8621] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.402127][ T8621] device bridge_slave_0 entered promiscuous mode [ 71.416495][ T8621] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.423626][ T8621] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.431378][ T8621] device bridge_slave_1 entered promiscuous mode [ 71.457834][ T8621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.470127][ T8621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.502379][ T8621] team0: Port device team_slave_0 added [ 71.524839][ T8621] team0: Port device team_slave_1 added 05:44:16 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x2, 0x0) r2 = socket(0x10, 0x800000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x1f2, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="5500000066000bf2ddd6753cb263fb1000015000", @ANYRES32=r3, @ANYRES64], 0x74}}, 0x10000) sendmmsg$alg(r1, &(0x7f0000000180), 0x52136a5252f3b2, 0x0) [ 71.644472][ T8621] device hsr_slave_0 entered promiscuous mode [ 71.693341][ T8621] device hsr_slave_1 entered promiscuous mode [ 71.789581][ T8627] IPVS: ftp: loaded support on port[0] = 21 [ 71.799761][ T8624] chnl_net:caif_netlink_parms(): no params data found 05:44:16 executing program 4: unshare(0x20000000) unshare(0x26020400) [ 71.834667][ T8629] IPVS: ftp: loaded support on port[0] = 21 [ 71.947164][ T8624] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.961939][ T8624] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.982399][ T8624] device bridge_slave_0 entered promiscuous mode [ 72.023601][ T8624] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.030715][ T8624] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.053389][ T8624] device bridge_slave_1 entered promiscuous mode 05:44:16 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="c5dd66"], 0x3) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 72.105267][ T8621] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.164648][ T8621] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.205967][ T8624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.242867][ T8621] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.274748][ T8621] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.307507][ T8624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.352893][ T8629] chnl_net:caif_netlink_parms(): no params data found [ 72.371719][ T8624] team0: Port device team_slave_0 added [ 72.384704][ T8624] team0: Port device team_slave_1 added [ 72.396295][ T8631] IPVS: ftp: loaded support on port[0] = 21 [ 72.417887][ T8633] IPVS: ftp: loaded support on port[0] = 21 [ 72.490987][ T8627] chnl_net:caif_netlink_parms(): no params data found [ 72.544335][ T8624] device hsr_slave_0 entered promiscuous mode [ 72.612142][ T8624] device hsr_slave_1 entered promiscuous mode [ 72.651899][ T8624] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.659700][ T8624] Cannot create hsr debugfs directory [ 72.676212][ T8629] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.683415][ T8629] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.691111][ T8629] device bridge_slave_0 entered promiscuous mode [ 72.730730][ T8629] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.737966][ T8629] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.745906][ T8629] device bridge_slave_1 entered promiscuous mode [ 72.773274][ T8627] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.780341][ T8627] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.789066][ T8627] device bridge_slave_0 entered promiscuous mode [ 72.801413][ T8629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.812964][ T8629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.836906][ T8627] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.844425][ T8627] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.852254][ T8627] device bridge_slave_1 entered promiscuous mode [ 72.875906][ T8627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.887966][ T8627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.932701][ T8627] team0: Port device team_slave_0 added [ 72.948920][ T8629] team0: Port device team_slave_0 added [ 72.959442][ T8629] team0: Port device team_slave_1 added [ 72.966274][ T8627] team0: Port device team_slave_1 added [ 72.984329][ T8621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.093432][ T8629] device hsr_slave_0 entered promiscuous mode [ 73.142041][ T8629] device hsr_slave_1 entered promiscuous mode [ 73.211881][ T8629] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.220342][ T8629] Cannot create hsr debugfs directory [ 73.314535][ T8627] device hsr_slave_0 entered promiscuous mode [ 73.342066][ T8627] device hsr_slave_1 entered promiscuous mode [ 73.391826][ T8627] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.399451][ T8627] Cannot create hsr debugfs directory [ 73.407445][ T8631] chnl_net:caif_netlink_parms(): no params data found [ 73.419789][ T8624] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.464551][ T8624] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.505626][ T8624] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.559040][ T2853] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.567493][ T2853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.591262][ T8621] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.600448][ T8633] chnl_net:caif_netlink_parms(): no params data found [ 73.613214][ T8624] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.700925][ T2853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.711488][ T2853] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.720145][ T2853] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.727349][ T2853] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.735243][ T2853] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.743953][ T2853] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.752445][ T2853] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.759479][ T2853] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.769526][ T2853] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.799855][ T8633] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.810098][ T8633] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.820765][ T8633] device bridge_slave_0 entered promiscuous mode [ 73.831872][ T2853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.843443][ T8633] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.850490][ T8633] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.858477][ T8633] device bridge_slave_1 entered promiscuous mode [ 73.915942][ T8631] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.923574][ T8631] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.931122][ T8631] device bridge_slave_0 entered promiscuous mode [ 73.939899][ T8631] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.947124][ T8631] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.954792][ T8631] device bridge_slave_1 entered promiscuous mode [ 73.961683][ T2853] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.973597][ T2853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.982209][ T2853] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.990426][ T2853] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.007478][ T8633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.031833][ T8633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.059904][ T8633] team0: Port device team_slave_0 added [ 74.086455][ T2853] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.096809][ T2853] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.114066][ T8631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.124639][ T8633] team0: Port device team_slave_1 added [ 74.130609][ T8629] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 74.173109][ T8627] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 74.215581][ T8627] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 74.254173][ T8631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.275192][ T8629] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.316459][ T2853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.324883][ T2853] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.334820][ T8627] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 74.397239][ T8627] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 74.483627][ T8633] device hsr_slave_0 entered promiscuous mode [ 74.522158][ T8633] device hsr_slave_1 entered promiscuous mode [ 74.572783][ T8633] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.580494][ T8633] Cannot create hsr debugfs directory [ 74.586994][ T8629] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.634064][ T8629] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 74.684984][ T8631] team0: Port device team_slave_0 added [ 74.726281][ T8631] team0: Port device team_slave_1 added [ 74.733614][ T8621] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.745604][ T3241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.756006][ T3241] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.787279][ T8624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.884023][ T8631] device hsr_slave_0 entered promiscuous mode [ 74.932226][ T8631] device hsr_slave_1 entered promiscuous mode [ 74.971909][ T8631] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.979537][ T8631] Cannot create hsr debugfs directory [ 75.005599][ T3241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.014457][ T3241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.029281][ T8624] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.080255][ T8633] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 75.135127][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.144445][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.153958][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.160999][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.169405][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.177311][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.184871][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.193887][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.202298][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.209326][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.216886][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.226341][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.254915][ T8633] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 75.287890][ T8633] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 75.356536][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.364364][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.373201][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.382246][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.390554][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.399411][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.419128][ T8629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.427213][ T8621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.436191][ T8633] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 75.501561][ T8624] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 75.515463][ T8624] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.546189][ T2677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.555467][ T2677] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.564003][ T2677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.573086][ T2677] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.581122][ T2677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.589838][ T2677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.599696][ T2677] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.618928][ T8629] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.633535][ T2772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.641226][ T2772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.659887][ T2677] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.669472][ T2677] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.691441][ T8621] device veth0_vlan entered promiscuous mode [ 75.702653][ T8631] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 75.765015][ T8624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.774199][ T2772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.785004][ T2772] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.793436][ T2772] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.801333][ T2772] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.809704][ T2772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.817847][ T2772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.827862][ T8627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.842590][ T8631] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 75.898115][ T8631] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 75.945672][ T2772] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.954181][ T2772] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.961710][ T2772] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.969513][ T2772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.978206][ T2772] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.986929][ T2772] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.994028][ T2772] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.002354][ T8621] device veth1_vlan entered promiscuous mode [ 76.024050][ T8631] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 76.076638][ T2853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.086022][ T2853] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.101550][ T8627] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.119275][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 76.127161][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.134953][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.144604][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.153707][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.162510][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.170723][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.177823][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.185508][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.193361][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 76.206570][ T2853] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.215523][ T2853] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.232627][ T2853] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.241137][ T2853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.269101][ T8629] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 76.281109][ T8629] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.300689][ T8624] device veth0_vlan entered promiscuous mode [ 76.316821][ T2677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.326005][ T2677] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.336352][ T2677] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.343459][ T2677] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.353277][ T2677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.361688][ T2677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.370214][ T2677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.379504][ T2677] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.389242][ T2677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 76.397684][ T2677] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.406173][ T2677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 76.414703][ T2677] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.423305][ T2677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.431283][ T2677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.441162][ T2677] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.449099][ T2677] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 76.457012][ T2677] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.465018][ T2677] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.486874][ T8633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.514314][ T8624] device veth1_vlan entered promiscuous mode [ 76.534546][ T2853] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.551524][ T2853] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.573015][ T2853] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.581418][ T2853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 76.589885][ T2853] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.598317][ T2853] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 76.606947][ T2853] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.615858][ T2853] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 76.624180][ T2853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.633187][ T8627] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 76.643733][ T8633] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.716925][ T8633] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 76.729254][ T8633] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.772874][ T2772] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.785572][ T2772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.801243][ T2772] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.815973][ T2772] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.823103][ T2772] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.837803][ T2772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.847695][ T2772] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.862224][ T2772] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.869310][ T2772] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.883643][ T2772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.896408][ T2772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.908287][ T2772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.921255][ T2772] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.935722][ T2772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.946656][ T2772] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.959661][ T2772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 76.970450][ T2772] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.986008][ T2772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 76.997790][ T2772] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 77.009081][ T2772] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.019573][ T2772] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.083431][ T8629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.092301][ T2853] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 77.100584][ T2853] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 77.124562][ T2853] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 77.137941][ T2853] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.146750][ T2853] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.167302][ T8627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.189943][ T8631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.227565][ T2772] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.241593][ T2772] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.275904][ T8633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.315997][ T8631] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.337572][ T2853] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 77.353820][ T2853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 181.571748][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 181.592961][ C0] rcu: 0-...!: (10499 ticks this GP) idle=596/1/0x4000000000000002 softirq=15483/15483 fqs=35 [ 181.631731][ C0] (t=10506 jiffies g=7145 q=1058) [ 181.639454][ C0] rcu: rcu_preempt kthread starved for 10427 jiffies! g7145 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 181.681952][ C0] rcu: RCU grace-period kthread stack dump: [ 181.702450][ C0] rcu_preempt I28984 10 2 0x80004000 [ 181.724083][ C0] Call Trace: [ 181.737909][ C0] __schedule+0x9a0/0xcc0 [ 181.757010][ C0] schedule+0x181/0x210 [ 181.773582][ C0] schedule_timeout+0x14f/0x240 [ 181.782605][ C0] ? run_local_timers+0x120/0x120 [ 181.788849][ C0] rcu_gp_kthread+0xed8/0x1770 [ 181.794088][ C0] kthread+0x332/0x350 [ 181.798417][ C0] ? rcu_report_qs_rsp+0x140/0x140 [ 181.803963][ C0] ? kthread_blkcg+0xe0/0xe0 [ 181.811610][ C0] ret_from_fork+0x24/0x30 [ 181.818801][ C0] NMI backtrace for cpu 0 [ 181.825303][ C0] CPU: 0 PID: 8639 Comm: syz-executor.0 Not tainted 5.5.0-rc5-syzkaller #0 [ 181.836489][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 181.848290][ C0] Call Trace: [ 181.851996][ C0] [ 181.856259][ C0] dump_stack+0x1fb/0x318 [ 181.860918][ C0] nmi_cpu_backtrace+0xaf/0x1a0 [ 181.865956][ C0] ? nmi_trigger_cpumask_backtrace+0x16d/0x290 [ 181.873438][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 181.879713][ C0] nmi_trigger_cpumask_backtrace+0x174/0x290 [ 181.886140][ C0] arch_trigger_cpumask_backtrace+0x10/0x20 [ 181.892177][ C0] rcu_dump_cpu_stacks+0x15a/0x220 [ 181.897449][ C0] rcu_sched_clock_irq+0xe25/0x1ad0 [ 181.902911][ C0] ? trace_hardirqs_off+0x74/0x80 [ 181.908897][ C0] update_process_times+0x12d/0x180 [ 181.914095][ C0] tick_sched_timer+0x263/0x420 [ 181.918944][ C0] ? tick_setup_sched_timer+0x3d0/0x3d0 [ 181.924486][ C0] __hrtimer_run_queues+0x403/0x840 [ 181.929692][ C0] hrtimer_interrupt+0x38c/0xda0 [ 181.934640][ C0] ? debug_smp_processor_id+0x9/0x20 [ 181.939928][ C0] smp_apic_timer_interrupt+0x109/0x280 [ 181.945473][ C0] apic_timer_interrupt+0xf/0x20 [ 181.950402][ C0] [ 181.953340][ C0] RIP: 0010:__memcg_kmem_uncharge+0x1/0x1a0 [ 181.959227][ C0] Code: eb 1b 83 3d 20 bf ac 07 00 74 12 48 81 c3 08 02 00 00 48 89 df 4c 89 f6 e8 8c 85 ff ff 5b 41 5e 5d c3 0f 1f 80 00 00 00 00 55 <48> 89 e5 41 57 41 56 41 55 41 54 53 50 89 f3 49 89 fc 48 b8 00 00 [ 181.978917][ C0] RSP: 0018:ffffc90002be7878 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 181.987329][ C0] RAX: ffffffff81489244 RBX: ffffea000297fac0 RCX: ffff8880a7b5a180 [ 181.995298][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffea000297fac0 [ 182.003270][ C0] RBP: ffffc90002be78c0 R08: dffffc0000000000 R09: fffffbfff124248a [ 182.011235][ C0] R10: fffffbfff124248a R11: 0000000000000000 R12: ffff88809d37ada0 [ 182.019215][ C0] R13: dffffc0000000000 R14: 1ffff11013a6f5b4 R15: ffff8880a9a9f478 [ 182.027195][ C0] ? free_thread_stack+0x124/0x590 [ 182.032309][ C0] ? free_thread_stack+0x12e/0x590 [ 182.037423][ C0] put_task_stack+0xa3/0x130 [ 182.042009][ C0] finish_task_switch+0x3f1/0x550 [ 182.047037][ C0] __schedule+0x9a8/0xcc0 [ 182.051374][ C0] ? ___preempt_schedule+0x16/0x18 [ 182.056497][ C0] preempt_schedule+0xdb/0x120 [ 182.061255][ C0] ___preempt_schedule+0x16/0x18 [ 182.066193][ C0] ? page_poisoning_enabled+0x1c/0x30 [ 182.071566][ C0] prep_new_page+0x161/0x2e0 [ 182.076156][ C0] get_page_from_freelist+0x850/0xaa0 [ 182.081536][ C0] __alloc_pages_nodemask+0x264/0x5d0 [ 182.086914][ C0] alloc_pages_vma+0x94a/0xd50 [ 182.091683][ C0] do_huge_pmd_anonymous_page+0x883/0xe50 [ 182.097408][ C0] handle_mm_fault+0x2017/0x2890 [ 182.102364][ C0] do_user_addr_fault+0x589/0xaf0 [ 182.107406][ C0] __do_page_fault+0xd3/0x1f0 [ 182.112204][ C0] do_page_fault+0x99/0xb0 [ 182.116619][ C0] page_fault+0x39/0x40 [ 182.120767][ C0] RIP: 0033:0x442191 [ 182.124674][ C0] Code: 8d 15 33 e4 0a 00 8b 0c 8a 8b 04 82 29 c8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 fa 20 48 89 f8 73 77 f6 c2 01 74 0b 0f b6 0e <88> 0f 48 ff c6 48 ff c7 f6 c2 02 74 12 0f b7 0e 66 89 0f 48 83 c6 [ 182.144505][ C0] RSP: 002b:00007ffe75217508 EFLAGS: 00010202 [ 182.150570][ C0] RAX: 00000000200000c0 RBX: 0000000000000000 RCX: 0000000000000075 [ 182.158537][ C0] RDX: 0000000000000005 RSI: 0000000000760020 RDI: 00000000200000c0 [ 182.166505][ C0] RBP: 0000000000760000 R08: 0000000000000000 R09: 0000000000000004 [ 182.174473][ C0] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000001 [ 182.182535][ C0] R13: 00007ffe752176f0 R14: 0000000000760008 R15: 00007ffe75217700