[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 43.068826][ T25] audit: type=1800 audit(1575428332.848:25): pid=8001 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 43.088460][ T25] audit: type=1800 audit(1575428332.858:26): pid=8001 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 43.129710][ T25] audit: type=1800 audit(1575428332.858:27): pid=8001 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.43' (ECDSA) to the list of known hosts. 2019/12/04 02:59:04 fuzzer started 2019/12/04 02:59:06 dialing manager at 10.128.0.26:42111 2019/12/04 02:59:06 syscalls: 2689 2019/12/04 02:59:06 code coverage: enabled 2019/12/04 02:59:06 comparison tracing: enabled 2019/12/04 02:59:06 extra coverage: extra coverage is not supported by the kernel 2019/12/04 02:59:06 setuid sandbox: enabled 2019/12/04 02:59:06 namespace sandbox: enabled 2019/12/04 02:59:06 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/04 02:59:06 fault injection: enabled 2019/12/04 02:59:06 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/04 02:59:06 net packet injection: enabled 2019/12/04 02:59:06 net device setup: enabled 2019/12/04 02:59:06 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/12/04 02:59:06 devlink PCI setup: PCI device 0000:00:10.0 is not available 02:59:07 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x4, 0x26}) 02:59:07 executing program 1: socket$inet6(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x10000, @mcast1, 0x4}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @mcast2, 0x8}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, 0x0, &(0x7f0000000340)) socket(0x1000000010, 0x400000400080803, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) r4 = dup(r3) ioctl$TCGETS2(r4, 0x802c542a, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000740)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000000580)=0xff35) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f', r5}) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000000300)) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000002c0)={@remote, 0x7e, r6}) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @remote, @remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24b}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000640)={{{@in6=@remote, @in=@empty}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f0000000500)=0xffffffffffffff1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) syzkaller login: [ 57.417145][ T8164] IPVS: ftp: loaded support on port[0] = 21 [ 57.584216][ T8164] chnl_net:caif_netlink_parms(): no params data found [ 57.605742][ T8167] IPVS: ftp: loaded support on port[0] = 21 [ 57.663243][ T8164] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.679823][ T8164] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.687528][ T8164] device bridge_slave_0 entered promiscuous mode 02:59:07 executing program 2: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffe1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) migrate_pages(0x0, 0x7ffd, 0x0, &(0x7f0000000180)=0x3) [ 57.711932][ T8164] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.719020][ T8164] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.727445][ T8164] device bridge_slave_1 entered promiscuous mode [ 57.782838][ T8164] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.835051][ T8164] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.902493][ T8167] chnl_net:caif_netlink_parms(): no params data found [ 57.922774][ T8164] team0: Port device team_slave_0 added [ 57.930143][ T8164] team0: Port device team_slave_1 added [ 57.946667][ T8170] IPVS: ftp: loaded support on port[0] = 21 02:59:07 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) ioctl$SIOCGETNODEID(r1, 0x89e1, &(0x7f0000000240)={0x4}) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000000)=""/63, &(0x7f0000000040)=0x3f) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000100)=0x60, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000080)={0x1, 'team_slave_0\x00', 0x4}, 0x18) [ 57.992391][ T8164] device hsr_slave_0 entered promiscuous mode [ 58.032401][ T8164] device hsr_slave_1 entered promiscuous mode [ 58.119789][ T8167] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.126882][ T8167] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.142606][ T8167] device bridge_slave_0 entered promiscuous mode [ 58.164869][ T8167] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.172703][ T8167] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.180790][ T8167] device bridge_slave_1 entered promiscuous mode [ 58.194456][ T8172] IPVS: ftp: loaded support on port[0] = 21 02:59:08 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x800000000080003, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000006a00030800000000a903000000000000000000000800010037dc3f4d5186bcd263da04668e2485eceb247a5add0983eef707f02dcdeeb8abe575f0d6b7af0b314753d0e59ea12686eebbdec9a77fa412b6089dc8164fae12200f954d8c7e5f1a3ffe579b9b805410c085a41ffc52dcdcbfe97b91788032c3a120225b750a11c9605b3ef4a7821bce2777fc0d8d35f85d3fe3dfeedff8dca6fa0aef7099d6a57e5a72360b8b0c29ea7f5588527b913070b03bc7e50527", @ANYRES32=0x0], 0x20}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 58.214026][ T8164] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 58.283821][ T8164] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 58.382815][ T8164] netdevsim netdevsim0 netdevsim2: renamed from eth2 02:59:08 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000040)) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) [ 58.444856][ T8164] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 58.519159][ T8174] IPVS: ftp: loaded support on port[0] = 21 [ 58.561801][ T8167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.577973][ T8176] IPVS: ftp: loaded support on port[0] = 21 [ 58.597529][ T8167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.618092][ T8167] team0: Port device team_slave_0 added [ 58.626709][ T8167] team0: Port device team_slave_1 added [ 58.691865][ T8167] device hsr_slave_0 entered promiscuous mode [ 58.740356][ T8167] device hsr_slave_1 entered promiscuous mode [ 58.799894][ T8167] debugfs: Directory 'hsr0' with parent '/' already present! [ 58.864280][ T8167] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 58.942949][ T8167] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 59.021330][ T8167] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 59.101947][ T8167] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 59.198643][ T8170] chnl_net:caif_netlink_parms(): no params data found [ 59.207495][ T8172] chnl_net:caif_netlink_parms(): no params data found [ 59.261950][ T8172] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.269061][ T8172] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.276952][ T8172] device bridge_slave_0 entered promiscuous mode [ 59.284651][ T8172] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.291818][ T8172] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.299451][ T8172] device bridge_slave_1 entered promiscuous mode [ 59.330957][ T8176] chnl_net:caif_netlink_parms(): no params data found [ 59.383397][ T8170] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.391001][ T8170] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.398537][ T8170] device bridge_slave_0 entered promiscuous mode [ 59.415864][ T8170] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.423009][ T8170] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.431119][ T8170] device bridge_slave_1 entered promiscuous mode [ 59.447863][ T8170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.459469][ T8172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.483652][ T8170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.499439][ T8164] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.517384][ T8176] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.525320][ T8176] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.533267][ T8176] device bridge_slave_0 entered promiscuous mode [ 59.541976][ T8172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.551640][ T8174] chnl_net:caif_netlink_parms(): no params data found [ 59.581776][ T8176] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.588841][ T8176] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.598806][ T8176] device bridge_slave_1 entered promiscuous mode [ 59.634771][ T8170] team0: Port device team_slave_0 added [ 59.642236][ T8176] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.653378][ T8172] team0: Port device team_slave_0 added [ 59.661880][ T8176] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.672042][ T8174] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.679152][ T8174] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.688544][ T8174] device bridge_slave_0 entered promiscuous mode [ 59.697695][ T8170] team0: Port device team_slave_1 added [ 59.712034][ T8172] team0: Port device team_slave_1 added [ 59.719433][ T8167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.738622][ T8174] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.747242][ T8174] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.755019][ T8174] device bridge_slave_1 entered promiscuous mode [ 59.821452][ T8172] device hsr_slave_0 entered promiscuous mode [ 59.870097][ T8172] device hsr_slave_1 entered promiscuous mode [ 59.919801][ T8172] debugfs: Directory 'hsr0' with parent '/' already present! [ 59.928818][ T8176] team0: Port device team_slave_0 added [ 59.973717][ T8170] device hsr_slave_0 entered promiscuous mode [ 60.030028][ T8170] device hsr_slave_1 entered promiscuous mode [ 60.070360][ T8170] debugfs: Directory 'hsr0' with parent '/' already present! [ 60.077963][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.086484][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.100262][ T8164] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.107051][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.115130][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.124467][ T8174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.135495][ T8174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.145568][ T8176] team0: Port device team_slave_1 added [ 60.162286][ T8167] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.184686][ T8177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.193171][ T8177] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.201647][ T8177] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.208804][ T8177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.216974][ T8177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.225599][ T8177] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.233919][ T8177] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.240992][ T8177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.248982][ T8177] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.291754][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.303296][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.312052][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.321915][ T3014] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.328959][ T3014] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.336662][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.345712][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.354297][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.362612][ T3014] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.369725][ T3014] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.377189][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.386191][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.394835][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.403313][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.412285][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.420690][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.429094][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.437400][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.445725][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.454354][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.463668][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.471522][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.479170][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.489025][ T8174] team0: Port device team_slave_0 added [ 60.500794][ T8174] team0: Port device team_slave_1 added [ 60.514319][ T8170] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 60.562532][ T8170] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 60.606735][ T3046] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.615420][ T3046] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.624281][ T3046] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.632967][ T3046] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.658738][ T8172] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 60.727716][ T8170] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 60.773854][ T8170] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 60.881359][ T8176] device hsr_slave_0 entered promiscuous mode [ 60.920253][ T8176] device hsr_slave_1 entered promiscuous mode [ 60.959905][ T8176] debugfs: Directory 'hsr0' with parent '/' already present! [ 60.967612][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.976112][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.984926][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.993217][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.002939][ T8167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.011426][ T8172] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 61.064875][ T8172] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 61.122689][ T8172] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 61.232012][ T8174] device hsr_slave_0 entered promiscuous mode [ 61.280090][ T8174] device hsr_slave_1 entered promiscuous mode [ 61.329901][ T8174] debugfs: Directory 'hsr0' with parent '/' already present! [ 61.363098][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.374365][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.402785][ T8164] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.438383][ T8174] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 61.502573][ T8174] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 61.560677][ T8167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.581469][ T8176] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 61.617812][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.625865][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.639862][ T8174] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 61.682489][ T8174] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 166.689633][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 166.696416][ C1] rcu: 1-....: (10499 ticks this GP) idle=fba/1/0x4000000000000002 softirq=10137/10138 fqs=2802 [ 166.707149][ C1] (t=10501 jiffies g=6093 q=101) [ 166.712164][ C1] rcu: rcu_preempt kthread starved for 4898 jiffies! g6093 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 166.723159][ C1] rcu: RCU grace-period kthread stack dump: [ 166.729046][ C1] rcu_preempt R running task 29032 10 2 0x80004000 [ 166.736930][ C1] Call Trace: [ 166.740228][ C1] __schedule+0x9a0/0xcc0 [ 166.744553][ C1] schedule+0x181/0x210 [ 166.748785][ C1] schedule_timeout+0x14f/0x240 [ 166.753619][ C1] ? run_local_timers+0x120/0x120 [ 166.758633][ C1] rcu_gp_kthread+0xed8/0x1770 [ 166.763389][ C1] kthread+0x332/0x350 [ 166.767442][ C1] ? rcu_report_qs_rsp+0x140/0x140 [ 166.772538][ C1] ? kthread_blkcg+0xe0/0xe0 [ 166.777112][ C1] ret_from_fork+0x24/0x30 [ 166.781528][ C1] NMI backtrace for cpu 1 [ 166.785844][ C1] CPU: 1 PID: 8185 Comm: syz-executor.0 Not tainted 5.4.0-syzkaller #0 [ 166.794085][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 166.804127][ C1] Call Trace: [ 166.807394][ C1] [ 166.810242][ C1] dump_stack+0x1fb/0x318 [ 166.814562][ C1] nmi_cpu_backtrace+0xaf/0x1a0 [ 166.819481][ C1] ? nmi_trigger_cpumask_backtrace+0x16d/0x290 [ 166.825618][ C1] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 166.831670][ C1] nmi_trigger_cpumask_backtrace+0x174/0x290 [ 166.837636][ C1] arch_trigger_cpumask_backtrace+0x10/0x20 [ 166.845171][ C1] rcu_dump_cpu_stacks+0x15a/0x220 [ 166.850276][ C1] rcu_sched_clock_irq+0xe25/0x1ad0 [ 166.855461][ C1] ? trace_hardirqs_off+0x74/0x80 [ 166.860472][ C1] update_process_times+0x12d/0x180 [ 166.865659][ C1] tick_sched_timer+0x263/0x420 [ 166.870496][ C1] ? tick_setup_sched_timer+0x3d0/0x3d0 [ 166.876030][ C1] __hrtimer_run_queues+0x403/0x840 [ 166.881244][ C1] hrtimer_interrupt+0x38c/0xda0 [ 166.886183][ C1] ? debug_smp_processor_id+0x9/0x20 [ 166.891722][ C1] smp_apic_timer_interrupt+0x109/0x280 [ 166.897255][ C1] apic_timer_interrupt+0xf/0x20 [ 166.902175][ C1] [ 166.905103][ C1] RIP: 0010:__memcg_kmem_uncharge+0x21a/0x2e0 [ 166.911156][ C1] Code: 0d 89 e8 59 97 00 00 bf 01 00 00 00 e8 2f e3 9b ff 65 8b 05 d4 fd 4a 7e 85 c0 74 53 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d 49 8d 5f 10 48 89 df be 08 00 00 00 e8 04 c1 fa ff 48 8b 45 d0 [ 166.930743][ C1] RSP: 0018:ffffc90002417880 EFLAGS: 00000296 ORIG_RAX: ffffffffffffff13 [ 166.940384][ C1] RAX: 0000000000000001 RBX: ffffea00024b4c00 RCX: 0000000000000000 [ 166.948338][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffea00024b4c00 [ 166.956294][ C1] RBP: ffffc900024178c0 R08: 000000000003a768 R09: fffffbfff120248a [ 166.964249][ C1] R10: fffffbfff120248a R11: 0000000000000000 R12: ffff8880a2cc3920 [ 166.972216][ C1] R13: dffffc0000000000 R14: 1ffff11014598724 R15: ffff88808d3954a8 [ 166.980191][ C1] ? free_thread_stack+0x12e/0x590 [ 166.985292][ C1] put_task_stack+0xa3/0x130 [ 166.989868][ C1] finish_task_switch+0x3f1/0x550 [ 166.998266][ C1] __schedule+0x9a8/0xcc0 [ 167.002590][ C1] ? ___preempt_schedule+0x16/0x18 [ 167.007687][ C1] preempt_schedule+0xdb/0x120 [ 167.012435][ C1] ___preempt_schedule+0x16/0x18 [ 167.017356][ C1] ? page_poisoning_enabled+0x1c/0x30 [ 167.022713][ C1] prep_new_page+0x161/0x2e0 [ 167.027292][ C1] get_page_from_freelist+0x850/0xaa0 [ 167.032662][ C1] __alloc_pages_nodemask+0x264/0x5d0 [ 167.038028][ C1] alloc_pages_vma+0x94a/0xd50 [ 167.042782][ C1] do_huge_pmd_anonymous_page+0x883/0xe50 [ 167.048502][ C1] handle_mm_fault+0x2017/0x2890 [ 167.053447][ C1] do_user_addr_fault+0x589/0xaf0 [ 167.058464][ C1] __do_page_fault+0xd3/0x1f0 [ 167.063152][ C1] do_page_fault+0x99/0xb0 [ 167.067817][ C1] page_fault+0x39/0x40 [ 167.071975][ C1] RIP: 0033:0x4418c1 [ 167.075988][ C1] Code: 8d 15 43 c1 0a 00 8b 0c 8a 8b 04 82 29 c8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 fa 20 48 89 f8 73 77 f6 c2 01 74 0b 0f b6 0e <88> 0f 48 ff c6 48 ff c7 f6 c2 02 74 12 0f b7 0e 66 89 0f 48 83 c6 [ 167.095772][ C1] RSP: 002b:00007ffc9a3dd978 EFLAGS: 00010202 [ 167.101830][ C1] RAX: 0000000020000100 RBX: 0000000000000000 RCX: 000000000000002f [ 167.109789][ C1] RDX: 0000000000000009 RSI: 0000000000760020 RDI: 0000000020000100 [ 167.117748][ C1] RBP: 0000000000760000 R08: 0000000000000000 R09: 0000000000000004 [ 167.125703][ C1] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000001 [ 167.133675][ C1] R13: 00007ffc9a3ddb60 R14: 0000000000760008 R15: 00007ffc9a3ddb70