[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 52.909113][ T26] audit: type=1800 audit(1578485108.823:25): pid=8316 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 52.930648][ T26] audit: type=1800 audit(1578485108.823:26): pid=8316 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 52.951062][ T26] audit: type=1800 audit(1578485108.833:27): pid=8316 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.41' (ECDSA) to the list of known hosts. 2020/01/08 12:05:18 fuzzer started 2020/01/08 12:05:19 dialing manager at 10.128.0.26:35703 2020/01/08 12:05:19 syscalls: 2824 2020/01/08 12:05:19 code coverage: enabled 2020/01/08 12:05:19 comparison tracing: enabled 2020/01/08 12:05:19 extra coverage: enabled 2020/01/08 12:05:19 setuid sandbox: enabled 2020/01/08 12:05:19 namespace sandbox: enabled 2020/01/08 12:05:19 Android sandbox: /sys/fs/selinux/policy does not exist 2020/01/08 12:05:19 fault injection: enabled 2020/01/08 12:05:19 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/01/08 12:05:19 net packet injection: enabled 2020/01/08 12:05:19 net device setup: enabled 2020/01/08 12:05:19 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/01/08 12:05:19 devlink PCI setup: PCI device 0000:00:10.0 is not available 12:05:20 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x200004e20}, 0x1c) listen(r3, 0x126) r4 = socket$inet6(0xa, 0x80006, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000000240)={0x9}, 0x109) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) 12:05:20 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newspdinfo={0x1c, 0x24, 0x435, 0x0, 0x0, 0x0, [@ipv4_hthresh={0x8, 0x3, {0x0, 0xc0}}]}, 0x1c}}, 0x0) syzkaller login: [ 64.604588][ T8484] IPVS: ftp: loaded support on port[0] = 21 12:05:20 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000100), 0xe) listen(r0, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0xffffffffffffffff, 0x18b3}, 0x8) close(r0) [ 64.756884][ T8487] IPVS: ftp: loaded support on port[0] = 21 [ 64.789686][ T8484] chnl_net:caif_netlink_parms(): no params data found [ 64.920920][ T8484] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.929062][ T8484] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.937593][ T8484] device bridge_slave_0 entered promiscuous mode [ 64.956166][ T8484] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.963499][ T8484] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.971491][ T8484] device bridge_slave_1 entered promiscuous mode [ 64.985463][ T8487] chnl_net:caif_netlink_parms(): no params data found [ 65.025997][ T8484] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.048870][ T8484] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.060928][ T8487] bridge0: port 1(bridge_slave_0) entered blocking state 12:05:21 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000ac0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r3 = accept$alg(r2, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x307, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/84, 0x54}, {&(0x7f0000000180)=""/98, 0xb}, {&(0x7f0000000280)=""/112, 0x70}, {&(0x7f0000000500)=""/249, 0xf9}], 0x4}}], 0x4000049, 0x0, 0x0) [ 65.071200][ T8487] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.079222][ T8487] device bridge_slave_0 entered promiscuous mode [ 65.100242][ T8484] team0: Port device team_slave_0 added [ 65.116291][ T8487] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.123721][ T8487] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.131841][ T8487] device bridge_slave_1 entered promiscuous mode [ 65.141797][ T8484] team0: Port device team_slave_1 added [ 65.155002][ T8490] IPVS: ftp: loaded support on port[0] = 21 [ 65.206635][ T8484] device hsr_slave_0 entered promiscuous mode [ 65.236303][ T8484] device hsr_slave_1 entered promiscuous mode [ 65.326078][ T8487] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.340435][ T8492] IPVS: ftp: loaded support on port[0] = 21 [ 65.354177][ T8487] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 12:05:21 executing program 4: sysinfo(&(0x7f0000000000)=""/22) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f000069affb)={0x2, 0x0, @loopback}, 0x10) sendmsg(0xffffffffffffffff, 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 65.441461][ T8487] team0: Port device team_slave_0 added [ 65.484079][ T8487] team0: Port device team_slave_1 added 12:05:21 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@typedef={0x0, 0x0, 0x0, 0x2}]}}, &(0x7f0000000280)=""/237, 0x26, 0xed, 0x1}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={r1, 0x10, &(0x7f0000000240)={0x0, 0x0, 0x0}}, 0x10) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r2, 0x4) bpf$MAP_CREATE(0x1000000000000, &(0x7f0000000000)={0xd, 0x4, 0x4, 0x8004, 0x0, r0, 0x0, [], 0x0, r3, 0x1, 0x2}, 0x3c) [ 65.637124][ T8487] device hsr_slave_0 entered promiscuous mode [ 65.694317][ T8487] device hsr_slave_1 entered promiscuous mode [ 65.735690][ T8487] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.744244][ T8487] Cannot create hsr debugfs directory [ 65.789811][ T8490] chnl_net:caif_netlink_parms(): no params data found [ 65.798882][ T8484] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.866542][ T8484] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.938192][ T8495] IPVS: ftp: loaded support on port[0] = 21 [ 65.955412][ T8484] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 66.033152][ T8497] IPVS: ftp: loaded support on port[0] = 21 [ 66.034158][ T8490] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.047369][ T8490] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.055461][ T8490] device bridge_slave_0 entered promiscuous mode [ 66.070147][ T8484] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 66.119676][ T8490] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.127722][ T8490] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.138566][ T8490] device bridge_slave_1 entered promiscuous mode [ 66.186235][ T8490] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.198232][ T8492] chnl_net:caif_netlink_parms(): no params data found [ 66.227557][ T8490] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.281622][ T8490] team0: Port device team_slave_0 added [ 66.302211][ T8490] team0: Port device team_slave_1 added [ 66.328020][ T8487] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 66.367381][ T8487] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 66.441372][ T8487] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 66.506214][ T8492] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.513291][ T8492] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.522226][ T8492] device bridge_slave_0 entered promiscuous mode [ 66.531047][ T8492] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.538315][ T8492] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.546191][ T8492] device bridge_slave_1 entered promiscuous mode [ 66.583691][ T8495] chnl_net:caif_netlink_parms(): no params data found [ 66.593817][ T8487] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 66.685780][ T8490] device hsr_slave_0 entered promiscuous mode [ 66.734417][ T8490] device hsr_slave_1 entered promiscuous mode [ 66.804119][ T8490] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.811805][ T8490] Cannot create hsr debugfs directory [ 66.828244][ T8492] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.843340][ T8492] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.930338][ T8495] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.937867][ T8495] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.945807][ T8495] device bridge_slave_0 entered promiscuous mode [ 66.956140][ T8492] team0: Port device team_slave_0 added [ 66.982124][ T8495] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.991774][ T8495] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.001072][ T8495] device bridge_slave_1 entered promiscuous mode [ 67.009784][ T8492] team0: Port device team_slave_1 added [ 67.046799][ T8497] chnl_net:caif_netlink_parms(): no params data found [ 67.117175][ T8492] device hsr_slave_0 entered promiscuous mode [ 67.154247][ T8492] device hsr_slave_1 entered promiscuous mode [ 67.204112][ T8492] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.211703][ T8492] Cannot create hsr debugfs directory [ 67.222133][ T8495] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.234776][ T8495] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.277653][ T8490] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 67.350398][ T8490] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 67.420278][ T8495] team0: Port device team_slave_0 added [ 67.426598][ T8490] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 67.488482][ T8495] team0: Port device team_slave_1 added [ 67.496141][ T8490] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 67.547663][ T8497] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.555398][ T8497] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.563161][ T8497] device bridge_slave_0 entered promiscuous mode [ 67.571580][ T8497] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.578840][ T8497] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.587035][ T8497] device bridge_slave_1 entered promiscuous mode [ 67.613651][ T8484] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.646317][ T8487] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.665854][ T8497] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.679919][ T8497] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.747945][ T8495] device hsr_slave_0 entered promiscuous mode [ 67.785085][ T8495] device hsr_slave_1 entered promiscuous mode [ 67.824228][ T8495] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.831814][ T8495] Cannot create hsr debugfs directory [ 67.848605][ T3032] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.856882][ T3032] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.866590][ T8497] team0: Port device team_slave_0 added [ 67.876895][ T8492] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 67.944295][ T8497] team0: Port device team_slave_1 added [ 67.951142][ T8487] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.961467][ T8492] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 68.026876][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.035171][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.045668][ T2698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.057554][ T2698] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.066156][ T2698] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.073270][ T2698] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.082347][ T8492] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 68.131085][ T8492] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 68.246821][ T8497] device hsr_slave_0 entered promiscuous mode [ 68.284453][ T8497] device hsr_slave_1 entered promiscuous mode [ 68.325548][ T8497] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.333217][ T8497] Cannot create hsr debugfs directory [ 68.342606][ T8484] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.350438][ T2802] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.381607][ T2698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.391478][ T2698] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.400439][ T2698] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.407530][ T2698] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.458386][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.468469][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.478497][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.485694][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.493362][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.507039][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.543376][ T8490] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.556307][ T2712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.567646][ T8495] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 68.660829][ T8490] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.671777][ T2698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.681567][ T2698] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.691289][ T2698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.700649][ T2698] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.709233][ T2698] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.716337][ T2698] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.723832][ T2698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.731942][ T2698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.739773][ T2698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.748426][ T2698] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.757201][ T2698] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.765317][ T8495] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 68.839235][ T8495] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 68.877976][ T8495] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 68.980026][ T8497] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 69.006668][ T3032] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.015981][ T3032] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.025549][ T3032] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.033741][ T3032] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.043007][ T3032] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.052439][ T3032] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.061551][ T3032] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.068698][ T3032] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.077124][ T3032] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.085857][ T3032] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.096989][ T8487] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.112821][ T8497] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 69.146555][ T3032] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.154994][ T8497] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 69.250625][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.259386][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.268522][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.276261][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.283673][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.292502][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.301352][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.308461][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.316466][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.325694][ T8497] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 69.374905][ T8492] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.387058][ T8487] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.395159][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.403413][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.412261][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.420794][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.429442][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.438135][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.453250][ T8484] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.465968][ T8484] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.493306][ T2698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.501891][ T2698] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.512941][ T2698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.523571][ T2698] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.543441][ T8492] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.565100][ T2802] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.572845][ T2802] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.582133][ T2802] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.591232][ T2802] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.599339][ T2802] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.607149][ T2802] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.615897][ T2802] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.624650][ T2802] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.633192][ T2802] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.641807][ T2802] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.650186][ T2802] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.671443][ T8484] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.690405][ T2731] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.700630][ T2731] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.721235][ T8490] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.732754][ T2712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.741354][ T2712] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.750272][ T2712] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.757371][ T2712] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.771992][ T8495] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.792121][ T2731] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.800152][ T2731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.808682][ T2731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.817090][ T2731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.826151][ T2731] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.834714][ T2731] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.841790][ T2731] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.849391][ T2731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.857936][ T2731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.876511][ T8487] device veth0_vlan entered promiscuous mode [ 69.892018][ T8495] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.905836][ T2731] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.913532][ T2731] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.921630][ T2731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.930355][ T2731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.938093][ T2731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.955198][ T8487] device veth1_vlan entered promiscuous mode [ 69.975069][ T2712] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.982998][ T2712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.992224][ T2712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.001037][ T2712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.009233][ T2712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.017777][ T2712] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.026446][ T2712] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.033858][ T2712] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.054704][ T2712] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.063134][ T2712] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.085036][ T2712] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.092718][ T2712] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.100705][ T2712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.110498][ T2712] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.118941][ T2712] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.126058][ T2712] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.134211][ T2712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.142828][ T2712] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.151722][ T2712] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.158824][ T2712] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.166405][ T2712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.175425][ T2712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.185843][ T2712] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.195887][ T8484] device veth0_vlan entered promiscuous mode [ 70.210638][ T2698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.235309][ T2698] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 175.243907][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 175.250662][ C0] rcu: 0-....: (10499 ticks this GP) idle=522/1/0x4000000000000002 softirq=13698/13699 fqs=2720 [ 175.261723][ C0] (t=10500 jiffies g=6765 q=252) [ 175.266924][ C0] rcu: rcu_preempt kthread starved for 5046 jiffies! g6765 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 175.277922][ C0] rcu: RCU grace-period kthread stack dump: [ 175.283990][ C0] rcu_preempt R running task 28984 10 2 0x80004000 [ 175.291899][ C0] Call Trace: [ 175.295283][ C0] __schedule+0x9a0/0xcc0 [ 175.299996][ C0] schedule+0x181/0x210 [ 175.304161][ C0] schedule_timeout+0x14f/0x240 [ 175.309025][ C0] ? run_local_timers+0x120/0x120 [ 175.314307][ C0] rcu_gp_kthread+0xed8/0x1770 [ 175.319275][ C0] kthread+0x332/0x350 [ 175.323544][ C0] ? rcu_report_qs_rsp+0x140/0x140 [ 175.328667][ C0] ? kthread_blkcg+0xe0/0xe0 [ 175.333251][ C0] ret_from_fork+0x24/0x30 [ 175.337697][ C0] NMI backtrace for cpu 0 [ 175.342052][ C0] CPU: 0 PID: 8487 Comm: syz-executor.1 Not tainted 5.5.0-rc5-syzkaller #0 [ 175.350635][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 175.360701][ C0] Call Trace: [ 175.363991][ C0] [ 175.366930][ C0] dump_stack+0x1fb/0x318 [ 175.371296][ C0] nmi_cpu_backtrace+0xaf/0x1a0 [ 175.376167][ C0] ? nmi_trigger_cpumask_backtrace+0x16d/0x290 [ 175.382694][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 175.389018][ C0] nmi_trigger_cpumask_backtrace+0x174/0x290 [ 175.395185][ C0] arch_trigger_cpumask_backtrace+0x10/0x20 [ 175.401177][ C0] rcu_dump_cpu_stacks+0x15a/0x220 [ 175.406743][ C0] rcu_sched_clock_irq+0xe25/0x1ad0 [ 175.411937][ C0] ? trace_hardirqs_off+0x74/0x80 [ 175.417045][ C0] update_process_times+0x12d/0x180 [ 175.422672][ C0] tick_sched_timer+0x263/0x420 [ 175.427803][ C0] ? tick_setup_sched_timer+0x3d0/0x3d0 [ 175.433439][ C0] __hrtimer_run_queues+0x403/0x840 [ 175.438741][ C0] hrtimer_interrupt+0x38c/0xda0 [ 175.443696][ C0] ? debug_smp_processor_id+0x9/0x20 [ 175.448976][ C0] smp_apic_timer_interrupt+0x109/0x280 [ 175.454609][ C0] apic_timer_interrupt+0xf/0x20 [ 175.459804][ C0] [ 175.462854][ C0] RIP: 0010:__memcg_kmem_uncharge+0x44/0x1a0 [ 175.469188][ C0] Code: fc ff df 4c 8d 77 38 4d 89 f5 49 c1 ed 03 41 80 7c 05 00 00 74 08 4c 89 f7 e8 48 07 fb ff 4d 8b 3e b8 01 00 00 00 89 d9 d3 e0 <4d> 85 ff 0f 84 de 00 00 00 4c 39 3d a4 be ac 07 0f 84 2c 01 00 00 [ 175.490465][ C0] RSP: 0018:ffffc90001fa78a8 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 175.498866][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000000 [ 175.506825][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffea0002a13f00 [ 175.514793][ C0] RBP: ffffc90001fa78d8 R08: dffffc0000000000 R09: fffffbfff124248a [ 175.522760][ C0] R10: fffffbfff124248a R11: 0000000000000000 R12: ffffea0002a13f00 [ 175.530753][ C0] R13: 1ffffd40005427e7 R14: ffffea0002a13f38 R15: 0000000000000000 [ 175.538736][ C0] ? free_thread_stack+0x124/0x590 [ 175.543840][ C0] free_thread_stack+0x12e/0x590 [ 175.548859][ C0] put_task_stack+0xa3/0x130 [ 175.553445][ C0] finish_task_switch+0x3f1/0x550 [ 175.558471][ C0] __schedule+0x9a8/0xcc0 [ 175.562804][ C0] preempt_schedule_irq+0xc1/0x140 [ 175.567945][ C0] retint_kernel+0x1b/0x2b [ 175.572648][ C0] RIP: 0010:kfree+0x1a3/0x200 [ 175.577577][ C0] Code: 48 83 3d 07 04 78 07 00 74 68 4c 89 f7 57 9d 0f 1f 44 00 00 eb 19 e8 3c d3 c9 ff 48 83 3d ec 03 78 07 00 74 51 4c 89 f7 57 9d <0f> 1f 44 00 00 5b 41 5c 41 5e 41 5f 5d c3 48 ff c9 48 89 c8 e9 c8 [ 175.597166][ C0] RSP: 0018:ffffc90001fa7b38 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff02 [ 175.605566][ C0] RAX: ffff888097f50914 RBX: ffff8880aa4001c0 RCX: ffffffff815c1e17 [ 175.613527][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000286 [ 175.621494][ C0] RBP: ffffc90001fa7b58 R08: ffff888097f508d8 R09: fffffbfff140cf2e [ 175.629466][ C0] R10: fffffbfff140cf2e R11: 0000000000000000 R12: ffff88809faa9d00 [ 175.637428][ C0] R13: dffffc0000000000 R14: 0000000000000286 R15: ffffffff835d65ab [ 175.645483][ C0] ? smack_sk_free_security+0x3b/0x40 [ 175.650856][ C0] ? mark_lock+0x107/0x1650 [ 175.655353][ C0] smack_sk_free_security+0x3b/0x40 [ 175.660539][ C0] security_sk_free+0x52/0x90 [ 175.665203][ C0] __sk_destruct+0x5ff/0x750 [ 175.669781][ C0] ? __sk_free+0x355/0x430 [ 175.674192][ C0] __sk_free+0x35d/0x430 [ 175.678430][ C0] sk_free+0x51/0x90 [ 175.682314][ C0] tcp_close+0xec9/0x1200 [ 175.687239][ C0] ? lock_acquire+0x158/0x250 [ 175.691903][ C0] ? sock_close+0x9e/0x260 [ 175.696335][ C0] inet_release+0x165/0x1c0 [ 175.700856][ C0] inet6_release+0x57/0x70 [ 175.705285][ C0] sock_close+0xe1/0x260 [ 175.709536][ C0] ? sock_mmap+0xa0/0xa0 [ 175.713779][ C0] __fput+0x2e4/0x740 [ 175.717849][ C0] ____fput+0x15/0x20 [ 175.721839][ C0] task_work_run+0x17e/0x1b0 [ 175.726432][ C0] prepare_exit_to_usermode+0x483/0x5b0 [ 175.731983][ C0] syscall_return_slowpath+0x113/0x4a0 [ 175.737620][ C0] do_syscall_64+0x11f/0x1c0 [ 175.742217][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 175.748119][ C0] RIP: 0033:0x414ac0 [ 175.752010][ C0] Code: 01 f0 ff ff 0f 83 30 1b 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 83 3d ad 39 66 00 00 75 14 b8 03 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff [ 175.772124][ C0] RSP: 002b:00007fff30780f68 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 175.780525][ C0] RAX: 0000000000000000 RBX: 00007fff30780f90 RCX: 0000000000414ac0 [ 175.788483][ C0] RDX: 0000000000000010 RSI: 00007fff30781410 RDI: 0000000000000003 [ 175.796441][ C0] RBP: 0000000000719cc0 R08: 0000000000006000 R09: 0000000000004000 [ 175.804402][ C0] R10: 00007fff30781090 R11: 0000000000000246 R12: 0000000000000003 [ 175.812375][ C0] R13: 0000000000000000 R14: 0000000000000029 R15: 0000000000719cc0