[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 52.256747][ T27] audit: type=1800 audit(1578459879.448:25): pid=8428 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 52.286450][ T27] audit: type=1800 audit(1578459879.448:26): pid=8428 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 52.306451][ T27] audit: type=1800 audit(1578459879.448:27): pid=8428 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.147' (ECDSA) to the list of known hosts. 2020/01/08 05:04:50 fuzzer started 2020/01/08 05:04:52 dialing manager at 10.128.0.26:35703 2020/01/08 05:04:52 syscalls: 2824 2020/01/08 05:04:52 code coverage: enabled 2020/01/08 05:04:52 comparison tracing: enabled 2020/01/08 05:04:52 extra coverage: enabled 2020/01/08 05:04:52 setuid sandbox: enabled 2020/01/08 05:04:52 namespace sandbox: enabled 2020/01/08 05:04:52 Android sandbox: /sys/fs/selinux/policy does not exist 2020/01/08 05:04:52 fault injection: enabled 2020/01/08 05:04:52 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/01/08 05:04:52 net packet injection: enabled 2020/01/08 05:04:52 net device setup: enabled 2020/01/08 05:04:52 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/01/08 05:04:52 devlink PCI setup: PCI device 0000:00:10.0 is not available 05:04:53 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0x8008550e, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 05:04:53 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000007c0)='auxv\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net\x00') renameat2(r0, &(0x7f0000000000)='./file0\x00', r1, &(0x7f0000000040)='./file0\x00', 0x0) syzkaller login: [ 66.106238][ T8593] IPVS: ftp: loaded support on port[0] = 21 05:04:53 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0xff25, 0x0) getresgid(0x0, 0x0, &(0x7f00000000c0)) keyctl$chown(0x4, r0, 0xee00, 0x0) r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r2 = memfd_create(&(0x7f0000000440)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0x3) ftruncate(r2, 0x1000000) sendfile(r1, r2, 0x0, 0xeefffdea) close(r1) [ 66.286949][ T8593] chnl_net:caif_netlink_parms(): no params data found [ 66.298501][ T8596] IPVS: ftp: loaded support on port[0] = 21 [ 66.423557][ T8593] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.434757][ T8593] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.458259][ T8593] device bridge_slave_0 entered promiscuous mode 05:04:53 executing program 3: r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@upd={0xe0, 0x10, 0x690ee9b7eac96905, 0x0, 0x0, {{'drbg-pr_sha1(-_,((\x00'}}}, 0xe0}}, 0x0) [ 66.491544][ T8593] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.500879][ T8593] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.509593][ T8593] device bridge_slave_1 entered promiscuous mode [ 66.537227][ T8593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.578406][ T8593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.605341][ T8598] IPVS: ftp: loaded support on port[0] = 21 [ 66.660739][ T8593] team0: Port device team_slave_0 added [ 66.684125][ T8596] chnl_net:caif_netlink_parms(): no params data found [ 66.703859][ T8601] IPVS: ftp: loaded support on port[0] = 21 [ 66.719423][ T8593] team0: Port device team_slave_1 added 05:04:54 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r0 = syz_open_dev$cec(0x0, 0x0, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000080)={0xd0}) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40086409, 0x0) pkey_alloc(0x0, 0x0) pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f00003e3000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f00000002c0)='\x00'}, 0x30) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) mmap(&(0x7f00004cf000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x3000) 05:04:54 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r4 = accept(r3, 0x0, 0x0) sendmmsg$sock(r4, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)="2d64902de3fdf7652fcf9a98d70c4e55b6ef977fdf684212ec461a82b4f05b2ef84e726f86bb5d80c6620acf06a3f1231101d6d0846afb5002e912b6a1282bf6b8a0cc43b33897b5ff01a3c043737a2681aa489e59bc98227fd3f09d20bda9bad80078a954949eeecb", 0x69}, {&(0x7f00000003c0)="403ef6e5a387e0", 0x7}], 0x2}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000580)="cc", 0x20000581}], 0x1}}], 0x2, 0x0) [ 66.970130][ T8593] device hsr_slave_0 entered promiscuous mode [ 67.006852][ T8593] device hsr_slave_1 entered promiscuous mode [ 67.072787][ T8596] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.082027][ T8596] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.089874][ T8596] device bridge_slave_0 entered promiscuous mode [ 67.099023][ T8596] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.106079][ T8596] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.114382][ T8596] device bridge_slave_1 entered promiscuous mode [ 67.181236][ T8603] IPVS: ftp: loaded support on port[0] = 21 [ 67.191648][ T8596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.204852][ T8605] IPVS: ftp: loaded support on port[0] = 21 [ 67.230366][ T8596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.245857][ T8598] chnl_net:caif_netlink_parms(): no params data found [ 67.305383][ T8598] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.313399][ T8598] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.322070][ T8598] device bridge_slave_0 entered promiscuous mode [ 67.331128][ T8598] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.338640][ T8598] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.346162][ T8598] device bridge_slave_1 entered promiscuous mode [ 67.390637][ T8596] team0: Port device team_slave_0 added [ 67.421525][ T8598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.431754][ T8596] team0: Port device team_slave_1 added [ 67.438015][ T8601] chnl_net:caif_netlink_parms(): no params data found [ 67.462139][ T8598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.487527][ T8598] team0: Port device team_slave_0 added [ 67.496002][ T8593] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.560612][ T8593] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.631161][ T8598] team0: Port device team_slave_1 added [ 67.641777][ T8593] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 67.692476][ T8593] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 67.869084][ T8596] device hsr_slave_0 entered promiscuous mode [ 67.926753][ T8596] device hsr_slave_1 entered promiscuous mode [ 67.976494][ T8596] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.984187][ T8596] Cannot create hsr debugfs directory [ 67.992898][ T8601] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.000753][ T8601] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.008615][ T8601] device bridge_slave_0 entered promiscuous mode [ 68.019154][ T8601] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.026237][ T8601] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.034045][ T8601] device bridge_slave_1 entered promiscuous mode [ 68.109114][ T8598] device hsr_slave_0 entered promiscuous mode [ 68.146814][ T8598] device hsr_slave_1 entered promiscuous mode [ 68.186716][ T8598] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.194398][ T8598] Cannot create hsr debugfs directory [ 68.211537][ T8605] chnl_net:caif_netlink_parms(): no params data found [ 68.221361][ T8601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.272955][ T8601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.325693][ T8601] team0: Port device team_slave_0 added [ 68.334360][ T8601] team0: Port device team_slave_1 added [ 68.364472][ T8603] chnl_net:caif_netlink_parms(): no params data found [ 68.419368][ T8601] device hsr_slave_0 entered promiscuous mode [ 68.476797][ T8601] device hsr_slave_1 entered promiscuous mode [ 68.516534][ T8601] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.524137][ T8601] Cannot create hsr debugfs directory [ 68.580445][ T8605] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.588296][ T8605] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.595851][ T8605] device bridge_slave_0 entered promiscuous mode [ 68.631672][ T8605] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.640733][ T8605] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.649673][ T8605] device bridge_slave_1 entered promiscuous mode [ 68.674074][ T8605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.699849][ T8603] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.707846][ T8603] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.715497][ T8603] device bridge_slave_0 entered promiscuous mode [ 68.723725][ T8603] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.730984][ T8603] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.739583][ T8603] device bridge_slave_1 entered promiscuous mode [ 68.753704][ T8596] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 68.798891][ T8605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.832499][ T8596] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 68.912896][ T8596] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 68.971944][ T8596] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 69.041956][ T8598] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.109971][ T8598] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.158818][ T8603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.170817][ T8603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.195515][ T8603] team0: Port device team_slave_0 added [ 69.208223][ T8598] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.270699][ T8598] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.321875][ T8603] team0: Port device team_slave_1 added [ 69.341483][ T8605] team0: Port device team_slave_0 added [ 69.354335][ T8605] team0: Port device team_slave_1 added [ 69.410951][ T8605] device hsr_slave_0 entered promiscuous mode [ 69.466850][ T8605] device hsr_slave_1 entered promiscuous mode [ 69.506545][ T8605] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.514133][ T8605] Cannot create hsr debugfs directory [ 69.558255][ T8603] device hsr_slave_0 entered promiscuous mode [ 69.606798][ T8603] device hsr_slave_1 entered promiscuous mode [ 69.636620][ T8603] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.644337][ T8603] Cannot create hsr debugfs directory [ 69.662593][ T8593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.718829][ T8593] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.734389][ T2839] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.743162][ T2839] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.776935][ T8601] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.821640][ T2842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.831012][ T2842] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.841219][ T2842] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.848472][ T2842] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.856961][ T2842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.865532][ T2842] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.873918][ T2842] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.880999][ T2842] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.902933][ T8601] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.971618][ T2862] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.979576][ T2862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.988930][ T2862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.008714][ T8601] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.039370][ T8601] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.087003][ T2699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.095617][ T2699] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.105145][ T2699] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.161681][ T8605] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 70.228548][ T2839] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.239101][ T2839] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.247834][ T2839] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.256044][ T2839] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.273641][ T8603] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 70.333827][ T8605] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 70.380678][ T8593] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.393606][ T8593] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.401485][ T2699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.410159][ T2699] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.428317][ T8603] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 70.477754][ T8605] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 70.521911][ T8605] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 70.587924][ T8596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.596003][ T8603] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 70.668742][ T8603] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 70.734393][ T8598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.763164][ T2699] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.772090][ T2699] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.784925][ T8593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.811948][ T8596] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.827886][ T2839] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.835631][ T2839] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.845623][ T2839] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.853886][ T2839] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.881884][ T8598] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.893015][ T8601] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.905735][ T2840] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.916503][ T2840] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.925167][ T2840] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.934159][ T2840] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.942544][ T2840] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.949739][ T2840] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.973029][ T8593] device veth0_vlan entered promiscuous mode [ 70.996438][ T2840] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.004382][ T2840] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.013392][ T2840] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.022173][ T2840] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.029364][ T2840] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.039131][ T2840] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.047677][ T2840] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.056533][ T2840] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.064855][ T2840] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.071964][ T2840] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.079684][ T2840] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.087856][ T2840] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.095890][ T2840] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.103656][ T2840] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.111763][ T2840] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.120371][ T2840] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.128672][ T2840] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.135693][ T2840] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.144776][ T2840] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.153526][ T2840] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.162081][ T2840] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.170619][ T2840] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.179093][ T2840] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.187715][ T2840] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.196068][ T2840] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.205442][ T2840] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.213758][ T2840] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.221830][ T2840] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.229647][ T2840] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.255120][ T8596] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.269895][ T8596] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.284830][ T8601] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.292720][ T2839] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.302085][ T2839] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.310654][ T2839] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.318983][ T2839] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.327807][ T2839] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.336206][ T2839] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.344831][ T2839] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.353173][ T2839] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.361524][ T2839] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.369940][ T2839] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.383255][ T8598] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.397198][ T8598] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.412099][ T8593] device veth1_vlan entered promiscuous mode [ 71.420323][ T2839] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.429034][ T2839] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.437457][ T2839] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.445169][ T2839] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.453973][ T2839] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.465130][ T8605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.514049][ T2851] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.524286][ T2851] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.541402][ T2851] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.550521][ T2851] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.557734][ T2851] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.565434][ T2851] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.574947][ T2851] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.583572][ T2851] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.591097][ T2851] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.599470][ T2851] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.607579][ T2851] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.617357][ T2840] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.625217][ T2840] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.641785][ T8605] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.660511][ T2699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.677004][ T2699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.692926][ T2699] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.704408][ T2699] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 176.696339][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 176.703189][ C0] rcu: 0-....: (10499 ticks this GP) idle=d8a/1/0x4000000000000002 softirq=13772/13772 fqs=2714 [ 176.713941][ C0] (t=10500 jiffies g=6969 q=611) [ 176.718980][ C0] rcu: rcu_preempt kthread starved for 5061 jiffies! g6969 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 176.729998][ C0] rcu: RCU grace-period kthread stack dump: [ 176.735878][ C0] rcu_preempt R running task 29032 10 2 0x80004000 [ 176.743964][ C0] Call Trace: [ 176.747277][ C0] __schedule+0x9a0/0xcc0 [ 176.751643][ C0] schedule+0x181/0x210 [ 176.756088][ C0] schedule_timeout+0x14f/0x240 [ 176.761038][ C0] ? run_local_timers+0x120/0x120 [ 176.766082][ C0] rcu_gp_kthread+0xed8/0x1770 [ 176.770863][ C0] kthread+0x332/0x350 [ 176.774956][ C0] ? rcu_report_qs_rsp+0x140/0x140 [ 176.780090][ C0] ? kthread_blkcg+0xe0/0xe0 [ 176.784681][ C0] ret_from_fork+0x24/0x30 [ 176.789104][ C0] NMI backtrace for cpu 0 [ 176.793426][ C0] CPU: 0 PID: 8611 Comm: syz-executor.0 Not tainted 5.5.0-rc5-syzkaller #0 [ 176.802119][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 176.812185][ C0] Call Trace: [ 176.815593][ C0] [ 176.818448][ C0] dump_stack+0x1fb/0x318 [ 176.822781][ C0] nmi_cpu_backtrace+0xaf/0x1a0 [ 176.827660][ C0] ? nmi_trigger_cpumask_backtrace+0x16d/0x290 [ 176.833932][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 176.840176][ C0] nmi_trigger_cpumask_backtrace+0x174/0x290 [ 176.846172][ C0] arch_trigger_cpumask_backtrace+0x10/0x20 [ 176.852058][ C0] rcu_dump_cpu_stacks+0x15a/0x220 [ 176.857167][ C0] rcu_sched_clock_irq+0xe25/0x1ad0 [ 176.862367][ C0] ? trace_hardirqs_off+0x74/0x80 [ 176.867387][ C0] update_process_times+0x12d/0x180 [ 176.872577][ C0] tick_sched_timer+0x263/0x420 [ 176.877432][ C0] ? tick_setup_sched_timer+0x3d0/0x3d0 [ 176.882970][ C0] __hrtimer_run_queues+0x403/0x840 [ 176.888173][ C0] hrtimer_interrupt+0x38c/0xda0 [ 176.893121][ C0] ? debug_smp_processor_id+0x9/0x20 [ 176.898752][ C0] smp_apic_timer_interrupt+0x109/0x280 [ 176.904290][ C0] apic_timer_interrupt+0xf/0x20 [ 176.909241][ C0] [ 176.912172][ C0] RIP: 0010:__memcg_kmem_uncharge+0x2e/0x1a0 [ 176.918231][ C0] Code: 41 57 41 56 41 55 41 54 53 50 89 f3 49 89 fc 48 b8 00 00 00 00 00 fc ff df 4c 8d 77 38 4d 89 f5 49 c1 ed 03 41 80 7c 05 00 00 <74> 08 4c 89 f7 e8 48 07 fb ff 4d 8b 3e b8 01 00 00 00 89 d9 d3 e0 [ 176.938016][ C0] RSP: 0018:ffffc900022878f0 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 176.946419][ C0] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffff8880939ec240 [ 176.954383][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffea000243c480 [ 176.962345][ C0] RBP: ffffc90002287920 R08: dffffc0000000000 R09: fffffbfff124248a [ 176.970308][ C0] R10: fffffbfff124248a R11: 0000000000000000 R12: ffffea000243c480 [ 176.978373][ C0] R13: 1ffffd4000487897 R14: ffffea000243c4b8 R15: ffff8880a6e0d638 [ 176.986401][ C0] ? free_thread_stack+0x124/0x590 [ 176.991531][ C0] free_thread_stack+0x12e/0x590 [ 176.996482][ C0] put_task_stack+0xa3/0x130 [ 177.001065][ C0] finish_task_switch+0x3f1/0x550 [ 177.006084][ C0] __schedule+0x9a8/0xcc0 [ 177.010416][ C0] ? ___preempt_schedule_notrace+0x16/0x27 [ 177.016212][ C0] preempt_schedule_notrace+0xdb/0x120 [ 177.021748][ C0] ___preempt_schedule_notrace+0x16/0x27 [ 177.027393][ C0] ? rcu_is_watching+0x57/0xa0 [ 177.032334][ C0] rcu_is_watching+0x82/0xa0 [ 177.036921][ C0] memcg_kmem_get_cache+0x2e8/0x570 [ 177.042116][ C0] ? __should_failslab+0x11a/0x160 [ 177.047226][ C0] kmem_cache_alloc_node+0x94/0x280 [ 177.052499][ C0] ? dup_task_struct+0x55/0x910 [ 177.057341][ C0] dup_task_struct+0x55/0x910 [ 177.062207][ C0] copy_process+0x4c5/0x5510 [ 177.066993][ C0] _do_fork+0x13e/0x660 [ 177.071152][ C0] __x64_sys_clone+0x20b/0x250 [ 177.075914][ C0] do_syscall_64+0xf7/0x1c0 [ 177.080409][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 177.086289][ C0] RIP: 0033:0x45d919 [ 177.090183][ C0] Code: ff 48 85 f6 0f 84 d7 8c fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c ae 8c fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75 [ 177.109779][ C0] RSP: 002b:00007fff160336d8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 177.118179][ C0] RAX: ffffffffffffffda RBX: 00007f8265e4e700 RCX: 000000000045d919 [ 177.126140][ C0] RDX: 00007f8265e4e9d0 RSI: 00007f8265e4ddb0 RDI: 00000000003d0f00 [ 177.134153][ C0] RBP: 00007fff160338f0 R08: 00007f8265e4e700 R09: 00007f8265e4e700 [ 177.142128][ C0] R10: 00007f8265e4e9d0 R11: 0000000000000202 R12: 0000000000000000 [ 177.150283][ C0] R13: 00007fff1603378f R14: 00007f8265e4e9c0 R15: 000000000075bf2c