[ 40.706823][ T26] audit: type=1800 audit(1575324803.953:27): pid=7877 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [ 40.726246][ T26] audit: type=1800 audit(1575324803.953:28): pid=7877 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 41.271882][ T26] audit: type=1800 audit(1575324804.583:29): pid=7877 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 41.291036][ T26] audit: type=1800 audit(1575324804.583:30): pid=7877 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.15.194' (ECDSA) to the list of known hosts. 2019/12/02 22:13:33 fuzzer started 2019/12/02 22:13:34 dialing manager at 10.128.0.26:38907 2019/12/02 22:13:35 syscalls: 2697 2019/12/02 22:13:35 code coverage: enabled 2019/12/02 22:13:35 comparison tracing: enabled 2019/12/02 22:13:35 extra coverage: extra coverage is not supported by the kernel 2019/12/02 22:13:35 setuid sandbox: enabled 2019/12/02 22:13:35 namespace sandbox: enabled 2019/12/02 22:13:35 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/02 22:13:35 fault injection: enabled 2019/12/02 22:13:35 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/02 22:13:35 net packet injection: enabled 2019/12/02 22:13:35 net device setup: enabled 2019/12/02 22:13:35 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/12/02 22:13:35 devlink PCI setup: PCI device 0000:00:10.0 is not available 22:13:36 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000200)={0x80033d, 0x20000000209, 0x0, 0xffffffffffffffff}) ppoll(&(0x7f0000000280)=[{r3, 0x26}], 0x1, 0x0, 0x0, 0x0) 22:13:36 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x63, 0x11, 0x24}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0x16, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) syzkaller login: [ 52.945302][ T8040] IPVS: ftp: loaded support on port[0] = 21 22:13:36 executing program 2: personality(0xffffffffffffffff) [ 53.091403][ T8042] IPVS: ftp: loaded support on port[0] = 21 [ 53.112446][ T8040] chnl_net:caif_netlink_parms(): no params data found [ 53.219697][ T8040] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.227264][ T8040] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.235563][ T8040] device bridge_slave_0 entered promiscuous mode [ 53.255521][ T8045] IPVS: ftp: loaded support on port[0] = 21 [ 53.268785][ T8040] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.275920][ T8040] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.288274][ T8040] device bridge_slave_1 entered promiscuous mode 22:13:36 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 53.368144][ T8040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.409925][ T8040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.431265][ T8042] chnl_net:caif_netlink_parms(): no params data found [ 53.505378][ T8040] team0: Port device team_slave_0 added [ 53.541510][ T8040] team0: Port device team_slave_1 added [ 53.552577][ T8045] chnl_net:caif_netlink_parms(): no params data found [ 53.563430][ T8042] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.571383][ T8042] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.579544][ T8042] device bridge_slave_0 entered promiscuous mode [ 53.605759][ T8042] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.615307][ T8042] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.623488][ T8042] device bridge_slave_1 entered promiscuous mode 22:13:37 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x6b) ioctl(r0, 0x2001000008912, &(0x7f0000000000)="0815b5055e0bcfe87b3071") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x11, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) [ 53.700140][ T8040] device hsr_slave_0 entered promiscuous mode [ 53.757792][ T8040] device hsr_slave_1 entered promiscuous mode [ 53.815971][ T8042] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.843462][ T8049] IPVS: ftp: loaded support on port[0] = 21 [ 53.853646][ T8051] IPVS: ftp: loaded support on port[0] = 21 [ 53.869614][ T8042] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.912198][ T8045] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.922148][ T8045] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.930581][ T8045] device bridge_slave_0 entered promiscuous mode [ 53.950316][ T8042] team0: Port device team_slave_0 added 22:13:37 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) dup(0xffffffffffffffff) capget(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x5452, &(0x7f0000000040)) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[@ANYPTR64, @ANYRES32, @ANYPTR], 0x14) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000240)='system.posix_acl_access\x00', 0x0, 0x0, 0x1) waitid(0x83b895581628fca5, 0x0, 0x0, 0x0, &(0x7f0000000480)) prctl$PR_SET_PTRACER(0x59616d61, 0x0) r2 = syz_open_dev$sg(&(0x7f0000001580)='/dev/sg#\x00', 0x0, 0x0) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, r2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = dup3(r3, r4, 0x0) dup2(r6, r5) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000180)='em1\x00'}, 0x30) [ 53.964589][ T8045] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.987705][ T8045] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.995278][ T8045] device bridge_slave_1 entered promiscuous mode [ 54.003683][ T8042] team0: Port device team_slave_1 added [ 54.016340][ T8040] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.093236][ T8040] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.100911][ T8053] IPVS: ftp: loaded support on port[0] = 21 [ 54.171594][ T8040] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.256895][ T8040] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.320590][ T8045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.390109][ T8042] device hsr_slave_0 entered promiscuous mode [ 54.457741][ T8042] device hsr_slave_1 entered promiscuous mode [ 54.507576][ T8042] debugfs: Directory 'hsr0' with parent '/' already present! [ 54.530099][ T8045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.615411][ T8045] team0: Port device team_slave_0 added [ 54.627353][ T8049] chnl_net:caif_netlink_parms(): no params data found [ 54.650349][ T8045] team0: Port device team_slave_1 added [ 54.675432][ T8042] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 54.699682][ T8042] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 54.751217][ T8042] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 54.811371][ T8042] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 54.903998][ T8049] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.911182][ T8049] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.918867][ T8049] device bridge_slave_0 entered promiscuous mode [ 54.932612][ T8051] chnl_net:caif_netlink_parms(): no params data found [ 54.955368][ T8053] chnl_net:caif_netlink_parms(): no params data found [ 55.040939][ T8045] device hsr_slave_0 entered promiscuous mode [ 55.087791][ T8045] device hsr_slave_1 entered promiscuous mode [ 55.147555][ T8045] debugfs: Directory 'hsr0' with parent '/' already present! [ 55.155181][ T8049] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.162738][ T8049] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.170636][ T8049] device bridge_slave_1 entered promiscuous mode [ 55.218535][ T8049] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.230268][ T8049] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.256506][ T8051] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.265422][ T8051] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.273356][ T8051] device bridge_slave_0 entered promiscuous mode [ 55.282304][ T8051] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.289610][ T8051] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.297224][ T8051] device bridge_slave_1 entered promiscuous mode [ 55.344092][ T8049] team0: Port device team_slave_0 added [ 55.351382][ T8049] team0: Port device team_slave_1 added [ 55.359647][ T8051] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.369155][ T8053] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.376190][ T8053] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.384759][ T8053] device bridge_slave_0 entered promiscuous mode [ 55.392756][ T8053] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.399874][ T8053] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.407988][ T8053] device bridge_slave_1 entered promiscuous mode [ 55.470340][ T8049] device hsr_slave_0 entered promiscuous mode [ 55.517974][ T8049] device hsr_slave_1 entered promiscuous mode [ 55.557611][ T8049] debugfs: Directory 'hsr0' with parent '/' already present! [ 55.566258][ T8051] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.581110][ T8045] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 55.650111][ T8045] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 55.714552][ T8045] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 55.773263][ T8045] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 55.845912][ T8051] team0: Port device team_slave_0 added [ 55.853422][ T8053] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.873671][ T8040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.882605][ T8051] team0: Port device team_slave_1 added [ 55.890422][ T8053] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.914564][ T8053] team0: Port device team_slave_0 added [ 55.928037][ T8053] team0: Port device team_slave_1 added [ 55.947155][ T8040] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.999206][ T8051] device hsr_slave_0 entered promiscuous mode [ 56.047862][ T8051] device hsr_slave_1 entered promiscuous mode [ 56.097644][ T8051] debugfs: Directory 'hsr0' with parent '/' already present! [ 56.109187][ T8054] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.117292][ T8054] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.125071][ T8054] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.133887][ T8054] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.142604][ T8054] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.149817][ T8054] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.209266][ T8053] device hsr_slave_0 entered promiscuous mode [ 56.247858][ T8053] device hsr_slave_1 entered promiscuous mode [ 56.297670][ T8053] debugfs: Directory 'hsr0' with parent '/' already present! [ 56.305345][ T8049] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 56.371984][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.380390][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.389005][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.397390][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.404529][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.415587][ T8042] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.428166][ T8049] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 56.459749][ T8049] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 56.489552][ T8049] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 56.529502][ T8054] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.576621][ T8053] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 56.599924][ T8054] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.610743][ T8054] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.619590][ T8054] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.628060][ T8054] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.635554][ T8054] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.643211][ T8054] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.651565][ T8054] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.660223][ T8054] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.672443][ T8042] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.688551][ T8053] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 56.723541][ T8053] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 56.780435][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.789795][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.798482][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.806662][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.816597][ T8040] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.832950][ T8053] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 56.868321][ T8051] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 56.920450][ T8051] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 56.961019][ T8051] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 57.028527][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.036979][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.045643][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.052802][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.060410][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.068988][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.077200][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.084277][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.092071][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.100647][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.111493][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.131512][ T8051] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 57.212019][ T8045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.222177][ T8054] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.229789][ T8054] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.238777][ T8040] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.265097][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.273614][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.282436][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.291151][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.300354][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.318158][ T8045] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.342972][ T8042] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 57.355197][ T8042] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.378556][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.386080][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.393923][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.402794][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.412263][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.419342][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.427158][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.435559][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.443801][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.452154][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.461329][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.469127][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.515881][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.533521][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.545513][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.552654][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.346858][ T3639] BUG: unable to handle page fault for address: fffff52002f00000 [ 58.354615][ T3639] #PF: supervisor read access in kernel mode [ 58.360578][ T3639] #PF: error_code(0x0000) - not-present page [ 58.366533][ T3639] PGD 21ffee067 P4D 21ffee067 PUD aa91b067 PMD 6da73067 PTE 0 [ 58.373984][ T3639] Oops: 0000 [#1] PREEMPT SMP KASAN [ 58.379164][ T3639] CPU: 0 PID: 3639 Comm: ion_system_heap Not tainted 5.4.0-syzkaller #0 [ 58.387462][ T3639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 58.397508][ T3639] RIP: 0010:check_memory_region+0x1d0/0x2e0 [ 58.403380][ T3639] Code: 00 4d 01 f1 4d 89 d6 4d 29 ce 4c 89 f3 48 c1 fb 3f 48 c1 eb 3d 4c 01 f3 48 c1 eb 03 85 db 74 20 66 2e 0f 1f 84 00 00 00 00 00 <4d> 8b 19 4d 85 db 75 48 49 83 c1 08 ff cb 75 f0 4d 29 ca 4d 89 d6 [ 58.422977][ T3639] RSP: 0018:ffffc9000c367bd0 EFLAGS: 00010206 [ 58.429025][ T3639] RAX: ffffffff85feb701 RBX: 0000000000000800 RCX: ffffffff85feb780 [ 58.436981][ T3639] RDX: 0000000000000001 RSI: 0000000000020000 RDI: ffffc90017800000 [ 58.444934][ T3639] RBP: ffffc9000c367bf8 R08: dffffc0000000000 R09: fffff52002f00000 [ 58.452889][ T3639] R10: fffff52002f04000 R11: 0000000000000000 R12: 1ffff92002f00000 [ 58.460842][ T3639] R13: dffffc0000000001 R14: 0000000000004000 R15: 0000000000020000 [ 58.468801][ T3639] FS: 0000000000000000(0000) GS:ffff8880aec00000(0000) knlGS:0000000000000000 [ 58.477714][ T3639] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 58.484279][ T3639] CR2: fffff52002f00000 CR3: 00000000a9614000 CR4: 00000000001406f0 [ 58.492235][ T3639] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 58.500189][ T3639] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 58.508140][ T3639] Call Trace: [ 58.511416][ T3639] memset+0x23/0x40 [ 58.515208][ T3639] ion_heap_sglist_zero+0x190/0x280 [ 58.520404][ T3639] ? ion_heap_deferred_free+0x6b/0x4c0 [ 58.525852][ T3639] ion_heap_buffer_zero+0xed/0x110 [ 58.530946][ T3639] ion_system_heap_free+0xa9/0x3c0 [ 58.536041][ T3639] ion_buffer_destroy+0x116/0x210 [ 58.541046][ T3639] ion_heap_deferred_free+0x73/0x4c0 [ 58.546314][ T3639] ? init_wait_entry+0xe0/0xe0 [ 58.551063][ T3639] kthread+0x332/0x350 [ 58.555118][ T3639] ? ion_heap_init_deferred_free+0x1d0/0x1d0 [ 58.561076][ T3639] ? kthread_blkcg+0xe0/0xe0 [ 58.565647][ T3639] ret_from_fork+0x24/0x30 [ 58.570054][ T3639] Modules linked in: [ 58.573929][ T3639] CR2: fffff52002f00000 [ 58.578071][ T3639] ---[ end trace 830937046067ece2 ]--- [ 58.583511][ T3639] RIP: 0010:check_memory_region+0x1d0/0x2e0 [ 58.589409][ T3639] Code: 00 4d 01 f1 4d 89 d6 4d 29 ce 4c 89 f3 48 c1 fb 3f 48 c1 eb 3d 4c 01 f3 48 c1 eb 03 85 db 74 20 66 2e 0f 1f 84 00 00 00 00 00 <4d> 8b 19 4d 85 db 75 48 49 83 c1 08 ff cb 75 f0 4d 29 ca 4d 89 d6 [ 58.608998][ T3639] RSP: 0018:ffffc9000c367bd0 EFLAGS: 00010206 [ 58.615046][ T3639] RAX: ffffffff85feb701 RBX: 0000000000000800 RCX: ffffffff85feb780 [ 58.623002][ T3639] RDX: 0000000000000001 RSI: 0000000000020000 RDI: ffffc90017800000 [ 58.630959][ T3639] RBP: ffffc9000c367bf8 R08: dffffc0000000000 R09: fffff52002f00000 [ 58.638913][ T3639] R10: fffff52002f04000 R11: 0000000000000000 R12: 1ffff92002f00000 [ 58.646868][ T3639] R13: dffffc0000000001 R14: 0000000000004000 R15: 0000000000020000 [ 58.654823][ T3639] FS: 0000000000000000(0000) GS:ffff8880aec00000(0000) knlGS:0000000000000000 [ 58.663734][ T3639] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 58.670298][ T3639] CR2: fffff52002f00000 CR3: 00000000a9614000 CR4: 00000000001406f0 [ 58.678257][ T3639] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 58.686228][ T3639] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 58.694179][ T3639] Kernel panic - not syncing: Fatal exception [ 58.701517][ T3639] Kernel Offset: disabled [ 58.705848][ T3639] Rebooting in 86400 seconds..