[ 43.444245][ T23] audit: type=1800 audit(1575342527.823:25): pid=8075 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 43.463357][ T23] audit: type=1800 audit(1575342527.823:26): pid=8075 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 43.511009][ T23] audit: type=1800 audit(1575342527.823:27): pid=8075 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [ 43.531099][ T23] audit: type=1800 audit(1575342527.823:28): pid=8075 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.43' (ECDSA) to the list of known hosts. 2019/12/03 03:08:58 fuzzer started 2019/12/03 03:08:59 dialing manager at 10.128.0.26:38907 2019/12/03 03:08:59 syscalls: 2697 2019/12/03 03:08:59 code coverage: enabled 2019/12/03 03:08:59 comparison tracing: enabled 2019/12/03 03:08:59 extra coverage: extra coverage is not supported by the kernel 2019/12/03 03:08:59 setuid sandbox: enabled 2019/12/03 03:08:59 namespace sandbox: enabled 2019/12/03 03:08:59 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/03 03:08:59 fault injection: enabled 2019/12/03 03:08:59 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/03 03:08:59 net packet injection: enabled 2019/12/03 03:08:59 net device setup: enabled 2019/12/03 03:08:59 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/12/03 03:08:59 devlink PCI setup: PCI device 0000:00:10.0 is not available 03:09:00 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() semget$private(0x0, 0x0, 0x0) eventfd(0x7) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc08c5102, 0x0) ioctl$CAPI_NCCI_GETUNIT(0xffffffffffffffff, 0x80044327, 0x0) io_setup(0x1, &(0x7f00000000c0)=0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc08c5102, &(0x7f0000000240)={{}, {}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) io_cancel(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x5, 0x6, 0xffffffffffffffff, &(0x7f00000002c0)="bf66f8fcdac3f63501fc84d7b9b16b0c4a51d4e322456820a173d19f328f5ac102971458cd33995b6f1599e29ddd1370e9e5ccba8f3801e1de8ebe04e8efa532b7aec50fe4c53c666edebacdf1bec97b481cd4dd848fbbb1394379fdcc6017617ced3428c227d94b2b0ee81fe8cfa81b65466a0e9dbcd490d6cb812975ee7bb568df4f31acb9300e00f701c212289511ad03857dbc0adcc0fec0cd6fe974bfcd57189a1b", 0xa4, 0x3}, &(0x7f00000003c0)) ftruncate(0xffffffffffffffff, 0x86) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000001c0)=""/163) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) fstat(r1, &(0x7f0000000140)) msgget(0x3, 0x200) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) socket(0x0, 0x0, 0x0) bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x1001000004e23, 0x0, @loopback}, 0x1c) listen(r2, 0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) write(r3, &(0x7f0000000100), 0x1ede5) shutdown(r3, 0x2) 03:09:01 executing program 1: r0 = socket(0x2, 0x3, 0x1) getsockopt(r0, 0xff, 0x1, 0x0, &(0x7f0000000000)=0xffffffffffffffa5) syzkaller login: [ 56.739478][ T8238] IPVS: ftp: loaded support on port[0] = 21 03:09:01 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000001200)='/dev/vcsa#\x00', 0x1, 0x102) fcntl$setstatus(r0, 0x4, 0x2000) write$FUSE_GETXATTR(r0, &(0x7f0000000000)={0x18}, 0x18) [ 56.922278][ T8241] IPVS: ftp: loaded support on port[0] = 21 [ 56.935655][ T8238] chnl_net:caif_netlink_parms(): no params data found [ 57.086823][ T8238] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.095645][ T8238] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.103752][ T8238] device bridge_slave_0 entered promiscuous mode [ 57.131469][ T8238] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.139081][ T8238] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.147520][ T8243] IPVS: ftp: loaded support on port[0] = 21 [ 57.154569][ T8238] device bridge_slave_1 entered promiscuous mode 03:09:01 executing program 3: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x6}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f000060d000)=[{{0x0, 0x0, &(0x7f0000c38ff0)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x8000) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f000081e000)={0x0, 0x2, 0x80000000000000d5, [0x0]}, 0x2de) [ 57.218904][ T8238] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.229432][ T8241] chnl_net:caif_netlink_parms(): no params data found [ 57.254903][ T8238] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.385430][ T8238] team0: Port device team_slave_0 added [ 57.407658][ T8241] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.421727][ T8241] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.440396][ T8241] device bridge_slave_0 entered promiscuous mode [ 57.463691][ T8238] team0: Port device team_slave_1 added [ 57.474215][ T8241] bridge0: port 2(bridge_slave_1) entered blocking state 03:09:01 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) [ 57.500692][ T8241] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.508871][ T8241] device bridge_slave_1 entered promiscuous mode [ 57.578552][ T8248] IPVS: ftp: loaded support on port[0] = 21 [ 57.584985][ T8243] chnl_net:caif_netlink_parms(): no params data found [ 57.655109][ T8238] device hsr_slave_0 entered promiscuous mode 03:09:02 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000680)='\x00@\x00\x01\x00\x00\xff\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\xa4\x1d\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xcajU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\x00\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xcc\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\x15\xc1&dC\x06`\xda\xc9\xf5<;\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa2\x13\xc9\x80\xc5\x99U\x049:\x1d\xdb\xccp\xc5\x93I\xb8\xb3w\x90t\xbc\xb2\x16\x85\xbe\xb4\x15\x8a\x9e\x8a\x95\fQ\xb0\xf1\x1a\xbdW\xbc\x8b>;\xf4\xcd\xa1\x14\xbd\xdd/\xd0?\xa8+\xc4\aSG\xdd\x85*\xea\xb28\xa7\xfdM\xc8\xa5l\x11Y\x9e3\xb3\x01\xd8DV\x01\t\x1c\xf4\x8eL\xf6?\x9d\x1egB\xe1\x94\x01\x86\x00\v5\x9b\x9c\x83\xbd[\x15\xbb0S\xde\xfe$\x05\xf3\xf0\x1dL?Y\xedVN \xeen\x1c\x94\xa7\xb0\xf0\a;\x18O\x97\xd9\a\xc6Ie\xf3U\x8f\xc1\x1a\x91\xfc\x90\x83\xd7H\xab\xe4\x8dG}*\x0fC\x83\xf1\x19\x91\x92\xc7\xa9\xd1P\v\xc8\x87\x1fP<9[J\x15\xa7\v\xcc\x00Xn)\xa9}:\xf2\x06\xec\xaf\x9fK\tcG\xea[\vb\x85\xbc@\x8a\x9d\x1a') ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000080)='\x00@\x00\x01\x00\x00\xff\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\xa4\x1d\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xcajU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\x00\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xcc\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\x15\xc1&dC\x06`\xda\xc9\xf5<;\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa2\x13\xc9\x80\xc5\x99U\x049:\x1d\xdb\xccp\xc5\x93I\xb8\xb3w\x90t\xbc\xb2\x16\x85\xbe\xb4\x15\x8a\x9e\x8a\x95\fQ\xb0\xf1\x1a\xbdW\xbc\x8b>;\xf4\xcd\xa1\x14\xbd\xdd/\xd0?\xa8+\xc4\aSG\xdd\x85*\xea\xb28\xa7\xfdM\xc8\xa5l\x11Y\x9e3\xb3\x01\xd8DV\x01\t\x1c\xf4\x8eL\xf6?\x9d\x1egB\xe1\x94\x01\x86\x00\v5\x9b\x9c\x83\xbd[\x15\xbb0S\xde\xfe$\x05\xf3\xf0\x1dL?Y\xedVN \xeen\x1c\x94\xa7\xb0\xf0\a;\x18O\x97\xd9\a\xc6Ie\xf3U\x8f\xc1\x1a\x91\xfc\x90\x83\xd7H\xab\xe4\x8dG}*\x0fC\x83\xf1\x19\x91\x92\xc7\xa9\xd1P\v\xc8\x87\x1fP<9[J\x15\xa7\v\xcc\x00Xn)\xa9}:\xf2\x06\xec\xaf\x9fK\tcG\xea[\vb\x85\xbc@\x8a\x9d\x1a') [ 57.713998][ T8238] device hsr_slave_1 entered promiscuous mode [ 57.796645][ T8241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.862054][ T8249] IPVS: ftp: loaded support on port[0] = 21 [ 57.877345][ T8241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.909404][ T8238] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 57.946162][ T8238] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 58.023830][ T8243] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.031400][ T8243] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.039220][ T8243] device bridge_slave_0 entered promiscuous mode [ 58.055903][ T8238] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 58.105527][ T8241] team0: Port device team_slave_0 added [ 58.114128][ T8241] team0: Port device team_slave_1 added [ 58.120561][ T8243] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.128078][ T8243] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.136411][ T8243] device bridge_slave_1 entered promiscuous mode [ 58.150604][ T8238] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 58.219444][ T8251] IPVS: ftp: loaded support on port[0] = 21 [ 58.235847][ T8243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.272337][ T8243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.333552][ T8241] device hsr_slave_0 entered promiscuous mode [ 58.370871][ T8241] device hsr_slave_1 entered promiscuous mode [ 58.440757][ T8241] debugfs: Directory 'hsr0' with parent '/' already present! [ 58.452661][ T8243] team0: Port device team_slave_0 added [ 58.464735][ T8243] team0: Port device team_slave_1 added [ 58.553513][ T8243] device hsr_slave_0 entered promiscuous mode [ 58.601264][ T8243] device hsr_slave_1 entered promiscuous mode [ 58.660687][ T8243] debugfs: Directory 'hsr0' with parent '/' already present! [ 58.697401][ T8241] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 58.742406][ T8241] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 58.819616][ T8241] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 58.862819][ T8241] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 58.940824][ T8249] chnl_net:caif_netlink_parms(): no params data found [ 58.953880][ T8248] chnl_net:caif_netlink_parms(): no params data found [ 58.999524][ T8251] chnl_net:caif_netlink_parms(): no params data found [ 59.056312][ T8248] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.064288][ T8248] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.075192][ T8248] device bridge_slave_0 entered promiscuous mode [ 59.095680][ T8243] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 59.144119][ T8243] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 59.203117][ T8248] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.210208][ T8248] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.218429][ T8248] device bridge_slave_1 entered promiscuous mode [ 59.255769][ T8243] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 59.297560][ T8249] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.304879][ T8249] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.312936][ T8249] device bridge_slave_0 entered promiscuous mode [ 59.324139][ T8249] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.331385][ T8249] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.339103][ T8249] device bridge_slave_1 entered promiscuous mode [ 59.349968][ T8238] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.362237][ T8243] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 59.419164][ T8251] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.427417][ T8251] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.435279][ T8251] device bridge_slave_0 entered promiscuous mode [ 59.455263][ T8249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.472522][ T8248] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.483682][ T8251] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.491482][ T8251] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.499198][ T8251] device bridge_slave_1 entered promiscuous mode [ 59.507721][ T8249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.519874][ T3029] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.528497][ T3029] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.539901][ T8238] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.549317][ T8248] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.587659][ T8251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.607755][ T8248] team0: Port device team_slave_0 added [ 59.616131][ T8251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.629353][ T8241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.653364][ T8252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.662219][ T8252] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.670828][ T8252] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.678048][ T8252] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.688390][ T8252] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.698009][ T8249] team0: Port device team_slave_0 added [ 59.705581][ T8248] team0: Port device team_slave_1 added [ 59.727611][ T8249] team0: Port device team_slave_1 added [ 59.746019][ T8252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.756412][ T8252] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.768006][ T8252] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.775131][ T8252] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.783635][ T8252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.792260][ T8252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.817752][ T8251] team0: Port device team_slave_0 added [ 59.873273][ T8248] device hsr_slave_0 entered promiscuous mode [ 59.910924][ T8248] device hsr_slave_1 entered promiscuous mode [ 59.950675][ T8248] debugfs: Directory 'hsr0' with parent '/' already present! [ 59.961492][ T8241] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.969548][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.978088][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.987177][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.995045][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.003155][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.011882][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.020167][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.028570][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.036890][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.046036][ T8251] team0: Port device team_slave_1 added [ 60.084226][ T8249] device hsr_slave_0 entered promiscuous mode [ 60.143790][ T8249] device hsr_slave_1 entered promiscuous mode [ 60.181084][ T8249] debugfs: Directory 'hsr0' with parent '/' already present! [ 60.191572][ T8238] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.203877][ T8238] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.228234][ T8243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.237823][ T3029] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.251044][ T3029] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.259229][ T3029] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.269142][ T3029] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.277829][ T3029] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.285017][ T3029] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.334467][ T8251] device hsr_slave_0 entered promiscuous mode [ 60.381329][ T8251] device hsr_slave_1 entered promiscuous mode [ 60.421727][ T8251] debugfs: Directory 'hsr0' with parent '/' already present! [ 60.439170][ T8252] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.449240][ T8252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.458009][ T8252] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.466897][ T8252] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.473980][ T8252] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.482496][ T8252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.529348][ T8252] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.539456][ T8252] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.548945][ T8252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.557128][ T8252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.565161][ T8252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.574247][ T8252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.583042][ T8252] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.595224][ T8243] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.608646][ T8251] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 60.643737][ T8251] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 60.716890][ T8251] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 60.773037][ T3029] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.781149][ T3029] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.790676][ T3029] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.812009][ T8238] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.819131][ T8248] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 60.854540][ T8248] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 60.902054][ T8251] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 60.942017][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.951283][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.959867][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.968675][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.977384][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.984599][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.992763][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.001674][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.010752][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.018584][ T8249] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 61.066340][ T8249] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 61.113678][ T8249] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 61.163394][ T8249] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 61.204266][ T8248] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 61.267133][ T8248] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 61.313699][ T3029] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.322709][ T3029] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.331781][ T3029] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.338991][ T3029] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.371854][ T8257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.381402][ T8257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.423700][ T3029] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.442759][ T3029] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.451435][ T3029] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.459909][ T3029] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.469807][ T3029] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.477860][ T3029] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.486742][ T3029] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.509111][ T8252] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.517477][ T8252] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.529448][ T8241] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.543629][ T8243] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.556335][ T8243] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.583944][ T3029] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.597521][ T3029] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.642717][ T8249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.659049][ T8249] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.693148][ T8249] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 61.704494][ T8249] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.733716][ T8249] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.610506][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 166.617311][ C1] rcu: 1-...!: (10499 ticks this GP) idle=8c2/1/0x4000000000000002 softirq=11171/11171 fqs=7 [ 166.627943][ C1] (t=10501 jiffies g=6605 q=421) [ 166.633047][ C1] rcu: rcu_preempt kthread starved for 10488 jiffies! g6605 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 166.644131][ C1] rcu: RCU grace-period kthread stack dump: [ 166.650007][ C1] rcu_preempt R running task 29032 10 2 0x80004000 [ 166.657897][ C1] Call Trace: [ 166.661182][ C1] __schedule+0x9a0/0xcc0 [ 166.665507][ C1] schedule+0x181/0x210 [ 166.669654][ C1] schedule_timeout+0x14f/0x240 [ 166.674492][ C1] ? run_local_timers+0x120/0x120 [ 166.679505][ C1] rcu_gp_kthread+0xed8/0x1770 [ 166.684266][ C1] kthread+0x332/0x350 [ 166.688320][ C1] ? rcu_report_qs_rsp+0x140/0x140 [ 166.693425][ C1] ? kthread_blkcg+0xe0/0xe0 [ 166.698008][ C1] ret_from_fork+0x24/0x30 [ 166.702430][ C1] NMI backtrace for cpu 1 [ 166.706767][ C1] CPU: 1 PID: 8259 Comm: syz-executor.0 Not tainted 5.4.0-syzkaller #0 [ 166.715144][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 166.725194][ C1] Call Trace: [ 166.729268][ C1] [ 166.732118][ C1] dump_stack+0x1fb/0x318 [ 166.736441][ C1] nmi_cpu_backtrace+0xaf/0x1a0 [ 166.741445][ C1] ? nmi_trigger_cpumask_backtrace+0x16d/0x290 [ 166.747828][ C1] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 166.754037][ C1] nmi_trigger_cpumask_backtrace+0x174/0x290 [ 166.760042][ C1] arch_trigger_cpumask_backtrace+0x10/0x20 [ 166.765942][ C1] rcu_dump_cpu_stacks+0x15a/0x220 [ 166.771311][ C1] rcu_sched_clock_irq+0xe25/0x1ad0 [ 166.776534][ C1] ? trace_hardirqs_off+0x74/0x80 [ 166.781559][ C1] update_process_times+0x12d/0x180 [ 166.786864][ C1] tick_sched_timer+0x263/0x420 [ 166.791705][ C1] ? tick_setup_sched_timer+0x3d0/0x3d0 [ 166.797353][ C1] __hrtimer_run_queues+0x403/0x840 [ 166.802600][ C1] hrtimer_interrupt+0x38c/0xda0 [ 166.807541][ C1] ? debug_smp_processor_id+0x9/0x20 [ 166.812824][ C1] smp_apic_timer_interrupt+0x109/0x280 [ 166.818358][ C1] apic_timer_interrupt+0xf/0x20 [ 166.823282][ C1] [ 166.826211][ C1] RIP: 0010:__memcg_kmem_uncharge+0x1d/0x2e0 [ 166.832181][ C1] Code: ff 5b 41 5e 5d c3 0f 1f 80 00 00 00 00 55 48 89 e5 41 57 41 56 41 55 41 54 53 50 89 f3 49 89 fc 48 b8 00 00 00 00 00 fc ff df <4c> 8d 77 38 4d 89 f5 49 c1 ed 03 41 80 7c 05 00 00 74 08 4c 89 f7 [ 166.851777][ C1] RSP: 0018:ffffc90002337848 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 166.860175][ C1] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffff8880a87481c0 [ 166.868225][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffea0002979200 [ 166.876274][ C1] RBP: ffffc90002337878 R08: 000000000003a768 R09: fffffbfff120248a [ 166.884234][ C1] R10: fffffbfff120248a R11: 0000000000000000 R12: ffffea0002979200 [ 166.892190][ C1] R13: dffffc0000000000 R14: 1ffff11014893394 R15: ffff888098f0b868 [ 166.900168][ C1] ? free_thread_stack+0x124/0x590 [ 166.905269][ C1] free_thread_stack+0x12e/0x590 [ 166.910198][ C1] put_task_stack+0xa3/0x130 [ 166.914775][ C1] finish_task_switch+0x3f1/0x550 [ 166.919793][ C1] __schedule+0x9a8/0xcc0 [ 166.924123][ C1] ? ___preempt_schedule+0x16/0x18 [ 166.929217][ C1] preempt_schedule+0xdb/0x120 [ 166.933969][ C1] ___preempt_schedule+0x16/0x18 [ 166.939052][ C1] ? page_poisoning_enabled+0x1c/0x30 [ 166.944442][ C1] prep_new_page+0x161/0x2e0 [ 166.949031][ C1] get_page_from_freelist+0x850/0xaa0 [ 166.954406][ C1] __alloc_pages_nodemask+0x264/0x5d0 [ 166.959772][ C1] alloc_pages_vma+0x94a/0xd50 [ 166.964527][ C1] do_huge_pmd_anonymous_page+0x883/0xe50 [ 166.970240][ C1] handle_mm_fault+0x2017/0x2890 [ 166.975196][ C1] do_user_addr_fault+0x589/0xaf0 [ 166.980218][ C1] __do_page_fault+0xd3/0x1f0 [ 166.984884][ C1] do_page_fault+0x99/0xb0 [ 166.989290][ C1] page_fault+0x39/0x40 [ 166.993435][ C1] RIP: 0033:0x400644 [ 166.997317][ C1] Code: 06 e9 49 01 00 00 48 8b 44 24 10 48 0b 44 24 28 75 1f 48 8b 14 24 48 8b 7c 24 20 be 04 00 00 00 e8 91 55 00 00 48 8b 74 24 08 <89> 06 e9 1e 01 00 00 48 8b 44 24 08 48 8b 14 24 be 04 00 00 00 8b [ 167.016909][ C1] RSP: 002b:00007fffffce6d10 EFLAGS: 00010202 [ 167.022969][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000000 [ 167.030926][ C1] RDX: 0000000000000000 RSI: 000000002001d000 RDI: 0000000000000001 [ 167.039436][ C1] RBP: 0000000000760000 R08: 0000000000000000 R09: 0000000000000000 [ 167.047407][ C1] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000001 [ 167.055451][ C1] R13: 00007fffffce6f30 R14: 0000000000760008 R15: 00007fffffce6f40