[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 55.519405][ T27] audit: type=1800 audit(1578480200.501:25): pid=8379 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 55.556235][ T27] audit: type=1800 audit(1578480200.501:26): pid=8379 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 55.596224][ T27] audit: type=1800 audit(1578480200.511:27): pid=8379 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.211' (ECDSA) to the list of known hosts. 2020/01/08 10:43:32 fuzzer started 2020/01/08 10:43:34 dialing manager at 10.128.0.26:35703 2020/01/08 10:43:34 syscalls: 2824 2020/01/08 10:43:34 code coverage: enabled 2020/01/08 10:43:34 comparison tracing: enabled 2020/01/08 10:43:34 extra coverage: enabled 2020/01/08 10:43:34 setuid sandbox: enabled 2020/01/08 10:43:34 namespace sandbox: enabled 2020/01/08 10:43:34 Android sandbox: /sys/fs/selinux/policy does not exist 2020/01/08 10:43:34 fault injection: enabled 2020/01/08 10:43:34 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/01/08 10:43:34 net packet injection: enabled 2020/01/08 10:43:34 net device setup: enabled 2020/01/08 10:43:34 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/01/08 10:43:34 devlink PCI setup: PCI device 0000:00:10.0 is not available 10:43:35 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="140000001e000503ed0080637e6394036700d200", 0x14}], 0x1}, 0x0) 10:43:35 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x1, 0x0, &(0x7f0000000040)) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x198, 0x7}}, 0x0, 0x0, r1, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f00000002c0)={0x1, 0x3, 0x1000, 0x4b, &(0x7f0000000180)="571ce4895694cb1bb39018abf39daff0262eeda2377570801d8ee19ba6452752510fab7710862e31a499c037b262f40ad062f2f770209b22cddcc5f6d46e80496f13299c69f7c5c49b716a", 0x35, 0x0, &(0x7f0000000240)="48b0e2bb6c5e898d226c5505a1e42f68a22a5645225ae81b41641e471a404e50001cda45d2df4e6e2b938050c48055145a94d79ef2"}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) socket(0x10, 0x0, 0x0) r4 = socket$inet(0x2, 0x80001, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)}], 0x1, 0x1) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x100000000, 0x0) setsockopt$inet_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f0000000400)=@ccm_128={{0x303}, "ffbe6c84941e5dd0", "de7ed3829a625362411fa3a1bd6f1942", "5c0e102a", "d2c8e5e3f507c74d"}, 0x28) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x400000004e21, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r2, &(0x7f0000000340)={0x2, 0x4e21, @loopback}, 0x10) syzkaller login: [ 70.345987][ T8545] IPVS: ftp: loaded support on port[0] = 21 [ 70.506558][ T8545] chnl_net:caif_netlink_parms(): no params data found [ 70.543807][ T8545] bridge0: port 1(bridge_slave_0) entered blocking state 10:43:35 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='auxv\x00') ioctl$EXT4_IOC_SETFLAGS(r0, 0x80086601, &(0x7f0000000140)) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x810, r0, 0x7442c000) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000080)='syz1\x00') ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f00000000c0)=""/125) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'\x00', {0x2, 0x0, @dev}}) [ 70.551417][ T8545] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.577120][ T8545] device bridge_slave_0 entered promiscuous mode [ 70.588614][ T8545] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.606464][ T8545] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.608062][ T8548] IPVS: ftp: loaded support on port[0] = 21 [ 70.636972][ T8545] device bridge_slave_1 entered promiscuous mode [ 70.667332][ T8545] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.690327][ T8545] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.732465][ T8545] team0: Port device team_slave_0 added [ 70.751010][ T8545] team0: Port device team_slave_1 added 10:43:35 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000200)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000001c0)=0x7fffffff, 0x12) [ 70.809765][ T8548] chnl_net:caif_netlink_parms(): no params data found [ 70.878906][ T8545] device hsr_slave_0 entered promiscuous mode [ 70.916461][ T8545] device hsr_slave_1 entered promiscuous mode [ 70.981027][ T8550] IPVS: ftp: loaded support on port[0] = 21 [ 71.053083][ T8553] IPVS: ftp: loaded support on port[0] = 21 [ 71.063454][ T8548] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.076330][ T8548] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.096598][ T8548] device bridge_slave_0 entered promiscuous mode 10:43:36 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000280)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000140)) [ 71.118747][ T8548] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.126002][ T8548] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.147350][ T8548] device bridge_slave_1 entered promiscuous mode [ 71.261877][ T8548] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.279413][ T8548] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.375566][ T8548] team0: Port device team_slave_0 added [ 71.381963][ T8545] netdevsim netdevsim0 netdevsim0: renamed from eth0 10:43:36 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)={0x4, 0x4a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 71.479552][ T8545] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.529225][ T8545] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.620238][ T8545] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.668349][ T8548] team0: Port device team_slave_1 added [ 71.708995][ T8555] IPVS: ftp: loaded support on port[0] = 21 [ 71.710085][ T8557] IPVS: ftp: loaded support on port[0] = 21 [ 71.753770][ T8553] chnl_net:caif_netlink_parms(): no params data found [ 71.839009][ T8548] device hsr_slave_0 entered promiscuous mode [ 71.876519][ T8548] device hsr_slave_1 entered promiscuous mode [ 71.916300][ T8548] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.924085][ T8548] Cannot create hsr debugfs directory [ 71.933445][ T8550] chnl_net:caif_netlink_parms(): no params data found [ 72.030721][ T8553] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.038186][ T8553] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.045726][ T8553] device bridge_slave_0 entered promiscuous mode [ 72.073074][ T8550] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.080608][ T8550] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.088520][ T8550] device bridge_slave_0 entered promiscuous mode [ 72.096025][ T8553] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.105239][ T8553] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.113024][ T8553] device bridge_slave_1 entered promiscuous mode [ 72.135571][ T8550] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.144032][ T8550] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.151923][ T8550] device bridge_slave_1 entered promiscuous mode [ 72.185357][ T8553] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.198440][ T8553] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.215957][ T8550] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.243075][ T8550] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.289958][ T8553] team0: Port device team_slave_0 added [ 72.310590][ T8550] team0: Port device team_slave_0 added [ 72.321555][ T8550] team0: Port device team_slave_1 added [ 72.332135][ T8553] team0: Port device team_slave_1 added [ 72.354297][ T8557] chnl_net:caif_netlink_parms(): no params data found [ 72.382399][ T8548] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.441725][ T8548] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.500196][ T8548] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.609214][ T8550] device hsr_slave_0 entered promiscuous mode [ 72.646503][ T8550] device hsr_slave_1 entered promiscuous mode [ 72.686321][ T8550] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.693955][ T8550] Cannot create hsr debugfs directory [ 72.747789][ T8553] device hsr_slave_0 entered promiscuous mode [ 72.797295][ T8553] device hsr_slave_1 entered promiscuous mode [ 72.866215][ T8553] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.873805][ T8553] Cannot create hsr debugfs directory [ 72.889825][ T8548] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.955631][ T8555] chnl_net:caif_netlink_parms(): no params data found [ 72.975465][ T8557] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.982665][ T8557] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.990868][ T8557] device bridge_slave_0 entered promiscuous mode [ 73.024892][ T8557] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.032775][ T8557] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.040905][ T8557] device bridge_slave_1 entered promiscuous mode [ 73.078511][ T8557] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.100610][ T8557] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.129415][ T8545] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.137405][ T8555] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.144555][ T8555] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.152916][ T8555] device bridge_slave_0 entered promiscuous mode [ 73.164730][ T8555] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.171905][ T8555] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.179610][ T8555] device bridge_slave_1 entered promiscuous mode [ 73.214251][ T8545] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.239434][ T8555] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.252357][ T2941] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.261368][ T2941] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.284334][ T8557] team0: Port device team_slave_0 added [ 73.291902][ T8555] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.310942][ T2908] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.320609][ T2908] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.329188][ T2908] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.336566][ T2908] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.367775][ T8557] team0: Port device team_slave_1 added [ 73.383481][ T8555] team0: Port device team_slave_0 added [ 73.390115][ T2908] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.402018][ T2908] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.414980][ T2908] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.425530][ T2908] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.432702][ T2908] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.449750][ T8550] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.518112][ T8550] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.588461][ T8553] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.629546][ T8555] team0: Port device team_slave_1 added [ 73.635305][ T8553] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.698584][ T8553] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.728268][ T8553] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.774738][ T2907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.783284][ T2907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.791901][ T8550] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.828869][ T8550] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.927974][ T8557] device hsr_slave_0 entered promiscuous mode [ 73.966529][ T8557] device hsr_slave_1 entered promiscuous mode [ 74.006313][ T8557] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.014059][ T8557] Cannot create hsr debugfs directory [ 74.059046][ T8555] device hsr_slave_0 entered promiscuous mode [ 74.106513][ T8555] device hsr_slave_1 entered promiscuous mode [ 74.146574][ T8555] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.154188][ T8555] Cannot create hsr debugfs directory [ 74.170798][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.179345][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.188476][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.230300][ T2941] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.239585][ T2941] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.273647][ T8545] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 74.284887][ T8545] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.303743][ T8548] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.311251][ T2749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.320525][ T2749] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.330511][ T2749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.339016][ T2749] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.349883][ T2749] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.407953][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.415696][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.426489][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.434602][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.445644][ T8548] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.462371][ T8545] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.506928][ T2941] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.515482][ T2941] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.531099][ T2941] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.538210][ T2941] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.558729][ T8555] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 74.610867][ T8555] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 74.658029][ T8555] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 74.697672][ T2908] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.705566][ T2908] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.715076][ T2908] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.732191][ T8550] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.743376][ T8545] device veth0_vlan entered promiscuous mode [ 74.758292][ T8555] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 74.799139][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.807761][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.816407][ T2755] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.823451][ T2755] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.831120][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.840067][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.848649][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.857279][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.865563][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.884052][ T8550] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.901937][ T8545] device veth1_vlan entered promiscuous mode [ 74.916831][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.924807][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.935615][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.944368][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.952928][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.960989][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.969137][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.977792][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.987145][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.994829][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.003061][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.014987][ T8557] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 75.058001][ T8557] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 75.098038][ T8557] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 75.154906][ T8548] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.165960][ T8548] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.175793][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.184794][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.193580][ T2755] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.200672][ T2755] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.208742][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.217637][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.225917][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.244143][ T8557] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 75.304711][ T2756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.314233][ T2756] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.330775][ T2756] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.337950][ T2756] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.347354][ T2756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.356055][ T2756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.385711][ T8548] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.402351][ T2749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.411464][ T2749] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.420136][ T2749] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.428290][ T2749] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.437402][ T2749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.445816][ T2749] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.454226][ T2749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.462442][ T2749] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.476867][ T2749] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.485168][ T2749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.493950][ T2749] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.511766][ T8553] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.555762][ T8550] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.564248][ T2756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.574058][ T2756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.597416][ T8553] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.615635][ T8555] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.657142][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.664952][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.674772][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.685593][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.715380][ T8555] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.735234][ T8557] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.744337][ T8548] device veth0_vlan entered promiscuous mode [ 75.755013][ T2749] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.763788][ T2749] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.772009][ T2749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.783401][ T2749] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.793445][ T2749] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.800560][ T2749] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.809072][ T2749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.817832][ T2749] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.826641][ T2749] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.833793][ T2749] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.847607][ T2749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 180.546094][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 180.552914][ C0] rcu: 0-...!: (10499 ticks this GP) idle=c4a/1/0x4000000000000002 softirq=15215/15215 fqs=14 [ 180.563493][ C0] (t=10501 jiffies g=6993 q=619) [ 180.568511][ C0] rcu: rcu_preempt kthread starved for 10472 jiffies! g6993 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 180.579596][ C0] rcu: RCU grace-period kthread stack dump: [ 180.585473][ C0] rcu_preempt R running task 28984 10 2 0x80004000 [ 180.593378][ C0] Call Trace: [ 180.596673][ C0] __schedule+0x9a0/0xcc0 [ 180.601112][ C0] schedule+0x181/0x210 [ 180.605269][ C0] schedule_timeout+0x14f/0x240 [ 180.610143][ C0] ? run_local_timers+0x120/0x120 [ 180.615164][ C0] rcu_gp_kthread+0xed8/0x1770 [ 180.619932][ C0] kthread+0x332/0x350 [ 180.624007][ C0] ? rcu_report_qs_rsp+0x140/0x140 [ 180.629111][ C0] ? kthread_blkcg+0xe0/0xe0 [ 180.633866][ C0] ret_from_fork+0x24/0x30 [ 180.638287][ C0] NMI backtrace for cpu 0 [ 180.642609][ C0] CPU: 0 PID: 2908 Comm: kworker/0:100 Not tainted 5.5.0-rc5-syzkaller #0 [ 180.651109][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 180.661161][ C0] Workqueue: ipv6_addrconf addrconf_dad_work [ 180.667128][ C0] Call Trace: [ 180.670402][ C0] [ 180.673247][ C0] dump_stack+0x1fb/0x318 [ 180.677569][ C0] nmi_cpu_backtrace+0xaf/0x1a0 [ 180.682411][ C0] ? nmi_trigger_cpumask_backtrace+0x16d/0x290 [ 180.688552][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 180.694732][ C0] nmi_trigger_cpumask_backtrace+0x174/0x290 [ 180.700737][ C0] arch_trigger_cpumask_backtrace+0x10/0x20 [ 180.706625][ C0] rcu_dump_cpu_stacks+0x15a/0x220 [ 180.711732][ C0] rcu_sched_clock_irq+0xe25/0x1ad0 [ 180.717882][ C0] ? trace_hardirqs_off+0x74/0x80 [ 180.723077][ C0] update_process_times+0x12d/0x180 [ 180.728268][ C0] tick_sched_timer+0x263/0x420 [ 180.733108][ C0] ? tick_setup_sched_timer+0x3d0/0x3d0 [ 180.738645][ C0] __hrtimer_run_queues+0x403/0x840 [ 180.743848][ C0] hrtimer_interrupt+0x38c/0xda0 [ 180.748790][ C0] ? debug_smp_processor_id+0x9/0x20 [ 180.754074][ C0] smp_apic_timer_interrupt+0x109/0x280 [ 180.759608][ C0] apic_timer_interrupt+0xf/0x20 [ 180.764528][ C0] [ 180.767454][ C0] RIP: 0010:mod_memcg_page_state+0x6/0x190 [ 180.773246][ C0] Code: 60 00 eb 0c e8 eb 27 2e 00 eb 05 e8 e4 27 2e 00 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d c3 0f 1f 44 00 00 55 48 89 e5 41 57 <41> 56 41 54 53 41 89 f6 48 89 fb e8 ba 27 2e 00 48 83 c3 38 48 89 [ 180.792835][ C0] RSP: 0018:ffffc900086ef8d0 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 180.801236][ C0] RAX: 1ffff11014cd9321 RBX: ffff8880a66c9908 RCX: 0000000000000000 [ 180.809199][ C0] RDX: 0000000000000000 RSI: 00000000fffffffc RDI: ffffea00029b1d00 [ 180.817158][ C0] RBP: ffffc900086ef8d8 R08: 000000000003a728 R09: ffffed1015156711 [ 180.825116][ C0] R10: ffffed1015156711 R11: 0000000000000000 R12: ffff8880a66c99a0 [ 180.833076][ C0] R13: dffffc0000000000 R14: 1ffff11014cd9334 R15: ffff8880a8ab3878 [ 180.841059][ C0] free_thread_stack+0x168/0x590 [ 180.845989][ C0] put_task_stack+0xa3/0x130 [ 180.850576][ C0] finish_task_switch+0x3f1/0x550 [ 180.855596][ C0] __schedule+0x9a8/0xcc0 [ 180.859919][ C0] ? debug_smp_processor_id+0x9/0x20 [ 180.865200][ C0] schedule+0x181/0x210 [ 180.869349][ C0] schedule_preempt_disabled+0x13/0x20 [ 180.874799][ C0] mutex_optimistic_spin+0x445/0x480 [ 180.880083][ C0] __mutex_lock_common+0x2e7/0x2e10 [ 180.885288][ C0] ? rtnl_lock+0x17/0x20 [ 180.889740][ C0] ? process_one_work+0x75d/0x10d0 [ 180.894881][ C0] mutex_lock_nested+0x1b/0x30 [ 180.899645][ C0] rtnl_lock+0x17/0x20 [ 180.903834][ C0] addrconf_dad_work+0x69/0x1c30 [ 180.908778][ C0] ? rcu_read_lock_sched_held+0x10b/0x170 [ 180.914501][ C0] process_one_work+0x7ef/0x10d0 [ 180.919452][ C0] worker_thread+0xc01/0x1630 [ 180.924209][ C0] kthread+0x332/0x350 [ 180.928268][ C0] ? rcu_lock_release+0x30/0x30 [ 180.933110][ C0] ? kthread_blkcg+0xe0/0xe0 [ 180.937693][ C0] ret_from_fork+0x24/0x30