[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 46.557466][ T23] audit: type=1800 audit(1575364529.744:25): pid=8073 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 46.576601][ T23] audit: type=1800 audit(1575364529.744:26): pid=8073 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 46.598621][ T23] audit: type=1800 audit(1575364529.754:27): pid=8073 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.1' (ECDSA) to the list of known hosts. 2019/12/03 09:15:41 fuzzer started 2019/12/03 09:15:43 dialing manager at 10.128.0.26:38907 2019/12/03 09:15:43 syscalls: 2697 2019/12/03 09:15:43 code coverage: enabled 2019/12/03 09:15:43 comparison tracing: enabled 2019/12/03 09:15:43 extra coverage: extra coverage is not supported by the kernel 2019/12/03 09:15:43 setuid sandbox: enabled 2019/12/03 09:15:43 namespace sandbox: enabled 2019/12/03 09:15:43 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/03 09:15:43 fault injection: enabled 2019/12/03 09:15:43 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/03 09:15:43 net packet injection: enabled 2019/12/03 09:15:43 net device setup: enabled 2019/12/03 09:15:43 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/12/03 09:15:43 devlink PCI setup: PCI device 0000:00:10.0 is not available 09:15:44 executing program 0: syz_mount_image$exfat(&(0x7f0000000080)='exfat.', &(0x7f0000000240)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 09:15:44 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x7, 0x0, &(0x7f00000000c0)) syzkaller login: [ 61.469765][ T8237] IPVS: ftp: loaded support on port[0] = 21 09:15:44 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$VIDIOC_DECODER_CMD(0xffffffffffffffff, 0xc0485660, &(0x7f0000000300)={0x0, 0x0, @raw_data=[0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x8]}) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000284000/0x1000)=nil, 0x1000, 0x1000000, 0x13, r2, 0x20000000000000) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x0) r3 = socket$inet6(0xa, 0x3, 0x20000000021) write$binfmt_elf64(r3, &(0x7f0000000080)={{0x7f, 0x45, 0x4c, 0x46, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) shutdown(0xffffffffffffffff, 0x1) [ 61.615089][ T8240] IPVS: ftp: loaded support on port[0] = 21 [ 61.638489][ T8237] chnl_net:caif_netlink_parms(): no params data found [ 61.715395][ T8237] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.724623][ T8237] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.735410][ T8237] device bridge_slave_0 entered promiscuous mode [ 61.757367][ T8237] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.771911][ T8237] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.792094][ T8237] device bridge_slave_1 entered promiscuous mode [ 61.819639][ T8242] IPVS: ftp: loaded support on port[0] = 21 [ 61.873120][ T8237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.906348][ T8237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.919432][ T8240] chnl_net:caif_netlink_parms(): no params data found 09:15:45 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000340)=ANY=[], 0xff0e) close(r1) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) [ 61.947798][ T8237] team0: Port device team_slave_0 added [ 61.959747][ T8237] team0: Port device team_slave_1 added [ 62.028152][ T8240] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.051129][ T8240] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.059493][ T8240] device bridge_slave_0 entered promiscuous mode [ 62.113393][ T8237] device hsr_slave_0 entered promiscuous mode 09:15:45 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000002c0)=']\x9dL\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c46"], 0x4) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) [ 62.201294][ T8237] device hsr_slave_1 entered promiscuous mode [ 62.243456][ T8240] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.250665][ T8240] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.271991][ T8240] device bridge_slave_1 entered promiscuous mode [ 62.329048][ T8245] IPVS: ftp: loaded support on port[0] = 21 [ 62.335214][ T8240] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.362530][ T8240] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.406315][ T8237] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.419246][ T8247] IPVS: ftp: loaded support on port[0] = 21 09:15:45 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@getsa={0x28, 0x12, 0x1, 0x0, 0x0, {@in6=@remote, 0x0, 0x0, 0xff}}, 0x28}}, 0x0) [ 62.486140][ T8237] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.529045][ T8240] team0: Port device team_slave_0 added [ 62.537859][ T8240] team0: Port device team_slave_1 added [ 62.553560][ T8237] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.635501][ T8237] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.733530][ T8240] device hsr_slave_0 entered promiscuous mode [ 62.781475][ T8240] device hsr_slave_1 entered promiscuous mode [ 62.851229][ T8240] debugfs: Directory 'hsr0' with parent '/' already present! [ 62.872614][ T8242] chnl_net:caif_netlink_parms(): no params data found [ 62.884292][ T8249] IPVS: ftp: loaded support on port[0] = 21 [ 62.947157][ T8242] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.954798][ T8242] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.962782][ T8242] device bridge_slave_0 entered promiscuous mode [ 62.970360][ T8242] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.977513][ T8242] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.985236][ T8242] device bridge_slave_1 entered promiscuous mode [ 63.027218][ T8240] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.092580][ T8242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.109105][ T8242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.120112][ T8240] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.184284][ T8240] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.232654][ T8240] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.304098][ T8242] team0: Port device team_slave_0 added [ 63.317068][ T8242] team0: Port device team_slave_1 added [ 63.364196][ T8245] chnl_net:caif_netlink_parms(): no params data found [ 63.388695][ T8247] chnl_net:caif_netlink_parms(): no params data found [ 63.465103][ T8242] device hsr_slave_0 entered promiscuous mode [ 63.503611][ T8242] device hsr_slave_1 entered promiscuous mode [ 63.541184][ T8242] debugfs: Directory 'hsr0' with parent '/' already present! [ 63.570194][ T8245] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.577663][ T8245] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.586605][ T8245] device bridge_slave_0 entered promiscuous mode [ 63.596548][ T8245] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.603735][ T8245] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.611552][ T8245] device bridge_slave_1 entered promiscuous mode [ 63.629456][ T8242] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.675480][ T8242] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.755186][ T8245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.766641][ T8245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.788142][ T8242] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.857249][ T8247] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.864475][ T8247] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.872512][ T8247] device bridge_slave_0 entered promiscuous mode [ 63.898315][ T8242] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.947512][ T8247] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.954720][ T8247] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.963238][ T8247] device bridge_slave_1 entered promiscuous mode [ 63.972702][ T8245] team0: Port device team_slave_0 added [ 63.982836][ T8245] team0: Port device team_slave_1 added [ 64.072879][ T8245] device hsr_slave_0 entered promiscuous mode [ 64.121468][ T8245] device hsr_slave_1 entered promiscuous mode [ 64.171155][ T8245] debugfs: Directory 'hsr0' with parent '/' already present! [ 64.198615][ T8249] chnl_net:caif_netlink_parms(): no params data found [ 64.234390][ T8247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.245375][ T8247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.265725][ T8247] team0: Port device team_slave_0 added [ 64.278463][ T8237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.292952][ T8247] team0: Port device team_slave_1 added [ 64.384148][ T8247] device hsr_slave_0 entered promiscuous mode [ 64.441494][ T8247] device hsr_slave_1 entered promiscuous mode [ 64.491107][ T8247] debugfs: Directory 'hsr0' with parent '/' already present! [ 64.506663][ T8245] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.560298][ T8249] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.567645][ T8249] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.576400][ T8249] device bridge_slave_0 entered promiscuous mode [ 64.589534][ T8240] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.602005][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.610137][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.618496][ T8245] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.674689][ T8237] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.681795][ T8249] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.689143][ T8249] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.697978][ T8249] device bridge_slave_1 entered promiscuous mode [ 64.724447][ T8245] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.773147][ T8245] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.815188][ T8247] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 64.864427][ T8249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.876224][ T8249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.892959][ T2967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.902358][ T2967] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.910671][ T2967] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.917886][ T2967] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.927011][ T2967] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.937541][ T8247] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 64.997572][ T8247] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 65.050780][ T8240] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.062444][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.070573][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.080043][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.088909][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.097636][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.104977][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.112780][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.121410][ T8247] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 65.167544][ T2967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.176777][ T2967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.185538][ T2967] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.195122][ T2967] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.215807][ T8249] team0: Port device team_slave_0 added [ 65.223412][ T8249] team0: Port device team_slave_1 added [ 65.244636][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.253615][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.263109][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.270226][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.278431][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.287649][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.296330][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.304681][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.313076][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.322183][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.330408][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.338534][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.346800][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.376388][ T8242] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.399492][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.408839][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.418103][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.426697][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.437274][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.450274][ T8240] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 65.461491][ T8240] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.489563][ T8245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.504915][ T8256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.513673][ T8256] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.522200][ T8256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.535246][ T8256] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.544412][ T8256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.553832][ T8256] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.562225][ T8256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.570427][ T8256] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.579815][ T8237] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.633335][ T8249] device hsr_slave_0 entered promiscuous mode [ 65.701645][ T8249] device hsr_slave_1 entered promiscuous mode [ 65.761312][ T8249] debugfs: Directory 'hsr0' with parent '/' already present! [ 65.778836][ T8245] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.790243][ T8242] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.798269][ T8256] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.807090][ T8256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.815044][ T8256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.822762][ T8256] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.830138][ T8256] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.837922][ T8256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.845823][ T8256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.868936][ T8240] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.891805][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.900379][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.908845][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.915924][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.949663][ T8237] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.972263][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.980273][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.988551][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.996792][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.005960][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.014381][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.021448][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.029274][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.038403][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.046818][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.053900][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.062031][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.070708][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.079233][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.087688][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.096639][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.105333][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.130082][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.139506][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.147733][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.156111][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.165286][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.175125][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.183972][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.192920][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.201448][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.208487][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.219805][ T8247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.240561][ T8249] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 66.273662][ T8245] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.312523][ T8247] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.349955][ T8251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.365809][ T8251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.377294][ T8251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.389891][ T8251] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.405468][ T8251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.416695][ T8251] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.429762][ T8251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.455371][ T8251] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 171.320969][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 171.327738][ C0] rcu: 0-...!: (10499 ticks this GP) idle=256/1/0x4000000000000002 softirq=12743/12743 fqs=7 [ 171.338204][ C0] (t=10501 jiffies g=6613 q=156) [ 171.343914][ C0] rcu: rcu_preempt kthread starved for 10488 jiffies! g6613 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 171.354996][ C0] rcu: RCU grace-period kthread stack dump: [ 171.360870][ C0] rcu_preempt R running task 29104 10 2 0x80004000 [ 171.368768][ C0] Call Trace: [ 171.372062][ C0] __schedule+0x9a0/0xcc0 [ 171.376389][ C0] schedule+0x181/0x210 [ 171.380534][ C0] schedule_timeout+0x14f/0x240 [ 171.385634][ C0] ? run_local_timers+0x120/0x120 [ 171.390647][ C0] rcu_gp_kthread+0xed8/0x1770 [ 171.395406][ C0] kthread+0x332/0x350 [ 171.399560][ C0] ? rcu_report_qs_rsp+0x140/0x140 [ 171.404659][ C0] ? kthread_blkcg+0xe0/0xe0 [ 171.409249][ C0] ret_from_fork+0x24/0x30 [ 171.413668][ C0] NMI backtrace for cpu 0 [ 171.417988][ C0] CPU: 0 PID: 8258 Comm: syz-executor.0 Not tainted 5.4.0-syzkaller #0 [ 171.426289][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 171.436343][ C0] Call Trace: [ 171.439628][ C0] [ 171.442654][ C0] dump_stack+0x1fb/0x318 [ 171.446991][ C0] nmi_cpu_backtrace+0xaf/0x1a0 [ 171.451925][ C0] ? nmi_trigger_cpumask_backtrace+0x16d/0x290 [ 171.458243][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 171.464297][ C0] nmi_trigger_cpumask_backtrace+0x174/0x290 [ 171.470266][ C0] arch_trigger_cpumask_backtrace+0x10/0x20 [ 171.476232][ C0] rcu_dump_cpu_stacks+0x15a/0x220 [ 171.481509][ C0] rcu_sched_clock_irq+0xe25/0x1ad0 [ 171.486715][ C0] ? trace_hardirqs_off+0x74/0x80 [ 171.491819][ C0] update_process_times+0x12d/0x180 [ 171.497003][ C0] tick_sched_timer+0x263/0x420 [ 171.501839][ C0] ? tick_setup_sched_timer+0x3d0/0x3d0 [ 171.507367][ C0] __hrtimer_run_queues+0x403/0x840 [ 171.512569][ C0] hrtimer_interrupt+0x38c/0xda0 [ 171.517505][ C0] ? debug_smp_processor_id+0x9/0x20 [ 171.522779][ C0] smp_apic_timer_interrupt+0x109/0x280 [ 171.528309][ C0] apic_timer_interrupt+0xf/0x20 [ 171.533226][ C0] [ 171.536160][ C0] RIP: 0010:__memcg_kmem_uncharge+0x219/0x2e0 [ 171.542210][ C0] Code: 4b 0d 89 e8 59 97 00 00 bf 01 00 00 00 e8 2f e3 9b ff 65 8b 05 d4 fd 4a 7e 85 c0 74 53 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f <5d> c3 49 8d 5f 10 48 89 df be 08 00 00 00 e8 04 c1 fa ff 48 8b 45 [ 171.561797][ C0] RSP: 0018:ffffc900026c7878 EFLAGS: 00000296 ORIG_RAX: ffffffffffffff13 [ 171.570204][ C0] RAX: 0000000000000001 RBX: ffffea00025312c0 RCX: 0000000000000000 [ 171.578160][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffea00025312c0 [ 171.586115][ C0] RBP: ffffc900026c7878 R08: 000000000003a768 R09: ffffed101520beaf [ 171.594075][ C0] R10: ffffed101520beaf R11: 0000000000000000 R12: ffff8880a14456a0 [ 171.602031][ C0] R13: dffffc0000000000 R14: 1ffff11014288ad4 R15: ffff8880a905f568 [ 171.610005][ C0] free_thread_stack+0x12e/0x590 [ 171.614930][ C0] put_task_stack+0xa3/0x130 [ 171.619505][ C0] finish_task_switch+0x3f1/0x550 [ 171.624522][ C0] __schedule+0x9a8/0xcc0 [ 171.628848][ C0] ? ___preempt_schedule+0x16/0x18 [ 171.633944][ C0] preempt_schedule+0xdb/0x120 [ 171.638705][ C0] ___preempt_schedule+0x16/0x18 [ 171.643626][ C0] ? page_poisoning_enabled+0x1c/0x30 [ 171.648981][ C0] prep_new_page+0x161/0x2e0 [ 171.653576][ C0] get_page_from_freelist+0x850/0xaa0 [ 171.658942][ C0] __alloc_pages_nodemask+0x264/0x5d0 [ 171.664320][ C0] alloc_pages_vma+0x94a/0xd50 [ 171.669077][ C0] do_huge_pmd_anonymous_page+0x883/0xe50 [ 171.674795][ C0] handle_mm_fault+0x2017/0x2890 [ 171.679741][ C0] do_user_addr_fault+0x589/0xaf0 [ 171.684766][ C0] __do_page_fault+0xd3/0x1f0 [ 171.689430][ C0] do_page_fault+0x99/0xb0 [ 171.693835][ C0] page_fault+0x39/0x40 [ 171.697975][ C0] RIP: 0033:0x4418d1 [ 171.701857][ C0] Code: 2e 0f 1f 84 00 00 00 00 00 48 83 fa 20 48 89 f8 73 77 f6 c2 01 74 0b 0f b6 0e 88 0f 48 ff c6 48 ff c7 f6 c2 02 74 12 0f b7 0e <66> 89 0f 48 83 c6 02 48 83 c7 02 0f 1f 40 00 f6 c2 04 74 0c 8b 0e [ 171.721445][ C0] RSP: 002b:00007ffd92b36be8 EFLAGS: 00010202 [ 171.727622][ C0] RAX: 0000000020000080 RBX: 0000000000000000 RCX: 0000000000007865 [ 171.735696][ C0] RDX: 0000000000000006 RSI: 0000000000760020 RDI: 0000000020000080 [ 171.743658][ C0] RBP: 0000000000760000 R08: 0000000000000000 R09: 0000000000000004 [ 171.751617][ C0] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000001 [ 171.759578][ C0] R13: 00007ffd92b36dd0 R14: 0000000000760008 R15: 00007ffd92b36de0