[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 43.415135][ T26] audit: type=1800 audit(1575431647.983:25): pid=7990 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 43.453771][ T26] audit: type=1800 audit(1575431647.983:26): pid=7990 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 43.482198][ T26] audit: type=1800 audit(1575431647.983:27): pid=7990 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.205' (ECDSA) to the list of known hosts. 2019/12/04 03:54:16 fuzzer started 2019/12/04 03:54:18 dialing manager at 10.128.0.26:42111 2019/12/04 03:54:18 syscalls: 2689 2019/12/04 03:54:18 code coverage: enabled 2019/12/04 03:54:18 comparison tracing: enabled 2019/12/04 03:54:18 extra coverage: extra coverage is not supported by the kernel 2019/12/04 03:54:18 setuid sandbox: enabled 2019/12/04 03:54:18 namespace sandbox: enabled 2019/12/04 03:54:18 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/04 03:54:18 fault injection: enabled 2019/12/04 03:54:18 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/04 03:54:18 net packet injection: enabled 2019/12/04 03:54:18 net device setup: enabled 2019/12/04 03:54:18 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/12/04 03:54:18 devlink PCI setup: PCI device 0000:00:10.0 is not available 03:54:19 executing program 0: syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={[{@fat=@dmask={'dmask', 0x3d, 0x8a270000}}]}) 03:54:19 executing program 1: unshare(0x400) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) syzkaller login: [ 55.251910][ T8153] IPVS: ftp: loaded support on port[0] = 21 03:54:20 executing program 2: bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x1000014, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x200080, 0x1) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) umount2(0x0, 0x6) sigaltstack(&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300)) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xe200, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = inotify_init() ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000008c0)=""/224) inotify_add_watch(r3, &(0x7f00000002c0)='./file0\x00', 0x2000203) setxattr$trusted_overlay_opaque(&(0x7f0000000180)='./file0\x00', &(0x7f0000000400)='trusted.overlay.opaq5e\x00', &(0x7f00000003c0)='\x10\x00', 0x2, 0x3) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffa7) [ 55.412483][ T8156] IPVS: ftp: loaded support on port[0] = 21 [ 55.421078][ T8153] chnl_net:caif_netlink_parms(): no params data found [ 55.524342][ T8153] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.532314][ T8153] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.554692][ T8153] device bridge_slave_0 entered promiscuous mode [ 55.586933][ T8153] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.595194][ T8158] IPVS: ftp: loaded support on port[0] = 21 [ 55.601567][ T8153] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.609789][ T8153] device bridge_slave_1 entered promiscuous mode [ 55.643382][ T8153] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link 03:54:20 executing program 3: io_setup(0x3, &(0x7f00000000c0)) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semctl$GETVAL(0x0, 0x2, 0xc, &(0x7f00000002c0)=""/248) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001340)='./cgroup.cpu\x00', 0x200002, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001180)='/proc/self/net/pfkey\x00', 0x0, 0x0) r1 = socket(0x10, 0x802, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x2, &(0x7f0000001040)=ANY=[@ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) socket$inet_udplite(0x2, 0x2, 0x88) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc0\x00', 0x2000, 0x0) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) read$char_usb(r5, &(0x7f0000000040)=""/4096, 0x1000) ioctl$TIOCGSID(r5, 0x5429, &(0x7f0000001400)) r6 = gettid() setpriority(0x1, r6, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001300)={r6, r0, 0x0, 0x1, &(0x7f00000012c0)='\x00'}, 0x30) ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300)) ioctl$FS_IOC_SETVERSION(r1, 0x40047602, &(0x7f0000001700)=0x2) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x40000, 0x0) ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000340)) setxattr$security_selinux(&(0x7f0000001740)='./file1\x00', &(0x7f0000001780)='security.selinux\x00', &(0x7f00000011c0)='syst\f\xd0\n&:object_r:crond_var_run_t:s0\x00', 0x23, 0x7) listxattr(&(0x7f0000001600)='./file1\x00', &(0x7f00000017c0)=""/71, 0x38) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f00000013c0)) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x100000000000000) ioctl$TCSETS(r2, 0x5402, &(0x7f0000001240)={0x500000000, 0x0, 0x8, 0x0, 0xb, 0x3, 0x20, 0x3, 0x2, 0x3, 0x10001, 0x80}) getsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @dev}, &(0x7f0000000100)=0xc) request_key(&(0x7f0000000280)='dns_resolver\x00', &(0x7f0000000080)={'sy.'}, 0x0, 0x0) [ 55.696525][ T8153] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.720150][ T8156] chnl_net:caif_netlink_parms(): no params data found [ 55.831860][ T8153] team0: Port device team_slave_0 added [ 55.847189][ T8156] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.854655][ T8156] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.873892][ T8156] device bridge_slave_0 entered promiscuous mode 03:54:20 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) get_robust_list(0x0, 0x0, &(0x7f0000000340)) [ 55.897901][ T8153] team0: Port device team_slave_1 added [ 55.916997][ T8156] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.927015][ T8156] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.935764][ T8156] device bridge_slave_1 entered promiscuous mode [ 56.076352][ T8153] device hsr_slave_0 entered promiscuous mode 03:54:20 executing program 5: unshare(0x2040400) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$RTC_VL_CLR(r0, 0x4605) [ 56.134020][ T8153] device hsr_slave_1 entered promiscuous mode [ 56.215836][ T8156] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.237175][ T8163] IPVS: ftp: loaded support on port[0] = 21 [ 56.267672][ T8165] IPVS: ftp: loaded support on port[0] = 21 [ 56.280253][ T8156] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.303871][ T8158] chnl_net:caif_netlink_parms(): no params data found [ 56.327882][ T8156] team0: Port device team_slave_0 added [ 56.337557][ T8153] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.347999][ T8167] IPVS: ftp: loaded support on port[0] = 21 [ 56.386616][ T8153] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.427990][ T8156] team0: Port device team_slave_1 added [ 56.461041][ T8153] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 56.518845][ T8153] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 56.635543][ T8156] device hsr_slave_0 entered promiscuous mode [ 56.674093][ T8156] device hsr_slave_1 entered promiscuous mode [ 56.713785][ T8156] debugfs: Directory 'hsr0' with parent '/' already present! [ 56.798213][ T8156] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 56.856469][ T8158] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.863578][ T8158] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.871256][ T8158] device bridge_slave_0 entered promiscuous mode [ 56.900919][ T8163] chnl_net:caif_netlink_parms(): no params data found [ 56.910002][ T8156] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 56.967001][ T8156] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 57.037539][ T8156] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 57.105702][ T8158] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.112788][ T8158] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.121413][ T8158] device bridge_slave_1 entered promiscuous mode [ 57.159156][ T8158] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.198172][ T8163] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.205936][ T8163] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.213398][ T8163] device bridge_slave_0 entered promiscuous mode [ 57.221558][ T8158] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.283231][ T8163] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.290697][ T8163] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.298647][ T8163] device bridge_slave_1 entered promiscuous mode [ 57.313306][ T8167] chnl_net:caif_netlink_parms(): no params data found [ 57.348112][ T8158] team0: Port device team_slave_0 added [ 57.358743][ T8158] team0: Port device team_slave_1 added [ 57.367223][ T8165] chnl_net:caif_netlink_parms(): no params data found [ 57.376728][ T8163] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.388814][ T8163] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.403194][ T8153] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.461169][ T8163] team0: Port device team_slave_0 added [ 57.526350][ T8158] device hsr_slave_0 entered promiscuous mode [ 57.566715][ T8158] device hsr_slave_1 entered promiscuous mode [ 57.603788][ T8158] debugfs: Directory 'hsr0' with parent '/' already present! [ 57.626771][ T8156] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.634489][ T8163] team0: Port device team_slave_1 added [ 57.648270][ T8153] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.658632][ T8167] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.666164][ T8167] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.675218][ T8167] device bridge_slave_0 entered promiscuous mode [ 57.688708][ T8156] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.697427][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.706854][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.714969][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.722466][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.736480][ T8167] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.743535][ T8167] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.751460][ T8167] device bridge_slave_1 entered promiscuous mode [ 57.796564][ T8163] device hsr_slave_0 entered promiscuous mode [ 57.834151][ T8163] device hsr_slave_1 entered promiscuous mode [ 57.893842][ T8163] debugfs: Directory 'hsr0' with parent '/' already present! [ 57.901481][ T8165] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.908627][ T8165] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.919390][ T8165] device bridge_slave_0 entered promiscuous mode [ 57.927243][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.936380][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.944802][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.951941][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.959862][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.968487][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.976979][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.984074][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.991925][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.000788][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.019404][ T8167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.030477][ T8167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.040832][ T8165] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.047942][ T8165] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.056537][ T8165] device bridge_slave_1 entered promiscuous mode [ 58.075354][ T8165] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.088211][ T8165] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.116595][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.125352][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.133602][ T2958] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.140675][ T2958] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.148584][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.157046][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.176611][ T8165] team0: Port device team_slave_0 added [ 58.182675][ T8158] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 58.235888][ T8158] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 58.285566][ T8158] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 58.372314][ T8167] team0: Port device team_slave_0 added [ 58.379773][ T8167] team0: Port device team_slave_1 added [ 58.388226][ T8161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.397025][ T8161] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.406156][ T8161] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.413192][ T8161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.422615][ T8165] team0: Port device team_slave_1 added [ 58.443920][ T8158] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 58.500002][ T3211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.508715][ T3211] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.517250][ T3211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.526800][ T3211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.535465][ T3211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.543882][ T3211] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.552113][ T3211] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.560313][ T3211] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.616312][ T8165] device hsr_slave_0 entered promiscuous mode [ 58.674058][ T8165] device hsr_slave_1 entered promiscuous mode [ 58.733816][ T8165] debugfs: Directory 'hsr0' with parent '/' already present! [ 58.770818][ T8161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.780752][ T8161] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.789226][ T8161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.797409][ T8161] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.824758][ T8153] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.841763][ T8153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.860149][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.869264][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.878009][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.886312][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.895106][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.904265][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.912333][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.920796][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.976942][ T8167] device hsr_slave_0 entered promiscuous mode [ 59.024097][ T8167] device hsr_slave_1 entered promiscuous mode [ 59.093835][ T8167] debugfs: Directory 'hsr0' with parent '/' already present! [ 59.101446][ T8163] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 59.166607][ T8165] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 59.225660][ T8165] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 59.278531][ T8156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.294488][ T8163] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 59.327023][ T8163] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 59.395115][ T8165] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 59.446290][ T8165] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 59.503732][ T8163] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 59.546622][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.554085][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.581784][ T8153] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.590312][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.598252][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.611281][ T8156] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.648051][ T8167] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 59.695698][ T8167] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 59.749297][ T8167] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 59.798400][ T8167] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 59.848599][ T8158] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.943805][ T8158] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.981566][ T8165] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.994762][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.002865][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 165.013666][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 165.020447][ C0] rcu: 0-...!: (1 GPs behind) idle=bba/1/0x4000000000000002 softirq=10726/10738 fqs=38 [ 165.030394][ C0] (t=10501 jiffies g=6249 q=205) [ 165.035403][ C0] rcu: rcu_preempt kthread starved for 10426 jiffies! g6249 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 165.046478][ C0] rcu: RCU grace-period kthread stack dump: [ 165.052349][ C0] rcu_preempt R running task 29032 10 2 0x80004000 [ 165.060253][ C0] Call Trace: [ 165.063534][ C0] __schedule+0x9a0/0xcc0 [ 165.067859][ C0] schedule+0x181/0x210 [ 165.072002][ C0] schedule_timeout+0x14f/0x240 [ 165.076842][ C0] ? run_local_timers+0x120/0x120 [ 165.081855][ C0] rcu_gp_kthread+0xed8/0x1770 [ 165.086612][ C0] kthread+0x332/0x350 [ 165.090662][ C0] ? rcu_report_qs_rsp+0x140/0x140 [ 165.095757][ C0] ? kthread_blkcg+0xe0/0xe0 [ 165.100332][ C0] ret_from_fork+0x24/0x30 [ 165.104746][ C0] NMI backtrace for cpu 0 [ 165.109066][ C0] CPU: 0 PID: 8177 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0 [ 165.117281][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 165.127316][ C0] Call Trace: [ 165.130608][ C0] [ 165.133448][ C0] dump_stack+0x1fb/0x318 [ 165.137767][ C0] nmi_cpu_backtrace+0xaf/0x1a0 [ 165.142601][ C0] ? nmi_trigger_cpumask_backtrace+0x16d/0x290 [ 165.148741][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 165.154791][ C0] nmi_trigger_cpumask_backtrace+0x174/0x290 [ 165.160754][ C0] arch_trigger_cpumask_backtrace+0x10/0x20 [ 165.166633][ C0] rcu_dump_cpu_stacks+0x15a/0x220 [ 165.171733][ C0] rcu_sched_clock_irq+0xe25/0x1ad0 [ 165.176939][ C0] ? trace_hardirqs_off+0x74/0x80 [ 165.181954][ C0] update_process_times+0x12d/0x180 [ 165.187140][ C0] tick_sched_timer+0x263/0x420 [ 165.191974][ C0] ? tick_setup_sched_timer+0x3d0/0x3d0 [ 165.197503][ C0] __hrtimer_run_queues+0x403/0x840 [ 165.202707][ C0] hrtimer_interrupt+0x38c/0xda0 [ 165.207645][ C0] ? debug_smp_processor_id+0x9/0x20 [ 165.212917][ C0] smp_apic_timer_interrupt+0x109/0x280 [ 165.218447][ C0] apic_timer_interrupt+0xf/0x20 [ 165.223366][ C0] [ 165.226291][ C0] RIP: 0010:__memcg_kmem_uncharge+0x211/0x2e0 [ 165.232340][ C0] Code: 65 db a4 ff 48 c7 c7 98 4b 0d 89 e8 59 97 00 00 bf 01 00 00 00 e8 2f e3 9b ff 65 8b 05 d4 fd 4a 7e 85 c0 74 53 48 83 c4 08 5b <41> 5c 41 5d 41 5e 41 5f 5d c3 49 8d 5f 10 48 89 df be 08 00 00 00 [ 165.251928][ C0] RSP: 0018:ffffc90002457598 EFLAGS: 00000296 ORIG_RAX: ffffffffffffff13 [ 165.260322][ C0] RAX: 0000000000000001 RBX: ffffea0002792700 RCX: 0000000000000000 [ 165.268449][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffea0002792700 [ 165.276581][ C0] RBP: ffffc900024575b8 R08: 000000000003a768 R09: ffffed1015141e7f [ 165.284561][ C0] R10: ffffed1015141e7f R11: 0000000000000000 R12: ffffea0002792700 [ 165.292516][ C0] R13: 1ffffd40004f24e7 R14: ffffea0002792738 R15: 0000000000000000 [ 165.300491][ C0] free_thread_stack+0x12e/0x590 [ 165.305417][ C0] put_task_stack+0xa3/0x130 [ 165.309991][ C0] finish_task_switch+0x3f1/0x550 [ 165.315012][ C0] __schedule+0x9a8/0xcc0 [ 165.319339][ C0] ? ___preempt_schedule+0x16/0x18 [ 165.324433][ C0] preempt_schedule+0xdb/0x120 [ 165.329184][ C0] ___preempt_schedule+0x16/0x18 [ 165.334108][ C0] _raw_spin_unlock+0x3a/0x40 [ 165.338772][ C0] task_dump_owner+0x348/0x430 [ 165.343531][ C0] proc_pid_make_inode+0x174/0x1d0 [ 165.348632][ C0] proc_pid_instantiate+0x4f/0x1a0 [ 165.353728][ C0] proc_pid_lookup+0x21f/0x300 [ 165.358475][ C0] proc_root_lookup+0x22/0x50 [ 165.363158][ C0] __lookup_slow+0x285/0x380 [ 165.367743][ C0] walk_component+0x2d6/0x7b0 [ 165.372408][ C0] ? inode_permission+0xe0/0x520 [ 165.377341][ C0] link_path_walk+0x75b/0x1410 [ 165.382104][ C0] path_openat+0x139/0x44a0 [ 165.386612][ C0] ? __kasan_kmalloc+0x178/0x1b0 [ 165.391567][ C0] ? rcu_read_lock_sched_held+0x10b/0x170 [ 165.397327][ C0] do_filp_open+0x192/0x3d0 [ 165.401847][ C0] ? noop_direct_IO+0x20/0x20 [ 165.406554][ C0] do_sys_open+0x29f/0x560 [ 165.411321][ C0] __x64_sys_open+0x87/0x90 [ 165.415815][ C0] do_syscall_64+0xf7/0x1c0 [ 165.420307][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 165.426187][ C0] RIP: 0033:0x4143f0 [ 165.430066][ C0] Code: 05 48 3d 01 f0 ff ff 0f 83 2d 19 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 83 3d 7d 40 66 00 00 75 14 b8 02 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff [ 165.449653][ C0] RSP: 002b:00007fff7624f7f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 165.458046][ C0] RAX: ffffffffffffffda RBX: 00007fff7624f824 RCX: 00000000004143f0 [ 165.465999][ C0] RDX: 00007fff7624f82a RSI: 0000000000080001 RDI: 00000000004c00fb [ 165.473953][ C0] RBP: 00007fff7624f820 R08: 0000000000000000 R09: 0000000000000004 [ 165.481907][ C0] R10: 0000000000000075 R11: 0000000000000246 R12: 00000000004c00fb [ 165.489864][ C0] R13: 00007fff7624fd40 R14: 0000000000000000 R15: 00007fff7624fd50