[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 54.253959][ T27] audit: type=1800 audit(1578477933.753:25): pid=8368 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 54.294947][ T27] audit: type=1800 audit(1578477933.763:26): pid=8368 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 54.340785][ T27] audit: type=1800 audit(1578477933.763:27): pid=8368 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.1.32' (ECDSA) to the list of known hosts. 2020/01/08 10:05:42 fuzzer started 2020/01/08 10:05:44 dialing manager at 10.128.0.26:35703 2020/01/08 10:05:44 syscalls: 2824 2020/01/08 10:05:44 code coverage: enabled 2020/01/08 10:05:44 comparison tracing: enabled 2020/01/08 10:05:44 extra coverage: enabled 2020/01/08 10:05:44 setuid sandbox: enabled 2020/01/08 10:05:44 namespace sandbox: enabled 2020/01/08 10:05:44 Android sandbox: /sys/fs/selinux/policy does not exist 2020/01/08 10:05:44 fault injection: enabled 2020/01/08 10:05:44 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/01/08 10:05:44 net packet injection: enabled 2020/01/08 10:05:44 net device setup: enabled 2020/01/08 10:05:44 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/01/08 10:05:44 devlink PCI setup: PCI device 0000:00:10.0 is not available 10:05:45 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x81, 0x7, 0x5, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000040)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r0, &(0x7f0000000180)}, 0x10) 10:05:46 executing program 1: ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8910, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) perf_event_open(&(0x7f0000000600)={0x1, 0x43b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c}, 0x6d) listen(0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) getegid() openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$xdp(0x2c, 0x3, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x10000, 0x20000000209, 0x0, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x20024e, 0x20000000209, 0x0, 0xffffffffffffffff}) r5 = dup2(r0, r4) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000000)={0x9cf0000008, 0x9, 0x0, 0xffffffffffffffff, 0x8}) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0) syzkaller login: [ 66.572681][ T8534] IPVS: ftp: loaded support on port[0] = 21 [ 66.711272][ T8534] chnl_net:caif_netlink_parms(): no params data found [ 66.781677][ T8534] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.789842][ T8534] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.798877][ T8534] device bridge_slave_0 entered promiscuous mode [ 66.808754][ T8534] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.824895][ T8534] bridge0: port 2(bridge_slave_1) entered disabled state 10:05:46 executing program 2: unshare(0x2040400) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) [ 66.834017][ T8534] device bridge_slave_1 entered promiscuous mode [ 66.850279][ T8537] IPVS: ftp: loaded support on port[0] = 21 [ 66.881626][ T8534] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.909600][ T8534] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.959700][ T8534] team0: Port device team_slave_0 added [ 66.982344][ T8534] team0: Port device team_slave_1 added 10:05:46 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080), 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @initdev}, 0x10) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="4ef27f45294600000033086c0000000000000000014410051366010000003800000000000007030a000b00000800"/56], 0x38) [ 67.087527][ T8534] device hsr_slave_0 entered promiscuous mode [ 67.105180][ T8534] device hsr_slave_1 entered promiscuous mode [ 67.210780][ T8537] chnl_net:caif_netlink_parms(): no params data found [ 67.218266][ T8540] IPVS: ftp: loaded support on port[0] = 21 [ 67.270662][ T8542] IPVS: ftp: loaded support on port[0] = 21 10:05:46 executing program 4: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) [ 67.399229][ T8537] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.409430][ T8537] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.417809][ T8537] device bridge_slave_0 entered promiscuous mode [ 67.425824][ T8534] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.467243][ T8534] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.533683][ T8537] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.547055][ T8537] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.555994][ T8537] device bridge_slave_1 entered promiscuous mode [ 67.569369][ T8534] netdevsim netdevsim0 netdevsim2: renamed from eth2 10:05:47 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$VIDIOC_S_AUDIO(0xffffffffffffffff, 0x40345622, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = creat(0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100) ftruncate(r2, 0x8200) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f) close(0xffffffffffffffff) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) unshare(0x2000400) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) gettid() prctl$PR_GET_ENDIAN(0x13, 0x0) fsync(0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) listen(r3, 0x2) accept4(r3, 0x0, 0x0, 0x0) r4 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) sendto$inet6(r3, 0x0, 0x184, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 67.647211][ T8534] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 67.724681][ T8544] IPVS: ftp: loaded support on port[0] = 21 [ 67.758008][ T8537] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.793037][ T8537] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.837474][ T8546] IPVS: ftp: loaded support on port[0] = 21 [ 67.847637][ T8540] chnl_net:caif_netlink_parms(): no params data found [ 67.907254][ T8537] team0: Port device team_slave_0 added [ 67.936801][ T8537] team0: Port device team_slave_1 added [ 67.961425][ T8540] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.968737][ T8540] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.976549][ T8540] device bridge_slave_0 entered promiscuous mode [ 67.984321][ T8540] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.991458][ T8540] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.999215][ T8540] device bridge_slave_1 entered promiscuous mode [ 68.006928][ T8542] chnl_net:caif_netlink_parms(): no params data found [ 68.087472][ T8537] device hsr_slave_0 entered promiscuous mode [ 68.155052][ T8537] device hsr_slave_1 entered promiscuous mode [ 68.194898][ T8537] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.202626][ T8537] Cannot create hsr debugfs directory [ 68.218412][ T8540] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.232872][ T8534] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.254382][ T8540] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.332675][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.341224][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.350244][ T8542] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.357409][ T8542] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.365338][ T8542] device bridge_slave_0 entered promiscuous mode [ 68.374485][ T8542] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.382124][ T8542] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.389847][ T8542] device bridge_slave_1 entered promiscuous mode [ 68.411343][ T8540] team0: Port device team_slave_0 added [ 68.419804][ T8540] team0: Port device team_slave_1 added [ 68.433483][ T8534] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.451489][ T8544] chnl_net:caif_netlink_parms(): no params data found [ 68.486448][ T8546] chnl_net:caif_netlink_parms(): no params data found [ 68.526587][ T8540] device hsr_slave_0 entered promiscuous mode [ 68.575201][ T8540] device hsr_slave_1 entered promiscuous mode [ 68.615304][ T8540] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.622914][ T8540] Cannot create hsr debugfs directory [ 68.634098][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.643075][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.651571][ T2680] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.658701][ T2680] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.667848][ T8542] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.680208][ T8542] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.703421][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.751870][ T8546] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.759399][ T8546] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.767049][ T8546] device bridge_slave_0 entered promiscuous mode [ 68.778498][ T8546] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.785629][ T8546] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.793306][ T8546] device bridge_slave_1 entered promiscuous mode [ 68.805564][ T2681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.814043][ T2681] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.823355][ T2681] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.830457][ T2681] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.846915][ T8544] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.853977][ T8544] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.862050][ T8544] device bridge_slave_0 entered promiscuous mode [ 68.871604][ T8542] team0: Port device team_slave_0 added [ 68.880483][ T8542] team0: Port device team_slave_1 added [ 68.898311][ T8546] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.907829][ T2743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.917289][ T8537] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 68.957639][ T8544] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.964729][ T8544] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.972516][ T8544] device bridge_slave_1 entered promiscuous mode [ 68.983742][ T8546] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.003719][ T8537] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.117605][ T8542] device hsr_slave_0 entered promiscuous mode [ 69.155561][ T8542] device hsr_slave_1 entered promiscuous mode [ 69.204968][ T8542] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.212554][ T8542] Cannot create hsr debugfs directory [ 69.219865][ T8546] team0: Port device team_slave_0 added [ 69.225998][ T8537] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 69.283713][ T8544] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.295789][ T2743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.311822][ T8546] team0: Port device team_slave_1 added [ 69.318057][ T8537] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 69.377804][ T8544] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.424467][ T8544] team0: Port device team_slave_0 added [ 69.442137][ T8544] team0: Port device team_slave_1 added [ 69.452593][ T2743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.461279][ T2743] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.470066][ T2743] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.516577][ T8546] device hsr_slave_0 entered promiscuous mode [ 69.565109][ T8546] device hsr_slave_1 entered promiscuous mode [ 69.615052][ T8546] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.622642][ T8546] Cannot create hsr debugfs directory [ 69.656847][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.665600][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.682908][ T8534] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 69.693546][ T8534] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.722852][ T8540] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.766711][ T8540] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.806600][ T8540] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.856816][ T2842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.865256][ T2842] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.873691][ T2842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.881994][ T2842] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.892660][ T2842] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.947451][ T8544] device hsr_slave_0 entered promiscuous mode [ 69.985263][ T8544] device hsr_slave_1 entered promiscuous mode [ 70.024962][ T8544] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.032607][ T8544] Cannot create hsr debugfs directory [ 70.045044][ T8540] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.218339][ T8546] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 70.266673][ T2743] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.274136][ T2743] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.285539][ T8534] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.295261][ T8544] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 70.362682][ T8542] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.396159][ T8546] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 70.475322][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.483853][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.496676][ T8537] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.503917][ T8544] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 70.536767][ T8542] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.577394][ T8546] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 70.637630][ T8546] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 70.685560][ T8544] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 70.727052][ T8542] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.781136][ T8544] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 70.826699][ T8542] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.856835][ T2842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.865207][ T2842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.873302][ T2842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.881123][ T2842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.889292][ T2842] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.897278][ T2842] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.908537][ T8537] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.928419][ T8534] device veth0_vlan entered promiscuous mode [ 70.968149][ T2842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.977122][ T2842] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.986814][ T2842] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.993852][ T2842] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.002279][ T8534] device veth1_vlan entered promiscuous mode [ 71.037183][ T3096] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.046065][ T3096] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.054488][ T3096] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.063557][ T3096] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.070651][ T3096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.081244][ T3096] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.089795][ T3096] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.106537][ T8540] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.123970][ T8540] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.138011][ T3096] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.155883][ T3096] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.164191][ T3096] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.173746][ T3096] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.182815][ T3096] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.190593][ T3096] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.199307][ T3096] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.225892][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.234502][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.265324][ T2680] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.272440][ T2680] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.280596][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.294407][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.304058][ T2680] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.311164][ T2680] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.324392][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.393388][ T8546] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.421692][ T8546] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.464682][ T8546] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.481584][ T8546] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.521823][ T8546] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.274774][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 176.281600][ C1] rcu: 1-...!: (10499 ticks this GP) idle=4ca/1/0x4000000000000002 softirq=13736/13736 fqs=11 [ 176.292171][ C1] (t=10500 jiffies g=6993 q=428) [ 176.297187][ C1] rcu: rcu_preempt kthread starved for 10476 jiffies! g6993 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 176.308271][ C1] rcu: RCU grace-period kthread stack dump: [ 176.314148][ C1] rcu_preempt R running task 28984 10 2 0x80004000 [ 176.322034][ C1] Call Trace: [ 176.325323][ C1] __schedule+0x9a0/0xcc0 [ 176.329654][ C1] schedule+0x181/0x210 [ 176.333799][ C1] schedule_timeout+0x14f/0x240 [ 176.338636][ C1] ? run_local_timers+0x120/0x120 [ 176.343653][ C1] rcu_gp_kthread+0xed8/0x1770 [ 176.348424][ C1] kthread+0x332/0x350 [ 176.352480][ C1] ? rcu_report_qs_rsp+0x140/0x140 [ 176.357575][ C1] ? kthread_blkcg+0xe0/0xe0 [ 176.362151][ C1] ret_from_fork+0x24/0x30 [ 176.366567][ C1] NMI backtrace for cpu 1 [ 176.370889][ C1] CPU: 1 PID: 8551 Comm: syz-executor.0 Not tainted 5.5.0-rc5-syzkaller #0 [ 176.379455][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 176.389510][ C1] Call Trace: [ 176.392782][ C1] [ 176.395630][ C1] dump_stack+0x1fb/0x318 [ 176.399951][ C1] nmi_cpu_backtrace+0xaf/0x1a0 [ 176.404793][ C1] ? nmi_trigger_cpumask_backtrace+0x16d/0x290 [ 176.410934][ C1] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 176.416987][ C1] nmi_trigger_cpumask_backtrace+0x174/0x290 [ 176.422977][ C1] arch_trigger_cpumask_backtrace+0x10/0x20 [ 176.428995][ C1] rcu_dump_cpu_stacks+0x15a/0x220 [ 176.434116][ C1] rcu_sched_clock_irq+0xe25/0x1ad0 [ 176.439309][ C1] ? trace_hardirqs_off+0x74/0x80 [ 176.444335][ C1] update_process_times+0x12d/0x180 [ 176.449531][ C1] tick_sched_timer+0x263/0x420 [ 176.454373][ C1] ? tick_setup_sched_timer+0x3d0/0x3d0 [ 176.459910][ C1] __hrtimer_run_queues+0x403/0x840 [ 176.465109][ C1] hrtimer_interrupt+0x38c/0xda0 [ 176.470053][ C1] ? debug_smp_processor_id+0x9/0x20 [ 176.475334][ C1] smp_apic_timer_interrupt+0x109/0x280 [ 176.480870][ C1] apic_timer_interrupt+0xf/0x20 [ 176.485787][ C1] [ 176.488713][ C1] RIP: 0010:free_thread_stack+0x14c/0x590 [ 176.494431][ C1] Code: 2e 00 48 89 df 31 f6 e8 02 8d 6f 00 43 80 3c 2e 00 74 08 4c 89 e7 e8 73 94 6a 00 49 8b 1c 24 48 83 c3 08 48 89 d8 48 c1 e8 03 <42> 80 3c 28 00 74 08 48 89 df e8 55 94 6a 00 48 8b 3b be fc ff ff [ 176.514022][ C1] RSP: 0018:ffffc900023b7888 EFLAGS: 00000a02 ORIG_RAX: ffffffffffffff13 [ 176.522422][ C1] RAX: 1ffff11012e22761 RBX: ffff888097113b08 RCX: 0000000000000000 [ 176.530380][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffea0002990a80 [ 176.538339][ C1] RBP: ffffc900023b78c0 R08: dffffc0000000000 R09: fffffbfff124248a [ 176.546297][ C1] R10: fffffbfff124248a R11: 0000000000000000 R12: ffff888097113ba0 [ 176.554259][ C1] R13: dffffc0000000000 R14: 1ffff11012e22774 R15: ffff8880946314b8 [ 176.562236][ C1] ? free_thread_stack+0x12e/0x590 [ 176.567338][ C1] put_task_stack+0xa3/0x130 [ 176.571921][ C1] finish_task_switch+0x3f1/0x550 [ 176.576939][ C1] __schedule+0x9a8/0xcc0 [ 176.581265][ C1] ? ___preempt_schedule+0x16/0x18 [ 176.586381][ C1] preempt_schedule+0xdb/0x120 [ 176.591155][ C1] ___preempt_schedule+0x16/0x18 [ 176.596100][ C1] ? page_poisoning_enabled+0x1c/0x30 [ 176.601470][ C1] prep_new_page+0x161/0x2e0 [ 176.606057][ C1] get_page_from_freelist+0x850/0xaa0 [ 176.611437][ C1] __alloc_pages_nodemask+0x264/0x5d0 [ 176.616817][ C1] alloc_pages_vma+0x94a/0xd50 [ 176.621578][ C1] do_huge_pmd_anonymous_page+0x883/0xe50 [ 176.627295][ C1] handle_mm_fault+0x2017/0x2890 [ 176.632247][ C1] do_user_addr_fault+0x589/0xaf0 [ 176.637272][ C1] __do_page_fault+0xd3/0x1f0 [ 176.641946][ C1] do_page_fault+0x99/0xb0 [ 176.646350][ C1] page_fault+0x39/0x40 [ 176.650495][ C1] RIP: 0033:0x400644 [ 176.654397][ C1] Code: 06 e9 49 01 00 00 48 8b 44 24 10 48 0b 44 24 28 75 1f 48 8b 14 24 48 8b 7c 24 20 be 04 00 00 00 e8 21 55 00 00 48 8b 74 24 08 <89> 06 e9 1e 01 00 00 48 8b 44 24 08 48 8b 14 24 be 04 00 00 00 8b [ 176.673988][ C1] RSP: 002b:00007ffe157f9ad0 EFLAGS: 00010202 [ 176.680045][ C1] RAX: 000000000000000b RBX: 0000000000000000 RCX: 0000000000000000 [ 176.688019][ C1] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 000000000000000b [ 176.695989][ C1] RBP: 0000000000760000 R08: 0000000000000000 R09: 0000000000000000 [ 176.703948][ C1] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000001 [ 176.711918][ C1] R13: 00007ffe157f9cf0 R14: 0000000000760008 R15: 00007ffe157f9d00