[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 43.022517][ T25] audit: type=1800 audit(1575438131.354:25): pid=8064 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 43.053281][ T25] audit: type=1800 audit(1575438131.354:26): pid=8064 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 43.073765][ T25] audit: type=1800 audit(1575438131.354:27): pid=8064 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.1.28' (ECDSA) to the list of known hosts. 2019/12/04 05:42:22 fuzzer started 2019/12/04 05:42:24 dialing manager at 10.128.0.26:42111 2019/12/04 05:42:24 syscalls: 2689 2019/12/04 05:42:24 code coverage: enabled 2019/12/04 05:42:24 comparison tracing: enabled 2019/12/04 05:42:24 extra coverage: extra coverage is not supported by the kernel 2019/12/04 05:42:24 setuid sandbox: enabled 2019/12/04 05:42:24 namespace sandbox: enabled 2019/12/04 05:42:24 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/04 05:42:24 fault injection: enabled 2019/12/04 05:42:24 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/04 05:42:24 net packet injection: enabled 2019/12/04 05:42:24 net device setup: enabled 2019/12/04 05:42:24 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/12/04 05:42:24 devlink PCI setup: PCI device 0000:00:10.0 is not available 05:42:25 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x14}, 0x1, 0x68}, 0x0) 05:42:25 executing program 1: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0xfffffe46) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00\x02\x17\x87:\x1d\xe3\xa1\xac\xfc:)[\xc5\x0f`\x1eNu\xe2\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\xd5\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-\x04\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\xdd\x87\b\x17\xb0\xaa&\x03\x82s\x11\x8e\xaf\x9f\x9aDj\xa3\x91\xdf\x17gv\xe4\xee\xd3\xef\xd1\xc7\x01\xb3\xe5\xb529\xc1\xbe\x7f\x8a\xacvm5\xbd\xf2\xd6\r\xebg\x01\xa7\xf3\nQ\xc7\xf0\xaa\x1cE\xd0\xcb\xa4q-\xd6\x8d\x9f\x0ea\xd0O\v\xbc\x9e\xc6\xe4\xb7\xa4w\x7f~\x8b0\x8f\xec\n\x9c\xbd$\x1fMy\xe0Sj\xb6\xe0\x8e\x8f\x06\x13>g\xf8i\x93j\xfe\x13\xde') read(r1, &(0x7f0000011400)=""/102400, 0x19000) syzkaller login: [ 57.085484][ T8227] IPVS: ftp: loaded support on port[0] = 21 05:42:25 executing program 2: sendmmsg(0xffffffffffffffff, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e24, @multicast2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000500), 0xffd2}], 0x1}}], 0x469, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffffffffffe}, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xc64}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x32, 0x4) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 57.232688][ T8229] IPVS: ftp: loaded support on port[0] = 21 [ 57.277534][ T8227] chnl_net:caif_netlink_parms(): no params data found [ 57.367102][ T8232] IPVS: ftp: loaded support on port[0] = 21 [ 57.416814][ T8227] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.424323][ T8227] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.432562][ T8227] device bridge_slave_0 entered promiscuous mode [ 57.441632][ T8227] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.450297][ T8227] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.459243][ T8227] device bridge_slave_1 entered promiscuous mode [ 57.483491][ T8227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.496378][ T8227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 05:42:25 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) listen(r3, 0x0) listen(r0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000200)="580000001400add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) [ 57.535778][ T8227] team0: Port device team_slave_0 added [ 57.545494][ T8227] team0: Port device team_slave_1 added [ 57.629467][ T8227] device hsr_slave_0 entered promiscuous mode [ 57.676822][ T8227] device hsr_slave_1 entered promiscuous mode [ 57.741877][ T8229] chnl_net:caif_netlink_parms(): no params data found [ 57.805178][ T8235] IPVS: ftp: loaded support on port[0] = 21 [ 57.836659][ T8232] chnl_net:caif_netlink_parms(): no params data found 05:42:26 executing program 4: r0 = epoll_create1(0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x60000011}) epoll_pwait(r0, &(0x7f0000000300)=[{}], 0x1, 0x0, 0x0, 0x0) [ 57.885856][ T8229] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.893940][ T8229] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.910938][ T8229] device bridge_slave_0 entered promiscuous mode [ 57.920213][ T8227] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 58.000435][ T8229] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.010258][ T8229] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.019515][ T8229] device bridge_slave_1 entered promiscuous mode [ 58.036244][ T8227] netdevsim netdevsim0 netdevsim1: renamed from eth1 05:42:26 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4004550c, 0x0) [ 58.111530][ T8227] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 58.117124][ T8238] IPVS: ftp: loaded support on port[0] = 21 [ 58.159462][ T8227] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 58.240020][ T8229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.249727][ T8232] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.257098][ T8232] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.264652][ T8232] device bridge_slave_0 entered promiscuous mode [ 58.273894][ T8232] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.282031][ T8232] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.289927][ T8232] device bridge_slave_1 entered promiscuous mode [ 58.306784][ T8229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.344871][ T8241] IPVS: ftp: loaded support on port[0] = 21 [ 58.371766][ T8232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.385364][ T8232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.422849][ T8229] team0: Port device team_slave_0 added [ 58.431168][ T8229] team0: Port device team_slave_1 added [ 58.469288][ T8232] team0: Port device team_slave_0 added [ 58.538174][ T8229] device hsr_slave_0 entered promiscuous mode [ 58.596977][ T8229] device hsr_slave_1 entered promiscuous mode [ 58.636719][ T8229] debugfs: Directory 'hsr0' with parent '/' already present! [ 58.645578][ T8232] team0: Port device team_slave_1 added [ 58.662017][ T8238] chnl_net:caif_netlink_parms(): no params data found [ 58.682549][ T8235] chnl_net:caif_netlink_parms(): no params data found [ 58.737893][ T8238] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.745031][ T8238] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.753501][ T8238] device bridge_slave_0 entered promiscuous mode [ 58.809482][ T8232] device hsr_slave_0 entered promiscuous mode [ 58.856904][ T8232] device hsr_slave_1 entered promiscuous mode [ 58.906583][ T8232] debugfs: Directory 'hsr0' with parent '/' already present! [ 58.928560][ T8238] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.935650][ T8238] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.944012][ T8238] device bridge_slave_1 entered promiscuous mode [ 58.955535][ T8229] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 59.022759][ T8229] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 59.088113][ T8229] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 59.147116][ T8238] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.156290][ T8235] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.163869][ T8235] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.171780][ T8235] device bridge_slave_0 entered promiscuous mode [ 59.182086][ T8235] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.189372][ T8235] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.197356][ T8235] device bridge_slave_1 entered promiscuous mode [ 59.219784][ T8229] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 59.279474][ T8238] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.298517][ T8235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.313014][ T8232] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 59.338341][ T8232] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 59.398201][ T8232] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 59.442507][ T8232] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 59.503666][ T8235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.528471][ T8235] team0: Port device team_slave_0 added [ 59.542301][ T8238] team0: Port device team_slave_0 added [ 59.550507][ T8238] team0: Port device team_slave_1 added [ 59.560282][ T8227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.572517][ T8235] team0: Port device team_slave_1 added [ 59.698473][ T8238] device hsr_slave_0 entered promiscuous mode [ 59.748204][ T8238] device hsr_slave_1 entered promiscuous mode [ 59.786659][ T8238] debugfs: Directory 'hsr0' with parent '/' already present! [ 59.838392][ T8235] device hsr_slave_0 entered promiscuous mode [ 59.876781][ T8235] device hsr_slave_1 entered promiscuous mode [ 59.926637][ T8235] debugfs: Directory 'hsr0' with parent '/' already present! [ 59.934297][ T8241] chnl_net:caif_netlink_parms(): no params data found [ 59.955453][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.963809][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.010541][ T8238] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 60.050934][ T8227] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.074145][ T8238] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 60.137946][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.146826][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.155230][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.162426][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.170812][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.179600][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.188295][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.195332][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.203028][ T8241] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.210211][ T8241] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.219307][ T8241] device bridge_slave_0 entered promiscuous mode [ 60.228313][ T8241] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.235367][ T8241] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.243670][ T8241] device bridge_slave_1 entered promiscuous mode [ 60.262910][ T8238] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 60.318965][ T8238] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 60.368624][ T8239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.377041][ T8239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.397360][ T8235] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 60.463113][ T8235] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 60.521193][ T8232] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.529431][ T8241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.545036][ T8241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.556158][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.565005][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.573697][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.582329][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.590309][ T8235] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 60.628942][ T8235] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 60.695247][ T8241] team0: Port device team_slave_0 added [ 60.713319][ T8239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.725120][ T8239] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.740195][ T8241] team0: Port device team_slave_1 added [ 60.752593][ T8229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.768009][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.776298][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.785076][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.794118][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.810805][ T8232] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.836294][ T8238] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.847684][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.859730][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.868691][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.877726][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.892764][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.899856][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.907801][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.916429][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.924948][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.932014][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.999248][ T8241] device hsr_slave_0 entered promiscuous mode [ 61.037234][ T8241] device hsr_slave_1 entered promiscuous mode [ 61.076684][ T8241] debugfs: Directory 'hsr0' with parent '/' already present! [ 61.097908][ T8238] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.106374][ T8227] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.117719][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.126246][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.134441][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.142211][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.151186][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.160458][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.168471][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.176131][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.184991][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.197757][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.208318][ T8229] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.225335][ T8239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.234739][ T8239] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.244111][ T8239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.254489][ T8239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.262931][ T8239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.271589][ T8239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.279913][ T8239] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.287008][ T8239] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.295268][ T2951] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.312985][ T2951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.322364][ T2951] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.331329][ T2951] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.338456][ T2951] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.346125][ T2951] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.354101][ T2951] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.386434][ T8232] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.400898][ T8232] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.410183][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.418599][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.427374][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.435684][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.442778][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.450551][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.460040][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.468835][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.477529][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.485889][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.492989][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.500733][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.509713][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.518322][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.555070][ T8227] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.564020][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.573470][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.582345][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.591530][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.600398][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.610157][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.618678][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.627233][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.635411][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.644339][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.653368][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.661864][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.670336][ T3090] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.682318][ T8229] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.705322][ T8235] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.720336][ T8241] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 61.758508][ T8241] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 61.798896][ T8241] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 61.857681][ T8241] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 61.905313][ T8239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.914436][ T8239] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.923398][ T8239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.935162][ T8239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.943587][ T8239] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.951349][ T8239] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.959126][ T8239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.967664][ T8239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.975837][ T8239] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.983562][ T8239] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.996198][ T8235] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.009647][ T8238] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.020501][ T8229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.032448][ T8232] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.048979][ T8246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.062103][ T8246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.101957][ T8239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.120918][ T8239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.133824][ T8239] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.140917][ T8239] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.154849][ T8239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.163618][ T8239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.177789][ T8239] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.184848][ T8239] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.199103][ T8239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.211012][ T8239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.245179][ T8239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.253406][ T8239] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.267300][ T8239] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 167.106480][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 167.113245][ C1] rcu: 1-...!: (10499 ticks this GP) idle=406/1/0x4000000000000002 softirq=11027/11027 fqs=40 [ 167.123998][ C1] (t=10501 jiffies g=6465 q=386) [ 167.129040][ C1] rcu: rcu_preempt kthread starved for 10421 jiffies! g6465 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 167.140146][ C1] rcu: RCU grace-period kthread stack dump: [ 167.146138][ C1] rcu_preempt R running task 29032 10 2 0x80004008 [ 167.154062][ C1] Call Trace: [ 167.157480][ C1] __schedule+0x9a8/0xcc0 [ 167.161834][ C1] schedule+0x181/0x210 [ 167.165989][ C1] schedule_timeout+0x14f/0x240 [ 167.170855][ C1] ? run_local_timers+0x120/0x120 [ 167.175909][ C1] rcu_gp_kthread+0xed8/0x1770 [ 167.180677][ C1] kthread+0x332/0x350 [ 167.184745][ C1] ? rcu_report_qs_rsp+0x140/0x140 [ 167.189873][ C1] ? kthread_blkcg+0xe0/0xe0 [ 167.194510][ C1] ret_from_fork+0x24/0x30 [ 167.198955][ C1] NMI backtrace for cpu 1 [ 167.203282][ C1] CPU: 1 PID: 8241 Comm: syz-executor.5 Not tainted 5.4.0-syzkaller #0 [ 167.211517][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 167.221605][ C1] Call Trace: [ 167.224898][ C1] [ 167.227762][ C1] dump_stack+0x1fb/0x318 [ 167.232100][ C1] nmi_cpu_backtrace+0xaf/0x1a0 [ 167.236952][ C1] ? nmi_trigger_cpumask_backtrace+0x16d/0x290 [ 167.243096][ C1] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 167.249173][ C1] nmi_trigger_cpumask_backtrace+0x174/0x290 [ 167.255186][ C1] arch_trigger_cpumask_backtrace+0x10/0x20 [ 167.261081][ C1] rcu_dump_cpu_stacks+0x15a/0x220 [ 167.266315][ C1] rcu_sched_clock_irq+0xe25/0x1ad0 [ 167.271534][ C1] ? trace_hardirqs_off+0x74/0x80 [ 167.276571][ C1] update_process_times+0x12d/0x180 [ 167.281783][ C1] tick_sched_timer+0x263/0x420 [ 167.286624][ C1] ? tick_setup_sched_timer+0x3d0/0x3d0 [ 167.292170][ C1] __hrtimer_run_queues+0x403/0x840 [ 167.297442][ C1] hrtimer_interrupt+0x38c/0xda0 [ 167.302738][ C1] ? debug_smp_processor_id+0x9/0x20 [ 167.308021][ C1] smp_apic_timer_interrupt+0x109/0x280 [ 167.313574][ C1] apic_timer_interrupt+0xf/0x20 [ 167.318515][ C1] [ 167.321541][ C1] RIP: 0010:__memcg_kmem_uncharge+0x44/0x2e0 [ 167.327537][ C1] Code: fc ff df 4c 8d 77 38 4d 89 f5 49 c1 ed 03 41 80 7c 05 00 00 74 08 4c 89 f7 e8 d8 f4 fa ff 4d 8b 3e b8 01 00 00 00 89 d9 d3 e0 <4d> 85 ff 0f 84 bf 01 00 00 4c 39 3d 04 ce 8c 07 0f 84 6e 02 00 00 [ 167.347154][ C1] RSP: 0018:ffffc90002077980 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 167.355552][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000000 [ 167.363509][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffea00025d0c80 [ 167.371468][ C1] RBP: ffffc900020779b0 R08: 000000000003a768 R09: ffffed10125b4727 [ 167.379426][ C1] R10: ffffed10125b4727 R11: 0000000000000000 R12: ffffea00025d0c80 [ 167.387381][ C1] R13: 1ffffd40004ba197 R14: ffffea00025d0cb8 R15: 0000000000000000 [ 167.395390][ C1] ? free_thread_stack+0x124/0x590 [ 167.400500][ C1] free_thread_stack+0x12e/0x590 [ 167.405428][ C1] put_task_stack+0xa3/0x130 [ 167.411222][ C1] finish_task_switch+0x3f1/0x550 [ 167.416241][ C1] __schedule+0x9a8/0xcc0 [ 167.420572][ C1] ? ___preempt_schedule+0x16/0x18 [ 167.425667][ C1] preempt_schedule+0xdb/0x120 [ 167.430422][ C1] ___preempt_schedule+0x16/0x18 [ 167.435348][ C1] ? __debug_object_init+0x878/0x19a0 [ 167.440705][ C1] _raw_spin_unlock_irqrestore+0xcc/0xe0 [ 167.446329][ C1] __debug_object_init+0x878/0x19a0 [ 167.451515][ C1] ? rcu_lock_release+0xd/0x30 [ 167.456281][ C1] ? memset+0x31/0x40 [ 167.460251][ C1] debug_object_init+0x14/0x20 [ 167.464998][ C1] init_timer_key+0x3c/0xe0 [ 167.469487][ C1] sock_init_data+0x6d/0x960 [ 167.474065][ C1] unix_create1+0xb8/0x560 [ 167.478467][ C1] ? rcu_lock_release+0x9/0x30 [ 167.483220][ C1] unix_create+0x136/0x1c0 [ 167.487651][ C1] __sock_create+0x5cc/0x910 [ 167.492267][ C1] __sys_socket+0xe7/0x2e0 [ 167.496683][ C1] __x64_sys_socket+0x7a/0x90 [ 167.501350][ C1] do_syscall_64+0xf7/0x1c0 [ 167.505855][ C1] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 167.511738][ C1] RIP: 0033:0x45d1c7 [ 167.515622][ C1] Code: 00 00 00 49 89 ca b8 36 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 4a 8b fb ff c3 66 0f 1f 84 00 00 00 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 2d 8b fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 167.535211][ C1] RSP: 002b:00007ffdd04c73b8 EFLAGS: 00000202 ORIG_RAX: 0000000000000029 [ 167.543609][ C1] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045d1c7 [ 167.551565][ C1] RDX: 0000000000000000 RSI: 0000000000080002 RDI: 0000000000000001 [ 167.559525][ C1] RBP: 00000000004bfaf7 R08: 00007ffdd04c7443 R09: 0000000000000005 [ 167.567482][ C1] R10: 0000000000000004 R11: 0000000000000202 R12: 0000000000000003 [ 167.575439][ C1] R13: 0000000000000006 R14: 0000000000000000 R15: 00007ffdd04c7630