[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 59.963394][ T26] audit: type=1800 audit(1573876195.284:25): pid=8634 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 59.983744][ T26] audit: type=1800 audit(1573876195.284:26): pid=8634 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 60.043876][ T26] audit: type=1800 audit(1573876195.294:27): pid=8634 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.214' (ECDSA) to the list of known hosts. 2019/11/16 03:50:05 fuzzer started 2019/11/16 03:50:07 dialing manager at 10.128.0.26:41425 2019/11/16 03:50:08 syscalls: 2566 2019/11/16 03:50:08 code coverage: enabled 2019/11/16 03:50:08 comparison tracing: enabled 2019/11/16 03:50:08 extra coverage: enabled 2019/11/16 03:50:08 setuid sandbox: enabled 2019/11/16 03:50:08 namespace sandbox: enabled 2019/11/16 03:50:08 Android sandbox: /sys/fs/selinux/policy does not exist 2019/11/16 03:50:08 fault injection: enabled 2019/11/16 03:50:08 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/11/16 03:50:08 net packet injection: enabled 2019/11/16 03:50:08 net device setup: enabled 2019/11/16 03:50:08 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/11/16 03:50:08 devlink PCI setup: PCI device 0000:00:10.0 is not available 03:52:24 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaa3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x401000000001, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r3 = open(&(0x7f0000000400)='./bus\x00', 0x1044142, 0x0) r4 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000003c0), 0x1c1800) sendmsg$sock(r4, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000007c0)}, {0x0}, {0x0}, {&(0x7f0000000a40)}], 0x4}, 0x4000840) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) r5 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r5, 0x208200) sendfile(r1, r3, 0x0, 0x8000fffffffe) 03:52:24 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000080)={0x7, "f49c03b53457121031de7864967b3d03dc1429813eca4923cc78393b70c06bc5", 0x5, 0x1}) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) r2 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000380)={0x0, 0xfffffffffffffefa, 0xfa00, {0x20000000000002, &(0x7f00000000c0), 0x2}}, 0x20) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x80, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) getpid() r3 = getpid() r4 = getpid() ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000180)=@usbdevfs_disconnect={0xfffffffa}) rt_tgsigqueueinfo(r4, r3, 0x16, &(0x7f0000000100)) ptrace(0x10, r3) syzkaller login: [ 209.225957][ T8799] IPVS: ftp: loaded support on port[0] = 21 [ 209.405087][ T8799] chnl_net:caif_netlink_parms(): no params data found 03:52:24 executing program 2: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r1 = fanotify_init(0x0, 0x0) fanotify_mark(r1, 0x75, 0x2, r0, 0x0) [ 209.473287][ T8802] IPVS: ftp: loaded support on port[0] = 21 [ 209.480370][ T8799] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.488081][ T8799] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.501330][ T8799] device bridge_slave_0 entered promiscuous mode [ 209.521588][ T8799] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.528692][ T8799] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.536950][ T8799] device bridge_slave_1 entered promiscuous mode [ 209.565403][ T8799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.580429][ T8799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.613152][ T8799] team0: Port device team_slave_0 added [ 209.632025][ T8799] team0: Port device team_slave_1 added 03:52:25 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x803, 0x2) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,') sendfile(r0, r1, 0x0, 0x80000003) r2 = socket$inet(0x2, 0x0, 0x0) bind$inet(r2, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,') sendfile(0xffffffffffffffff, r3, 0x0, 0x80000003) r4 = socket(0xa, 0x3, 0x1) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) syncfs(r5) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r5, 0x84, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) accept4$unix(r4, 0x0, 0x0, 0x0) r6 = socket$inet(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r6, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,') [ 209.752505][ T8799] device hsr_slave_0 entered promiscuous mode [ 209.812264][ T8799] device hsr_slave_1 entered promiscuous mode [ 209.905731][ T8805] IPVS: ftp: loaded support on port[0] = 21 [ 209.927934][ T8802] chnl_net:caif_netlink_parms(): no params data found [ 209.963709][ T8807] IPVS: ftp: loaded support on port[0] = 21 03:52:25 executing program 4: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90}, 0x90) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendto$ax25(0xffffffffffffffff, 0x0, 0x0, 0x24004040, &(0x7f0000000280)={{0x3, @bcast, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x20000, 0x0) fallocate(r1, 0x0, 0x40000000, 0x10000101) [ 210.041486][ T8799] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 210.105509][ T8799] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 210.174157][ T8802] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.201093][ T8802] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.219307][ T8802] device bridge_slave_0 entered promiscuous mode [ 210.232429][ T8802] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.249131][ T8802] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.256775][ T8802] device bridge_slave_1 entered promiscuous mode 03:52:25 executing program 5: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x5, 0x123, 0x20, 0x2, 0x80, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) [ 210.272117][ T8799] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 210.363349][ T8799] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 210.465959][ T8802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.489848][ T8809] IPVS: ftp: loaded support on port[0] = 21 [ 210.504227][ T8802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.528372][ T8812] IPVS: ftp: loaded support on port[0] = 21 [ 210.543374][ T8802] team0: Port device team_slave_0 added [ 210.554401][ T8802] team0: Port device team_slave_1 added [ 210.651045][ T8802] device hsr_slave_0 entered promiscuous mode [ 210.700536][ T8802] device hsr_slave_1 entered promiscuous mode [ 210.759263][ T8802] debugfs: Directory 'hsr0' with parent '/' already present! [ 210.786634][ T8805] chnl_net:caif_netlink_parms(): no params data found [ 210.855794][ T8805] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.863035][ T8805] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.871433][ T8805] device bridge_slave_0 entered promiscuous mode [ 210.881498][ T8805] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.888572][ T8805] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.896272][ T8805] device bridge_slave_1 entered promiscuous mode [ 210.929984][ T8805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.972230][ T8805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.024460][ T8812] chnl_net:caif_netlink_parms(): no params data found [ 211.063114][ T8802] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 211.121907][ T8802] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 211.165062][ T8802] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 211.220820][ T8805] team0: Port device team_slave_0 added [ 211.238719][ T8807] chnl_net:caif_netlink_parms(): no params data found [ 211.248052][ T8802] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 211.284338][ T8805] team0: Port device team_slave_1 added [ 211.314061][ T8799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.332133][ T8812] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.339652][ T8812] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.347300][ T8812] device bridge_slave_0 entered promiscuous mode [ 211.358176][ T8812] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.366108][ T8812] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.374199][ T8812] device bridge_slave_1 entered promiscuous mode [ 211.398203][ T8809] chnl_net:caif_netlink_parms(): no params data found [ 211.473012][ T8805] device hsr_slave_0 entered promiscuous mode [ 211.531406][ T8805] device hsr_slave_1 entered promiscuous mode [ 211.589182][ T8805] debugfs: Directory 'hsr0' with parent '/' already present! [ 211.631217][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 211.641631][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 211.652550][ T8799] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.676180][ T8807] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.684913][ T8807] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.692889][ T8807] device bridge_slave_0 entered promiscuous mode [ 211.722729][ T8809] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.732728][ T8809] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.741465][ T8809] device bridge_slave_0 entered promiscuous mode [ 211.750350][ T8812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.763080][ T8812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.772609][ T8807] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.779921][ T8807] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.787611][ T8807] device bridge_slave_1 entered promiscuous mode [ 211.821026][ T8809] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.828272][ T8809] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.836815][ T8809] device bridge_slave_1 entered promiscuous mode [ 211.858818][ T8807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.870544][ T8807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.890723][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 211.901983][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 211.910467][ T3617] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.917815][ T3617] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.926564][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 211.935413][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 211.944190][ T3617] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.951480][ T3617] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.959283][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 211.967772][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 211.976447][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 211.984943][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 212.011640][ T8805] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 212.053308][ T8805] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 212.105502][ T8812] team0: Port device team_slave_0 added [ 212.117202][ T8812] team0: Port device team_slave_1 added [ 212.130652][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 212.140764][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 212.148510][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 212.157215][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 212.166478][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 212.175250][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 212.191340][ T8809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.210494][ T8805] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 212.261178][ T8805] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 212.319604][ T8809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.334284][ T8799] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 212.347066][ T8799] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 212.364607][ T8807] team0: Port device team_slave_0 added [ 212.375903][ T8807] team0: Port device team_slave_1 added [ 212.391055][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 212.399581][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 212.464351][ T8812] device hsr_slave_0 entered promiscuous mode [ 212.519444][ T8812] device hsr_slave_1 entered promiscuous mode [ 212.559331][ T8812] debugfs: Directory 'hsr0' with parent '/' already present! [ 212.578043][ T8809] team0: Port device team_slave_0 added [ 212.585953][ T8809] team0: Port device team_slave_1 added [ 212.595461][ T8802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.703205][ T8807] device hsr_slave_0 entered promiscuous mode [ 212.760296][ T8807] device hsr_slave_1 entered promiscuous mode [ 212.799443][ T8807] debugfs: Directory 'hsr0' with parent '/' already present! [ 212.830074][ T8814] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 212.837472][ T8814] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 212.845212][ T8814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 212.853990][ T8814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 212.912469][ T8809] device hsr_slave_0 entered promiscuous mode [ 212.949488][ T8809] device hsr_slave_1 entered promiscuous mode [ 212.980112][ T8809] debugfs: Directory 'hsr0' with parent '/' already present! [ 212.995589][ T8802] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.012649][ T8814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 213.024477][ T8814] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 213.033103][ T8814] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.040247][ T8814] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.051771][ T8799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.093869][ T8812] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 213.152314][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 213.167352][ T8807] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 213.211838][ T8812] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 213.284606][ T8812] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 213.337310][ T8807] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 213.390690][ T8814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 213.402916][ T8814] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 213.411745][ T8814] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.418818][ T8814] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.442939][ T8812] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 213.485953][ T8809] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 213.522399][ T8807] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 213.581325][ T8814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 213.590421][ T8814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 213.599129][ T8814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 213.607782][ T8814] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 213.616495][ T8814] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 213.639469][ T8809] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 213.690646][ T8807] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 213.719341][ C1] hrtimer: interrupt took 28364 ns [ 213.727681][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 213.727693][ T26] audit: type=1800 audit(1573876349.044:31): pid=8821 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16519 res=0 [ 213.770573][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 213.794923][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 213.807385][ T8809] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 213.862139][ T8809] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 213.907270][ T26] audit: type=1800 audit(1573876349.224:32): pid=8822 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="" name="bus" dev="sda1" ino=16519 res=0 [ 213.971693][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 213.985346][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 213.999900][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 214.008187][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 214.033025][ T8802] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 214.061776][ T8805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.120252][ T8807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.138290][ T8802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.154867][ T8805] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.180280][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 214.191138][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 214.201983][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 214.213180][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 214.223719][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 214.236265][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 214.247512][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.254720][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.274840][ T8807] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.304196][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 214.314422][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 214.323405][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 214.333759][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 214.343548][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 214.352483][ T3617] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.359735][ T3617] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.368121][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 214.377882][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 214.397101][ T8809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.438235][ T8812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.458292][ T8814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 214.471241][ T8814] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready 03:52:29 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000080)={0x7, "f49c03b53457121031de7864967b3d03dc1429813eca4923cc78393b70c06bc5", 0x5, 0x1}) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) r2 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000380)={0x0, 0xfffffffffffffefa, 0xfa00, {0x20000000000002, &(0x7f00000000c0), 0x2}}, 0x20) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x80, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) getpid() r3 = getpid() r4 = getpid() ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000180)=@usbdevfs_disconnect={0xfffffffa}) rt_tgsigqueueinfo(r4, r3, 0x16, &(0x7f0000000100)) ptrace(0x10, r3) [ 214.494825][ T8814] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.502005][ T8814] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.512731][ T8814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 214.533790][ T8814] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 214.585338][ T8809] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.601069][ T8812] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.614172][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 03:52:30 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000080)={0x7, "f49c03b53457121031de7864967b3d03dc1429813eca4923cc78393b70c06bc5", 0x5, 0x1}) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) r2 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000380)={0x0, 0xfffffffffffffefa, 0xfa00, {0x20000000000002, &(0x7f00000000c0), 0x2}}, 0x20) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x80, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) getpid() r3 = getpid() r4 = getpid() ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000180)=@usbdevfs_disconnect={0xfffffffa}) rt_tgsigqueueinfo(r4, r3, 0x16, &(0x7f0000000100)) ptrace(0x10, r3) 03:52:30 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f000038b000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000022000/0x3000)=nil) clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000000140)) timer_settime(0x0, 0x1, &(0x7f00000001c0)={{}, {0x0, 0x989680}}, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RUNLINKAT(0xffffffffffffffff, 0x0, 0x0) [ 214.630551][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 214.641414][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 214.660447][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 214.668819][ T3617] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.675948][ T3617] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.739732][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 214.754805][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 214.778295][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 214.815498][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 214.824531][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 214.856438][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 214.874235][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 214.882213][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 214.895280][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 214.904145][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 214.918691][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 214.944607][ T8805] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 214.959405][ T8814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 214.968239][ T8814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 214.982222][ T8814] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 214.991385][ T8814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 215.000701][ T8814] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 215.018492][ T8814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 215.028688][ T8814] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 215.054220][ T8814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 215.063217][ T8814] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 215.096986][ T8807] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 215.128461][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 215.136911][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 215.146513][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 215.170335][ T3617] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.177520][ T3617] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.199404][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 215.206874][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 215.230677][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 215.238576][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 215.260190][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 215.268647][ T3617] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.275752][ T3617] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.315040][ T8814] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 215.330623][ T8814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 215.352137][ T8814] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 215.369750][ T8814] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.376840][ T8814] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.389613][ T8814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 215.398275][ T8814] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 215.414763][ T8814] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.421911][ T8814] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.440711][ T8805] 8021q: adding VLAN 0 to HW filter on device batadv0 03:52:30 executing program 1: r0 = epoll_create1(0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r1, 0x0) dup2(r2, r1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000080)) [ 215.485165][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 215.504219][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 215.518184][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 215.528818][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 215.552811][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 215.566574][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 215.583232][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 215.591600][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 215.601090][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 215.623237][ T8807] 8021q: adding VLAN 0 to HW filter on device batadv0 03:52:30 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffdfffcd, &(0x7f0000000040)) [ 215.632412][ T3033] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 215.655072][ T3033] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 215.667043][ T3033] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 215.684448][ T3033] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 215.712514][ T3033] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 215.721856][ T3033] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 215.730812][ T3033] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 215.750087][ T3033] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 215.759650][ T3033] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready 03:52:31 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0x133, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 215.781573][ T8812] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 215.844626][ T8812] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 215.871255][ T8809] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 215.889326][ T8809] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 215.911797][ T8859] binder: 8855:8859 ioctl c018620c 20000600 returned -1 [ 215.920504][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 215.933378][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 215.953044][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 215.964664][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 215.976788][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 216.007999][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 216.036481][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 216.099236][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 216.112054][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 216.165940][ T8812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.224127][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 216.242299][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 216.269705][ T8809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.785364][ T26] audit: type=1800 audit(1573876352.104:33): pid=8891 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=16538 res=0 [ 216.816888][ T26] audit: type=1800 audit(1573876352.134:34): pid=8895 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=16538 res=0 [ 363.089579][ T1079] INFO: task :8822 can't die for more than 143 seconds. [ 363.096723][ T1079] R running task 27640 8822 8799 0x00004006 [ 363.115462][ T1079] Call Trace: [ 363.118939][ T1079] __schedule+0x8e9/0x1f30 [ 363.124670][ T1079] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 363.135192][ T1079] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 363.141470][ T1079] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 363.146927][ T1079] ? lockdep_hardirqs_on+0x421/0x5e0 [ 363.156754][ T1079] ? trace_hardirqs_on_caller+0x6a/0x240 [ 363.162642][ T1079] ? trace_hardirqs_on_caller+0x6a/0x240 [ 363.168271][ T1079] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 363.179305][ T1079] ? __this_cpu_preempt_check+0x35/0x190 [ 363.185037][ T1079] ? retint_kernel+0x2b/0x2b [ 363.194214][ T1079] ? irq_work_sync+0x106/0x1d0 [ 363.199325][ T1079] ? irq_work_sync+0xd1/0x1d0 [ 363.204003][ T1079] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 363.215135][ T1079] ? irq_work_sync+0xd1/0x1d0 [ 363.220685][ T1079] ? _free_event+0x89/0x13b0 [ 363.225290][ T1079] ? __kasan_check_write+0x14/0x20 [ 363.235004][ T1079] ? __mutex_unlock_slowpath+0xf0/0x6a0 [ 363.240829][ T1079] ? mark_held_locks+0xa4/0xf0 [ 363.245588][ T1079] ? ring_buffer_attach+0x650/0x650 [ 363.255290][ T1079] ? wait_for_completion+0x440/0x440 [ 363.261150][ T1079] ? put_event+0x47/0x60 [ 363.265392][ T1079] ? perf_event_release_kernel+0x6d5/0xd70 [ 363.275879][ T1079] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 363.282400][ T1079] ? __perf_event_exit_context+0x170/0x170 [ 363.288214][ T1079] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 363.299169][ T1079] ? perf_release+0x37/0x50 [ 363.303671][ T1079] ? __fput+0x2ff/0x890 [ 363.308516][ T1079] ? perf_event_release_kernel+0xd70/0xd70 [ 363.319332][ T1079] ? ____fput+0x16/0x20 [ 363.323508][ T1079] ? task_work_run+0x145/0x1c0 [ 363.328277][ T1079] ? exit_to_usermode_loop+0x316/0x380 [ 363.339918][ T1079] ? do_syscall_64+0x676/0x790 [ 363.344691][ T1079] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 363.355328][ T1079] [ 363.355328][ T1079] Showing all locks held in the system: [ 363.363334][ T1079] 1 lock held by khungtaskd/1079: [ 363.380022][ T1079] #0: ffffffff88faccc0 (rcu_read_lock){....}, at: debug_show_all_locks+0x5f/0x279 [ 363.392538][ T1079] 1 lock held by rsyslogd/8672: [ 363.397436][ T1079] #0: ffff88808edaf0e0 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0xee/0x110 [ 363.407621][ T1079] 2 locks held by getty/8762: [ 363.415346][ T1079] #0: ffff8880a74c9090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 363.425887][ T1079] #1: ffffc90005f192e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 363.438607][ T1079] 2 locks held by getty/8763: [ 363.444834][ T1079] #0: ffff88809d8c2090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 363.457349][ T1079] #1: ffffc90005f3b2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 363.468510][ T1079] 2 locks held by getty/8764: [ 363.476169][ T1079] #0: ffff88809aa02090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 363.486695][ T1079] #1: ffffc90005f2f2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 363.501524][ T1079] 2 locks held by getty/8765: [ 363.506208][ T1079] #0: ffff8880a1930090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 363.516863][ T1079] #1: ffffc90005f292e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 363.530979][ T1079] 2 locks held by getty/8766: [ 363.535654][ T1079] #0: ffff8880a0493090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 363.546932][ T1079] #1: ffffc90005f372e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 363.558779][ T1079] 2 locks held by getty/8767: [ 363.566339][ T1079] #0: ffff8880a225a090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 363.577636][ T1079] #1: ffffc90005f432e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 363.592208][ T1079] 2 locks held by getty/8768: [ 363.596888][ T1079] #0: ffff88809360c090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 363.606739][ T1079] #1: ffffc90005f112e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 363.620751][ T1079] [ 363.623082][ T1079] ============================================= [ 363.623082][ T1079] [ 363.633823][ T1079] NMI backtrace for cpu 1 [ 363.638155][ T1079] CPU: 1 PID: 1079 Comm: khungtaskd Not tainted 5.4.0-rc7-next-20191115 #0 [ 363.646718][ T1079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 363.656758][ T1079] Call Trace: [ 363.660116][ T1079] dump_stack+0x197/0x210 [ 363.664435][ T1079] nmi_cpu_backtrace.cold+0x70/0xb2 [ 363.669635][ T1079] ? vprintk_func+0x86/0x189 [ 363.674215][ T1079] ? lapic_can_unplug_cpu.cold+0x3a/0x3a [ 363.679834][ T1079] nmi_trigger_cpumask_backtrace+0x23b/0x28b [ 363.685801][ T1079] arch_trigger_cpumask_backtrace+0x14/0x20 [ 363.692374][ T1079] watchdog+0xc8f/0x1350 [ 363.696610][ T1079] kthread+0x361/0x430 [ 363.700841][ T1079] ? reset_hung_task_detector+0x30/0x30 [ 363.706368][ T1079] ? kthread_mod_delayed_work+0x1f0/0x1f0 [ 363.712074][ T1079] ret_from_fork+0x24/0x30 [ 363.716645][ T1079] Sending NMI from CPU 1 to CPUs 0: [ 363.722217][ C0] NMI backtrace for cpu 0 [ 363.722222][ C0] CPU: 0 PID: 8822 Comm: Not tainted 5.4.0-rc7-next-20191115 #0 [ 363.722228][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 363.722231][ C0] RIP: 0010:write_comp_data+0x1e/0x70 [ 363.722241][ C0] Code: 48 89 34 d1 48 89 11 5d c3 0f 1f 00 65 4c 8b 04 25 c0 1e 02 00 65 8b 05 e8 44 8e 7e a9 00 01 1f 00 75 51 41 8b 80 00 13 00 00 <83> f8 03 75 45 49 8b 80 08 13 00 00 45 8b 80 04 13 00 00 4c 8b 08 [ 363.722245][ C0] RSP: 0018:ffff88805dc5fbf0 EFLAGS: 00000246 [ 363.722252][ C0] RAX: 0000000000000002 RBX: 0000000000000002 RCX: ffffffff817e51f6 [ 363.722256][ C0] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000005 [ 363.722261][ C0] RBP: ffff88805dc5fbf8 R08: ffff888095dc8080 R09: ffffed1012aff682 [ 363.722266][ C0] R10: ffffed1012aff681 R11: ffff8880957fb40b R12: ffff8880957fb408 [ 363.722270][ C0] R13: 0000000000000003 R14: ffffed1012aff681 R15: ffff88805dc5fcc8 [ 363.722275][ C0] FS: 00007f33dcb6b700(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 363.722279][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 363.722284][ C0] CR2: 000000c43779b010 CR3: 00000000a4b67000 CR4: 00000000001406f0 [ 363.722288][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 363.722293][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 363.722295][ C0] Call Trace: [ 363.722299][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 363.722302][ C0] irq_work_sync+0x106/0x1d0 [ 363.722305][ C0] _free_event+0x89/0x13b0 [ 363.722308][ C0] ? __kasan_check_write+0x14/0x20 [ 363.722312][ C0] ? __mutex_unlock_slowpath+0xf0/0x6a0 [ 363.722315][ C0] ? mark_held_locks+0xa4/0xf0 [ 363.722318][ C0] ? ring_buffer_attach+0x650/0x650 [ 363.722321][ C0] ? wait_for_completion+0x440/0x440 [ 363.722324][ C0] put_event+0x47/0x60 [ 363.722328][ C0] perf_event_release_kernel+0x6d5/0xd70 [ 363.722331][ C0] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 363.722335][ C0] ? __perf_event_exit_context+0x170/0x170 [ 363.722339][ C0] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 363.722342][ C0] perf_release+0x37/0x50 [ 363.722344][ C0] __fput+0x2ff/0x890 [ 363.722348][ C0] ? perf_event_release_kernel+0xd70/0xd70 [ 363.722350][ C0] ____fput+0x16/0x20 [ 363.722354][ C0] task_work_run+0x145/0x1c0 [ 363.722357][ C0] exit_to_usermode_loop+0x316/0x380 [ 363.722360][ C0] do_syscall_64+0x676/0x790 [ 363.722363][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 363.722366][ C0] RIP: 0033:0x45a669 [ 363.722386][ C0] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 363.722390][ C0] RSP: 002b:00007f33dcb6ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 363.722398][ C0] RAX: 0000000020ffb000 RBX: 0000000000000006 RCX: 000000000045a669 [ 363.722402][ C0] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffb000 [ 363.722407][ C0] RBP: 000000000075bfc8 R08: 0000000000000003 R09: 0000000000000000 [ 363.722411][ C0] R10: 0000000000000011 R11: 0000000000000246 R12: 00007f33dcb6b6d4 [ 363.722416][ C0] R13: 00000000004c709c R14: 00000000004dc838 R15: 00000000ffffffff [ 363.730790][ T1079] Kernel panic - not syncing: hung_task: blocked tasks [ 364.059786][ T1079] CPU: 1 PID: 1079 Comm: khungtaskd Not tainted 5.4.0-rc7-next-20191115 #0 [ 364.068365][ T1079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 364.078508][ T1079] Call Trace: [ 364.081793][ T1079] dump_stack+0x197/0x210 [ 364.086135][ T1079] panic+0x2e3/0x75c [ 364.090016][ T1079] ? add_taint.cold+0x16/0x16 [ 364.094697][ T1079] ? lapic_can_unplug_cpu.cold+0x3a/0x3a [ 364.100319][ T1079] ? ___preempt_schedule+0x16/0x18 [ 364.105416][ T1079] ? nmi_trigger_cpumask_backtrace+0x21b/0x28b [ 364.111659][ T1079] ? nmi_trigger_cpumask_backtrace+0x24c/0x28b [ 364.117798][ T1079] ? nmi_trigger_cpumask_backtrace+0x256/0x28b [ 364.124037][ T1079] ? nmi_trigger_cpumask_backtrace+0x21b/0x28b [ 364.130190][ T1079] watchdog+0xca0/0x1350 [ 364.134430][ T1079] kthread+0x361/0x430 [ 364.138484][ T1079] ? reset_hung_task_detector+0x30/0x30 [ 364.144111][ T1079] ? kthread_mod_delayed_work+0x1f0/0x1f0 [ 364.150089][ T1079] ret_from_fork+0x24/0x30 [ 364.156435][ T1079] Kernel Offset: disabled [ 364.160814][ T1079] Rebooting in 86400 seconds..