[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 49.933358][ T26] audit: type=1800 audit(1578473516.115:25): pid=8343 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 49.972437][ T26] audit: type=1800 audit(1578473516.115:26): pid=8343 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 49.995368][ T26] audit: type=1800 audit(1578473516.115:27): pid=8343 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.237' (ECDSA) to the list of known hosts. 2020/01/08 08:52:04 fuzzer started 2020/01/08 08:52:06 dialing manager at 10.128.0.26:35703 2020/01/08 08:52:06 syscalls: 2824 2020/01/08 08:52:06 code coverage: enabled 2020/01/08 08:52:06 comparison tracing: enabled 2020/01/08 08:52:06 extra coverage: enabled 2020/01/08 08:52:06 setuid sandbox: enabled 2020/01/08 08:52:06 namespace sandbox: enabled 2020/01/08 08:52:06 Android sandbox: /sys/fs/selinux/policy does not exist 2020/01/08 08:52:06 fault injection: enabled 2020/01/08 08:52:06 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/01/08 08:52:06 net packet injection: enabled 2020/01/08 08:52:06 net device setup: enabled 2020/01/08 08:52:06 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/01/08 08:52:06 devlink PCI setup: PCI device 0000:00:10.0 is not available 08:52:07 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x0, 0x9, 0x0, "119b2f848cae3cd48eb80346be970206980c432ae5c4966236eebf94cb8ec6dd"}) 08:52:07 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f00000003c0), 0x24, 0x0) llistxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/31, 0x1f) syzkaller login: [ 61.483693][ T8510] IPVS: ftp: loaded support on port[0] = 21 [ 61.553926][ T8512] IPVS: ftp: loaded support on port[0] = 21 [ 61.677016][ T8512] chnl_net:caif_netlink_parms(): no params data found [ 61.697367][ T8510] chnl_net:caif_netlink_parms(): no params data found [ 61.755167][ T8512] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.764564][ T8512] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.774172][ T8512] device bridge_slave_0 entered promiscuous mode [ 61.785192][ T8512] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.792243][ T8512] bridge0: port 2(bridge_slave_1) entered disabled state 08:52:07 executing program 2: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in=@broadcast, @in=@empty}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, 0xe8) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000180)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x6}, 0x8) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x77, &(0x7f0000000200)={0x0, 0xcb, 0x36fe}, 0xfe3e) [ 61.800529][ T8512] device bridge_slave_1 entered promiscuous mode [ 61.821647][ T8510] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.842460][ T8510] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.850309][ T8510] device bridge_slave_0 entered promiscuous mode [ 61.883603][ T8510] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.890873][ T8510] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.912861][ T8510] device bridge_slave_1 entered promiscuous mode [ 61.929396][ T8512] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.940542][ T8512] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.967151][ T8516] IPVS: ftp: loaded support on port[0] = 21 [ 61.990421][ T8510] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.004368][ T8512] team0: Port device team_slave_0 added [ 62.012042][ T8512] team0: Port device team_slave_1 added [ 62.025267][ T8510] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 08:52:08 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x11) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) [ 62.066758][ T8510] team0: Port device team_slave_0 added [ 62.166134][ T8512] device hsr_slave_0 entered promiscuous mode [ 62.232975][ T8512] device hsr_slave_1 entered promiscuous mode 08:52:08 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = semget$private(0x0, 0x20000000102, 0x0) semop(r2, &(0x7f0000000080)=[{0x0, 0xffff}], 0x1) semop(r2, &(0x7f0000000040)=[{0x4}, {0x0, 0xffffffff}], 0x2) semop(r2, &(0x7f00000000c0)=[{0x0, 0x6}], 0x1) [ 62.287943][ T8510] team0: Port device team_slave_1 added [ 62.302008][ T8518] IPVS: ftp: loaded support on port[0] = 21 [ 62.394906][ T8510] device hsr_slave_0 entered promiscuous mode 08:52:08 executing program 5: unshare(0x400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) pwritev(r2, 0x0, 0x0, 0x0) [ 62.452714][ T8510] device hsr_slave_1 entered promiscuous mode [ 62.522483][ T8510] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.530293][ T8510] Cannot create hsr debugfs directory [ 62.558327][ T8520] IPVS: ftp: loaded support on port[0] = 21 [ 62.694415][ T8512] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 62.704519][ T8523] IPVS: ftp: loaded support on port[0] = 21 [ 62.755576][ T8512] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 62.824835][ T8512] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 62.877217][ T8516] chnl_net:caif_netlink_parms(): no params data found [ 62.888897][ T8512] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.079023][ T8518] chnl_net:caif_netlink_parms(): no params data found [ 63.104190][ T8510] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.151422][ T8516] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.158630][ T8516] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.166299][ T8516] device bridge_slave_0 entered promiscuous mode [ 63.213630][ T8510] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.274375][ T8516] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.281449][ T8516] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.289268][ T8516] device bridge_slave_1 entered promiscuous mode [ 63.306249][ T8520] chnl_net:caif_netlink_parms(): no params data found [ 63.325772][ T8510] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.375693][ T8516] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.387487][ T8516] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.413574][ T8510] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.480429][ T8516] team0: Port device team_slave_0 added [ 63.488931][ T8516] team0: Port device team_slave_1 added [ 63.514531][ T8518] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.521661][ T8518] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.529715][ T8518] device bridge_slave_0 entered promiscuous mode [ 63.539684][ T8518] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.547519][ T8518] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.555335][ T8518] device bridge_slave_1 entered promiscuous mode [ 63.588216][ T8520] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.595827][ T8520] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.604200][ T8520] device bridge_slave_0 entered promiscuous mode [ 63.635226][ T8516] device hsr_slave_0 entered promiscuous mode [ 63.673144][ T8516] device hsr_slave_1 entered promiscuous mode [ 63.712428][ T8516] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.720011][ T8516] Cannot create hsr debugfs directory [ 63.732554][ T8520] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.739613][ T8520] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.749441][ T8520] device bridge_slave_1 entered promiscuous mode [ 63.764735][ T8518] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.780246][ T8512] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.807375][ T8518] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.830001][ T8520] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.841030][ T8520] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.886484][ T8518] team0: Port device team_slave_0 added [ 63.908360][ T8512] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.919669][ T8523] chnl_net:caif_netlink_parms(): no params data found [ 63.934193][ T3112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.942229][ T3112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.951575][ T8518] team0: Port device team_slave_1 added [ 63.958804][ T8520] team0: Port device team_slave_0 added [ 63.966591][ T8520] team0: Port device team_slave_1 added [ 64.003720][ T3111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.012923][ T3111] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.021230][ T3111] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.028376][ T3111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.043243][ T3111] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.051002][ T3111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.059586][ T3111] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.067972][ T3111] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.075148][ T3111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.120800][ T8516] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.178587][ T8516] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.234742][ T8516] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.274106][ T2800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.285241][ T2800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.294007][ T2800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.302591][ T2800] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.354585][ T8518] device hsr_slave_0 entered promiscuous mode [ 64.413085][ T8518] device hsr_slave_1 entered promiscuous mode [ 64.452558][ T8518] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.460156][ T8518] Cannot create hsr debugfs directory [ 64.476285][ T8510] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.487130][ T8523] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.494440][ T8523] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.502110][ T8523] device bridge_slave_0 entered promiscuous mode [ 64.509533][ T8516] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.576043][ T2800] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.583805][ T2800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.592108][ T2800] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.635658][ T8520] device hsr_slave_0 entered promiscuous mode [ 64.672678][ T8520] device hsr_slave_1 entered promiscuous mode [ 64.712483][ T8520] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.720060][ T8520] Cannot create hsr debugfs directory [ 64.746284][ T8523] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.754559][ T8523] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.762164][ T8523] device bridge_slave_1 entered promiscuous mode [ 64.777128][ T2800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.785466][ T2800] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.815438][ T8510] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.840685][ T8523] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.851767][ T3111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.860836][ T3111] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.869283][ T3111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.877320][ T3111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.887226][ T8512] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.910001][ T8523] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.935271][ T3112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.944040][ T3112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.952238][ T3112] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.959466][ T3112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.967376][ T2800] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.993626][ T8523] team0: Port device team_slave_0 added [ 65.000059][ T2710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.008896][ T2710] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.018657][ T2710] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.025742][ T2710] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.033748][ T2710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.063481][ T8523] team0: Port device team_slave_1 added [ 65.077811][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.089622][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.104424][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.115857][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.123518][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.131954][ T3111] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.139909][ T3111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.148356][ T3111] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.161626][ T8512] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.215263][ T8523] device hsr_slave_0 entered promiscuous mode [ 65.263105][ T8523] device hsr_slave_1 entered promiscuous mode [ 65.322472][ T8523] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.322502][ T8523] Cannot create hsr debugfs directory [ 65.327741][ T8520] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 65.389752][ T8520] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 65.447040][ T8520] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 65.515022][ T3112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.523989][ T3112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.532090][ T3112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.540980][ T3112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.551307][ T8510] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.567489][ T8520] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 65.649318][ T8518] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 65.718637][ T8518] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 65.756691][ T8518] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 65.832049][ T8518] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 65.874345][ T3111] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.881793][ T3111] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.889475][ T3111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.899250][ T3111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.921518][ T8516] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.943982][ T8510] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.966344][ T3111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.974385][ T3111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.988049][ T8516] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.005818][ T2710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.014620][ T2710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.026535][ T8512] device veth0_vlan entered promiscuous mode [ 66.056206][ T3112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.064093][ T3112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.071636][ T3112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.080911][ T3112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.090110][ T3112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.099038][ T3112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.107475][ T3112] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.114576][ T3112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.122250][ T3112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.130951][ T3112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.139449][ T3112] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.146540][ T3112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.154183][ T3112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.166896][ T3112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.180603][ T8510] device veth0_vlan entered promiscuous mode [ 66.188814][ T3112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.197071][ T3112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.206085][ T3112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.222850][ T8512] device veth1_vlan entered promiscuous mode [ 66.240495][ T2800] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.251583][ T2800] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.259287][ T2800] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.267214][ T2800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.276336][ T2800] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.298205][ T8523] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 66.334130][ T2800] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.342058][ T2800] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.353697][ T8510] device veth1_vlan entered promiscuous mode [ 66.383999][ T3112] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.392192][ T3112] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.403545][ T3112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.412296][ T3112] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.421574][ T3112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.430025][ T3112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.438541][ T3112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.446804][ T3112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.458652][ T8520] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.466666][ T8523] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 66.538662][ T8523] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 66.605278][ T8523] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 66.646902][ T8516] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.687418][ T3111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.703895][ T3111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.810914][ T8523] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.837607][ T8523] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.702319][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 171.709209][ C0] rcu: 0-...!: (10499 ticks this GP) idle=b0a/1/0x4000000000000002 softirq=13308/13308 fqs=6 [ 171.719699][ C0] (t=10500 jiffies g=6893 q=318) [ 171.724713][ C0] rcu: rcu_preempt kthread starved for 10486 jiffies! g6893 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 171.735799][ C0] rcu: RCU grace-period kthread stack dump: [ 171.741674][ C0] rcu_preempt R running task 29032 10 2 0x80004000 [ 171.749818][ C0] Call Trace: [ 171.753108][ C0] __schedule+0x9a0/0xcc0 [ 171.757434][ C0] schedule+0x181/0x210 [ 171.761584][ C0] schedule_timeout+0x14f/0x240 [ 171.766424][ C0] ? run_local_timers+0x120/0x120 [ 171.771449][ C0] rcu_gp_kthread+0xed8/0x1770 [ 171.776209][ C0] kthread+0x332/0x350 [ 171.780283][ C0] ? rcu_report_qs_rsp+0x140/0x140 [ 171.785454][ C0] ? kthread_blkcg+0xe0/0xe0 [ 171.790172][ C0] ret_from_fork+0x24/0x30 [ 171.794593][ C0] NMI backtrace for cpu 0 [ 171.798915][ C0] CPU: 0 PID: 115 Comm: kworker/u4:3 Not tainted 5.5.0-rc5-syzkaller #0 [ 171.807598][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 171.817735][ C0] Workqueue: 0x0 (bat_events) [ 171.822486][ C0] Call Trace: [ 171.825763][ C0] [ 171.828605][ C0] dump_stack+0x1fb/0x318 [ 171.832931][ C0] nmi_cpu_backtrace+0xaf/0x1a0 [ 171.837768][ C0] ? nmi_trigger_cpumask_backtrace+0x16d/0x290 [ 171.843915][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 171.849973][ C0] nmi_trigger_cpumask_backtrace+0x174/0x290 [ 171.857334][ C0] arch_trigger_cpumask_backtrace+0x10/0x20 [ 171.863216][ C0] rcu_dump_cpu_stacks+0x15a/0x220 [ 171.868320][ C0] rcu_sched_clock_irq+0xe25/0x1ad0 [ 171.873508][ C0] ? trace_hardirqs_off+0x74/0x80 [ 171.878521][ C0] update_process_times+0x12d/0x180 [ 171.883709][ C0] tick_sched_timer+0x263/0x420 [ 171.888550][ C0] ? tick_setup_sched_timer+0x3d0/0x3d0 [ 171.894083][ C0] __hrtimer_run_queues+0x403/0x840 [ 171.899285][ C0] hrtimer_interrupt+0x38c/0xda0 [ 171.904228][ C0] ? debug_smp_processor_id+0x9/0x20 [ 171.909506][ C0] smp_apic_timer_interrupt+0x109/0x280 [ 171.915048][ C0] apic_timer_interrupt+0xf/0x20 [ 171.919972][ C0] [ 171.922905][ C0] RIP: 0010:__memcg_kmem_uncharge+0x1d/0x1a0 [ 171.928872][ C0] Code: ff 5b 41 5e 5d c3 0f 1f 80 00 00 00 00 55 48 89 e5 41 57 41 56 41 55 41 54 53 50 89 f3 49 89 fc 48 b8 00 00 00 00 00 fc ff df <4c> 8d 77 38 4d 89 f5 49 c1 ed 03 41 80 7c 05 00 00 74 08 4c 89 f7 [ 171.948465][ C0] RSP: 0018:ffffc90001307bf0 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 171.956860][ C0] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffff8880a9118380 [ 171.964821][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffea0002307180 [ 171.972799][ C0] RBP: ffffc90001307c20 R08: 000000000003a728 R09: fffffbfff124248a [ 171.980756][ C0] R10: fffffbfff124248a R11: 0000000000000000 R12: ffffea0002307180 [ 171.988714][ C0] R13: dffffc0000000000 R14: 1ffff1101292c254 R15: ffff8880968854b8 [ 171.996690][ C0] ? free_thread_stack+0x124/0x590 [ 172.001792][ C0] free_thread_stack+0x12e/0x590 [ 172.006805][ C0] put_task_stack+0xa3/0x130 [ 172.011385][ C0] finish_task_switch+0x3f1/0x550 [ 172.016429][ C0] __schedule+0x9a8/0xcc0 [ 172.020759][ C0] schedule+0x181/0x210 [ 172.024904][ C0] worker_thread+0x10d6/0x1630 [ 172.029675][ C0] kthread+0x332/0x350 [ 172.033729][ C0] ? rcu_lock_release+0x30/0x30 [ 172.038679][ C0] ? kthread_blkcg+0xe0/0xe0 [ 172.043268][ C0] ret_from_fork+0x24/0x30