[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 47.977765][ T23] audit: type=1800 audit(1578477666.896:25): pid=8391 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 47.997937][ T23] audit: type=1800 audit(1578477666.896:26): pid=8391 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 48.018709][ T23] audit: type=1800 audit(1578477666.896:27): pid=8391 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.85' (ECDSA) to the list of known hosts. 2020/01/08 10:01:19 fuzzer started 2020/01/08 10:01:21 dialing manager at 10.128.0.26:35703 2020/01/08 10:01:21 syscalls: 2824 2020/01/08 10:01:21 code coverage: enabled 2020/01/08 10:01:21 comparison tracing: enabled 2020/01/08 10:01:21 extra coverage: enabled 2020/01/08 10:01:21 setuid sandbox: enabled 2020/01/08 10:01:21 namespace sandbox: enabled 2020/01/08 10:01:21 Android sandbox: /sys/fs/selinux/policy does not exist 2020/01/08 10:01:21 fault injection: enabled 2020/01/08 10:01:21 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/01/08 10:01:21 net packet injection: enabled 2020/01/08 10:01:21 net device setup: enabled 2020/01/08 10:01:21 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/01/08 10:01:21 devlink PCI setup: PCI device 0000:00:10.0 is not available 10:01:22 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, &(0x7f0000000040), 0x2e) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0xfffffd39, &(0x7f0000000080)={&(0x7f0000000140)={0x24, 0x2a, 0x82d, 0x0, 0x0, {0x6}, [@nested={0x10, 0x8}]}, 0x24}}, 0x0) 10:01:22 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0xa, [@datasec={0x0, 0x2, 0x0, 0x4, 0xfffffffc, [{0x0, 0x4}], "f3"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x3, [], "7794b9"}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000000380)=""/249, 0x4a, 0xf9, 0x8}, 0x20) syzkaller login: [ 63.629906][ T8558] IPVS: ftp: loaded support on port[0] = 21 [ 63.710765][ T8560] IPVS: ftp: loaded support on port[0] = 21 10:01:22 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000001780)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0585609, &(0x7f0000001900)={0x0, 0x6}) [ 63.831680][ T8558] chnl_net:caif_netlink_parms(): no params data found [ 63.959583][ T8560] chnl_net:caif_netlink_parms(): no params data found [ 63.988593][ T8564] IPVS: ftp: loaded support on port[0] = 21 [ 64.007262][ T8558] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.021998][ T8558] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.031692][ T8558] device bridge_slave_0 entered promiscuous mode [ 64.048588][ T8558] bridge0: port 2(bridge_slave_1) entered blocking state 10:01:23 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000200)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000980)='keyring\x00', &(0x7f0000000240)={'syz'}, 0x0, 0x0, r0) add_key(&(0x7f0000000940)='big_key\x00', &(0x7f00000000c0)={'syz'}, &(0x7f0000000a00)="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", 0x455, r1) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108) accept4$nfc_llcp(r3, &(0x7f0000000100), &(0x7f0000000340)=0x60, 0x41400) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000280), &(0x7f00000002c0)=0x8) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 64.073850][ T8558] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.084620][ T8558] device bridge_slave_1 entered promiscuous mode [ 64.146062][ T8560] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.154041][ T8560] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.161977][ T8560] device bridge_slave_0 entered promiscuous mode [ 64.177771][ T8558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.194564][ T8560] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.202658][ T8560] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.216957][ T8560] device bridge_slave_1 entered promiscuous mode [ 64.231898][ T8558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.318981][ T8560] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link 10:01:23 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) [ 64.360982][ T8566] IPVS: ftp: loaded support on port[0] = 21 [ 64.369590][ T8558] team0: Port device team_slave_0 added [ 64.379690][ T8560] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.421719][ T8558] team0: Port device team_slave_1 added [ 64.450039][ T8560] team0: Port device team_slave_0 added [ 64.461045][ T8564] chnl_net:caif_netlink_parms(): no params data found [ 64.484451][ T8560] team0: Port device team_slave_1 added [ 64.596005][ T8558] device hsr_slave_0 entered promiscuous mode 10:01:23 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x3, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x2}]}]}, {0x0, [0x0]}}, &(0x7f00000003c0)=""/4096, 0x2f, 0x1000, 0x1}, 0x20) [ 64.636239][ T8558] device hsr_slave_1 entered promiscuous mode [ 64.735825][ T8560] device hsr_slave_0 entered promiscuous mode [ 64.783676][ T8560] device hsr_slave_1 entered promiscuous mode [ 64.844243][ T8560] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.852002][ T8560] Cannot create hsr debugfs directory [ 64.898687][ T8569] IPVS: ftp: loaded support on port[0] = 21 [ 64.914527][ T8571] IPVS: ftp: loaded support on port[0] = 21 [ 64.995242][ T8564] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.002319][ T8564] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.011286][ T8564] device bridge_slave_0 entered promiscuous mode [ 65.019841][ T8564] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.026956][ T8564] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.034662][ T8564] device bridge_slave_1 entered promiscuous mode [ 65.086311][ T8566] chnl_net:caif_netlink_parms(): no params data found [ 65.124970][ T8564] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.142130][ T8564] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.181329][ T8558] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.250820][ T8564] team0: Port device team_slave_0 added [ 65.272471][ T8558] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.324985][ T8558] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.374874][ T8560] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 65.406512][ T8564] team0: Port device team_slave_1 added [ 65.412255][ T8560] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 65.454564][ T8566] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.461685][ T8566] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.469878][ T8566] device bridge_slave_0 entered promiscuous mode [ 65.479309][ T8566] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.486893][ T8566] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.496033][ T8566] device bridge_slave_1 entered promiscuous mode [ 65.511703][ T8558] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.565027][ T8560] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 65.606896][ T8560] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 65.657397][ T8566] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.672897][ T8566] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.687709][ T8571] chnl_net:caif_netlink_parms(): no params data found [ 65.746462][ T8566] team0: Port device team_slave_0 added [ 65.796131][ T8564] device hsr_slave_0 entered promiscuous mode [ 65.833630][ T8564] device hsr_slave_1 entered promiscuous mode [ 65.873444][ T8564] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.881069][ T8564] Cannot create hsr debugfs directory [ 65.921357][ T8566] team0: Port device team_slave_1 added [ 65.996358][ T8566] device hsr_slave_0 entered promiscuous mode [ 66.053791][ T8566] device hsr_slave_1 entered promiscuous mode [ 66.093397][ T8566] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.100974][ T8566] Cannot create hsr debugfs directory [ 66.107485][ T8571] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.115072][ T8571] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.122693][ T8571] device bridge_slave_0 entered promiscuous mode [ 66.131913][ T8571] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.139481][ T8571] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.147442][ T8571] device bridge_slave_1 entered promiscuous mode [ 66.200252][ T8569] chnl_net:caif_netlink_parms(): no params data found [ 66.212928][ T8571] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.260748][ T8571] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.309133][ T8571] team0: Port device team_slave_0 added [ 66.344020][ T8564] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 66.386367][ T8571] team0: Port device team_slave_1 added [ 66.399781][ T8569] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.407825][ T8569] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.416783][ T8569] device bridge_slave_0 entered promiscuous mode [ 66.427151][ T8564] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 66.478738][ T8564] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 66.521505][ T8569] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.529471][ T8569] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.537251][ T8569] device bridge_slave_1 entered promiscuous mode [ 66.556803][ T8569] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.576500][ T8564] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 66.641971][ T8569] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.653335][ T8566] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 66.680895][ T8560] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.745520][ T8571] device hsr_slave_0 entered promiscuous mode [ 66.793717][ T8571] device hsr_slave_1 entered promiscuous mode [ 66.843414][ T8571] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.851037][ T8571] Cannot create hsr debugfs directory [ 66.870965][ T8566] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 66.926159][ T8566] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 66.981909][ T8566] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 67.036707][ T8569] team0: Port device team_slave_0 added [ 67.052449][ T8560] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.075994][ T8569] team0: Port device team_slave_1 added [ 67.086885][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.098274][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.122375][ T2911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.131219][ T2911] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.142220][ T2911] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.149445][ T2911] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.176399][ T8558] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.199153][ T2903] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.207023][ T2903] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.216231][ T2903] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.225977][ T2903] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.233015][ T2903] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.241299][ T2903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.250226][ T2903] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.300635][ T8558] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.320613][ T8571] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 67.345336][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.353173][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.360984][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.369676][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.378944][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.425933][ T8569] device hsr_slave_0 entered promiscuous mode [ 67.463751][ T8569] device hsr_slave_1 entered promiscuous mode [ 67.503429][ T8569] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.511013][ T8569] Cannot create hsr debugfs directory [ 67.516742][ T8571] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 67.591477][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.600345][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.608844][ T2764] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.615937][ T2764] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.625073][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.633705][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.642132][ T2764] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.649243][ T2764] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.657760][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.666719][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.690482][ T8560] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 67.704168][ T8560] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.721220][ T8571] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 67.767579][ T8564] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.777413][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.785543][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.795404][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.804125][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.812541][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.821305][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.829741][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.838255][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.846558][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.856038][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.863991][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.894125][ T8571] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 67.939855][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.949644][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.958014][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.969249][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.977734][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.986169][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.996917][ T8558] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.020214][ T8560] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.035514][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.042969][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.051129][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.059211][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.070538][ T8566] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.080684][ T8564] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.113008][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.122707][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.152932][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.162435][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.171427][ T2678] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.178887][ T2678] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.187245][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.195915][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.204248][ T2678] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.211269][ T2678] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.218864][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.228520][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.236703][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.245036][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.253726][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.262373][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.271135][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.278984][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.286735][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.294819][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.320560][ T8564] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 68.331603][ T8564] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.344718][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.355961][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.364823][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.372764][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.380827][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.389246][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.397532][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.405963][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.414374][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.421968][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.430004][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.440283][ T8560] device veth0_vlan entered promiscuous mode [ 68.449054][ T8566] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.474011][ T8558] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.536494][ T8560] device veth1_vlan entered promiscuous mode [ 68.553038][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.562850][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.571258][ T2764] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.578406][ T2764] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.586888][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.595552][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.604964][ T2764] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.612092][ T2764] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.619874][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.628944][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.637635][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.645143][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.652628][ T8569] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 68.726075][ T8564] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.754475][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.762431][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.771544][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.780303][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.789815][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.798636][ T8569] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 68.876191][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.885215][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.894567][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.902996][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.912519][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.921058][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.929491][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.937733][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.946360][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.954775][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.963009][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.972073][ T8569] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 68.997686][ T8578] BPF: (invalid-name-offset) type_id=0 bits_offset=783 [ 69.798656][ T8579] BPF: (invalid-name-offset) type_id=0 bits_offset=783 [ 69.809269][ T8579] BPF: [ 69.812099][ T8579] BPF:Invalid member name_offset:243 [ 69.818631][ T8579] BPF: [ 69.818631][ T8579] [ 174.013225][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 174.020065][ C1] rcu: 1-...!: (1 GPs behind) idle=9a6/1/0x4000000000000002 softirq=11884/11885 fqs=40 [ 174.030035][ C1] (t=10501 jiffies g=6905 q=69) [ 174.034964][ C1] rcu: rcu_preempt kthread starved for 10422 jiffies! g6905 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 174.046048][ C1] rcu: RCU grace-period kthread stack dump: [ 174.051924][ C1] rcu_preempt R running task 28984 10 2 0x80004000 [ 174.059823][ C1] Call Trace: [ 174.063110][ C1] __schedule+0x9a0/0xcc0 [ 174.067442][ C1] schedule+0x181/0x210 [ 174.071609][ C1] schedule_timeout+0x14f/0x240 [ 174.076449][ C1] ? run_local_timers+0x120/0x120 [ 174.081466][ C1] rcu_gp_kthread+0xed8/0x1770 [ 174.086235][ C1] kthread+0x332/0x350 [ 174.090291][ C1] ? rcu_report_qs_rsp+0x140/0x140 [ 174.095389][ C1] ? kthread_blkcg+0xe0/0xe0 [ 174.099984][ C1] ret_from_fork+0x24/0x30 [ 174.104418][ C1] NMI backtrace for cpu 1 [ 174.108737][ C1] CPU: 1 PID: 8578 Comm: syz-executor.1 Not tainted 5.5.0-rc5-syzkaller #0 [ 174.117333][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 174.127377][ C1] Call Trace: [ 174.130666][ C1] [ 174.133509][ C1] dump_stack+0x1fb/0x318 [ 174.137830][ C1] nmi_cpu_backtrace+0xaf/0x1a0 [ 174.144322][ C1] ? nmi_trigger_cpumask_backtrace+0x16d/0x290 [ 174.150489][ C1] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 174.156543][ C1] nmi_trigger_cpumask_backtrace+0x174/0x290 [ 174.162517][ C1] arch_trigger_cpumask_backtrace+0x10/0x20 [ 174.168395][ C1] rcu_dump_cpu_stacks+0x15a/0x220 [ 174.173503][ C1] rcu_sched_clock_irq+0xe25/0x1ad0 [ 174.178692][ C1] ? trace_hardirqs_off+0x74/0x80 [ 174.183709][ C1] update_process_times+0x12d/0x180 [ 174.188899][ C1] tick_sched_timer+0x263/0x420 [ 174.193759][ C1] ? tick_setup_sched_timer+0x3d0/0x3d0 [ 174.199306][ C1] __hrtimer_run_queues+0x403/0x840 [ 174.204533][ C1] hrtimer_interrupt+0x38c/0xda0 [ 174.210394][ C1] ? debug_smp_processor_id+0x9/0x20 [ 174.215683][ C1] smp_apic_timer_interrupt+0x109/0x280 [ 174.221223][ C1] apic_timer_interrupt+0xf/0x20 [ 174.226149][ C1] [ 174.229092][ C1] RIP: 0010:__memcg_kmem_uncharge+0x0/0x1a0 [ 174.234972][ C1] Code: 00 eb 1b 83 3d 20 bf ac 07 00 74 12 48 81 c3 08 02 00 00 48 89 df 4c 89 f6 e8 8c 85 ff ff 5b 41 5e 5d c3 0f 1f 80 00 00 00 00 <55> 48 89 e5 41 57 41 56 41 55 41 54 53 50 89 f3 49 89 fc 48 b8 00 [ 174.254594][ C1] RSP: 0018:ffffc90002a77568 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 174.263018][ C1] RAX: ffffffff81489244 RBX: ffffea00028bb800 RCX: 0000000000040000 [ 174.271005][ C1] RDX: ffffc9000542a000 RSI: 0000000000000000 RDI: ffffea00028bb800 [ 174.278986][ C1] RBP: ffffc90002a775a8 R08: 000000000003a728 R09: ffffed1015188f49 [ 174.286954][ C1] R10: ffffed1015188f49 R11: 0000000000000000 R12: ffff888095854f20 [ 174.294918][ C1] R13: dffffc0000000000 R14: 1ffff11012b0a9e4 R15: ffff8880a8c47a38 [ 174.302895][ C1] ? free_thread_stack+0x124/0x590 [ 174.308001][ C1] ? free_thread_stack+0x12e/0x590 [ 174.313115][ C1] put_task_stack+0xa3/0x130 [ 174.317699][ C1] finish_task_switch+0x3f1/0x550 [ 174.322719][ C1] __schedule+0x9a8/0xcc0 [ 174.327052][ C1] ? ___preempt_schedule+0x16/0x18 [ 174.333108][ C1] preempt_schedule+0xdb/0x120 [ 174.338036][ C1] ___preempt_schedule+0x16/0x18 [ 174.342985][ C1] ? vprintk_emit+0x2fe/0x3a0 [ 174.347670][ C1] ? vprintk_emit+0x368/0x3a0 [ 174.352359][ C1] vprintk_emit+0x36d/0x3a0 [ 174.356863][ C1] vprintk_default+0x28/0x30 [ 174.361439][ C1] vprintk_func+0x158/0x170 [ 174.365931][ C1] printk+0x62/0x8d [ 174.369730][ C1] ? bpf_verifier_vlog+0x113/0x310 [ 174.374833][ C1] ? vsnprintf+0x139/0x1c00 [ 174.379325][ C1] bpf_verifier_vlog+0x226/0x310 [ 174.384255][ C1] __btf_verifier_log+0x6c/0x90 [ 174.389094][ C1] ? sort_r+0x1f3/0x1110 [ 174.393435][ C1] btf_verifier_log_member+0x35e/0x580 [ 174.398887][ C1] ? sort_r+0x1f3/0x1110 [ 174.403114][ C1] ? __btf_verifier_log+0x90/0x90 [ 174.408160][ C1] btf_struct_check_meta+0x782/0x8c0 [ 174.413452][ C1] btf_check_all_metas+0x240/0x850 [ 174.418588][ C1] btf_new_fd+0x7c4/0x2200 [ 174.423048][ C1] ? __might_fault+0xf9/0x160 [ 174.427739][ C1] ? cap_capable+0x250/0x290 [ 174.432336][ C1] ? security_capable+0xa2/0xd0 [ 174.437188][ C1] __do_sys_bpf+0xf70/0xc9f0 [ 174.441780][ C1] ? check_preemption_disabled+0x44/0x260 [ 174.447507][ C1] ? debug_smp_processor_id+0x9/0x20 [ 174.452796][ C1] ? __might_fault+0xf9/0x160 [ 174.457477][ C1] ? check_preemption_disabled+0xb4/0x260 [ 174.463204][ C1] ? debug_smp_processor_id+0x9/0x20 [ 174.468585][ C1] ? debug_smp_processor_id+0x1c/0x20 [ 174.473958][ C1] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 174.480017][ C1] ? prepare_exit_to_usermode+0x221/0x5b0 [ 174.485749][ C1] ? trace_irq_disable_rcuidle+0x23/0x1e0 [ 174.491477][ C1] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 174.496946][ C1] ? trace_irq_disable_rcuidle+0x23/0x1e0 [ 174.502748][ C1] ? do_syscall_64+0x1d/0x1c0 [ 174.507418][ C1] __x64_sys_bpf+0x7a/0x90 [ 174.511826][ C1] do_syscall_64+0xf7/0x1c0 [ 174.516357][ C1] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 174.522237][ C1] RIP: 0033:0x45af49 [ 174.526131][ C1] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 174.545735][ C1] RSP: 002b:00007f6572fe0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 174.554138][ C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 174.562096][ C1] RDX: 0000000000000020 RSI: 0000000020000180 RDI: 0000000000000012 [ 174.570055][ C1] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 174.578014][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6572fe16d4 [ 174.586096][ C1] R13: 00000000004c14aa R14: 00000000004d6268 R15: 00000000ffffffff