[ 43.401392][ T25] audit: type=1800 audit(1575437779.667:25): pid=7974 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 43.430771][ T25] audit: type=1800 audit(1575437779.667:26): pid=7974 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 43.463207][ T25] audit: type=1800 audit(1575437779.667:27): pid=7974 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [ 43.957910][ T8043] sshd (8043) used greatest stack depth: 24000 bytes left [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.1.6' (ECDSA) to the list of known hosts. 2019/12/04 05:36:30 fuzzer started 2019/12/04 05:36:32 dialing manager at 10.128.0.26:42111 2019/12/04 05:36:32 syscalls: 2689 2019/12/04 05:36:32 code coverage: enabled 2019/12/04 05:36:32 comparison tracing: enabled 2019/12/04 05:36:32 extra coverage: extra coverage is not supported by the kernel 2019/12/04 05:36:32 setuid sandbox: enabled 2019/12/04 05:36:32 namespace sandbox: enabled 2019/12/04 05:36:32 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/04 05:36:32 fault injection: enabled 2019/12/04 05:36:32 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/04 05:36:32 net packet injection: enabled 2019/12/04 05:36:32 net device setup: enabled 2019/12/04 05:36:32 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/12/04 05:36:32 devlink PCI setup: PCI device 0000:00:10.0 is not available 05:36:33 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x3, &(0x7f0000000040)=@framed={{0x15, 0xa, 0x0, 0x0, 0x0, 0x71, 0x10, 0x9d}}, &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x7f\x00'/248}, 0x48) 05:36:33 executing program 1: pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0xffffffffffffffff) syzkaller login: [ 57.441169][ T8140] IPVS: ftp: loaded support on port[0] = 21 05:36:33 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0xfffffffffffffc6d, 0x20000800, &(0x7f0000000240)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffccf, 0x240, 0x0, 0xffffffffffffff37) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setuid(0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) [ 57.605492][ T8140] chnl_net:caif_netlink_parms(): no params data found [ 57.622590][ T8143] IPVS: ftp: loaded support on port[0] = 21 [ 57.705618][ T8140] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.713239][ T8140] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.735504][ T8140] device bridge_slave_0 entered promiscuous mode [ 57.773981][ T8140] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.781058][ T8140] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.790382][ T8145] IPVS: ftp: loaded support on port[0] = 21 [ 57.801010][ T8140] device bridge_slave_1 entered promiscuous mode [ 57.839420][ T8140] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.861796][ T8140] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 05:36:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="6c00000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="000000001940000008000a00", @ANYRES32=0x6, @ANYBLOB="440012000c000100697036746e6c0000340002001400090000000000000000000000ffff7f00000108000f000200000014000300fefb2a0cfc39dae05d3f800000000000238fd744800b46200e27f0894fd63fef1bf12f7bc86b20f1dae7cdcc6dcab22564bc6141c422b2abae4fd23777cd0647d64d0f0759818d8d431ee942d15bfa53e9e3b6995e8abb5a336715d1aaeb57230fb49d62d3d05367a54d24b793b2ea55b10683e518faff4294f8ca9d75f911d424f4a84f4c229ee5440575"], 0x6c}}, 0x0) [ 57.902189][ T8140] team0: Port device team_slave_0 added [ 57.977776][ T8140] team0: Port device team_slave_1 added [ 58.045572][ T8143] chnl_net:caif_netlink_parms(): no params data found 05:36:34 executing program 4: io_setup(0x83, &(0x7f00000003c0)=0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) io_submit(r0, 0x2, &(0x7f0000001780)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2, 0x0, r1, 0x0, 0x2}]) [ 58.126270][ T8140] device hsr_slave_0 entered promiscuous mode [ 58.183813][ T8140] device hsr_slave_1 entered promiscuous mode [ 58.266590][ T8149] IPVS: ftp: loaded support on port[0] = 21 [ 58.301459][ T8145] chnl_net:caif_netlink_parms(): no params data found 05:36:34 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = getpid() ioctl$MON_IOCX_MFETCH(r0, 0x40189206, &(0x7f0000000400)={0x0}) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) tkill(r1, 0x800000015) [ 58.383571][ T8143] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.391586][ T8143] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.401302][ T8143] device bridge_slave_0 entered promiscuous mode [ 58.416253][ T8140] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 58.475578][ T8140] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 58.536873][ T8140] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 58.589080][ T8140] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 58.645991][ T8143] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.653086][ T8143] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.660932][ T8143] device bridge_slave_1 entered promiscuous mode [ 58.676656][ T8151] IPVS: ftp: loaded support on port[0] = 21 [ 58.693272][ T8153] IPVS: ftp: loaded support on port[0] = 21 [ 58.721151][ T8145] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.728344][ T8145] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.736390][ T8145] device bridge_slave_0 entered promiscuous mode [ 58.744136][ T8145] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.751197][ T8145] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.758991][ T8145] device bridge_slave_1 entered promiscuous mode [ 58.773646][ T8143] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.805147][ T8143] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.843895][ T8145] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.856579][ T8145] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.876411][ T8145] team0: Port device team_slave_0 added [ 58.898292][ T8143] team0: Port device team_slave_0 added [ 58.905387][ T8145] team0: Port device team_slave_1 added [ 58.932566][ T8143] team0: Port device team_slave_1 added [ 59.025303][ T8143] device hsr_slave_0 entered promiscuous mode [ 59.063858][ T8143] device hsr_slave_1 entered promiscuous mode [ 59.103573][ T8143] debugfs: Directory 'hsr0' with parent '/' already present! [ 59.145380][ T8153] chnl_net:caif_netlink_parms(): no params data found [ 59.206231][ T8145] device hsr_slave_0 entered promiscuous mode [ 59.245121][ T8145] device hsr_slave_1 entered promiscuous mode [ 59.284437][ T8145] debugfs: Directory 'hsr0' with parent '/' already present! [ 59.317877][ T8149] chnl_net:caif_netlink_parms(): no params data found [ 59.360874][ T8151] chnl_net:caif_netlink_parms(): no params data found [ 59.419315][ T8149] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.427551][ T8149] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.435556][ T8149] device bridge_slave_0 entered promiscuous mode [ 59.449095][ T8145] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 59.532562][ T8145] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 59.596089][ T8149] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.603158][ T8149] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.611405][ T8149] device bridge_slave_1 entered promiscuous mode [ 59.618561][ T8153] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.625780][ T8153] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.633610][ T8153] device bridge_slave_0 entered promiscuous mode [ 59.641071][ T8153] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.648158][ T8153] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.655906][ T8153] device bridge_slave_1 entered promiscuous mode [ 59.668238][ T8143] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 59.745660][ T8145] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 59.796898][ T8145] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 59.848566][ T8151] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.855934][ T8151] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.867016][ T8151] device bridge_slave_0 entered promiscuous mode [ 59.874492][ T8143] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 59.919705][ T8143] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 59.979520][ T8143] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 60.041789][ T8153] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.052526][ T8151] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.060046][ T8151] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.068087][ T8151] device bridge_slave_1 entered promiscuous mode [ 60.089039][ T8149] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.102986][ T8149] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.120399][ T8153] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.134917][ T8151] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.158941][ T8149] team0: Port device team_slave_0 added [ 60.182147][ T8151] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.196751][ T8149] team0: Port device team_slave_1 added [ 60.208106][ T8140] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.221462][ T8153] team0: Port device team_slave_0 added [ 60.230069][ T8153] team0: Port device team_slave_1 added [ 60.270730][ T8140] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.280256][ T8151] team0: Port device team_slave_0 added [ 60.299796][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.308646][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.333333][ T8151] team0: Port device team_slave_1 added [ 60.379645][ T8149] device hsr_slave_0 entered promiscuous mode [ 60.423917][ T8149] device hsr_slave_1 entered promiscuous mode [ 60.463603][ T8149] debugfs: Directory 'hsr0' with parent '/' already present! [ 60.525649][ T8153] device hsr_slave_0 entered promiscuous mode [ 60.574799][ T8153] device hsr_slave_1 entered promiscuous mode [ 60.623639][ T8153] debugfs: Directory 'hsr0' with parent '/' already present! [ 60.633194][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.645159][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.654049][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.661336][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.669865][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.679017][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.687715][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.694939][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.705240][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.766554][ T8151] device hsr_slave_0 entered promiscuous mode [ 60.804109][ T8151] device hsr_slave_1 entered promiscuous mode [ 60.846291][ T8151] debugfs: Directory 'hsr0' with parent '/' already present! [ 60.874772][ T8149] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 60.950338][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.985713][ T8149] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 61.031948][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.043351][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.052395][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.061472][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.070253][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.081693][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.093808][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.107866][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.118242][ T8149] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 61.176407][ T8143] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.183199][ T8149] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 61.238725][ T8153] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 61.296200][ T8153] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 61.358748][ T8153] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 61.408193][ T8153] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 61.478138][ T8151] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 61.525251][ T3792] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.533944][ T3792] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.542712][ T8151] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 61.575379][ T8140] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.595444][ T8143] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.608695][ T8151] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 61.666384][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.674405][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.696565][ T8151] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 61.736605][ T8145] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.748987][ T3792] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.757811][ T3792] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.768332][ T3792] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.775453][ T3792] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.784334][ T3792] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.792869][ T3792] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.801780][ T3792] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.808984][ T3792] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.817298][ T3792] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.826965][ T3792] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.834947][ T3792] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.860609][ T8140] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.885017][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.892425][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.900123][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.908624][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.928606][ T8145] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.937469][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.954529][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.963233][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.992647][ T8149] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.023198][ T8153] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.045204][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.055085][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.066580][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.073684][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.082368][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.091269][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.099927][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.107019][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.115325][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.124136][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.132726][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.141515][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.150309][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.159875][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.170028][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.179241][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.200997][ T8149] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.223278][ T8145] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 62.234975][ T8145] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.259859][ T8153] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.290199][ T8153] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 62.300775][ T8153] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.329193][ T8153] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.073409][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 167.080186][ C1] rcu: 1-...!: (10499 ticks this GP) idle=676/1/0x4000000000000002 softirq=10619/10619 fqs=13 [ 167.090735][ C1] (t=10500 jiffies g=6517 q=475) [ 167.095748][ C1] rcu: rcu_preempt kthread starved for 10473 jiffies! g6517 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 167.106848][ C1] rcu: RCU grace-period kthread stack dump: [ 167.112728][ C1] rcu_preempt R running task 29032 10 2 0x80004000 [ 167.120632][ C1] Call Trace: [ 167.123928][ C1] __schedule+0x9a0/0xcc0 [ 167.128255][ C1] schedule+0x181/0x210 [ 167.132406][ C1] schedule_timeout+0x14f/0x240 [ 167.137248][ C1] ? run_local_timers+0x120/0x120 [ 167.142284][ C1] rcu_gp_kthread+0xed8/0x1770 [ 167.147047][ C1] kthread+0x332/0x350 [ 167.151105][ C1] ? rcu_report_qs_rsp+0x140/0x140 [ 167.156202][ C1] ? kthread_blkcg+0xe0/0xe0 [ 167.160780][ C1] ret_from_fork+0x24/0x30 [ 167.165199][ C1] NMI backtrace for cpu 1 [ 167.169519][ C1] CPU: 1 PID: 8161 Comm: syz-executor.0 Not tainted 5.4.0-syzkaller #0 [ 167.177839][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 167.187876][ C1] Call Trace: [ 167.191146][ C1] [ 167.193985][ C1] dump_stack+0x1fb/0x318 [ 167.198321][ C1] nmi_cpu_backtrace+0xaf/0x1a0 [ 167.203158][ C1] ? nmi_trigger_cpumask_backtrace+0x16d/0x290 [ 167.209300][ C1] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 167.215368][ C1] nmi_trigger_cpumask_backtrace+0x174/0x290 [ 167.221338][ C1] arch_trigger_cpumask_backtrace+0x10/0x20 [ 167.227219][ C1] rcu_dump_cpu_stacks+0x15a/0x220 [ 167.232320][ C1] rcu_sched_clock_irq+0xe25/0x1ad0 [ 167.237509][ C1] ? trace_hardirqs_off+0x74/0x80 [ 167.242638][ C1] update_process_times+0x12d/0x180 [ 167.247824][ C1] tick_sched_timer+0x263/0x420 [ 167.252657][ C1] ? tick_setup_sched_timer+0x3d0/0x3d0 [ 167.258186][ C1] __hrtimer_run_queues+0x403/0x840 [ 167.263403][ C1] hrtimer_interrupt+0x38c/0xda0 [ 167.268340][ C1] ? debug_smp_processor_id+0x9/0x20 [ 167.273627][ C1] smp_apic_timer_interrupt+0x109/0x280 [ 167.279157][ C1] apic_timer_interrupt+0xf/0x20 [ 167.284074][ C1] [ 167.287014][ C1] RIP: 0010:free_thread_stack+0x151/0x590 [ 167.292722][ C1] Code: 31 f6 e8 42 af 6e 00 43 80 3c 2e 00 74 08 4c 89 e7 e8 43 a4 69 00 49 8b 1c 24 48 83 c3 08 48 89 d8 48 c1 e8 03 42 80 3c 28 00 <74> 08 48 89 df e8 25 a4 69 00 48 8b 3b be fc ff ff ff e8 28 04 00 [ 167.312318][ C1] RSP: 0018:ffffc90002587968 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 167.320754][ C1] RAX: 1ffff11013c96041 RBX: ffff88809e4b0208 RCX: 0000000000000000 [ 167.328885][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffea0002563e40 [ 167.336845][ C1] RBP: ffffc900025879a0 R08: dffffc0000000000 R09: fffffbfff120248a [ 167.344804][ C1] R10: fffffbfff120248a R11: 0000000000000000 R12: ffff88809e4b02a0 [ 167.352764][ C1] R13: dffffc0000000000 R14: 1ffff11013c96054 R15: ffff888091ce37a8 [ 167.360749][ C1] ? free_thread_stack+0x12e/0x590 [ 167.365940][ C1] put_task_stack+0xa3/0x130 [ 167.370519][ C1] finish_task_switch+0x3f1/0x550 [ 167.375538][ C1] __schedule+0x9a8/0xcc0 [ 167.379862][ C1] ? ___preempt_schedule_notrace+0x16/0x27 [ 167.385766][ C1] preempt_schedule_notrace+0xdb/0x120 [ 167.391308][ C1] ___preempt_schedule_notrace+0x16/0x27 [ 167.396933][ C1] ? rcu_is_watching+0x57/0xa0 [ 167.401779][ C1] rcu_is_watching+0x82/0xa0 [ 167.406357][ C1] memcg_kmem_get_cache+0x301/0x590 [ 167.411535][ C1] ? __should_failslab+0x11a/0x160 [ 167.416633][ C1] ? vm_area_alloc+0x24/0xf0 [ 167.421206][ C1] kmem_cache_alloc+0x86/0x2e0 [ 167.425957][ C1] vm_area_alloc+0x24/0xf0 [ 167.430360][ C1] mmap_region+0xaf2/0x1cb0 [ 167.434866][ C1] do_mmap+0xabb/0x1120 [ 167.439019][ C1] vm_mmap_pgoff+0x13d/0x1d0 [ 167.443602][ C1] ksys_mmap_pgoff+0x104/0x560 [ 167.448346][ C1] ? debug_smp_processor_id+0x9/0x20 [ 167.453620][ C1] ? trace_irq_disable_rcuidle+0x23/0x1e0 [ 167.459327][ C1] __x64_sys_mmap+0x103/0x120 [ 167.463995][ C1] do_syscall_64+0xf7/0x1c0 [ 167.468660][ C1] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 167.474534][ C1] RIP: 0033:0x45a6ca [ 167.478414][ C1] Code: 89 f5 41 54 49 89 fc 55 53 74 35 49 63 e8 48 63 da 4d 89 f9 49 89 e8 4d 63 d6 48 89 da 4c 89 ee 4c 89 e7 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 4e 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 00 [ 167.498002][ C1] RSP: 002b:00007ffd6989a158 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 167.506407][ C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a6ca [ 167.514361][ C1] RDX: 0000000000000003 RSI: 0000000000021000 RDI: 0000000000000000 [ 167.522358][ C1] RBP: ffffffffffffffff R08: ffffffffffffffff R09: 0000000000000000 [ 167.530323][ C1] R10: 0000000000020022 R11: 0000000000000246 R12: 0000000000000000 [ 167.538280][ C1] R13: 0000000000021000 R14: 0000000000020022 R15: 0000000000000000