[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 51.910043][ T26] audit: type=1800 audit(1578450687.175:25): pid=8588 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 51.929729][ T26] audit: type=1800 audit(1578450687.185:26): pid=8588 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 52.000997][ T26] audit: type=1800 audit(1578450687.185:27): pid=8588 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.240' (ECDSA) to the list of known hosts. 2020/01/08 02:31:38 fuzzer started 2020/01/08 02:31:40 dialing manager at 10.128.0.26:35703 2020/01/08 02:31:40 syscalls: 2824 2020/01/08 02:31:40 code coverage: enabled 2020/01/08 02:31:40 comparison tracing: enabled 2020/01/08 02:31:40 extra coverage: enabled 2020/01/08 02:31:40 setuid sandbox: enabled 2020/01/08 02:31:40 namespace sandbox: enabled 2020/01/08 02:31:40 Android sandbox: /sys/fs/selinux/policy does not exist 2020/01/08 02:31:40 fault injection: enabled 2020/01/08 02:31:40 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/01/08 02:31:40 net packet injection: enabled 2020/01/08 02:31:40 net device setup: enabled 2020/01/08 02:31:40 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/01/08 02:31:40 devlink PCI setup: PCI device 0000:00:10.0 is not available 02:31:41 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000ffd000/0x2000)=nil, 0xa00, 0x0, 0x40000012, r2, 0x6000000) 02:31:41 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac', 0x3) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) sendfile(r0, r1, &(0x7f0000000000), 0xffff) fcntl$addseals(r1, 0x409, 0x8) fsetxattr$system_posix_acl(r1, &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000280), 0x1001, 0x0) dup3(r0, r1, 0x0) syzkaller login: [ 66.249435][ T8756] IPVS: ftp: loaded support on port[0] = 21 [ 66.419234][ T8756] chnl_net:caif_netlink_parms(): no params data found [ 66.475515][ T8759] IPVS: ftp: loaded support on port[0] = 21 02:31:41 executing program 2: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000001980)=ANY=[@ANYBLOB="2ce5ffb4b620a525314e76e2"], 0xc) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) [ 66.543009][ T8756] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.550090][ T8756] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.572013][ T8756] device bridge_slave_0 entered promiscuous mode [ 66.584984][ T8756] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.593898][ T8756] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.602717][ T8756] device bridge_slave_1 entered promiscuous mode [ 66.648898][ T8756] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.704468][ T8756] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.764012][ T8759] chnl_net:caif_netlink_parms(): no params data found [ 66.776553][ T8762] IPVS: ftp: loaded support on port[0] = 21 [ 66.802725][ T8756] team0: Port device team_slave_0 added [ 66.831813][ T8756] team0: Port device team_slave_1 added 02:31:42 executing program 3: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000100)=0x2e4, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000004540)={0xa, 0x4e28, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c9120cab00220bc31d41e44f96f67971b8ed8a3dc9eb4123a903d58da02dd1eca653150422bc91e9585fb38", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000140)="cd27c0d84df0ad804ad5262a10c5f452", 0x10}, {&(0x7f00000012c0)="496288e0b56eefd3ff461c68e4fd5c8ecdcff3c85146c785e809c9ca7cb538fa2f0e2ca36adfc49e66123dec9cac26f3e4e77eadba335fecf61c5891ceea669ef775557e1b9d3415515a3ed13c2f932d1beb7d0e66fcf84982e7dc839dd15878", 0x60}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb07accdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6d8f64f95c69e8a45bd4a19cff0e5", 0xe3}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45ee22ba99cfe850d62e87e556e8fa3459d346b4d1a572c7334773786ad61a45508f7e", 0x44}], 0x6}}], 0x4000027, 0x4000000) [ 66.933853][ T8756] device hsr_slave_0 entered promiscuous mode [ 66.963250][ T8756] device hsr_slave_1 entered promiscuous mode [ 67.015254][ T8759] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.031587][ T8759] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.051008][ T8759] device bridge_slave_0 entered promiscuous mode 02:31:42 executing program 4: openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) read(r0, 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000580)='/proc/self/net/pfkey\x00', 0x0, 0x0) dup2(r2, r1) [ 67.089134][ T8759] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.111026][ T8759] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.119121][ T8759] device bridge_slave_1 entered promiscuous mode [ 67.199229][ T8759] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.234754][ T8764] IPVS: ftp: loaded support on port[0] = 21 [ 67.273506][ T8759] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.386831][ T8762] chnl_net:caif_netlink_parms(): no params data found [ 67.401678][ T8759] team0: Port device team_slave_0 added 02:31:42 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd) socket$inet(0x2, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb2) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f00000004c0), 0x400000000000251, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1000000000004e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) [ 67.443573][ T8767] IPVS: ftp: loaded support on port[0] = 21 [ 67.461226][ T8759] team0: Port device team_slave_1 added [ 67.489957][ T8756] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.583437][ T8756] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.605888][ T8756] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 67.664506][ T8756] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 67.703122][ T8762] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.710225][ T8762] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.718018][ T8762] device bridge_slave_0 entered promiscuous mode [ 67.742376][ T8769] IPVS: ftp: loaded support on port[0] = 21 [ 67.773099][ T8759] device hsr_slave_0 entered promiscuous mode [ 67.831260][ T8759] device hsr_slave_1 entered promiscuous mode [ 67.881060][ T8759] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.888858][ T8759] Cannot create hsr debugfs directory [ 67.897892][ T8762] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.905636][ T8762] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.913390][ T8762] device bridge_slave_1 entered promiscuous mode [ 67.969856][ T8762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.985040][ T8762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.046052][ T8762] team0: Port device team_slave_0 added [ 68.052243][ T8764] chnl_net:caif_netlink_parms(): no params data found [ 68.063862][ T8762] team0: Port device team_slave_1 added [ 68.133743][ T8762] device hsr_slave_0 entered promiscuous mode [ 68.171251][ T8762] device hsr_slave_1 entered promiscuous mode [ 68.210950][ T8762] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.218534][ T8762] Cannot create hsr debugfs directory [ 68.322759][ T8764] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.329839][ T8764] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.338376][ T8764] device bridge_slave_0 entered promiscuous mode [ 68.348752][ T8764] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.356268][ T8764] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.363977][ T8764] device bridge_slave_1 entered promiscuous mode [ 68.376661][ T8767] chnl_net:caif_netlink_parms(): no params data found [ 68.427000][ T8764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.439952][ T8764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.487135][ T8759] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 68.517801][ T8759] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 68.574742][ T8759] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 68.646597][ T8759] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 68.714266][ T8767] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.721571][ T8767] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.729184][ T8767] device bridge_slave_0 entered promiscuous mode [ 68.755151][ T8764] team0: Port device team_slave_0 added [ 68.767396][ T8764] team0: Port device team_slave_1 added [ 68.774479][ T8769] chnl_net:caif_netlink_parms(): no params data found [ 68.783155][ T8767] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.790235][ T8767] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.798718][ T8767] device bridge_slave_1 entered promiscuous mode [ 68.854282][ T8762] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 68.943052][ T8764] device hsr_slave_0 entered promiscuous mode [ 68.991339][ T8764] device hsr_slave_1 entered promiscuous mode [ 69.051145][ T8764] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.058732][ T8764] Cannot create hsr debugfs directory [ 69.073857][ T8767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.086194][ T8762] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.157114][ T8762] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.227860][ T8767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.254657][ T8769] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.261900][ T8769] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.269515][ T8769] device bridge_slave_0 entered promiscuous mode [ 69.277019][ T8762] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.336486][ T8767] team0: Port device team_slave_0 added [ 69.344222][ T8767] team0: Port device team_slave_1 added [ 69.350044][ T8769] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.357845][ T8769] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.366025][ T8769] device bridge_slave_1 entered promiscuous mode [ 69.385642][ T8756] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.418150][ T8769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.438897][ T8756] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.493523][ T8767] device hsr_slave_0 entered promiscuous mode [ 69.542189][ T8767] device hsr_slave_1 entered promiscuous mode [ 69.590993][ T8767] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.598579][ T8767] Cannot create hsr debugfs directory [ 69.606857][ T3814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.615535][ T3814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.634646][ T8769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.655863][ T3824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.664974][ T3824] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.673543][ T3824] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.680646][ T3824] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.688890][ T3824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.698300][ T3824] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.706808][ T3824] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.713897][ T3824] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.748972][ T8769] team0: Port device team_slave_0 added [ 69.756693][ T8769] team0: Port device team_slave_1 added [ 69.763474][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.774783][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.784215][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.823147][ T3814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.834968][ T3814] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.933862][ T8769] device hsr_slave_0 entered promiscuous mode [ 69.971827][ T8769] device hsr_slave_1 entered promiscuous mode [ 70.011529][ T8769] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.019168][ T8769] Cannot create hsr debugfs directory [ 70.025504][ T3814] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.034279][ T3814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.042944][ T3814] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.051437][ T3814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.059747][ T3814] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.073746][ T3814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.082297][ T3814] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.094096][ T8756] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.103622][ T8764] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.145800][ T8764] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.234410][ T8764] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.305871][ T8762] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.334652][ T8762] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.349878][ T8764] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.394435][ T3814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.402461][ T3814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.410389][ T3814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.419919][ T3814] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.428547][ T3814] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.435610][ T3814] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.444131][ T3814] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.451899][ T3814] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.459832][ T3814] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.484422][ T8759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.505688][ T3814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.515263][ T3814] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.525615][ T3814] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.532731][ T3814] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.540327][ T3814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.554981][ T8756] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.591788][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.599602][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.607879][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.616970][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.625831][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.663432][ T8769] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 70.694618][ T8769] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 70.752169][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.759937][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.768895][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.789083][ T8762] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 70.804552][ T8762] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.817832][ T8759] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.829747][ T8769] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 70.853362][ T8767] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 70.894200][ T8767] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 70.973413][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.983889][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.992714][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.001283][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.009458][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.018312][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.028731][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.058999][ T8769] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 71.113350][ T8767] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 71.153361][ T8767] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 71.193352][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.202925][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.211493][ T2931] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.218537][ T2931] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.226445][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.235087][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.243727][ T2931] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.250800][ T2931] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.258474][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.267414][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.310794][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.320136][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.329370][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.337911][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.346617][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.355245][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.363519][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.372144][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.380548][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.388881][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.396407][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.405245][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.413495][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.421971][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.431947][ T8756] device veth0_vlan entered promiscuous mode [ 71.446939][ T8759] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.460212][ T8759] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.472582][ T8764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.487086][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.495873][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.529518][ T8756] device veth1_vlan entered promiscuous mode [ 71.552606][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.562871][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.570750][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.578962][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.591265][ T3824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.598951][ T3824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.609885][ T8762] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.627389][ T8759] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.637670][ T8764] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.707145][ T3824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.718984][ T3824] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.727433][ T3824] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.734502][ T3824] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.747251][ T3824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.755814][ T3824] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.767812][ T3824] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.774939][ T3824] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.783036][ T3824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.791972][ T3824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.800447][ T3824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.809258][ T3824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.818020][ T3824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.827633][ T3824] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.847917][ T8767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.877064][ T8762] device veth0_vlan entered promiscuous mode [ 71.884070][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.913199][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.928100][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.970555][ T8764] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.987968][ T8764] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.007192][ T8759] device veth0_vlan entered promiscuous mode [ 72.030433][ T8759] device veth1_vlan entered promiscuous mode [ 176.910840][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 176.917672][ C0] rcu: 0-....: (10499 ticks this GP) idle=abe/1/0x4000000000000002 softirq=12773/12773 fqs=2718 [ 176.928422][ C0] (t=10501 jiffies g=7261 q=445) [ 176.933440][ C0] rcu: rcu_preempt kthread starved for 5062 jiffies! g7261 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 176.944453][ C0] rcu: RCU grace-period kthread stack dump: [ 176.950331][ C0] rcu_preempt R running task 29032 10 2 0x80004000 [ 176.958221][ C0] Call Trace: [ 176.961533][ C0] __schedule+0x9a0/0xcc0 [ 176.965890][ C0] schedule+0x181/0x210 [ 176.970045][ C0] schedule_timeout+0x14f/0x240 [ 176.974885][ C0] ? run_local_timers+0x120/0x120 [ 176.979901][ C0] rcu_gp_kthread+0xed8/0x1770 [ 176.984663][ C0] kthread+0x332/0x350 [ 176.988724][ C0] ? rcu_report_qs_rsp+0x140/0x140 [ 176.993822][ C0] ? kthread_blkcg+0xe0/0xe0 [ 176.998399][ C0] ret_from_fork+0x24/0x30 [ 177.002822][ C0] NMI backtrace for cpu 0 [ 177.008108][ C0] CPU: 0 PID: 8774 Comm: syz-executor.0 Not tainted 5.5.0-rc5-syzkaller #0 [ 177.016696][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 177.026754][ C0] Call Trace: [ 177.030048][ C0] [ 177.032915][ C0] dump_stack+0x1fb/0x318 [ 177.037249][ C0] nmi_cpu_backtrace+0xaf/0x1a0 [ 177.042090][ C0] ? nmi_trigger_cpumask_backtrace+0x16d/0x290 [ 177.048235][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 177.054295][ C0] nmi_trigger_cpumask_backtrace+0x174/0x290 [ 177.060268][ C0] arch_trigger_cpumask_backtrace+0x10/0x20 [ 177.066149][ C0] rcu_dump_cpu_stacks+0x15a/0x220 [ 177.071253][ C0] rcu_sched_clock_irq+0xe25/0x1ad0 [ 177.076442][ C0] ? trace_hardirqs_off+0x74/0x80 [ 177.081463][ C0] update_process_times+0x12d/0x180 [ 177.086654][ C0] tick_sched_timer+0x263/0x420 [ 177.091496][ C0] ? tick_setup_sched_timer+0x3d0/0x3d0 [ 177.097030][ C0] __hrtimer_run_queues+0x403/0x840 [ 177.102230][ C0] hrtimer_interrupt+0x38c/0xda0 [ 177.107173][ C0] ? debug_smp_processor_id+0x9/0x20 [ 177.112450][ C0] smp_apic_timer_interrupt+0x109/0x280 [ 177.117987][ C0] apic_timer_interrupt+0xf/0x20 [ 177.122907][ C0] [ 177.125833][ C0] RIP: 0010:__memcg_kmem_uncharge+0xd/0x1a0 [ 177.131717][ C0] Code: 81 c3 08 02 00 00 48 89 df 4c 89 f6 e8 8c 85 ff ff 5b 41 5e 5d c3 0f 1f 80 00 00 00 00 55 48 89 e5 41 57 41 56 41 55 41 54 53 <50> 89 f3 49 89 fc 48 b8 00 00 00 00 00 fc ff df 4c 8d 77 38 4d 89 [ 177.151309][ C0] RSP: 0018:ffffc90002277850 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 177.159707][ C0] RAX: ffffffff81489244 RBX: ffffea0002238000 RCX: ffff888097e9a3c0 [ 177.169925][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffea0002238000 [ 177.177884][ C0] RBP: ffffc90002277878 R08: dffffc0000000000 R09: fffffbfff124248a [ 177.185844][ C0] R10: fffffbfff124248a R11: 0000000000000000 R12: ffff8880a70fd6a0 [ 177.193804][ C0] R13: dffffc0000000000 R14: 1ffff11014e1fad4 R15: ffff8880898af8f8 [ 177.201775][ C0] ? free_thread_stack+0x124/0x590 [ 177.206880][ C0] free_thread_stack+0x12e/0x590 [ 177.211812][ C0] put_task_stack+0xa3/0x130 [ 177.216391][ C0] finish_task_switch+0x3f1/0x550 [ 177.221405][ C0] __schedule+0x9a8/0xcc0 [ 177.225729][ C0] ? ___preempt_schedule+0x16/0x18 [ 177.230824][ C0] preempt_schedule+0xdb/0x120 [ 177.235580][ C0] ___preempt_schedule+0x16/0x18 [ 177.240504][ C0] ? page_poisoning_enabled+0x1c/0x30 [ 177.245866][ C0] prep_new_page+0x161/0x2e0 [ 177.250447][ C0] get_page_from_freelist+0x850/0xaa0 [ 177.255825][ C0] __alloc_pages_nodemask+0x264/0x5d0 [ 177.261191][ C0] alloc_pages_vma+0x94a/0xd50 [ 177.265951][ C0] do_huge_pmd_anonymous_page+0x883/0xe50 [ 177.271664][ C0] handle_mm_fault+0x2017/0x2890 [ 177.276613][ C0] do_user_addr_fault+0x589/0xaf0 [ 177.281636][ C0] __do_page_fault+0xd3/0x1f0 [ 177.286301][ C0] do_page_fault+0x99/0xb0 [ 177.290708][ C0] page_fault+0x39/0x40 [ 177.294848][ C0] RIP: 0033:0x442191 [ 177.298734][ C0] Code: 8d 15 33 e4 0a 00 8b 0c 8a 8b 04 82 29 c8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 fa 20 48 89 f8 73 77 f6 c2 01 74 0b 0f b6 0e <88> 0f 48 ff c6 48 ff c7 f6 c2 02 74 12 0f b7 0e 66 89 0f 48 83 c6 [ 177.318322][ C0] RSP: 002b:00007ffc8e30ed78 EFLAGS: 00010202 [ 177.324372][ C0] RAX: 0000000020000080 RBX: 0000000000000000 RCX: 000000000000002f [ 177.332331][ C0] RDX: 0000000000000009 RSI: 0000000000760020 RDI: 0000000020000080 [ 177.340288][ C0] RBP: 0000000000760000 R08: 0000000000000000 R09: 0000000000000004 [ 177.348249][ C0] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000001 [ 177.356209][ C0] R13: 00007ffc8e30ef60 R14: 0000000000760008 R15: 00007ffc8e30ef70