[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 43.604412][ T26] audit: type=1800 audit(1575406130.199:25): pid=8034 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 43.623527][ T26] audit: type=1800 audit(1575406130.209:26): pid=8034 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 43.683839][ T26] audit: type=1800 audit(1575406130.209:27): pid=8034 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.246' (ECDSA) to the list of known hosts. 2019/12/03 20:48:58 fuzzer started 2019/12/03 20:49:00 dialing manager at 10.128.0.26:42111 2019/12/03 20:49:00 syscalls: 2689 2019/12/03 20:49:00 code coverage: enabled 2019/12/03 20:49:00 comparison tracing: enabled 2019/12/03 20:49:00 extra coverage: extra coverage is not supported by the kernel 2019/12/03 20:49:00 setuid sandbox: enabled 2019/12/03 20:49:00 namespace sandbox: enabled 2019/12/03 20:49:00 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/03 20:49:00 fault injection: enabled 2019/12/03 20:49:00 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/03 20:49:00 net packet injection: enabled 2019/12/03 20:49:00 net device setup: enabled 2019/12/03 20:49:00 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/12/03 20:49:00 devlink PCI setup: PCI device 0000:00:10.0 is not available 20:49:01 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[], 0xfffffdea) splice(r0, 0x0, r3, 0x0, 0x20000000005, 0x0) r4 = socket$inet6(0xa, 0x3, 0x6b) ioctl(r4, 0x1000008912, &(0x7f0000000000)="0815b5055e0bcfe87b3071") 20:49:01 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x2040400) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r1, &(0x7f0000000040), 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x6, 0x20}, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000001c0)={0x7f00, 0x1, 0x8, 0xfffffff8, r2}, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x513000, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000380)) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0xffffff15) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r4, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r5, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x06\x02\xff', @ifru_names='bond_slave_1\x00t\x00'}) ioctl$sock_ifreq(r5, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\f\x00!!\x00\x01\x00\x01', @ifru_names='bond_slave_1\x00\x00\x00\b'}) syzkaller login: [ 55.187654][ T8198] IPVS: ftp: loaded support on port[0] = 21 20:49:01 executing program 2: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) getpid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40000c1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x7dea, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) getpid() write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[], 0x0) write$cgroup_pid(r1, &(0x7f0000000000), 0x10000000d) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) ioctl$TUNSETFILTEREBPF(r1, 0x6609, 0x0) [ 55.265795][ T8200] IPVS: ftp: loaded support on port[0] = 21 [ 55.413382][ T8198] chnl_net:caif_netlink_parms(): no params data found [ 55.507680][ T8198] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.519261][ T8203] IPVS: ftp: loaded support on port[0] = 21 [ 55.528357][ T8198] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.536950][ T8198] device bridge_slave_0 entered promiscuous mode [ 55.546319][ T8200] chnl_net:caif_netlink_parms(): no params data found 20:49:02 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0xc0406618, 0x0) [ 55.580757][ T8198] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.587848][ T8198] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.596302][ T8198] device bridge_slave_1 entered promiscuous mode [ 55.667091][ T8198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.679621][ T8200] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.686807][ T8200] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.696113][ T8200] device bridge_slave_0 entered promiscuous mode [ 55.707375][ T8198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.725516][ T8200] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.734619][ T8200] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.742872][ T8200] device bridge_slave_1 entered promiscuous mode [ 55.804877][ T8198] team0: Port device team_slave_0 added [ 55.816269][ T8198] team0: Port device team_slave_1 added [ 55.836054][ T8200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link 20:49:02 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0xc8, &(0x7f00000000c0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240)="bb9c3da789d328c184c53f030116c378893b1a7309c55380ae583a3b6905b490f65b787846747fae234cb2cab9b47cf94d67a50163e7689057ea8fdf5f9c1b474c50b50c6efb8ff3e1c699c71490", 0x4e) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x30, &(0x7f0000000200)={@mcast1={0xff, 0x7}}, 0x247) [ 55.872620][ T8207] IPVS: ftp: loaded support on port[0] = 21 [ 55.901182][ T8198] device hsr_slave_0 entered promiscuous mode [ 55.939147][ T8198] device hsr_slave_1 entered promiscuous mode [ 56.031033][ T8200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.064508][ T8203] chnl_net:caif_netlink_parms(): no params data found 20:49:02 executing program 5: setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x3, '\x00\x00\x10\x00\x00\x00\x00\x1a\xf9D\xbc\x00', 0x800000000008}, 0x325) r0 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0) ioctl$SG_EMULATED_HOST(r0, 0xc0347c03, &(0x7f0000000000)) [ 56.110607][ T8200] team0: Port device team_slave_0 added [ 56.116449][ T8198] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.170069][ T8198] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.222506][ T8198] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 56.296688][ T8200] team0: Port device team_slave_1 added [ 56.307784][ T8198] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 56.403486][ T8211] IPVS: ftp: loaded support on port[0] = 21 [ 56.415215][ T8209] IPVS: ftp: loaded support on port[0] = 21 [ 56.481329][ T8200] device hsr_slave_0 entered promiscuous mode [ 56.518781][ T8200] device hsr_slave_1 entered promiscuous mode [ 56.568629][ T8200] debugfs: Directory 'hsr0' with parent '/' already present! [ 56.583082][ T8203] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.591039][ T8203] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.599055][ T8203] device bridge_slave_0 entered promiscuous mode [ 56.646550][ T8203] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.654846][ T8203] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.664041][ T8203] device bridge_slave_1 entered promiscuous mode [ 56.695514][ T8207] chnl_net:caif_netlink_parms(): no params data found [ 56.729361][ T8203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.742180][ T8203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.785707][ T8200] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 56.845561][ T8203] team0: Port device team_slave_0 added [ 56.867294][ T8200] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 56.931114][ T8203] team0: Port device team_slave_1 added [ 56.942517][ T8207] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.950397][ T8207] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.959092][ T8207] device bridge_slave_0 entered promiscuous mode [ 56.967623][ T8200] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 57.012720][ T8200] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 57.090018][ T8207] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.097090][ T8207] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.106564][ T8207] device bridge_slave_1 entered promiscuous mode [ 57.181984][ T8203] device hsr_slave_0 entered promiscuous mode [ 57.238812][ T8203] device hsr_slave_1 entered promiscuous mode [ 57.278445][ T8203] debugfs: Directory 'hsr0' with parent '/' already present! [ 57.320966][ T8209] chnl_net:caif_netlink_parms(): no params data found [ 57.334300][ T8207] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.345346][ T8207] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.374887][ T8198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.397147][ T8207] team0: Port device team_slave_0 added [ 57.416388][ T8207] team0: Port device team_slave_1 added [ 57.446647][ T8203] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 57.490625][ T8203] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 57.543239][ T8203] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 57.603759][ T8203] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 57.675751][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.684709][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.693519][ T8198] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.704999][ T8209] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.712980][ T8209] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.721854][ T8209] device bridge_slave_0 entered promiscuous mode [ 57.740064][ T8211] chnl_net:caif_netlink_parms(): no params data found [ 57.759780][ T8209] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.766871][ T8209] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.775642][ T8209] device bridge_slave_1 entered promiscuous mode [ 57.831116][ T8207] device hsr_slave_0 entered promiscuous mode [ 57.868699][ T8207] device hsr_slave_1 entered promiscuous mode [ 57.928362][ T8207] debugfs: Directory 'hsr0' with parent '/' already present! [ 57.967533][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.976458][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.985599][ T3014] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.992831][ T3014] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.001409][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.010269][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.018672][ T3014] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.025755][ T3014] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.033414][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.041888][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.050430][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.059076][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.068650][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.076986][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.085568][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.093676][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.111937][ T8209] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.129256][ T8207] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 58.187522][ T8198] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 58.198344][ T8198] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.212944][ T8209] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.248302][ T8211] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.255380][ T8211] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.263260][ T8211] device bridge_slave_0 entered promiscuous mode [ 58.271516][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.279969][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.288813][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.296982][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.305319][ T8207] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 58.400768][ T8209] team0: Port device team_slave_0 added [ 58.411443][ T8211] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.419148][ T8211] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.426933][ T8211] device bridge_slave_1 entered promiscuous mode [ 58.436042][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.445293][ T8207] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 58.514637][ T8207] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 58.574954][ T8209] team0: Port device team_slave_1 added [ 58.609563][ T8198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.627259][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.634833][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.644985][ T8211] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.701399][ T8209] device hsr_slave_0 entered promiscuous mode [ 58.728664][ T8209] device hsr_slave_1 entered promiscuous mode [ 58.778543][ T8209] debugfs: Directory 'hsr0' with parent '/' already present! [ 58.789473][ T8200] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.805794][ T8211] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.856969][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.866310][ T3014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.887905][ T8203] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.904222][ T8200] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.937257][ T8211] team0: Port device team_slave_0 added [ 58.947642][ T8211] team0: Port device team_slave_1 added [ 58.963906][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.984509][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.993211][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.000334][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.015035][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.023828][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.038451][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.045580][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.059969][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.074010][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.084609][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.099834][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.113869][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.123241][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.167364][ T8207] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.197843][ T8207] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.243905][ T8207] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 59.257380][ T8207] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.296603][ T8207] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 163.978241][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 163.985019][ C1] rcu: 1-...!: (10499 ticks this GP) idle=ace/1/0x4000000000000002 softirq=11240/11240 fqs=147 [ 163.995681][ C1] (t=10501 jiffies g=6217 q=577) [ 164.000694][ C1] rcu: rcu_preempt kthread starved for 10207 jiffies! g6217 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 164.011786][ C1] rcu: RCU grace-period kthread stack dump: [ 164.017661][ C1] rcu_preempt R running task 29104 10 2 0x80004000 [ 164.025564][ C1] Call Trace: [ 164.028850][ C1] __schedule+0x9a0/0xcc0 [ 164.033190][ C1] schedule+0x181/0x210 [ 164.037329][ C1] schedule_timeout+0x14f/0x240 [ 164.042167][ C1] ? run_local_timers+0x120/0x120 [ 164.047184][ C1] rcu_gp_kthread+0xed8/0x1770 [ 164.051951][ C1] kthread+0x332/0x350 [ 164.056013][ C1] ? rcu_report_qs_rsp+0x140/0x140 [ 164.061198][ C1] ? kthread_blkcg+0xe0/0xe0 [ 164.065781][ C1] ret_from_fork+0x24/0x30 [ 164.071244][ C1] NMI backtrace for cpu 1 [ 164.075565][ C1] CPU: 1 PID: 8220 Comm: syz-executor.0 Not tainted 5.4.0-syzkaller #0 [ 164.083782][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 164.093856][ C1] Call Trace: [ 164.097114][ C1] [ 164.099945][ C1] dump_stack+0x1fb/0x318 [ 164.104255][ C1] nmi_cpu_backtrace+0xaf/0x1a0 [ 164.109368][ C1] ? nmi_trigger_cpumask_backtrace+0x16d/0x290 [ 164.115523][ C1] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 164.121590][ C1] nmi_trigger_cpumask_backtrace+0x174/0x290 [ 164.127561][ C1] arch_trigger_cpumask_backtrace+0x10/0x20 [ 164.133430][ C1] rcu_dump_cpu_stacks+0x15a/0x220 [ 164.138520][ C1] rcu_sched_clock_irq+0xe25/0x1ad0 [ 164.143701][ C1] ? trace_hardirqs_off+0x74/0x80 [ 164.148701][ C1] update_process_times+0x12d/0x180 [ 164.153889][ C1] tick_sched_timer+0x263/0x420 [ 164.158728][ C1] ? tick_setup_sched_timer+0x3d0/0x3d0 [ 164.164257][ C1] __hrtimer_run_queues+0x403/0x840 [ 164.169436][ C1] hrtimer_interrupt+0x38c/0xda0 [ 164.174368][ C1] ? debug_smp_processor_id+0x9/0x20 [ 164.179628][ C1] smp_apic_timer_interrupt+0x109/0x280 [ 164.185145][ C1] apic_timer_interrupt+0xf/0x20 [ 164.190053][ C1] [ 164.192984][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x4/0x50 [ 164.199038][ C1] Code: 84 00 00 00 00 00 55 48 89 e5 53 48 89 fb e8 13 00 00 00 48 8b 3d 74 25 cd 07 48 89 de e8 64 02 3b 00 5b 5d c3 cc 48 8b 04 24 <65> 48 8b 0c 25 c0 1d 02 00 65 8b 15 b8 81 8b 7e f7 c2 00 01 1f 00 [ 164.218644][ C1] RSP: 0018:ffffc900021f76b0 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 164.227029][ C1] RAX: ffffffff81487433 RBX: 0000000000000000 RCX: 0000000000040000 [ 164.234992][ C1] RDX: ffffc90001e99000 RSI: 000000000003ffff RDI: 0000000000040000 [ 164.242937][ C1] RBP: ffffc900021f76d8 R08: dffffc0000000000 R09: fffffbfff120248a [ 164.250969][ C1] R10: fffffbfff120248a R11: 0000000000000000 R12: dffffc0000000000 [ 164.258915][ C1] R13: dffffc0000000000 R14: 00000000fffffffc R15: ffff88808f011568 [ 164.266880][ C1] ? mod_memcg_page_state+0x123/0x190 [ 164.272238][ C1] ? mod_memcg_page_state+0x123/0x190 [ 164.277599][ C1] free_thread_stack+0x168/0x590 [ 164.282512][ C1] put_task_stack+0xa3/0x130 [ 164.287089][ C1] finish_task_switch+0x3f1/0x550 [ 164.292092][ C1] __schedule+0x9a8/0xcc0 [ 164.296599][ C1] ? ___preempt_schedule+0x16/0x18 [ 164.301686][ C1] preempt_schedule+0xdb/0x120 [ 164.306445][ C1] ___preempt_schedule+0x16/0x18 [ 164.311487][ C1] ? page_poisoning_enabled+0x1c/0x30 [ 164.316861][ C1] prep_new_page+0x161/0x2e0 [ 164.321448][ C1] get_page_from_freelist+0x850/0xaa0 [ 164.326803][ C1] __alloc_pages_nodemask+0x264/0x5d0 [ 164.332241][ C1] alloc_pages_vma+0x94a/0xd50 [ 164.336981][ C1] do_huge_pmd_anonymous_page+0x883/0xe50 [ 164.342679][ C1] handle_mm_fault+0x2017/0x2890 [ 164.347613][ C1] do_user_addr_fault+0x589/0xaf0 [ 164.352860][ C1] __do_page_fault+0xd3/0x1f0 [ 164.357526][ C1] do_page_fault+0x99/0xb0 [ 164.361927][ C1] page_fault+0x39/0x40 [ 164.366066][ C1] RIP: 0010:copy_user_generic_unrolled+0x89/0xc0 [ 164.372370][ C1] Code: 38 4c 89 47 20 4c 89 4f 28 4c 89 57 30 4c 89 5f 38 48 8d 76 40 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 <4c> 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a [ 164.391952][ C1] RSP: 0018:ffffc900021f7e60 EFLAGS: 00010202 [ 164.398011][ C1] RAX: ffffffff838f9c01 RBX: 0000000020000108 RCX: 0000000000000001 [ 164.405957][ C1] RDX: 0000000000000000 RSI: ffffc900021f7ea8 RDI: 0000000020000100 [ 164.413902][ C1] RBP: ffffc900021f7e90 R08: 0000000400000003 R09: fffff5200043efd6 [ 164.421861][ C1] R10: fffff5200043efd6 R11: 0000000000000000 R12: 0000000000000008 [ 164.429812][ C1] R13: 00007ffffffff000 R14: ffffc900021f7ea8 R15: 0000000020000100 [ 164.437783][ C1] ? _copy_to_user+0x11/0x150 [ 164.442436][ C1] ? _copy_to_user+0x104/0x150 [ 164.447185][ C1] do_pipe2+0x79/0x230 [ 164.451236][ C1] __x64_sys_pipe+0x3a/0x40 [ 164.455714][ C1] do_syscall_64+0xf7/0x1c0 [ 164.460198][ C1] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 164.466078][ C1] RIP: 0033:0x45a679 [ 164.469960][ C1] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 164.490514][ C1] RSP: 002b:00007fa089b3dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 164.498927][ C1] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 000000000045a679 [ 164.506894][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000100 [ 164.514852][ C1] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 164.522894][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa089b3e6d4 [ 164.530853][ C1] R13: 00000000004fa2a7 R14: 00000000004df950 R15: 00000000ffffffff