[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 61.683031][ T26] audit: type=1800 audit(1574141197.803:25): pid=8777 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 61.713437][ T26] audit: type=1800 audit(1574141197.803:26): pid=8777 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 61.766943][ T26] audit: type=1800 audit(1574141197.803:27): pid=8777 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.47' (ECDSA) to the list of known hosts. 2019/11/19 05:26:49 fuzzer started 2019/11/19 05:26:51 dialing manager at 10.128.0.26:39077 2019/11/19 05:26:51 syscalls: 2566 2019/11/19 05:26:51 code coverage: enabled 2019/11/19 05:26:51 comparison tracing: enabled 2019/11/19 05:26:51 extra coverage: enabled 2019/11/19 05:26:51 setuid sandbox: enabled 2019/11/19 05:26:51 namespace sandbox: enabled 2019/11/19 05:26:51 Android sandbox: /sys/fs/selinux/policy does not exist 2019/11/19 05:26:51 fault injection: enabled 2019/11/19 05:26:51 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/11/19 05:26:51 net packet injection: enabled 2019/11/19 05:26:51 net device setup: enabled 2019/11/19 05:26:51 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/11/19 05:26:51 devlink PCI setup: PCI device 0000:00:10.0 is not available 05:29:03 executing program 0: 05:29:03 executing program 1: syzkaller login: [ 207.214512][ T8943] IPVS: ftp: loaded support on port[0] = 21 [ 207.303739][ T8945] IPVS: ftp: loaded support on port[0] = 21 [ 207.372787][ T8943] chnl_net:caif_netlink_parms(): no params data found 05:29:03 executing program 2: [ 207.467587][ T8943] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.488743][ T8943] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.504879][ T8943] device bridge_slave_0 entered promiscuous mode [ 207.572361][ T8943] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.593725][ T8943] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.603242][ T8943] device bridge_slave_1 entered promiscuous mode [ 207.657195][ T8950] IPVS: ftp: loaded support on port[0] = 21 [ 207.675749][ T8943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.689106][ T8943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 05:29:03 executing program 3: [ 207.723584][ T8945] chnl_net:caif_netlink_parms(): no params data found [ 207.735712][ T8943] team0: Port device team_slave_0 added [ 207.749112][ T8943] team0: Port device team_slave_1 added [ 207.826925][ T8943] device hsr_slave_0 entered promiscuous mode [ 207.884431][ T8943] device hsr_slave_1 entered promiscuous mode [ 207.975045][ T8952] IPVS: ftp: loaded support on port[0] = 21 [ 208.043292][ T8945] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.050664][ T8945] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.058798][ T8945] device bridge_slave_0 entered promiscuous mode 05:29:04 executing program 4: [ 208.098147][ T8945] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.105738][ T8945] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.114494][ T8945] device bridge_slave_1 entered promiscuous mode [ 208.121651][ T8943] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 208.258254][ T8943] netdevsim netdevsim0 netdevsim1: renamed from eth1 05:29:04 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r0 = syz_open_dev$sndpcmc(0x0, 0x0, 0x0) ioctl$RTC_EPOCH_SET(r0, 0x40044160, 0x5) [ 208.320772][ T8943] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 208.376927][ T8945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.407215][ T8943] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 208.473916][ T8945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.494143][ T8950] chnl_net:caif_netlink_parms(): no params data found [ 208.531804][ T8955] IPVS: ftp: loaded support on port[0] = 21 [ 208.566463][ T8950] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.573653][ T8950] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.581584][ T8950] device bridge_slave_0 entered promiscuous mode [ 208.594167][ T8945] team0: Port device team_slave_0 added [ 208.606488][ T8957] IPVS: ftp: loaded support on port[0] = 21 [ 208.647796][ T8950] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.655960][ T8950] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.663869][ T8950] device bridge_slave_1 entered promiscuous mode [ 208.672131][ T8945] team0: Port device team_slave_1 added [ 208.746123][ T8945] device hsr_slave_0 entered promiscuous mode [ 208.794040][ T8945] device hsr_slave_1 entered promiscuous mode [ 208.843530][ T8945] debugfs: Directory 'hsr0' with parent '/' already present! [ 208.869850][ T8952] chnl_net:caif_netlink_parms(): no params data found [ 208.890074][ T8950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.915898][ T8950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.982297][ T8945] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 209.062737][ T8945] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 209.108210][ T8945] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 209.165697][ T8945] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 209.221683][ T8950] team0: Port device team_slave_0 added [ 209.242360][ T8950] team0: Port device team_slave_1 added [ 209.250788][ T8952] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.258417][ T8952] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.266405][ T8952] device bridge_slave_0 entered promiscuous mode [ 209.325761][ T8950] device hsr_slave_0 entered promiscuous mode [ 209.373985][ T8950] device hsr_slave_1 entered promiscuous mode [ 209.413581][ T8950] debugfs: Directory 'hsr0' with parent '/' already present! [ 209.452020][ T8952] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.459633][ T8952] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.468272][ T8952] device bridge_slave_1 entered promiscuous mode [ 209.487440][ T8943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.542980][ T8943] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.553737][ T8952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.569207][ T8952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.585135][ T8960] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 209.595934][ T8960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 209.641460][ T8952] team0: Port device team_slave_0 added [ 209.648121][ T8960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 209.657381][ T8960] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 209.666134][ T8960] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.673384][ T8960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.682990][ T8960] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 209.692768][ T8957] chnl_net:caif_netlink_parms(): no params data found [ 209.714090][ T8950] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 209.786752][ T8952] team0: Port device team_slave_1 added [ 209.812440][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 209.821757][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 209.830428][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.837527][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.846894][ T8950] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 209.915511][ T8950] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 209.955515][ T8950] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 210.018604][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 210.051326][ T8955] chnl_net:caif_netlink_parms(): no params data found [ 210.074457][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 210.083036][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 210.092729][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 210.101368][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 210.119217][ T8957] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.127258][ T8957] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.135215][ T8957] device bridge_slave_0 entered promiscuous mode [ 210.195440][ T8952] device hsr_slave_0 entered promiscuous mode [ 210.243817][ T8952] device hsr_slave_1 entered promiscuous mode [ 210.303723][ T8952] debugfs: Directory 'hsr0' with parent '/' already present! [ 210.314949][ T8960] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 210.328425][ T8960] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 210.337394][ T8957] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.345182][ T8957] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.353065][ T8957] device bridge_slave_1 entered promiscuous mode [ 210.379423][ T8945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.437591][ T8957] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.449166][ T8957] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.460883][ T8959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 210.469556][ T8959] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 210.478881][ T8955] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.486192][ T8955] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.494377][ T8955] device bridge_slave_0 entered promiscuous mode [ 210.506623][ T8943] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 210.518666][ T8943] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 210.544501][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 210.552966][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 210.564590][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 210.572427][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 210.582630][ T8955] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.590172][ T8955] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.598029][ T8955] device bridge_slave_1 entered promiscuous mode [ 210.609907][ T8945] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.618324][ T8952] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 210.666753][ T8952] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 210.705245][ T8952] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 210.763951][ T8957] team0: Port device team_slave_0 added [ 210.771889][ T8957] team0: Port device team_slave_1 added [ 210.791155][ T8952] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 210.829329][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 210.838486][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 210.847160][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.854284][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.863022][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 210.906839][ T8959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 210.916904][ T8959] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 210.925445][ T8959] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.932487][ T8959] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.940492][ T8959] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 210.948341][ T8959] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 210.958285][ T8955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.970866][ T8955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.985172][ T8943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.056252][ T8957] device hsr_slave_0 entered promiscuous mode [ 211.104274][ T8957] device hsr_slave_1 entered promiscuous mode [ 211.173506][ T8957] debugfs: Directory 'hsr0' with parent '/' already present! [ 211.186827][ T3036] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 211.209061][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 211.221069][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 211.229959][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 211.242796][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 211.318032][ T8947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 211.330028][ T8947] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 211.338797][ T8947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 211.347580][ T8947] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 211.356060][ T8947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 211.365691][ T8947] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 211.377933][ T8955] team0: Port device team_slave_0 added [ 211.385600][ T8945] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 05:29:07 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000000000)) 05:29:07 executing program 0: [ 211.443531][ T8955] team0: Port device team_slave_1 added [ 211.474707][ T8957] netdevsim netdevsim5 netdevsim0: renamed from eth0 05:29:07 executing program 0: 05:29:07 executing program 0: [ 211.525868][ T8957] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 211.585768][ T8957] netdevsim netdevsim5 netdevsim2: renamed from eth2 05:29:07 executing program 0: 05:29:07 executing program 0: [ 211.626931][ T8952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.645897][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 211.658596][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 05:29:07 executing program 0: [ 211.703210][ T8957] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 211.767092][ T8945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.808299][ T8955] device hsr_slave_0 entered promiscuous mode [ 211.853895][ T8955] device hsr_slave_1 entered promiscuous mode [ 211.883453][ T8955] debugfs: Directory 'hsr0' with parent '/' already present! [ 211.899549][ T8952] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.932601][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 211.940394][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 211.990102][ T8950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.016182][ T3036] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 212.027074][ T3036] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready 05:29:08 executing program 1: [ 212.035869][ T3036] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.042972][ T3036] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.104308][ T8950] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.113732][ T8959] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 212.121850][ T8959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 212.132086][ T8959] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 212.142724][ T8959] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.149869][ T8959] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.160681][ T8959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 212.169730][ T8959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 212.182392][ T8959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 212.198355][ T8959] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 212.209014][ T8959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 212.219034][ T8959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 212.230561][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 212.240681][ T8955] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 212.322293][ T8955] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 212.397641][ T8957] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.404821][ T8955] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 212.478623][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 212.487387][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 212.496344][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 212.504814][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 212.515107][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 212.523960][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 212.555793][ T8955] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 212.595052][ T3036] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 212.605164][ T3036] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 212.614143][ T3036] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.621304][ T3036] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.629152][ T3036] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 212.638039][ T3036] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 212.647015][ T3036] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.654138][ T3036] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.661706][ T3036] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 212.674719][ T3036] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 212.683240][ T3036] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 212.691944][ T3036] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 212.700773][ T3036] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 212.708741][ T3036] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 212.727790][ T8957] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.738533][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 212.750145][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 212.758326][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 212.767636][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 212.803215][ T8950] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 212.814874][ T8950] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 212.831054][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 212.840760][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 212.849846][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.856963][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.867933][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 212.876884][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 212.885464][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.892529][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.900577][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 212.909757][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 212.918241][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 212.926750][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 212.935579][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 212.948277][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 212.956837][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 212.965090][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 213.003232][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 213.012165][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 213.021220][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 213.030288][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 213.038846][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 213.046354][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 213.054078][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 213.061488][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 213.074051][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 213.081923][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 213.090423][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 213.106474][ T8950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.120358][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 213.129493][ T64] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 213.144753][ T8952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.155987][ T8957] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 213.190675][ T8947] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 213.198354][ T8947] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 213.209435][ T8957] 8021q: adding VLAN 0 to HW filter on device batadv0 05:29:09 executing program 2: [ 213.331915][ T8955] 8021q: adding VLAN 0 to HW filter on device bond0 05:29:09 executing program 3: [ 213.386430][ T8959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 213.395626][ T8959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 213.417302][ T8955] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.481052][ T8964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 213.490410][ T8964] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 213.524672][ T8964] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.531804][ T8964] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.557889][ T8959] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 213.566039][ T8959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 213.580907][ T8959] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 213.603538][ T8959] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.610637][ T8959] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.626521][ T8959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 213.657451][ T8959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 213.674894][ T8959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 213.684256][ T8959] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 213.700024][ T8959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 213.709467][ T8959] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 213.722937][ T3036] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 213.731003][ T3036] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 213.740013][ T3036] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 213.754882][ T8955] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 213.772083][ T8955] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 213.784240][ T8959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 213.793087][ T8959] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 213.820821][ T3036] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 213.828782][ T3036] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 213.845522][ T8955] 8021q: adding VLAN 0 to HW filter on device batadv0 05:29:10 executing program 4: 05:29:10 executing program 0: 05:29:10 executing program 1: 05:29:10 executing program 2: 05:29:10 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(0x0, 0x8001141042, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000240)=@req3={0x10000, 0x100000001, 0x0, 0x1}, 0x1c) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xe, 0x0, 0x0) write(r1, &(0x7f0000000000), 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpu.stat\x00', 0x0, 0x0) ioctl$VT_RESIZE(r2, 0x5609, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x62a, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) lstat(0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6(0xa, 0x49c68e0740a3058b, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000580)={{{@in=@multicast1, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4e20, 0x0, 0x0, 0x2, 0xa, 0x0, 0x80, 0x33, 0x0, r3}, {0x3fde27fc, 0x7fffffff, 0x0, 0x0, 0x5, 0x7, 0x2000000000004, 0x1}, {0x0, 0x3, 0x7ff, 0x5}, 0x0, 0x6e6bb8, 0x6, 0x1, 0x0, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x10}, 0x4d5}, 0xa, @in6=@mcast1, 0x0, 0x8476f732d1874694, 0x0, 0xb8, 0x0, 0x4e9}}, 0xe8) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x807f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200}, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x2000) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8138ae83, &(0x7f0000000680)) fchdir(r4) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x0) 05:29:10 executing program 5: 05:29:10 executing program 4: [ 214.060621][ C0] hrtimer: interrupt took 32487 ns 05:29:10 executing program 5: 05:29:10 executing program 0: 05:29:10 executing program 2: 05:29:10 executing program 1: 05:29:10 executing program 4: 05:29:10 executing program 2: 05:29:10 executing program 5: 05:29:10 executing program 1: 05:29:10 executing program 0: [ 319.473317][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 319.480108][ C1] rcu: 1-....: (1 GPs behind) idle=466/1/0x4000000000000002 softirq=13819/13820 fqs=5249 [ 319.490238][ C1] (t=10502 jiffies g=8917 q=1392) [ 319.495351][ C1] NMI backtrace for cpu 1 [ 319.499673][ C1] CPU: 1 PID: 9016 Comm: syz-executor.3 Not tainted 5.4.0-rc7-next-20191115 #0 [ 319.508663][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 319.518692][ C1] Call Trace: [ 319.521950][ C1] [ 319.524851][ C1] dump_stack+0x197/0x210 [ 319.529185][ C1] nmi_cpu_backtrace.cold+0x70/0xb2 [ 319.534374][ C1] ? lapic_can_unplug_cpu.cold+0x3a/0x3a [ 319.539979][ C1] nmi_trigger_cpumask_backtrace+0x23b/0x28b [ 319.545937][ C1] arch_trigger_cpumask_backtrace+0x14/0x20 [ 319.551804][ C1] rcu_dump_cpu_stacks+0x183/0x1cf [ 319.556941][ C1] ? find_next_bit+0x107/0x130 [ 319.561687][ C1] rcu_sched_clock_irq.cold+0x509/0xc02 [ 319.567208][ C1] ? raise_softirq+0x138/0x340 [ 319.571960][ C1] update_process_times+0x2d/0x70 [ 319.576959][ C1] tick_sched_handle+0xa2/0x190 [ 319.581781][ C1] tick_sched_timer+0x53/0x140 [ 319.586520][ C1] __hrtimer_run_queues+0x364/0xe40 [ 319.591695][ C1] ? tick_sched_do_timer+0x1b0/0x1b0 [ 319.596972][ C1] ? hrtimer_init+0x330/0x330 [ 319.601622][ C1] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 319.607316][ C1] ? ktime_get_update_offsets_now+0x2ce/0x430 [ 319.613368][ C1] hrtimer_interrupt+0x314/0x770 [ 319.618324][ C1] smp_apic_timer_interrupt+0x160/0x610 [ 319.623854][ C1] apic_timer_interrupt+0xf/0x20 [ 319.628761][ C1] [ 319.631677][ C1] RIP: 0010:irq_work_sync+0xd3/0x1d0 [ 319.636941][ C1] Code: f5 ff 4d 89 e6 4d 89 e5 48 b8 00 00 00 00 00 fc ff df 49 c1 ee 03 41 83 e5 07 49 01 c6 41 83 c5 03 eb 07 e8 7f 87 f5 ff f3 90 78 87 f5 ff be 04 00 00 00 4c 89 e7 e8 ab a6 31 00 41 0f b6 06 [ 319.656579][ C1] RSP: 0018:ffff88805c0c7c08 EFLAGS: 00000293 ORIG_RAX: ffffffffffffff13 [ 319.665021][ C1] RAX: ffff88805c0ba080 RBX: 0000000000000002 RCX: ffffffff817e51f6 [ 319.672977][ C1] RDX: 0000000000000000 RSI: ffffffff817e51c1 RDI: 0000000000000005 [ 319.680934][ C1] RBP: ffff88805c0c7c28 R08: ffff88805c0ba080 R09: ffffed1012f19682 [ 319.688923][ C1] R10: ffffed1012f19681 R11: ffff8880978cb40b R12: ffff8880978cb408 [ 319.696888][ C1] R13: 0000000000000003 R14: ffffed1012f19681 R15: ffff88805c0c7cc8 [ 319.705074][ C1] ? irq_work_sync+0x106/0x1d0 [ 319.709819][ C1] ? irq_work_sync+0xd1/0x1d0 [ 319.714476][ C1] ? irq_work_sync+0xd1/0x1d0 [ 319.719174][ C1] _free_event+0x89/0x13b0 [ 319.723571][ C1] ? __kasan_check_write+0x14/0x20 [ 319.728665][ C1] ? __mutex_unlock_slowpath+0xf0/0x6a0 [ 319.734194][ C1] ? mark_held_locks+0xa4/0xf0 [ 319.738973][ C1] ? ring_buffer_attach+0x650/0x650 [ 319.744151][ C1] ? wait_for_completion+0x440/0x440 [ 319.749423][ C1] put_event+0x47/0x60 [ 319.753469][ C1] perf_event_release_kernel+0x6d5/0xd70 [ 319.759078][ C1] ? __perf_event_exit_context+0x170/0x170 [ 319.764859][ C1] ? fasync_helper+0x6e/0xb2 [ 319.769425][ C1] perf_release+0x37/0x50 [ 319.773734][ C1] __fput+0x2ff/0x890 [ 319.777692][ C1] ? perf_event_release_kernel+0xd70/0xd70 [ 319.783471][ C1] ____fput+0x16/0x20 [ 319.787440][ C1] task_work_run+0x145/0x1c0 [ 319.792012][ C1] exit_to_usermode_loop+0x316/0x380 [ 319.797273][ C1] do_syscall_64+0x676/0x790 [ 319.801863][ C1] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 319.807730][ C1] RIP: 0033:0x4141d1 [ 319.811606][ C1] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 319.831183][ C1] RSP: 002b:00007ffcdbcdc8f0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 319.839575][ C1] RAX: 0000000000000000 RBX: 0000000000000007 RCX: 00000000004141d1 [ 319.847522][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 319.855468][ C1] RBP: 0000000000000001 R08: 0000000034194edd R09: 0000000034194ee1 [ 319.863414][ C1] R10: 00007ffcdbcdc9d0 R11: 0000000000000293 R12: 000000000075c9a0 [ 319.871359][ C1] R13: 000000000075c9a0 R14: 0000000000762c38 R15: 000000000075bfd4