[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 52.018082][ T23] audit: type=1800 audit(1578455001.939:25): pid=8359 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 52.037282][ T23] audit: type=1800 audit(1578455001.939:26): pid=8359 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 52.058430][ T23] audit: type=1800 audit(1578455001.939:27): pid=8359 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.35' (ECDSA) to the list of known hosts. 2020/01/08 03:43:32 fuzzer started 2020/01/08 03:43:34 dialing manager at 10.128.0.26:35703 2020/01/08 03:43:34 syscalls: 2824 2020/01/08 03:43:34 code coverage: enabled 2020/01/08 03:43:34 comparison tracing: enabled 2020/01/08 03:43:34 extra coverage: enabled 2020/01/08 03:43:34 setuid sandbox: enabled 2020/01/08 03:43:34 namespace sandbox: enabled 2020/01/08 03:43:34 Android sandbox: /sys/fs/selinux/policy does not exist 2020/01/08 03:43:34 fault injection: enabled 2020/01/08 03:43:34 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/01/08 03:43:34 net packet injection: enabled 2020/01/08 03:43:34 net device setup: enabled 2020/01/08 03:43:34 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/01/08 03:43:34 devlink PCI setup: PCI device 0000:00:10.0 is not available 03:43:35 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) shutdown(r0, 0x0) 03:43:36 executing program 1: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f000060d000)=[{{0x0, 0x0, &(0x7f0000c38ff0)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x8000) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f000081e000)=ANY=[@ANYRES32=0x0, @ANYBLOB="020024000300"], 0x2de) syzkaller login: [ 66.244787][ T8525] IPVS: ftp: loaded support on port[0] = 21 03:43:36 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000500)=@ipv6_newroute={0x2c, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_PRIORITY={0x8, 0x6, 0x4}, @RTA_OIF={0x8}]}, 0x2c}}, 0x0) [ 66.293823][ T8527] IPVS: ftp: loaded support on port[0] = 21 [ 66.478751][ T8525] chnl_net:caif_netlink_parms(): no params data found [ 66.519222][ T8530] IPVS: ftp: loaded support on port[0] = 21 03:43:36 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4009}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f00000018c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83CZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x00\x00\x00\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8dx\xd5\x1dU*s)\x12[\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xddeF>29\v\x02\xa2b\x13R\xef\xffA,\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x81\x10:\x0e(\xdd\xfc\xc9\xc6\xb4\xf0\'f:\xbd\xfe\x11\xf8\xc8W\x81s^\xd9W\xf1\x94\xaf\xc5\x8a\xb4f\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2A') [ 66.591530][ T8527] chnl_net:caif_netlink_parms(): no params data found [ 66.623173][ T8525] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.631967][ T8525] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.641171][ T8525] device bridge_slave_0 entered promiscuous mode [ 66.674870][ T8525] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.688171][ T8525] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.707424][ T8525] device bridge_slave_1 entered promiscuous mode [ 66.784270][ T8527] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.792713][ T8527] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.800651][ T8527] device bridge_slave_0 entered promiscuous mode [ 66.823048][ T8525] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.848717][ T8525] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.868345][ T8527] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.875521][ T8527] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.883650][ T8527] device bridge_slave_1 entered promiscuous mode 03:43:36 executing program 4: getsockname$unix(0xffffffffffffffff, 0x0, 0x0) munmap(&(0x7f000050f000/0x1000)=nil, 0x1000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, &(0x7f0000000140)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) socket(0x8, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$FUSE_INTERRUPT(r1, &(0x7f0000000100)={0x10}, 0x10) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fcntl$dupfd(0xffffffffffffffff, 0x0, r3) bind$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000100)={0x10}, 0x10) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = fcntl$dupfd(r4, 0x0, r4) bind$bt_rfcomm(r5, 0x0, 0x0) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, 0x0) openat$cgroup(r2, 0x0, 0x200002, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xfffffffffffffce9, 0x0, 0x0, 0x0) syz_read_part_table(0x0, 0x0, 0x0) [ 66.902027][ T8530] chnl_net:caif_netlink_parms(): no params data found [ 66.932453][ T8534] IPVS: ftp: loaded support on port[0] = 21 [ 66.969421][ T8525] team0: Port device team_slave_0 added [ 66.988580][ T8527] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.998770][ T8525] team0: Port device team_slave_1 added [ 67.049963][ T8527] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.100067][ T8527] team0: Port device team_slave_0 added [ 67.135608][ T8527] team0: Port device team_slave_1 added [ 67.142608][ T8530] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.150362][ T8530] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.166257][ T8530] device bridge_slave_0 entered promiscuous mode 03:43:37 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f00001c3000)={&(0x7f0000014000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000840)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/168, 0xa8}], 0x1}}, @rdma_args={0x48, 0x114, 0x4, {{}, {0x0}, 0x0, 0x40000}}], 0x90}, 0x0) [ 67.220976][ T8525] device hsr_slave_0 entered promiscuous mode [ 67.286815][ T8525] device hsr_slave_1 entered promiscuous mode [ 67.338157][ T8530] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.345240][ T8530] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.353171][ T8530] device bridge_slave_1 entered promiscuous mode [ 67.380241][ T8538] IPVS: ftp: loaded support on port[0] = 21 [ 67.449335][ T8527] device hsr_slave_0 entered promiscuous mode [ 67.486852][ T8527] device hsr_slave_1 entered promiscuous mode [ 67.526710][ T8527] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.534452][ T8527] Cannot create hsr debugfs directory [ 67.541677][ T8530] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.572987][ T8536] IPVS: ftp: loaded support on port[0] = 21 [ 67.581599][ T8530] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.641137][ T8530] team0: Port device team_slave_0 added [ 67.650999][ T8530] team0: Port device team_slave_1 added [ 67.789173][ T8530] device hsr_slave_0 entered promiscuous mode [ 67.827094][ T8530] device hsr_slave_1 entered promiscuous mode [ 67.866612][ T8530] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.874168][ T8530] Cannot create hsr debugfs directory [ 67.898964][ T8534] chnl_net:caif_netlink_parms(): no params data found [ 67.928054][ T8525] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.001234][ T8525] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.070824][ T8525] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.162237][ T8525] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.272959][ T8527] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 68.338520][ T8538] chnl_net:caif_netlink_parms(): no params data found [ 68.380838][ T8527] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 68.438539][ T8527] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 68.508803][ T8534] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.515875][ T8534] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.523735][ T8534] device bridge_slave_0 entered promiscuous mode [ 68.534321][ T8534] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.541403][ T8534] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.549830][ T8534] device bridge_slave_1 entered promiscuous mode [ 68.557467][ T8536] chnl_net:caif_netlink_parms(): no params data found [ 68.577820][ T8538] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.584954][ T8538] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.593953][ T8538] device bridge_slave_0 entered promiscuous mode [ 68.601055][ T8527] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 68.671813][ T8538] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.679017][ T8538] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.686836][ T8538] device bridge_slave_1 entered promiscuous mode [ 68.713093][ T8534] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.731909][ T8538] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.743966][ T8538] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.754904][ T8534] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.837421][ T8538] team0: Port device team_slave_0 added [ 68.845594][ T8534] team0: Port device team_slave_0 added [ 68.854640][ T8534] team0: Port device team_slave_1 added [ 68.864020][ T8536] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.871174][ T8536] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.871873][ T8536] device bridge_slave_0 entered promiscuous mode [ 68.888097][ T8538] team0: Port device team_slave_1 added [ 68.893827][ T8530] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 68.928643][ T8530] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 68.968264][ T8530] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.022123][ T8530] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.058066][ T8536] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.065135][ T8536] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.072997][ T8536] device bridge_slave_1 entered promiscuous mode [ 69.148703][ T8534] device hsr_slave_0 entered promiscuous mode [ 69.206816][ T8534] device hsr_slave_1 entered promiscuous mode [ 69.246590][ T8534] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.254162][ T8534] Cannot create hsr debugfs directory [ 69.339258][ T8538] device hsr_slave_0 entered promiscuous mode [ 69.396946][ T8538] device hsr_slave_1 entered promiscuous mode [ 69.436663][ T8538] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.444280][ T8538] Cannot create hsr debugfs directory [ 69.469452][ T8536] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.485549][ T8536] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.503276][ T8525] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.534639][ T8536] team0: Port device team_slave_0 added [ 69.544810][ T8527] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.565491][ T8536] team0: Port device team_slave_1 added [ 69.592336][ T8525] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.627852][ T2878] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.636039][ T2878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.648386][ T8527] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.683240][ T3207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.695314][ T3207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.703524][ T3207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.712158][ T3207] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.720831][ T3207] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.728043][ T3207] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.736018][ T3207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.745368][ T3207] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.753891][ T3207] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.762806][ T3207] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.770663][ T3207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.779361][ T3207] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.787651][ T3207] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.794667][ T3207] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.868178][ T8536] device hsr_slave_0 entered promiscuous mode [ 69.906803][ T8536] device hsr_slave_1 entered promiscuous mode [ 69.947353][ T8536] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.954925][ T8536] Cannot create hsr debugfs directory [ 69.964955][ T8534] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.019107][ T3207] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.026960][ T3207] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.034660][ T3207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.043317][ T3207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.051883][ T3207] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.061159][ T3207] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.068690][ T3207] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.076752][ T3207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.085159][ T3207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.093908][ T3207] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.102191][ T3207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.111039][ T3207] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.125883][ T8525] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 70.137576][ T8525] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.160650][ T8534] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.219460][ T3216] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.229109][ T3216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.238844][ T3216] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.247642][ T3216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.256788][ T3216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.265157][ T3216] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.273418][ T3216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.282152][ T3216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.290715][ T3216] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.300758][ T3216] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.308528][ T3216] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.329354][ T8534] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.405014][ T8530] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.431343][ T3207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.444644][ T3207] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.453500][ T3207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.462457][ T3207] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.470879][ T3207] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.478383][ T3207] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.485820][ T8534] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.550850][ T8538] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 70.614015][ T8538] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 70.672144][ T8525] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.683603][ T8527] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.694910][ T8527] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.716609][ T8538] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 70.738768][ T8538] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 70.778294][ T2809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.790067][ T2809] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.798172][ T2809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.805679][ T2809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.820597][ T8530] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.867625][ T8527] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.875513][ T3211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.884447][ T3211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.893859][ T3211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.902428][ T3211] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.910736][ T3211] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.917820][ T3211] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.925315][ T3211] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.933078][ T3211] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.940947][ T3211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.949907][ T3211] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.958545][ T3211] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.965584][ T3211] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.973137][ T3211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.983412][ T3211] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.006898][ T3216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.025824][ T8530] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.039320][ T8530] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.083780][ T3216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.092920][ T3216] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.102787][ T3216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.111745][ T3216] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.120468][ T3216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.128699][ T3216] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.137035][ T3216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.145158][ T3216] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.153819][ T3216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.162031][ T3216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.171224][ T3216] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.178924][ T3216] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.186388][ T3216] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.194303][ T3216] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.204567][ T8525] device veth0_vlan entered promiscuous mode [ 71.222586][ T8536] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 71.268539][ T8536] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 71.312727][ T8525] device veth1_vlan entered promiscuous mode [ 71.320276][ T2878] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.327843][ T2878] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.341058][ T8530] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.356624][ T3216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.365181][ T3216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.374552][ T8536] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 71.429666][ T8536] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 71.508120][ T8534] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.531114][ T2878] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.540466][ T2878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.556229][ T8527] device veth0_vlan entered promiscuous mode [ 71.577079][ T3211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.585213][ T3211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.594446][ T3211] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.603268][ T3211] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.626741][ T2878] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.634800][ T2878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.672311][ T8527] device veth1_vlan entered promiscuous mode [ 176.696455][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 176.703380][ C0] rcu: 0-...!: (10499 ticks this GP) idle=6c6/1/0x4000000000000002 softirq=14437/14437 fqs=41 [ 176.714052][ C0] (t=10501 jiffies g=6881 q=77) [ 176.718991][ C0] rcu: rcu_preempt kthread starved for 10420 jiffies! g6881 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 176.730077][ C0] rcu: RCU grace-period kthread stack dump: [ 176.735955][ C0] rcu_preempt R running task 28992 10 2 0x80004000 [ 176.743857][ C0] Call Trace: [ 176.747150][ C0] __schedule+0x9a0/0xcc0 [ 176.751480][ C0] schedule+0x181/0x210 [ 176.755631][ C0] schedule_timeout+0x14f/0x240 [ 176.760473][ C0] ? run_local_timers+0x120/0x120 [ 176.765489][ C0] rcu_gp_kthread+0xed8/0x1770 [ 176.770251][ C0] kthread+0x332/0x350 [ 176.774304][ C0] ? rcu_report_qs_rsp+0x140/0x140 [ 176.779402][ C0] ? kthread_blkcg+0xe0/0xe0 [ 176.784006][ C0] ret_from_fork+0x24/0x30 [ 176.788431][ C0] NMI backtrace for cpu 0 [ 176.792760][ C0] CPU: 0 PID: 8527 Comm: syz-executor.1 Not tainted 5.5.0-rc5-syzkaller #0 [ 176.801335][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 176.811378][ C0] Call Trace: [ 176.814655][ C0] [ 176.817498][ C0] dump_stack+0x1fb/0x318 [ 176.821820][ C0] nmi_cpu_backtrace+0xaf/0x1a0 [ 176.826660][ C0] ? nmi_trigger_cpumask_backtrace+0x16d/0x290 [ 176.832804][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 176.838858][ C0] nmi_trigger_cpumask_backtrace+0x174/0x290 [ 176.844824][ C0] arch_trigger_cpumask_backtrace+0x10/0x20 [ 176.850704][ C0] rcu_dump_cpu_stacks+0x15a/0x220 [ 176.855815][ C0] rcu_sched_clock_irq+0xe25/0x1ad0 [ 176.861005][ C0] ? trace_hardirqs_off+0x74/0x80 [ 176.866021][ C0] update_process_times+0x12d/0x180 [ 176.871211][ C0] tick_sched_timer+0x263/0x420 [ 176.876048][ C0] ? tick_setup_sched_timer+0x3d0/0x3d0 [ 176.881590][ C0] __hrtimer_run_queues+0x403/0x840 [ 176.886793][ C0] hrtimer_interrupt+0x38c/0xda0 [ 176.891744][ C0] ? debug_smp_processor_id+0x9/0x20 [ 176.897021][ C0] smp_apic_timer_interrupt+0x109/0x280 [ 176.902553][ C0] apic_timer_interrupt+0xf/0x20 [ 176.907576][ C0] [ 176.910501][ C0] RIP: 0010:__memcg_kmem_uncharge+0xd/0x1a0 [ 176.916380][ C0] Code: 81 c3 08 02 00 00 48 89 df 4c 89 f6 e8 8c 85 ff ff 5b 41 5e 5d c3 0f 1f 80 00 00 00 00 55 48 89 e5 41 57 41 56 41 55 41 54 53 <50> 89 f3 49 89 fc 48 b8 00 00 00 00 00 fc ff df 4c 8d 77 38 4d 89 [ 176.935971][ C0] RSP: 0018:ffffc90001db6f00 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 176.944369][ C0] RAX: ffffffff81489244 RBX: ffffea000237b740 RCX: ffff888097722380 [ 176.952337][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffea000237b740 [ 176.960294][ C0] RBP: ffffc90001db6f28 R08: 000000000003a728 R09: ffffed101228db39 [ 176.968249][ C0] R10: ffffed101228db39 R11: 0000000000000000 R12: ffff8880908efaa0 [ 176.976207][ C0] R13: dffffc0000000000 R14: 1ffff1101211df54 R15: ffff88809146d9b8 [ 176.984176][ C0] ? free_thread_stack+0x124/0x590 [ 176.989285][ C0] free_thread_stack+0x12e/0x590 [ 176.994209][ C0] put_task_stack+0xa3/0x130 [ 176.998787][ C0] finish_task_switch+0x3f1/0x550 [ 177.003803][ C0] __schedule+0x9a8/0xcc0 [ 177.008130][ C0] ? ___preempt_schedule+0x16/0x18 [ 177.013226][ C0] preempt_schedule+0xdb/0x120 [ 177.017988][ C0] ? dev_uc_add+0x3c7/0x4b0 [ 177.022475][ C0] ___preempt_schedule+0x16/0x18 [ 177.027398][ C0] ? mark_lock+0x107/0x1650 [ 177.031886][ C0] __local_bh_enable_ip+0x17d/0x240 [ 177.037071][ C0] ? dev_uc_add+0x3c7/0x4b0 [ 177.041561][ C0] _raw_spin_unlock_bh+0x2f/0x40 [ 177.046484][ C0] dev_uc_add+0x3c7/0x4b0 [ 177.050807][ C0] macvlan_open+0x52e/0x9a0 [ 177.055304][ C0] __dev_open+0x284/0x420 [ 177.059628][ C0] __dev_change_flags+0x1a8/0x680 [ 177.064638][ C0] ? kfree+0x194/0x200 [ 177.068696][ C0] dev_change_flags+0x8a/0x190 [ 177.073455][ C0] do_setlink+0xb2e/0x3960 [ 177.077867][ C0] ? __nla_validate_parse+0x18cd/0x1f40 [ 177.083498][ C0] ? __kasan_check_read+0x11/0x20 [ 177.088516][ C0] rtnl_newlink+0x14dd/0x1bd0 [ 177.093189][ C0] ? rtnl_newlink+0x351/0x1bd0 [ 177.097947][ C0] ? finish_lock_switch+0x31/0x40 [ 177.103004][ C0] ? __mutex_lock_common+0x1b20/0x2e10 [ 177.108453][ C0] ? rtnetlink_rcv_msg+0x83c/0xd40 [ 177.113574][ C0] ? rtnl_setlink+0x490/0x490 [ 177.118237][ C0] rtnetlink_rcv_msg+0x889/0xd40 [ 177.123167][ C0] ? __local_bh_enable_ip+0x13a/0x240 [ 177.128525][ C0] ? local_bh_enable+0x9/0x30 [ 177.133187][ C0] ? trace_hardirqs_on+0x74/0x80 [ 177.138113][ C0] ? __local_bh_enable_ip+0x13a/0x240 [ 177.143473][ C0] ? local_bh_enable+0x1f/0x30 [ 177.148226][ C0] ? rcu_lock_release+0x9/0x30 [ 177.152984][ C0] ? rcu_lock_release+0x9/0x30 [ 177.157746][ C0] netlink_rcv_skb+0x19e/0x3d0 [ 177.162498][ C0] ? rtnetlink_bind+0x80/0x80 [ 177.167167][ C0] rtnetlink_rcv+0x1c/0x20 [ 177.171574][ C0] netlink_unicast+0x767/0x920 [ 177.176331][ C0] netlink_sendmsg+0xa31/0xd50 [ 177.181087][ C0] ? netlink_getsockopt+0x9f0/0x9f0 [ 177.186276][ C0] __sys_sendto+0x442/0x5e0 [ 177.190777][ C0] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 177.196834][ C0] ? prepare_exit_to_usermode+0x221/0x5b0 [ 177.202540][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 177.207992][ C0] __x64_sys_sendto+0xe5/0x100 [ 177.212754][ C0] do_syscall_64+0xf7/0x1c0 [ 177.217246][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 177.223121][ C0] RIP: 0033:0x414c43 [ 177.227019][ C0] Code: ff 0f 83 b0 19 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 83 3d 2d 38 66 00 00 75 17 49 89 ca b8 2c 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 81 19 00 00 c3 48 83 ec 08 e8 87 fa ff ff [ 177.246609][ C0] RSP: 002b:00007ffc1158f328 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 177.255004][ C0] RAX: ffffffffffffffda RBX: 0000000000a72200 RCX: 0000000000414c43 [ 177.262960][ C0] RDX: 000000000000002c RSI: 0000000000a72250 RDI: 0000000000000003 [ 177.270918][ C0] RBP: 0000000000000000 R08: 00007ffc1158f330 R09: 000000000000000c [ 177.278874][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 177.286831][ C0] R13: 0000000000000000 R14: 0000000000a72250 R15: 0000000000000003