[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 52.839257][ T27] audit: type=1800 audit(1578446760.229:25): pid=8427 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 52.869615][ T27] audit: type=1800 audit(1578446760.229:26): pid=8427 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 52.910761][ T27] audit: type=1800 audit(1578446760.239:27): pid=8427 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.1.0' (ECDSA) to the list of known hosts. 2020/01/08 01:26:12 fuzzer started 2020/01/08 01:26:13 dialing manager at 10.128.0.26:35703 2020/01/08 01:26:13 syscalls: 2824 2020/01/08 01:26:13 code coverage: enabled 2020/01/08 01:26:13 comparison tracing: enabled 2020/01/08 01:26:13 extra coverage: enabled 2020/01/08 01:26:13 setuid sandbox: enabled 2020/01/08 01:26:13 namespace sandbox: enabled 2020/01/08 01:26:13 Android sandbox: /sys/fs/selinux/policy does not exist 2020/01/08 01:26:13 fault injection: enabled 2020/01/08 01:26:13 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/01/08 01:26:13 net packet injection: enabled 2020/01/08 01:26:13 net device setup: enabled 2020/01/08 01:26:13 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/01/08 01:26:13 devlink PCI setup: PCI device 0000:00:10.0 is not available 01:26:14 executing program 0: socketpair(0x22, 0x3, 0x0, &(0x7f0000000200)) 01:26:15 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty}, r1}}, 0x48) syzkaller login: [ 67.623155][ T8597] IPVS: ftp: loaded support on port[0] = 21 [ 67.748966][ T8597] chnl_net:caif_netlink_parms(): no params data found 01:26:15 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x5a0, 0x210, 0x3e0, 0x0, 0xf8, 0x210, 0x530, 0x530, 0x530, 0x530, 0x530, 0x6, 0x0, {[{{@ip={@loopback, @local, 0xffffff00, 0x0, '\x00', 'netdevsim0\x00', {}, {0xff}, 0x0, 0x2, 0x1c}, 0x0, 0x98, 0xf8}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @broadcast, 0x2, 0xb, [0x3, 0x16, 0x32, 0xb, 0x21, 0x39, 0x28, 0x5, 0x1e, 0x8, 0x32, 0x27, 0x39, 0x2d, 0x38, 0x2c], 0x0, 0x1000, 0xffffffffffffe8ea}}}, {{@ip={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x7f800000, 0xff, 'veth1_to_bridge\x00', '\x00', {}, {0xff}, 0x29, 0x3, 0x57}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@ah, @common=@icmp]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@multicast2, @empty, 0x69e9b4584152166a, 0x1d6f7c8f504b1aa2, 'syz_tun\x00', 'gre0\x00', {0xff}, {}, 0x49, 0x0, 0x40}, 0x0, 0x98, 0xc0}, @TTL={0x28, 'TTL\x00', 0x0, {0x2, 0xe0}}}, {{@ip={@remote, @loopback, 0x0, 0x0, 'veth0_to_hsr\x00', 'team_slave_0\x00', {}, {}, 0x11, 0x2, 0x4}, 0x0, 0xf0, 0x150, 0x0, {}, [@common=@addrtype, @inet]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @dev={[], 0xf}, 0x986, 0x0, [0x0, 0x2d, 0x12, 0xa, 0x21, 0x3, 0x35, 0x2, 0x0, 0x0, 0x30, 0x36, 0x22, 0x10, 0x2e, 0x3b], 0x2, 0x400, 0xfff}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x600) [ 67.842894][ T8597] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.853083][ T8597] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.861532][ T8597] device bridge_slave_0 entered promiscuous mode [ 67.878785][ T8600] IPVS: ftp: loaded support on port[0] = 21 [ 67.887592][ T8597] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.902348][ T8597] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.926917][ T8597] device bridge_slave_1 entered promiscuous mode [ 67.984299][ T8597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.018080][ T8597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.081194][ T8597] team0: Port device team_slave_0 added [ 68.096499][ T8597] team0: Port device team_slave_1 added [ 68.114143][ T8602] IPVS: ftp: loaded support on port[0] = 21 01:26:15 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000780)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9, 0x200}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000000), 0x8) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 68.173723][ T8600] chnl_net:caif_netlink_parms(): no params data found [ 68.228230][ T8597] device hsr_slave_0 entered promiscuous mode [ 68.264888][ T8597] device hsr_slave_1 entered promiscuous mode [ 68.334024][ T8605] IPVS: ftp: loaded support on port[0] = 21 01:26:15 executing program 4: io_setup(0x83, &(0x7f00000003c0)=0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) io_submit(r0, 0x2, &(0x7f0000001780)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2, 0x0, r1, 0x0, 0x2}]) [ 68.484666][ T8600] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.491762][ T8600] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.515437][ T8600] device bridge_slave_0 entered promiscuous mode [ 68.544630][ T8600] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.552085][ T8600] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.575390][ T8600] device bridge_slave_1 entered promiscuous mode [ 68.611829][ T8602] chnl_net:caif_netlink_parms(): no params data found [ 68.631354][ T8597] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.678172][ T8600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.691902][ T8600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 01:26:16 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f0000007900), 0x4000099, 0x101d0) close(r3) close(r2) [ 68.719511][ T8597] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.787097][ T8600] team0: Port device team_slave_0 added [ 68.808336][ T8608] IPVS: ftp: loaded support on port[0] = 21 [ 68.847514][ T8602] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.864103][ T8602] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.872082][ T8602] device bridge_slave_0 entered promiscuous mode [ 68.879583][ T8597] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.938673][ T8600] team0: Port device team_slave_1 added [ 68.944394][ T8597] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.011647][ T8602] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.019275][ T8602] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.027037][ T8602] device bridge_slave_1 entered promiscuous mode [ 69.097521][ T8600] device hsr_slave_0 entered promiscuous mode [ 69.144950][ T8600] device hsr_slave_1 entered promiscuous mode [ 69.194690][ T8600] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.202430][ T8600] Cannot create hsr debugfs directory [ 69.223117][ T8602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.242870][ T8610] IPVS: ftp: loaded support on port[0] = 21 [ 69.259773][ T8602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.323539][ T8605] chnl_net:caif_netlink_parms(): no params data found [ 69.348428][ T8602] team0: Port device team_slave_0 added [ 69.386013][ T8602] team0: Port device team_slave_1 added [ 69.486430][ T8602] device hsr_slave_0 entered promiscuous mode [ 69.535068][ T8602] device hsr_slave_1 entered promiscuous mode [ 69.574718][ T8602] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.582311][ T8602] Cannot create hsr debugfs directory [ 69.603627][ T8605] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.614724][ T8605] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.622302][ T8605] device bridge_slave_0 entered promiscuous mode [ 69.630761][ T8605] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.637900][ T8605] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.646071][ T8605] device bridge_slave_1 entered promiscuous mode [ 69.653135][ T8608] chnl_net:caif_netlink_parms(): no params data found [ 69.729209][ T8605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.741657][ T8597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.771943][ T8605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.799649][ T8600] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.871702][ T8600] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.958338][ T8600] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.006554][ T8600] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.048226][ T8605] team0: Port device team_slave_0 added [ 70.057382][ T8605] team0: Port device team_slave_1 added [ 70.063159][ T8608] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.070361][ T8608] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.078451][ T8608] device bridge_slave_0 entered promiscuous mode [ 70.089978][ T8608] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.098368][ T8608] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.106352][ T8608] device bridge_slave_1 entered promiscuous mode [ 70.113640][ T8610] chnl_net:caif_netlink_parms(): no params data found [ 70.161405][ T3232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.170587][ T3232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.178846][ T8602] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.232083][ T8602] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.288710][ T8608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.303607][ T8597] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.318597][ T8602] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.357734][ T8602] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.430068][ T8608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.476384][ T8605] device hsr_slave_0 entered promiscuous mode [ 70.525023][ T8605] device hsr_slave_1 entered promiscuous mode [ 70.574676][ T8605] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.582263][ T8605] Cannot create hsr debugfs directory [ 70.600299][ T8610] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.608595][ T8610] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.617083][ T8610] device bridge_slave_0 entered promiscuous mode [ 70.625863][ T8610] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.632919][ T8610] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.641001][ T8610] device bridge_slave_1 entered promiscuous mode [ 70.667988][ T8608] team0: Port device team_slave_0 added [ 70.682106][ T8608] team0: Port device team_slave_1 added [ 70.690255][ T2735] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.699237][ T2735] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.707822][ T2735] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.715167][ T2735] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.723891][ T2735] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.735231][ T8610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.777275][ T8610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.792169][ T3233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.800953][ T3233] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.812882][ T3233] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.820051][ T3233] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.876587][ T8608] device hsr_slave_0 entered promiscuous mode [ 70.925045][ T8608] device hsr_slave_1 entered promiscuous mode [ 70.964744][ T8608] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.972380][ T8608] Cannot create hsr debugfs directory [ 71.004748][ T3233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.013305][ T3233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.025614][ T3233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.034179][ T3233] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.048563][ T3233] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.089823][ T8610] team0: Port device team_slave_0 added [ 71.097903][ T8610] team0: Port device team_slave_1 added [ 71.125153][ T3029] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.133670][ T3029] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.142194][ T3029] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.150961][ T3029] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.164441][ T8600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.201936][ T8605] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.266810][ T8605] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.377416][ T8610] device hsr_slave_0 entered promiscuous mode [ 71.415222][ T8610] device hsr_slave_1 entered promiscuous mode [ 71.454902][ T8610] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.462517][ T8610] Cannot create hsr debugfs directory [ 71.472208][ T8597] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.483368][ T8597] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.494936][ T8605] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.534749][ T3232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.543449][ T3232] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.583191][ T8605] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.661129][ T8600] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.670631][ T3029] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.679424][ T3029] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.711901][ T8602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.732448][ T3029] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.740641][ T3029] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.751678][ T3029] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.761225][ T3029] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.772448][ T3029] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.779772][ T3029] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.792222][ T8597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.813721][ T2735] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.822487][ T2735] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.832632][ T2735] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.841373][ T2735] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.848498][ T2735] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.864720][ T3233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.873238][ T3233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.882349][ T3233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.891527][ T3233] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.902059][ T3233] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.910665][ T3233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.918693][ T3233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.949802][ T8602] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.969659][ T8608] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 72.009173][ T3029] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.018318][ T3029] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.027117][ T3029] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.035822][ T3029] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.054999][ T3233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.063133][ T3233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.073271][ T3233] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.081134][ T3233] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.089686][ T8610] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 72.136994][ T8610] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 72.196594][ T8608] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 72.248699][ T8597] device veth0_vlan entered promiscuous mode [ 72.258132][ T2735] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.267291][ T2735] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.276989][ T2735] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.284027][ T2735] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.292997][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.301920][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.310437][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.318853][ T8610] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 72.367713][ T8610] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 72.426518][ T8608] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 72.470333][ T8608] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 72.540460][ T8600] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.551934][ T8600] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.564326][ T8597] device veth1_vlan entered promiscuous mode [ 72.573194][ T3232] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.585372][ T3232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.593834][ T3232] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.637183][ T8605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.657372][ T3232] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.665802][ T3232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.674301][ T3232] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.683018][ T3232] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.690111][ T3232] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.716901][ T8605] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.736255][ T3233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.743978][ T3233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.752413][ T3233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.770264][ T3233] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.782390][ T3233] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.796008][ T3233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.824218][ T8600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.836548][ T3233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.846951][ T3233] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.857108][ T3233] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.864199][ T3233] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.871891][ T3233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.881058][ T3233] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.889816][ T3233] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.896903][ T3233] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.904421][ T3233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.913490][ T3233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.922351][ T3233] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.932346][ T3233] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.940931][ T3233] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.970000][ T3233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.979509][ T3233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.989692][ T3233] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.020952][ T8610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.094152][ T8600] device veth0_vlan entered promiscuous mode [ 73.113037][ T8600] device veth1_vlan entered promiscuous mode [ 178.024549][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 178.031477][ C1] rcu: 1-...!: (10499 ticks this GP) idle=4b6/1/0x4000000000000002 softirq=14027/14027 fqs=3 [ 178.042070][ C1] (t=10501 jiffies g=6833 q=228) [ 178.047097][ C1] rcu: rcu_preempt kthread starved for 10496 jiffies! g6833 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 178.058184][ C1] rcu: RCU grace-period kthread stack dump: [ 178.064072][ C1] rcu_preempt R running task 29032 10 2 0x80004000 [ 178.071960][ C1] Call Trace: [ 178.075254][ C1] __schedule+0x9a0/0xcc0 [ 178.079586][ C1] schedule+0x181/0x210 [ 178.083736][ C1] schedule_timeout+0x14f/0x240 [ 178.088579][ C1] ? run_local_timers+0x120/0x120 [ 178.093601][ C1] rcu_gp_kthread+0xed8/0x1770 [ 178.098366][ C1] kthread+0x332/0x350 [ 178.102421][ C1] ? rcu_report_qs_rsp+0x140/0x140 [ 178.107523][ C1] ? kthread_blkcg+0xe0/0xe0 [ 178.112104][ C1] ret_from_fork+0x24/0x30 [ 178.116542][ C1] NMI backtrace for cpu 1 [ 178.120875][ C1] CPU: 1 PID: 8597 Comm: syz-executor.0 Not tainted 5.5.0-rc5-syzkaller #0 [ 178.129468][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 178.139520][ C1] Call Trace: [ 178.142796][ C1] [ 178.145646][ C1] dump_stack+0x1fb/0x318 [ 178.149968][ C1] nmi_cpu_backtrace+0xaf/0x1a0 [ 178.154841][ C1] ? nmi_trigger_cpumask_backtrace+0x16d/0x290 [ 178.160993][ C1] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 178.167051][ C1] nmi_trigger_cpumask_backtrace+0x174/0x290 [ 178.173027][ C1] arch_trigger_cpumask_backtrace+0x10/0x20 [ 178.178912][ C1] rcu_dump_cpu_stacks+0x15a/0x220 [ 178.184019][ C1] rcu_sched_clock_irq+0xe25/0x1ad0 [ 178.189214][ C1] ? trace_hardirqs_off+0x74/0x80 [ 178.194237][ C1] update_process_times+0x12d/0x180 [ 178.199453][ C1] tick_sched_timer+0x263/0x420 [ 178.204293][ C1] ? tick_setup_sched_timer+0x3d0/0x3d0 [ 178.209833][ C1] __hrtimer_run_queues+0x403/0x840 [ 178.215039][ C1] hrtimer_interrupt+0x38c/0xda0 [ 178.219984][ C1] ? debug_smp_processor_id+0x9/0x20 [ 178.225287][ C1] smp_apic_timer_interrupt+0x109/0x280 [ 178.230854][ C1] apic_timer_interrupt+0xf/0x20 [ 178.235798][ C1] [ 178.238740][ C1] RIP: 0010:__memcg_kmem_uncharge+0x6/0x1a0 [ 178.244626][ C1] Code: bf ac 07 00 74 12 48 81 c3 08 02 00 00 48 89 df 4c 89 f6 e8 8c 85 ff ff 5b 41 5e 5d c3 0f 1f 80 00 00 00 00 55 48 89 e5 41 57 <41> 56 41 55 41 54 53 50 89 f3 49 89 fc 48 b8 00 00 00 00 00 fc ff [ 178.264218][ C1] RSP: 0018:ffffc90002107bb8 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 178.272620][ C1] RAX: ffffffff81489244 RBX: ffffea0002a42800 RCX: ffff88808f474380 [ 178.280599][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffea0002a42800 [ 178.288561][ C1] RBP: ffffc90002107bc0 R08: dffffc0000000000 R09: fffffbfff124248a [ 178.296528][ C1] R10: fffffbfff124248a R11: 0000000000000000 R12: ffff8880a7cd2220 [ 178.304683][ C1] R13: dffffc0000000000 R14: 1ffff11014f9a444 R15: ffff88809473d638 [ 178.312678][ C1] ? free_thread_stack+0x124/0x590 [ 178.317799][ C1] free_thread_stack+0x12e/0x590 [ 178.322730][ C1] put_task_stack+0xa3/0x130 [ 178.327409][ C1] finish_task_switch+0x3f1/0x550 [ 178.332433][ C1] __schedule+0x9a8/0xcc0 [ 178.336765][ C1] schedule+0x181/0x210 [ 178.340914][ C1] do_nanosleep+0x1d0/0x6c0 [ 178.345444][ C1] hrtimer_nanosleep+0x3a6/0x5b0 [ 178.350381][ C1] ? trace_hrtimer_expire_exit+0x2d0/0x2d0 [ 178.356180][ C1] __x64_sys_nanosleep+0x186/0x1d0 [ 178.361289][ C1] do_syscall_64+0xf7/0x1c0 [ 178.365874][ C1] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 178.371755][ C1] RIP: 0033:0x4593f0 [ 178.375757][ C1] Code: c0 5b 5d c3 66 0f 1f 44 00 00 8b 04 24 48 83 c4 18 5b 5d c3 66 0f 1f 44 00 00 83 3d 41 f5 61 00 00 75 14 b8 23 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 d4 d1 fb ff c3 48 83 ec 08 e8 ea 46 00 00 [ 178.395352][ C1] RSP: 002b:00007ffcd8d623f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000023 [ 178.403774][ C1] RAX: ffffffffffffffda RBX: 0000000000011d28 RCX: 00000000004593f0 [ 178.411758][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007ffcd8d62400 [ 178.419735][ C1] RBP: 0000000000000002 R08: 0000000000000001 R09: 0000000001e99940 [ 178.427705][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 178.435668][ C1] R13: 00007ffcd8d62450 R14: 0000000000011d28 R15: 00007ffcd8d62460