[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 48.786800][ T27] audit: type=1800 audit(1578457496.403:25): pid=8390 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 48.811620][ T27] audit: type=1800 audit(1578457496.403:26): pid=8390 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 48.859170][ T27] audit: type=1800 audit(1578457496.403:27): pid=8390 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.1.45' (ECDSA) to the list of known hosts. 2020/01/08 04:25:06 fuzzer started 2020/01/08 04:25:07 dialing manager at 10.128.0.26:35703 2020/01/08 04:25:07 syscalls: 2824 2020/01/08 04:25:07 code coverage: enabled 2020/01/08 04:25:07 comparison tracing: enabled 2020/01/08 04:25:07 extra coverage: enabled 2020/01/08 04:25:07 setuid sandbox: enabled 2020/01/08 04:25:07 namespace sandbox: enabled 2020/01/08 04:25:07 Android sandbox: /sys/fs/selinux/policy does not exist 2020/01/08 04:25:07 fault injection: enabled 2020/01/08 04:25:07 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/01/08 04:25:07 net packet injection: enabled 2020/01/08 04:25:07 net device setup: enabled 2020/01/08 04:25:07 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/01/08 04:25:07 devlink PCI setup: PCI device 0000:00:10.0 is not available 04:25:08 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x1d}]}, &(0x7f00000000c0)='GPL\x00', 0x5, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x67) 04:25:09 executing program 1: unshare(0x8020600) r0 = mq_open(&(0x7f0000000000)=',\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup(r1) sendfile(r2, r0, 0x0, 0x5) syzkaller login: [ 61.538576][ T8558] IPVS: ftp: loaded support on port[0] = 21 [ 61.610117][ T8560] IPVS: ftp: loaded support on port[0] = 21 04:25:09 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, &(0x7f0000000140)) r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000100)={0x9}) [ 61.734024][ T8558] chnl_net:caif_netlink_parms(): no params data found [ 61.858639][ T8560] chnl_net:caif_netlink_parms(): no params data found [ 61.888663][ T8558] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.911009][ T8558] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.918972][ T8558] device bridge_slave_0 entered promiscuous mode [ 61.941648][ T8558] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.948738][ T8558] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.958879][ T8558] device bridge_slave_1 entered promiscuous mode [ 61.974409][ T8564] IPVS: ftp: loaded support on port[0] = 21 [ 62.035844][ T8558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.065270][ T8558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.079019][ T8560] bridge0: port 1(bridge_slave_0) entered blocking state 04:25:09 executing program 3: getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0xdaad1ab79a9ce09a, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x404c0c0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) r1 = dup(0xffffffffffffffff) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137) sendto$inet(r0, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) [ 62.087450][ T8560] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.097199][ T8560] device bridge_slave_0 entered promiscuous mode [ 62.124932][ T8560] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.134642][ T8560] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.143128][ T8560] device bridge_slave_1 entered promiscuous mode [ 62.187560][ T8558] team0: Port device team_slave_0 added [ 62.196549][ T8558] team0: Port device team_slave_1 added [ 62.256232][ T8560] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.285338][ T8564] chnl_net:caif_netlink_parms(): no params data found 04:25:09 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4009}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f00000018c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83CZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x00\x00\x00\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8dx\xd5\x1dU*s)\x12[\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xddeF>29\v\x02\xa2b\x13R\xef\xffA,\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x81\x10:\x0e(\xdd\xfc\xc9\xc6\xb4\xf0\'f:\xbd\xfe\x11\xf8\xc8W\x81s^\xd9W\xf1\x94\xaf\xc5\x8a\xb4f\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2A') write$cgroup_subtree(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000088a8ff"], 0x90ad) [ 62.364183][ T8558] device hsr_slave_0 entered promiscuous mode [ 62.413251][ T8558] device hsr_slave_1 entered promiscuous mode [ 62.476876][ T8560] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.510364][ T8567] IPVS: ftp: loaded support on port[0] = 21 04:25:10 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[], [{@smackfstransmute={'smackfstransmute', 0x3d, ']loGPL&keyringem1$wlan1trustedu/'}}, {@smackfstransmute={'smackfstransmute', 0x3d, ','}}]}) [ 62.617066][ T8560] team0: Port device team_slave_0 added [ 62.624743][ T8564] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.633578][ T8564] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.642027][ T8564] device bridge_slave_0 entered promiscuous mode [ 62.659088][ T8560] team0: Port device team_slave_1 added [ 62.694084][ T8564] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.702155][ T8564] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.710241][ T8564] device bridge_slave_1 entered promiscuous mode [ 62.784115][ T8560] device hsr_slave_0 entered promiscuous mode [ 62.822609][ T8560] device hsr_slave_1 entered promiscuous mode [ 62.881366][ T8560] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.889407][ T8560] Cannot create hsr debugfs directory [ 62.927510][ T8564] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.928256][ T8569] IPVS: ftp: loaded support on port[0] = 21 [ 62.952282][ T8571] IPVS: ftp: loaded support on port[0] = 21 [ 62.988952][ T8564] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.009851][ T8558] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.065448][ T8558] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.125263][ T8558] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.203713][ T8564] team0: Port device team_slave_0 added [ 63.209676][ T8558] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.257301][ T8564] team0: Port device team_slave_1 added [ 63.324671][ T8564] device hsr_slave_0 entered promiscuous mode [ 63.361299][ T8564] device hsr_slave_1 entered promiscuous mode [ 63.430895][ T8564] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.438623][ T8564] Cannot create hsr debugfs directory [ 63.506753][ T8560] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.544843][ T8560] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.655802][ T8560] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.737445][ T8567] chnl_net:caif_netlink_parms(): no params data found [ 63.767145][ T8560] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.896875][ T8569] chnl_net:caif_netlink_parms(): no params data found [ 63.930263][ T8558] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.973797][ T8571] chnl_net:caif_netlink_parms(): no params data found [ 64.012873][ T8564] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.054465][ T8564] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.107057][ T8564] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.153071][ T8564] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.197549][ T8567] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.206015][ T8567] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.214175][ T8567] device bridge_slave_0 entered promiscuous mode [ 64.238560][ T8558] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.252318][ T8567] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.259393][ T8567] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.269411][ T8567] device bridge_slave_1 entered promiscuous mode [ 64.283630][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.293097][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.311617][ T8569] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.318775][ T8569] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.327165][ T8569] device bridge_slave_0 entered promiscuous mode [ 64.337751][ T8569] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.345811][ T8569] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.354436][ T8569] device bridge_slave_1 entered promiscuous mode [ 64.384805][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.396469][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.405189][ T2680] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.412701][ T2680] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.421258][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.430022][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.438529][ T2680] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.445631][ T2680] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.471750][ T8569] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.486856][ T8567] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.497815][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.507099][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.516000][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.544130][ T8569] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.565792][ T8567] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.583542][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.593282][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.601867][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.611735][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.620467][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.628648][ T8571] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.636511][ T8571] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.644530][ T8571] device bridge_slave_0 entered promiscuous mode [ 64.659502][ T8560] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.672327][ T8569] team0: Port device team_slave_0 added [ 64.687942][ T8571] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.696630][ T8571] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.708963][ T8571] device bridge_slave_1 entered promiscuous mode [ 64.721843][ T8569] team0: Port device team_slave_1 added [ 64.728982][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.738674][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.749574][ T8567] team0: Port device team_slave_0 added [ 64.759543][ T8558] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.774340][ T8558] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.797959][ T8567] team0: Port device team_slave_1 added [ 64.806197][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.816686][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.834299][ T8571] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.924068][ T8567] device hsr_slave_0 entered promiscuous mode [ 64.981294][ T8567] device hsr_slave_1 entered promiscuous mode [ 65.041367][ T8567] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.048949][ T8567] Cannot create hsr debugfs directory [ 65.056614][ T8571] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.122861][ T8569] device hsr_slave_0 entered promiscuous mode [ 65.171467][ T8569] device hsr_slave_1 entered promiscuous mode [ 65.241034][ T8569] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.248795][ T8569] Cannot create hsr debugfs directory [ 65.256990][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.265230][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.277399][ T8560] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.292307][ T8564] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.308194][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.316131][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.339774][ T8571] team0: Port device team_slave_0 added [ 65.352048][ T8558] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.379137][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.388371][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.399999][ T2680] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.407231][ T2680] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.415111][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.423006][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.443929][ T8571] team0: Port device team_slave_1 added [ 65.458214][ T8564] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.475133][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.483862][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.492866][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.501525][ T2680] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.508590][ T2680] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.569300][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.578234][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.587928][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.597211][ T2671] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.604334][ T2671] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.612120][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.620684][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.644624][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.657188][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.666735][ T2680] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.673824][ T2680] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.743895][ T8571] device hsr_slave_0 entered promiscuous mode [ 65.791497][ T8571] device hsr_slave_1 entered promiscuous mode [ 65.831788][ T8571] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.839552][ T8571] Cannot create hsr debugfs directory [ 65.855953][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.866067][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.876207][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.885604][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.894217][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.903227][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.913067][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.921029][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.929783][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.979543][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.991267][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.999894][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.008996][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.018831][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.027329][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.036028][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.044950][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.053535][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.074860][ T8564] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.087629][ T8564] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.121923][ T2679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.130463][ T2679] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.139340][ T2679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.148204][ T2679] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.159706][ T8567] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 66.227088][ T8569] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 66.287588][ T8569] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 66.335614][ T8569] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 66.401869][ T8567] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 66.446869][ T8567] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 66.492828][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.504540][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.513921][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.522302][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.538508][ T8569] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 66.606603][ T8558] device veth0_vlan entered promiscuous mode [ 66.614003][ T8567] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 66.681991][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.689501][ T2680] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.706302][ T8564] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.714374][ T8571] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 66.764747][ T8571] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 66.814469][ T8558] device veth1_vlan entered promiscuous mode [ 66.828891][ T8571] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 66.884422][ T8571] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 66.949081][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.959773][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.010211][ T8560] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.071660][ T2679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.080375][ T2679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.103414][ T8564] device veth0_vlan entered promiscuous mode [ 67.122880][ T8560] device veth0_vlan entered promiscuous mode [ 67.140204][ T2679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.152204][ T2679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.184685][ T2679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.198419][ T2679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.209125][ T2679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.223433][ T2679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.244382][ T2679] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.256108][ T2679] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.266418][ T2679] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.279427][ T2679] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.308139][ T8564] device veth1_vlan entered promiscuous mode [ 67.366780][ T8567] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.401692][ T8567] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.466425][ T8567] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 67.483747][ T8567] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.530632][ T8567] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.595453][ T8567] device veth0_vlan entered promiscuous mode [ 67.617503][ T8567] device veth1_vlan entered promiscuous mode [ 172.180713][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 172.187667][ C0] rcu: 0-...!: (10499 ticks this GP) idle=05a/1/0x4000000000000002 softirq=12007/12010 fqs=39 [ 172.198286][ C0] (t=10501 jiffies g=7301 q=701) [ 172.203323][ C0] rcu: rcu_preempt kthread starved for 10422 jiffies! g7301 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 172.214410][ C0] rcu: RCU grace-period kthread stack dump: [ 172.220289][ C0] rcu_preempt R running task 28984 10 2 0x80004000 [ 172.228189][ C0] Call Trace: [ 172.231482][ C0] __schedule+0x9a0/0xcc0 [ 172.235819][ C0] schedule+0x181/0x210 [ 172.239971][ C0] schedule_timeout+0x14f/0x240 [ 172.244824][ C0] ? run_local_timers+0x120/0x120 [ 172.249858][ C0] rcu_gp_kthread+0xed8/0x1770 [ 172.254628][ C0] kthread+0x332/0x350 [ 172.258696][ C0] ? rcu_report_qs_rsp+0x140/0x140 [ 172.263801][ C0] ? kthread_blkcg+0xe0/0xe0 [ 172.268573][ C0] ret_from_fork+0x24/0x30 [ 172.273005][ C0] NMI backtrace for cpu 0 [ 172.277326][ C0] CPU: 0 PID: 8577 Comm: syz-executor.0 Not tainted 5.5.0-rc5-syzkaller #0 [ 172.285911][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 172.295989][ C0] Call Trace: [ 172.299274][ C0] [ 172.302131][ C0] dump_stack+0x1fb/0x318 [ 172.306459][ C0] nmi_cpu_backtrace+0xaf/0x1a0 [ 172.311299][ C0] ? nmi_trigger_cpumask_backtrace+0x16d/0x290 [ 172.317451][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 172.323512][ C0] nmi_trigger_cpumask_backtrace+0x174/0x290 [ 172.329490][ C0] arch_trigger_cpumask_backtrace+0x10/0x20 [ 172.335382][ C0] rcu_dump_cpu_stacks+0x15a/0x220 [ 172.340500][ C0] rcu_sched_clock_irq+0xe25/0x1ad0 [ 172.345694][ C0] ? trace_hardirqs_off+0x74/0x80 [ 172.350712][ C0] update_process_times+0x12d/0x180 [ 172.355908][ C0] tick_sched_timer+0x263/0x420 [ 172.360765][ C0] ? tick_setup_sched_timer+0x3d0/0x3d0 [ 172.366313][ C0] __hrtimer_run_queues+0x403/0x840 [ 172.371530][ C0] hrtimer_interrupt+0x38c/0xda0 [ 172.376475][ C0] ? debug_smp_processor_id+0x9/0x20 [ 172.381766][ C0] smp_apic_timer_interrupt+0x109/0x280 [ 172.387584][ C0] apic_timer_interrupt+0xf/0x20 [ 172.392511][ C0] [ 172.395444][ C0] RIP: 0010:__memcg_kmem_uncharge+0x28/0x1a0 [ 172.401424][ C0] Code: 00 00 55 48 89 e5 41 57 41 56 41 55 41 54 53 50 89 f3 49 89 fc 48 b8 00 00 00 00 00 fc ff df 4c 8d 77 38 4d 89 f5 49 c1 ed 03 <41> 80 7c 05 00 00 74 08 4c 89 f7 e8 48 07 fb ff 4d 8b 3e b8 01 00 [ 172.421039][ C0] RSP: 0018:ffffc90002b979c8 EFLAGS: 00000a06 ORIG_RAX: ffffffffffffff13 [ 172.429444][ C0] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffff8880a738a040 [ 172.437406][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffea00024b8200 [ 172.445376][ C0] RBP: ffffc90002b979f8 R08: dffffc0000000000 R09: fffffbfff124248a [ 172.453341][ C0] R10: fffffbfff124248a R11: 0000000000000000 R12: ffffea00024b8200 [ 172.461303][ C0] R13: 1ffffd4000497047 R14: ffffea00024b8238 R15: ffff888093515778 [ 172.469292][ C0] ? free_thread_stack+0x124/0x590 [ 172.474395][ C0] free_thread_stack+0x12e/0x590 [ 172.479593][ C0] put_task_stack+0xa3/0x130 [ 172.484173][ C0] finish_task_switch+0x3f1/0x550 [ 172.489196][ C0] __schedule+0x9a8/0xcc0 [ 172.493531][ C0] preempt_schedule_irq+0xc1/0x140 [ 172.498653][ C0] retint_kernel+0x1b/0x2b [ 172.503067][ C0] RIP: 0010:tomoyo_check_acl+0xb9/0x3a0 [ 172.508619][ C0] Code: ec 75 13 e8 39 38 16 fe e9 c9 01 00 00 0f 1f 40 00 e8 2b 38 16 fe 4d 89 e6 49 8d 5c 24 18 48 89 d8 48 c1 e8 03 42 0f b6 04 38 <84> c0 0f 85 07 01 00 00 0f b6 1b 31 ff 89 de e8 83 3a 16 fe 85 db [ 172.528216][ C0] RSP: 0018:ffffc90002b97c58 EFLAGS: 00000a02 ORIG_RAX: ffffffffffffff13 [ 172.536623][ C0] RAX: 0000000000000000 RBX: ffff88809a221598 RCX: ffff8880a738a040 [ 172.544586][ C0] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000 [ 172.552554][ C0] RBP: ffffc90002b97cb0 R08: ffffffff836086d4 R09: ffffffff8362087c [ 172.560520][ C0] R10: ffff8880a738a040 R11: 0000000000000002 R12: ffff88809a221580 [ 172.568831][ C0] R13: ffff88809cdc7990 R14: ffff88809a221580 R15: dffffc0000000000 [ 172.576813][ C0] ? tomoyo_fill_path_info+0x9c/0x3a0 [ 172.582183][ C0] ? tomoyo_check_acl+0x124/0x3a0 [ 172.587209][ C0] ? tomoyo_check_acl+0xa5/0x3a0 [ 172.592143][ C0] ? tomoyo_path_number_perm+0x640/0x640 [ 172.597772][ C0] tomoyo_path_number_perm+0x354/0x640 [ 172.603254][ C0] ? smack_file_ioctl+0x226/0x2e0 [ 172.608267][ C0] ? __fget+0x431/0x510 [ 172.612547][ C0] tomoyo_file_ioctl+0x23/0x30 [ 172.617358][ C0] security_file_ioctl+0x6d/0xd0 [ 172.622302][ C0] __x64_sys_ioctl+0xa3/0x120 [ 172.626976][ C0] do_syscall_64+0xf7/0x1c0 [ 172.631480][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 172.637381][ C0] RIP: 0033:0x45adb7 [ 172.641345][ C0] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 172.661040][ C0] RSP: 002b:00007fef8eabfc88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 172.669451][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000045adb7 [ 172.677506][ C0] RDX: 0000000000000000 RSI: 0000000000006364 RDI: 00000000000000e8 [ 172.685501][ C0] RBP: 000000000075bfa8 R08: 00007fef8eac0700 R09: 00007fef8eac0700 [ 172.693468][ C0] R10: 00007fef8eac09d0 R11: 0000000000000246 R12: 0000000000000000 [ 172.701439][ C0] R13: 00007fffce89c9bf R14: 00007fef8eac09c0 R15: 000000000075bf2c