[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 55.456984][ T23] audit: type=1800 audit(1578473163.344:25): pid=8428 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 55.476615][ T23] audit: type=1800 audit(1578473163.344:26): pid=8428 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 55.518487][ T23] audit: type=1800 audit(1578473163.344:27): pid=8428 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.62' (ECDSA) to the list of known hosts. 2020/01/08 08:46:16 fuzzer started 2020/01/08 08:46:17 dialing manager at 10.128.0.26:35703 2020/01/08 08:46:17 syscalls: 2824 2020/01/08 08:46:17 code coverage: enabled 2020/01/08 08:46:17 comparison tracing: enabled 2020/01/08 08:46:17 extra coverage: enabled 2020/01/08 08:46:17 setuid sandbox: enabled 2020/01/08 08:46:17 namespace sandbox: enabled 2020/01/08 08:46:17 Android sandbox: /sys/fs/selinux/policy does not exist 2020/01/08 08:46:17 fault injection: enabled 2020/01/08 08:46:17 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/01/08 08:46:17 net packet injection: enabled 2020/01/08 08:46:17 net device setup: enabled 2020/01/08 08:46:17 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/01/08 08:46:17 devlink PCI setup: PCI device 0000:00:10.0 is not available 08:46:18 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f00000002c0)=0xece) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0xa0, 0x0) write$UHID_CREATE2(r4, &(0x7f0000001700)=ANY=[@ANYBLOB="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"/526], 0x12e) readv(r4, &(0x7f00000006c0)=[{&(0x7f0000000340)=""/37, 0x25}, {&(0x7f0000000380)=""/159, 0x9f}], 0x2) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)) r5 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) getsockopt$ARPT_SO_GET_INFO(r5, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r6, r4) fcntl$setsig(r2, 0xa, 0x12) recvmmsg(r3, &(0x7f0000002bc0)=[{{0x0, 0xfffffffffffffd10, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x40000fd, 0x0, 0x0) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x16) 08:46:19 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x14, 0x4, 0x4, 0x3, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x3c) socket$inet_sctp(0x2, 0x1, 0x84) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendto$llc(r1, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x1a, 0x200000000304, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @random="0387945b9f37"}, 0x10) recvmmsg(r1, &(0x7f000000cd80)=[{{&(0x7f000000be80)=@ll, 0x80, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0xffff7ffe}, {{0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x7d48bddc}, 0x100000001}, {{0x0, 0x0, &(0x7f000000c700)=[{&(0x7f000000c680)=""/90, 0x5a}], 0x1, &(0x7f00000005c0)=""/16, 0x10, 0x7f}, 0x200}, {{&(0x7f000000c780)=@ethernet, 0xfffffffffffffe95, &(0x7f000000ca00), 0x0, &(0x7f0000000080)=""/55, 0x37}, 0x6}, {{&(0x7f000000ca80)=@pppol2tpv3in6, 0x80, &(0x7f0000000ac0), 0x0, &(0x7f0000000b40)=""/3, 0x3, 0x2}, 0x1f}], 0x5, 0x10173, 0x0) syzkaller login: [ 71.097902][ T8594] IPVS: ftp: loaded support on port[0] = 21 [ 71.214756][ T8594] chnl_net:caif_netlink_parms(): no params data found [ 71.263549][ T8594] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.271760][ T8594] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.280952][ T8594] device bridge_slave_0 entered promiscuous mode [ 71.291526][ T8594] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.299975][ T8594] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.307817][ T8594] device bridge_slave_1 entered promiscuous mode [ 71.332264][ T8594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.344515][ T8594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.389444][ T8594] team0: Port device team_slave_0 added [ 71.397766][ T8594] team0: Port device team_slave_1 added [ 71.406035][ T8597] IPVS: ftp: loaded support on port[0] = 21 08:46:19 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x8) [ 71.491131][ T8594] device hsr_slave_0 entered promiscuous mode [ 71.528755][ T8594] device hsr_slave_1 entered promiscuous mode [ 71.605373][ T8599] IPVS: ftp: loaded support on port[0] = 21 08:46:19 executing program 3: syz_mount_image$minix(&(0x7f0000000080)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x4bfc, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="600b42e006000a0090040300001af5c97f13", 0x12, 0x400}], 0x0, 0x0) [ 71.702189][ T8597] chnl_net:caif_netlink_parms(): no params data found [ 71.773641][ T8594] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.839497][ T8594] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.890638][ T8594] netdevsim netdevsim0 netdevsim2: renamed from eth2 08:46:19 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x2, 0x2, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000240)="8da4363a00000000000000000000004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a00000100000000000100fffffdfc00005f42485266535f4d", 0x48, 0x10000}], 0x0, 0x0) syz_open_dev$audion(0x0, 0x9, 0x0) [ 71.992198][ T8594] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.142437][ T8602] IPVS: ftp: loaded support on port[0] = 21 [ 72.160040][ T8604] IPVS: ftp: loaded support on port[0] = 21 [ 72.172805][ T8597] bridge0: port 1(bridge_slave_0) entered blocking state 08:46:20 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000100)=0x7f6, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000016c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000040)=0x6, 0x4) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000080)=0x1d, 0xd4) recvmmsg(r0, &(0x7f0000000080), 0x400000000000384, 0x12001, 0x0) [ 72.188694][ T8597] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.196364][ T8597] device bridge_slave_0 entered promiscuous mode [ 72.243142][ T8599] chnl_net:caif_netlink_parms(): no params data found [ 72.255696][ T8597] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.263189][ T8597] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.273795][ T8597] device bridge_slave_1 entered promiscuous mode [ 72.337874][ T8597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.361204][ T8607] IPVS: ftp: loaded support on port[0] = 21 [ 72.371809][ T8597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.402590][ T8597] team0: Port device team_slave_0 added [ 72.421124][ T8597] team0: Port device team_slave_1 added [ 72.454493][ T8599] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.462560][ T8599] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.470256][ T8599] device bridge_slave_0 entered promiscuous mode [ 72.561243][ T8597] device hsr_slave_0 entered promiscuous mode [ 72.608810][ T8597] device hsr_slave_1 entered promiscuous mode [ 72.658786][ T8597] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.666504][ T8597] Cannot create hsr debugfs directory [ 72.678923][ T8599] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.685987][ T8599] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.693979][ T8599] device bridge_slave_1 entered promiscuous mode [ 72.712792][ T8604] chnl_net:caif_netlink_parms(): no params data found [ 72.756570][ T8599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.768333][ T8599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.790679][ T8594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.870124][ T8599] team0: Port device team_slave_0 added [ 72.881597][ T8599] team0: Port device team_slave_1 added [ 72.900929][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.911147][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.919542][ T8602] chnl_net:caif_netlink_parms(): no params data found [ 72.935418][ T8607] chnl_net:caif_netlink_parms(): no params data found [ 72.946496][ T8594] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.978266][ T8604] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.986945][ T8604] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.994985][ T8604] device bridge_slave_0 entered promiscuous mode [ 73.061129][ T8599] device hsr_slave_0 entered promiscuous mode [ 73.098870][ T8599] device hsr_slave_1 entered promiscuous mode [ 73.139277][ T8599] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.146915][ T8599] Cannot create hsr debugfs directory [ 73.165059][ T8602] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.172191][ T8602] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.180066][ T8602] device bridge_slave_0 entered promiscuous mode [ 73.188320][ T8602] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.195642][ T8602] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.203612][ T8602] device bridge_slave_1 entered promiscuous mode [ 73.213677][ T8604] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.221844][ T8604] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.229862][ T8604] device bridge_slave_1 entered promiscuous mode [ 73.250081][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.258938][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.267259][ T2724] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.274494][ T2724] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.283754][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.320869][ T8604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.343697][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.352552][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.361098][ T2724] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.368149][ T2724] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.394446][ T8604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.410432][ T8602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.420909][ T8597] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.452929][ T2801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.461660][ T2801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.470431][ T2801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.479065][ T2801] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.487333][ T2801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.496911][ T2801] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.507943][ T2801] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.521653][ T2775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.530201][ T2775] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.539793][ T8607] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.546861][ T8607] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.557382][ T8607] device bridge_slave_0 entered promiscuous mode [ 73.565584][ T8602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.574737][ T8597] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.642067][ T8597] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.710208][ T8607] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.717256][ T8607] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.725061][ T8607] device bridge_slave_1 entered promiscuous mode [ 73.745397][ T8597] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.820759][ T2778] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.829242][ T2778] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.839299][ T8604] team0: Port device team_slave_0 added [ 73.846104][ T8594] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.855813][ T8604] team0: Port device team_slave_1 added [ 73.876229][ T8607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.887379][ T8607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.902030][ T8602] team0: Port device team_slave_0 added [ 73.925679][ T8602] team0: Port device team_slave_1 added [ 74.011829][ T8604] device hsr_slave_0 entered promiscuous mode [ 74.048837][ T8604] device hsr_slave_1 entered promiscuous mode [ 74.088593][ T8604] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.096172][ T8604] Cannot create hsr debugfs directory [ 74.103265][ T8607] team0: Port device team_slave_0 added [ 74.171466][ T8602] device hsr_slave_0 entered promiscuous mode [ 74.218915][ T8602] device hsr_slave_1 entered promiscuous mode [ 74.258585][ T8602] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.266177][ T8602] Cannot create hsr debugfs directory [ 74.273283][ T8607] team0: Port device team_slave_1 added [ 74.294571][ T8599] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 74.357214][ T2778] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.364762][ T2778] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.440520][ T8607] device hsr_slave_0 entered promiscuous mode [ 74.488906][ T8607] device hsr_slave_1 entered promiscuous mode [ 74.528689][ T8607] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.536264][ T8607] Cannot create hsr debugfs directory [ 74.548293][ T8599] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 74.601884][ T8599] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 74.681639][ T8599] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 74.738324][ T8594] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.821733][ T8604] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 74.861780][ T8604] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 74.955503][ T8604] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 74.982723][ T8604] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 75.047777][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.057162][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.080356][ T8594] device veth0_vlan entered promiscuous mode [ 75.093826][ T8597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.111413][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.120107][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.128146][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.136195][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.143976][ T8602] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 75.200377][ T8602] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 75.254153][ T8602] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 75.310892][ T8602] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 75.360200][ T8597] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.367015][ T8607] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 75.411306][ T8594] device veth1_vlan entered promiscuous mode [ 75.423704][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.432454][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.443327][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.470008][ T8607] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 75.541339][ T8607] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 75.561976][ T8607] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 75.620142][ T2778] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.629453][ T2778] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.637970][ T2778] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.645044][ T2778] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.652508][ T2778] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.661132][ T2778] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.669827][ T2778] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.676875][ T2778] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.684434][ T2778] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.692861][ T2778] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.718850][ T2778] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.726621][ T2778] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.736033][ T2778] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.745202][ T2778] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.758079][ T2778] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.766583][ T2778] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.776956][ T2778] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.785219][ T2778] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.794107][ T2778] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.805688][ T8599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.819351][ T8597] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.835621][ T2780] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.868068][ T8604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.910721][ T8599] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.917959][ T2801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.933226][ T2801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.964624][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.972739][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.014325][ T2724] hid-generic 0000:0000:0000.0001: ignoring exceeding usage max [ 76.026303][ T8604] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.918416][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 180.925240][ C0] rcu: 0-...!: (10499 ticks this GP) idle=a06/1/0x4000000000000002 softirq=14752/14752 fqs=7 [ 180.935948][ C0] (t=10501 jiffies g=6741 q=209) [ 180.940970][ C0] rcu: rcu_preempt kthread starved for 10488 jiffies! g6741 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 180.952057][ C0] rcu: RCU grace-period kthread stack dump: [ 180.957934][ C0] rcu_preempt R running task 29104 10 2 0x80004000 [ 180.965842][ C0] Call Trace: [ 180.969138][ C0] __schedule+0x9a0/0xcc0 [ 180.973468][ C0] schedule+0x181/0x210 [ 180.977613][ C0] schedule_timeout+0x14f/0x240 [ 180.982467][ C0] ? run_local_timers+0x120/0x120 [ 180.987482][ C0] rcu_gp_kthread+0xed8/0x1770 [ 180.992261][ C0] kthread+0x332/0x350 [ 180.996314][ C0] ? rcu_report_qs_rsp+0x140/0x140 [ 181.001411][ C0] ? kthread_blkcg+0xe0/0xe0 [ 181.005989][ C0] ret_from_fork+0x24/0x30 [ 181.010405][ C0] NMI backtrace for cpu 0 [ 181.014723][ C0] CPU: 0 PID: 8599 Comm: syz-executor.2 Not tainted 5.5.0-rc5-syzkaller #0 [ 181.023289][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 181.033345][ C0] Call Trace: [ 181.036617][ C0] [ 181.039458][ C0] dump_stack+0x1fb/0x318 [ 181.043779][ C0] nmi_cpu_backtrace+0xaf/0x1a0 [ 181.048619][ C0] ? nmi_trigger_cpumask_backtrace+0x16d/0x290 [ 181.054767][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 181.060829][ C0] nmi_trigger_cpumask_backtrace+0x174/0x290 [ 181.066800][ C0] arch_trigger_cpumask_backtrace+0x10/0x20 [ 181.072677][ C0] rcu_dump_cpu_stacks+0x15a/0x220 [ 181.077783][ C0] rcu_sched_clock_irq+0xe25/0x1ad0 [ 181.082988][ C0] ? trace_hardirqs_off+0x74/0x80 [ 181.088027][ C0] update_process_times+0x12d/0x180 [ 181.096018][ C0] tick_sched_timer+0x263/0x420 [ 181.100860][ C0] ? tick_setup_sched_timer+0x3d0/0x3d0 [ 181.106401][ C0] __hrtimer_run_queues+0x403/0x840 [ 181.111607][ C0] hrtimer_interrupt+0x38c/0xda0 [ 181.116558][ C0] ? debug_smp_processor_id+0x9/0x20 [ 181.121835][ C0] smp_apic_timer_interrupt+0x109/0x280 [ 181.127371][ C0] apic_timer_interrupt+0xf/0x20 [ 181.132291][ C0] [ 181.135222][ C0] RIP: 0010:free_thread_stack+0x151/0x590 [ 181.140930][ C0] Code: 31 f6 e8 02 8d 6f 00 43 80 3c 2e 00 74 08 4c 89 e7 e8 73 94 6a 00 49 8b 1c 24 48 83 c3 08 48 89 d8 48 c1 e8 03 42 80 3c 28 00 <74> 08 48 89 df e8 55 94 6a 00 48 8b 3b be fc ff ff ff e8 28 04 00 [ 181.160525][ C0] RSP: 0018:ffffc90001f17a28 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 181.168925][ C0] RAX: 1ffff11013aa2881 RBX: ffff88809d514408 RCX: 0000000000000000 [ 181.176885][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffea0002533a40 [ 181.184844][ C0] RBP: ffffc90001f17a60 R08: 000000000003a728 R09: fffffbfff124248a [ 181.192805][ C0] R10: fffffbfff124248a R11: 0000000000000000 R12: ffff88809d5144a0 [ 181.200762][ C0] R13: dffffc0000000000 R14: 1ffff11013aa2894 R15: ffff8880a85a55f8 [ 181.208740][ C0] ? free_thread_stack+0x12e/0x590 [ 181.213844][ C0] put_task_stack+0xa3/0x130 [ 181.218426][ C0] finish_task_switch+0x3f1/0x550 [ 181.223447][ C0] __schedule+0x9a8/0xcc0 [ 181.227775][ C0] preempt_schedule_irq+0xc1/0x140 [ 181.232883][ C0] retint_kernel+0x1b/0x2b [ 181.237289][ C0] RIP: 0010:kmem_cache_free+0xc8/0xf0 [ 181.242651][ C0] Code: 77 07 00 74 42 4c 89 f7 57 9d 0f 1f 44 00 00 e8 5e b3 c9 ff eb 19 e8 f7 b0 c9 ff 48 83 3d a7 e1 77 07 00 74 24 4c 89 f7 57 9d <0f> 1f 44 00 00 4c 89 e7 4c 89 fe e8 58 01 00 00 5b 41 5c 41 5e 41 [ 181.262253][ C0] RSP: 0018:ffffc90001f17c70 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff02 [ 181.270658][ C0] RAX: ffff8880a81cac54 RBX: ffff88821bc4e540 RCX: ffff8880a81ca3c0 [ 181.278620][ C0] RDX: 0000000000000000 RSI: ffffffff81c2bce9 RDI: 0000000000000286 [ 181.286669][ C0] RBP: ffffc90001f17c90 R08: ffff8880a81cac18 R09: ffffc90001f17a80 [ 181.294634][ C0] R10: 000000000000000d R11: 0000000000000000 R12: ffffffff81c2bce9 [ 181.302595][ C0] R13: ffff8880aa048bc0 R14: 0000000000000286 R15: ffff8880aa048b40 [ 181.310568][ C0] ? dentry_free+0xd9/0x150 [ 181.315061][ C0] ? dentry_free+0xd9/0x150 [ 181.319557][ C0] dentry_free+0xd9/0x150 [ 181.323896][ C0] __dentry_kill+0x4a2/0x5e0 [ 181.328497][ C0] dput+0x460/0x6f0 [ 181.332301][ C0] __fput+0x4d3/0x740 [ 181.336280][ C0] ____fput+0x15/0x20 [ 181.340250][ C0] task_work_run+0x17e/0x1b0 [ 181.344841][ C0] prepare_exit_to_usermode+0x483/0x5b0 [ 181.350390][ C0] syscall_return_slowpath+0x113/0x4a0 [ 181.355846][ C0] do_syscall_64+0x11f/0x1c0 [ 181.360429][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 181.366310][ C0] RIP: 0033:0x45ed03 [ 181.370206][ C0] Code: 48 89 ee 48 89 e7 e8 5c 16 fa ff 31 c0 48 89 e2 be 33 89 00 00 89 df e8 bb c0 ff ff 85 c0 78 17 48 63 fb b8 03 00 00 00 0f 05 <8b> 44 24 10 48 83 c4 38 5b 5d c3 66 90 48 c7 c2 d4 ff ff ff 48 63 [ 181.389799][ C0] RSP: 002b:00007ffc0e88cc80 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 181.398214][ C0] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 000000000045ed03 [ 181.406174][ C0] RDX: 00007ffc0e88cc80 RSI: 0000000000008933 RDI: 0000000000000004 [ 181.414145][ C0] RBP: 00000000004c04ac R08: 0000000000000000 R09: 000000000000000a [ 181.422104][ C0] R10: 0000000000000015 R11: 0000000000000246 R12: 0000000000000003 [ 181.430079][ C0] R13: 0000000000000000 R14: 0000000000000006 R15: 00007ffc0e88cf60