[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 45.697237][ T27] audit: type=1800 audit(1578458630.109:25): pid=8321 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 45.716659][ T27] audit: type=1800 audit(1578458630.109:26): pid=8321 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 45.764809][ T27] audit: type=1800 audit(1578458630.109:27): pid=8321 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.98' (ECDSA) to the list of known hosts. 2020/01/08 04:44:01 fuzzer started syzkaller login: [ 57.940168][ T8477] as (8477) used greatest stack depth: 23416 bytes left 2020/01/08 04:44:03 dialing manager at 10.128.0.26:35703 2020/01/08 04:44:03 syscalls: 2824 2020/01/08 04:44:03 code coverage: enabled 2020/01/08 04:44:03 comparison tracing: enabled 2020/01/08 04:44:03 extra coverage: enabled 2020/01/08 04:44:03 setuid sandbox: enabled 2020/01/08 04:44:03 namespace sandbox: enabled 2020/01/08 04:44:03 Android sandbox: /sys/fs/selinux/policy does not exist 2020/01/08 04:44:03 fault injection: enabled 2020/01/08 04:44:03 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/01/08 04:44:03 net packet injection: enabled 2020/01/08 04:44:03 net device setup: enabled 2020/01/08 04:44:03 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/01/08 04:44:03 devlink PCI setup: PCI device 0000:00:10.0 is not available 04:44:04 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f3, &(0x7f0000000300)={'\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="0000000042f7c20fb03026608036b6075500000005002d0815f2b0f1619df02d4554de82fff80200402f"]}) 04:44:04 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000001900)={0x0, {0x2, 0x0, @multicast1}, {0x2, 0x0, @empty}, {0x2, 0x0, @broadcast}, 0x9d4fac34618c97b}) [ 59.922229][ T8486] IPVS: ftp: loaded support on port[0] = 21 [ 60.105303][ T8489] IPVS: ftp: loaded support on port[0] = 21 [ 60.117573][ T8486] chnl_net:caif_netlink_parms(): no params data found 04:44:04 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)={0x2, 0x400000000000003, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6}, @sadb_lifetime={0x4, 0x4}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xb0}}, 0x0) [ 60.185282][ T8486] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.192960][ T8486] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.202019][ T8486] device bridge_slave_0 entered promiscuous mode [ 60.218307][ T8486] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.225800][ T8486] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.233638][ T8486] device bridge_slave_1 entered promiscuous mode [ 60.318520][ T8486] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.357510][ T8486] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.370212][ T8489] chnl_net:caif_netlink_parms(): no params data found [ 60.393215][ T8492] IPVS: ftp: loaded support on port[0] = 21 [ 60.435875][ T8486] team0: Port device team_slave_0 added [ 60.444743][ T8486] team0: Port device team_slave_1 added 04:44:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xc300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 60.488945][ T8489] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.496546][ T8489] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.504419][ T8489] device bridge_slave_0 entered promiscuous mode [ 60.568686][ T8486] device hsr_slave_0 entered promiscuous mode [ 60.655938][ T8486] device hsr_slave_1 entered promiscuous mode [ 60.686012][ T8489] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.693113][ T8489] bridge0: port 2(bridge_slave_1) entered disabled state 04:44:05 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) socketpair$unix(0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000680)=""/73) r0 = memfd_create(&(0x7f00000005c0)='\xe87y\xd8\x0e\xfa\xce\xbc`\v\x85\x9eB\xf7\xc1\xbd\x0e\x14\xeeG\xaf\xe7\xb3?\xc7x\xbd\tR\xc5\r.\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x85C\x8ch\x95{\xeb\xef|\xf9\x89\x00\x00\x00\x00d6\xcbFw\xec2[?', 0x800000000006) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00000001c0)={0xf48b, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) mmap(&(0x7f0000011000/0x6000)=nil, 0x6000, 0x0, 0x32, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, 0x0, &(0x7f0000000580)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000340)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140), 0x111}}, 0x20) symlink(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00') getuid() [ 60.703328][ T8489] device bridge_slave_1 entered promiscuous mode [ 60.722472][ T8494] IPVS: ftp: loaded support on port[0] = 21 [ 60.796315][ T8489] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.829972][ T8489] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.970288][ T8489] team0: Port device team_slave_0 added [ 60.979054][ T8497] IPVS: ftp: loaded support on port[0] = 21 [ 60.987291][ T8492] chnl_net:caif_netlink_parms(): no params data found 04:44:05 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) open(&(0x7f0000000e00)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000200)='auxv\x00') lseek(r0, 0x203ffffd, 0x0) [ 61.023817][ T8489] team0: Port device team_slave_1 added [ 61.119589][ T8492] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.145289][ T8492] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.153713][ T8492] device bridge_slave_0 entered promiscuous mode [ 61.286611][ T8489] device hsr_slave_0 entered promiscuous mode [ 61.335258][ T8489] device hsr_slave_1 entered promiscuous mode [ 61.395310][ T8489] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.403034][ T8489] Cannot create hsr debugfs directory [ 61.408817][ T8492] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.416043][ T8492] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.423700][ T8492] device bridge_slave_1 entered promiscuous mode [ 61.447551][ T8486] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 61.532575][ T8492] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.551997][ T8499] IPVS: ftp: loaded support on port[0] = 21 [ 61.563848][ T8486] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 61.612413][ T8492] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.621689][ T8494] chnl_net:caif_netlink_parms(): no params data found [ 61.658166][ T8486] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 61.710188][ T8486] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 61.827776][ T8492] team0: Port device team_slave_0 added [ 61.840006][ T8497] chnl_net:caif_netlink_parms(): no params data found [ 61.863546][ T8492] team0: Port device team_slave_1 added [ 61.903087][ T8497] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.910357][ T8497] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.918292][ T8497] device bridge_slave_0 entered promiscuous mode [ 61.987652][ T8492] device hsr_slave_0 entered promiscuous mode [ 62.025154][ T8492] device hsr_slave_1 entered promiscuous mode [ 62.065034][ T8492] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.072594][ T8492] Cannot create hsr debugfs directory [ 62.081287][ T8497] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.088752][ T8497] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.096700][ T8497] device bridge_slave_1 entered promiscuous mode [ 62.108029][ T8494] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.115887][ T8494] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.123670][ T8494] device bridge_slave_0 entered promiscuous mode [ 62.134096][ T8494] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.141455][ T8494] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.149480][ T8494] device bridge_slave_1 entered promiscuous mode [ 62.169310][ T8497] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.200614][ T8497] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.218089][ T8489] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 62.273006][ T8489] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 62.339312][ T8489] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 62.387963][ T8489] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 62.454274][ T8494] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.466589][ T8494] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.501503][ T8497] team0: Port device team_slave_0 added [ 62.548706][ T8497] team0: Port device team_slave_1 added [ 62.617414][ T8497] device hsr_slave_0 entered promiscuous mode [ 62.655217][ T8497] device hsr_slave_1 entered promiscuous mode [ 62.685026][ T8497] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.692621][ T8497] Cannot create hsr debugfs directory [ 62.702950][ T8494] team0: Port device team_slave_0 added [ 62.712747][ T8494] team0: Port device team_slave_1 added [ 62.799022][ T8494] device hsr_slave_0 entered promiscuous mode [ 62.855290][ T8494] device hsr_slave_1 entered promiscuous mode [ 62.914915][ T8494] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.923101][ T8494] Cannot create hsr debugfs directory [ 62.931681][ T8499] chnl_net:caif_netlink_parms(): no params data found [ 62.984112][ T8492] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.060963][ T8492] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.134062][ T8492] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.191213][ T8499] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.198713][ T8499] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.206653][ T8499] device bridge_slave_0 entered promiscuous mode [ 63.215479][ T8492] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.287519][ T8499] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.294579][ T8499] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.303316][ T8499] device bridge_slave_1 entered promiscuous mode [ 63.333676][ T8486] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.347063][ T8499] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.360589][ T8499] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.430986][ T8494] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.479010][ T8499] team0: Port device team_slave_0 added [ 63.490718][ T3932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.498941][ T3932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.509813][ T8486] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.521319][ T8494] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.569141][ T8489] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.577012][ T8499] team0: Port device team_slave_1 added [ 63.638167][ T8499] device hsr_slave_0 entered promiscuous mode [ 63.675240][ T8499] device hsr_slave_1 entered promiscuous mode [ 63.725310][ T8499] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.732903][ T8499] Cannot create hsr debugfs directory [ 63.746126][ T8494] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.778760][ T8494] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.837000][ T8497] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 63.878055][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.888288][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.896947][ T2678] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.904155][ T2678] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.912194][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.921584][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.929985][ T2678] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.937055][ T2678] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.947249][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.961636][ T3932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.973171][ T8497] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 64.027267][ T8497] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 64.072373][ T8497] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 64.142332][ T2670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.151575][ T2670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.159878][ T2670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.167927][ T2670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.178248][ T2670] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.187099][ T2670] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.214003][ T8486] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 64.225284][ T8486] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.244779][ T8489] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.254045][ T3932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.262809][ T3932] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.271511][ T3932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.281393][ T3932] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.290298][ T3932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.299692][ T3932] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.309559][ T3932] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.342628][ T8492] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.364542][ T2670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.374504][ T2670] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.383746][ T2670] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.390851][ T2670] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.401844][ T2670] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.435740][ T3932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.444287][ T3932] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.454010][ T3932] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.461121][ T3932] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.469738][ T3932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.478634][ T3932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.503221][ T8492] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.532133][ T3932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.541042][ T3932] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.549760][ T3932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.557920][ T3932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.566248][ T3932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.574674][ T3932] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.588287][ T8497] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.608941][ T8494] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.616601][ T3932] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.624452][ T3932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.632822][ T3932] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.641322][ T3932] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.648947][ T3932] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.660295][ T8489] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.672043][ T8489] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.698709][ T2670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.708643][ T2670] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.717353][ T2670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.727101][ T2670] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.735610][ T2670] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.742816][ T2670] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.750567][ T2670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.758816][ T2670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.767005][ T2670] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.782777][ T8486] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.792432][ T8499] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 64.837330][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.847765][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.857249][ T2678] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.864418][ T2678] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.872523][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.880734][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.890560][ T8497] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.906001][ T8494] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.925116][ T8499] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 64.959406][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.968359][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.977031][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.984068][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.992864][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.002305][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.010979][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.018065][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.026555][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.035306][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.043804][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.052639][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.071616][ T8499] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 65.110858][ T8499] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 65.146507][ T3932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.156627][ T3932] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.165182][ T3932] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.172220][ T3932] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.180229][ T3932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.189039][ T3932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.197788][ T3932] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.206389][ T3932] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.213434][ T3932] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.221028][ T3932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.229506][ T3932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.238428][ T3932] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.246959][ T3932] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.254757][ T3932] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.295310][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.302749][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.311371][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.320561][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.329183][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.337668][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.348227][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.356875][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.365612][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.377310][ T8489] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.387108][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.399456][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.408276][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.417967][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.426929][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.435579][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.454104][ T8486] device veth0_vlan entered promiscuous mode [ 65.471808][ T8492] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.483932][ T8492] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.495060][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.503759][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.513840][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.523020][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.531696][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.539907][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.548612][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.557116][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.565412][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.574111][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.598887][ T8486] device veth1_vlan entered promiscuous mode [ 65.617297][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.625427][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.633021][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.642189][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.650511][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.659438][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.672561][ T8497] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.684260][ T8497] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.693654][ T8494] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.715700][ T3932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.724020][ T3932] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.732919][ T3932] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.741055][ T3932] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.760764][ T8492] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.817955][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.832607][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.842322][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.850886][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.859339][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.870807][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.880842][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.888589][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.903631][ T8489] device veth0_vlan entered promiscuous mode [ 65.920125][ T2670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.934506][ T2670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.947801][ T8497] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.984753][ T8499] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.004834][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 171.011671][ C1] rcu: 1-...!: (10499 ticks this GP) idle=2ce/1/0x4000000000000002 softirq=12750/12750 fqs=0 [ 171.022267][ C1] (t=10500 jiffies g=7097 q=46) [ 171.027222][ C1] rcu: rcu_preempt kthread starved for 10500 jiffies! g7097 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 171.038699][ C1] rcu: RCU grace-period kthread stack dump: [ 171.044585][ C1] rcu_preempt I28984 10 2 0x80004000 [ 171.051044][ C1] Call Trace: [ 171.054341][ C1] __schedule+0x9a0/0xcc0 [ 171.058676][ C1] schedule+0x181/0x210 [ 171.062824][ C1] schedule_timeout+0x14f/0x240 [ 171.067668][ C1] ? run_local_timers+0x120/0x120 [ 171.072711][ C1] rcu_gp_kthread+0xed8/0x1770 [ 171.077502][ C1] kthread+0x332/0x350 [ 171.081565][ C1] ? rcu_report_qs_rsp+0x140/0x140 [ 171.086784][ C1] ? kthread_blkcg+0xe0/0xe0 [ 171.091370][ C1] ret_from_fork+0x24/0x30 [ 171.095824][ C1] NMI backtrace for cpu 1 [ 171.100165][ C1] CPU: 1 PID: 8494 Comm: syz-executor.3 Not tainted 5.5.0-rc5-syzkaller #0 [ 171.108751][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 171.118814][ C1] Call Trace: [ 171.122103][ C1] [ 171.125309][ C1] dump_stack+0x1fb/0x318 [ 171.129660][ C1] nmi_cpu_backtrace+0xaf/0x1a0 [ 171.135113][ C1] ? nmi_trigger_cpumask_backtrace+0x16d/0x290 [ 171.141281][ C1] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 171.147361][ C1] nmi_trigger_cpumask_backtrace+0x174/0x290 [ 171.153951][ C1] arch_trigger_cpumask_backtrace+0x10/0x20 [ 171.159865][ C1] rcu_dump_cpu_stacks+0x15a/0x220 [ 171.164988][ C1] rcu_sched_clock_irq+0xe25/0x1ad0 [ 171.170181][ C1] ? trace_hardirqs_off+0x74/0x80 [ 171.175203][ C1] update_process_times+0x12d/0x180 [ 171.180420][ C1] tick_sched_timer+0x263/0x420 [ 171.185278][ C1] ? tick_setup_sched_timer+0x3d0/0x3d0 [ 171.190830][ C1] __hrtimer_run_queues+0x403/0x840 [ 171.196039][ C1] hrtimer_interrupt+0x38c/0xda0 [ 171.200991][ C1] ? debug_smp_processor_id+0x9/0x20 [ 171.206394][ C1] smp_apic_timer_interrupt+0x109/0x280 [ 171.212018][ C1] apic_timer_interrupt+0xf/0x20 [ 171.216957][ C1] [ 171.219900][ C1] RIP: 0010:free_thread_stack+0x15b/0x590 [ 171.225612][ C1] Code: 2e 00 74 08 4c 89 e7 e8 73 94 6a 00 49 8b 1c 24 48 83 c3 08 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 55 94 6a 00 <48> 8b 3b be fc ff ff ff e8 28 04 00 00 43 80 3c 2e 00 74 08 4c 89 [ 171.245204][ C1] RSP: 0018:ffffc900024275f8 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 171.253605][ C1] RAX: 1ffff1101310f6e1 RBX: ffff88809887b708 RCX: 0000000000000000 [ 171.261568][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffea0002a4e200 [ 171.269525][ C1] RBP: ffffc90002427630 R08: dffffc0000000000 R09: fffffbfff124248a [ 171.277500][ C1] R10: fffffbfff124248a R11: 0000000000000000 R12: ffff8880988a1d20 [ 171.285475][ C1] R13: dffffc0000000000 R14: 1ffff110131143a4 R15: ffff888091a5d7b8 [ 171.293475][ C1] ? free_thread_stack+0x12e/0x590 [ 171.298576][ C1] put_task_stack+0xa3/0x130 [ 171.303154][ C1] finish_task_switch+0x3f1/0x550 [ 171.308176][ C1] __schedule+0x9a8/0xcc0 [ 171.312498][ C1] ? debug_smp_processor_id+0x9/0x20 [ 171.317772][ C1] schedule+0x181/0x210 [ 171.321916][ C1] schedule_preempt_disabled+0x13/0x20 [ 171.327378][ C1] mutex_optimistic_spin+0x445/0x480 [ 171.332656][ C1] __mutex_lock_common+0x2e7/0x2e10 [ 171.337840][ C1] ? rtnetlink_rcv_msg+0x83c/0xd40 [ 171.342953][ C1] ? rcu_lock_release+0x9/0x30 [ 171.347722][ C1] mutex_lock_nested+0x1b/0x30 [ 171.352475][ C1] rtnetlink_rcv_msg+0x83c/0xd40 [ 171.357494][ C1] ? __local_bh_enable_ip+0x13a/0x240 [ 171.362860][ C1] ? local_bh_enable+0x9/0x30 [ 171.367526][ C1] ? trace_hardirqs_on+0x74/0x80 [ 171.372449][ C1] ? __local_bh_enable_ip+0x13a/0x240 [ 171.377813][ C1] ? local_bh_enable+0x1f/0x30 [ 171.383005][ C1] ? rcu_lock_release+0x9/0x30 [ 171.387773][ C1] ? rcu_lock_release+0x9/0x30 [ 171.392534][ C1] netlink_rcv_skb+0x19e/0x3d0 [ 171.397285][ C1] ? rtnetlink_bind+0x80/0x80 [ 171.401958][ C1] rtnetlink_rcv+0x1c/0x20 [ 171.406381][ C1] netlink_unicast+0x767/0x920 [ 171.411142][ C1] netlink_sendmsg+0xa31/0xd50 [ 171.415912][ C1] ? netlink_getsockopt+0x9f0/0x9f0 [ 171.421115][ C1] __sys_sendto+0x442/0x5e0 [ 171.425619][ C1] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 171.431693][ C1] ? prepare_exit_to_usermode+0x221/0x5b0 [ 171.437400][ C1] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 171.442849][ C1] __x64_sys_sendto+0xe5/0x100 [ 171.447607][ C1] do_syscall_64+0xf7/0x1c0 [ 171.452106][ C1] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 171.457985][ C1] RIP: 0033:0x414c43 [ 171.461886][ C1] Code: ff 0f 83 b0 19 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 83 3d 2d 38 66 00 00 75 17 49 89 ca b8 2c 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 81 19 00 00 c3 48 83 ec 08 e8 87 fa ff ff [ 171.481481][ C1] RSP: 002b:00007ffe2adeb9f8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 171.489883][ C1] RAX: ffffffffffffffda RBX: 0000000000a72200 RCX: 0000000000414c43 [ 171.497857][ C1] RDX: 0000000000000040 RSI: 0000000000a72250 RDI: 0000000000000003 [ 171.505828][ C1] RBP: 0000000000000000 R08: 00007ffe2adeba00 R09: 000000000000000c [ 171.513798][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 171.521765][ C1] R13: 0000000000000000 R14: 0000000000a72250 R15: 0000000000000003