[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 52.872425][ T27] audit: type=1800 audit(1578481658.452:25): pid=8419 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 52.891571][ T27] audit: type=1800 audit(1578481658.452:26): pid=8419 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 52.912318][ T27] audit: type=1800 audit(1578481658.452:27): pid=8419 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.87' (ECDSA) to the list of known hosts. 2020/01/08 11:07:46 fuzzer started 2020/01/08 11:07:48 dialing manager at 10.128.0.26:35703 2020/01/08 11:07:48 syscalls: 2824 2020/01/08 11:07:48 code coverage: enabled 2020/01/08 11:07:48 comparison tracing: enabled 2020/01/08 11:07:48 extra coverage: enabled 2020/01/08 11:07:48 setuid sandbox: enabled 2020/01/08 11:07:48 namespace sandbox: enabled 2020/01/08 11:07:48 Android sandbox: /sys/fs/selinux/policy does not exist 2020/01/08 11:07:48 fault injection: enabled 2020/01/08 11:07:48 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/01/08 11:07:48 net packet injection: enabled 2020/01/08 11:07:48 net device setup: enabled 2020/01/08 11:07:48 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/01/08 11:07:48 devlink PCI setup: PCI device 0000:00:10.0 is not available 11:07:49 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x17f) write(r2, &(0x7f000018efdc)="1c0000005e001f0014f9f4ff08000000000000000000005921000000", 0x1c) 11:07:50 executing program 1: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x0, 0x0) read$dsp(r0, &(0x7f00000000c0)=""/202, 0xca) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045002, &(0x7f0000000000)=0x1f40) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)) syzkaller login: [ 64.464495][ T8587] IPVS: ftp: loaded support on port[0] = 21 [ 64.628083][ T8590] IPVS: ftp: loaded support on port[0] = 21 [ 64.663664][ T8587] chnl_net:caif_netlink_parms(): no params data found 11:07:50 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mount(&(0x7f0000000040)=@nullb='/dev/nullb0\x00', &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='ubifs\x00', 0x0, 0x0) [ 64.809958][ T8587] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.826683][ T8587] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.835567][ T8587] device bridge_slave_0 entered promiscuous mode [ 64.871227][ T8587] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.878763][ T8587] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.888141][ T8587] device bridge_slave_1 entered promiscuous mode [ 64.901139][ T8590] chnl_net:caif_netlink_parms(): no params data found [ 64.934089][ T8593] IPVS: ftp: loaded support on port[0] = 21 [ 64.962888][ T8587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link 11:07:50 executing program 3: pwrite64(0xffffffffffffffff, &(0x7f0000000180)="224c17f9439231cecc340bbe676912a37f929d46c5c741d26bab509c", 0x1c, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x890b, &(0x7f0000000140)={'\x00', @ifru_map}) [ 65.002079][ T8587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.029167][ T8590] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.041932][ T8590] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.049940][ T8590] device bridge_slave_0 entered promiscuous mode [ 65.085887][ T8590] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.106811][ T8590] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.114667][ T8590] device bridge_slave_1 entered promiscuous mode [ 65.139695][ T8587] team0: Port device team_slave_0 added [ 65.169014][ T8587] team0: Port device team_slave_1 added [ 65.178765][ T8590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.219841][ T8590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 11:07:50 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r0, 0x0, [0x305f, 0x5f, 0x32e, 0x5f, 0x2e, 0x5f]}, 0x3c) [ 65.349977][ T8587] device hsr_slave_0 entered promiscuous mode [ 65.386915][ T8587] device hsr_slave_1 entered promiscuous mode [ 65.445684][ T8590] team0: Port device team_slave_0 added [ 65.458753][ T8595] IPVS: ftp: loaded support on port[0] = 21 [ 65.485955][ T8590] team0: Port device team_slave_1 added [ 65.495433][ T8593] chnl_net:caif_netlink_parms(): no params data found [ 65.511792][ T8598] IPVS: ftp: loaded support on port[0] = 21 11:07:51 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = memfd_create(&(0x7f00000000c0)='vboxnet0md5sum\x00', 0x0) write(r3, &(0x7f0000000040)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r3, 0x0) r4 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r4, 0x10d, 0x0, 0x0, &(0x7f0000000000)) unshare(0x2000400) r5 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r5, 0x10d, 0xee, 0x0, &(0x7f0000000000)) [ 65.619608][ T8590] device hsr_slave_0 entered promiscuous mode [ 65.657005][ T8590] device hsr_slave_1 entered promiscuous mode [ 65.696968][ T8590] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.704846][ T8590] Cannot create hsr debugfs directory [ 65.733461][ T8600] IPVS: ftp: loaded support on port[0] = 21 [ 65.792034][ T8593] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.799952][ T8593] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.810289][ T8593] device bridge_slave_0 entered promiscuous mode [ 65.819336][ T8593] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.826722][ T8593] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.834419][ T8593] device bridge_slave_1 entered promiscuous mode [ 65.889270][ T8593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.922743][ T8593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.962919][ T8587] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 66.031486][ T8587] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 66.081971][ T8587] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 66.139345][ T8587] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 66.220494][ T8593] team0: Port device team_slave_0 added [ 66.250018][ T8598] chnl_net:caif_netlink_parms(): no params data found [ 66.265912][ T8593] team0: Port device team_slave_1 added [ 66.286305][ T8595] chnl_net:caif_netlink_parms(): no params data found [ 66.302725][ T8590] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 66.362772][ T8590] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 66.442884][ T8590] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 66.509669][ T8590] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 66.709258][ T8593] device hsr_slave_0 entered promiscuous mode [ 66.756848][ T8593] device hsr_slave_1 entered promiscuous mode [ 66.816746][ T8593] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.824316][ T8593] Cannot create hsr debugfs directory [ 66.844969][ T8600] chnl_net:caif_netlink_parms(): no params data found [ 66.870121][ T8598] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.877339][ T8598] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.885023][ T8598] device bridge_slave_0 entered promiscuous mode [ 66.899375][ T8595] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.906462][ T8595] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.914896][ T8595] device bridge_slave_0 entered promiscuous mode [ 66.937827][ T8598] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.944880][ T8598] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.953034][ T8598] device bridge_slave_1 entered promiscuous mode [ 66.964818][ T8595] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.972675][ T8595] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.980715][ T8595] device bridge_slave_1 entered promiscuous mode [ 67.032642][ T8598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.043989][ T8595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.070573][ T8598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.080820][ T8595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.111785][ T8600] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.119387][ T8600] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.128444][ T8600] device bridge_slave_0 entered promiscuous mode [ 67.144836][ T8600] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.152584][ T8600] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.160823][ T8600] device bridge_slave_1 entered promiscuous mode [ 67.180483][ T8598] team0: Port device team_slave_0 added [ 67.190456][ T8595] team0: Port device team_slave_0 added [ 67.200123][ T8595] team0: Port device team_slave_1 added [ 67.215952][ T8598] team0: Port device team_slave_1 added [ 67.241093][ T8600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.259524][ T8593] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 67.299383][ T8600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.349408][ T8595] device hsr_slave_0 entered promiscuous mode [ 67.386957][ T8595] device hsr_slave_1 entered promiscuous mode [ 67.426742][ T8595] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.434515][ T8595] Cannot create hsr debugfs directory [ 67.440409][ T8593] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 67.493768][ T8593] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 67.578210][ T8600] team0: Port device team_slave_0 added [ 67.600927][ T8593] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 67.699613][ T8598] device hsr_slave_0 entered promiscuous mode [ 67.737069][ T8598] device hsr_slave_1 entered promiscuous mode [ 67.777431][ T8598] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.785014][ T8598] Cannot create hsr debugfs directory [ 67.795055][ T8587] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.803308][ T8600] team0: Port device team_slave_1 added [ 67.815365][ T8590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.949461][ T8600] device hsr_slave_0 entered promiscuous mode [ 67.996891][ T8600] device hsr_slave_1 entered promiscuous mode [ 68.036651][ T8600] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.044393][ T8600] Cannot create hsr debugfs directory [ 68.057213][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.065206][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.073539][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.081984][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.098125][ T8590] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.117349][ T8587] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.125697][ T8598] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 68.182377][ T8598] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 68.270728][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.279517][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.288851][ T2678] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.296096][ T2678] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.304108][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.313575][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.321966][ T2678] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.329095][ T2678] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.337173][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.345649][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.354409][ T2678] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.361503][ T2678] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.369140][ T8598] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 68.412440][ T8598] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 68.509213][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.520608][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.529451][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.538084][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.546416][ T2687] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.553511][ T2687] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.561966][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.570638][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.579527][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.588289][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.597161][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.605599][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.650566][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.662912][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.671668][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.680973][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.689631][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.698888][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.707819][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.716356][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.739019][ T8595] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 68.770071][ T8595] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 68.852523][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.861441][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.871661][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.880945][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.889556][ T8595] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 68.962233][ T8587] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.973991][ T8587] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.994969][ T8593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.003182][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.011830][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.021103][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.029512][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.041036][ T8595] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 69.104147][ T8600] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 69.152652][ T8600] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 69.218835][ T8590] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.242203][ T8600] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 69.278310][ T2833] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.285967][ T2833] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.294225][ T2833] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.301864][ T2833] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.310538][ T8593] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.339295][ T8600] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 69.358818][ T2833] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.368742][ T2833] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.377579][ T2833] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.384618][ T2833] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.392263][ T2833] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.400756][ T2833] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.409157][ T2833] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.416193][ T2833] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.423796][ T2833] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.432311][ T2833] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.440829][ T2833] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.449497][ T2833] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.459272][ T2833] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.467442][ T2833] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.479020][ T8587] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.519708][ T2862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.530086][ T2862] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.540457][ T2862] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.547990][ T2862] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.562285][ T8593] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 69.573689][ T8593] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.612766][ T8590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.622415][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.632711][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.641670][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.650169][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.659020][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.667879][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.676352][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.689043][ T8598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.722987][ T8598] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.737520][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.745355][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.759728][ T8595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.782538][ T2862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.791759][ T2862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.801050][ T2862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.810012][ T2862] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.818997][ T2862] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.826626][ T2862] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.834294][ T2862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.842995][ T2862] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.851364][ T2862] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.858512][ T2862] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.866155][ T2862] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.873735][ T2862] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.882224][ T2862] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.915647][ T8593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.924243][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.944800][ T8587] device veth0_vlan entered promiscuous mode [ 69.959991][ T8595] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.968620][ T2862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.977874][ T2862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.986060][ T2862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.994498][ T2862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.003304][ T2862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.011339][ T2862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.019950][ T2862] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.028226][ T2862] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.035971][ T2862] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.043856][ T2862] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.054076][ T8590] device veth0_vlan entered promiscuous mode [ 70.078386][ T8600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.093958][ T8587] device veth1_vlan entered promiscuous mode [ 70.101929][ T2862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.112862][ T2862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.121792][ T2862] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.130691][ T2862] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.137831][ T2862] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.145435][ T2862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.154533][ T2862] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.162908][ T2862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.171736][ T2862] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.180371][ T2862] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.187476][ T2862] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.195203][ T2862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.204164][ T2862] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.213304][ T2862] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.221455][ T2862] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.236868][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.244551][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.262743][ T8590] device veth1_vlan entered promiscuous mode [ 70.285188][ T8598] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 70.296212][ T8598] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.310889][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.322490][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.331346][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.340409][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.350311][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.358805][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.367409][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.400024][ T8593] device veth0_vlan entered promiscuous mode [ 70.411667][ T8600] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.427599][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.435797][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.444845][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.467887][ T8593] device veth1_vlan entered promiscuous mode [ 70.491493][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.500086][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.508260][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.516101][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.525035][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.533888][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.542581][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.550071][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.557572][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.565948][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.576218][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.584546][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.603121][ T8598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.614437][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.624355][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.633448][ T2687] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.640582][ T2687] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.651946][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.661329][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.672039][ T2687] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.679218][ T2687] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.688334][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 175.666516][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 175.673393][ C1] rcu: 1-...!: (10499 ticks this GP) idle=ed6/1/0x4000000000000002 softirq=13875/13875 fqs=1 [ 175.683887][ C1] (t=10501 jiffies g=6961 q=75) [ 175.688819][ C1] rcu: rcu_preempt kthread starved for 10500 jiffies! g6961 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 175.699903][ C1] rcu: RCU grace-period kthread stack dump: [ 175.705779][ C1] rcu_preempt R running task 28984 10 2 0x80004000 [ 175.714452][ C1] Call Trace: [ 175.717734][ C1] __schedule+0x9a0/0xcc0 [ 175.722065][ C1] schedule+0x181/0x210 [ 175.726210][ C1] schedule_timeout+0x14f/0x240 [ 175.731053][ C1] ? run_local_timers+0x120/0x120 [ 175.736068][ C1] rcu_gp_kthread+0xed8/0x1770 [ 175.740842][ C1] kthread+0x332/0x350 [ 175.744894][ C1] ? rcu_report_qs_rsp+0x140/0x140 [ 175.749991][ C1] ? kthread_blkcg+0xe0/0xe0 [ 175.754572][ C1] ret_from_fork+0x24/0x30 [ 175.759011][ C1] NMI backtrace for cpu 1 [ 175.763435][ C1] CPU: 1 PID: 8606 Comm: syz-executor.0 Not tainted 5.5.0-rc5-syzkaller #0 [ 175.772007][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 175.782399][ C1] Call Trace: [ 175.785683][ C1] [ 175.788563][ C1] dump_stack+0x1fb/0x318 [ 175.792885][ C1] nmi_cpu_backtrace+0xaf/0x1a0 [ 175.797725][ C1] ? nmi_trigger_cpumask_backtrace+0x16d/0x290 [ 175.803866][ C1] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 175.810009][ C1] nmi_trigger_cpumask_backtrace+0x174/0x290 [ 175.815981][ C1] arch_trigger_cpumask_backtrace+0x10/0x20 [ 175.821859][ C1] rcu_dump_cpu_stacks+0x15a/0x220 [ 175.827225][ C1] rcu_sched_clock_irq+0xe25/0x1ad0 [ 175.832413][ C1] ? trace_hardirqs_off+0x74/0x80 [ 175.837426][ C1] update_process_times+0x12d/0x180 [ 175.842612][ C1] tick_sched_timer+0x263/0x420 [ 175.847450][ C1] ? tick_setup_sched_timer+0x3d0/0x3d0 [ 175.852983][ C1] __hrtimer_run_queues+0x403/0x840 [ 175.858194][ C1] hrtimer_interrupt+0x38c/0xda0 [ 175.863139][ C1] ? debug_smp_processor_id+0x9/0x20 [ 175.868437][ C1] smp_apic_timer_interrupt+0x109/0x280 [ 175.874058][ C1] apic_timer_interrupt+0xf/0x20 [ 175.878989][ C1] [ 175.882002][ C1] RIP: 0010:free_thread_stack+0x133/0x590 [ 175.887721][ C1] Code: 00 ea ff ff 48 01 c7 be 03 00 00 00 e8 86 91 61 00 e9 5d 04 00 00 e8 3c 2c 2e 00 48 89 df 31 f6 e8 02 8d 6f 00 43 80 3c 2e 00 <74> 08 4c 89 e7 e8 73 94 6a 00 49 8b 1c 24 48 83 c3 08 48 89 d8 48 [ 175.907313][ C1] RSP: 0018:ffffc900027174d0 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 175.915709][ C1] RAX: 0000000000000001 RBX: ffffea0002779040 RCX: 0000000000000000 [ 175.923669][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffea0002779040 [ 175.931645][ C1] RBP: ffffc90002717508 R08: 000000000003a728 R09: ffffed10125f2729 [ 175.939604][ C1] R10: ffffed10125f2729 R11: 0000000000000000 R12: ffff88809634c1a0 [ 175.947567][ C1] R13: dffffc0000000000 R14: 1ffff11012c69834 R15: ffff888092f93938 [ 175.955550][ C1] put_task_stack+0xa3/0x130 [ 175.960129][ C1] finish_task_switch+0x3f1/0x550 [ 175.965149][ C1] __schedule+0x9a8/0xcc0 [ 175.969476][ C1] ? ___preempt_schedule_notrace+0x16/0x27 [ 175.975270][ C1] preempt_schedule_notrace+0xdb/0x120 [ 175.980810][ C1] ___preempt_schedule_notrace+0x16/0x27 [ 175.986442][ C1] ? rcu_is_watching+0x57/0xa0 [ 175.991219][ C1] rcu_is_watching+0x82/0xa0 [ 175.995824][ C1] memcg_kmem_get_cache+0x2e8/0x570 [ 176.001018][ C1] ? __should_failslab+0x11a/0x160 [ 176.006125][ C1] ? proc_alloc_inode+0x1f/0xe0 [ 176.010971][ C1] kmem_cache_alloc+0x86/0x2e0 [ 176.015736][ C1] ? init_once+0x20/0x20 [ 176.019971][ C1] proc_alloc_inode+0x1f/0xe0 [ 176.024632][ C1] ? init_once+0x20/0x20 [ 176.029212][ C1] new_inode_pseudo+0x68/0x240 [ 176.033963][ C1] new_inode+0x28/0x1c0 [ 176.038110][ C1] proc_pid_make_inode+0x27/0x1d0 [ 176.043124][ C1] proc_pid_instantiate+0x4f/0x1a0 [ 176.048252][ C1] proc_pid_lookup+0x21f/0x300 [ 176.053017][ C1] proc_root_lookup+0x22/0x50 [ 176.057688][ C1] __lookup_slow+0x285/0x380 [ 176.062305][ C1] walk_component+0x2d2/0x5f0 [ 176.066979][ C1] ? inode_permission+0xe0/0x520 [ 176.071916][ C1] link_path_walk+0x75b/0x1410 [ 176.076690][ C1] path_openat+0x139/0x4240 [ 176.081199][ C1] ? __kasan_kmalloc+0x178/0x1b0 [ 176.086133][ C1] ? quarantine_put+0xb7/0x1f0 [ 176.090924][ C1] do_filp_open+0x192/0x3d0 [ 176.095425][ C1] ? noop_direct_IO+0x20/0x20 [ 176.100108][ C1] do_sys_open+0x29f/0x560 [ 176.104520][ C1] __x64_sys_open+0x87/0x90 [ 176.109014][ C1] do_syscall_64+0xf7/0x1c0 [ 176.113512][ C1] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 176.119389][ C1] RIP: 0033:0x414cc0 [ 176.123281][ C1] Code: 05 48 3d 01 f0 ff ff 0f 83 2d 19 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 83 3d ad 37 66 00 00 75 14 b8 02 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff [ 176.142881][ C1] RSP: 002b:00007ffcb8a4d818 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 176.151277][ C1] RAX: ffffffffffffffda RBX: 00007ffcb8a4d844 RCX: 0000000000414cc0 [ 176.159255][ C1] RDX: 00007ffcb8a4d84a RSI: 0000000000080001 RDI: 00000000004c0a49 [ 176.167216][ C1] RBP: 00007ffcb8a4d840 R08: 0000000000000000 R09: 0000000000000004 [ 176.175307][ C1] R10: 0000000000000075 R11: 0000000000000246 R12: 00000000004c0a49 [ 176.183274][ C1] R13: 00007ffcb8a4dd60 R14: 0000000000000000 R15: 00007ffcb8a4dd70