[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.201' (ECDSA) to the list of known hosts. 2019/12/04 00:50:23 fuzzer started 2019/12/04 00:50:25 dialing manager at 10.128.0.26:42111 2019/12/04 00:50:25 syscalls: 2689 2019/12/04 00:50:25 code coverage: enabled 2019/12/04 00:50:25 comparison tracing: enabled 2019/12/04 00:50:25 extra coverage: extra coverage is not supported by the kernel 2019/12/04 00:50:25 setuid sandbox: enabled 2019/12/04 00:50:25 namespace sandbox: enabled 2019/12/04 00:50:25 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/04 00:50:25 fault injection: enabled 2019/12/04 00:50:25 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/04 00:50:25 net packet injection: enabled 2019/12/04 00:50:25 net device setup: enabled 2019/12/04 00:50:25 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/12/04 00:50:25 devlink PCI setup: PCI device 0000:00:10.0 is not available 00:50:26 executing program 0: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000640)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r2 = dup2(r1, r0) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000040)={0x29, 0x4, 0x0, {0x1, 0xffffffff00000000, 0x1, 0x0, [0x0]}}, 0x29) 00:50:26 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r3) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup2(r5, r6) ppoll(&(0x7f0000000080)=[{r2}, {r4}, {r7}], 0x3, 0x0, 0x0, 0x0) syzkaller login: [ 57.838627][ T8242] IPVS: ftp: loaded support on port[0] = 21 [ 57.950438][ T8244] IPVS: ftp: loaded support on port[0] = 21 00:50:27 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x0, @local}}, 0x0, 0x40, 0x0, "41a0a84bd459485bb116e00349e915b1bc54791da97f7049816b1e6516915fd10c58883d497ba9829ceeabe4544c06d1f287834f279d7a9030cad94ec3e61787a7227dd3f2baa5acff93dc92fdb85fd7"}, 0xd8) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) io_submit(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) socketpair$unix(0x1, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYBLOB="282fd82a93529dd35fab061150d88b11ee368257bd531f371d50cacc043eccdd432a0809e92afee46caa452759f8e332e20133e31777b9aeb242bf6851b8e6c4a51620ceaa31c35f530de6e12de387d41bf16b282bb53a218d8aae98500871549d15af9bd9ed1ea47f30248cb64c71c98b2b2aedcf57763d20a8d20333c665f270556ef4f27fa3f08e314be06a4a35ecd9ee62470a822a30946d2b2bd77dfb4ec603864e4a383235f13a96a4f1907d327ab0654729381dee76244718c6e0e51204e199258af9ab844de7da1c455bc7558eb786e9dca6e8fbf3ba", @ANYRES16, @ANYRES16, @ANYRESOCT, @ANYRESHEX=r1]], 0x1000007a4) [ 58.079256][ T8242] chnl_net:caif_netlink_parms(): no params data found [ 58.207068][ T8242] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.215333][ T8247] IPVS: ftp: loaded support on port[0] = 21 [ 58.229989][ T8242] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.237810][ T8242] device bridge_slave_0 entered promiscuous mode [ 58.249888][ T8244] chnl_net:caif_netlink_parms(): no params data found [ 58.282656][ T8242] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.290676][ T8242] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.298578][ T8242] device bridge_slave_1 entered promiscuous mode 00:50:27 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xa, 0x2, 0x6d, 0x20000000000001, 0x0, 0x0}, 0x3c) keyctl$update(0x2, 0x0, &(0x7f0000000240)="db", 0x1) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r0, &(0x7f0000000240), &(0x7f0000000280)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000002580)={r0, &(0x7f0000002440), 0x0}, 0x20) [ 58.373537][ T8242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.411422][ T8244] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.418512][ T8244] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.429724][ T8244] device bridge_slave_0 entered promiscuous mode [ 58.438630][ T8242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.482053][ T8244] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.499030][ T8244] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.506966][ T8244] device bridge_slave_1 entered promiscuous mode [ 58.566262][ T8242] team0: Port device team_slave_0 added [ 58.610007][ T8247] chnl_net:caif_netlink_parms(): no params data found [ 58.625052][ T8242] team0: Port device team_slave_1 added [ 58.640584][ T8244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.651457][ T8244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 00:50:27 executing program 4: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000000)={0x3, 0x0, [{0x0, 0x0, 0x3b, 0xce9}, {0x0, 0x0, 0x7ff}, {0x0, 0x1ff, 0xd3}]}) [ 58.688565][ T8251] IPVS: ftp: loaded support on port[0] = 21 [ 58.782373][ T8242] device hsr_slave_0 entered promiscuous mode [ 58.819278][ T8242] device hsr_slave_1 entered promiscuous mode [ 58.865483][ T8244] team0: Port device team_slave_0 added [ 58.878311][ T8247] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.898810][ T8247] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.906454][ T8247] device bridge_slave_0 entered promiscuous mode 00:50:28 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) ioprio_get$uid(0x3, r1) [ 58.920636][ T8244] team0: Port device team_slave_1 added [ 58.942707][ T8247] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.950253][ T8247] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.958152][ T8247] device bridge_slave_1 entered promiscuous mode [ 59.070494][ T8244] device hsr_slave_0 entered promiscuous mode [ 59.119254][ T8244] device hsr_slave_1 entered promiscuous mode [ 59.168938][ T8244] debugfs: Directory 'hsr0' with parent '/' already present! [ 59.181923][ T8253] IPVS: ftp: loaded support on port[0] = 21 [ 59.221638][ T8247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.243707][ T8242] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 59.245874][ T8255] IPVS: ftp: loaded support on port[0] = 21 [ 59.281804][ T8247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.308407][ T8247] team0: Port device team_slave_0 added [ 59.320281][ T8242] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 59.353838][ T8242] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 59.413093][ T8242] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 59.473978][ T8247] team0: Port device team_slave_1 added [ 59.551639][ T8247] device hsr_slave_0 entered promiscuous mode [ 59.579034][ T8247] device hsr_slave_1 entered promiscuous mode [ 59.648994][ T8247] debugfs: Directory 'hsr0' with parent '/' already present! [ 59.692381][ T8244] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 59.750892][ T8244] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 59.811492][ T8244] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 59.851815][ T8244] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 59.943873][ T8251] chnl_net:caif_netlink_parms(): no params data found [ 59.995883][ T8247] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 60.043937][ T8251] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.051555][ T8251] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.059616][ T8251] device bridge_slave_0 entered promiscuous mode [ 60.066577][ T8247] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 60.111451][ T8247] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 60.161178][ T8247] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 60.203064][ T8251] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.210692][ T8251] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.218296][ T8251] device bridge_slave_1 entered promiscuous mode [ 60.281852][ T8253] chnl_net:caif_netlink_parms(): no params data found [ 60.297394][ T8251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.362622][ T8251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.373505][ T8253] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.380936][ T8253] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.388544][ T8253] device bridge_slave_0 entered promiscuous mode [ 60.428687][ T8251] team0: Port device team_slave_0 added [ 60.434620][ T8253] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.444458][ T8253] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.452355][ T8253] device bridge_slave_1 entered promiscuous mode [ 60.462525][ T8244] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.478506][ T8247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.487011][ T8251] team0: Port device team_slave_1 added [ 60.508878][ T8255] chnl_net:caif_netlink_parms(): no params data found [ 60.522941][ T8244] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.561656][ T8251] device hsr_slave_0 entered promiscuous mode [ 60.619341][ T8251] device hsr_slave_1 entered promiscuous mode [ 60.678836][ T8251] debugfs: Directory 'hsr0' with parent '/' already present! [ 60.693956][ T2718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.702351][ T2718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.727838][ T8253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.739236][ T8253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.750536][ T2718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.759649][ T2718] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.768017][ T2718] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.775186][ T2718] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.783267][ T2718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.791275][ T2718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.798992][ T2718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.807680][ T2718] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.816020][ T2718] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.823070][ T2718] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.833817][ T2718] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.849194][ T8247] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.880964][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.891559][ T8253] team0: Port device team_slave_0 added [ 60.899497][ T8253] team0: Port device team_slave_1 added [ 60.951046][ T8253] device hsr_slave_0 entered promiscuous mode [ 60.970312][ T8253] device hsr_slave_1 entered promiscuous mode [ 61.008809][ T8253] debugfs: Directory 'hsr0' with parent '/' already present! [ 61.017653][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.033144][ T8255] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.040938][ T8255] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.048555][ T8255] device bridge_slave_0 entered promiscuous mode [ 61.057062][ T8255] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.064208][ T8255] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.072316][ T8255] device bridge_slave_1 entered promiscuous mode [ 61.079413][ T8251] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 61.133828][ T8251] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 61.174532][ T8251] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 61.234095][ T8251] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 61.293261][ T2718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.303339][ T2718] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.312061][ T2718] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.319236][ T2718] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.326860][ T2718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.335502][ T2718] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.343912][ T2718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.352707][ T2718] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.361822][ T2718] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.369741][ T2718] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.393308][ T8255] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.424192][ T8255] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.442951][ T8242] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.463035][ T8253] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 61.513309][ T3892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.523063][ T3892] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.531795][ T3892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.540252][ T3892] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.548342][ T3892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.557105][ T3892] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.565527][ T3892] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.572570][ T3892] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.580896][ T3892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.589530][ T3892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.597857][ T3892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.606645][ T3892] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.614892][ T3892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.623698][ T3892] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.637372][ T8244] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.647759][ T8253] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 61.671522][ T8253] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 61.714264][ T8253] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 61.785681][ T8255] team0: Port device team_slave_0 added [ 61.792258][ T3892] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.801357][ T3892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.809653][ T3892] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.817708][ T3892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.825368][ T3892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.837367][ T8242] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.850689][ T8247] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.862462][ T8247] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.874238][ T8255] team0: Port device team_slave_1 added [ 61.893503][ T3891] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.901603][ T3891] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.910504][ T3891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.918818][ T3891] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.932618][ T8244] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.991955][ T8255] device hsr_slave_0 entered promiscuous mode [ 62.019145][ T8255] device hsr_slave_1 entered promiscuous mode [ 62.069428][ T8255] debugfs: Directory 'hsr0' with parent '/' already present! [ 62.082160][ T2718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.093370][ T2718] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.103481][ T2718] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.110618][ T2718] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.119335][ T2718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.127821][ T2718] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.136301][ T2718] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.143558][ T2718] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.171971][ T8247] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.181785][ T8251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.204363][ T8257] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.212446][ T8257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.221177][ T8257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.231778][ T8257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.240895][ T8257] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.252899][ T8257] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.260633][ T8257] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.269045][ T8257] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.296191][ T3891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.313091][ T3891] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.333259][ T3891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.344485][ T3891] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.355521][ T3891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.367078][ T3891] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 167.338708][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 167.345544][ C1] rcu: 1-...!: (10499 ticks this GP) idle=a7e/1/0x4000000000000002 softirq=10045/10050 fqs=38 [ 167.356209][ C1] (t=10500 jiffies g=6417 q=108) [ 167.361231][ C1] rcu: rcu_preempt kthread starved for 10421 jiffies! g6417 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 167.372317][ C1] rcu: RCU grace-period kthread stack dump: [ 167.378197][ C1] rcu_preempt R running task 29104 10 2 0x80004000 [ 167.386100][ C1] Call Trace: [ 167.389402][ C1] __schedule+0x9a0/0xcc0 [ 167.393731][ C1] schedule+0x181/0x210 [ 167.397877][ C1] schedule_timeout+0x14f/0x240 [ 167.402733][ C1] ? run_local_timers+0x120/0x120 [ 167.407793][ C1] rcu_gp_kthread+0xed8/0x1770 [ 167.412593][ C1] kthread+0x332/0x350 [ 167.416684][ C1] ? rcu_report_qs_rsp+0x140/0x140 [ 167.421903][ C1] ? kthread_blkcg+0xe0/0xe0 [ 167.426492][ C1] ret_from_fork+0x24/0x30 [ 167.430916][ C1] NMI backtrace for cpu 1 [ 167.435236][ C1] CPU: 1 PID: 4081 Comm: udevd Not tainted 5.4.0-syzkaller #0 [ 167.442678][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 167.452728][ C1] Call Trace: [ 167.456000][ C1] [ 167.458842][ C1] dump_stack+0x1fb/0x318 [ 167.463159][ C1] nmi_cpu_backtrace+0xaf/0x1a0 [ 167.467995][ C1] ? nmi_trigger_cpumask_backtrace+0x16d/0x290 [ 167.474140][ C1] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 167.480194][ C1] nmi_trigger_cpumask_backtrace+0x174/0x290 [ 167.486162][ C1] arch_trigger_cpumask_backtrace+0x10/0x20 [ 167.492040][ C1] rcu_dump_cpu_stacks+0x15a/0x220 [ 167.497144][ C1] rcu_sched_clock_irq+0xe25/0x1ad0 [ 167.502332][ C1] ? trace_hardirqs_off+0x74/0x80 [ 167.507345][ C1] update_process_times+0x12d/0x180 [ 167.512533][ C1] tick_sched_timer+0x263/0x420 [ 167.517368][ C1] ? tick_setup_sched_timer+0x3d0/0x3d0 [ 167.522899][ C1] __hrtimer_run_queues+0x403/0x840 [ 167.528098][ C1] hrtimer_interrupt+0x38c/0xda0 [ 167.533040][ C1] ? debug_smp_processor_id+0x9/0x20 [ 167.538322][ C1] smp_apic_timer_interrupt+0x109/0x280 [ 167.543860][ C1] apic_timer_interrupt+0xf/0x20 [ 167.548781][ C1] [ 167.551709][ C1] RIP: 0010:free_thread_stack+0x15b/0x590 [ 167.557418][ C1] Code: 2e 00 74 08 4c 89 e7 e8 43 a4 69 00 49 8b 1c 24 48 83 c3 08 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 25 a4 69 00 <48> 8b 3b be fc ff ff ff e8 28 04 00 00 43 80 3c 2e 00 74 08 4c 89 [ 167.577121][ C1] RSP: 0018:ffffc90001277b10 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 167.585522][ C1] RAX: 1ffff11014de0361 RBX: ffff8880a6f01b08 RCX: 0000000000000000 [ 167.593482][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffea000282aa00 [ 167.601441][ C1] RBP: ffffc90001277b48 R08: 000000000003a768 R09: ffffed101310aecf [ 167.609399][ C1] R10: ffffed101310aecf R11: 0000000000000000 R12: ffff8880a6f01ba0 [ 167.617377][ C1] R13: dffffc0000000000 R14: 1ffff11014de0374 R15: ffff888098857668 [ 167.625369][ C1] put_task_stack+0xa3/0x130 [ 167.629980][ C1] finish_task_switch+0x3f1/0x550 [ 167.635000][ C1] __schedule+0x9a8/0xcc0 [ 167.639368][ C1] schedule+0x181/0x210 [ 167.643520][ C1] schedule_hrtimeout_range_clock+0x108/0x510 [ 167.649609][ C1] ? _raw_spin_unlock_irq+0x22/0x80 [ 167.654799][ C1] schedule_hrtimeout_range+0x2a/0x40 [ 167.660163][ C1] ep_poll+0xa4d/0xe80 [ 167.664233][ C1] ? debug_smp_processor_id+0x1c/0x20 [ 167.669593][ C1] ? do_task_dead+0xc0/0xc0 [ 167.674094][ C1] do_epoll_wait+0x1ee/0x260 [ 167.678677][ C1] __x64_sys_epoll_wait+0x9a/0xb0 [ 167.683687][ C1] do_syscall_64+0xf7/0x1c0 [ 167.688182][ C1] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 167.694061][ C1] RIP: 0033:0x7fecdf829943 [ 167.698466][ C1] Code: 00 31 d2 48 29 c2 64 89 11 48 83 c8 ff eb ea 90 90 90 90 90 90 90 90 83 3d b5 dc 2a 00 00 75 13 49 89 ca b8 e8 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 34 c3 48 83 ec 08 e8 3b c4 00 00 48 89 04 24 [ 167.718070][ C1] RSP: 002b:00007ffe406ae768 EFLAGS: 00000246 ORIG_RAX: 00000000000000e8 [ 167.726465][ C1] RAX: ffffffffffffffda RBX: 00000000ffffffff RCX: 00007fecdf829943 [ 167.734423][ C1] RDX: 0000000000000008 RSI: 00007ffe406ae860 RDI: 000000000000000a [ 167.742380][ C1] RBP: 00000000012e53e0 R08: 0000000000000000 R09: 0000000000000001 [ 167.750336][ C1] R10: 00000000ffffffff R11: 0000000000000246 R12: 0000000000000003 [ 167.758296][ C1] R13: 0000000000000010 R14: 00000000012ee2f0 R15: 00000000012d5250