[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 53.453071][ T23] audit: type=1800 audit(1578457500.976:25): pid=8372 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 53.472311][ T23] audit: type=1800 audit(1578457500.986:26): pid=8372 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 53.514403][ T23] audit: type=1800 audit(1578457500.986:27): pid=8372 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.1.43' (ECDSA) to the list of known hosts. 2020/01/08 04:25:12 fuzzer started 2020/01/08 04:25:13 dialing manager at 10.128.0.26:35703 2020/01/08 04:25:13 syscalls: 2824 2020/01/08 04:25:13 code coverage: enabled 2020/01/08 04:25:13 comparison tracing: enabled 2020/01/08 04:25:13 extra coverage: enabled 2020/01/08 04:25:13 setuid sandbox: enabled 2020/01/08 04:25:13 namespace sandbox: enabled 2020/01/08 04:25:13 Android sandbox: /sys/fs/selinux/policy does not exist 2020/01/08 04:25:13 fault injection: enabled 2020/01/08 04:25:13 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/01/08 04:25:13 net packet injection: enabled 2020/01/08 04:25:13 net device setup: enabled 2020/01/08 04:25:13 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/01/08 04:25:13 devlink PCI setup: PCI device 0000:00:10.0 is not available 04:25:14 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x6}, 0x10) 04:25:14 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={'bond_slave_0\x00', {0x2, 0x0, @loopback}}) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x27) setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000300)={{0xa, 0x4e21, 0x3, @loopback, 0x7}, {0xa, 0x4e24, 0x3f, @remote, 0x78}, 0x0, [0x6, 0xffffffff, 0x0, 0x101, 0x8000, 0x80000000, 0x54a77444, 0xd1]}, 0x5c) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f00000001c0)={'nat\x00'}, &(0x7f0000000140)=0x50) setsockopt(r0, 0x65, 0x1, &(0x7f0000000040)='\b', 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/vga_arbiter\x00', 0x400, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = dup(r3) setsockopt$packet_int(r4, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) r5 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x0, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000000240)={0x0, 0x75, "a372ac75e36b4b6705f37398c6ca929b4c69b2890488c7753bc77e5b6e0e3fce89715f4e72f44553e119e024ad591d0ed9f923a18f35ca1128f3a8852c84a72537ff7c615c27cdbb5176df56d37c73110c66a2e2ee54fb4c11e1f297c6a7bbf8fe5d8f6fc77c78d86e0c25ecc4c31848a563980253"}, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000003c0)={r6, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1, 0x1, 0x0, 0x2, 0x1}, 0x98) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) timerfd_settime(r5, 0xc8d2aea8f4a325f0, &(0x7f0000000400)={{r7, r8+30000000}, {r9, r10+10000000}}, &(0x7f0000000440)) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r12, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r13, 0x4090ae82, &(0x7f0000000200)={[0x10000, 0x0, 0x0, 0x3, 0x8, 0xfffffffffffffffd, 0xff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8ee, 0xfffffffffffffffe], 0x1f000}) ioctl$KVM_RUN(r13, 0xae80, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) syzkaller login: [ 67.460392][ T8539] IPVS: ftp: loaded support on port[0] = 21 [ 67.611223][ T8539] chnl_net:caif_netlink_parms(): no params data found [ 67.629345][ T8542] IPVS: ftp: loaded support on port[0] = 21 04:25:15 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000100)=0x5d2, 0x4) write(r0, &(0x7f00000003c0)="2f00000014000f3f00000000120f0a0011000000009a67ec53f737bf1739078682ee6e8d06e500000000638c7b9916", 0x2f) [ 67.692379][ T8539] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.701502][ T8539] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.709808][ T8539] device bridge_slave_0 entered promiscuous mode [ 67.730895][ T8539] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.746290][ T8539] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.754547][ T8539] device bridge_slave_1 entered promiscuous mode [ 67.805911][ T8539] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.828575][ T8539] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.901640][ T8539] team0: Port device team_slave_0 added [ 67.910400][ T8544] IPVS: ftp: loaded support on port[0] = 21 [ 67.921411][ T8542] chnl_net:caif_netlink_parms(): no params data found [ 67.938889][ T8539] team0: Port device team_slave_1 added 04:25:15 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000003c0)="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", 0x1c5}], 0x1}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@migrate={0xac, 0x21, 0x21, 0x0, 0x0, {{@in=@local}, 0x0, 0x3}, [@migrate={0x5c, 0x11, [{@in6=@loopback, @in=@local}, {@in=@broadcast, @in6=@empty={[0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}]}]}, 0xac}}, 0x0) [ 68.042803][ T8539] device hsr_slave_0 entered promiscuous mode [ 68.104350][ T8539] device hsr_slave_1 entered promiscuous mode [ 68.196966][ T8542] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.214181][ T8542] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.221934][ T8542] device bridge_slave_0 entered promiscuous mode 04:25:15 executing program 4: setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x165, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x800000000000, 0x0, 0x0, 0x8000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='cgroup.stat\x00', 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000900)={0x0, r0}, 0x10) socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000bc0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha1\x00'}, 0x9) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x6, 0x4000, 0xfffffffffffffffc, 0x8, 0x0, 0x0, 0x33, {0x0, @in={{0x2, 0x4e22, @multicast2}}, 0x0, 0xdbd, 0x9, 0xf74a, 0xfffffff800000000}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000001980)={0x0, 0x0, 0x1000000000, 0x806}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_dev$vcsn(&(0x7f0000000300)='/dev/vcs#\x00', 0x1f, 0x44400) renameat2(r2, &(0x7f00000002c0)='./file0\x00', r3, &(0x7f0000000080)='./file0\x00', 0x2) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000280)={'\x00', {0x2, 0x4e22, @rand_addr=0x49}}) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r4, 0x10c, 0x3, &(0x7f0000000000), 0x4) connect$llc(r4, &(0x7f0000000040)={0x1a, 0x337, 0x4b, 0x4, 0x3, 0x7f, @random="c0441d4f2c36"}, 0x10) add_key(&(0x7f0000000380)='asymmetric\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000000)="67e0e40e36c7615fa74e62fbcf180aedce8dc4fdf0a8fa06bb31fbaebefd0e97", 0xfffffe5e, 0xfffffffffffffffb) [ 68.248766][ T8542] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.256663][ T8542] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.264815][ T8542] device bridge_slave_1 entered promiscuous mode [ 68.300662][ T8547] IPVS: ftp: loaded support on port[0] = 21 [ 68.327881][ T8542] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.341176][ T8542] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.413557][ T8542] team0: Port device team_slave_0 added [ 68.437446][ T8542] team0: Port device team_slave_1 added 04:25:16 executing program 5: r0 = socket$inet(0x2, 0x6000000000000003, 0x6) sendto$inet(r0, &(0x7f0000000080)="3331c1b90554d57a5a314d3463c1d390527820d5", 0x14, 0x0, &(0x7f00000001c0)={0x2, 0x0, @empty}, 0x10) [ 68.548914][ T8550] IPVS: ftp: loaded support on port[0] = 21 [ 68.557731][ T8544] chnl_net:caif_netlink_parms(): no params data found [ 68.576201][ T8539] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.705726][ T8542] device hsr_slave_0 entered promiscuous mode [ 68.774453][ T8542] device hsr_slave_1 entered promiscuous mode [ 68.824194][ T8542] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.831893][ T8542] Cannot create hsr debugfs directory [ 68.856678][ T8539] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.897459][ T8539] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.939271][ T8539] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.032078][ T8552] IPVS: ftp: loaded support on port[0] = 21 [ 69.112807][ T8547] chnl_net:caif_netlink_parms(): no params data found [ 69.122051][ T8544] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.129506][ T8544] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.137414][ T8544] device bridge_slave_0 entered promiscuous mode [ 69.167072][ T8542] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.217917][ T8542] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.276273][ T8544] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.283511][ T8544] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.291622][ T8544] device bridge_slave_1 entered promiscuous mode [ 69.327236][ T8542] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 69.391348][ T8544] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.402888][ T8544] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.418388][ T8542] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 69.496757][ T8547] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.503934][ T8547] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.511978][ T8547] device bridge_slave_0 entered promiscuous mode [ 69.521877][ T8547] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.530007][ T8547] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.537776][ T8547] device bridge_slave_1 entered promiscuous mode [ 69.552219][ T8544] team0: Port device team_slave_0 added [ 69.604730][ T8544] team0: Port device team_slave_1 added [ 69.618045][ T8547] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.630472][ T8547] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.648165][ T8550] chnl_net:caif_netlink_parms(): no params data found [ 69.718013][ T8544] device hsr_slave_0 entered promiscuous mode [ 69.776346][ T8544] device hsr_slave_1 entered promiscuous mode [ 69.834219][ T8544] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.841854][ T8544] Cannot create hsr debugfs directory [ 69.916568][ T8552] chnl_net:caif_netlink_parms(): no params data found [ 69.941935][ T8547] team0: Port device team_slave_0 added [ 69.969356][ T8539] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.979895][ T8547] team0: Port device team_slave_1 added [ 70.008951][ T8552] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.016210][ T8552] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.023843][ T8552] device bridge_slave_0 entered promiscuous mode [ 70.033803][ T8552] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.040953][ T8552] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.049014][ T8552] device bridge_slave_1 entered promiscuous mode [ 70.061796][ T8550] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.070140][ T8550] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.078089][ T8550] device bridge_slave_0 entered promiscuous mode [ 70.156813][ T8547] device hsr_slave_0 entered promiscuous mode [ 70.195439][ T8547] device hsr_slave_1 entered promiscuous mode [ 70.254252][ T8547] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.261851][ T8547] Cannot create hsr debugfs directory [ 70.268654][ T8550] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.275939][ T8550] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.283624][ T8550] device bridge_slave_1 entered promiscuous mode [ 70.309247][ T8552] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.340533][ T8550] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.352120][ T8550] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.363486][ T2812] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.372320][ T2812] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.382319][ T8552] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.402584][ T8552] team0: Port device team_slave_0 added [ 70.417999][ T8552] team0: Port device team_slave_1 added [ 70.435436][ T8539] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.450026][ T8544] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.512550][ T8544] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.569949][ T8550] team0: Port device team_slave_0 added [ 70.585583][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.594712][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.603078][ T2748] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.610289][ T2748] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.624264][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.633393][ T8544] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.722291][ T8542] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.731616][ T8550] team0: Port device team_slave_1 added [ 70.767009][ T8552] device hsr_slave_0 entered promiscuous mode [ 70.804485][ T8552] device hsr_slave_1 entered promiscuous mode [ 70.844205][ T8552] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.851806][ T8552] Cannot create hsr debugfs directory [ 70.859646][ T2929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.868504][ T2929] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.877149][ T2929] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.884327][ T2929] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.893328][ T8544] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.946464][ T8542] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.967645][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.976476][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.986091][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.995086][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.002759][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.011856][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.020597][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.029236][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.037996][ T2748] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.045099][ T2748] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.071431][ T8539] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.084896][ T8539] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.106333][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.115135][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.123153][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.133214][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.141845][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.150470][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.159442][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.167996][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.176267][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.184929][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.193219][ T2748] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.200354][ T2748] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.209896][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.266299][ T8550] device hsr_slave_0 entered promiscuous mode [ 71.314511][ T8550] device hsr_slave_1 entered promiscuous mode [ 71.354194][ T8550] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.361947][ T8550] Cannot create hsr debugfs directory [ 71.375708][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.432698][ T8547] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.492758][ T8547] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.538155][ T8547] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.589521][ T8547] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.648147][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.656900][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.664760][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.672185][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.680774][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.689941][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.731831][ T8542] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.743077][ T8542] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.766147][ T8539] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.776663][ T2929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.787900][ T2929] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.796358][ T2929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.805081][ T2929] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.813970][ T2929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.822909][ T2929] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.861834][ T2929] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.877564][ T8544] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.888261][ T8552] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 71.931991][ T8552] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 71.976926][ T8552] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 72.061319][ T8552] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 72.101271][ T8542] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.126298][ T2929] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.137262][ T2929] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.145070][ T2929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.153847][ T2929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.169181][ T8544] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.178748][ T8550] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 72.232380][ T8539] device veth0_vlan entered promiscuous mode [ 72.239716][ T2762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.248479][ T2762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.257002][ T2762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.265740][ T2762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.273894][ T2762] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.282394][ T2762] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.293158][ T8550] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 72.382128][ T8550] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 72.433076][ T8539] device veth1_vlan entered promiscuous mode [ 72.441364][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.450105][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.459131][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.467749][ T2748] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.474871][ T2748] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.482469][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.491671][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.500995][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.509902][ T8550] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 72.576395][ T8547] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.617491][ T2762] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.628305][ T2762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.637857][ T2762] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.647716][ T2762] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.654938][ T2762] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.662424][ T2762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.671107][ T2762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.679940][ T2762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.689246][ T2762] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.697519][ T2762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.706829][ T2762] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.716260][ T2762] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.729057][ T8542] device veth0_vlan entered promiscuous mode [ 72.769284][ T2762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.783851][ T2762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.792648][ T2762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.801514][ T2762] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.810785][ T2762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.819568][ T2762] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.828192][ T2762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.836237][ T2762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.844395][ T2762] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.852088][ T2762] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.863020][ T8542] device veth1_vlan entered promiscuous mode [ 72.889368][ T8547] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.897804][ T8544] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.002439][ T8547] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 73.018976][ T8547] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.065371][ T8547] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.123746][ T8547] device veth0_vlan entered promiscuous mode [ 73.139438][ T8547] device veth1_vlan entered promiscuous mode [ 178.064025][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 178.070853][ C1] rcu: 1-...!: (1 GPs behind) idle=f22/1/0x4000000000000002 softirq=14149/14155 fqs=33 [ 178.080867][ C1] (t=10500 jiffies g=6833 q=532) [ 178.085887][ C1] rcu: rcu_preempt kthread starved for 10432 jiffies! g6833 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 178.096973][ C1] rcu: RCU grace-period kthread stack dump: [ 178.102849][ C1] rcu_preempt R running task 29032 10 2 0x80004000 [ 178.111692][ C1] Call Trace: [ 178.114977][ C1] __schedule+0x9a0/0xcc0 [ 178.119305][ C1] schedule+0x181/0x210 [ 178.123471][ C1] schedule_timeout+0x14f/0x240 [ 178.128312][ C1] ? run_local_timers+0x120/0x120 [ 178.133337][ C1] rcu_gp_kthread+0xed8/0x1770 [ 178.138105][ C1] kthread+0x332/0x350 [ 178.142160][ C1] ? rcu_report_qs_rsp+0x140/0x140 [ 178.147265][ C1] ? kthread_blkcg+0xe0/0xe0 [ 178.151847][ C1] ret_from_fork+0x24/0x30 [ 178.156268][ C1] NMI backtrace for cpu 1 [ 178.160609][ C1] CPU: 1 PID: 8558 Comm: syz-executor.0 Not tainted 5.5.0-rc5-syzkaller #0 [ 178.169179][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 178.179249][ C1] Call Trace: [ 178.182523][ C1] [ 178.185366][ C1] dump_stack+0x1fb/0x318 [ 178.189694][ C1] nmi_cpu_backtrace+0xaf/0x1a0 [ 178.194540][ C1] ? nmi_trigger_cpumask_backtrace+0x16d/0x290 [ 178.200687][ C1] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 178.206742][ C1] nmi_trigger_cpumask_backtrace+0x174/0x290 [ 178.212716][ C1] arch_trigger_cpumask_backtrace+0x10/0x20 [ 178.218596][ C1] rcu_dump_cpu_stacks+0x15a/0x220 [ 178.223706][ C1] rcu_sched_clock_irq+0xe25/0x1ad0 [ 178.228896][ C1] ? trace_hardirqs_off+0x74/0x80 [ 178.233922][ C1] update_process_times+0x12d/0x180 [ 178.239132][ C1] tick_sched_timer+0x263/0x420 [ 178.243979][ C1] ? tick_setup_sched_timer+0x3d0/0x3d0 [ 178.249526][ C1] __hrtimer_run_queues+0x403/0x840 [ 178.254746][ C1] hrtimer_interrupt+0x38c/0xda0 [ 178.259696][ C1] ? debug_smp_processor_id+0x9/0x20 [ 178.264991][ C1] smp_apic_timer_interrupt+0x109/0x280 [ 178.270533][ C1] apic_timer_interrupt+0xf/0x20 [ 178.275476][ C1] [ 178.278410][ C1] RIP: 0010:free_thread_stack+0x151/0x590 [ 178.284117][ C1] Code: 31 f6 e8 02 8d 6f 00 43 80 3c 2e 00 74 08 4c 89 e7 e8 73 94 6a 00 49 8b 1c 24 48 83 c3 08 48 89 d8 48 c1 e8 03 42 80 3c 28 00 <74> 08 48 89 df e8 55 94 6a 00 48 8b 3b be fc ff ff ff e8 28 04 00 [ 178.303892][ C1] RSP: 0018:ffffc90002727a28 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 178.312294][ C1] RAX: 1ffff11011b25491 RBX: ffff88808d92a488 RCX: 0000000000000000 [ 178.320268][ C1] RDX: ffffc90001f69000 RSI: 0000000000000000 RDI: ffffea000287d900 [ 178.328235][ C1] RBP: ffffc90002727a60 R08: 000000000003a728 R09: ffffed1014891739 [ 178.336208][ C1] R10: ffffed1014891739 R11: 0000000000000000 R12: ffff88808ab0b320 [ 178.344262][ C1] R13: dffffc0000000000 R14: 1ffff11011561664 R15: ffff8880a448b9b8 [ 178.352274][ C1] ? free_thread_stack+0x12e/0x590 [ 178.357376][ C1] put_task_stack+0xa3/0x130 [ 178.361957][ C1] finish_task_switch+0x3f1/0x550 [ 178.366978][ C1] __schedule+0x9a8/0xcc0 [ 178.371305][ C1] ? ___preempt_schedule_notrace+0x16/0x27 [ 178.377099][ C1] preempt_schedule_notrace+0xdb/0x120 [ 178.382547][ C1] ___preempt_schedule_notrace+0x16/0x27 [ 178.388172][ C1] ? rcu_is_watching+0x57/0xa0 [ 178.392925][ C1] rcu_is_watching+0x82/0xa0 [ 178.397505][ C1] memcg_kmem_get_cache+0x2e8/0x570 [ 178.402689][ C1] ? __should_failslab+0x11a/0x160 [ 178.407792][ C1] ? sk_prot_alloc+0x60/0x290 [ 178.412459][ C1] kmem_cache_alloc+0x86/0x2e0 [ 178.417217][ C1] sk_prot_alloc+0x60/0x290 [ 178.421709][ C1] sk_alloc+0x38/0x9c0 [ 178.425771][ C1] unix_create1+0x91/0x560 [ 178.430173][ C1] ? rcu_lock_release+0x9/0x30 [ 178.434929][ C1] unix_create+0x136/0x1c0 [ 178.439342][ C1] __sock_create+0x5cc/0x910 [ 178.443925][ C1] __sys_socketpair+0x195/0xc90 [ 178.448766][ C1] ? trace_irq_disable_rcuidle+0x23/0x1e0 [ 178.454477][ C1] __x64_sys_socketpair+0x9b/0xb0 [ 178.459495][ C1] do_syscall_64+0xf7/0x1c0 [ 178.463989][ C1] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 178.469868][ C1] RIP: 0033:0x45af49 [ 178.473770][ C1] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 178.493363][ C1] RSP: 002b:00007f6084de5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 178.501763][ C1] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045af49 [ 178.509735][ C1] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000001 [ 178.517694][ C1] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 178.525654][ C1] R10: 0000000020000280 R11: 0000000000000246 R12: 00007f6084de66d4 [ 178.533616][ C1] R13: 00000000004cbb07 R14: 00000000004e6468 R15: 00000000ffffffff