[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c.
[   45.664107][   T26] audit: type=1800 audit(1575375209.997:25): pid=8273 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0
[   45.683445][   T26] audit: type=1800 audit(1575375209.997:26): pid=8273 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0
[   45.733548][   T26] audit: type=1800 audit(1575375209.997:27): pid=8273 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0
[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c.

Debian GNU/Linux 7 syzkaller ttyS0

Warning: Permanently added '10.128.0.240' (ECDSA) to the list of known hosts.
2019/12/03 12:13:41 fuzzer started
2019/12/03 12:13:43 dialing manager at 10.128.0.26:45711
2019/12/03 12:13:43 syscalls: 2689
2019/12/03 12:13:43 code coverage: enabled
2019/12/03 12:13:43 comparison tracing: enabled
2019/12/03 12:13:43 extra coverage: extra coverage is not supported by the kernel
2019/12/03 12:13:43 setuid sandbox: enabled
2019/12/03 12:13:43 namespace sandbox: enabled
2019/12/03 12:13:43 Android sandbox: /sys/fs/selinux/policy does not exist
2019/12/03 12:13:43 fault injection: enabled
2019/12/03 12:13:43 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2019/12/03 12:13:43 net packet injection: enabled
2019/12/03 12:13:43 net device setup: enabled
2019/12/03 12:13:43 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2019/12/03 12:13:43 devlink PCI setup: PCI device 0000:00:10.0 is not available
12:13:44 executing program 0:
r0 = socket(0x10, 0x800000000080002, 0x10)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup2(r1, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x40000000000013, 0xfffffffffffffffd, 0x0, 0x0, {0x33}}, 0x14}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x49249249249266b, 0x0)

12:13:44 executing program 1:
r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x3, 0x2)
ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000040))

syzkaller login: [   60.314797][ T8437] IPVS: ftp: loaded support on port[0] = 21
[   60.463997][ T8439] IPVS: ftp: loaded support on port[0] = 21
12:13:44 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000540)={{0x77359400}}, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000000780)={{0x0, 0x28b6bdce62c55b99}, 0x0, 0x80000001})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]})
ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000640)={0x0, @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x3, 0x5, 0x5, 0x10000, 0x0, 0x8001}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYRES16], 0x1}}, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[   60.525127][ T8437] chnl_net:caif_netlink_parms(): no params data found
[   60.666889][ T8437] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.692371][ T8437] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.702077][ T8437] device bridge_slave_0 entered promiscuous mode
[   60.711306][ T8437] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.718376][ T8437] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.728007][ T8437] device bridge_slave_1 entered promiscuous mode
[   60.758416][ T8442] IPVS: ftp: loaded support on port[0] = 21
[   60.793378][ T8437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
12:13:45 executing program 3:
r0 = syz_open_dev$video4linux(&(0x7f0000000180)='/dev/v4l-subdev#\x00', 0x0, 0x0)
ioctl$VIDIOC_ENUMSTD(r0, 0xc008561b, &(0x7f00000001c0)={0x0, 0x0, "97c0d520112c378a60a60418d2903faf2d161e4018a5cf79"})

[   60.810795][ T8439] chnl_net:caif_netlink_parms(): no params data found
[   60.831951][ T8437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.930275][ T8437] team0: Port device team_slave_0 added
[   60.968609][ T8437] team0: Port device team_slave_1 added
[   60.985306][ T8439] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.995518][ T8439] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.004554][ T8439] device bridge_slave_0 entered promiscuous mode
[   61.056038][ T8439] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.065337][ T8439] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.075971][ T8439] device bridge_slave_1 entered promiscuous mode
12:13:45 executing program 4:
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
getpid()
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0)
sched_setattr(0x0, 0x0, 0x0)
fcntl$setflags(0xffffffffffffffff, 0x2, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f0000000180)={@remote, 0x27})
getpeername$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000400)=0x14)
r2 = socket(0x10, 0x0, 0x0)
sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
fremovexattr(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[])
ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f0000001fc0)=ANY=[@ANYRES32])
openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000440)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @remote, @remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, r1})
socket$inet6(0xa, 0x2, 0x0)

[   61.175581][ T8437] device hsr_slave_0 entered promiscuous mode
12:13:45 executing program 5:
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000140)="40c74adc77a4e27d876f441d952bf111375896d876c4ed0f2e703cd5f8b64ff3cd946b507d0419c09fc1fe6c"}, 0xa)
r0 = socket$kcm(0x2b, 0x8000000000001, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x2, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'nr0\x01\x00', 0x4009})
r2 = socket$kcm(0x29, 0x2, 0x0)
ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f00000002c0)=0xa7)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f00000018c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83CZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x00\x00\x00\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8dx\xd5\x1dU*s)\x12[\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xddeF>29\v\x02\xa2b\x13R\xef\xffA,\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x81\x10:\x0e(\xdd\xfc\xc9\xc6\xb4\xf0\'f:\xbd\xfe\x11\xf8\xc8W\x81s^\xd9W\xf1\x94\xaf\xc5\x8a\xb4f\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2A')
write$cgroup_subtree(r1, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd', 0x2}]}, 0x90ad)

[   61.313114][ T8437] device hsr_slave_1 entered promiscuous mode
[   61.405150][ T8442] chnl_net:caif_netlink_parms(): no params data found
[   61.418072][ T8446] IPVS: ftp: loaded support on port[0] = 21
[   61.426052][ T8448] IPVS: ftp: loaded support on port[0] = 21
[   61.444223][ T8439] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.465327][ T8439] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.486965][ T8439] team0: Port device team_slave_0 added
[   61.511131][ T8439] team0: Port device team_slave_1 added
[   61.520284][ T8437] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   61.575358][ T8437] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   61.623628][ T8437] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   61.634204][ T8450] IPVS: ftp: loaded support on port[0] = 21
[   61.667999][ T8437] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   61.790657][ T8442] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.798663][ T8442] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.807730][ T8442] device bridge_slave_0 entered promiscuous mode
[   61.816537][ T8442] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.823752][ T8442] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.831531][ T8442] device bridge_slave_1 entered promiscuous mode
[   61.893484][ T8439] device hsr_slave_0 entered promiscuous mode
[   61.931383][ T8439] device hsr_slave_1 entered promiscuous mode
[   61.981105][ T8439] debugfs: Directory 'hsr0' with parent '/' already present!
[   62.008139][ T8442] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.020451][ T8442] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.080697][ T8442] team0: Port device team_slave_0 added
[   62.115177][ T8442] team0: Port device team_slave_1 added
[   62.129380][ T8439] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   62.184166][ T8439] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   62.254945][ T8439] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   62.302494][ T8439] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   62.391717][ T8450] chnl_net:caif_netlink_parms(): no params data found
[   62.400089][ T8448] chnl_net:caif_netlink_parms(): no params data found
[   62.408259][ T8446] chnl_net:caif_netlink_parms(): no params data found
[   62.463882][ T8442] device hsr_slave_0 entered promiscuous mode
[   62.511982][ T8442] device hsr_slave_1 entered promiscuous mode
[   62.571064][ T8442] debugfs: Directory 'hsr0' with parent '/' already present!
[   62.643802][ T8450] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.650871][ T8450] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.659251][ T8450] device bridge_slave_0 entered promiscuous mode
[   62.675015][ T8448] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.683546][ T8448] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.691263][ T8448] device bridge_slave_0 entered promiscuous mode
[   62.706981][ T8446] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.715039][ T8446] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.723030][ T8446] device bridge_slave_0 entered promiscuous mode
[   62.730289][ T8450] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.737397][ T8450] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.745079][ T8450] device bridge_slave_1 entered promiscuous mode
[   62.756219][ T8448] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.763751][ T8448] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.771562][ T8448] device bridge_slave_1 entered promiscuous mode
[   62.795958][ T8446] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.804111][ T8446] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.812362][ T8446] device bridge_slave_1 entered promiscuous mode
[   62.839950][ T8450] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.856908][ T8448] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.878575][ T8446] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.889288][ T8450] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.909626][ T8448] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.936516][ T8446] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.951627][ T8442] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   63.001090][ T8448] team0: Port device team_slave_0 added
[   63.008370][ T8448] team0: Port device team_slave_1 added
[   63.023720][ T8442] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   63.064259][ T8450] team0: Port device team_slave_0 added
[   63.070098][ T8442] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   63.119387][ T8437] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.135517][ T8450] team0: Port device team_slave_1 added
[   63.143275][ T8442] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   63.176395][ T8439] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.192233][ T8446] team0: Port device team_slave_0 added
[   63.199503][ T8446] team0: Port device team_slave_1 added
[   63.244103][ T8448] device hsr_slave_0 entered promiscuous mode
[   63.291870][ T8448] device hsr_slave_1 entered promiscuous mode
[   63.331932][ T8448] debugfs: Directory 'hsr0' with parent '/' already present!
[   63.393935][ T8450] device hsr_slave_0 entered promiscuous mode
[   63.431537][ T8450] device hsr_slave_1 entered promiscuous mode
[   63.471334][ T8450] debugfs: Directory 'hsr0' with parent '/' already present!
[   63.484931][ T8437] 8021q: adding VLAN 0 to HW filter on device team0
[   63.510316][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   63.519247][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   63.527556][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   63.536413][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   63.545470][ T3687] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.552738][ T3687] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.569846][ T8439] 8021q: adding VLAN 0 to HW filter on device team0
[   63.599606][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   63.608069][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   63.616882][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   63.624877][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   63.634707][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   63.643513][    T5] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.650562][    T5] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.658433][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   63.703252][ T8446] device hsr_slave_0 entered promiscuous mode
[   63.741588][ T8446] device hsr_slave_1 entered promiscuous mode
[   63.781111][ T8446] debugfs: Directory 'hsr0' with parent '/' already present!
[   63.814931][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   63.828069][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   63.836692][    T5] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.843936][    T5] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.851867][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   63.860427][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   63.869146][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   63.879502][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   63.887644][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   63.903732][ T8448] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   63.956692][ T8448] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   64.013204][ T8450] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   64.056762][ T8450] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   64.112915][ T8450] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   64.170216][ T8450] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   64.223502][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   64.233072][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   64.241569][   T22] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.248643][   T22] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.256361][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   64.265350][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   64.274257][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   64.282872][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   64.291272][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   64.299981][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   64.309189][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   64.321390][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   64.330240][ T8448] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   64.398320][ T8448] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   64.476364][ T8437] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   64.487840][ T8455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   64.497672][ T8455] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   64.506663][ T8455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   64.515603][ T8455] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   64.537551][ T8439] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   64.549410][ T8439] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   64.575835][ T8446] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   64.653118][ T8455] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   64.661401][ T8455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   64.669823][ T8455] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   64.678706][ T8455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   64.687411][ T8455] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   64.703085][ T8455] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   64.718864][ T8446] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   64.773612][ T8446] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   64.827845][ T8446] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   64.874621][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   64.883155][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   64.895064][ T8437] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.907561][ T8439] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.922893][ T8442] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.933761][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   64.941953][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   64.995552][ T8442] 8021q: adding VLAN 0 to HW filter on device team0
[   65.012612][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   65.021970][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   65.047750][ T8450] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.058661][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   65.069109][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   65.079892][ T3067] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.087093][ T3067] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.095083][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   65.103845][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   65.112372][ T3067] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.119405][ T3067] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.130023][ T8448] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.149155][ T8448] 8021q: adding VLAN 0 to HW filter on device team0
[   65.163619][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   65.172004][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   65.179994][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   65.189401][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   65.197501][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   65.206620][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   65.223238][ T8450] 8021q: adding VLAN 0 to HW filter on device team0
[   65.266162][ T8457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   65.290547][ T8457] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   65.313927][ T8457] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.321107][ T8457] bridge0: port 1(bridge_slave_0) entered forwarding state
[  170.310967][    C0] rcu: INFO: rcu_preempt self-detected stall on CPU
[  170.317875][    C0] rcu: 	0-...!: (1 GPs behind) idle=7a6/1/0x4000000000000002 softirq=11486/11490 fqs=0 
[  170.327868][    C0] 	(t=10500 jiffies g=6965 q=172)
[  170.332916][    C0] rcu: rcu_preempt kthread starved for 10500 jiffies! g6965 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1
[  170.344183][    C0] rcu: RCU grace-period kthread stack dump:
[  170.350209][    C0] rcu_preempt     R  running task    29104    10      2 0x80004000
[  170.358160][    C0] Call Trace:
[  170.361494][    C0]  __schedule+0x9a0/0xcc0
[  170.365870][    C0]  schedule+0x181/0x210
[  170.370029][    C0]  schedule_timeout+0x14f/0x240
[  170.374882][    C0]  ? run_local_timers+0x120/0x120
[  170.379903][    C0]  rcu_gp_kthread+0xed8/0x1770
[  170.384672][    C0]  kthread+0x332/0x350
[  170.388725][    C0]  ? rcu_report_qs_rsp+0x140/0x140
[  170.393845][    C0]  ? kthread_blkcg+0xe0/0xe0
[  170.398425][    C0]  ret_from_fork+0x24/0x30
[  170.402881][    C0] NMI backtrace for cpu 0
[  170.407250][    C0] CPU: 0 PID: 8442 Comm: syz-executor.2 Not tainted 5.4.0-syzkaller #0
[  170.415503][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  170.425590][    C0] Call Trace:
[  170.428877][    C0]  <IRQ>
[  170.431726][    C0]  dump_stack+0x1fb/0x318
[  170.436048][    C0]  nmi_cpu_backtrace+0xaf/0x1a0
[  170.440886][    C0]  ? nmi_trigger_cpumask_backtrace+0x16d/0x290
[  170.447030][    C0]  ? arch_trigger_cpumask_backtrace+0x20/0x20
[  170.453083][    C0]  nmi_trigger_cpumask_backtrace+0x174/0x290
[  170.459099][    C0]  arch_trigger_cpumask_backtrace+0x10/0x20
[  170.465029][    C0]  rcu_dump_cpu_stacks+0x15a/0x220
[  170.470157][    C0]  rcu_sched_clock_irq+0xe25/0x1ad0
[  170.475384][    C0]  ? trace_hardirqs_off+0x74/0x80
[  170.480447][    C0]  update_process_times+0x12d/0x180
[  170.485666][    C0]  tick_sched_timer+0x263/0x420
[  170.490524][    C0]  ? tick_setup_sched_timer+0x3d0/0x3d0
[  170.496064][    C0]  __hrtimer_run_queues+0x403/0x840
[  170.501270][    C0]  hrtimer_interrupt+0x38c/0xda0
[  170.506218][    C0]  ? debug_smp_processor_id+0x9/0x20
[  170.511528][    C0]  smp_apic_timer_interrupt+0x109/0x280
[  170.517118][    C0]  apic_timer_interrupt+0xf/0x20
[  170.522059][    C0]  </IRQ>
[  170.525001][    C0] RIP: 0010:__sanitizer_cov_trace_pc+0x4/0x50
[  170.531148][    C0] Code: 84 00 00 00 00 00 55 48 89 e5 53 48 89 fb e8 13 00 00 00 48 8b 3d 74 25 cd 07 48 89 de e8 64 02 3b 00 5b 5d c3 cc 48 8b 04 24 <65> 48 8b 0c 25 c0 1d 02 00 65 8b 15 b8 81 8b 7e f7 c2 00 01 1f 00
[  170.551234][    C0] RSP: 0018:ffffc90001f075c0 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13
[  170.559683][    C0] RAX: ffffffff81487326 RBX: ffffea0002532d40 RCX: 0000000000000000
[  170.567655][    C0] RDX: 0000000000000000 RSI: 00000000fffffffc RDI: ffffea0002532d40
[  170.575653][    C0] RBP: ffffc90001f075e8 R08: 000000000003a768 R09: ffffed1012c5b33f
[  170.583653][    C0] R10: ffffed1012c5b33f R11: 0000000000000000 R12: ffff88808dbb00a0
[  170.591712][    C0] R13: dffffc0000000000 R14: 00000000fffffffc R15: ffff8880962d99e8
[  170.600225][    C0]  ? mod_memcg_page_state+0x16/0x190
[  170.605528][    C0]  ? mod_memcg_page_state+0x16/0x190
[  170.610837][    C0]  free_thread_stack+0x168/0x590
[  170.615952][    C0]  put_task_stack+0xa3/0x130
[  170.620591][    C0]  finish_task_switch+0x3f1/0x550
[  170.625633][    C0]  __schedule+0x9a8/0xcc0
[  170.630150][    C0]  ? debug_smp_processor_id+0x9/0x20
[  170.635485][    C0]  schedule+0x181/0x210
[  170.639697][    C0]  schedule_preempt_disabled+0x13/0x20
[  170.645199][    C0]  mutex_optimistic_spin+0x445/0x480
[  170.650493][    C0]  __mutex_lock_common+0x2e7/0x2e10
[  170.655730][    C0]  ? rtnetlink_rcv_msg+0x83c/0xd40
[  170.660841][    C0]  ? rcu_lock_release+0x9/0x30
[  170.665653][    C0]  mutex_lock_nested+0x1b/0x30
[  170.670433][    C0]  rtnetlink_rcv_msg+0x83c/0xd40
[  170.675393][    C0]  ? rcu_lock_release+0x9/0x30
[  170.680149][    C0]  ? rcu_lock_release+0x9/0x30
[  170.684957][    C0]  ? rcu_lock_release+0x9/0x30
[  170.689795][    C0]  netlink_rcv_skb+0x19e/0x3d0
[  170.694563][    C0]  ? rtnetlink_bind+0x80/0x80
[  170.699912][    C0]  rtnetlink_rcv+0x1c/0x20
[  170.704473][    C0]  netlink_unicast+0x767/0x920
[  170.709263][    C0]  netlink_sendmsg+0xa21/0xd40
[  170.714068][    C0]  ? netlink_getsockopt+0x9f0/0x9f0
[  170.719262][    C0]  __sys_sendto+0x442/0x5e0
[  170.724102][    C0]  ? fpregs_assert_state_consistent+0xb6/0xe0
[  170.730192][    C0]  ? prepare_exit_to_usermode+0x221/0x5b0
[  170.736060][    C0]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  170.741554][    C0]  __x64_sys_sendto+0xe5/0x100
[  170.746345][    C0]  do_syscall_64+0xf7/0x1c0
[  170.750870][    C0]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  170.756768][    C0] RIP: 0033:0x414373
[  170.760663][    C0] Code: ff 0f 83 b0 19 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 83 3d fd 40 66 00 00 75 17 49 89 ca b8 2c 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 81 19 00 00 c3 48 83 ec 08 e8 87 fa ff ff
[  170.780281][    C0] RSP: 002b:00007ffc9f3928d8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  170.789027][    C0] RAX: ffffffffffffffda RBX: 0000000000a72200 RCX: 0000000000414373
[  170.797192][    C0] RDX: 0000000000000028 RSI: 0000000000a72250 RDI: 0000000000000003
[  170.805461][    C0] RBP: 0000000000000000 R08: 00007ffc9f3928e0 R09: 000000000000000c
[  170.813444][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  170.821459][    C0] R13: 0000000000000000 R14: 0000000000a72250 R15: 0000000000000003