[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 45.655143][ T25] audit: type=1800 audit(1575425352.088:25): pid=8076 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 45.674633][ T25] audit: type=1800 audit(1575425352.088:26): pid=8076 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 45.694085][ T25] audit: type=1800 audit(1575425352.088:27): pid=8076 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.253' (ECDSA) to the list of known hosts. 2019/12/04 02:09:23 fuzzer started 2019/12/04 02:09:24 dialing manager at 10.128.0.26:42111 2019/12/04 02:09:24 syscalls: 2689 2019/12/04 02:09:24 code coverage: enabled 2019/12/04 02:09:24 comparison tracing: enabled 2019/12/04 02:09:24 extra coverage: extra coverage is not supported by the kernel 2019/12/04 02:09:24 setuid sandbox: enabled 2019/12/04 02:09:24 namespace sandbox: enabled 2019/12/04 02:09:24 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/04 02:09:24 fault injection: enabled 2019/12/04 02:09:24 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/04 02:09:24 net packet injection: enabled 2019/12/04 02:09:24 net device setup: enabled 2019/12/04 02:09:24 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/12/04 02:09:24 devlink PCI setup: PCI device 0000:00:10.0 is not available 02:09:25 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x6b) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0815b5055e0bcfe87b3071") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x16, 0x0, 0x240002, 0x2, 0x0, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000000)={r1, 0x0, 0x0}, 0x20) 02:09:26 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x3, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) syzkaller login: [ 59.661143][ T8244] IPVS: ftp: loaded support on port[0] = 21 02:09:26 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet(0x10, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x2, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0xffffffffffffff4d, 0x0, 0x3f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x21402, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 59.809434][ T8246] IPVS: ftp: loaded support on port[0] = 21 [ 59.842070][ T8244] chnl_net:caif_netlink_parms(): no params data found [ 59.939751][ T8244] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.963013][ T8244] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.970913][ T8244] device bridge_slave_0 entered promiscuous mode [ 59.980359][ T8244] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.992966][ T8244] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.000893][ T8244] device bridge_slave_1 entered promiscuous mode [ 60.016793][ T8249] IPVS: ftp: loaded support on port[0] = 21 02:09:26 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f00000000c0)=""/246) r3 = dup(r2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000bdc000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 60.082501][ T8246] chnl_net:caif_netlink_parms(): no params data found [ 60.093917][ T8244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.121296][ T8244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.173248][ T8244] team0: Port device team_slave_0 added [ 60.182262][ T8244] team0: Port device team_slave_1 added [ 60.260638][ T8246] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.270065][ T8246] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.278301][ T8246] device bridge_slave_0 entered promiscuous mode [ 60.316885][ T8246] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.332996][ T8246] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.340539][ T8246] device bridge_slave_1 entered promiscuous mode 02:09:26 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$9p_tcp(&(0x7f0000000040)='127.0.0.1\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000200)={'trans=tcp,', {'port'}}) [ 60.427539][ T8244] device hsr_slave_0 entered promiscuous mode [ 60.484854][ T8244] device hsr_slave_1 entered promiscuous mode [ 60.534516][ T8253] IPVS: ftp: loaded support on port[0] = 21 [ 60.552172][ T8249] chnl_net:caif_netlink_parms(): no params data found [ 60.572103][ T8246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link 02:09:27 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x10000002}) [ 60.596202][ T8246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.630914][ T8256] IPVS: ftp: loaded support on port[0] = 21 [ 60.681423][ T8249] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.694310][ T8249] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.702221][ T8249] device bridge_slave_0 entered promiscuous mode [ 60.712648][ T8249] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.721146][ T8249] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.729920][ T8249] device bridge_slave_1 entered promiscuous mode [ 60.737515][ T8244] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 60.798992][ T8244] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 60.881572][ T8258] IPVS: ftp: loaded support on port[0] = 21 [ 60.881834][ T8246] team0: Port device team_slave_0 added [ 60.893669][ T8244] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 60.926301][ T8244] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 60.986131][ T8246] team0: Port device team_slave_1 added [ 61.008081][ T8249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.064597][ T8246] device hsr_slave_0 entered promiscuous mode [ 61.113498][ T8246] device hsr_slave_1 entered promiscuous mode [ 61.182976][ T8246] debugfs: Directory 'hsr0' with parent '/' already present! [ 61.191791][ T8249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.211740][ T8249] team0: Port device team_slave_0 added [ 61.220451][ T8249] team0: Port device team_slave_1 added [ 61.325488][ T8249] device hsr_slave_0 entered promiscuous mode [ 61.363332][ T8249] device hsr_slave_1 entered promiscuous mode [ 61.403339][ T8249] debugfs: Directory 'hsr0' with parent '/' already present! [ 61.449297][ T8256] chnl_net:caif_netlink_parms(): no params data found [ 61.458301][ T8253] chnl_net:caif_netlink_parms(): no params data found [ 61.567866][ T8256] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.575423][ T8256] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.583518][ T8256] device bridge_slave_0 entered promiscuous mode [ 61.590699][ T8249] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 61.628701][ T8249] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 61.698283][ T8258] chnl_net:caif_netlink_parms(): no params data found [ 61.710705][ T8246] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 61.765001][ T8256] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.772071][ T8256] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.780132][ T8256] device bridge_slave_1 entered promiscuous mode [ 61.796257][ T8249] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 61.855592][ T8249] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 61.918764][ T8246] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 61.970362][ T8246] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 62.038231][ T8246] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 62.118695][ T8253] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.125987][ T8253] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.134094][ T8253] device bridge_slave_0 entered promiscuous mode [ 62.144704][ T8256] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.157697][ T8258] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.165367][ T8258] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.173058][ T8258] device bridge_slave_0 entered promiscuous mode [ 62.180192][ T8253] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.188391][ T8253] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.196305][ T8253] device bridge_slave_1 entered promiscuous mode [ 62.220881][ T8244] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.231250][ T8256] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.246800][ T8258] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.254570][ T8258] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.262114][ T8258] device bridge_slave_1 entered promiscuous mode [ 62.275623][ T8253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.297970][ T8244] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.320818][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.329119][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.339899][ T8253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.350807][ T8256] team0: Port device team_slave_0 added [ 62.363260][ T8256] team0: Port device team_slave_1 added [ 62.378440][ T8258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.389165][ T8258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.425098][ T8250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.434039][ T8250] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.442327][ T8250] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.449513][ T8250] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.457575][ T8250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.467867][ T8250] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.476464][ T8250] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.483663][ T8250] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.491156][ T8250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.499860][ T8250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.508372][ T8250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.517160][ T8250] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.525552][ T8250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.534349][ T8250] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.547151][ T8250] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.555255][ T8250] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.574611][ T8253] team0: Port device team_slave_0 added [ 62.583267][ T8258] team0: Port device team_slave_0 added [ 62.634641][ T8256] device hsr_slave_0 entered promiscuous mode [ 62.683650][ T8256] device hsr_slave_1 entered promiscuous mode [ 62.722996][ T8256] debugfs: Directory 'hsr0' with parent '/' already present! [ 62.735172][ T8253] team0: Port device team_slave_1 added [ 62.741686][ T8258] team0: Port device team_slave_1 added [ 62.835112][ T8253] device hsr_slave_0 entered promiscuous mode [ 62.873155][ T8253] device hsr_slave_1 entered promiscuous mode [ 62.922894][ T8253] debugfs: Directory 'hsr0' with parent '/' already present! [ 62.937806][ T8262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.946338][ T8262] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.955357][ T8262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.964068][ T8262] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.988708][ T8244] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.034928][ T8258] device hsr_slave_0 entered promiscuous mode [ 63.073198][ T8258] device hsr_slave_1 entered promiscuous mode [ 63.123446][ T8258] debugfs: Directory 'hsr0' with parent '/' already present! [ 63.145529][ T8249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.170718][ T8256] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 63.199424][ T8256] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 63.257383][ T8246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.281437][ T8249] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.289190][ T8256] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 63.325560][ T8256] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 63.377730][ T8262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.386143][ T8262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.394586][ T8262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.403334][ T8262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.434419][ T8253] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.475914][ T8253] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.534843][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.543624][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.552039][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.559126][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.566731][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.575765][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.584221][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.591311][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.599104][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.607948][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.616608][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.625316][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.634011][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.642592][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.651370][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.660054][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.669107][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.676680][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.684523][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.692811][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.701127][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.709332][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.721892][ T8249] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.735100][ T8246] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.748769][ T8253] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.794908][ T8253] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.845795][ T8258] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 63.886353][ T8258] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 63.955379][ T8244] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.972004][ T8258] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 64.005712][ T8258] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 64.049394][ T2729] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.057467][ T2729] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.065386][ T2729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.075258][ T2729] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.083763][ T2729] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.090942][ T2729] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.098551][ T2729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.107502][ T2729] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.115975][ T2729] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.123184][ T2729] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.130692][ T2729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.142219][ T2729] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.156034][ T8249] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.189714][ T2729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.220861][ T8246] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 64.231589][ T8246] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.261861][ T2729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.270606][ T2729] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.279364][ T2729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.288450][ T2729] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.296983][ T2729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.305383][ T2729] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.314063][ T2729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.322255][ T2729] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.330840][ T2729] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.338930][ T2729] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.372081][ T8256] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.426587][ T8246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.443779][ T8268] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 64.492977][ T2729] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.500442][ T2729] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.521486][ T8256] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.554237][ T8258] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.581327][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.591911][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.639898][ T8258] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.652763][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 169.660164][ C1] rcu: 1-...!: (1 GPs behind) idle=fda/1/0x4000000000000002 softirq=12826/12838 fqs=0 [ 169.670030][ C1] (t=10500 jiffies g=6537 q=613) [ 169.675043][ C1] rcu: rcu_preempt kthread starved for 10500 jiffies! g6537 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 169.686297][ C1] rcu: RCU grace-period kthread stack dump: [ 169.692184][ C1] rcu_preempt I29032 10 2 0x80004000 [ 169.698652][ C1] Call Trace: [ 169.701951][ C1] __schedule+0x9a0/0xcc0 [ 169.706279][ C1] schedule+0x181/0x210 [ 169.710425][ C1] schedule_timeout+0x14f/0x240 [ 169.715266][ C1] ? run_local_timers+0x120/0x120 [ 169.720280][ C1] rcu_gp_kthread+0xed8/0x1770 [ 169.725038][ C1] kthread+0x332/0x350 [ 169.729088][ C1] ? rcu_report_qs_rsp+0x140/0x140 [ 169.734206][ C1] ? kthread_blkcg+0xe0/0xe0 [ 169.738810][ C1] ret_from_fork+0x24/0x30 [ 169.743267][ C1] NMI backtrace for cpu 1 [ 169.747727][ C1] CPU: 1 PID: 17 Comm: kworker/1:0 Not tainted 5.4.0-syzkaller #0 [ 169.755520][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 169.765680][ C1] Workqueue: ipv6_addrconf addrconf_dad_work [ 169.771643][ C1] Call Trace: [ 169.774922][ C1] [ 169.777764][ C1] dump_stack+0x1fb/0x318 [ 169.782083][ C1] nmi_cpu_backtrace+0xaf/0x1a0 [ 169.786920][ C1] ? nmi_trigger_cpumask_backtrace+0x16d/0x290 [ 169.793061][ C1] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 169.799113][ C1] nmi_trigger_cpumask_backtrace+0x174/0x290 [ 169.805079][ C1] arch_trigger_cpumask_backtrace+0x10/0x20 [ 169.810967][ C1] rcu_dump_cpu_stacks+0x15a/0x220 [ 169.816076][ C1] rcu_sched_clock_irq+0xe25/0x1ad0 [ 169.821273][ C1] ? trace_hardirqs_off+0x74/0x80 [ 169.826283][ C1] update_process_times+0x12d/0x180 [ 169.831467][ C1] tick_sched_timer+0x263/0x420 [ 169.836310][ C1] ? tick_setup_sched_timer+0x3d0/0x3d0 [ 169.841840][ C1] __hrtimer_run_queues+0x403/0x840 [ 169.847038][ C1] hrtimer_interrupt+0x38c/0xda0 [ 169.851975][ C1] ? debug_smp_processor_id+0x9/0x20 [ 169.857251][ C1] smp_apic_timer_interrupt+0x109/0x280 [ 169.862780][ C1] apic_timer_interrupt+0xf/0x20 [ 169.867697][ C1] [ 169.870626][ C1] RIP: 0010:mod_memcg_page_state+0x3d/0x190 [ 169.876506][ C1] Code: 28 2e 00 48 83 c3 38 48 89 d8 48 c1 e8 03 49 bc 00 00 00 00 00 fc ff df 42 80 3c 20 00 74 08 48 89 df e8 b6 9f 69 00 48 8b 1b <48> 85 db 0f 84 d8 00 00 00 48 c7 c0 20 96 0a 89 48 c1 e8 03 42 80 [ 169.896094][ C1] RSP: 0018:ffffc90000d8f8b8 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 169.904499][ C1] RAX: 1ffffd400051fde7 RBX: 0000000000000000 RCX: ffff8880a9e42480 [ 169.912613][ C1] RDX: 0000000000000000 RSI: 00000000fffffffc RDI: ffffea00028fef00 [ 169.920578][ C1] RBP: ffffc90000d8f8d8 R08: 000000000003a768 R09: ffffed1014fb8697 [ 169.928628][ C1] R10: ffffed1014fb8697 R11: 0000000000000000 R12: dffffc0000000000 [ 169.936598][ C1] R13: dffffc0000000000 R14: 00000000fffffffc R15: ffff8880a7dc34a8 [ 169.944584][ C1] ? mod_memcg_page_state+0x16/0x190 [ 169.949854][ C1] free_thread_stack+0x168/0x590 [ 169.954782][ C1] put_task_stack+0xa3/0x130 [ 169.959358][ C1] finish_task_switch+0x3f1/0x550 [ 169.964372][ C1] __schedule+0x9a8/0xcc0 [ 169.968690][ C1] ? debug_smp_processor_id+0x9/0x20 [ 169.973963][ C1] schedule+0x181/0x210 [ 169.978108][ C1] schedule_preempt_disabled+0x13/0x20 [ 169.983552][ C1] mutex_optimistic_spin+0x445/0x480 [ 169.988825][ C1] __mutex_lock_common+0x2e7/0x2e10 [ 169.994010][ C1] ? rtnl_lock+0x17/0x20 [ 169.998247][ C1] ? process_one_work+0x75d/0x10d0 [ 170.003346][ C1] mutex_lock_nested+0x1b/0x30 [ 170.008092][ C1] rtnl_lock+0x17/0x20 [ 170.012144][ C1] addrconf_dad_work+0x69/0x1c30 [ 170.017067][ C1] ? rcu_read_lock_sched_held+0x10b/0x170 [ 170.022773][ C1] process_one_work+0x7ef/0x10d0 [ 170.027711][ C1] worker_thread+0xc01/0x1630 [ 170.032395][ C1] kthread+0x332/0x350 [ 170.036447][ C1] ? rcu_lock_release+0x30/0x30 [ 170.041300][ C1] ? kthread_blkcg+0xe0/0xe0 [ 170.045874][ C1] ret_from_fork+0x24/0x30