[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 45.825608][ T26] audit: type=1800 audit(1578474058.450:25): pid=8289 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 45.854041][ T26] audit: type=1800 audit(1578474058.450:26): pid=8289 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 45.909999][ T26] audit: type=1800 audit(1578474058.450:27): pid=8289 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.1.42' (ECDSA) to the list of known hosts. 2020/01/08 09:01:08 fuzzer started 2020/01/08 09:01:10 dialing manager at 10.128.0.26:35703 2020/01/08 09:01:10 syscalls: 2824 2020/01/08 09:01:10 code coverage: enabled 2020/01/08 09:01:10 comparison tracing: enabled 2020/01/08 09:01:10 extra coverage: enabled 2020/01/08 09:01:10 setuid sandbox: enabled 2020/01/08 09:01:10 namespace sandbox: enabled 2020/01/08 09:01:10 Android sandbox: /sys/fs/selinux/policy does not exist 2020/01/08 09:01:10 fault injection: enabled 2020/01/08 09:01:10 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/01/08 09:01:10 net packet injection: enabled 2020/01/08 09:01:10 net device setup: enabled 2020/01/08 09:01:10 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/01/08 09:01:10 devlink PCI setup: PCI device 0000:00:10.0 is not available 09:01:11 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000180)=@nat={'nat\x00', 0x19, 0x1, 0x1a8, [0x200005c0, 0x0, 0x0, 0x200005f0, 0x20000620], 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}, 0x220) 09:01:11 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x38, r1, 0x1, 0x0, 0x0, {0x9}, [@TIPC_NLA_LINK={0x24, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x6}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}]}, 0x38}}, 0x0) syzkaller login: [ 59.323353][ T8458] IPVS: ftp: loaded support on port[0] = 21 09:01:12 executing program 2: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {}, [{}], {}, [], {0x10, 0x2}}, 0x2c, 0x1) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r1, 0x0) chdir(&(0x7f0000000100)='./file0\x00') symlink(0x0, &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) creat(&(0x7f0000000280)='./file0\x00', 0x1) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x0, &(0x7f0000001880), 0x17c) [ 59.483136][ T8461] IPVS: ftp: loaded support on port[0] = 21 [ 59.496963][ T8458] chnl_net:caif_netlink_parms(): no params data found [ 59.581639][ T8458] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.604646][ T8458] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.624619][ T8458] device bridge_slave_0 entered promiscuous mode [ 59.655764][ T8458] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.662845][ T8458] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.685574][ T8458] device bridge_slave_1 entered promiscuous mode 09:01:12 executing program 3: set_mempolicy(0x8003, &(0x7f0000000300)=0x75f, 0x9) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00', 0x5) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) [ 59.738206][ T8458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.755546][ T8458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.813852][ T8463] IPVS: ftp: loaded support on port[0] = 21 [ 59.830152][ T8461] chnl_net:caif_netlink_parms(): no params data found [ 59.842927][ T8458] team0: Port device team_slave_0 added [ 59.867775][ T8458] team0: Port device team_slave_1 added 09:01:12 executing program 4: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x7ff}, 0x10) write(r0, &(0x7f0000000200)="200000001a00010000000066835f7f081c140000000000010001000004001300", 0x20) [ 59.956283][ T8458] device hsr_slave_0 entered promiscuous mode [ 59.993974][ T8458] device hsr_slave_1 entered promiscuous mode [ 60.068258][ T8461] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.083789][ T8461] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.091640][ T8461] device bridge_slave_0 entered promiscuous mode [ 60.105800][ T8461] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.112850][ T8461] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.134545][ T8461] device bridge_slave_1 entered promiscuous mode [ 60.177838][ T8466] IPVS: ftp: loaded support on port[0] = 21 [ 60.209563][ T8461] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.222545][ T8468] IPVS: ftp: loaded support on port[0] = 21 [ 60.287333][ T8461] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.321741][ T8463] chnl_net:caif_netlink_parms(): no params data found 09:01:13 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000001c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000c88000)={r2, 0x0, &(0x7f000089b000)}, 0x20) [ 60.420681][ T8461] team0: Port device team_slave_0 added [ 60.437840][ T8461] team0: Port device team_slave_1 added [ 60.471098][ T8463] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.478995][ T8463] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.489496][ T8463] device bridge_slave_0 entered promiscuous mode [ 60.502347][ T8458] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 60.545231][ T8463] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.552301][ T8463] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.561432][ T8463] device bridge_slave_1 entered promiscuous mode [ 60.590192][ T8458] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 60.706294][ T8461] device hsr_slave_0 entered promiscuous mode [ 60.754197][ T8461] device hsr_slave_1 entered promiscuous mode [ 60.803854][ T8461] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.811644][ T8461] Cannot create hsr debugfs directory [ 60.827926][ T8463] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.839167][ T8463] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.849126][ T8458] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 60.897786][ T8458] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 60.962101][ T8471] IPVS: ftp: loaded support on port[0] = 21 [ 60.997112][ T8463] team0: Port device team_slave_0 added [ 61.027205][ T8463] team0: Port device team_slave_1 added [ 61.128478][ T8461] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 61.206381][ T8463] device hsr_slave_0 entered promiscuous mode [ 61.254024][ T8463] device hsr_slave_1 entered promiscuous mode [ 61.293801][ T8463] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.301462][ T8463] Cannot create hsr debugfs directory [ 61.309265][ T8468] chnl_net:caif_netlink_parms(): no params data found [ 61.328452][ T8461] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 61.385374][ T8461] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 61.455945][ T8466] chnl_net:caif_netlink_parms(): no params data found [ 61.481627][ T8461] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 61.633341][ T8468] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.640546][ T8468] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.648421][ T8468] device bridge_slave_0 entered promiscuous mode [ 61.657979][ T8468] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.665115][ T8468] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.672724][ T8468] device bridge_slave_1 entered promiscuous mode [ 61.689330][ T8466] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.696461][ T8466] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.706442][ T8466] device bridge_slave_0 entered promiscuous mode [ 61.731142][ T8471] chnl_net:caif_netlink_parms(): no params data found [ 61.760190][ T8466] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.768013][ T8466] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.776710][ T8466] device bridge_slave_1 entered promiscuous mode [ 61.799252][ T8468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.811665][ T8458] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.829527][ T8466] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.843383][ T8468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.864927][ T8466] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.890797][ T8468] team0: Port device team_slave_0 added [ 61.902447][ T8458] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.923466][ T2946] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.932528][ T2946] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.941336][ T8468] team0: Port device team_slave_1 added [ 61.965754][ T8471] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.972859][ T8471] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.984615][ T8471] device bridge_slave_0 entered promiscuous mode [ 61.998948][ T8466] team0: Port device team_slave_0 added [ 62.006820][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.015792][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.025015][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.032164][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.086329][ T8468] device hsr_slave_0 entered promiscuous mode [ 62.124057][ T8468] device hsr_slave_1 entered promiscuous mode [ 62.193718][ T8468] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.201277][ T8468] Cannot create hsr debugfs directory [ 62.207468][ T8463] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 62.265012][ T8471] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.272096][ T8471] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.281871][ T8471] device bridge_slave_1 entered promiscuous mode [ 62.289999][ T8466] team0: Port device team_slave_1 added [ 62.295964][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.328004][ T8463] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 62.359111][ T8463] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 62.405831][ T8463] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 62.457029][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.468046][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.476887][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.483979][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.491564][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.500791][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.509259][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.517800][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.527230][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.535110][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.543481][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.584568][ T8471] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.599085][ T8471] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.667140][ T8466] device hsr_slave_0 entered promiscuous mode [ 62.744057][ T8466] device hsr_slave_1 entered promiscuous mode [ 62.793755][ T8466] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.801309][ T8466] Cannot create hsr debugfs directory [ 62.808164][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.816611][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.825518][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.833841][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.856275][ T8458] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.884181][ T8471] team0: Port device team_slave_0 added [ 62.918096][ T8471] team0: Port device team_slave_1 added [ 62.944338][ T8461] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.958291][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.966264][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.975939][ T8458] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.018509][ T8468] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 63.104834][ T8461] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.145426][ T8471] device hsr_slave_0 entered promiscuous mode [ 63.194004][ T8471] device hsr_slave_1 entered promiscuous mode [ 63.233726][ T8471] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.241356][ T8471] Cannot create hsr debugfs directory [ 63.264666][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.272223][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.280059][ T8468] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 63.327076][ T8468] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 63.376429][ T8468] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 63.429537][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.438270][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.446646][ T2676] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.453735][ T2676] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.462269][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.470825][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.479121][ T2676] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.486214][ T2676] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.494105][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.502551][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.544626][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.555708][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.567547][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.576762][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.585034][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.593333][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.601002][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.629461][ T8466] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.675643][ T8458] device veth0_vlan entered promiscuous mode [ 63.686331][ T8475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.695097][ T8475] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.717867][ T8466] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.768665][ T8458] device veth1_vlan entered promiscuous mode [ 63.776541][ T8475] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.784611][ T8475] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.792256][ T8475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.801355][ T8475] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.812438][ T8463] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.825449][ T8466] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.882073][ T8461] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 63.893330][ T8461] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.912206][ T8475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.921425][ T8475] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.929879][ T8475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.938540][ T8475] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.947030][ T8466] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.013067][ T8475] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.059064][ T8471] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 169.083616][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 169.090493][ C0] rcu: 0-...!: (10499 ticks this GP) idle=3f2/1/0x4000000000000002 softirq=11509/11511 fqs=1 [ 169.100978][ C0] (t=10501 jiffies g=6609 q=78) [ 169.105906][ C0] rcu: rcu_preempt kthread starved for 10500 jiffies! g6609 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 169.116988][ C0] rcu: RCU grace-period kthread stack dump: [ 169.122862][ C0] rcu_preempt R running task 29032 10 2 0x80004000 [ 169.130749][ C0] Call Trace: [ 169.134036][ C0] __schedule+0x9a0/0xcc0 [ 169.138361][ C0] schedule+0x181/0x210 [ 169.142506][ C0] schedule_timeout+0x14f/0x240 [ 169.147342][ C0] ? run_local_timers+0x120/0x120 [ 169.152371][ C0] rcu_gp_kthread+0xed8/0x1770 [ 169.157157][ C0] kthread+0x332/0x350 [ 169.161219][ C0] ? rcu_report_qs_rsp+0x140/0x140 [ 169.166333][ C0] ? kthread_blkcg+0xe0/0xe0 [ 169.170916][ C0] ret_from_fork+0x24/0x30 [ 169.175338][ C0] NMI backtrace for cpu 0 [ 169.179656][ C0] CPU: 0 PID: 8477 Comm: syz-executor.0 Not tainted 5.5.0-rc5-syzkaller #0 [ 169.188346][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 169.198391][ C0] Call Trace: [ 169.201668][ C0] [ 169.204513][ C0] dump_stack+0x1fb/0x318 [ 169.208836][ C0] nmi_cpu_backtrace+0xaf/0x1a0 [ 169.213674][ C0] ? nmi_trigger_cpumask_backtrace+0x16d/0x290 [ 169.219817][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 169.225870][ C0] nmi_trigger_cpumask_backtrace+0x174/0x290 [ 169.231840][ C0] arch_trigger_cpumask_backtrace+0x10/0x20 [ 169.237717][ C0] rcu_dump_cpu_stacks+0x15a/0x220 [ 169.242822][ C0] rcu_sched_clock_irq+0xe25/0x1ad0 [ 169.248012][ C0] ? trace_hardirqs_off+0x74/0x80 [ 169.253027][ C0] update_process_times+0x12d/0x180 [ 169.258217][ C0] tick_sched_timer+0x263/0x420 [ 169.263054][ C0] ? tick_setup_sched_timer+0x3d0/0x3d0 [ 169.268586][ C0] __hrtimer_run_queues+0x403/0x840 [ 169.273786][ C0] hrtimer_interrupt+0x38c/0xda0 [ 169.278728][ C0] ? debug_smp_processor_id+0x9/0x20 [ 169.284002][ C0] smp_apic_timer_interrupt+0x109/0x280 [ 169.289537][ C0] apic_timer_interrupt+0xf/0x20 [ 169.294592][ C0] [ 169.297525][ C0] RIP: 0010:free_thread_stack+0x151/0x590 [ 169.303243][ C0] Code: 31 f6 e8 02 8d 6f 00 43 80 3c 2e 00 74 08 4c 89 e7 e8 73 94 6a 00 49 8b 1c 24 48 83 c3 08 48 89 d8 48 c1 e8 03 42 80 3c 28 00 <74> 08 48 89 df e8 55 94 6a 00 48 8b 3b be fc ff ff ff e8 28 04 00 [ 169.322932][ C0] RSP: 0018:ffffc900026d7a60 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 169.331336][ C0] RAX: 1ffff110128a9f01 RBX: ffff88809454f808 RCX: 0000000000000000 [ 169.339311][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffea00029ff640 [ 169.347272][ C0] RBP: ffffc900026d7a98 R08: dffffc0000000000 R09: fffffbfff12c962d [ 169.355229][ C0] R10: fffffbfff12c962d R11: 0000000000000000 R12: ffff88809454f8a0 [ 169.363194][ C0] R13: dffffc0000000000 R14: 1ffff110128a9f14 R15: ffff8880a6ea3438 [ 169.371199][ C0] put_task_stack+0xa3/0x130 [ 169.375777][ C0] finish_task_switch+0x3f1/0x550 [ 169.380796][ C0] __schedule+0x9a8/0xcc0 [ 169.385129][ C0] ? ___preempt_schedule+0x16/0x18 [ 169.390230][ C0] preempt_schedule+0xdb/0x120 [ 169.394981][ C0] ___preempt_schedule+0x16/0x18 [ 169.399912][ C0] _raw_spin_unlock+0x3a/0x40 [ 169.404576][ C0] mm_update_next_owner+0x5e9/0x680 [ 169.409768][ C0] exit_mm+0x502/0x590 [ 169.413853][ C0] ? _raw_spin_unlock_irq+0x64/0x80 [ 169.419069][ C0] do_exit+0x572/0x2000 [ 169.423238][ C0] do_group_exit+0x15c/0x2b0 [ 169.427827][ C0] __do_sys_exit_group+0x17/0x20 [ 169.432757][ C0] __se_sys_exit_group+0x14/0x20 [ 169.437692][ C0] __x64_sys_exit_group+0x3b/0x40 [ 169.442710][ C0] do_syscall_64+0xf7/0x1c0 [ 169.447210][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 169.453088][ C0] RIP: 0033:0x45af49 [ 169.456983][ C0] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 169.476575][ C0] RSP: 002b:00007ffd71d8cbe8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 169.484969][ C0] RAX: ffffffffffffffda RBX: 000000000000001e RCX: 000000000045af49 [ 169.492926][ C0] RDX: 0000000000414ae1 RSI: fffffffffffffff7 RDI: 0000000000000000 [ 169.500887][ C0] RBP: 0000000000000000 R08: ffffffffffffffff R09: 00007ffd71d8cc40 [ 169.508848][ C0] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 169.516807][ C0] R13: 00007ffd71d8cc40 R14: 0000000000000000 R15: 00007ffd71d8cc50