[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 50.278448][ T23] audit: type=1800 audit(1578468089.719:25): pid=8303 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 50.310259][ T23] audit: type=1800 audit(1578468089.719:26): pid=8303 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 50.356706][ T23] audit: type=1800 audit(1578468089.719:27): pid=8303 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.77' (ECDSA) to the list of known hosts. 2020/01/08 07:21:41 fuzzer started 2020/01/08 07:21:43 dialing manager at 10.128.0.26:35703 2020/01/08 07:21:43 syscalls: 2824 2020/01/08 07:21:43 code coverage: enabled 2020/01/08 07:21:43 comparison tracing: enabled 2020/01/08 07:21:43 extra coverage: enabled 2020/01/08 07:21:43 setuid sandbox: enabled 2020/01/08 07:21:43 namespace sandbox: enabled 2020/01/08 07:21:43 Android sandbox: /sys/fs/selinux/policy does not exist 2020/01/08 07:21:43 fault injection: enabled 2020/01/08 07:21:43 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/01/08 07:21:43 net packet injection: enabled 2020/01/08 07:21:43 net device setup: enabled 2020/01/08 07:21:43 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/01/08 07:21:43 devlink PCI setup: PCI device 0000:00:10.0 is not available 07:21:44 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$clear(0x7, r0) 07:21:44 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @local, @multicast2}, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000001380)=""/4086, 0xff6}], 0x1, 0x5d) syzkaller login: [ 64.980595][ T8473] IPVS: ftp: loaded support on port[0] = 21 [ 65.083666][ T8475] IPVS: ftp: loaded support on port[0] = 21 [ 65.154393][ T8473] chnl_net:caif_netlink_parms(): no params data found 07:21:44 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000180)=[{0x3, 0x300000000000000, &(0x7f0000000080)}], 0x1, 0x0) write$binfmt_elf64(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="d6ac7d0759e34fef7c55a051d74120a9c4c0820317a72684827860a89b1df44cfe348bc38ac0f0f7d5bdc71bac54b964c22726142b1af756b1e83e437d03e5320835d0955ed0837cbfc3afd14a42371f08d238f5cce4bb0c73532f11687494e2dc0bdd51f759e9d26f2a78770b603854c868a180d87ac1be76175a6cd0d41338e36656cf046fe62d2b399abe75768feb51cf92499d2b2e2df675e4aba95a6ff8472c71430ee3f4abd78ead0703751959987403f1080d4a23c5b8f4dc71b71d53bfec4688f6fd5068da23e35508e7a63a8b631ff0de9e9d0c48504585bc0b37c7dde848ded4041ad741f111b48b4ea4e0607846389855205431734772132e3c85cae412818e31730af4efb05b7578a0ef352c74c7764798c9478c760d6a6331aeee2ac9082768fc8de7cb3e4f6644937008304f3dd7f7b308f06a64d8b2b19f0c3c65205ad17ddbb967e24994f899f0029cb37c9e162797b959689bdf22ade30e1513ec821210"], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f00000001c0)={0xc86}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000008012005fff", 0x8) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) accept4$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) [ 65.200785][ T8473] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.210092][ T8473] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.218851][ T8473] device bridge_slave_0 entered promiscuous mode [ 65.227876][ T8473] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.235200][ T8473] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.243179][ T8473] device bridge_slave_1 entered promiscuous mode [ 65.288345][ T8473] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.337403][ T8473] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.368039][ T8479] IPVS: ftp: loaded support on port[0] = 21 [ 65.379091][ T8475] chnl_net:caif_netlink_parms(): no params data found [ 65.432054][ T8473] team0: Port device team_slave_0 added [ 65.451516][ T8473] team0: Port device team_slave_1 added [ 65.457293][ T8475] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.464770][ T8475] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.474720][ T8475] device bridge_slave_0 entered promiscuous mode [ 65.484219][ T8475] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.493319][ T8475] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.501689][ T8475] device bridge_slave_1 entered promiscuous mode [ 65.539874][ T8475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.554739][ T8475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 07:21:45 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000), 0x4) [ 65.646753][ T8473] device hsr_slave_0 entered promiscuous mode [ 65.721690][ T8473] device hsr_slave_1 entered promiscuous mode 07:21:45 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x312, 0x0, 0x0, 0x0, 0x0, @random="0d8e2c988860"}, 0x10) [ 65.802317][ T8481] IPVS: ftp: loaded support on port[0] = 21 [ 65.816487][ T8475] team0: Port device team_slave_0 added [ 65.838987][ T8475] team0: Port device team_slave_1 added [ 66.013492][ T8475] device hsr_slave_0 entered promiscuous mode 07:21:45 executing program 5: socketpair$unix(0x1, 0x80003, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00008feff0)={0x0, 0x1af}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="020d0000100000000000000000000000030006000700000002000000e0000001000000f5000000000800120002000200000000000000000030006c0002010000ff3f567b000000200200000000152c0000000000000000010a0014bb00000000000000000000000003000500000000000200"/128], 0x80}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmmsg(r1, &(0x7f0000000180), 0x400024c, 0x0) [ 66.061940][ T8475] device hsr_slave_1 entered promiscuous mode [ 66.101583][ T8475] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.109368][ T8475] Cannot create hsr debugfs directory [ 66.137451][ T8484] IPVS: ftp: loaded support on port[0] = 21 [ 66.171754][ T8479] chnl_net:caif_netlink_parms(): no params data found [ 66.188382][ T8486] IPVS: ftp: loaded support on port[0] = 21 [ 66.281227][ T8479] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.289288][ T8479] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.299478][ T8479] device bridge_slave_0 entered promiscuous mode [ 66.308909][ T8479] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.316307][ T8479] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.324159][ T8479] device bridge_slave_1 entered promiscuous mode [ 66.344313][ T8473] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 66.446198][ T8473] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 66.505282][ T8473] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 66.586534][ T8473] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 66.676546][ T8479] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.689595][ T8479] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.753542][ T8475] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 66.783463][ T8475] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 66.877349][ T8484] chnl_net:caif_netlink_parms(): no params data found [ 66.886437][ T8475] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 66.944121][ T8479] team0: Port device team_slave_0 added [ 66.949948][ T8475] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 66.999417][ T8481] chnl_net:caif_netlink_parms(): no params data found [ 67.017406][ T8479] team0: Port device team_slave_1 added [ 67.070464][ T8486] chnl_net:caif_netlink_parms(): no params data found [ 67.122530][ T8484] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.129656][ T8484] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.137783][ T8484] device bridge_slave_0 entered promiscuous mode [ 67.150069][ T8484] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.157196][ T8484] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.164996][ T8484] device bridge_slave_1 entered promiscuous mode [ 67.185971][ T8473] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.253885][ T8479] device hsr_slave_0 entered promiscuous mode [ 67.301483][ T8479] device hsr_slave_1 entered promiscuous mode [ 67.351201][ T8479] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.358792][ T8479] Cannot create hsr debugfs directory [ 67.373367][ T8481] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.380442][ T8481] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.389812][ T8481] device bridge_slave_0 entered promiscuous mode [ 67.407466][ T8484] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.420373][ T8484] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.444882][ T8481] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.452189][ T8481] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.459865][ T8481] device bridge_slave_1 entered promiscuous mode [ 67.474714][ T8486] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.482640][ T8486] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.490298][ T8486] device bridge_slave_0 entered promiscuous mode [ 67.499036][ T8484] team0: Port device team_slave_0 added [ 67.511802][ T8484] team0: Port device team_slave_1 added [ 67.525939][ T8486] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.533889][ T8486] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.542065][ T8486] device bridge_slave_1 entered promiscuous mode [ 67.567862][ T8473] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.589937][ T8481] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.603711][ T2743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.614925][ T2743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.623184][ T2743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.632132][ T2743] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.640509][ T2743] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.647707][ T2743] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.655850][ T2743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.664870][ T2743] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.673268][ T2743] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.680292][ T2743] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.687982][ T2743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.700641][ T2743] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.763221][ T8484] device hsr_slave_0 entered promiscuous mode [ 67.812167][ T8484] device hsr_slave_1 entered promiscuous mode [ 67.871667][ T8484] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.879298][ T8484] Cannot create hsr debugfs directory [ 67.888899][ T8481] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.903921][ T8486] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.920477][ T8486] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.947082][ T8481] team0: Port device team_slave_0 added [ 67.964288][ T2728] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.976827][ T2728] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.986083][ T2728] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.994502][ T2728] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.003492][ T2728] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.014416][ T2728] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.025060][ T8481] team0: Port device team_slave_1 added [ 68.041386][ T8473] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 68.052604][ T8473] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.075502][ T8486] team0: Port device team_slave_0 added [ 68.085076][ T8486] team0: Port device team_slave_1 added [ 68.101377][ T2783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.109625][ T2783] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.118772][ T2783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.127243][ T2783] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.135891][ T2783] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.161517][ T2742] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.168925][ T2742] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.244589][ T8481] device hsr_slave_0 entered promiscuous mode [ 68.281603][ T8481] device hsr_slave_1 entered promiscuous mode [ 68.321602][ T8481] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.329241][ T8481] Cannot create hsr debugfs directory [ 68.345795][ T8473] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.423818][ T8486] device hsr_slave_0 entered promiscuous mode [ 68.451385][ T8486] device hsr_slave_1 entered promiscuous mode [ 68.501551][ T8486] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.509156][ T8486] Cannot create hsr debugfs directory [ 68.580533][ T8479] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 68.640475][ T2728] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.649600][ T2728] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.670681][ T8479] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 68.724332][ T8475] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.749719][ T8479] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 68.795653][ T8479] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 68.875184][ T2783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.884863][ T2783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.905921][ T8473] device veth0_vlan entered promiscuous mode [ 68.938990][ T2783] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.946864][ T2783] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.954989][ T8481] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 68.985389][ T8481] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.048295][ T8484] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 69.103224][ T8481] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 69.153385][ T2743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.162397][ T2743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.170400][ T8486] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 69.214146][ T8475] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.220955][ T8486] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 69.285925][ T8486] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 69.353200][ T8484] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 69.404106][ T8484] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 69.453007][ T8481] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 69.503995][ T8473] device veth1_vlan entered promiscuous mode [ 69.516754][ T8486] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 69.602392][ T8484] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 69.642235][ T2728] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.650219][ T2728] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.659197][ T2728] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.668141][ T2728] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.675237][ T2728] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.684632][ T2728] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.704026][ T2742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.714548][ T2742] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.723711][ T2742] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.730815][ T2742] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.784246][ T2743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.801055][ T2743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.809665][ T2743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.818705][ T2743] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.827067][ T2743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.835558][ T2743] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.846074][ T2743] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.883403][ T2742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.893555][ T2742] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.902316][ T2742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.910514][ T2742] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.922769][ T8475] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.980180][ T8479] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.021071][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 175.028190][ C0] rcu: 0-...!: (1 GPs behind) idle=6be/1/0x4000000000000002 softirq=12963/12964 fqs=41 [ 175.038169][ C0] (t=10500 jiffies g=6581 q=86) [ 175.043104][ C0] rcu: rcu_preempt kthread starved for 10418 jiffies! g6581 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 175.054189][ C0] rcu: RCU grace-period kthread stack dump: [ 175.060066][ C0] rcu_preempt R running task 28984 10 2 0x80004000 [ 175.067963][ C0] Call Trace: [ 175.071254][ C0] __schedule+0x9a0/0xcc0 [ 175.075586][ C0] schedule+0x181/0x210 [ 175.079742][ C0] schedule_timeout+0x14f/0x240 [ 175.085985][ C0] ? run_local_timers+0x120/0x120 [ 175.091007][ C0] rcu_gp_kthread+0xed8/0x1770 [ 175.095773][ C0] kthread+0x332/0x350 [ 175.099831][ C0] ? rcu_report_qs_rsp+0x140/0x140 [ 175.104934][ C0] ? kthread_blkcg+0xe0/0xe0 [ 175.109525][ C0] ret_from_fork+0x24/0x30 [ 175.113946][ C0] NMI backtrace for cpu 0 [ 175.118268][ C0] CPU: 0 PID: 8473 Comm: syz-executor.0 Not tainted 5.5.0-rc5-syzkaller #0 [ 175.126840][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 175.136903][ C0] Call Trace: [ 175.140178][ C0] [ 175.143024][ C0] dump_stack+0x1fb/0x318 [ 175.147362][ C0] nmi_cpu_backtrace+0xaf/0x1a0 [ 175.152206][ C0] ? nmi_trigger_cpumask_backtrace+0x16d/0x290 [ 175.158354][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 175.164413][ C0] nmi_trigger_cpumask_backtrace+0x174/0x290 [ 175.170385][ C0] arch_trigger_cpumask_backtrace+0x10/0x20 [ 175.176268][ C0] rcu_dump_cpu_stacks+0x15a/0x220 [ 175.181380][ C0] rcu_sched_clock_irq+0xe25/0x1ad0 [ 175.186572][ C0] ? trace_hardirqs_off+0x74/0x80 [ 175.191591][ C0] update_process_times+0x12d/0x180 [ 175.196815][ C0] tick_sched_timer+0x263/0x420 [ 175.201675][ C0] ? tick_setup_sched_timer+0x3d0/0x3d0 [ 175.207348][ C0] __hrtimer_run_queues+0x403/0x840 [ 175.212563][ C0] hrtimer_interrupt+0x38c/0xda0 [ 175.217514][ C0] ? debug_smp_processor_id+0x9/0x20 [ 175.222798][ C0] smp_apic_timer_interrupt+0x109/0x280 [ 175.228337][ C0] apic_timer_interrupt+0xf/0x20 [ 175.233262][ C0] [ 175.236195][ C0] RIP: 0010:free_thread_stack+0x18b/0x590 [ 175.241908][ C0] Code: ff ff e8 28 04 00 00 43 80 3c 2e 00 74 08 4c 89 e7 e8 39 94 6a 00 49 8b 1c 24 48 83 c3 08 48 89 d8 48 c1 e8 03 42 80 3c 28 00 <74> 08 48 89 df e8 1b 94 6a 00 48 8b 1b e9 82 ff ff ff e8 be 2b 2e [ 175.261507][ C0] RSP: 0018:ffffc90001d57bd0 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 175.269913][ C0] RAX: 1ffff11013f3baf1 RBX: ffff88809f9dd788 RCX: ffff888096ade380 [ 175.277891][ C0] RDX: 0000000000000000 RSI: 00000000fffffffc RDI: ffffea0002463400 [ 175.285856][ C0] RBP: ffffc90001d57c08 R08: dffffc0000000000 R09: fffffbfff124248a [ 175.293833][ C0] R10: fffffbfff124248a R11: 0000000000000000 R12: ffff88809f9dd820 [ 175.301796][ C0] R13: dffffc0000000000 R14: 1ffff11013f3bb04 R15: ffff8880a8d97478 [ 175.309786][ C0] put_task_stack+0xa3/0x130 [ 175.314386][ C0] finish_task_switch+0x3f1/0x550 [ 175.319409][ C0] __schedule+0x9a8/0xcc0 [ 175.323744][ C0] schedule+0x181/0x210 [ 175.327901][ C0] do_nanosleep+0x1d0/0x6c0 [ 175.332412][ C0] hrtimer_nanosleep+0x3a6/0x5b0 [ 175.337489][ C0] ? trace_hrtimer_expire_exit+0x2d0/0x2d0 [ 175.343322][ C0] __x64_sys_nanosleep+0x186/0x1d0 [ 175.348471][ C0] do_syscall_64+0xf7/0x1c0 [ 175.352995][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 175.358981][ C0] RIP: 0033:0x4593f0 [ 175.362889][ C0] Code: c0 5b 5d c3 66 0f 1f 44 00 00 8b 04 24 48 83 c4 18 5b 5d c3 66 0f 1f 44 00 00 83 3d 41 f5 61 00 00 75 14 b8 23 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 d4 d1 fb ff c3 48 83 ec 08 e8 ea 46 00 00 [ 175.382484][ C0] RSP: 002b:00007ffc52f65c98 EFLAGS: 00000246 ORIG_RAX: 0000000000000023 [ 175.390885][ C0] RAX: ffffffffffffffda RBX: 0000000000011166 RCX: 00000000004593f0 [ 175.398865][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007ffc52f65ca0 [ 175.406833][ C0] RBP: 0000000000000002 R08: 0000000000000001 R09: 0000000001343940 [ 175.414799][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 175.422765][ C0] R13: 00007ffc52f65cf0 R14: 0000000000011166 R15: 00007ffc52f65d00