[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 49.545689][ T23] audit: type=1800 audit(1578469047.415:25): pid=8361 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 49.565461][ T23] audit: type=1800 audit(1578469047.415:26): pid=8361 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 49.601471][ T23] audit: type=1800 audit(1578469047.415:27): pid=8361 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.224' (ECDSA) to the list of known hosts. 2020/01/08 07:37:38 fuzzer started 2020/01/08 07:37:40 dialing manager at 10.128.0.26:35703 2020/01/08 07:37:40 syscalls: 2824 2020/01/08 07:37:40 code coverage: enabled 2020/01/08 07:37:40 comparison tracing: enabled 2020/01/08 07:37:40 extra coverage: enabled 2020/01/08 07:37:40 setuid sandbox: enabled 2020/01/08 07:37:40 namespace sandbox: enabled 2020/01/08 07:37:40 Android sandbox: /sys/fs/selinux/policy does not exist 2020/01/08 07:37:40 fault injection: enabled 2020/01/08 07:37:40 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/01/08 07:37:40 net packet injection: enabled 2020/01/08 07:37:40 net device setup: enabled 2020/01/08 07:37:40 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/01/08 07:37:40 devlink PCI setup: PCI device 0000:00:10.0 is not available 07:37:41 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 07:37:41 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000100)) ptrace$setregset(0x4205, 0x0, 0x200, 0x0) ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x8943, &(0x7f0000000740)) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GSUBSCRIP(r2, 0x8943, &(0x7f0000000740)) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) clone3(0x0, 0x0) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000009fe8)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f00004b4000/0x1000)=nil, 0x1000}, 0x1}) syzkaller login: [ 63.942386][ T8531] IPVS: ftp: loaded support on port[0] = 21 [ 64.081120][ T8531] chnl_net:caif_netlink_parms(): no params data found [ 64.148428][ T8531] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.164693][ T8531] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.172979][ T8531] device bridge_slave_0 entered promiscuous mode [ 64.191007][ T8535] IPVS: ftp: loaded support on port[0] = 21 [ 64.198107][ T8531] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.205522][ T8531] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.213335][ T8531] device bridge_slave_1 entered promiscuous mode [ 64.237180][ T8531] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link 07:37:42 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000680)=[@ip_retopts={{0x24, 0x0, 0x7, {[@rr={0x44, 0x14, 0x6, [@empty=0x3000000, @empty, @empty, @multicast2]}]}}}], 0x28, 0x5}, 0x0) [ 64.248560][ T8531] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.318956][ T8531] team0: Port device team_slave_0 added [ 64.339272][ T8531] team0: Port device team_slave_1 added 07:37:42 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80d1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x20530, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x0, 0x0) read$char_usb(r0, &(0x7f00000003c0)=""/223, 0xdf) close(0xffffffffffffffff) r1 = socket$inet(0x2b, 0x6, 0x7d) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) read(r2, &(0x7f0000009f9c)=""/100, 0x64) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000100)=0x4) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000080)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000ffbe059ce9bf652c282a5c90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000"/120], 0x78) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000000)=0x4, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)) r3 = syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='security.capability\x00', &(0x7f00000001c0)=@v1={0x1000000, [{0x1000, 0xea}]}, 0xc, 0x3) sysinfo(&(0x7f00000007c0)=""/154) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) read(r4, &(0x7f0000009f9c)=""/100, 0x64) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r5) sendmsg$rds(r7, &(0x7f00000018c0)={&(0x7f0000000300)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xfffffffffffffe93, &(0x7f0000000700)=[{&(0x7f0000000340)=""/10, 0xa}, {&(0x7f00000004c0)=""/108, 0x6c}, {&(0x7f0000000540)=""/60, 0x3c}, {&(0x7f0000000580)=""/232, 0xe8}, {&(0x7f0000000680)=""/11, 0xb}], 0x5, &(0x7f0000001740)=[@mask_fadd={0x58, 0x114, 0x8, {{0x40}, &(0x7f0000001640), &(0x7f0000001680)=0x1, 0x9, 0x1}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x4}, @mask_cswp={0x58, 0x114, 0x9, {{0x1, 0x4}, &(0x7f00000016c0)=0xfff, &(0x7f0000001700)=0x7, 0x85, 0x6, 0x8, 0xffffffffffffffff, 0x1a}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x8}, @zcopy_cookie={0x18, 0x114, 0xc, 0x200}], 0xf8}, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000140)) ioctl$BLKPG(r3, 0x1269, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f0000000800)}) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) [ 64.428245][ T8531] device hsr_slave_0 entered promiscuous mode [ 64.486252][ T8531] device hsr_slave_1 entered promiscuous mode [ 64.641904][ T8539] IPVS: ftp: loaded support on port[0] = 21 [ 64.651697][ T8537] IPVS: ftp: loaded support on port[0] = 21 07:37:42 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) chroot(&(0x7f0000000080)='./file0\x00') mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) chdir(&(0x7f00000004c0)='./file0\x00') symlink(&(0x7f0000000140)='..', &(0x7f00000000c0)='./file0\x00') umount2(&(0x7f0000000100)='./file0\x00', 0x0) [ 64.730737][ T8535] chnl_net:caif_netlink_parms(): no params data found [ 64.910209][ T8542] IPVS: ftp: loaded support on port[0] = 21 [ 64.930986][ T8531] netdevsim netdevsim0 netdevsim0: renamed from eth0 07:37:42 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4}, 0x68) [ 65.008926][ T8535] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.018866][ T8535] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.027274][ T8535] device bridge_slave_0 entered promiscuous mode [ 65.037047][ T8531] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.077566][ T8531] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.124309][ T8535] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.133098][ T8535] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.143020][ T8535] device bridge_slave_1 entered promiscuous mode [ 65.153924][ T8531] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.223833][ T8537] chnl_net:caif_netlink_parms(): no params data found [ 65.257699][ T8535] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.271736][ T8535] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.281384][ T8539] chnl_net:caif_netlink_parms(): no params data found [ 65.308266][ T8546] IPVS: ftp: loaded support on port[0] = 21 [ 65.369193][ T8535] team0: Port device team_slave_0 added [ 65.394068][ T8537] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.401394][ T8537] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.411635][ T8537] device bridge_slave_0 entered promiscuous mode [ 65.420798][ T8537] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.428056][ T8537] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.436078][ T8537] device bridge_slave_1 entered promiscuous mode [ 65.443972][ T8535] team0: Port device team_slave_1 added [ 65.455469][ T8539] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.462513][ T8539] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.471500][ T8539] device bridge_slave_0 entered promiscuous mode [ 65.480597][ T8539] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.488279][ T8539] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.496158][ T8539] device bridge_slave_1 entered promiscuous mode [ 65.514911][ T8537] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.539109][ T8537] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.570910][ T8539] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.582978][ T8539] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.600120][ T8537] team0: Port device team_slave_0 added [ 65.608827][ T8537] team0: Port device team_slave_1 added [ 65.658139][ T8535] device hsr_slave_0 entered promiscuous mode [ 65.695390][ T8535] device hsr_slave_1 entered promiscuous mode [ 65.745227][ T8535] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.752973][ T8535] Cannot create hsr debugfs directory [ 65.829881][ T8542] chnl_net:caif_netlink_parms(): no params data found [ 65.846720][ T8539] team0: Port device team_slave_0 added [ 65.857674][ T8539] team0: Port device team_slave_1 added [ 65.928088][ T8537] device hsr_slave_0 entered promiscuous mode [ 65.965588][ T8537] device hsr_slave_1 entered promiscuous mode [ 66.005214][ T8537] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.012818][ T8537] Cannot create hsr debugfs directory [ 66.097456][ T8546] chnl_net:caif_netlink_parms(): no params data found [ 66.177355][ T8539] device hsr_slave_0 entered promiscuous mode [ 66.225632][ T8539] device hsr_slave_1 entered promiscuous mode [ 66.275115][ T8539] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.282687][ T8539] Cannot create hsr debugfs directory [ 66.336843][ T8535] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 66.386561][ T8542] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.393654][ T8542] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.401528][ T8542] device bridge_slave_0 entered promiscuous mode [ 66.414429][ T8535] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 66.446927][ T8537] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 66.521213][ T8531] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.528744][ T8542] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.536046][ T8542] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.543605][ T8542] device bridge_slave_1 entered promiscuous mode [ 66.567469][ T8535] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 66.616922][ T8537] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 66.657719][ T8537] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 66.703217][ T8537] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 66.760352][ T8542] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.770580][ T8535] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 66.849368][ T8542] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.870827][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.879350][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.894092][ T8531] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.910397][ T8542] team0: Port device team_slave_0 added [ 66.916687][ T8546] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.923758][ T8546] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.931981][ T8546] device bridge_slave_0 entered promiscuous mode [ 66.944152][ T8546] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.951305][ T8546] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.959214][ T8546] device bridge_slave_1 entered promiscuous mode [ 66.970731][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.980089][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.988688][ T2950] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.995895][ T2950] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.004126][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.016252][ T8542] team0: Port device team_slave_1 added [ 67.033323][ T8539] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 67.083481][ T8546] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.097971][ T8546] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.124756][ T8539] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 67.171837][ T8539] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 67.220537][ T8539] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 67.282112][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.291931][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.300315][ T2964] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.307406][ T2964] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.342437][ T8546] team0: Port device team_slave_0 added [ 67.356610][ T8546] team0: Port device team_slave_1 added [ 67.377268][ T8542] device hsr_slave_0 entered promiscuous mode [ 67.425439][ T8542] device hsr_slave_1 entered promiscuous mode [ 67.465138][ T8542] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.472850][ T8542] Cannot create hsr debugfs directory [ 67.478698][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.487344][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.496647][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.505613][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.513853][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.522524][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.531859][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.580609][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.590666][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.599830][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.608227][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.686774][ T8546] device hsr_slave_0 entered promiscuous mode [ 67.735464][ T8546] device hsr_slave_1 entered promiscuous mode [ 67.765282][ T8546] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.772876][ T8546] Cannot create hsr debugfs directory [ 67.797544][ T8531] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.872638][ T8537] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.893675][ T8531] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.913989][ T2966] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.922584][ T2966] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.930673][ T2966] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.938692][ T2966] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.948969][ T8535] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.966570][ T8537] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.998199][ T2966] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.008208][ T2966] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.018697][ T2966] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.025799][ T2966] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.045696][ T8546] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 68.111780][ T8546] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 68.147519][ T8546] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 68.196998][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.204853][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.212686][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.220379][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.229558][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.238316][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.247255][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.256018][ T2715] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.263202][ T2715] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.270868][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.284433][ T8542] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 68.339970][ T8542] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 68.398846][ T8542] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 68.447384][ T8542] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 68.487366][ T8546] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 68.559433][ T8539] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.574318][ T8535] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.587121][ T8539] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.594116][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.603120][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.613789][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.622416][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.630834][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.656797][ T8531] device veth0_vlan entered promiscuous mode [ 68.664646][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.673011][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.681078][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.690205][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.698794][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.708006][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.716775][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.725430][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.733723][ T2715] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.740809][ T2715] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.748365][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.757042][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.765445][ T2715] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.765485][ T2715] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.767230][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.787980][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.805996][ T8537] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 68.816609][ T8537] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.837634][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.847305][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.856200][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.864580][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.873053][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.881233][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.889798][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.898097][ T2950] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.905184][ T2950] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.912710][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.921300][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.929597][ T2950] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.936695][ T2950] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.945673][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.953258][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.961216][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.977890][ T8531] device veth1_vlan entered promiscuous mode [ 68.999108][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.007376][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.018679][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.027332][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.036313][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.044871][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.079713][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.090520][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.099563][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.108764][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.117332][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.126230][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.134621][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.142977][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.151432][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.159658][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.168236][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.177401][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.203729][ T8539] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.219807][ T8535] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 69.232454][ T8535] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.259667][ T8546] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.269074][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.277634][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.285727][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.294416][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.303042][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.311433][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.322170][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.351751][ T8546] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.381237][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.390309][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 174.404964][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 174.411852][ C1] rcu: 1-...!: (10499 ticks this GP) idle=3ae/1/0x4000000000000002 softirq=13351/13351 fqs=38 [ 174.422445][ C1] (t=10500 jiffies g=6809 q=95) [ 174.427374][ C1] rcu: rcu_preempt kthread starved for 10423 jiffies! g6809 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 174.438456][ C1] rcu: RCU grace-period kthread stack dump: [ 174.444334][ C1] rcu_preempt R running task 29032 10 2 0x80004000 [ 174.452222][ C1] Call Trace: [ 174.455507][ C1] __schedule+0x9a0/0xcc0 [ 174.459864][ C1] schedule+0x181/0x210 [ 174.464141][ C1] schedule_timeout+0x14f/0x240 [ 174.468992][ C1] ? run_local_timers+0x120/0x120 [ 174.474016][ C1] rcu_gp_kthread+0xed8/0x1770 [ 174.478790][ C1] kthread+0x332/0x350 [ 174.482965][ C1] ? rcu_report_qs_rsp+0x140/0x140 [ 174.488087][ C1] ? kthread_blkcg+0xe0/0xe0 [ 174.492678][ C1] ret_from_fork+0x24/0x30 [ 174.497105][ C1] NMI backtrace for cpu 1 [ 174.501427][ C1] CPU: 1 PID: 8552 Comm: modprobe Not tainted 5.5.0-rc5-syzkaller #0 [ 174.509491][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 174.519532][ C1] Call Trace: [ 174.522809][ C1] [ 174.525650][ C1] dump_stack+0x1fb/0x318 [ 174.529972][ C1] nmi_cpu_backtrace+0xaf/0x1a0 [ 174.534813][ C1] ? nmi_trigger_cpumask_backtrace+0x16d/0x290 [ 174.540962][ C1] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 174.547036][ C1] nmi_trigger_cpumask_backtrace+0x174/0x290 [ 174.553007][ C1] arch_trigger_cpumask_backtrace+0x10/0x20 [ 174.558887][ C1] rcu_dump_cpu_stacks+0x15a/0x220 [ 174.563992][ C1] rcu_sched_clock_irq+0xe25/0x1ad0 [ 174.569184][ C1] ? trace_hardirqs_off+0x74/0x80 [ 174.574197][ C1] update_process_times+0x12d/0x180 [ 174.579385][ C1] tick_sched_timer+0x263/0x420 [ 174.584227][ C1] ? tick_setup_sched_timer+0x3d0/0x3d0 [ 174.589774][ C1] __hrtimer_run_queues+0x403/0x840 [ 174.595000][ C1] hrtimer_interrupt+0x38c/0xda0 [ 174.599948][ C1] ? debug_smp_processor_id+0x9/0x20 [ 174.605224][ C1] smp_apic_timer_interrupt+0x109/0x280 [ 174.610759][ C1] apic_timer_interrupt+0xf/0x20 [ 174.615741][ C1] [ 174.618677][ C1] RIP: 0010:free_thread_stack+0x16d/0x590 [ 174.624388][ C1] Code: c3 08 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 55 94 6a 00 48 8b 3b be fc ff ff ff e8 28 04 00 00 43 80 3c 2e 00 <74> 08 4c 89 e7 e8 39 94 6a 00 49 8b 1c 24 48 83 c3 08 48 89 d8 48 [ 174.643980][ C1] RSP: 0018:ffffc900026976e8 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 174.652383][ C1] RAX: ffffffff814897d3 RBX: ffff88809d8d7588 RCX: ffff888091844140 [ 174.660345][ C1] RDX: 0000000000000000 RSI: 00000000fffffffc RDI: ffffea000249e380 [ 174.668308][ C1] RBP: ffffc90002697720 R08: 000000000003a728 R09: ffffed1012aa6299 [ 174.676283][ C1] R10: ffffed1012aa6299 R11: 0000000000000000 R12: ffff88809d8d73a0 [ 174.684248][ C1] R13: dffffc0000000000 R14: 1ffff11013b1ae74 R15: ffff8880955314b8 [ 174.692226][ C1] ? mod_memcg_page_state+0x123/0x190 [ 174.697597][ C1] ? free_thread_stack+0x168/0x590 [ 174.702702][ C1] put_task_stack+0xa3/0x130 [ 174.707282][ C1] finish_task_switch+0x3f1/0x550 [ 174.712302][ C1] __schedule+0x9a8/0xcc0 [ 174.716632][ C1] ? ___preempt_schedule+0x16/0x18 [ 174.721735][ C1] preempt_schedule+0xdb/0x120 [ 174.726489][ C1] ___preempt_schedule+0x16/0x18 [ 174.731425][ C1] _raw_spin_unlock+0x3a/0x40 [ 174.736092][ C1] zap_pte_range+0x1732/0x1c30 [ 174.740869][ C1] unmap_page_range+0x9b5/0xb00 [ 174.745726][ C1] unmap_single_vma+0x1d4/0x2e0 [ 174.750571][ C1] unmap_vmas+0x163/0x2a0 [ 174.754899][ C1] exit_mmap+0x27b/0x530 [ 174.759135][ C1] ? exit_aio+0x25e/0x370 [ 174.763468][ C1] __mmput+0x120/0x3a0 [ 174.767531][ C1] mmput+0x5d/0x70 [ 174.771243][ C1] exit_mm+0x50a/0x590 [ 174.775314][ C1] do_exit+0x572/0x2000 [ 174.779461][ C1] ? check_preemption_disabled+0xb4/0x260 [ 174.785169][ C1] ? debug_smp_processor_id+0x1c/0x20 [ 174.790547][ C1] do_group_exit+0x15c/0x2b0 [ 174.795134][ C1] __do_sys_exit_group+0x17/0x20 [ 174.800066][ C1] __se_sys_exit_group+0x14/0x20 [ 174.804990][ C1] __x64_sys_exit_group+0x3b/0x40 [ 174.810006][ C1] do_syscall_64+0xf7/0x1c0 [ 174.814523][ C1] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 174.820430][ C1] RIP: 0033:0x7f090f68d1e8 [ 174.824917][ C1] Code: Bad RIP value. [ 174.828974][ C1] RSP: 002b:00007ffea0edfe58 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 174.837561][ C1] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f090f68d1e8 [ 174.845537][ C1] RDX: 0000000000000001 RSI: 000000000000003c RDI: 0000000000000001 [ 174.853671][ C1] RBP: 00007f090f962840 R08: 00000000000000e7 R09: ffffffffffffffa8 [ 174.861639][ C1] R10: 00007f090f968740 R11: 0000000000000246 R12: 00007f090f962840 [ 174.869602][ C1] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000