[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 46.180450][ T23] audit: type=1800 audit(1578474149.048:25): pid=8253 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 46.220888][ T23] audit: type=1800 audit(1578474149.048:26): pid=8253 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 46.250827][ T23] audit: type=1800 audit(1578474149.048:27): pid=8253 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.238' (ECDSA) to the list of known hosts. 2020/01/08 09:02:41 fuzzer started 2020/01/08 09:02:42 dialing manager at 10.128.0.26:35703 2020/01/08 09:02:42 syscalls: 2824 2020/01/08 09:02:42 code coverage: enabled 2020/01/08 09:02:42 comparison tracing: enabled 2020/01/08 09:02:42 extra coverage: enabled 2020/01/08 09:02:42 setuid sandbox: enabled 2020/01/08 09:02:42 namespace sandbox: enabled 2020/01/08 09:02:42 Android sandbox: /sys/fs/selinux/policy does not exist 2020/01/08 09:02:42 fault injection: enabled 2020/01/08 09:02:42 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/01/08 09:02:42 net packet injection: enabled 2020/01/08 09:02:42 net device setup: enabled 2020/01/08 09:02:42 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/01/08 09:02:42 devlink PCI setup: PCI device 0000:00:10.0 is not available 09:02:43 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0xffffffffffffff4a, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800000016001d0a000000000000000400000000"], 0x18}}, 0x0) recvmmsg(r0, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000540)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) 09:02:44 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x404, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f00000001c0)={0x2}) syzkaller login: [ 61.154788][ T8420] IPVS: ftp: loaded support on port[0] = 21 [ 61.302614][ T8420] chnl_net:caif_netlink_parms(): no params data found [ 61.353392][ T8420] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.362036][ T8420] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.371281][ T8420] device bridge_slave_0 entered promiscuous mode [ 61.381572][ T8420] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.390035][ T8420] bridge0: port 2(bridge_slave_1) entered disabled state 09:02:44 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x44031, 0xffffffffffffffff, 0x0) bind(0xffffffffffffffff, &(0x7f0000670000)=@generic={0x0, "01fd000000000000000000000000fc00000005a121b80c00000000800000002e0a53b232394a0000000100000000ffff0f82e52b0a669ae43a620170a00021f069ca021f6f65dc1161e7068f358c00f9ecff1458d1ea03000030ffff000000090003b9c8ead200c577aeb81c90541d6d7c770ee590c8bcf70dc151eb1849"}, 0x80) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000001500)) [ 61.398243][ T8420] device bridge_slave_1 entered promiscuous mode [ 61.422836][ T8423] IPVS: ftp: loaded support on port[0] = 21 [ 61.437490][ T8420] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.478263][ T8420] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.548632][ T8420] team0: Port device team_slave_0 added [ 61.557837][ T8420] team0: Port device team_slave_1 added 09:02:44 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r0, &(0x7f0000000300), 0x121, 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000040)=0x100, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32, @ANYBLOB="0000000000000000140012000c00010062"], 0x3}}, 0x0) connect$inet6(r1, &(0x7f00000000c0), 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4000000000001b9, 0x0) [ 61.669170][ T8420] device hsr_slave_0 entered promiscuous mode [ 61.695969][ T8420] device hsr_slave_1 entered promiscuous mode [ 61.781695][ T8426] IPVS: ftp: loaded support on port[0] = 21 [ 61.802105][ T8423] chnl_net:caif_netlink_parms(): no params data found 09:02:44 executing program 4: unshare(0x20600) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x0, 0x0, &(0x7f0000000080)) [ 61.949488][ T8428] IPVS: ftp: loaded support on port[0] = 21 [ 61.959430][ T8423] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.975743][ T8423] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.983710][ T8423] device bridge_slave_0 entered promiscuous mode [ 62.058531][ T8423] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.070513][ T8423] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.087156][ T8423] device bridge_slave_1 entered promiscuous mode [ 62.142496][ T8420] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.199716][ T8426] chnl_net:caif_netlink_parms(): no params data found [ 62.229799][ T8431] IPVS: ftp: loaded support on port[0] = 21 09:02:45 executing program 5: unshare(0x2040400) r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) fadvise64(r0, 0x0, 0x2, 0x4) [ 62.249135][ T8420] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.298111][ T8420] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.350395][ T8420] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.403405][ T8423] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.415152][ T8423] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.433669][ T8433] IPVS: ftp: loaded support on port[0] = 21 [ 62.484275][ T8426] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.491908][ T8426] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.499764][ T8426] device bridge_slave_0 entered promiscuous mode [ 62.522700][ T8426] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.530198][ T8426] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.538882][ T8426] device bridge_slave_1 entered promiscuous mode [ 62.547217][ T8423] team0: Port device team_slave_0 added [ 62.555499][ T8423] team0: Port device team_slave_1 added [ 62.606318][ T8426] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.657206][ T8426] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.738329][ T8423] device hsr_slave_0 entered promiscuous mode [ 62.796173][ T8423] device hsr_slave_1 entered promiscuous mode [ 62.837283][ T8423] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.844959][ T8423] Cannot create hsr debugfs directory [ 62.908959][ T8426] team0: Port device team_slave_0 added [ 62.917048][ T8426] team0: Port device team_slave_1 added [ 62.929365][ T8428] chnl_net:caif_netlink_parms(): no params data found [ 63.047557][ T8426] device hsr_slave_0 entered promiscuous mode [ 63.096092][ T8426] device hsr_slave_1 entered promiscuous mode [ 63.135781][ T8426] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.143373][ T8426] Cannot create hsr debugfs directory [ 63.157336][ T8431] chnl_net:caif_netlink_parms(): no params data found [ 63.201102][ T8428] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.209562][ T8428] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.217454][ T8428] device bridge_slave_0 entered promiscuous mode [ 63.251143][ T8428] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.258537][ T8428] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.266689][ T8428] device bridge_slave_1 entered promiscuous mode [ 63.282382][ T8433] chnl_net:caif_netlink_parms(): no params data found [ 63.304120][ T8420] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.313124][ T8428] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.349474][ T8428] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.362966][ T8431] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.371562][ T8431] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.381271][ T8431] device bridge_slave_0 entered promiscuous mode [ 63.413134][ T8431] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.421427][ T8431] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.429334][ T8431] device bridge_slave_1 entered promiscuous mode [ 63.444195][ T8420] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.451846][ T8423] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.491188][ T8423] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.549199][ T8428] team0: Port device team_slave_0 added [ 63.559841][ T2790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.568286][ T2790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.608374][ T8426] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.658431][ T8423] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.728467][ T8428] team0: Port device team_slave_1 added [ 63.734157][ T8423] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.801445][ T2790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.811735][ T2790] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.820321][ T2790] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.827497][ T2790] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.835483][ T2790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.845039][ T2790] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.853461][ T2790] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.860514][ T2790] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.870912][ T8433] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.878385][ T8433] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.887187][ T8433] device bridge_slave_0 entered promiscuous mode [ 63.895040][ T8433] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.902900][ T8433] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.911378][ T8433] device bridge_slave_1 entered promiscuous mode [ 63.918238][ T8426] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.974033][ T8426] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.039912][ T8431] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.051170][ T8431] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.062482][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.071818][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.089937][ T8426] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.190309][ T8433] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.228331][ T8428] device hsr_slave_0 entered promiscuous mode [ 64.266019][ T8428] device hsr_slave_1 entered promiscuous mode [ 64.315951][ T8428] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.323670][ T8428] Cannot create hsr debugfs directory [ 64.339001][ T3783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.347860][ T3783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.356745][ T3783] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.364957][ T3783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.373570][ T3783] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.399474][ T8431] team0: Port device team_slave_0 added [ 64.406609][ T8433] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.433909][ T3783] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.457720][ T8431] team0: Port device team_slave_1 added [ 64.470551][ T8433] team0: Port device team_slave_0 added [ 64.479074][ T8433] team0: Port device team_slave_1 added [ 64.487085][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.495314][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.587636][ T8431] device hsr_slave_0 entered promiscuous mode [ 64.625919][ T8431] device hsr_slave_1 entered promiscuous mode [ 64.676126][ T8431] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.683704][ T8431] Cannot create hsr debugfs directory [ 64.700438][ T3783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.708900][ T3783] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.768844][ T8433] device hsr_slave_0 entered promiscuous mode [ 64.816320][ T8433] device hsr_slave_1 entered promiscuous mode [ 64.855912][ T8433] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.863493][ T8433] Cannot create hsr debugfs directory [ 64.872717][ T8420] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.891812][ T8426] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.954066][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.962237][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.974425][ T8420] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.987129][ T8423] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.993902][ T3783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.001989][ T3783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.024829][ T8426] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.067252][ T3782] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.082455][ T3782] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.090888][ T3782] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.097987][ T3782] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.106648][ T3782] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.114250][ T3782] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.139490][ T8423] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.148903][ T8428] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 65.207537][ T3782] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.216256][ T8428] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 65.283822][ T8428] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 65.307736][ T3783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.316489][ T3783] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.325099][ T3783] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.332268][ T3783] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.339909][ T3783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.349763][ T3783] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.358496][ T3783] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.365568][ T3783] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.373171][ T3783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.382102][ T3783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.390780][ T3783] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.399446][ T3783] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.406607][ T3783] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.414306][ T3783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.423443][ T3783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.432157][ T3783] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.465838][ T8428] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 65.497859][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.508242][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.517145][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.526399][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.534900][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.543888][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.566249][ T8433] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 65.598962][ T8433] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 65.669993][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.680634][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.689033][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.698489][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.709549][ T8420] device veth0_vlan entered promiscuous mode [ 65.717793][ T8431] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 65.777456][ T8431] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 65.848538][ T8433] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 65.888002][ T8433] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 65.934515][ T3782] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.942692][ T3782] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.956832][ T8431] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 65.998863][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.008238][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.017199][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.025507][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.034058][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.044416][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.055723][ T8420] device veth1_vlan entered promiscuous mode [ 66.063419][ T8426] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.072207][ T8431] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 66.126759][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.171551][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.179370][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.187474][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.198463][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.215207][ T8423] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 66.227741][ T8423] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.252629][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.261654][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.270840][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.280001][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.289243][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.308354][ T8426] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.349300][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.364954][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.381062][ T8423] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.444735][ T8426] device veth0_vlan entered promiscuous mode [ 66.465768][ T8426] device veth1_vlan entered promiscuous mode [ 171.415583][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 171.422399][ C1] rcu: 1-...!: (1 GPs behind) idle=b5e/1/0x4000000000000002 softirq=11829/11830 fqs=37 [ 171.432368][ C1] (t=10500 jiffies g=6529 q=314) [ 171.437383][ C1] rcu: rcu_preempt kthread starved for 10425 jiffies! g6529 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 171.448467][ C1] rcu: RCU grace-period kthread stack dump: [ 171.454340][ C1] rcu_preempt R running task 28984 10 2 0x80004000 [ 171.462326][ C1] Call Trace: [ 171.465615][ C1] __schedule+0x9a0/0xcc0 [ 171.469943][ C1] schedule+0x181/0x210 [ 171.474101][ C1] schedule_timeout+0x14f/0x240 [ 171.479074][ C1] ? run_local_timers+0x120/0x120 [ 171.484102][ C1] rcu_gp_kthread+0xed8/0x1770 [ 171.488873][ C1] kthread+0x332/0x350 [ 171.492930][ C1] ? rcu_report_qs_rsp+0x140/0x140 [ 171.498033][ C1] ? kthread_blkcg+0xe0/0xe0 [ 171.502614][ C1] ret_from_fork+0x24/0x30 [ 171.507135][ C1] NMI backtrace for cpu 1 [ 171.511452][ C1] CPU: 1 PID: 8423 Comm: syz-executor.1 Not tainted 5.5.0-rc5-syzkaller #0 [ 171.520016][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 171.530236][ C1] Call Trace: [ 171.533508][ C1] [ 171.536355][ C1] dump_stack+0x1fb/0x318 [ 171.540678][ C1] nmi_cpu_backtrace+0xaf/0x1a0 [ 171.545521][ C1] ? nmi_trigger_cpumask_backtrace+0x16d/0x290 [ 171.551668][ C1] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 171.557724][ C1] nmi_trigger_cpumask_backtrace+0x174/0x290 [ 171.563716][ C1] arch_trigger_cpumask_backtrace+0x10/0x20 [ 171.569602][ C1] rcu_dump_cpu_stacks+0x15a/0x220 [ 171.574715][ C1] rcu_sched_clock_irq+0xe25/0x1ad0 [ 171.579905][ C1] ? trace_hardirqs_off+0x74/0x80 [ 171.584929][ C1] update_process_times+0x12d/0x180 [ 171.590119][ C1] tick_sched_timer+0x263/0x420 [ 171.594962][ C1] ? tick_setup_sched_timer+0x3d0/0x3d0 [ 171.600499][ C1] __hrtimer_run_queues+0x403/0x840 [ 171.605703][ C1] hrtimer_interrupt+0x38c/0xda0 [ 171.610646][ C1] ? debug_smp_processor_id+0x9/0x20 [ 171.615943][ C1] smp_apic_timer_interrupt+0x109/0x280 [ 171.621506][ C1] apic_timer_interrupt+0xf/0x20 [ 171.626447][ C1] [ 171.629390][ C1] RIP: 0010:free_thread_stack+0x18b/0x590 [ 171.635187][ C1] Code: ff ff e8 28 04 00 00 43 80 3c 2e 00 74 08 4c 89 e7 e8 39 94 6a 00 49 8b 1c 24 48 83 c3 08 48 89 d8 48 c1 e8 03 42 80 3c 28 00 <74> 08 48 89 df e8 1b 94 6a 00 48 8b 1b e9 82 ff ff ff e8 be 2b 2e [ 171.654793][ C1] RSP: 0018:ffffc90001e17528 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 171.663208][ C1] RAX: 1ffff11012e2f821 RBX: ffff88809717c108 RCX: ffff88809e396240 [ 171.671168][ C1] RDX: 0000000000000000 RSI: 00000000fffffffc RDI: ffffea00029fd900 [ 171.679132][ C1] RBP: ffffc90001e17560 R08: dffffc0000000000 R09: fffffbfff124248a [ 171.687097][ C1] R10: fffffbfff124248a R11: 0000000000000000 R12: ffff88809717c1a0 [ 171.695060][ C1] R13: dffffc0000000000 R14: 1ffff11012e2f834 R15: ffff88809ef8d4f8 [ 171.703052][ C1] ? free_thread_stack+0x168/0x590 [ 171.708159][ C1] put_task_stack+0xa3/0x130 [ 171.712769][ C1] finish_task_switch+0x3f1/0x550 [ 171.717792][ C1] __schedule+0x9a8/0xcc0 [ 171.722149][ C1] ? ___preempt_schedule+0x16/0x18 [ 171.727275][ C1] preempt_schedule+0xdb/0x120 [ 171.732055][ C1] ___preempt_schedule+0x16/0x18 [ 171.737009][ C1] try_to_wake_up+0xe78/0x1050 [ 171.741776][ C1] ? do_raw_spin_unlock+0x142/0x950 [ 171.746974][ C1] wake_up_q+0x8c/0xe0 [ 171.751039][ C1] __mutex_unlock_slowpath+0x586/0x5b0 [ 171.756843][ C1] mutex_unlock+0xd/0x10 [ 171.761071][ C1] __rtnl_unlock+0x2c/0xa0 [ 171.765474][ C1] netdev_run_todo+0xe5/0xe10 [ 171.770158][ C1] rtnetlink_rcv_msg+0x890/0xd40 [ 171.775090][ C1] ? __local_bh_enable_ip+0x13a/0x240 [ 171.780451][ C1] ? local_bh_enable+0x9/0x30 [ 171.785115][ C1] ? trace_hardirqs_on+0x74/0x80 [ 171.790053][ C1] ? __local_bh_enable_ip+0x13a/0x240 [ 171.800542][ C1] ? local_bh_enable+0x1f/0x30 [ 171.805294][ C1] ? rcu_lock_release+0x9/0x30 [ 171.810052][ C1] ? rcu_lock_release+0x9/0x30 [ 171.814811][ C1] netlink_rcv_skb+0x19e/0x3d0 [ 171.819568][ C1] ? rtnetlink_bind+0x80/0x80 [ 171.824255][ C1] rtnetlink_rcv+0x1c/0x20 [ 171.828661][ C1] netlink_unicast+0x767/0x920 [ 171.833424][ C1] netlink_sendmsg+0xa31/0xd50 [ 171.838186][ C1] ? netlink_getsockopt+0x9f0/0x9f0 [ 171.843373][ C1] __sys_sendto+0x442/0x5e0 [ 171.847880][ C1] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 171.853940][ C1] ? prepare_exit_to_usermode+0x221/0x5b0 [ 171.859650][ C1] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 171.865809][ C1] __x64_sys_sendto+0xe5/0x100 [ 171.870564][ C1] do_syscall_64+0xf7/0x1c0 [ 171.875068][ C1] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 171.880950][ C1] RIP: 0033:0x414c43 [ 171.884850][ C1] Code: ff 0f 83 b0 19 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 83 3d 2d 38 66 00 00 75 17 49 89 ca b8 2c 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 81 19 00 00 c3 48 83 ec 08 e8 87 fa ff ff [ 171.904452][ C1] RSP: 002b:00007ffcf4f093e8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 171.912855][ C1] RAX: ffffffffffffffda RBX: 0000000000a72200 RCX: 0000000000414c43 [ 171.920815][ C1] RDX: 000000000000002c RSI: 0000000000a72250 RDI: 0000000000000003 [ 171.928778][ C1] RBP: 0000000000000000 R08: 00007ffcf4f093f0 R09: 000000000000000c [ 171.936738][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 171.944698][ C1] R13: 0000000000000000 R14: 0000000000a72250 R15: 0000000000000003