[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.1.25' (ECDSA) to the list of known hosts. 2020/01/08 07:05:06 fuzzer started 2020/01/08 07:05:08 dialing manager at 10.128.0.26:35703 2020/01/08 07:05:08 syscalls: 2824 2020/01/08 07:05:08 code coverage: enabled 2020/01/08 07:05:08 comparison tracing: enabled 2020/01/08 07:05:08 extra coverage: enabled 2020/01/08 07:05:08 setuid sandbox: enabled 2020/01/08 07:05:08 namespace sandbox: enabled 2020/01/08 07:05:08 Android sandbox: /sys/fs/selinux/policy does not exist 2020/01/08 07:05:08 fault injection: enabled 2020/01/08 07:05:08 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/01/08 07:05:08 net packet injection: enabled 2020/01/08 07:05:08 net device setup: enabled 2020/01/08 07:05:08 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/01/08 07:05:08 devlink PCI setup: PCI device 0000:00:10.0 is not available 07:05:09 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000880)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x40, 0x0) readv(r1, &(0x7f0000000640)=[{&(0x7f00000000c0)=""/53, 0x35}], 0x1) r2 = open$dir(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) dup3(r2, r1, 0x0) tkill(r0, 0x1000000000015) 07:05:09 executing program 1: syz_read_part_table(0x0, 0xaaaadc4, &(0x7f0000000040)=[{&(0x7f0000000000)="02016300000000090000ff07000080ffffff00000000000000040000000000ffffff81000004800000000a0000000000000000000000000000000000000055aa", 0x40, 0x1c0}]) syzkaller login: [ 63.069633][ T8463] IPVS: ftp: loaded support on port[0] = 21 07:05:09 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x18, 0x31, 0x829, 0x0, 0x0, {0x2, 0x1000000}, [@nested={0x4}]}, 0x18}, 0x1, 0xffffff7f0e000000}, 0x0) [ 63.256724][ T8466] IPVS: ftp: loaded support on port[0] = 21 [ 63.267078][ T8463] chnl_net:caif_netlink_parms(): no params data found [ 63.358826][ T8463] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.367630][ T8463] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.376294][ T8463] device bridge_slave_0 entered promiscuous mode [ 63.398903][ T8463] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.407714][ T8463] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.416411][ T8463] device bridge_slave_1 entered promiscuous mode [ 63.488247][ T8463] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.506811][ T8466] chnl_net:caif_netlink_parms(): no params data found [ 63.519798][ T8469] IPVS: ftp: loaded support on port[0] = 21 [ 63.530698][ T8463] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 07:05:09 executing program 3: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x0, 0x0) ppoll(&(0x7f0000000480)=[{r0}], 0x1, 0x0, 0x0, 0x0) read$dsp(r0, &(0x7f00000000c0)=""/202, 0xca) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 63.601485][ T8463] team0: Port device team_slave_0 added [ 63.630406][ T8463] team0: Port device team_slave_1 added [ 63.639913][ T8466] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.648492][ T8466] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.657419][ T8466] device bridge_slave_0 entered promiscuous mode [ 63.684603][ T8466] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.693244][ T8466] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.701082][ T8466] device bridge_slave_1 entered promiscuous mode 07:05:10 executing program 4: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x281, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040), &(0x7f00000001c0)=0x8) getpid() [ 63.784440][ T8463] device hsr_slave_0 entered promiscuous mode [ 63.823097][ T8463] device hsr_slave_1 entered promiscuous mode [ 63.998173][ T8471] IPVS: ftp: loaded support on port[0] = 21 [ 64.013406][ T8466] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.033649][ T8466] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 07:05:10 executing program 5: unshare(0xa000400) r0 = timerfd_create(0x0, 0x0) r1 = dup(r0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0x40085400, &(0x7f0000000000)) [ 64.108366][ T8475] IPVS: ftp: loaded support on port[0] = 21 [ 64.129994][ T8469] chnl_net:caif_netlink_parms(): no params data found [ 64.157332][ T8466] team0: Port device team_slave_0 added [ 64.171199][ T8466] team0: Port device team_slave_1 added [ 64.231329][ T8477] IPVS: ftp: loaded support on port[0] = 21 [ 64.324902][ T8466] device hsr_slave_0 entered promiscuous mode [ 64.362874][ T8466] device hsr_slave_1 entered promiscuous mode [ 64.401845][ T8466] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.409593][ T8466] Cannot create hsr debugfs directory [ 64.443930][ T8469] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.451027][ T8469] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.458941][ T8469] device bridge_slave_0 entered promiscuous mode [ 64.469569][ T8469] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.477397][ T8469] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.485115][ T8469] device bridge_slave_1 entered promiscuous mode [ 64.547113][ T8463] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.604100][ T8471] chnl_net:caif_netlink_parms(): no params data found [ 64.625499][ T8463] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.685069][ T8463] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.735596][ T8463] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.794683][ T8469] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.821197][ T8469] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.872224][ T8471] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.879334][ T8471] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.887132][ T8471] device bridge_slave_0 entered promiscuous mode [ 64.897095][ T8471] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.904397][ T8471] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.912653][ T8471] device bridge_slave_1 entered promiscuous mode [ 64.942128][ T8469] team0: Port device team_slave_0 added [ 64.949989][ T8469] team0: Port device team_slave_1 added [ 64.969945][ T8471] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.007911][ T8471] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.029675][ T8475] chnl_net:caif_netlink_parms(): no params data found [ 65.113939][ T8469] device hsr_slave_0 entered promiscuous mode [ 65.162136][ T8469] device hsr_slave_1 entered promiscuous mode [ 65.201882][ T8469] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.209483][ T8469] Cannot create hsr debugfs directory [ 65.219835][ T8477] chnl_net:caif_netlink_parms(): no params data found [ 65.233033][ T8466] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 65.284816][ T8471] team0: Port device team_slave_0 added [ 65.295308][ T8471] team0: Port device team_slave_1 added [ 65.323696][ T8466] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 65.407106][ T8466] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 65.474422][ T8471] device hsr_slave_0 entered promiscuous mode [ 65.512512][ T8471] device hsr_slave_1 entered promiscuous mode [ 65.571868][ T8471] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.579515][ T8471] Cannot create hsr debugfs directory [ 65.596975][ T8466] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 65.668293][ T8475] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.675621][ T8475] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.683384][ T8475] device bridge_slave_0 entered promiscuous mode [ 65.695138][ T8475] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.702366][ T8475] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.709928][ T8475] device bridge_slave_1 entered promiscuous mode [ 65.736891][ T8477] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.744100][ T8477] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.755254][ T8477] device bridge_slave_0 entered promiscuous mode [ 65.764994][ T8477] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.772287][ T8477] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.779800][ T8477] device bridge_slave_1 entered promiscuous mode [ 65.802182][ T8477] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.813846][ T8477] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.825509][ T8475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.867080][ T8475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.892658][ T8477] team0: Port device team_slave_0 added [ 65.905009][ T8477] team0: Port device team_slave_1 added [ 65.913746][ T8463] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.938923][ T8475] team0: Port device team_slave_0 added [ 66.014535][ T8477] device hsr_slave_0 entered promiscuous mode [ 66.062147][ T8477] device hsr_slave_1 entered promiscuous mode [ 66.091872][ T8477] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.099468][ T8477] Cannot create hsr debugfs directory [ 66.109517][ T8475] team0: Port device team_slave_1 added [ 66.161346][ T8463] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.185965][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.194827][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.203482][ T8469] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 66.255353][ T8469] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 66.328196][ T8469] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 66.377499][ T8469] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 66.451820][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.462734][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.471515][ T2674] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.478674][ T2674] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.524489][ T8475] device hsr_slave_0 entered promiscuous mode [ 66.562175][ T8475] device hsr_slave_1 entered promiscuous mode [ 66.601831][ T8475] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.609432][ T8475] Cannot create hsr debugfs directory [ 66.623698][ T8471] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 66.663872][ T8471] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 66.723705][ T8471] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 66.773645][ T8471] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 66.804252][ T2743] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.812183][ T2743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.820698][ T2743] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.829214][ T2743] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.836269][ T2743] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.852152][ T2933] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.887825][ T2743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.906750][ T8466] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.929241][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.940516][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.949241][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.958538][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.966848][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.974608][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.989408][ T8463] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 67.000578][ T8463] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.022878][ T8466] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.033596][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.041260][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.053427][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.062371][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.070524][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.088692][ T8477] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 67.136098][ T8477] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 67.174275][ T8477] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 67.214195][ T8477] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 67.271917][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.321479][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.333581][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.341995][ T2674] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.349076][ T2674] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.357675][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.366207][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.374766][ T2674] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.381859][ T2674] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.389315][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.397816][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.406593][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.434292][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.443662][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.452325][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.460736][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.506509][ T2743] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.515402][ T2743] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.525447][ T2743] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.532899][ T2743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.541061][ T2743] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.563347][ T8471] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.571730][ T8475] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 67.594201][ T8475] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 67.644398][ T8475] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 67.674062][ T2933] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.683965][ T2933] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.699121][ T8469] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.710398][ T8466] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.719326][ T8475] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 67.750154][ T8463] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.773166][ T8477] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.788010][ T8471] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.797832][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.806769][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.816087][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.823777][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.836717][ T8469] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.863524][ T8477] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.882455][ T2933] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.891595][ T2933] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.899704][ T2933] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.908276][ T2933] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.916873][ T2933] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.923977][ T2933] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.932342][ T2933] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.940796][ T2933] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.949356][ T2933] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.956650][ T2933] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.964154][ T2933] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.972800][ T2933] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.981074][ T2933] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.988169][ T2933] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.995940][ T2933] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.004710][ T2933] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.013238][ T2933] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.021600][ T2933] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.031602][ T2933] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.039455][ T2933] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.047442][ T2933] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.055134][ T2933] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.063356][ T2933] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.106287][ T8466] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.123939][ T2757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.139463][ T2757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.151485][ T2757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.160584][ T2757] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.169121][ T2757] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.176210][ T2757] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.183877][ T2757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.192596][ T2757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.200939][ T2757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.209513][ T2757] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.217916][ T2757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.226540][ T2757] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.234964][ T2757] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.242049][ T2757] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.249519][ T2757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.258070][ T2757] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.266357][ T2757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.275036][ T2757] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.283458][ T2757] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.290474][ T2757] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.298057][ T2757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.306693][ T2757] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.315896][ T2757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.340574][ T8463] device veth0_vlan entered promiscuous mode [ 68.353968][ T8469] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.365944][ T2933] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.377336][ T2933] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.385870][ T2933] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.394232][ T2933] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.403362][ T2933] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.434029][ T2933] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.443114][ T2933] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.450716][ T2933] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.459743][ T2933] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.468807][ T2933] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.478295][ T2933] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.486588][ T2933] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.495092][ T2933] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.503481][ T2933] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.511574][ T2933] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.520473][ T2933] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.529248][ T2933] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.538015][ T2933] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.546954][ T2933] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.559338][ T8475] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.578259][ T8463] device veth1_vlan entered promiscuous mode [ 68.599868][ T8477] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 68.614644][ T8477] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.627113][ T8471] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.639316][ T2757] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.648250][ T2757] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.656115][ T2757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.665402][ T2757] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.673787][ T2757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.682360][ T2757] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.690537][ T2757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.698843][ T2757] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.715721][ T8475] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.729846][ T8466] device veth0_vlan entered promiscuous mode [ 68.753149][ T2757] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.760758][ T2757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.769636][ T2757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.778066][ T2757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.786213][ T2757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.795315][ T2757] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.802931][ T2757] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.810479][ T2757] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.817940][ T2757] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.825920][ T2757] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.834104][ T2757] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.865286][ T8466] device veth1_vlan entered promiscuous mode [ 68.891509][ T8477] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.899644][ T2757] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.908859][ T2757] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.917069][ T2757] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.924917][ T2757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.933751][ T2757] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.942293][ T2757] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.949333][ T2757] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.960009][ T8469] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.000797][ T8469] device veth0_vlan entered promiscuous mode [ 69.012818][ T8469] device veth1_vlan entered promiscuous mode [ 173.911671][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 173.918567][ C0] rcu: 0-...!: (10499 ticks this GP) idle=b02/1/0x4000000000000002 softirq=13572/13572 fqs=6 [ 173.929061][ C0] (t=10501 jiffies g=6509 q=250) [ 173.934091][ C0] rcu: rcu_preempt kthread starved for 10490 jiffies! g6509 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 173.945175][ C0] rcu: RCU grace-period kthread stack dump: [ 173.951055][ C0] rcu_preempt R running task 28984 10 2 0x80004000 [ 173.958944][ C0] Call Trace: [ 173.962233][ C0] __schedule+0x9a0/0xcc0 [ 173.966566][ C0] schedule+0x181/0x210 [ 173.970711][ C0] schedule_timeout+0x14f/0x240 [ 173.975554][ C0] ? run_local_timers+0x120/0x120 [ 173.980574][ C0] rcu_gp_kthread+0xed8/0x1770 [ 173.985343][ C0] kthread+0x332/0x350 [ 173.989397][ C0] ? rcu_report_qs_rsp+0x140/0x140 [ 173.994508][ C0] ? kthread_blkcg+0xe0/0xe0 [ 173.999084][ C0] ret_from_fork+0x24/0x30 [ 174.003499][ C0] NMI backtrace for cpu 0 [ 174.007817][ C0] CPU: 0 PID: 8335 Comm: rsyslogd Not tainted 5.5.0-rc5-syzkaller #0 [ 174.015862][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 174.025903][ C0] Call Trace: [ 174.029172][ C0] [ 174.032016][ C0] dump_stack+0x1fb/0x318 [ 174.036339][ C0] nmi_cpu_backtrace+0xaf/0x1a0 [ 174.041175][ C0] ? nmi_trigger_cpumask_backtrace+0x16d/0x290 [ 174.047341][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 174.053402][ C0] nmi_trigger_cpumask_backtrace+0x174/0x290 [ 174.059393][ C0] arch_trigger_cpumask_backtrace+0x10/0x20 [ 174.065297][ C0] rcu_dump_cpu_stacks+0x15a/0x220 [ 174.070409][ C0] rcu_sched_clock_irq+0xe25/0x1ad0 [ 174.075607][ C0] ? trace_hardirqs_off+0x74/0x80 [ 174.080625][ C0] update_process_times+0x12d/0x180 [ 174.085817][ C0] tick_sched_timer+0x263/0x420 [ 174.090659][ C0] ? tick_setup_sched_timer+0x3d0/0x3d0 [ 174.096196][ C0] __hrtimer_run_queues+0x403/0x840 [ 174.101422][ C0] hrtimer_interrupt+0x38c/0xda0 [ 174.106372][ C0] ? debug_smp_processor_id+0x9/0x20 [ 174.111651][ C0] smp_apic_timer_interrupt+0x109/0x280 [ 174.117187][ C0] apic_timer_interrupt+0xf/0x20 [ 174.122110][ C0] [ 174.125041][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x50 [ 174.131096][ C0] Code: 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 53 48 89 fb e8 13 00 00 00 48 8b 3d f4 f4 ed 07 48 89 de e8 84 f4 3b 00 5b 5d c3 cc <48> 8b 04 24 65 48 8b 0c 25 c0 1d 02 00 65 8b 15 38 5f 8b 7e f7 c2 [ 174.150687][ C0] RSP: 0018:ffffc90001a47a50 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 174.159083][ C0] RAX: 1ffff110128fc861 RBX: ffffea00024998c0 RCX: ffff888098c06040 [ 174.167044][ C0] RDX: 0000000000000000 RSI: 00000000fffffffc RDI: ffffea00024998c0 [ 174.175007][ C0] RBP: ffffc90001a47a90 R08: dffffc0000000000 R09: fffffbfff124248a [ 174.182965][ C0] R10: fffffbfff124248a R11: 0000000000000000 R12: ffff8880947e43a0 [ 174.190923][ C0] R13: dffffc0000000000 R14: 1ffff110128fc874 R15: ffff8880a1c415f8 [ 174.198915][ C0] ? free_thread_stack+0x124/0x590 [ 174.204021][ C0] put_task_stack+0xa3/0x130 [ 174.208602][ C0] finish_task_switch+0x3f1/0x550 [ 174.213622][ C0] __schedule+0x9a8/0xcc0 [ 174.217950][ C0] schedule+0x181/0x210 [ 174.223170][ C0] do_syslog+0xdb0/0x1770 [ 174.227522][ C0] ? init_wait_entry+0xe0/0xe0 [ 174.232281][ C0] kmsg_read+0x94/0xd0 [ 174.236522][ C0] ? mmap_vmcore_fault+0x10/0x10 [ 174.241449][ C0] proc_reg_read+0x1e2/0x2d0 [ 174.246032][ C0] ? proc_reg_llseek+0x2c0/0x2c0 [ 174.250963][ C0] __vfs_read+0xb8/0x730 [ 174.255209][ C0] ? security_file_permission+0x23c/0x350 [ 174.260919][ C0] ? rw_verify_area+0x1c2/0x360 [ 174.265761][ C0] vfs_read+0x1dd/0x420 [ 174.269911][ C0] ksys_read+0x117/0x220 [ 174.274146][ C0] __x64_sys_read+0x7b/0x90 [ 174.278640][ C0] do_syscall_64+0xf7/0x1c0 [ 174.283137][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 174.289029][ C0] RIP: 0033:0x7f71e77311fd [ 174.293445][ C0] Code: d1 20 00 00 75 10 b8 00 00 00 00 0f 05 48 3d 01 f0 ff ff 73 31 c3 48 83 ec 08 e8 5e fa ff ff 48 89 04 24 b8 00 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 a7 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 174.313034][ C0] RSP: 002b:00007f71e4cd0e30 EFLAGS: 00000293 ORIG_RAX: 0000000000000000 [ 174.321444][ C0] RAX: ffffffffffffffda RBX: 0000000000bb4650 RCX: 00007f71e77311fd [ 174.329417][ C0] RDX: 0000000000000fff RSI: 00007f71e65055a0 RDI: 0000000000000004 [ 174.337375][ C0] RBP: 0000000000000000 R08: 0000000000b9f260 R09: 0000000000000000 [ 174.345332][ C0] R10: 0000000000000013 R11: 0000000000000293 R12: 000000000065e420 [ 174.353303][ C0] R13: 00007f71e4cd19c0 R14: 00007f71e7d76040 R15: 0000000000000003