[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 44.228901][ T23] audit: type=1800 audit(1578469275.001:25): pid=8273 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 44.248034][ T23] audit: type=1800 audit(1578469275.001:26): pid=8273 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 44.282618][ T23] audit: type=1800 audit(1578469275.001:27): pid=8273 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.1.1' (ECDSA) to the list of known hosts. 2020/01/08 07:41:27 fuzzer started 2020/01/08 07:41:29 dialing manager at 10.128.0.26:35703 2020/01/08 07:41:29 syscalls: 2824 2020/01/08 07:41:29 code coverage: enabled 2020/01/08 07:41:29 comparison tracing: enabled 2020/01/08 07:41:29 extra coverage: enabled 2020/01/08 07:41:29 setuid sandbox: enabled 2020/01/08 07:41:29 namespace sandbox: enabled 2020/01/08 07:41:29 Android sandbox: /sys/fs/selinux/policy does not exist 2020/01/08 07:41:29 fault injection: enabled 2020/01/08 07:41:29 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/01/08 07:41:29 net packet injection: enabled 2020/01/08 07:41:29 net device setup: enabled 2020/01/08 07:41:29 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/01/08 07:41:29 devlink PCI setup: PCI device 0000:00:10.0 is not available 07:41:30 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x3e, 0x4, 0x400, 0x0, 0x1}, 0x3c) socket$rxrpc(0x21, 0x2, 0xa) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) socketpair(0x0, 0x0, 0x0, &(0x7f0000000100)) connect$inet6(r1, &(0x7f0000000140), 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5}, 0xfffffffffffffdcb) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, &(0x7f0000000100), &(0x7f00000002c0)=""/255}, 0x20) 07:41:30 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000006240)=ANY=[@ANYBLOB="480000001000070700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012000c000100697036746e6c00001800020014000100ff010000000000000000000000000001"], 0x48}}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x2c, 0x0, &(0x7f0000000580), 0x2a9, &(0x7f0000000100)=[@op]}], 0x492499d, 0x0) syzkaller login: [ 59.610623][ T8437] IPVS: ftp: loaded support on port[0] = 21 07:41:30 executing program 2: r0 = creat(&(0x7f0000000200)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000200)='./file1\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8000) fallocate(r0, 0x10, 0x0, 0x8000) [ 59.795205][ T8437] chnl_net:caif_netlink_parms(): no params data found [ 59.814358][ T8440] IPVS: ftp: loaded support on port[0] = 21 [ 59.867028][ T8437] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.882674][ T8437] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.891037][ T8437] device bridge_slave_0 entered promiscuous mode [ 59.915723][ T8437] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.923928][ T8437] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.931705][ T8437] device bridge_slave_1 entered promiscuous mode [ 59.984656][ T8437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.017564][ T8437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.061141][ T8442] IPVS: ftp: loaded support on port[0] = 21 [ 60.064220][ T8437] team0: Port device team_slave_0 added 07:41:30 executing program 3: r0 = socket$inet(0x10, 0x10000000003, 0x9) r1 = dup2(r0, r0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000500)="24000000ea0307041dfffdd46fa2830020200a0009ed0800000085680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 60.109192][ T8437] team0: Port device team_slave_1 added [ 60.149227][ T8440] chnl_net:caif_netlink_parms(): no params data found [ 60.265192][ T8437] device hsr_slave_0 entered promiscuous mode [ 60.303238][ T8437] device hsr_slave_1 entered promiscuous mode [ 60.354223][ T8440] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.361364][ T8440] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.386433][ T8440] device bridge_slave_0 entered promiscuous mode 07:41:31 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="06b52600000000007b3071") r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}, 0x1c) sendmsg$inet6(r1, &(0x7f00000008c0)={&(0x7f0000000180)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000340)="f9", 0x26c59}], 0x2f4}, 0x60) [ 60.405548][ T8445] IPVS: ftp: loaded support on port[0] = 21 [ 60.420728][ T8440] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.434105][ T8440] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.441945][ T8440] device bridge_slave_1 entered promiscuous mode [ 60.577034][ T8440] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.608828][ T8442] chnl_net:caif_netlink_parms(): no params data found [ 60.635970][ T8440] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 07:41:31 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f00004e7000)={0x2, 0x70, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000400)='cpu&0&&!\t\x00\x01\x00\x00\x01\x9c\xd3\x0e5\xa0\x1d=\x04\n\x1c`fo\x8d\xccm\\v\xfd.\x9e\tbk1\xde\xea\x1b\r;\x81\x84\x87-X\xb6,\xc5\xb4\"7&\xb5yt\x82\xfb\x1d\x83\xf8.- \x00\x00\x00(\xe9`D\x01i\\\x8dl\x86lh\xa8\xfc\x80\xde,Kt\xf4#\xc5]Y;\xc16v\xf9\x89\t\x06\xbe*\xaa&\xbd\x16xQ\x8e\xf3\xd6\x1a\xfd\xd0\x04\'y\x9b|\xe4\xb7\bE\xed\x97\x80s\x19W\xb7[\xf0%>MM\xf5\x98\xbe^=q!\xa6\x0fp\x012\x00\xbb\xbe\x9dX5\xafep\x10R\v&\xaf\xa8$\x7f7V\xedLJ4\xcf\a\x01\xd5T\n\xca\xc2\x86_\xc1\xce\x8d\xedbS\x8d\xe9t\x82\xf41zwr\xe6o\x88\xe5\xe3\xe7Gcx\xc0\x91I\x01\x00\x00\x00\x01\x00\x00\x00K\x9e\xe5[\xa0\n\x0f\x04\xa6\xb0sE)\x8a\xd0R\xc3\xc1,b \x1c#IRz6\xfeJ~\xda\xd7_\xfe\x1f\xe5\x86\xb1xu&\xfb\xf2\xbf\xe8\x7f\x91\x93\xab\x05\x004\x85\x86l\x8d\x00'/289) [ 60.721856][ T8440] team0: Port device team_slave_0 added [ 60.746383][ T8437] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 60.817544][ T8440] team0: Port device team_slave_1 added [ 60.829774][ T8442] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.837655][ T8442] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.845417][ T8442] device bridge_slave_0 entered promiscuous mode [ 60.852351][ T8437] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 60.895072][ T8437] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 60.935792][ T8437] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 61.002307][ T8450] IPVS: ftp: loaded support on port[0] = 21 [ 61.014062][ T8442] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.021138][ T8442] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.029444][ T8442] device bridge_slave_1 entered promiscuous mode [ 61.042209][ T8448] IPVS: ftp: loaded support on port[0] = 21 [ 61.115251][ T8440] device hsr_slave_0 entered promiscuous mode [ 61.154282][ T8440] device hsr_slave_1 entered promiscuous mode [ 61.212798][ T8440] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.220538][ T8440] Cannot create hsr debugfs directory [ 61.242517][ T8442] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.265437][ T8445] chnl_net:caif_netlink_parms(): no params data found [ 61.279507][ T8442] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.339747][ T8442] team0: Port device team_slave_0 added [ 61.349475][ T8442] team0: Port device team_slave_1 added [ 61.363407][ T8445] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.370466][ T8445] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.378385][ T8445] device bridge_slave_0 entered promiscuous mode [ 61.387568][ T8445] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.394789][ T8445] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.402319][ T8445] device bridge_slave_1 entered promiscuous mode [ 61.495430][ T8442] device hsr_slave_0 entered promiscuous mode [ 61.554785][ T8442] device hsr_slave_1 entered promiscuous mode [ 61.592842][ T8442] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.600422][ T8442] Cannot create hsr debugfs directory [ 61.618216][ T8445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.629951][ T8445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.672075][ T8445] team0: Port device team_slave_0 added [ 61.706077][ T8445] team0: Port device team_slave_1 added [ 61.779941][ T8440] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 61.837401][ T8450] chnl_net:caif_netlink_parms(): no params data found [ 61.885705][ T8440] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 61.954897][ T8440] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 61.995369][ T8440] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 62.095499][ T8445] device hsr_slave_0 entered promiscuous mode [ 62.162934][ T8445] device hsr_slave_1 entered promiscuous mode [ 62.213193][ T8445] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.220848][ T8445] Cannot create hsr debugfs directory [ 62.277741][ T8448] chnl_net:caif_netlink_parms(): no params data found [ 62.296775][ T8450] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.306196][ T8450] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.316883][ T8450] device bridge_slave_0 entered promiscuous mode [ 62.326317][ T8437] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.344261][ T8442] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 62.395274][ T8450] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.402363][ T8450] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.410512][ T8450] device bridge_slave_1 entered promiscuous mode [ 62.431599][ T8442] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 62.505687][ T8450] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.515122][ T8442] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 62.564410][ T2679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.574424][ T2679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.584185][ T8437] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.594143][ T8450] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.606636][ T8442] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 62.688859][ T8448] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.697465][ T8448] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.705337][ T8448] device bridge_slave_0 entered promiscuous mode [ 62.713256][ T8448] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.720310][ T8448] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.728020][ T8448] device bridge_slave_1 entered promiscuous mode [ 62.757267][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.767195][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.776067][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.783265][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.816330][ T8450] team0: Port device team_slave_0 added [ 62.826264][ T8445] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 62.895023][ T8445] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 62.954469][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.966016][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.974684][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.983868][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.990902][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.998440][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.007180][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.027212][ T8450] team0: Port device team_slave_1 added [ 63.048419][ T8445] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.074944][ T8445] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.114553][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.124286][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.132656][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.141019][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.150575][ T8448] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.167146][ T8437] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 63.177907][ T8437] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.216369][ T8450] device hsr_slave_0 entered promiscuous mode [ 63.273213][ T8450] device hsr_slave_1 entered promiscuous mode [ 63.302682][ T8450] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.310292][ T8450] Cannot create hsr debugfs directory [ 63.322835][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.331468][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.340125][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.348492][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.357362][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.366772][ T8448] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.388440][ T8437] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.412447][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.420277][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.427947][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.475079][ T8440] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.490261][ T8448] team0: Port device team_slave_0 added [ 63.499645][ T8448] team0: Port device team_slave_1 added [ 63.518028][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.526906][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.535648][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.543603][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.574965][ T8440] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.610592][ T8437] device veth0_vlan entered promiscuous mode [ 63.645086][ T8448] device hsr_slave_0 entered promiscuous mode [ 63.682889][ T8448] device hsr_slave_1 entered promiscuous mode [ 63.732640][ T8448] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.740212][ T8448] Cannot create hsr debugfs directory [ 63.747810][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.756587][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.765620][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.773655][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.786635][ T8437] device veth1_vlan entered promiscuous mode [ 63.820810][ T2769] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.829138][ T2769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.837628][ T2769] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.846684][ T2769] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.853778][ T2769] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.861331][ T2769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.870138][ T2769] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.878559][ T2769] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.885629][ T2769] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.937812][ T2778] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.945966][ T2778] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.954638][ T2778] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.963328][ T2778] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.971656][ T2778] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.982483][ T2778] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.999752][ T8440] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 64.025412][ T8440] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.058235][ T8445] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.072540][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 169.079446][ C1] rcu: 1-...!: (10499 ticks this GP) idle=a3e/1/0x4000000000000002 softirq=10906/10906 fqs=2 [ 169.089935][ C1] (t=10501 jiffies g=6349 q=191) [ 169.094951][ C1] rcu: rcu_preempt kthread starved for 10498 jiffies! g6349 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 169.106033][ C1] rcu: RCU grace-period kthread stack dump: [ 169.111909][ C1] rcu_preempt R running task 28984 10 2 0x80004000 [ 169.119891][ C1] Call Trace: [ 169.123178][ C1] __schedule+0x9a0/0xcc0 [ 169.127507][ C1] schedule+0x181/0x210 [ 169.131660][ C1] schedule_timeout+0x14f/0x240 [ 169.136498][ C1] ? run_local_timers+0x120/0x120 [ 169.141516][ C1] rcu_gp_kthread+0xed8/0x1770 [ 169.146275][ C1] kthread+0x332/0x350 [ 169.150329][ C1] ? rcu_report_qs_rsp+0x140/0x140 [ 169.155427][ C1] ? kthread_blkcg+0xe0/0xe0 [ 169.160006][ C1] ret_from_fork+0x24/0x30 [ 169.164420][ C1] NMI backtrace for cpu 1 [ 169.168735][ C1] CPU: 1 PID: 8458 Comm: modprobe Not tainted 5.5.0-rc5-syzkaller #0 [ 169.176779][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 169.186821][ C1] Call Trace: [ 169.190091][ C1] [ 169.192932][ C1] dump_stack+0x1fb/0x318 [ 169.197261][ C1] nmi_cpu_backtrace+0xaf/0x1a0 [ 169.202097][ C1] ? nmi_trigger_cpumask_backtrace+0x16d/0x290 [ 169.208237][ C1] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 169.214289][ C1] nmi_trigger_cpumask_backtrace+0x174/0x290 [ 169.220261][ C1] arch_trigger_cpumask_backtrace+0x10/0x20 [ 169.226141][ C1] rcu_dump_cpu_stacks+0x15a/0x220 [ 169.231252][ C1] rcu_sched_clock_irq+0xe25/0x1ad0 [ 169.236439][ C1] ? trace_hardirqs_off+0x74/0x80 [ 169.241456][ C1] update_process_times+0x12d/0x180 [ 169.246644][ C1] tick_sched_timer+0x263/0x420 [ 169.251499][ C1] ? tick_setup_sched_timer+0x3d0/0x3d0 [ 169.257032][ C1] __hrtimer_run_queues+0x403/0x840 [ 169.262233][ C1] hrtimer_interrupt+0x38c/0xda0 [ 169.267181][ C1] ? debug_smp_processor_id+0x9/0x20 [ 169.272475][ C1] smp_apic_timer_interrupt+0x109/0x280 [ 169.278009][ C1] apic_timer_interrupt+0xf/0x20 [ 169.282926][ C1] [ 169.285863][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x22/0x50 [ 169.292016][ C1] Code: 84 f4 3b 00 5b 5d c3 cc 48 8b 04 24 65 48 8b 0c 25 c0 1d 02 00 65 8b 15 38 5f 8b 7e f7 c2 00 01 1f 00 75 2c 8b 91 80 13 00 00 <83> fa 02 75 21 48 8b 91 88 13 00 00 48 8b 32 48 8d 7e 01 8b 89 84 [ 169.311619][ C1] RSP: 0018:ffffc900023d7b60 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 169.320018][ C1] RAX: ffffffff814896c6 RBX: ffffea0002861200 RCX: ffff888098f68300 [ 169.327978][ C1] RDX: 0000000000000000 RSI: 00000000fffffffc RDI: ffffea0002861200 [ 169.335937][ C1] RBP: ffffc900023d7b88 R08: 000000000003a728 R09: ffffed1014fd4289 [ 169.343896][ C1] R10: ffffed1014fd4289 R11: 0000000000000000 R12: ffff888096128c20 [ 169.351880][ C1] R13: dffffc0000000000 R14: 00000000fffffffc R15: ffff8880a7ea1438 [ 169.359880][ C1] ? mod_memcg_page_state+0x16/0x190 [ 169.365191][ C1] ? mod_memcg_page_state+0x16/0x190 [ 169.370474][ C1] free_thread_stack+0x168/0x590 [ 169.375408][ C1] put_task_stack+0xa3/0x130 [ 169.379994][ C1] finish_task_switch+0x3f1/0x550 [ 169.385017][ C1] __schedule+0x9a8/0xcc0 [ 169.389355][ C1] ? ___preempt_schedule+0x16/0x18 [ 169.394458][ C1] preempt_schedule+0xdb/0x120 [ 169.399214][ C1] ___preempt_schedule+0x16/0x18 [ 169.404160][ C1] ? do_exit+0x147c/0x2000 [ 169.408573][ C1] _raw_write_unlock_irq+0x77/0x80 [ 169.413684][ C1] do_exit+0x147c/0x2000 [ 169.417938][ C1] do_group_exit+0x15c/0x2b0 [ 169.422524][ C1] __do_sys_exit_group+0x17/0x20 [ 169.427480][ C1] __se_sys_exit_group+0x14/0x20 [ 169.432421][ C1] __x64_sys_exit_group+0x3b/0x40 [ 169.437453][ C1] do_syscall_64+0xf7/0x1c0 [ 169.441953][ C1] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 169.447834][ C1] RIP: 0033:0x7f666dbcf1e8 [ 169.452313][ C1] Code: Bad RIP value. [ 169.456370][ C1] RSP: 002b:00007ffcf63e5dc8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 169.464768][ C1] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f666dbcf1e8 [ 169.472728][ C1] RDX: 0000000000000001 RSI: 000000000000003c RDI: 0000000000000001 [ 169.481033][ C1] RBP: 00007f666dea4840 R08: 00000000000000e7 R09: ffffffffffffffa8 [ 169.488989][ C1] R10: 00007f666deaa740 R11: 0000000000000246 R12: 00007f666dea4840 [ 169.496946][ C1] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000