[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 44.864570][ T25] audit: type=1800 audit(1575461752.989:25): pid=8162 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 44.884138][ T25] audit: type=1800 audit(1575461752.999:26): pid=8162 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 44.927975][ T25] audit: type=1800 audit(1575461752.999:27): pid=8162 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.174' (ECDSA) to the list of known hosts. 2019/12/04 12:16:03 fuzzer started 2019/12/04 12:16:05 dialing manager at 10.128.0.26:36481 2019/12/04 12:16:05 syscalls: 2691 2019/12/04 12:16:05 code coverage: enabled 2019/12/04 12:16:05 comparison tracing: enabled 2019/12/04 12:16:05 extra coverage: extra coverage is not supported by the kernel 2019/12/04 12:16:05 setuid sandbox: enabled 2019/12/04 12:16:05 namespace sandbox: enabled 2019/12/04 12:16:05 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/04 12:16:05 fault injection: enabled 2019/12/04 12:16:05 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/04 12:16:05 net packet injection: enabled 2019/12/04 12:16:05 net device setup: enabled 2019/12/04 12:16:05 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/12/04 12:16:05 devlink PCI setup: PCI device 0000:00:10.0 is not available 12:16:06 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x5aeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x1007, 0x9}, 0x3c) r2 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x1, 0x0, r1}, 0x3c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f00000006c0)='fou\x00') sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r4, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r4, 0x101}, 0x14}}, 0x0) r5 = socket(0x40000000002, 0x3, 0x80000000002) r6 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendto$llc(r6, &(0x7f0000000000)="fad911553dea9381c2660568e36bbf30e2100d04ffc7e310615fa16b12b389841d63abf100aeeb9f", 0x28, 0x20000040, &(0x7f0000000040)={0x1a, 0x300, 0x6, 0x0, 0x8, 0x7, @remote}, 0x10) dup2(r5, r6) getsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f00000001c0)={@dev, 0x0}, &(0x7f0000000200)=0x14) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x81582000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x54, r4, 0x904, 0x70bd29, 0x25dfdbfe, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x1}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e24}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e20}, @FOU_ATTR_IFINDEX={0x8, 0xb, r7}]}, 0x54}, 0x1, 0x0, 0x0, 0x810}, 0x800) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r1, 0x16a, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r2, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) 12:16:06 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x4, 0x0, 0x6}}, 0xe8) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x400000000000058, 0x0) syzkaller login: [ 58.736334][ T8327] IPVS: ftp: loaded support on port[0] = 21 12:16:07 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000240)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xd1}, 0x98) [ 58.906234][ T8327] chnl_net:caif_netlink_parms(): no params data found [ 58.955739][ T8330] IPVS: ftp: loaded support on port[0] = 21 [ 58.993235][ T8327] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.002877][ T8327] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.011657][ T8327] device bridge_slave_0 entered promiscuous mode [ 59.033419][ T8327] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.043126][ T8327] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.051628][ T8327] device bridge_slave_1 entered promiscuous mode [ 59.113921][ T8327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.139689][ T8327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 12:16:07 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) ftruncate(r1, 0x200006) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0x8000fffffffe) [ 59.231812][ T8327] team0: Port device team_slave_0 added [ 59.240023][ T8333] IPVS: ftp: loaded support on port[0] = 21 [ 59.259469][ T8327] team0: Port device team_slave_1 added [ 59.316503][ T8330] chnl_net:caif_netlink_parms(): no params data found [ 59.360841][ T8327] device hsr_slave_0 entered promiscuous mode 12:16:07 executing program 4: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af13, &(0x7f0000000100)={0x0, 0x200}) mount(&(0x7f0000000040)=@nullb='[d::],0::6:\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ceph\x00', 0x0, 0x0) [ 59.468184][ T8327] device hsr_slave_1 entered promiscuous mode [ 59.576845][ T8335] IPVS: ftp: loaded support on port[0] = 21 [ 59.762691][ T8330] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.777847][ T8330] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.797811][ T8330] device bridge_slave_0 entered promiscuous mode 12:16:07 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) accept4$ax25(r1, 0x0, 0x0, 0x0) [ 59.818260][ T8327] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 59.870271][ T8327] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 59.928198][ T8330] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.935574][ T8330] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.946202][ T8330] device bridge_slave_1 entered promiscuous mode [ 59.973602][ T8327] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 60.041225][ T8327] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 60.128808][ T8330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.129921][ T8341] IPVS: ftp: loaded support on port[0] = 21 [ 60.145274][ T8330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.175828][ T8337] IPVS: ftp: loaded support on port[0] = 21 [ 60.193703][ T8333] chnl_net:caif_netlink_parms(): no params data found [ 60.222995][ T8330] team0: Port device team_slave_0 added [ 60.230758][ T8330] team0: Port device team_slave_1 added [ 60.302155][ T8333] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.310160][ T8333] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.318465][ T8333] device bridge_slave_0 entered promiscuous mode [ 60.355850][ T8333] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.365951][ T8333] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.375306][ T8333] device bridge_slave_1 entered promiscuous mode [ 60.420450][ T8330] device hsr_slave_0 entered promiscuous mode [ 60.468503][ T8330] device hsr_slave_1 entered promiscuous mode [ 60.517868][ T8330] debugfs: Directory 'hsr0' with parent '/' already present! [ 60.530355][ T8335] chnl_net:caif_netlink_parms(): no params data found [ 60.571783][ T8333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.584528][ T8333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.647024][ T8333] team0: Port device team_slave_0 added [ 60.657543][ T8333] team0: Port device team_slave_1 added [ 60.667810][ T8337] chnl_net:caif_netlink_parms(): no params data found [ 60.722409][ T8335] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.729717][ T8335] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.737397][ T8335] device bridge_slave_0 entered promiscuous mode [ 60.745415][ T8335] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.752631][ T8335] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.760494][ T8335] device bridge_slave_1 entered promiscuous mode [ 60.794898][ T8330] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 60.834126][ T8341] chnl_net:caif_netlink_parms(): no params data found [ 60.864606][ T8330] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 60.925417][ T8330] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 60.983435][ T8330] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 61.033242][ T8327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.046887][ T8335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.090757][ T8333] device hsr_slave_0 entered promiscuous mode [ 61.138576][ T8333] device hsr_slave_1 entered promiscuous mode [ 61.197913][ T8333] debugfs: Directory 'hsr0' with parent '/' already present! [ 61.218229][ T8337] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.225320][ T8337] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.234304][ T8337] device bridge_slave_0 entered promiscuous mode [ 61.242763][ T8337] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.250843][ T8337] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.259502][ T8337] device bridge_slave_1 entered promiscuous mode [ 61.267514][ T8335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.291996][ T8327] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.306580][ T1111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.315016][ T1111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.369058][ T8337] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.380825][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.392681][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.401538][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.408830][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.417040][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.427411][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.435937][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.443034][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.466421][ T8335] team0: Port device team_slave_0 added [ 61.473085][ T8341] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.480957][ T8341] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.489864][ T8341] device bridge_slave_0 entered promiscuous mode [ 61.498603][ T8337] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.521344][ T8337] team0: Port device team_slave_0 added [ 61.531499][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.539451][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.548602][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.558044][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.566686][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.576972][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.585882][ T8333] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 61.640915][ T8335] team0: Port device team_slave_1 added [ 61.646951][ T8341] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.654393][ T8341] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.664074][ T8341] device bridge_slave_1 entered promiscuous mode [ 61.682648][ T8337] team0: Port device team_slave_1 added [ 61.698320][ T8333] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 61.740143][ T8333] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 61.781052][ T8341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.792742][ T8341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.804261][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.813336][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.822477][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.830945][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.880657][ T8337] device hsr_slave_0 entered promiscuous mode [ 61.938300][ T8337] device hsr_slave_1 entered promiscuous mode [ 61.978644][ T8337] debugfs: Directory 'hsr0' with parent '/' already present! [ 61.987018][ T8333] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 62.049007][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.057591][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.068958][ T8327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.141815][ T8335] device hsr_slave_0 entered promiscuous mode [ 62.198250][ T8335] device hsr_slave_1 entered promiscuous mode [ 62.238552][ T8335] debugfs: Directory 'hsr0' with parent '/' already present! [ 62.252585][ T8341] team0: Port device team_slave_0 added [ 62.261614][ T8341] team0: Port device team_slave_1 added [ 62.340475][ T8341] device hsr_slave_0 entered promiscuous mode [ 62.378223][ T8341] device hsr_slave_1 entered promiscuous mode [ 62.427856][ T8341] debugfs: Directory 'hsr0' with parent '/' already present! [ 62.440385][ T8337] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 62.494282][ T8337] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 62.545073][ T8337] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 62.580286][ T8337] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 62.625412][ T8327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.638862][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.646413][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.666722][ T8330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.722142][ T8330] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.745277][ T8335] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 62.780374][ T8335] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 62.842590][ T8335] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 62.889978][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.897966][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.935725][ T8341] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 62.959677][ T8335] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.017857][ T8339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.026527][ T8339] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.042606][ T8339] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.049836][ T8339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.064162][ T8339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.073137][ T8339] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.088283][ T8339] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.095388][ T8339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.109875][ T8339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.123023][ T8339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.147193][ T8339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.169057][ T8350] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 63.183860][ T8339] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.203404][ T8339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.214690][ T8339] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.231471][ T8339] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.244454][ T8339] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 167.997618][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 168.004557][ C1] rcu: 1-...!: (10499 ticks this GP) idle=f8e/1/0x4000000000000002 softirq=11082/11082 fqs=40 [ 168.015238][ C1] (t=10501 jiffies g=6797 q=124) [ 168.020259][ C1] rcu: rcu_preempt kthread starved for 10419 jiffies! g6797 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 168.031347][ C1] rcu: RCU grace-period kthread stack dump: [ 168.037254][ C1] rcu_preempt R running task 29032 10 2 0x80004000 [ 168.045152][ C1] Call Trace: [ 168.049139][ C1] __schedule+0x9a0/0xcc0 [ 168.053732][ C1] schedule+0x181/0x210 [ 168.057884][ C1] schedule_timeout+0x14f/0x240 [ 168.062725][ C1] ? run_local_timers+0x120/0x120 [ 168.067854][ C1] rcu_gp_kthread+0xed8/0x1770 [ 168.072628][ C1] kthread+0x332/0x350 [ 168.076699][ C1] ? rcu_report_qs_rsp+0x140/0x140 [ 168.081811][ C1] ? kthread_blkcg+0xe0/0xe0 [ 168.086397][ C1] ret_from_fork+0x24/0x30 [ 168.090820][ C1] NMI backtrace for cpu 1 [ 168.095141][ C1] CPU: 1 PID: 8297 Comm: udevd Not tainted 5.4.0-syzkaller #0 [ 168.102579][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 168.112642][ C1] Call Trace: [ 168.116061][ C1] [ 168.119096][ C1] dump_stack+0x1fb/0x318 [ 168.123432][ C1] nmi_cpu_backtrace+0xaf/0x1a0 [ 168.128413][ C1] ? nmi_trigger_cpumask_backtrace+0x16d/0x290 [ 168.134605][ C1] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 168.140687][ C1] nmi_trigger_cpumask_backtrace+0x174/0x290 [ 168.146705][ C1] arch_trigger_cpumask_backtrace+0x10/0x20 [ 168.152626][ C1] rcu_dump_cpu_stacks+0x15a/0x220 [ 168.157754][ C1] rcu_sched_clock_irq+0xe25/0x1ad0 [ 168.162984][ C1] ? trace_hardirqs_off+0x74/0x80 [ 168.168029][ C1] update_process_times+0x12d/0x180 [ 168.173237][ C1] tick_sched_timer+0x263/0x420 [ 168.178084][ C1] ? tick_setup_sched_timer+0x3d0/0x3d0 [ 168.183667][ C1] __hrtimer_run_queues+0x403/0x840 [ 168.188910][ C1] hrtimer_interrupt+0x38c/0xda0 [ 168.193877][ C1] ? debug_smp_processor_id+0x9/0x20 [ 168.199186][ C1] smp_apic_timer_interrupt+0x109/0x280 [ 168.204739][ C1] apic_timer_interrupt+0xf/0x20 [ 168.209677][ C1] [ 168.212620][ C1] RIP: 0010:free_thread_stack+0x18b/0x590 [ 168.218338][ C1] Code: ff ff e8 28 04 00 00 43 80 3c 2e 00 74 08 4c 89 e7 e8 09 a0 69 00 49 8b 1c 24 48 83 c3 08 48 89 d8 48 c1 e8 03 42 80 3c 28 00 <74> 08 48 89 df e8 eb 9f 69 00 48 8b 1b e9 82 ff ff ff e8 5e 2a 2e [ 168.238161][ C1] RSP: 0018:ffffc90001ec7a20 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 168.246585][ C1] RAX: 1ffff11012724141 RBX: ffff888093920a08 RCX: ffff88809e5d43c0 [ 168.254564][ C1] RDX: 0000000000000000 RSI: 00000000fffffffc RDI: ffffea00028a6040 [ 168.262557][ C1] RBP: ffffc90001ec7a58 R08: 000000000003a728 R09: ffffed1012729f27 [ 168.270535][ C1] R10: ffffed1012729f27 R11: 0000000000000000 R12: ffff888093920aa0 [ 168.278718][ C1] R13: dffffc0000000000 R14: 1ffff11012724154 R15: ffff88809394f928 [ 168.286807][ C1] put_task_stack+0xa3/0x130 [ 168.291403][ C1] finish_task_switch+0x3f1/0x550 [ 168.296519][ C1] __schedule+0x9a8/0xcc0 [ 168.300879][ C1] ? ___preempt_schedule+0x16/0x18 [ 168.306012][ C1] preempt_schedule+0xdb/0x120 [ 168.310791][ C1] ___preempt_schedule+0x16/0x18 [ 168.315738][ C1] _raw_spin_unlock_irqrestore+0xcc/0xe0 [ 168.321397][ C1] debug_object_active_state+0x1e3/0x4a0 [ 168.327252][ C1] ? debug_object_activate+0x185/0x6f0 [ 168.332727][ C1] ? __d_free_external+0x60/0x60 [ 168.337663][ C1] __call_rcu+0x55/0x670 [ 168.341952][ C1] call_rcu+0xb/0x10 [ 168.345849][ C1] dentry_free+0xbc/0x150 [ 168.350178][ C1] __dentry_kill+0x4a2/0x5e0 [ 168.354796][ C1] dput+0x460/0x6f0 [ 168.358641][ C1] do_renameat2+0x69b/0xff0 [ 168.363350][ C1] __x64_sys_rename+0x68/0x80 [ 168.368027][ C1] do_syscall_64+0xf7/0x1c0 [ 168.372616][ C1] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 168.378498][ C1] RIP: 0033:0x7f64807b3527 [ 168.382949][ C1] Code: 32 00 64 83 38 15 74 07 b8 ff ff ff ff 5b c3 48 89 df e8 1c c1 07 00 85 c0 75 ed 31 c0 eb d3 90 90 90 90 b8 52 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d e1 f8 32 00 31 d2 48 29 c2 64 [ 168.402543][ C1] RSP: 002b:00007fff8a3649e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 168.410943][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f64807b3527 [ 168.418904][ C1] RDX: 0000000000e044b0 RSI: 00007fff8a364a20 RDI: 00007fff8a364e20 [ 168.426950][ C1] RBP: 0000000000e03e80 R08: 00007f64811267a0 R09: 0000000000000001 [ 168.434912][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000defce0 [ 168.442872][ C1] R13: 0000000000deb250 R14: 00007fff8a364a20 R15: 0000000000000001