[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 52.995132][ T27] audit: type=1800 audit(1578470178.458:25): pid=8404 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 53.014497][ T27] audit: type=1800 audit(1578470178.458:26): pid=8404 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 53.035450][ T27] audit: type=1800 audit(1578470178.468:27): pid=8404 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.231' (ECDSA) to the list of known hosts. 2020/01/08 07:56:29 fuzzer started 2020/01/08 07:56:31 dialing manager at 10.128.0.26:35703 2020/01/08 07:56:31 syscalls: 2824 2020/01/08 07:56:31 code coverage: enabled 2020/01/08 07:56:31 comparison tracing: enabled 2020/01/08 07:56:31 extra coverage: enabled 2020/01/08 07:56:31 setuid sandbox: enabled 2020/01/08 07:56:31 namespace sandbox: enabled 2020/01/08 07:56:31 Android sandbox: /sys/fs/selinux/policy does not exist 2020/01/08 07:56:31 fault injection: enabled 2020/01/08 07:56:31 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/01/08 07:56:31 net packet injection: enabled 2020/01/08 07:56:31 net device setup: enabled 2020/01/08 07:56:31 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/01/08 07:56:31 devlink PCI setup: PCI device 0000:00:10.0 is not available 07:56:32 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r0, 0x4, 0x42800) write(r1, &(0x7f0000000200)='U', 0x1) readv(r0, &(0x7f00000004c0)=[{&(0x7f0000000180)=""/16, 0x10}], 0x1) 07:56:33 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="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", 0x11d}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) syzkaller login: [ 67.720530][ T8571] IPVS: ftp: loaded support on port[0] = 21 07:56:33 executing program 2: sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x0, 0x50080) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000040)={0x3, [0x0, 0x0, 0x0]}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f00000000c0)='cgroup.subtree_control\x00', 0x2, 0x0) close(r2) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x2, 0x2, 0x2, "02940e43a2a4ad3289c9a21c98786ff3e272b1b9da18723961c39cb316972bbc", 0x33424752}) openat$cgroup_ro(r1, &(0x7f0000000180)='io.stat\x00', 0x0, 0x0) readv(r2, &(0x7f00000002c0), 0x1a5) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x5aeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f00000006c0)='fou\x00') sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r4, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="0101160000000000000002000000"], 0x14}}, 0x0) r5 = socket(0x40000000002, 0x3, 0x80000000002) r6 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendmsg$sock(r0, &(0x7f00000004c0)={&(0x7f0000000340)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e21, 0x2}}, 0x80, &(0x7f0000000440)=[{&(0x7f00000003c0)="555a5f984fed3a589d223f1ca092400cfe0ab0b8b5394e63f215dea96ce2d7aa527ce31ad93b2a6104a8a34abfbacc7ca7c09166268c5d1cfc858fde2ba1afc95941545b53667a2c8e252ca7bcd9885b195843755ecc7080c6", 0x59}], 0x1, &(0x7f0000000480)=[@mark={{0x14}}], 0x18}, 0x4000) sendto$llc(r6, &(0x7f0000000000)="fad911553dea9381c2660568e36bbf30e2100d04ffc7e310615fa16b12b389841d63abf100aeeb9f", 0x28, 0x20000040, &(0x7f0000000040)={0x1a, 0x300, 0x6, 0x0, 0x8, 0x7, @remote}, 0x10) dup2(r5, r6) [ 67.835655][ T8573] IPVS: ftp: loaded support on port[0] = 21 [ 67.940913][ T8571] chnl_net:caif_netlink_parms(): no params data found [ 68.034618][ T8576] IPVS: ftp: loaded support on port[0] = 21 [ 68.066809][ T8571] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.075173][ T8571] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.084554][ T8571] device bridge_slave_0 entered promiscuous mode [ 68.095622][ T8571] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.104212][ T8571] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.112458][ T8571] device bridge_slave_1 entered promiscuous mode [ 68.125335][ T8573] chnl_net:caif_netlink_parms(): no params data found 07:56:33 executing program 3: capget(&(0x7f00000000c0)={0x19980330}, &(0x7f0000000140)) [ 68.169467][ T8571] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.201717][ T8571] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.240671][ T8573] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.247834][ T8573] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.258164][ T8573] device bridge_slave_0 entered promiscuous mode [ 68.278017][ T8571] team0: Port device team_slave_0 added [ 68.290509][ T8573] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.297595][ T8573] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.306565][ T8573] device bridge_slave_1 entered promiscuous mode [ 68.318926][ T8571] team0: Port device team_slave_1 added [ 68.382011][ T8573] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.400834][ T8576] chnl_net:caif_netlink_parms(): no params data found [ 68.409948][ T8580] IPVS: ftp: loaded support on port[0] = 21 [ 68.418659][ T8573] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 07:56:33 executing program 4: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000000)=[{}, {}, {}], 0x60) [ 68.472709][ T8571] device hsr_slave_0 entered promiscuous mode [ 68.511231][ T8571] device hsr_slave_1 entered promiscuous mode [ 68.681919][ T8573] team0: Port device team_slave_0 added [ 68.713577][ T8573] team0: Port device team_slave_1 added [ 68.714363][ T8582] IPVS: ftp: loaded support on port[0] = 21 07:56:34 executing program 5: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0xb, 0x9, 0x309e1e, 0x3, 0x1, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x3c) [ 68.738101][ T8576] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.746036][ T8576] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.756855][ T8576] device bridge_slave_0 entered promiscuous mode [ 68.852356][ T8573] device hsr_slave_0 entered promiscuous mode [ 68.880560][ T8573] device hsr_slave_1 entered promiscuous mode [ 68.930144][ T8573] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.937854][ T8573] Cannot create hsr debugfs directory [ 68.945814][ T8576] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.953718][ T8576] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.962361][ T8576] device bridge_slave_1 entered promiscuous mode [ 69.012684][ T8576] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.044060][ T8584] IPVS: ftp: loaded support on port[0] = 21 [ 69.052150][ T8576] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.088417][ T8571] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.133197][ T8576] team0: Port device team_slave_0 added [ 69.139049][ T8571] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.195273][ T8571] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.266638][ T8576] team0: Port device team_slave_1 added [ 69.277187][ T8571] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.343232][ T8580] chnl_net:caif_netlink_parms(): no params data found [ 69.442802][ T8576] device hsr_slave_0 entered promiscuous mode [ 69.480495][ T8576] device hsr_slave_1 entered promiscuous mode [ 69.520088][ T8576] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.527663][ T8576] Cannot create hsr debugfs directory [ 69.609409][ T8580] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.617500][ T8580] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.625298][ T8580] device bridge_slave_0 entered promiscuous mode [ 69.649117][ T8582] chnl_net:caif_netlink_parms(): no params data found [ 69.658942][ T8580] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.666242][ T8580] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.674145][ T8580] device bridge_slave_1 entered promiscuous mode [ 69.687696][ T8573] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.726141][ T8573] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.796816][ T8573] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 69.838428][ T8573] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 69.907163][ T8580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.946937][ T8584] chnl_net:caif_netlink_parms(): no params data found [ 69.964280][ T8580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.985874][ T8580] team0: Port device team_slave_0 added [ 69.992664][ T8582] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.999715][ T8582] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.008576][ T8582] device bridge_slave_0 entered promiscuous mode [ 70.017623][ T8582] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.024774][ T8582] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.032895][ T8582] device bridge_slave_1 entered promiscuous mode [ 70.056579][ T8580] team0: Port device team_slave_1 added [ 70.153600][ T8580] device hsr_slave_0 entered promiscuous mode [ 70.211900][ T8580] device hsr_slave_1 entered promiscuous mode [ 70.250289][ T8580] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.258036][ T8580] Cannot create hsr debugfs directory [ 70.268118][ T8582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.286898][ T8571] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.308631][ T8584] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.317447][ T8584] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.327628][ T8584] device bridge_slave_0 entered promiscuous mode [ 70.336802][ T8582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.360276][ T8576] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.426444][ T8576] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.501409][ T8584] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.508500][ T8584] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.517140][ T8584] device bridge_slave_1 entered promiscuous mode [ 70.535573][ T8582] team0: Port device team_slave_0 added [ 70.546724][ T8576] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.608669][ T8576] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.679627][ T8582] team0: Port device team_slave_1 added [ 70.688620][ T8573] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.714137][ T8584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.725212][ T8584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.742465][ T8571] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.769107][ T2708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.777804][ T2708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.789201][ T8573] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.818408][ T8584] team0: Port device team_slave_0 added [ 70.830386][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.838441][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.875559][ T8584] team0: Port device team_slave_1 added [ 70.942941][ T8582] device hsr_slave_0 entered promiscuous mode [ 70.991039][ T8582] device hsr_slave_1 entered promiscuous mode [ 71.030180][ T8582] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.038023][ T8582] Cannot create hsr debugfs directory [ 71.052304][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.061255][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.069552][ T2755] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.076980][ T2755] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.085168][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.094475][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.102997][ T2755] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.110190][ T2755] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.117654][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.127067][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.135865][ T2755] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.142957][ T2755] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.150637][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.159104][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.167616][ T2755] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.174853][ T2755] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.182852][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.191626][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.201034][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.209667][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.217564][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.251443][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.260643][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.268985][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.278705][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.287303][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.295592][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.304621][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.313207][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.321776][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.403792][ T8584] device hsr_slave_0 entered promiscuous mode [ 71.451240][ T8584] device hsr_slave_1 entered promiscuous mode [ 71.490181][ T8584] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.497872][ T8584] Cannot create hsr debugfs directory [ 71.521473][ T2711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.531083][ T2711] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.539456][ T2711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.547956][ T2711] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.581442][ T8580] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.601459][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.609712][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.618239][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.626610][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.637745][ T8573] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.656686][ T8580] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.702615][ T8580] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.752657][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.761338][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.787239][ T8576] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.799670][ T8571] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.810087][ T8580] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.903439][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.915133][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.923203][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.931055][ T2755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.944593][ T8573] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.958773][ T8582] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 72.008435][ T8584] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 72.052069][ T8584] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 72.104281][ T8576] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.111831][ T8582] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 72.151955][ T8582] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 72.222831][ T8582] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 72.265575][ T8584] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 72.338790][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.347669][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.356126][ T2767] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.363354][ T2767] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.372796][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.381329][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.389543][ T2767] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.396645][ T2767] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.404366][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.411948][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.419350][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.428421][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.436260][ T8584] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 72.489239][ T8571] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.501334][ T2708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.541437][ T8573] device veth0_vlan entered promiscuous mode [ 72.565993][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.576038][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.586105][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.594393][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.603037][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.610972][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.634379][ T8573] device veth1_vlan entered promiscuous mode [ 72.648150][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.656899][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.666147][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.675096][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.684402][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.693400][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.702301][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.722914][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.731314][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.772001][ T2711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.787325][ T2711] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.807522][ T8580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.834014][ T8576] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.846302][ T8576] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.854428][ T2708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.867679][ T2708] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.876169][ T2708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.884518][ T2708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.895032][ T2708] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.902897][ T2708] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.928318][ T8571] device veth0_vlan entered promiscuous mode [ 72.941056][ T2711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.951022][ T2711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.972650][ T8580] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.985729][ T8582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.033464][ T8582] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.989982][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 177.996750][ C1] rcu: 1-...!: (10499 ticks this GP) idle=8f6/1/0x4000000000000002 softirq=13139/13139 fqs=3 [ 178.007330][ C1] (t=10501 jiffies g=7009 q=192) [ 178.012355][ C1] rcu: rcu_preempt kthread starved for 10496 jiffies! g7009 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 178.024442][ C1] rcu: RCU grace-period kthread stack dump: [ 178.030345][ C1] rcu_preempt R running task 28984 10 2 0x80004000 [ 178.038267][ C1] Call Trace: [ 178.041593][ C1] __schedule+0x9a0/0xcc0 [ 178.045930][ C1] schedule+0x181/0x210 [ 178.050102][ C1] schedule_timeout+0x14f/0x240 [ 178.054953][ C1] ? run_local_timers+0x120/0x120 [ 178.064102][ C1] rcu_gp_kthread+0xed8/0x1770 [ 178.068878][ C1] kthread+0x332/0x350 [ 178.072967][ C1] ? rcu_report_qs_rsp+0x140/0x140 [ 178.078097][ C1] ? kthread_blkcg+0xe0/0xe0 [ 178.082709][ C1] ret_from_fork+0x24/0x30 [ 178.087135][ C1] NMI backtrace for cpu 1 [ 178.091459][ C1] CPU: 1 PID: 2708 Comm: kworker/1:3 Not tainted 5.5.0-rc5-syzkaller #0 [ 178.099796][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 178.109875][ C1] Workqueue: ipv6_addrconf addrconf_dad_work [ 178.115865][ C1] Call Trace: [ 178.119162][ C1] [ 178.122033][ C1] dump_stack+0x1fb/0x318 [ 178.126566][ C1] nmi_cpu_backtrace+0xaf/0x1a0 [ 178.131437][ C1] ? nmi_trigger_cpumask_backtrace+0x16d/0x290 [ 178.137610][ C1] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 178.143681][ C1] nmi_trigger_cpumask_backtrace+0x174/0x290 [ 178.149792][ C1] arch_trigger_cpumask_backtrace+0x10/0x20 [ 178.155682][ C1] rcu_dump_cpu_stacks+0x15a/0x220 [ 178.160794][ C1] rcu_sched_clock_irq+0xe25/0x1ad0 [ 178.165985][ C1] ? trace_hardirqs_off+0x74/0x80 [ 178.171020][ C1] update_process_times+0x12d/0x180 [ 178.176213][ C1] tick_sched_timer+0x263/0x420 [ 178.181083][ C1] ? tick_setup_sched_timer+0x3d0/0x3d0 [ 178.186621][ C1] __hrtimer_run_queues+0x403/0x840 [ 178.191914][ C1] hrtimer_interrupt+0x38c/0xda0 [ 178.196866][ C1] ? debug_smp_processor_id+0x9/0x20 [ 178.202146][ C1] smp_apic_timer_interrupt+0x109/0x280 [ 178.207796][ C1] apic_timer_interrupt+0xf/0x20 [ 178.212721][ C1] [ 178.215651][ C1] RIP: 0010:free_thread_stack+0x177/0x590 [ 178.221363][ C1] Code: 80 3c 28 00 74 08 48 89 df e8 55 94 6a 00 48 8b 3b be fc ff ff ff e8 28 04 00 00 43 80 3c 2e 00 74 08 4c 89 e7 e8 39 94 6a 00 <49> 8b 1c 24 48 83 c3 08 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 [ 178.240959][ C1] RSP: 0018:ffffc900079bf8e8 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 178.249369][ C1] RAX: ffffffff814897d3 RBX: ffff88808e396608 RCX: ffff88809ffe2140 [ 178.257334][ C1] RDX: 0000000000000000 RSI: 00000000fffffffc RDI: ffffea00025c5b00 [ 178.265327][ C1] RBP: ffffc900079bf920 R08: 000000000003a728 R09: ffffed101519fac9 [ 178.273292][ C1] R10: ffffed101519fac9 R11: 0000000000000000 R12: ffff88808e3966a0 [ 178.281272][ C1] R13: dffffc0000000000 R14: 1ffff11011c72cd4 R15: ffff8880a8cfd638 [ 178.289269][ C1] ? mod_memcg_page_state+0x123/0x190 [ 178.294636][ C1] ? free_thread_stack+0x168/0x590 [ 178.299741][ C1] put_task_stack+0xa3/0x130 [ 178.304359][ C1] finish_task_switch+0x3f1/0x550 [ 178.309457][ C1] __schedule+0x9a8/0xcc0 [ 178.313910][ C1] ? debug_smp_processor_id+0x9/0x20 [ 178.319219][ C1] schedule+0x181/0x210 [ 178.323489][ C1] schedule_preempt_disabled+0x13/0x20 [ 178.328968][ C1] mutex_optimistic_spin+0x445/0x480 [ 178.334267][ C1] __mutex_lock_common+0x2e7/0x2e10 [ 178.339487][ C1] ? rtnl_lock+0x17/0x20 [ 178.343777][ C1] ? process_one_work+0x75d/0x10d0 [ 178.348901][ C1] mutex_lock_nested+0x1b/0x30 [ 178.353695][ C1] rtnl_lock+0x17/0x20 [ 178.357770][ C1] addrconf_dad_work+0x69/0x1c30 [ 178.362708][ C1] ? rcu_read_lock_sched_held+0x10b/0x170 [ 178.368512][ C1] process_one_work+0x7ef/0x10d0 [ 178.373483][ C1] worker_thread+0xc01/0x1630 [ 178.378204][ C1] kthread+0x332/0x350 [ 178.382300][ C1] ? rcu_lock_release+0x30/0x30 [ 178.387167][ C1] ? kthread_blkcg+0xe0/0xe0 [ 178.391762][ C1] ret_from_fork+0x24/0x30