[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 45.704160][ T25] audit: type=1800 audit(1575438747.814:25): pid=8163 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 45.734166][ T25] audit: type=1800 audit(1575438747.814:26): pid=8163 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 45.783894][ T25] audit: type=1800 audit(1575438747.824:27): pid=8163 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.158' (ECDSA) to the list of known hosts. 2019/12/04 05:52:35 fuzzer started 2019/12/04 05:52:37 dialing manager at 10.128.0.26:42111 2019/12/04 05:52:37 syscalls: 2689 2019/12/04 05:52:37 code coverage: enabled 2019/12/04 05:52:37 comparison tracing: enabled 2019/12/04 05:52:37 extra coverage: extra coverage is not supported by the kernel 2019/12/04 05:52:37 setuid sandbox: enabled 2019/12/04 05:52:37 namespace sandbox: enabled 2019/12/04 05:52:37 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/04 05:52:37 fault injection: enabled 2019/12/04 05:52:37 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/04 05:52:37 net packet injection: enabled 2019/12/04 05:52:37 net device setup: enabled 2019/12/04 05:52:37 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/12/04 05:52:37 devlink PCI setup: PCI device 0000:00:10.0 is not available syzkaller login: [ 54.981516][ T8322] ld (8322) used greatest stack depth: 23592 bytes left 05:52:38 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0xc0145401, &(0x7f0000000000)={{0x2, 0x0, 0x0, 0xfdfdffff}}) 05:52:38 executing program 1: r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@loopback, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@mcast2, 0x800, 0x2}, 0x20) [ 56.259925][ T8327] IPVS: ftp: loaded support on port[0] = 21 05:52:38 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x2, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4c}, [@ldst={0x6, 0x3, 0x0, 0x5}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf7}, 0x48) [ 56.409313][ T8329] IPVS: ftp: loaded support on port[0] = 21 [ 56.409865][ T8327] chnl_net:caif_netlink_parms(): no params data found [ 56.586604][ T8327] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.610545][ T8327] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.618517][ T8327] device bridge_slave_0 entered promiscuous mode [ 56.633651][ T8332] IPVS: ftp: loaded support on port[0] = 21 [ 56.658649][ T8327] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.666182][ T8327] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.675266][ T8327] device bridge_slave_1 entered promiscuous mode [ 56.687441][ T8329] chnl_net:caif_netlink_parms(): no params data found 05:52:38 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x3ff, 0x1, &(0x7f0000000280)=[{&(0x7f00000003c0)="eb64c86d4f66732e66613400040441000500077008f8", 0xc7}], 0x0, 0x0) [ 56.733283][ T8327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.777318][ T8327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.837194][ T8327] team0: Port device team_slave_0 added [ 56.852574][ T8329] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.859658][ T8329] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.878457][ T8329] device bridge_slave_0 entered promiscuous mode [ 56.889289][ T8327] team0: Port device team_slave_1 added [ 56.917784][ T8329] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.928110][ T8329] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.936181][ T8329] device bridge_slave_1 entered promiscuous mode 05:52:39 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x2) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000040)=0x7f, 0x4) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f00000004c0)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="28000000000000002900000002000000f71fdf2fd0846bc0964f4ffde3d917e30000000000000000021225629cca0f226f13488ec7ebbb74c7e47c0000000000000003a07d9a32537d7bdf29d71ca495505ff38dc1df29285ff9dfda2466f77c4c676448555e51858062f78475cfe62678601bdf15a115f9be15c39a375bea40e79ec59b166888c62a33a07615a39dfff42852108d6a1e7306093228de550d0ac401"], 0x28}}], 0x1, 0x0) recvfrom$inet6(r0, 0x0, 0x31, 0x0, &(0x7f00000018c0)={0xa, 0x0, 0x0, @rand_addr="31a51e1976d1406c787e63ca6c20350f"}, 0x710000) [ 57.004911][ T8329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.016854][ T8329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.034492][ T8335] IPVS: ftp: loaded support on port[0] = 21 [ 57.084225][ T8327] device hsr_slave_0 entered promiscuous mode [ 57.141594][ T8327] device hsr_slave_1 entered promiscuous mode [ 57.210333][ T8338] IPVS: ftp: loaded support on port[0] = 21 [ 57.218392][ T8332] chnl_net:caif_netlink_parms(): no params data found [ 57.256646][ T8329] team0: Port device team_slave_0 added [ 57.277488][ T8329] team0: Port device team_slave_1 added [ 57.303936][ T8327] netdevsim netdevsim0 netdevsim0: renamed from eth0 05:52:39 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x5, 0x7fff}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000600)={0x5}) [ 57.388182][ T8327] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 57.456943][ T8327] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 57.553165][ T8329] device hsr_slave_0 entered promiscuous mode [ 57.620759][ T8329] device hsr_slave_1 entered promiscuous mode [ 57.670611][ T8329] debugfs: Directory 'hsr0' with parent '/' already present! [ 57.687588][ T8332] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.694846][ T8332] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.703211][ T8332] device bridge_slave_0 entered promiscuous mode [ 57.711988][ T8332] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.719082][ T8332] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.727144][ T8332] device bridge_slave_1 entered promiscuous mode [ 57.735267][ T8327] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 57.807283][ T8340] IPVS: ftp: loaded support on port[0] = 21 [ 57.869771][ T8335] chnl_net:caif_netlink_parms(): no params data found [ 57.886213][ T8332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.924172][ T8332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.983340][ T8329] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 58.023099][ T8329] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 58.073135][ T8329] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 58.112711][ T8335] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.119819][ T8335] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.128654][ T8335] device bridge_slave_0 entered promiscuous mode [ 58.139924][ T8332] team0: Port device team_slave_0 added [ 58.148734][ T8332] team0: Port device team_slave_1 added [ 58.158515][ T8329] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 58.218494][ T8335] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.226032][ T8335] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.234188][ T8335] device bridge_slave_1 entered promiscuous mode [ 58.287648][ T8338] chnl_net:caif_netlink_parms(): no params data found [ 58.304001][ T8335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.383810][ T8332] device hsr_slave_0 entered promiscuous mode [ 58.421417][ T8332] device hsr_slave_1 entered promiscuous mode [ 58.460608][ T8332] debugfs: Directory 'hsr0' with parent '/' already present! [ 58.487355][ T8335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.516080][ T8335] team0: Port device team_slave_0 added [ 58.573290][ T8335] team0: Port device team_slave_1 added [ 58.579127][ T8338] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.586326][ T8338] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.594160][ T8338] device bridge_slave_0 entered promiscuous mode [ 58.613867][ T8332] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 58.674047][ T8338] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.681933][ T8338] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.689877][ T8338] device bridge_slave_1 entered promiscuous mode [ 58.711459][ T8332] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 58.765873][ T8332] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 58.823479][ T8332] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 58.894389][ T8338] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.924448][ T8340] chnl_net:caif_netlink_parms(): no params data found [ 58.941142][ T8338] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.966647][ T8338] team0: Port device team_slave_0 added [ 59.033291][ T8335] device hsr_slave_0 entered promiscuous mode [ 59.071399][ T8335] device hsr_slave_1 entered promiscuous mode [ 59.110789][ T8335] debugfs: Directory 'hsr0' with parent '/' already present! [ 59.119491][ T8338] team0: Port device team_slave_1 added [ 59.195647][ T8338] device hsr_slave_0 entered promiscuous mode [ 59.241006][ T8338] device hsr_slave_1 entered promiscuous mode [ 59.290712][ T8338] debugfs: Directory 'hsr0' with parent '/' already present! [ 59.326765][ T8340] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.335345][ T8340] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.343880][ T8340] device bridge_slave_0 entered promiscuous mode [ 59.368508][ T8329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.376498][ T8340] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.384184][ T8340] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.392665][ T8340] device bridge_slave_1 entered promiscuous mode [ 59.436666][ T8340] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.449030][ T8340] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.477218][ T8338] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 59.536658][ T8340] team0: Port device team_slave_0 added [ 59.546296][ T8340] team0: Port device team_slave_1 added [ 59.554177][ T8335] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 59.605128][ T8346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.614684][ T8346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.625498][ T8338] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 59.684864][ T8327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.697643][ T8335] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 59.743193][ T8335] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 59.794927][ T8329] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.802311][ T8338] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 59.843416][ T8338] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 59.905576][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.913764][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.922228][ T8335] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 59.983106][ T8327] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.023286][ T8340] device hsr_slave_0 entered promiscuous mode [ 60.070986][ T8340] device hsr_slave_1 entered promiscuous mode [ 60.110801][ T8340] debugfs: Directory 'hsr0' with parent '/' already present! [ 60.150355][ T3743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.159555][ T3743] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.172222][ T3743] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.179376][ T3743] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.189309][ T3743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.199047][ T3743] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.207836][ T3743] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.214997][ T3743] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.222710][ T3743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.231941][ T3743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.269475][ T8340] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 60.302917][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.311288][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.320172][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.328939][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.336223][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.345826][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.355425][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.363963][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.371105][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.378751][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.388204][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.396869][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.405698][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.414243][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.423465][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.432873][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.440967][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.462851][ T8340] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 60.513434][ T8340] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 60.563037][ T8340] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 60.612733][ T8341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.621684][ T8341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.630301][ T8341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.642334][ T8341] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.651157][ T8341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.661922][ T8341] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.670513][ T8341] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.683135][ T8329] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.695569][ T8329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.724322][ T8346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.733360][ T8346] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.742202][ T8346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.751326][ T8346] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.775049][ T8346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.783830][ T8346] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.792270][ T8346] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.801480][ T8346] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.825090][ T8332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.849890][ T8327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.872223][ T8335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.888880][ T8338] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.913080][ T8341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.924396][ T8341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.934193][ T8329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.955290][ T8338] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.967705][ T8335] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.980271][ T8340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.996011][ T8341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.007261][ T8341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.017576][ T8341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.025571][ T8341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.033635][ T8341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.043259][ T8341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.052010][ T8341] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.059496][ T8341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.071206][ T8332] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.084547][ T8327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.103221][ T3743] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.115369][ T3743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.124284][ T3743] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.135873][ T3743] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.142990][ T3743] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.151524][ T3743] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.158963][ T3743] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.166711][ T3743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.175493][ T3743] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.183979][ T3743] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.191069][ T3743] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.199284][ T3743] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.234711][ T8340] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.240368][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 166.247385][ C1] (detected by 1, t=10502 jiffies, g=6653, q=363) [ 166.253874][ C1] rcu: All QSes seen, last rcu_preempt kthread activity 10503 (4294953711-4294943208), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 166.267322][ C1] syz-executor.3 R running task 24536 8335 8334 0x0000400a [ 166.275224][ C1] Call Trace: [ 166.278492][ C1] [ 166.281336][ C1] sched_show_task+0x40f/0x560 [ 166.286093][ C1] rcu_sched_clock_irq+0x1861/0x1ad0 [ 166.291373][ C1] update_process_times+0x12d/0x180 [ 166.296563][ C1] tick_sched_timer+0x263/0x420 [ 166.301400][ C1] ? tick_setup_sched_timer+0x3d0/0x3d0 [ 166.306934][ C1] __hrtimer_run_queues+0x403/0x840 [ 166.312164][ C1] hrtimer_interrupt+0x38c/0xda0 [ 166.317102][ C1] ? debug_smp_processor_id+0x9/0x20 [ 166.322384][ C1] smp_apic_timer_interrupt+0x109/0x280 [ 166.327921][ C1] apic_timer_interrupt+0xf/0x20 [ 166.332839][ C1] [ 166.335775][ C1] RIP: 0010:free_thread_stack+0x11f/0x590 [ 166.341494][ C1] Code: 3e e8 e5 96 ee ff 48 c1 e8 06 48 83 e0 c0 48 bf 00 00 00 00 00 ea ff ff 48 01 c7 be 03 00 00 00 e8 06 a2 60 00 e9 5d 04 00 00 5c 2d 2e 00 48 89 df 31 f6 e8 42 af 6e 00 43 80 3c 2e 00 74 08 [ 166.362477][ C1] RSP: 0018:ffffc90001f07608 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 166.371270][ C1] RAX: 1ffff11011af7cf1 RBX: ffffea000244b4c0 RCX: ffff8880a74c20c0 [ 166.379337][ C1] RDX: 0000000000000000 RSI: 00000000fffffffc RDI: ffffea000244b4c0 [ 166.387314][ C1] RBP: ffffc90001f07640 R08: dffffc0000000000 R09: fffffbfff120248a [ 166.395274][ C1] R10: fffffbfff120248a R11: 0000000000000000 R12: ffff88808d7be820 [ 166.403260][ C1] R13: dffffc0000000000 R14: 1ffff11011af7d04 R15: ffff8880992615e8 [ 166.411344][ C1] ? free_thread_stack+0x168/0x590 [ 166.417401][ C1] put_task_stack+0xa3/0x130 [ 166.421981][ C1] finish_task_switch+0x3f1/0x550 [ 166.427018][ C1] __schedule+0x9a8/0xcc0 [ 166.431374][ C1] preempt_schedule_irq+0xc1/0x140 [ 166.436558][ C1] retint_kernel+0x1b/0x2b [ 166.440963][ C1] RIP: 0010:update_stack_state+0x367/0x530 [ 166.446756][ C1] Code: 5d 98 74 08 48 89 df e8 c7 dc 7c 00 48 c7 03 00 00 00 00 b3 01 4c 8b 75 b8 48 b8 00 00 00 00 00 fc ff df 48 8b 4d a8 8a 04 01 <84> c0 0f 85 a0 00 00 00 41 83 3c 24 00 0f 84 b9 00 00 00 84 db 74 [ 166.466352][ C1] RSP: 0018:ffffc90001f07858 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 166.474748][ C1] RAX: dffffc0000000000 RBX: ffffc90001f07a01 RCX: 1ffff920003e0f48 [ 166.482879][ C1] RDX: ffffc90001f07ae0 RSI: 1ffff920003e0f4a RDI: ffffc90001f07a40 [ 166.490834][ C1] RBP: ffffc90001f07900 R08: dffffc0000000000 R09: ffffc90001f07a40 [ 166.498804][ C1] R10: fffff520003e0f54 R11: 0000000000000000 R12: ffffc90001f07a40 [ 166.506773][ C1] R13: 0000000000000000 R14: ffffc90001f07a68 R15: 1ffff920003e0f50 [ 166.514762][ C1] unwind_next_frame+0x3f1/0x7a0 [ 166.519701][ C1] __unwind_start+0x36a/0x440 [ 166.524371][ C1] ? stack_trace_save+0x150/0x150 [ 166.529381][ C1] arch_stack_walk+0x78/0xe0 [ 166.533958][ C1] ? arch_stack_walk+0x78/0xe0 [ 166.538709][ C1] stack_trace_save+0xb6/0x150 [ 166.543463][ C1] __kasan_kmalloc+0x11c/0x1b0 [ 166.548215][ C1] ? __lock_acquire+0xc75/0x1be0 [ 166.553148][ C1] ? _raw_spin_unlock_irqrestore+0xb7/0xe0 [ 166.558941][ C1] ? rcu_lock_release+0x4/0x20 [ 166.563709][ C1] ? rcu_lock_release+0x4/0x20 [ 166.568467][ C1] ? kmem_cache_alloc+0x194/0x2e0 [ 166.573491][ C1] kasan_slab_alloc+0xf/0x20 [ 166.578065][ C1] kmem_cache_alloc+0x1f5/0x2e0 [ 166.582903][ C1] ? sock_alloc_inode+0x1b/0xc0 [ 166.587739][ C1] ? sockfs_init_fs_context+0xb0/0xb0 [ 166.593131][ C1] sock_alloc_inode+0x1b/0xc0 [ 166.597803][ C1] ? sockfs_init_fs_context+0xb0/0xb0 [ 166.603167][ C1] new_inode_pseudo+0x68/0x240 [ 166.607925][ C1] __sock_create+0x12d/0x910 [ 166.612505][ C1] __sys_socket+0xe7/0x2e0 [ 166.617012][ C1] __x64_sys_socket+0x7a/0x90 [ 166.621677][ C1] do_syscall_64+0xf7/0x1c0 [ 166.626167][ C1] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 166.632046][ C1] RIP: 0033:0x45d1c7 [ 166.635931][ C1] Code: 00 00 00 49 89 ca b8 36 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 4a 8b fb ff c3 66 0f 1f 84 00 00 00 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 2d 8b fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 166.655791][ C1] RSP: 002b:00007ffebbf83b48 EFLAGS: 00000202 ORIG_RAX: 0000000000000029 [ 166.664187][ C1] RAX: ffffffffffffffda RBX: 0000000000a72200 RCX: 000000000045d1c7 [ 166.672159][ C1] RDX: 0000000000000000 RSI: 0000000000080002 RDI: 0000000000000001 [ 166.680217][ C1] RBP: 00000000004bfc03 R08: 0000000000000000 R09: 00007ffebbf83c88 [ 166.688268][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 00000000004bfc03 [ 166.696232][ C1] R13: 0000000000000000 R14: 0000000000000003 R15: 00007ffebbf83c88 [ 166.704231][ C1] rcu: rcu_preempt kthread starved for 10548 jiffies! g6653 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 166.715320][ C1] rcu: RCU grace-period kthread stack dump: [ 166.721195][ C1] rcu_preempt R running task 29032 10 2 0x80004000 [ 166.729079][ C1] Call Trace: [ 166.732363][ C1] __schedule+0x9a0/0xcc0 [ 166.736686][ C1] schedule+0x181/0x210 [ 166.740827][ C1] schedule_timeout+0x14f/0x240 [ 166.745667][ C1] ? run_local_timers+0x120/0x120 [ 166.750680][ C1] rcu_gp_kthread+0xed8/0x1770 [ 166.755439][ C1] kthread+0x332/0x350 [ 166.759490][ C1] ? rcu_report_qs_rsp+0x140/0x140 [ 166.764591][ C1] ? kthread_blkcg+0xe0/0xe0 [ 166.769167][ C1] ret_from_fork+0x24/0x30