[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 53.664920][ T27] audit: type=1800 audit(1578452823.642:25): pid=8364 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 53.703322][ T27] audit: type=1800 audit(1578452823.642:26): pid=8364 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 53.729287][ T27] audit: type=1800 audit(1578452823.642:27): pid=8364 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.117' (ECDSA) to the list of known hosts. 2020/01/08 03:07:15 fuzzer started 2020/01/08 03:07:16 dialing manager at 10.128.0.26:35703 2020/01/08 03:07:16 syscalls: 2824 2020/01/08 03:07:16 code coverage: enabled 2020/01/08 03:07:16 comparison tracing: enabled 2020/01/08 03:07:16 extra coverage: enabled 2020/01/08 03:07:16 setuid sandbox: enabled 2020/01/08 03:07:16 namespace sandbox: enabled 2020/01/08 03:07:16 Android sandbox: /sys/fs/selinux/policy does not exist 2020/01/08 03:07:16 fault injection: enabled 2020/01/08 03:07:16 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/01/08 03:07:16 net packet injection: enabled 2020/01/08 03:07:16 net device setup: enabled 2020/01/08 03:07:16 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/01/08 03:07:16 devlink PCI setup: PCI device 0000:00:10.0 is not available 03:07:17 executing program 0: getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$packet(0xffffffffffffffff, &(0x7f0000000080), 0x14) get_mempolicy(0x0, &(0x7f0000000180), 0x4f, &(0x7f0000ffa000/0x4000)=nil, 0x4) 03:07:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x3}]}, 0x1c}}, 0x0) syzkaller login: [ 67.561650][ T8530] IPVS: ftp: loaded support on port[0] = 21 [ 67.691132][ T8530] chnl_net:caif_netlink_parms(): no params data found [ 67.740161][ T8530] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.749466][ T8530] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.757802][ T8530] device bridge_slave_0 entered promiscuous mode [ 67.768318][ T8530] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.775996][ T8530] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.785092][ T8530] device bridge_slave_1 entered promiscuous mode [ 67.808928][ T8530] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.821894][ T8530] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 03:07:17 executing program 2: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmctl$IPC_RMID(r0, 0x0) [ 67.845505][ T8533] IPVS: ftp: loaded support on port[0] = 21 [ 67.855139][ T8530] team0: Port device team_slave_0 added [ 67.866121][ T8530] team0: Port device team_slave_1 added [ 67.956349][ T8530] device hsr_slave_0 entered promiscuous mode [ 68.013374][ T8530] device hsr_slave_1 entered promiscuous mode 03:07:18 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003680)=[{{0x0, 0x0, &(0x7f0000003180)=[{&(0x7f0000001d40)=""/253, 0xff5c}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_vs\x00') preadv(r0, &(0x7f00000017c0), 0x19e, 0x700000000000000) [ 68.102279][ T8535] IPVS: ftp: loaded support on port[0] = 21 [ 68.225788][ T8533] chnl_net:caif_netlink_parms(): no params data found [ 68.268124][ T8533] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.277016][ T8533] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.284854][ T8533] device bridge_slave_0 entered promiscuous mode [ 68.304423][ T8533] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.311608][ T8533] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.322481][ T8533] device bridge_slave_1 entered promiscuous mode [ 68.356895][ T8530] netdevsim netdevsim0 netdevsim0: renamed from eth0 03:07:18 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f0000000340)='/dev/snd/timer\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) r2 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x200, 0x1e5) r3 = openat$cgroup_ro(r2, &(0x7f0000000480)='cgroup.stat\x00', 0x275a, 0x0) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x160) fallocate(r4, 0x0, 0x0, 0x2000002) read$eventfd(r4, &(0x7f00000003c0), 0x8) poll(&(0x7f0000000300)=[{r3, 0x20}, {r3, 0x400}, {r3, 0x4000}, {r3, 0x4000}, {r1, 0x100}, {r1, 0x5000}, {r3, 0x200}, {r0, 0x100}], 0x8, 0x9) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000', @ANYRESDEC=0x0, @ANYBLOB=',g\\0\x00\x00\x00\x00\x00\x00', @ANYRESDEC=0x0]) preadv(r5, &(0x7f0000000740)=[{0x0}], 0x1, 0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, 0x1, {0x7}}, 0x18) r6 = creat(&(0x7f0000001c00)='./bus\x00', 0xa1) r7 = socket$inet6(0xa, 0x400000000001, 0x0) accept4(r6, 0x0, &(0x7f00000002c0), 0x80000) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_sco(0xffffffffffffffff, 0x0, 0x0) listen(r8, 0x0) setsockopt$sock_linger(r8, 0x1, 0xd, &(0x7f0000000000)={0x4, 0x8003}, 0x8) close(r8) mmap(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x200000f, 0x10, r8, 0x0) r9 = dup(r7) r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r10, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r11 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r11, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$FICLONE(r11, 0x40049409, r1) setsockopt$inet6_tcp_int(r9, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r7, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfcc5}, 0x0, 0x0, 0x400}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) r12 = open(&(0x7f0000000440)='./bus\x00', 0xc2b00, 0x40) ftruncate(r6, 0x800fe) sendfile(r9, r12, 0x0, 0x8000fffffffe) [ 68.415831][ T8530] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.456798][ T8533] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.475675][ T8533] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.511427][ T8530] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.575105][ T8530] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.647068][ T8533] team0: Port device team_slave_0 added [ 68.667903][ T8538] IPVS: ftp: loaded support on port[0] = 21 [ 68.680045][ T8541] IPVS: ftp: loaded support on port[0] = 21 03:07:18 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x1) write$binfmt_script(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB='#! ./file0 \t'], 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) [ 68.708591][ T8533] team0: Port device team_slave_1 added [ 68.717528][ T8530] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.724771][ T8530] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.732504][ T8530] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.739613][ T8530] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.751490][ T2779] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.765739][ T2779] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.895604][ T8533] device hsr_slave_0 entered promiscuous mode [ 68.954258][ T8533] device hsr_slave_1 entered promiscuous mode [ 69.023274][ T8533] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.031014][ T8533] Cannot create hsr debugfs directory [ 69.039695][ T8535] chnl_net:caif_netlink_parms(): no params data found [ 69.101038][ T8544] IPVS: ftp: loaded support on port[0] = 21 [ 69.172830][ T8535] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.180226][ T8535] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.188635][ T8535] device bridge_slave_0 entered promiscuous mode [ 69.198351][ T8535] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.205529][ T8535] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.213203][ T8535] device bridge_slave_1 entered promiscuous mode [ 69.234631][ T8535] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.280646][ T8535] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.318402][ T8533] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.358532][ T8533] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.436054][ T8535] team0: Port device team_slave_0 added [ 69.441875][ T8533] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 69.495914][ T8541] chnl_net:caif_netlink_parms(): no params data found [ 69.509758][ T8538] chnl_net:caif_netlink_parms(): no params data found [ 69.526965][ T8535] team0: Port device team_slave_1 added [ 69.536856][ T8533] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 69.628662][ T8530] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.695834][ T8535] device hsr_slave_0 entered promiscuous mode [ 69.743407][ T8535] device hsr_slave_1 entered promiscuous mode [ 69.803248][ T8535] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.810919][ T8535] Cannot create hsr debugfs directory [ 69.816908][ T8538] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.824621][ T8538] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.833095][ T8538] device bridge_slave_0 entered promiscuous mode [ 69.850935][ T2941] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.859115][ T2941] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.875678][ T8538] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.882763][ T8538] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.890935][ T8538] device bridge_slave_1 entered promiscuous mode [ 69.915292][ T8530] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.940914][ T8538] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.988113][ T8538] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.002425][ T8541] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.010676][ T8541] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.019052][ T8541] device bridge_slave_0 entered promiscuous mode [ 70.040221][ T2771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.048845][ T2771] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.057542][ T2771] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.064637][ T2771] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.080458][ T8538] team0: Port device team_slave_0 added [ 70.092418][ T8544] chnl_net:caif_netlink_parms(): no params data found [ 70.102125][ T8541] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.109872][ T8541] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.119007][ T8541] device bridge_slave_1 entered promiscuous mode [ 70.137951][ T8538] team0: Port device team_slave_1 added [ 70.206192][ T8538] device hsr_slave_0 entered promiscuous mode [ 70.253483][ T8538] device hsr_slave_1 entered promiscuous mode [ 70.303328][ T8538] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.310922][ T8538] Cannot create hsr debugfs directory [ 70.325917][ T2779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.339029][ T2779] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.347699][ T2779] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.354834][ T2779] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.367981][ T8541] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.380170][ T8541] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.427524][ T2941] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.436807][ T2941] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.464295][ T8541] team0: Port device team_slave_0 added [ 70.490115][ T8541] team0: Port device team_slave_1 added [ 70.498179][ T8535] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.536364][ T2779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.544972][ T2779] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.555373][ T2779] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.563616][ T8544] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.570687][ T8544] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.578972][ T8544] device bridge_slave_0 entered promiscuous mode [ 70.590288][ T8544] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.597476][ T8544] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.605437][ T8544] device bridge_slave_1 entered promiscuous mode [ 70.626013][ T8535] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.666129][ T8535] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.725955][ T2777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.736746][ T2777] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.762713][ T8544] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.785518][ T8533] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.792328][ T8535] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.876017][ T8541] device hsr_slave_0 entered promiscuous mode [ 70.913593][ T8541] device hsr_slave_1 entered promiscuous mode [ 70.953243][ T8541] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.960892][ T8541] Cannot create hsr debugfs directory [ 70.967260][ T2941] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.976593][ T2941] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.985393][ T2941] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.993972][ T2941] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.005199][ T8544] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.016984][ T8530] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.071146][ T8533] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.087041][ T8544] team0: Port device team_slave_0 added [ 71.100406][ T8544] team0: Port device team_slave_1 added [ 71.109288][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.117140][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.162742][ T2782] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.172435][ T2782] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.181600][ T2782] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.189733][ T2782] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.197840][ T2782] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.205656][ T2782] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.219770][ T2782] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.230329][ T8538] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.265739][ T8538] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.308803][ T8538] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.396182][ T8544] device hsr_slave_0 entered promiscuous mode [ 71.434047][ T8544] device hsr_slave_1 entered promiscuous mode [ 71.463537][ T8544] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.471266][ T8544] Cannot create hsr debugfs directory [ 71.500121][ T8538] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.548906][ T2941] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.558384][ T2941] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.567523][ T2941] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.574756][ T2941] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.614696][ T2771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.623745][ T2771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.635728][ T8530] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.682856][ T8535] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.691082][ T8541] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 71.757016][ T2779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.766707][ T2779] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.776323][ T2779] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.805500][ T8541] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 71.845361][ T2779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.854781][ T2779] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.863311][ T2779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.871875][ T2779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.880560][ T2779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.888929][ T2779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.930267][ T8535] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.937859][ T8541] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 71.995436][ T2771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.003807][ T2771] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.012005][ T2771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.020584][ T2771] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.032643][ T8533] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.042296][ T8544] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 72.069725][ T8544] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 72.115428][ T8541] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 72.175163][ T2779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.184040][ T2779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.192333][ T2779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.202021][ T2779] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.214329][ T2779] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.221387][ T2779] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.229206][ T2779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.237893][ T2779] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.246489][ T2779] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.253590][ T2779] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.261210][ T2779] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.269428][ T2779] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.277275][ T2779] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.288193][ T8530] device veth0_vlan entered promiscuous mode [ 72.308781][ T8544] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 72.345689][ T8544] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 72.408046][ T2779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.416986][ T2779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.425807][ T2779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.435146][ T2779] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.443963][ T2779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.454709][ T2779] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.464277][ T8530] device veth1_vlan entered promiscuous mode [ 72.471027][ T2779] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.479371][ T2779] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.497039][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.507624][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.542863][ T8533] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.562077][ T2771] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.570285][ T2771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.578723][ T2771] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.617037][ T8535] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.637969][ T8535] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.654048][ T8538] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.664172][ T2779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.672740][ T2779] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.699403][ T8544] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.732318][ T8541] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.771378][ T8538] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.803495][ T2779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.811187][ T2779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.825329][ T2779] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.832761][ T2779] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.847447][ T2779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.857491][ T2779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.875289][ T8544] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.885953][ T8535] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.945456][ T8535] device veth0_vlan entered promiscuous mode [ 72.964691][ T8535] device veth1_vlan entered promiscuous mode [ 73.007945][ T8541] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.813012][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 177.819862][ C0] rcu: 0-...!: (10499 ticks this GP) idle=eee/1/0x4000000000000002 softirq=13931/13931 fqs=8 [ 177.830539][ C0] (t=10500 jiffies g=6873 q=390) [ 177.835698][ C0] rcu: rcu_preempt kthread starved for 10480 jiffies! g6873 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 177.846877][ C0] rcu: RCU grace-period kthread stack dump: [ 177.852793][ C0] rcu_preempt R running task 28984 10 2 0x80004000 [ 177.860686][ C0] Call Trace: [ 177.863988][ C0] __schedule+0x9a0/0xcc0 [ 177.868321][ C0] schedule+0x181/0x210 [ 177.872467][ C0] schedule_timeout+0x14f/0x240 [ 177.877315][ C0] ? run_local_timers+0x120/0x120 [ 177.882336][ C0] rcu_gp_kthread+0xed8/0x1770 [ 177.887102][ C0] kthread+0x332/0x350 [ 177.891155][ C0] ? rcu_report_qs_rsp+0x140/0x140 [ 177.896264][ C0] ? kthread_blkcg+0xe0/0xe0 [ 177.900865][ C0] ret_from_fork+0x24/0x30 [ 177.905288][ C0] NMI backtrace for cpu 0 [ 177.909607][ C0] CPU: 0 PID: 2776 Comm: kworker/0:36 Not tainted 5.5.0-rc5-syzkaller #0 [ 177.918004][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 177.928068][ C0] Workqueue: ipv6_addrconf addrconf_dad_work [ 177.934032][ C0] Call Trace: [ 177.937305][ C0] [ 177.940159][ C0] dump_stack+0x1fb/0x318 [ 177.944484][ C0] nmi_cpu_backtrace+0xaf/0x1a0 [ 177.949425][ C0] ? nmi_trigger_cpumask_backtrace+0x16d/0x290 [ 177.955572][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 177.961634][ C0] nmi_trigger_cpumask_backtrace+0x174/0x290 [ 177.967611][ C0] arch_trigger_cpumask_backtrace+0x10/0x20 [ 177.973497][ C0] rcu_dump_cpu_stacks+0x15a/0x220 [ 177.978602][ C0] rcu_sched_clock_irq+0xe25/0x1ad0 [ 177.983816][ C0] ? trace_hardirqs_off+0x74/0x80 [ 177.988832][ C0] update_process_times+0x12d/0x180 [ 177.994041][ C0] tick_sched_timer+0x263/0x420 [ 177.998908][ C0] ? tick_setup_sched_timer+0x3d0/0x3d0 [ 178.004446][ C0] __hrtimer_run_queues+0x403/0x840 [ 178.009648][ C0] hrtimer_interrupt+0x38c/0xda0 [ 178.014683][ C0] ? debug_smp_processor_id+0x9/0x20 [ 178.019963][ C0] smp_apic_timer_interrupt+0x109/0x280 [ 178.025502][ C0] apic_timer_interrupt+0xf/0x20 [ 178.030443][ C0] [ 178.033386][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x14/0x50 [ 178.039528][ C0] Code: 00 00 00 48 8b 3d f4 f4 ed 07 48 89 de e8 84 f4 3b 00 5b 5d c3 cc 48 8b 04 24 65 48 8b 0c 25 c0 1d 02 00 65 8b 15 38 5f 8b 7e c2 00 01 1f 00 75 2c 8b 91 80 13 00 00 83 fa 02 75 21 48 8b 91 [ 178.059276][ C0] RSP: 0018:ffffc90007e9f8e0 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 178.067788][ C0] RAX: ffffffff81489244 RBX: ffffea00022c3340 RCX: ffff88809f39e540 [ 178.075758][ C0] RDX: 0000000000000001 RSI: 00000000fffffffc RDI: ffffea00022c3340 [ 178.083723][ C0] RBP: ffffc90007e9f920 R08: 000000000003a728 R09: fffffbfff124248a [ 178.091686][ C0] R10: fffffbfff124248a R11: 0000000000000000 R12: ffff88808b860620 [ 178.099652][ C0] R13: dffffc0000000000 R14: 1ffff1101170c0c4 R15: ffff8880a01b79f8 [ 178.107628][ C0] ? free_thread_stack+0x124/0x590 [ 178.112889][ C0] ? free_thread_stack+0x124/0x590 [ 178.117999][ C0] put_task_stack+0xa3/0x130 [ 178.122585][ C0] finish_task_switch+0x3f1/0x550 [ 178.127615][ C0] __schedule+0x9a8/0xcc0 [ 178.131962][ C0] ? debug_smp_processor_id+0x9/0x20 [ 178.137244][ C0] schedule+0x181/0x210 [ 178.141392][ C0] schedule_preempt_disabled+0x13/0x20 [ 178.146840][ C0] mutex_optimistic_spin+0x445/0x480 [ 178.152120][ C0] __mutex_lock_common+0x2e7/0x2e10 [ 178.157307][ C0] ? rtnl_lock+0x17/0x20 [ 178.161551][ C0] ? process_one_work+0x75d/0x10d0 [ 178.166659][ C0] mutex_lock_nested+0x1b/0x30 [ 178.171413][ C0] rtnl_lock+0x17/0x20 [ 178.175473][ C0] addrconf_dad_work+0x69/0x1c30 [ 178.180431][ C0] ? rcu_read_lock_sched_held+0x10b/0x170 [ 178.186157][ C0] process_one_work+0x7ef/0x10d0 [ 178.191107][ C0] worker_thread+0xc01/0x1630 [ 178.195801][ C0] kthread+0x332/0x350 [ 178.199860][ C0] ? rcu_lock_release+0x30/0x30 [ 178.204699][ C0] ? kthread_blkcg+0xe0/0xe0 [ 178.209290][ C0] ret_from_fork+0x24/0x30