[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 46.955213][ T25] audit: type=1800 audit(1575363887.546:25): pid=8188 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 46.986405][ T25] audit: type=1800 audit(1575363887.546:26): pid=8188 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 47.007241][ T25] audit: type=1800 audit(1575363887.546:27): pid=8188 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.10' (ECDSA) to the list of known hosts. 2019/12/03 09:04:59 fuzzer started 2019/12/03 09:05:01 dialing manager at 10.128.0.26:38907 2019/12/03 09:05:01 syscalls: 2697 2019/12/03 09:05:01 code coverage: enabled 2019/12/03 09:05:01 comparison tracing: enabled 2019/12/03 09:05:01 extra coverage: extra coverage is not supported by the kernel 2019/12/03 09:05:01 setuid sandbox: enabled 2019/12/03 09:05:01 namespace sandbox: enabled 2019/12/03 09:05:01 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/03 09:05:01 fault injection: enabled 2019/12/03 09:05:01 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/03 09:05:01 net packet injection: enabled 2019/12/03 09:05:01 net device setup: enabled 2019/12/03 09:05:01 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/12/03 09:05:01 devlink PCI setup: PCI device 0000:00:10.0 is not available 09:05:02 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000000)=0x14) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x0, 0x0) r1 = syz_open_dev$cec(0x0, 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3, 0x18, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = dup3(r2, r3, 0x0) dup2(r5, r4) lstat(&(0x7f0000000080)='./bus\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000280)) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000300)={0xa0, 0x8000000000000037, 0x0, {{0x0, 0x2, 0x0, 0x100, 0x2, 0x0, {0x0, 0x0, 0x0, 0x4, 0x1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9, r6, 0x0, 0x3, 0x1d81}}, {0x0, 0x10}}}, 0xa0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0xc4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$dmmidi(0x0, 0x800200300004, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) name_to_handle_at(0xffffffffffffffff, &(0x7f00002e4000)='./file\xff\xff', 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1400) 09:05:03 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, 0x0, 0xa, 0x0, 0x0, 0x0) syzkaller login: [ 62.569746][ T8354] IPVS: ftp: loaded support on port[0] = 21 09:05:03 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = semget(0x2, 0x0, 0x129) semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f0000000280)=""/145) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0x14, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r3}, @IFLA_GRE_FWMARK={0x8, 0x3, 0x10}]]}}}]}, 0x48}}, 0x0) [ 62.734498][ T8354] chnl_net:caif_netlink_parms(): no params data found [ 62.768643][ T8357] IPVS: ftp: loaded support on port[0] = 21 [ 62.846456][ T8354] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.869775][ T8354] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.880943][ T8354] device bridge_slave_0 entered promiscuous mode [ 62.910270][ T8354] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.917365][ T8354] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.924996][ T8359] IPVS: ftp: loaded support on port[0] = 21 [ 62.935760][ T8354] device bridge_slave_1 entered promiscuous mode [ 62.985758][ T8354] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.023829][ T8354] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 09:05:03 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x6b) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0815b5055e0bcfe87b3071") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f0000000100), 0xe) listen(r1, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0xffffffffffffffff, 0x18b3}, 0x8) close(r1) [ 63.087257][ T8354] team0: Port device team_slave_0 added [ 63.124628][ T8354] team0: Port device team_slave_1 added [ 63.213857][ T8354] device hsr_slave_0 entered promiscuous mode 09:05:03 executing program 4: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000840)='/dev/btrfs-control\x00', 0x20000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$IMCTRLREQ(0xffffffffffffffff, 0x80044945, 0x0) ioctl$VIDIOC_ENUMAUDIO(0xffffffffffffffff, 0xc0345641, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) open(0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) accept$packet(r1, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/attr/current\x00', 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xfebe) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'hsr0\x00', 0x0}) bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r3, &(0x7f0000000300)="0503000189063e0000000100c52cf7c25975e697b02f08006b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f", 0xfdb8, 0x80, 0x0, 0xfffffffffffffe57) [ 63.300000][ T8354] device hsr_slave_1 entered promiscuous mode [ 63.342002][ T8357] chnl_net:caif_netlink_parms(): no params data found [ 63.401481][ T8363] IPVS: ftp: loaded support on port[0] = 21 [ 63.455105][ T8359] chnl_net:caif_netlink_parms(): no params data found [ 63.484372][ T8357] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.494411][ T8357] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.502656][ T8357] device bridge_slave_0 entered promiscuous mode 09:05:04 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000480)='/dev/video#\x00', 0x3f, 0x0) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000200)={0x800000000001}) [ 63.553047][ T8357] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.560432][ T8357] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.568603][ T8357] device bridge_slave_1 entered promiscuous mode [ 63.581472][ T8354] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.659593][ T8365] IPVS: ftp: loaded support on port[0] = 21 [ 63.666124][ T8354] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.712139][ T8354] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.742776][ T8354] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.797427][ T8357] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.810124][ T8357] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.842770][ T8359] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.851095][ T8359] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.858814][ T8359] device bridge_slave_0 entered promiscuous mode [ 63.878206][ T8367] IPVS: ftp: loaded support on port[0] = 21 [ 63.899372][ T8359] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.906867][ T8359] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.915182][ T8359] device bridge_slave_1 entered promiscuous mode [ 63.932655][ T8357] team0: Port device team_slave_0 added [ 63.959374][ T8357] team0: Port device team_slave_1 added [ 63.971027][ T8359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.984217][ T8359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.037442][ T8359] team0: Port device team_slave_0 added [ 64.102818][ T8357] device hsr_slave_0 entered promiscuous mode [ 64.140046][ T8357] device hsr_slave_1 entered promiscuous mode [ 64.179949][ T8357] debugfs: Directory 'hsr0' with parent '/' already present! [ 64.190541][ T8359] team0: Port device team_slave_1 added [ 64.261473][ T8363] chnl_net:caif_netlink_parms(): no params data found [ 64.282755][ T8365] chnl_net:caif_netlink_parms(): no params data found [ 64.324029][ T8367] chnl_net:caif_netlink_parms(): no params data found [ 64.382236][ T8359] device hsr_slave_0 entered promiscuous mode [ 64.420095][ T8359] device hsr_slave_1 entered promiscuous mode [ 64.469857][ T8359] debugfs: Directory 'hsr0' with parent '/' already present! [ 64.525074][ T8354] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.533411][ T8363] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.541386][ T8363] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.549427][ T8363] device bridge_slave_0 entered promiscuous mode [ 64.564902][ T8357] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.627403][ T8357] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.673436][ T8363] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.680736][ T8363] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.688877][ T8363] device bridge_slave_1 entered promiscuous mode [ 64.714110][ T8357] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.764447][ T8363] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.776101][ T8363] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.789234][ T8365] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.796492][ T8365] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.804509][ T8365] device bridge_slave_0 entered promiscuous mode [ 64.813009][ T8365] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.820830][ T8365] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.828487][ T8365] device bridge_slave_1 entered promiscuous mode [ 64.835773][ T8357] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.941413][ T8363] team0: Port device team_slave_0 added [ 64.947809][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.956321][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.967015][ T8354] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.974859][ T8367] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.982430][ T8367] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.990719][ T8367] device bridge_slave_0 entered promiscuous mode [ 64.999034][ T8365] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.013243][ T8365] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.027010][ T8363] team0: Port device team_slave_1 added [ 65.045570][ T8367] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.053285][ T8367] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.062396][ T8367] device bridge_slave_1 entered promiscuous mode [ 65.077163][ T8359] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 65.123239][ T2977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.132641][ T2977] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.141501][ T2977] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.148750][ T2977] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.157196][ T2977] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.167322][ T2977] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.176032][ T2977] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.183149][ T2977] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.191672][ T2977] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.225159][ T8365] team0: Port device team_slave_0 added [ 65.231478][ T8359] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 65.264375][ T8367] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.277984][ T8365] team0: Port device team_slave_1 added [ 65.287178][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.341867][ T8363] device hsr_slave_0 entered promiscuous mode [ 65.381028][ T8363] device hsr_slave_1 entered promiscuous mode [ 65.420602][ T8363] debugfs: Directory 'hsr0' with parent '/' already present! [ 65.428581][ T8359] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 65.481422][ T8359] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 65.522620][ T8367] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.548364][ T8367] team0: Port device team_slave_0 added [ 65.561668][ T8368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.570957][ T8368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.579496][ T8368] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.604189][ T8367] team0: Port device team_slave_1 added [ 65.612092][ T8368] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.625189][ T8357] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.671549][ T8365] device hsr_slave_0 entered promiscuous mode [ 65.702812][ T8365] device hsr_slave_1 entered promiscuous mode [ 65.739887][ T8365] debugfs: Directory 'hsr0' with parent '/' already present! [ 65.750947][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.759490][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.825751][ T8357] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.901643][ T8367] device hsr_slave_0 entered promiscuous mode [ 65.940068][ T8367] device hsr_slave_1 entered promiscuous mode [ 65.979882][ T8367] debugfs: Directory 'hsr0' with parent '/' already present! [ 65.987552][ T8363] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 66.033220][ T8368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.042878][ T8368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.051145][ T8368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.060556][ T8368] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.069502][ T8368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.078470][ T8368] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.087035][ T8368] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.094158][ T8368] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.102696][ T8368] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.136080][ T8365] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 66.171999][ T8363] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 66.206488][ T8354] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.219034][ T8354] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.227629][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.237390][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.246190][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.253302][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.261120][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.271045][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.279991][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.288720][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.297404][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.305856][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.314770][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.324113][ T2977] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.333650][ T2977] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.345229][ T8365] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 66.401734][ T8363] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 66.442681][ T8363] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 66.509537][ T8357] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 66.521099][ T8357] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.551605][ T8365] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 66.602600][ T8365] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 66.656832][ T2977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.668510][ T2977] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.677249][ T2977] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.686921][ T2977] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.695536][ T2977] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.706980][ T8367] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 66.752372][ T8367] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 66.803372][ T8367] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 66.862909][ T8367] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 66.914937][ T8359] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.935274][ T2977] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.943242][ T2977] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.976807][ T8359] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.986288][ T8354] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.006390][ T8368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.014462][ T8368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.037149][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.045121][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.059033][ T8357] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.121194][ T2977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.131927][ T2977] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.141114][ T2977] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.148187][ T2977] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.156811][ T2977] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.165717][ T2977] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.174624][ T2977] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.182338][ T2977] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.191021][ T2977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.200222][ T2977] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.208852][ T2977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.217984][ T2977] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.226705][ T2977] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.235361][ T2977] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.251450][ T8365] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.272918][ T8363] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.291742][ T8368] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.305561][ T8368] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.321371][ T8368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.331202][ T8368] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.340435][ T8368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.353933][ T8368] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.370251][ T8359] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.400112][ T2977] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.414979][ T2977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 172.379623][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 172.386585][ C1] rcu: 1-...!: (10499 ticks this GP) idle=b6e/1/0x4000000000000002 softirq=10817/10817 fqs=2 [ 172.397247][ C1] (t=10501 jiffies g=7073 q=118) [ 172.402265][ C1] rcu: rcu_preempt kthread starved for 10498 jiffies! g7073 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 172.413345][ C1] rcu: RCU grace-period kthread stack dump: [ 172.419221][ C1] rcu_preempt R running task 28536 10 2 0x80004000 [ 172.427149][ C1] Call Trace: [ 172.430453][ C1] __schedule+0x9a0/0xcc0 [ 172.434777][ C1] schedule+0x181/0x210 [ 172.438924][ C1] schedule_timeout+0x14f/0x240 [ 172.443761][ C1] ? run_local_timers+0x120/0x120 [ 172.448776][ C1] rcu_gp_kthread+0xed8/0x1770 [ 172.453544][ C1] kthread+0x332/0x350 [ 172.457598][ C1] ? rcu_report_qs_rsp+0x140/0x140 [ 172.462693][ C1] ? kthread_blkcg+0xe0/0xe0 [ 172.467268][ C1] ret_from_fork+0x24/0x30 [ 172.471690][ C1] NMI backtrace for cpu 1 [ 172.476011][ C1] CPU: 1 PID: 8375 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0 [ 172.484228][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 172.494274][ C1] Call Trace: [ 172.497539][ C1] [ 172.500378][ C1] dump_stack+0x1fb/0x318 [ 172.504710][ C1] nmi_cpu_backtrace+0xaf/0x1a0 [ 172.509546][ C1] ? nmi_trigger_cpumask_backtrace+0x16d/0x290 [ 172.515685][ C1] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 172.521737][ C1] nmi_trigger_cpumask_backtrace+0x174/0x290 [ 172.527704][ C1] arch_trigger_cpumask_backtrace+0x10/0x20 [ 172.533584][ C1] rcu_dump_cpu_stacks+0x15a/0x220 [ 172.538775][ C1] rcu_sched_clock_irq+0xe25/0x1ad0 [ 172.543964][ C1] ? trace_hardirqs_off+0x74/0x80 [ 172.548978][ C1] update_process_times+0x12d/0x180 [ 172.554174][ C1] tick_sched_timer+0x263/0x420 [ 172.559016][ C1] ? tick_setup_sched_timer+0x3d0/0x3d0 [ 172.564555][ C1] __hrtimer_run_queues+0x403/0x840 [ 172.569755][ C1] hrtimer_interrupt+0x38c/0xda0 [ 172.574967][ C1] ? debug_smp_processor_id+0x9/0x20 [ 172.580685][ C1] smp_apic_timer_interrupt+0x109/0x280 [ 172.586238][ C1] apic_timer_interrupt+0xf/0x20 [ 172.591162][ C1] [ 172.594090][ C1] RIP: 0010:free_thread_stack+0x16d/0x590 [ 172.599796][ C1] Code: c3 08 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 25 a4 69 00 48 8b 3b be fc ff ff ff e8 28 04 00 00 43 80 3c 2e 00 <74> 08 4c 89 e7 e8 09 a4 69 00 49 8b 1c 24 48 83 c3 08 48 89 d8 48 [ 172.619550][ C1] RSP: 0018:ffffc90002047c70 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 172.627988][ C1] RAX: ffffffff81487433 RBX: ffff888091526d88 RCX: ffff888095f901c0 [ 172.635972][ C1] RDX: 0000000000000000 RSI: 00000000fffffffc RDI: ffffea00026d9980 [ 172.643957][ C1] RBP: ffffc90002047ca8 R08: dffffc0000000000 R09: fffffbfff1287025 [ 172.651940][ C1] R10: fffffbfff1287025 R11: 0000000000000000 R12: ffff888091526e20 [ 172.659908][ C1] R13: dffffc0000000000 R14: 1ffff110122a4dc4 R15: ffff888098eaf7e8 [ 172.668674][ C1] ? mod_memcg_page_state+0x123/0x190 [ 172.674223][ C1] put_task_stack+0xa3/0x130 [ 172.678802][ C1] finish_task_switch+0x3f1/0x550 [ 172.683904][ C1] __schedule+0x9a8/0xcc0 [ 172.688233][ C1] ? ___preempt_schedule+0x16/0x18 [ 172.693330][ C1] preempt_schedule+0xdb/0x120 [ 172.698079][ C1] ___preempt_schedule+0x16/0x18 [ 172.703013][ C1] ? do_group_exit+0x2a8/0x2b0 [ 172.707767][ C1] _raw_spin_unlock_irq+0x77/0x80 [ 172.712786][ C1] do_group_exit+0x2a8/0x2b0 [ 172.717369][ C1] __do_sys_exit_group+0x17/0x20 [ 172.722298][ C1] __se_sys_exit_group+0x14/0x20 [ 172.727223][ C1] __x64_sys_exit_group+0x3b/0x40 [ 172.732321][ C1] do_syscall_64+0xf7/0x1c0 [ 172.736818][ C1] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 172.742699][ C1] RIP: 0033:0x45a679 [ 172.746774][ C1] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 172.766459][ C1] RSP: 002b:00007ffcd7983b98 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 172.774862][ C1] RAX: ffffffffffffffda RBX: 000000000000001e RCX: 000000000045a679 [ 172.782829][ C1] RDX: 0000000000414211 RSI: fffffffffffffff7 RDI: 0000000000000000 [ 172.790931][ C1] RBP: 0000000000000000 R08: ffffffffffffffff R09: 00007ffcd7983bf0 [ 172.798997][ C1] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 172.807026][ C1] R13: 00007ffcd7983bf0 R14: 0000000000000000 R15: 00007ffcd7983c00