[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 45.278773][ T23] audit: type=1800 audit(1575408608.617:25): pid=8099 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 45.299070][ T23] audit: type=1800 audit(1575408608.627:26): pid=8099 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 45.333594][ T23] audit: type=1800 audit(1575408608.627:27): pid=8099 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.27' (ECDSA) to the list of known hosts. 2019/12/03 21:30:16 fuzzer started 2019/12/03 21:30:18 dialing manager at 10.128.0.26:42111 2019/12/03 21:30:18 syscalls: 2689 2019/12/03 21:30:18 code coverage: enabled 2019/12/03 21:30:18 comparison tracing: enabled 2019/12/03 21:30:18 extra coverage: extra coverage is not supported by the kernel 2019/12/03 21:30:18 setuid sandbox: enabled 2019/12/03 21:30:18 namespace sandbox: enabled 2019/12/03 21:30:18 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/03 21:30:18 fault injection: enabled 2019/12/03 21:30:18 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/03 21:30:18 net packet injection: enabled 2019/12/03 21:30:18 net device setup: enabled 2019/12/03 21:30:18 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/12/03 21:30:18 devlink PCI setup: PCI device 0000:00:10.0 is not available 21:30:19 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0xbb8) 21:30:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736671004800020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3"], 0x74}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="7c0000002c00010700"/20, @ANYRES32=r3, @ANYBLOB="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"], 0x7c}}, 0x0) r4 = socket(0x4000000000010, 0x1000000000080002, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmmsg$alg(r4, &(0x7f0000000140), 0x42, 0x0) syzkaller login: [ 56.291164][ T8265] IPVS: ftp: loaded support on port[0] = 21 21:30:19 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000004c0)={0xa, 0x100, 0x2, @mcast2, 0x3}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @mcast2, 0x8}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x0, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000380)="08958fa10b18a2421366cee1bf9b7a4055fa3fd18a411a7ea62a371525aa36535b1c447725d68f51a2d0d8381c8453bc54927135f4da15770c572051954e87db8d99fff6656f30a5bc64253e030d72894a7e7410329eb2e69ca3000f2e31a59254d5fa41ffc1b96bcf5b678d15f251b1e383b6699f000c3d0dcfd9bf65c98302bf1bca9b49b4c5cf5f268dae96dfcab545af0916784c8cd50ee1e4f0eb830c6fd7bc0a6a4933eed673fac6a2bd694f7a2a615bf5764142ae47ec682dc333332e2f2ea35b4b517ea02522abd6f8237db791b38227076a24bdb7602d02e7b210bddf62ea9304b890f17948b8d22720", 0xee, 0x0, 0x0, 0x0) getpid() socket$inet6(0xa, 0x2, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3, 0xffff}, 0x0) rmdir(&(0x7f0000000140)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x2) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, 0x0, &(0x7f0000000340)) socket(0x1000000010, 0x400000400080803, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f00000014c0)=""/205, &(0x7f0000000100)=0xfffffffffffffc87) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @remote, @remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@remote, @in=@empty}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f0000000000)=0xffffffffffffff89) [ 56.456166][ T8268] IPVS: ftp: loaded support on port[0] = 21 [ 56.469947][ T8265] chnl_net:caif_netlink_parms(): no params data found [ 56.552346][ T8265] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.560822][ T8265] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.569002][ T8265] device bridge_slave_0 entered promiscuous mode [ 56.578346][ T8265] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.585878][ T8265] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.594364][ T8265] device bridge_slave_1 entered promiscuous mode [ 56.619196][ T8265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.634874][ T8265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.665052][ T8265] team0: Port device team_slave_0 added [ 56.679049][ T8265] team0: Port device team_slave_1 added 21:30:20 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000005a001f00ff03f4f9002304000a04f51108000500020100020800028001000000", 0x24) [ 56.773673][ T8265] device hsr_slave_0 entered promiscuous mode [ 56.830634][ T8265] device hsr_slave_1 entered promiscuous mode [ 56.974743][ T8268] chnl_net:caif_netlink_parms(): no params data found [ 56.980711][ T8271] IPVS: ftp: loaded support on port[0] = 21 21:30:20 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000002a000509d25a0004000000000300fc0010000b4002000000053582c137153e370900098000f01700d1bd", 0x2e}], 0x1}, 0x0) [ 57.019236][ T8273] IPVS: ftp: loaded support on port[0] = 21 [ 57.093801][ T8265] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 57.155516][ T8265] netdevsim netdevsim0 netdevsim1: renamed from eth1 21:30:20 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x334, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x60, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c832, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x101000, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) fallocate(r0, 0x2, 0x5, 0x3) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)=0x0) fcntl$lock(r0, 0x5, &(0x7f0000000200)={0x3, 0x0, 0x100000000, 0x573, r1}) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f00000004c0)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000030000000000931c640000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a270c904"], 0x58) shutdown(r0, 0x0) bind$inet(r0, &(0x7f0000dc9ff0)={0x2, 0x4e20}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 57.302720][ T8268] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.309905][ T8268] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.319811][ T8268] device bridge_slave_0 entered promiscuous mode [ 57.329672][ T8265] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 57.374249][ T8265] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 57.414598][ T8268] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.422620][ T8268] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.430626][ T8268] device bridge_slave_1 entered promiscuous mode [ 57.449652][ T8268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.477657][ T8277] IPVS: ftp: loaded support on port[0] = 21 [ 57.487560][ T8268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.515462][ T8275] IPVS: ftp: loaded support on port[0] = 21 [ 57.544290][ T8268] team0: Port device team_slave_0 added [ 57.552295][ T8268] team0: Port device team_slave_1 added [ 57.636038][ T8273] chnl_net:caif_netlink_parms(): no params data found [ 57.652350][ T8271] chnl_net:caif_netlink_parms(): no params data found [ 57.712165][ T8268] device hsr_slave_0 entered promiscuous mode [ 57.750653][ T8268] device hsr_slave_1 entered promiscuous mode [ 57.791067][ T8268] debugfs: Directory 'hsr0' with parent '/' already present! [ 57.856598][ T8273] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.863841][ T8273] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.871805][ T8273] device bridge_slave_0 entered promiscuous mode [ 57.901447][ T8273] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.908738][ T8273] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.917128][ T8273] device bridge_slave_1 entered promiscuous mode [ 57.950362][ T8268] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 57.992595][ T8271] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.999675][ T8271] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.008285][ T8271] device bridge_slave_0 entered promiscuous mode [ 58.017183][ T8271] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.024315][ T8271] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.032332][ T8271] device bridge_slave_1 entered promiscuous mode [ 58.051967][ T8271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.066671][ T8268] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 58.122965][ T8268] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 58.190839][ T8271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.200120][ T8277] chnl_net:caif_netlink_parms(): no params data found [ 58.210282][ T8273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.221891][ T8273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.239740][ T8268] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 58.304392][ T8273] team0: Port device team_slave_0 added [ 58.314243][ T8273] team0: Port device team_slave_1 added [ 58.333114][ T8275] chnl_net:caif_netlink_parms(): no params data found [ 58.369890][ T8277] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.377310][ T8277] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.387834][ T8277] device bridge_slave_0 entered promiscuous mode [ 58.397274][ T8271] team0: Port device team_slave_0 added [ 58.414040][ T8271] team0: Port device team_slave_1 added [ 58.423621][ T8277] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.431539][ T8277] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.439474][ T8277] device bridge_slave_1 entered promiscuous mode [ 58.532100][ T8273] device hsr_slave_0 entered promiscuous mode [ 58.590685][ T8273] device hsr_slave_1 entered promiscuous mode [ 58.630329][ T8273] debugfs: Directory 'hsr0' with parent '/' already present! [ 58.702174][ T8271] device hsr_slave_0 entered promiscuous mode [ 58.780706][ T8271] device hsr_slave_1 entered promiscuous mode [ 58.830488][ T8271] debugfs: Directory 'hsr0' with parent '/' already present! [ 58.856171][ T8275] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.864106][ T8275] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.873908][ T8275] device bridge_slave_0 entered promiscuous mode [ 58.884062][ T8275] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.892170][ T8275] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.899836][ T8275] device bridge_slave_1 entered promiscuous mode [ 58.914755][ T8277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.927559][ T8277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.939883][ T8265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.965645][ T8265] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.986118][ T8277] team0: Port device team_slave_0 added [ 58.995773][ T8277] team0: Port device team_slave_1 added [ 59.005313][ T3104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.013961][ T3104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.027797][ T8275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.039050][ T8275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.064783][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.074060][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.084045][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.091262][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.100768][ T8278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.139513][ T8271] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 59.176567][ T8278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.187689][ T8278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.196561][ T8278] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.203946][ T8278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.214667][ T8275] team0: Port device team_slave_0 added [ 59.262954][ T8277] device hsr_slave_0 entered promiscuous mode [ 59.320640][ T8277] device hsr_slave_1 entered promiscuous mode [ 59.380334][ T8277] debugfs: Directory 'hsr0' with parent '/' already present! [ 59.398905][ T8271] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 59.452923][ T8273] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 59.513141][ T8275] team0: Port device team_slave_1 added [ 59.518854][ T8273] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 59.583065][ T8273] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 59.644770][ T8273] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 59.693663][ T2960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.708278][ T8271] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 59.767927][ T8268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.777927][ T8271] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 59.893850][ T8275] device hsr_slave_0 entered promiscuous mode [ 59.930643][ T8275] device hsr_slave_1 entered promiscuous mode [ 59.970359][ T8275] debugfs: Directory 'hsr0' with parent '/' already present! [ 59.978100][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.990288][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.998885][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.008380][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.016979][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.025590][ T8277] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 60.081921][ T8277] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 60.132585][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.144278][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.152509][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.168577][ T8268] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.176572][ T8277] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 60.242241][ T8277] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 60.315370][ T8278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.323814][ T8278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.344755][ T8265] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.357723][ T8265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.367219][ T8275] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 60.401999][ T8275] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 60.452907][ T2960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.461496][ T2960] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.469730][ T2960] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.476823][ T2960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.484439][ T2960] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.493160][ T2960] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.501490][ T2960] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.508544][ T2960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.516314][ T2960] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.524734][ T2960] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.533130][ T2960] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.562116][ T8275] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 60.603935][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.613028][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.622010][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.632304][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.641377][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.649725][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.664009][ T8265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.675820][ T8275] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 60.733888][ T8278] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.743077][ T8278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.752683][ T8278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.796971][ T8283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.808916][ T8283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.818099][ T8283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.826604][ T8283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.841554][ T8268] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.886089][ T8271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.928614][ T8273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.968832][ T8277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.991957][ T8277] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.064075][ T8277] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 61.095335][ T8277] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.158625][ T8277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.900158][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 165.906992][ C1] rcu: 1-...!: (10499 ticks this GP) idle=eea/1/0x4000000000000002 softirq=11402/11402 fqs=12 [ 165.917561][ C1] (t=10500 jiffies g=6497 q=1496) [ 165.922667][ C1] rcu: rcu_preempt kthread starved for 10472 jiffies! g6497 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 165.933844][ C1] rcu: RCU grace-period kthread stack dump: [ 165.939717][ C1] rcu_preempt R running task 29032 10 2 0x80004000 [ 165.947607][ C1] Call Trace: [ 165.950891][ C1] __schedule+0x9a0/0xcc0 [ 165.955213][ C1] schedule+0x181/0x210 [ 165.959371][ C1] schedule_timeout+0x14f/0x240 [ 165.964220][ C1] ? run_local_timers+0x120/0x120 [ 165.969227][ C1] rcu_gp_kthread+0xed8/0x1770 [ 165.973987][ C1] kthread+0x332/0x350 [ 165.978038][ C1] ? rcu_report_qs_rsp+0x140/0x140 [ 165.983267][ C1] ? kthread_blkcg+0xe0/0xe0 [ 165.987892][ C1] ret_from_fork+0x24/0x30 [ 165.992327][ C1] NMI backtrace for cpu 1 [ 165.996659][ C1] CPU: 1 PID: 8275 Comm: syz-executor.4 Not tainted 5.4.0-syzkaller #0 [ 166.004973][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 166.015132][ C1] Call Trace: [ 166.018423][ C1] [ 166.021274][ C1] dump_stack+0x1fb/0x318 [ 166.025599][ C1] nmi_cpu_backtrace+0xaf/0x1a0 [ 166.030442][ C1] ? nmi_trigger_cpumask_backtrace+0x16d/0x290 [ 166.036709][ C1] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 166.042797][ C1] nmi_trigger_cpumask_backtrace+0x174/0x290 [ 166.048799][ C1] arch_trigger_cpumask_backtrace+0x10/0x20 [ 166.054689][ C1] rcu_dump_cpu_stacks+0x15a/0x220 [ 166.059806][ C1] rcu_sched_clock_irq+0xe25/0x1ad0 [ 166.065005][ C1] ? trace_hardirqs_off+0x74/0x80 [ 166.070028][ C1] update_process_times+0x12d/0x180 [ 166.075237][ C1] tick_sched_timer+0x263/0x420 [ 166.080082][ C1] ? tick_setup_sched_timer+0x3d0/0x3d0 [ 166.085629][ C1] __hrtimer_run_queues+0x403/0x840 [ 166.090829][ C1] hrtimer_interrupt+0x38c/0xda0 [ 166.095770][ C1] ? debug_smp_processor_id+0x9/0x20 [ 166.101047][ C1] smp_apic_timer_interrupt+0x109/0x280 [ 166.106576][ C1] apic_timer_interrupt+0xf/0x20 [ 166.111494][ C1] [ 166.114422][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x22/0x50 [ 166.120646][ C1] Code: 64 02 3b 00 5b 5d c3 cc 48 8b 04 24 65 48 8b 0c 25 c0 1d 02 00 65 8b 15 b8 81 8b 7e f7 c2 00 01 1f 00 75 2c 8b 91 80 13 00 00 <83> fa 02 75 21 48 8b 91 88 13 00 00 48 8b 32 48 8d 7e 01 8b 89 84 [ 166.140259][ C1] RSP: 0018:ffffc90002407a20 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 166.148667][ C1] RAX: ffffffff81487326 RBX: ffffea00028ddb40 RCX: ffff88808e53a080 [ 166.156628][ C1] RDX: 0000000000000000 RSI: 00000000fffffffc RDI: ffffea00028ddb40 [ 166.164591][ C1] RBP: ffffc90002407a48 R08: 000000000003a768 R09: ffffed10151b0f0f [ 166.172642][ C1] R10: ffffed10151b0f0f R11: 0000000000000000 R12: ffff888094630320 [ 166.180601][ C1] R13: dffffc0000000000 R14: 00000000fffffffc R15: ffff8880a8d87868 [ 166.188579][ C1] ? mod_memcg_page_state+0x16/0x190 [ 166.193858][ C1] ? mod_memcg_page_state+0x16/0x190 [ 166.199131][ C1] free_thread_stack+0x168/0x590 [ 166.204061][ C1] put_task_stack+0xa3/0x130 [ 166.208639][ C1] finish_task_switch+0x3f1/0x550 [ 166.213658][ C1] __schedule+0x9a8/0xcc0 [ 166.217996][ C1] ? ___preempt_schedule+0x16/0x18 [ 166.223095][ C1] preempt_schedule+0xdb/0x120 [ 166.227843][ C1] ___preempt_schedule+0x16/0x18 [ 166.232770][ C1] _raw_spin_unlock+0x3a/0x40 [ 166.237438][ C1] unix_release_sock+0x298/0x9a0 [ 166.242381][ C1] unix_release+0x4e/0x80 [ 166.246723][ C1] sock_close+0xe1/0x260 [ 166.250967][ C1] ? sock_mmap+0xa0/0xa0 [ 166.255238][ C1] __fput+0x2e4/0x740 [ 166.259249][ C1] ____fput+0x15/0x20 [ 166.263227][ C1] task_work_run+0x17e/0x1b0 [ 166.267815][ C1] prepare_exit_to_usermode+0x483/0x5b0 [ 166.273364][ C1] syscall_return_slowpath+0x113/0x4a0 [ 166.278823][ C1] do_syscall_64+0x11f/0x1c0 [ 166.283413][ C1] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 166.289295][ C1] RIP: 0033:0x45e433 [ 166.293181][ C1] Code: 48 89 ee 48 89 e7 e8 2c 1f fa ff 31 c0 48 89 e2 be 33 89 00 00 89 df e8 bb c0 ff ff 85 c0 78 17 48 63 fb b8 03 00 00 00 0f 05 <8b> 44 24 10 48 83 c4 38 5b 5d c3 66 90 48 c7 c2 d4 ff ff ff 48 63 [ 166.312775][ C1] RSP: 002b:00007fff37cee720 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 166.321168][ C1] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 000000000045e433 [ 166.329149][ C1] RDX: 00007fff37cee720 RSI: 0000000000008933 RDI: 0000000000000004 [ 166.337110][ C1] RBP: 00000000004bfb0b R08: 0000000000000008 R09: 00007fff37cee808 [ 166.345067][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000004bfb0b [ 166.353030][ C1] R13: 0000000000000000 R14: 0000000000000003 R15: 00007fff37cee808