[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 52.614959][ T23] audit: type=1800 audit(1578450840.495:25): pid=8336 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 52.645179][ T23] audit: type=1800 audit(1578450840.495:26): pid=8336 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 52.693545][ T23] audit: type=1800 audit(1578450840.495:27): pid=8336 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.239' (ECDSA) to the list of known hosts. 2020/01/08 02:34:09 fuzzer started 2020/01/08 02:34:10 dialing manager at 10.128.0.26:35703 2020/01/08 02:34:10 syscalls: 2824 2020/01/08 02:34:10 code coverage: enabled 2020/01/08 02:34:10 comparison tracing: enabled 2020/01/08 02:34:10 extra coverage: enabled 2020/01/08 02:34:10 setuid sandbox: enabled 2020/01/08 02:34:10 namespace sandbox: enabled 2020/01/08 02:34:10 Android sandbox: /sys/fs/selinux/policy does not exist 2020/01/08 02:34:10 fault injection: enabled 2020/01/08 02:34:10 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/01/08 02:34:10 net packet injection: enabled 2020/01/08 02:34:10 net device setup: enabled 2020/01/08 02:34:10 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/01/08 02:34:10 devlink PCI setup: PCI device 0000:00:10.0 is not available 02:34:11 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x10, 0x4, 0x4, 0x4, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r3, &(0x7f0000000340), &(0x7f0000000400)='\a'}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000c88000)={r3, &(0x7f0000847f95), &(0x7f000089b000)}, 0x18) 02:34:11 executing program 1: openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) syzkaller login: [ 64.051968][ T8503] IPVS: ftp: loaded support on port[0] = 21 02:34:12 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/fb0\x00', 0x67514c7366170ade, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0x401}) [ 64.217699][ T8506] IPVS: ftp: loaded support on port[0] = 21 [ 64.240019][ T8503] chnl_net:caif_netlink_parms(): no params data found [ 64.315030][ T8503] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.322941][ T8503] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.331216][ T8503] device bridge_slave_0 entered promiscuous mode [ 64.340949][ T8503] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.348051][ T8503] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.357398][ T8503] device bridge_slave_1 entered promiscuous mode [ 64.376994][ T8503] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.403083][ T8503] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.433954][ T8503] team0: Port device team_slave_0 added [ 64.456589][ T8503] team0: Port device team_slave_1 added 02:34:12 executing program 3: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000880)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x800000000000, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x3f00, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000900)='/dev/mixer\x00', 0x2, 0x0) [ 64.542407][ T8503] device hsr_slave_0 entered promiscuous mode [ 64.581101][ T8503] device hsr_slave_1 entered promiscuous mode [ 64.649647][ T8508] IPVS: ftp: loaded support on port[0] = 21 [ 64.658959][ T8511] IPVS: ftp: loaded support on port[0] = 21 [ 64.712723][ T8506] chnl_net:caif_netlink_parms(): no params data found 02:34:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000007c0)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x20, r1, 0x5, 0x0, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ADDR={0x4}]}]}, 0x20}}, 0x0) [ 64.809688][ T8506] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.818298][ T8506] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.826568][ T8506] device bridge_slave_0 entered promiscuous mode [ 64.853521][ T8506] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.861739][ T8506] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.869607][ T8506] device bridge_slave_1 entered promiscuous mode [ 64.966901][ T8506] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.982908][ T8506] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.011681][ T8503] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.085521][ T8503] netdevsim netdevsim0 netdevsim1: renamed from eth1 02:34:13 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000200)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x20000140, 0x20000170, 0x200001a0], 0x0, 0x0, &(0x7f0000000140)=[{0x0, '\x00', 0x6, 0xffffffffffffffff}, {}, {}]}, 0x108) [ 65.134159][ T8503] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.227692][ T8503] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.285295][ T8506] team0: Port device team_slave_0 added [ 65.297694][ T8514] IPVS: ftp: loaded support on port[0] = 21 [ 65.304420][ T8511] chnl_net:caif_netlink_parms(): no params data found [ 65.327650][ T8508] chnl_net:caif_netlink_parms(): no params data found [ 65.337790][ T8506] team0: Port device team_slave_1 added [ 65.360663][ T8517] IPVS: ftp: loaded support on port[0] = 21 [ 65.403499][ T8506] device hsr_slave_0 entered promiscuous mode [ 65.452523][ T8506] device hsr_slave_1 entered promiscuous mode [ 65.491412][ T8506] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.499171][ T8506] Cannot create hsr debugfs directory [ 65.548924][ T8511] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.556163][ T8511] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.564189][ T8511] device bridge_slave_0 entered promiscuous mode [ 65.589761][ T8511] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.596929][ T8511] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.605115][ T8511] device bridge_slave_1 entered promiscuous mode [ 65.639949][ T8511] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.653605][ T8511] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.672618][ T8508] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.679736][ T8508] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.688404][ T8508] device bridge_slave_0 entered promiscuous mode [ 65.698567][ T8508] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.705752][ T8508] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.713680][ T8508] device bridge_slave_1 entered promiscuous mode [ 65.745763][ T8511] team0: Port device team_slave_0 added [ 65.753822][ T8511] team0: Port device team_slave_1 added [ 65.774838][ T8508] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.785739][ T8508] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.824833][ T8506] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 65.881375][ T8508] team0: Port device team_slave_0 added [ 65.888791][ T8508] team0: Port device team_slave_1 added [ 65.901159][ T8506] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 65.932933][ T8506] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 66.043599][ T8511] device hsr_slave_0 entered promiscuous mode [ 66.091351][ T8511] device hsr_slave_1 entered promiscuous mode [ 66.131286][ T8511] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.138879][ T8511] Cannot create hsr debugfs directory [ 66.145427][ T8506] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 66.250971][ T8514] chnl_net:caif_netlink_parms(): no params data found [ 66.324250][ T8508] device hsr_slave_0 entered promiscuous mode [ 66.361175][ T8508] device hsr_slave_1 entered promiscuous mode [ 66.390867][ T8508] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.398426][ T8508] Cannot create hsr debugfs directory [ 66.434652][ T8517] chnl_net:caif_netlink_parms(): no params data found [ 66.522839][ T8514] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.530182][ T8514] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.537833][ T8514] device bridge_slave_0 entered promiscuous mode [ 66.548480][ T8514] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.555729][ T8514] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.563712][ T8514] device bridge_slave_1 entered promiscuous mode [ 66.629650][ T8514] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.642382][ T8517] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.649638][ T8517] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.657507][ T8517] device bridge_slave_0 entered promiscuous mode [ 66.665895][ T8517] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.673047][ T8517] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.680628][ T8517] device bridge_slave_1 entered promiscuous mode [ 66.703817][ T8511] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 66.743888][ T8514] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.759440][ T8517] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.771500][ T8508] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 66.803956][ T8511] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 66.867717][ T8511] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 66.925262][ T8503] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.934451][ T8517] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.944616][ T8508] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 66.994014][ T8514] team0: Port device team_slave_0 added [ 66.999927][ T8508] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 67.053002][ T8511] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 67.104840][ T8514] team0: Port device team_slave_1 added [ 67.111909][ T8508] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 67.145958][ T8517] team0: Port device team_slave_0 added [ 67.159789][ T8517] team0: Port device team_slave_1 added [ 67.173101][ T8506] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.199989][ T8503] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.216236][ T2762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.224963][ T2762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.263892][ T8514] device hsr_slave_0 entered promiscuous mode [ 67.311165][ T8514] device hsr_slave_1 entered promiscuous mode [ 67.350958][ T8514] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.358564][ T8514] Cannot create hsr debugfs directory [ 67.412076][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.419673][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.483896][ T8517] device hsr_slave_0 entered promiscuous mode [ 67.522111][ T8517] device hsr_slave_1 entered promiscuous mode [ 67.560876][ T8517] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.568452][ T8517] Cannot create hsr debugfs directory [ 67.577243][ T8506] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.595237][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.604148][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.612568][ T2686] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.619665][ T2686] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.628468][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.680388][ T2762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.690511][ T2762] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.699475][ T2762] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.706582][ T2762] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.714447][ T2762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.723226][ T2762] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.731587][ T2762] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.738606][ T2762] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.746333][ T2762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.754959][ T2762] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.763504][ T2762] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.770531][ T2762] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.778691][ T2762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.787147][ T2762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.796991][ T2762] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.811551][ T2761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.812072][ T2761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.812911][ T2761] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.813305][ T2761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.813789][ T2761] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.814421][ T8514] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 67.867816][ T8514] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 67.907212][ T2761] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.920689][ T8506] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 67.931917][ T8506] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.958756][ T8514] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 68.013433][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.021720][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.030124][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.038634][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.046808][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.055847][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.064565][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.073461][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.081197][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.110127][ T8514] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 68.142745][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.158226][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.167189][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.176183][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.198167][ T8511] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.218236][ T8503] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.229773][ T8503] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.248404][ T8508] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.260253][ T2761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.268774][ T2761] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.277091][ T2761] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.284795][ T2761] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.306259][ T8506] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.319012][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.327773][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.356303][ T8511] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.369108][ T8517] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 68.405742][ T8517] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 68.454416][ T8517] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 68.504513][ T2761] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.512359][ T2761] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.519752][ T2761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.527619][ T2761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.542865][ T8503] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.555343][ T8517] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 68.632961][ T2761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.641842][ T2761] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.650170][ T2761] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.657264][ T2761] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.665372][ T2761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.675061][ T2761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.683693][ T2761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.692439][ T2761] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.700955][ T2761] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.708049][ T2761] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.716904][ T8508] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.743346][ T2761] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.753877][ T2761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.767396][ T2762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.776513][ T2762] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.785889][ T2762] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.793021][ T2762] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.817003][ T8506] device veth0_vlan entered promiscuous mode [ 68.823900][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.832675][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.841422][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.849603][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.858502][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.867437][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.876172][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.885639][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.894499][ T2764] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.901578][ T2764] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.911320][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.918974][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.948567][ T2761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.958529][ T2761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.971035][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.980242][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.989174][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.009180][ T8506] device veth1_vlan entered promiscuous mode [ 69.046175][ T2761] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.055652][ T2761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.064127][ T2761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.072295][ T2761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.080612][ T2761] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.089152][ T2761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.097604][ T2761] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.106050][ T2761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.114521][ T2761] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.122983][ T2761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.131664][ T2761] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.140004][ T2761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.148624][ T2761] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.156884][ T2761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.165387][ T2761] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.173599][ T2761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.181970][ T2761] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.193048][ T8503] device veth0_vlan entered promiscuous mode [ 69.208485][ T8511] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.228188][ T2761] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.238305][ T2761] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.247130][ T2761] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.257536][ T2761] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.270339][ T8503] device veth1_vlan entered promiscuous mode [ 69.283231][ T8514] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.296496][ T8517] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.327201][ T8508] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.354045][ T8511] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.389118][ T8517] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.399101][ T2761] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.413857][ T2761] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.422813][ T2761] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.432276][ T2761] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.439980][ T2761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.449543][ T2761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 174.470742][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 174.478261][ C0] rcu: 0-...!: (1 GPs behind) idle=02e/1/0x4000000000000002 softirq=14453/14459 fqs=3 [ 174.488434][ C0] (t=10501 jiffies g=6897 q=245) [ 174.493455][ C0] rcu: rcu_preempt kthread starved for 10496 jiffies! g6897 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 174.505146][ C0] rcu: RCU grace-period kthread stack dump: [ 174.512594][ C0] rcu_preempt R running task 28984 10 2 0x80004000 [ 174.520526][ C0] Call Trace: [ 174.523831][ C0] __schedule+0x9a0/0xcc0 [ 174.528270][ C0] schedule+0x181/0x210 [ 174.532435][ C0] schedule_timeout+0x14f/0x240 [ 174.537647][ C0] ? run_local_timers+0x120/0x120 [ 174.545390][ C0] rcu_gp_kthread+0xed8/0x1770 [ 174.552454][ C0] kthread+0x332/0x350 [ 174.556702][ C0] ? rcu_report_qs_rsp+0x140/0x140 [ 174.561916][ C0] ? kthread_blkcg+0xe0/0xe0 [ 174.566513][ C0] ret_from_fork+0x24/0x30 [ 174.571126][ C0] NMI backtrace for cpu 0 [ 174.575460][ C0] CPU: 0 PID: 8508 Comm: syz-executor.2 Not tainted 5.5.0-rc5-syzkaller #0 [ 174.585295][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 174.595704][ C0] Call Trace: [ 174.600359][ C0] [ 174.603484][ C0] dump_stack+0x1fb/0x318 [ 174.608204][ C0] nmi_cpu_backtrace+0xaf/0x1a0 [ 174.613324][ C0] ? nmi_trigger_cpumask_backtrace+0x16d/0x290 [ 174.619696][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 174.626029][ C0] nmi_trigger_cpumask_backtrace+0x174/0x290 [ 174.632014][ C0] arch_trigger_cpumask_backtrace+0x10/0x20 [ 174.638012][ C0] rcu_dump_cpu_stacks+0x15a/0x220 [ 174.643675][ C0] rcu_sched_clock_irq+0xe25/0x1ad0 [ 174.648959][ C0] ? trace_hardirqs_off+0x74/0x80 [ 174.654732][ C0] update_process_times+0x12d/0x180 [ 174.660811][ C0] tick_sched_timer+0x263/0x420 [ 174.666439][ C0] ? tick_setup_sched_timer+0x3d0/0x3d0 [ 174.672580][ C0] __hrtimer_run_queues+0x403/0x840 [ 174.678374][ C0] hrtimer_interrupt+0x38c/0xda0 [ 174.683684][ C0] ? debug_smp_processor_id+0x9/0x20 [ 174.689068][ C0] smp_apic_timer_interrupt+0x109/0x280 [ 174.694716][ C0] apic_timer_interrupt+0xf/0x20 [ 174.700700][ C0] [ 174.703934][ C0] RIP: 0010:free_thread_stack+0x12e/0x590 [ 174.709836][ C0] Code: bf 00 00 00 00 00 ea ff ff 48 01 c7 be 03 00 00 00 e8 86 91 61 00 e9 5d 04 00 00 e8 3c 2c 2e 00 48 89 df 31 f6 e8 02 8d 6f 00 <43> 80 3c 2e 00 74 08 4c 89 e7 e8 73 94 6a 00 49 8b 1c 24 48 83 c3 [ 174.732380][ C0] RSP: 0018:ffffc90002137528 EFLAGS: 00000296 ORIG_RAX: ffffffffffffff13 [ 174.742907][ C0] RAX: 0000000000000001 RBX: ffffea0002693380 RCX: 0000000000000000 [ 174.751075][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffea0002693380 [ 174.759437][ C0] RBP: ffffc90002137560 R08: 000000000003a728 R09: ffffed10121e6aa9 [ 174.768899][ C0] R10: ffffed10121e6aa9 R11: 0000000000000000 R12: ffff8880a9276220 [ 174.777606][ C0] R13: dffffc0000000000 R14: 1ffff1101524ec44 R15: ffff888090f35538 [ 174.788497][ C0] ? free_thread_stack+0x12e/0x590 [ 174.793628][ C0] put_task_stack+0xa3/0x130 [ 174.798965][ C0] finish_task_switch+0x3f1/0x550 [ 174.805041][ C0] __schedule+0x9a8/0xcc0 [ 174.809598][ C0] ? ___preempt_schedule+0x16/0x18 [ 174.814781][ C0] preempt_schedule+0xdb/0x120 [ 174.819751][ C0] ___preempt_schedule+0x16/0x18 [ 174.825261][ C0] try_to_wake_up+0xe78/0x1050 [ 174.830045][ C0] ? do_raw_spin_unlock+0x142/0x950 [ 174.835779][ C0] wake_up_q+0x8c/0xe0 [ 174.840026][ C0] __mutex_unlock_slowpath+0x586/0x5b0 [ 174.845941][ C0] mutex_unlock+0xd/0x10 [ 174.850297][ C0] __rtnl_unlock+0x2c/0xa0 [ 174.854808][ C0] netdev_run_todo+0xe5/0xe10 [ 174.859684][ C0] rtnetlink_rcv_msg+0x890/0xd40 [ 174.864648][ C0] ? rcu_lock_release+0x9/0x30 [ 174.869419][ C0] ? rcu_lock_release+0x9/0x30 [ 174.874652][ C0] ? rcu_lock_release+0x9/0x30 [ 174.879594][ C0] netlink_rcv_skb+0x19e/0x3d0 [ 174.884641][ C0] ? rtnetlink_bind+0x80/0x80 [ 174.889332][ C0] rtnetlink_rcv+0x1c/0x20 [ 174.896722][ C0] netlink_unicast+0x767/0x920 [ 174.901674][ C0] netlink_sendmsg+0xa31/0xd50 [ 174.906468][ C0] ? netlink_getsockopt+0x9f0/0x9f0 [ 174.911765][ C0] __sys_sendto+0x442/0x5e0 [ 174.918322][ C0] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 174.924393][ C0] ? prepare_exit_to_usermode+0x221/0x5b0 [ 174.930115][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 174.935595][ C0] __x64_sys_sendto+0xe5/0x100 [ 174.940366][ C0] do_syscall_64+0xf7/0x1c0 [ 174.944860][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 174.950738][ C0] RIP: 0033:0x414c43 [ 174.954652][ C0] Code: ff 0f 83 b0 19 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 83 3d 2d 38 66 00 00 75 17 49 89 ca b8 2c 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 81 19 00 00 c3 48 83 ec 08 e8 87 fa ff ff [ 174.974242][ C0] RSP: 002b:00007ffee0f947d8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 174.982671][ C0] RAX: ffffffffffffffda RBX: 0000000000a72200 RCX: 0000000000414c43 [ 174.990646][ C0] RDX: 0000000000000040 RSI: 0000000000a72250 RDI: 0000000000000003 [ 174.998618][ C0] RBP: 0000000000000000 R08: 00007ffee0f947e0 R09: 000000000000000c [ 175.006576][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 175.014554][ C0] R13: 0000000000000000 R14: 0000000000a72250 R15: 0000000000000003