[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 43.300307][ T23] audit: type=1800 audit(1575355612.946:25): pid=8008 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 43.319469][ T23] audit: type=1800 audit(1575355612.946:26): pid=8008 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 43.350385][ T23] audit: type=1800 audit(1575355612.946:27): pid=8008 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.56' (ECDSA) to the list of known hosts. 2019/12/03 06:47:02 fuzzer started 2019/12/03 06:47:04 dialing manager at 10.128.0.26:38907 2019/12/03 06:47:04 syscalls: 2697 2019/12/03 06:47:04 code coverage: enabled 2019/12/03 06:47:04 comparison tracing: enabled 2019/12/03 06:47:04 extra coverage: extra coverage is not supported by the kernel 2019/12/03 06:47:04 setuid sandbox: enabled 2019/12/03 06:47:04 namespace sandbox: enabled 2019/12/03 06:47:04 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/03 06:47:04 fault injection: enabled 2019/12/03 06:47:04 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/03 06:47:04 net packet injection: enabled 2019/12/03 06:47:04 net device setup: enabled 2019/12/03 06:47:04 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/12/03 06:47:04 devlink PCI setup: PCI device 0000:00:10.0 is not available 06:47:05 executing program 0: timer_create(0x0, 0x0, &(0x7f0000000080)) timer_create(0x0, 0x0, &(0x7f0000000540)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='timers\x00') preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000140)=""/109, 0x6d}], 0x1, 0x4000100000000) 06:47:05 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000800)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in, 0x0, 0x20000000005, 0x2, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b") accept(r0, 0x0, &(0x7f0000000580)) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x9f) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0xfffffffffffffe33}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) syzkaller login: [ 55.914009][ T8172] IPVS: ftp: loaded support on port[0] = 21 [ 56.079566][ T8172] chnl_net:caif_netlink_parms(): no params data found 06:47:05 executing program 2: creat(0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, 0xffffffffffffffff, 0x0) fstat(0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f00000006c0)) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000400)={0xa0, 0x19, 0x1, {0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x8, 0x100000000, 0x0, 0x4, 0x0, 0x0, 0x1ff}}, 0x53) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x0, 0x0) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='mountinfo\x00') preadv(r0, &(0x7f0000000700)=[{&(0x7f0000000140)=""/191, 0xbf}], 0x1, 0xffffffd) ioctl$PPPIOCGNPMODE(0xffffffffffffffff, 0xc008744c, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ') openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) write$vhci(0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0) [ 56.128023][ T8175] IPVS: ftp: loaded support on port[0] = 21 [ 56.182748][ T8172] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.190621][ T8172] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.199670][ T8172] device bridge_slave_0 entered promiscuous mode [ 56.225716][ T8172] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.232863][ T8172] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.245756][ T8172] device bridge_slave_1 entered promiscuous mode [ 56.283721][ T8172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.326767][ T8172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.342634][ T8177] IPVS: ftp: loaded support on port[0] = 21 [ 56.382647][ T8172] team0: Port device team_slave_0 added [ 56.403426][ T8172] team0: Port device team_slave_1 added 06:47:06 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/autofs\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={0x0, @in6={{0xa, 0x4e21, 0xe, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0x0, 0x7}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') writev(r2, &(0x7f0000000200)=[{&(0x7f0000000000)="13", 0x8}], 0x1) write$P9_RSTATFS(r2, &(0x7f0000000640)={0x43, 0x9, 0x2, {0x2, 0x7, 0x4, 0x2, 0x9, 0x8000, 0x20, 0x400, 0xfffffffd}}, 0x43) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005) ioctl$KVM_GET_LAPIC(r1, 0x8400ae8e, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lstat(&(0x7f00000005c0)='./file1\x00', &(0x7f0000000a00)) readlinkat(r0, &(0x7f0000000100)='./file1\x00', &(0x7f00000001c0)=""/38, 0x26) lsetxattr$security_selinux(&(0x7f0000000880)='./file0\x00', &(0x7f0000000400)='security.selinux\x00', &(0x7f0000000900)='system_u:object_r:init_exec_t:s0\x00', 0x21, 0x5) r3 = getpgrp(0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000140)=0x1000000) setpriority(0x0, r3, 0xffff) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_PEER_GET(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x20, 0x0, 0x701, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x6}]}]}, 0x20}}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r6, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000440)='./file0\x00', &(0x7f0000000280)=[&(0x7f0000000580)='wlan1\x00', &(0x7f0000000600)='security.capability\x00'], &(0x7f0000000780)=[&(0x7f0000000700)='proc\x00', &(0x7f0000000740)='!\x00']) [ 56.428653][ T8175] chnl_net:caif_netlink_parms(): no params data found [ 56.490512][ T8172] device hsr_slave_0 entered promiscuous mode [ 56.565817][ T8172] device hsr_slave_1 entered promiscuous mode 06:47:06 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x80, 0x3}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x2) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x7fff) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sync_file_range(r2, 0x0, 0x0, 0x2) [ 56.672697][ T8180] IPVS: ftp: loaded support on port[0] = 21 [ 56.689683][ T8175] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.701006][ T8175] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.709052][ T8175] device bridge_slave_0 entered promiscuous mode [ 56.747370][ T8175] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.754514][ T8175] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.769018][ T8175] device bridge_slave_1 entered promiscuous mode [ 56.783238][ T8172] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.842952][ T8172] netdevsim netdevsim0 netdevsim1: renamed from eth1 06:47:06 executing program 5: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) mount$bpf(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='autofs\x00', 0x0, &(0x7f0000000200)) [ 56.908432][ T8172] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 56.976216][ T8172] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 56.990472][ T8182] IPVS: ftp: loaded support on port[0] = 21 [ 57.022997][ T8175] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.033873][ T8175] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.122104][ T8177] chnl_net:caif_netlink_parms(): no params data found [ 57.162341][ T8175] team0: Port device team_slave_0 added [ 57.170771][ T8175] team0: Port device team_slave_1 added [ 57.227399][ T8175] device hsr_slave_0 entered promiscuous mode [ 57.265081][ T8175] device hsr_slave_1 entered promiscuous mode [ 57.305189][ T8175] debugfs: Directory 'hsr0' with parent '/' already present! [ 57.312998][ T8180] chnl_net:caif_netlink_parms(): no params data found [ 57.327075][ T8185] IPVS: ftp: loaded support on port[0] = 21 [ 57.391069][ T8177] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.398920][ T8177] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.410416][ T8177] device bridge_slave_0 entered promiscuous mode [ 57.419903][ T8177] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.427056][ T8177] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.434908][ T8177] device bridge_slave_1 entered promiscuous mode [ 57.453283][ T8177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.465449][ T8177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.477539][ T8182] chnl_net:caif_netlink_parms(): no params data found [ 57.515416][ T8177] team0: Port device team_slave_0 added [ 57.547678][ T8177] team0: Port device team_slave_1 added [ 57.558950][ T8180] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.567210][ T8180] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.574920][ T8180] device bridge_slave_0 entered promiscuous mode [ 57.600946][ T8182] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.609389][ T8182] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.617230][ T8182] device bridge_slave_0 entered promiscuous mode [ 57.624474][ T8180] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.632139][ T8180] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.639904][ T8180] device bridge_slave_1 entered promiscuous mode [ 57.658488][ T8175] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 57.728293][ T8182] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.735515][ T8182] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.743182][ T8182] device bridge_slave_1 entered promiscuous mode [ 57.773142][ T8175] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 57.806455][ T8175] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 57.858701][ T8180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.869183][ T8182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.937949][ T8177] device hsr_slave_0 entered promiscuous mode [ 57.985010][ T8177] device hsr_slave_1 entered promiscuous mode [ 58.034693][ T8177] debugfs: Directory 'hsr0' with parent '/' already present! [ 58.048773][ T8175] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 58.097705][ T8180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.108673][ T8182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.178479][ T8185] chnl_net:caif_netlink_parms(): no params data found [ 58.197616][ T8180] team0: Port device team_slave_0 added [ 58.228974][ T8172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.239495][ T8182] team0: Port device team_slave_0 added [ 58.247753][ T8180] team0: Port device team_slave_1 added [ 58.254377][ T8182] team0: Port device team_slave_1 added [ 58.268583][ T8177] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 58.334226][ T8177] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 58.387209][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.395950][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.422536][ T8172] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.430305][ T8177] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 58.480783][ T8177] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 58.607713][ T8182] device hsr_slave_0 entered promiscuous mode [ 58.635034][ T8182] device hsr_slave_1 entered promiscuous mode [ 58.675070][ T8182] debugfs: Directory 'hsr0' with parent '/' already present! [ 58.737430][ T8180] device hsr_slave_0 entered promiscuous mode [ 58.794950][ T8180] device hsr_slave_1 entered promiscuous mode [ 58.844816][ T8180] debugfs: Directory 'hsr0' with parent '/' already present! [ 58.857600][ T8185] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.866780][ T8185] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.874409][ T8185] device bridge_slave_0 entered promiscuous mode [ 58.882801][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.892713][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.901496][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.908651][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.917265][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.926448][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.934901][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.941934][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.949688][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.958621][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.967411][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.975926][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.987820][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.995831][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.016618][ T8185] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.023772][ T8185] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.032752][ T8185] device bridge_slave_1 entered promiscuous mode [ 59.047780][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.056851][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.073124][ T8172] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 59.086859][ T8172] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.113178][ T8185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.126014][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.134246][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.142928][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.151086][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.159513][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.175847][ T8185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.189564][ T8182] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 59.251292][ T8182] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 59.315510][ T8180] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 59.352306][ T8180] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 59.412588][ T8182] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 59.466980][ T8182] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 59.511495][ T8180] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 59.547889][ T8180] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 59.614062][ T8172] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.623440][ T8185] team0: Port device team_slave_0 added [ 59.632833][ T8185] team0: Port device team_slave_1 added [ 59.647642][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.655533][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.689721][ T8175] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.715409][ T8177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.766343][ T8185] device hsr_slave_0 entered promiscuous mode [ 59.795177][ T8185] device hsr_slave_1 entered promiscuous mode [ 59.854856][ T8185] debugfs: Directory 'hsr0' with parent '/' already present! [ 59.869422][ T8175] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.885333][ T8177] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.912579][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.923258][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.931793][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.940000][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.980437][ T8185] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 164.924568][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 164.931343][ C1] rcu: 1-...!: (1 GPs behind) idle=6e2/1/0x4000000000000002 softirq=11203/11204 fqs=2 [ 164.941222][ C1] (t=10500 jiffies g=6221 q=114) [ 164.946237][ C1] rcu: rcu_preempt kthread starved for 10495 jiffies! g6221 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 164.957330][ C1] rcu: RCU grace-period kthread stack dump: [ 164.963226][ C1] rcu_preempt R running task 29032 10 2 0x80004000 [ 164.971133][ C1] Call Trace: [ 164.974430][ C1] __schedule+0x9a0/0xcc0 [ 164.978764][ C1] schedule+0x181/0x210 [ 164.982914][ C1] schedule_timeout+0x14f/0x240 [ 164.987759][ C1] ? run_local_timers+0x120/0x120 [ 164.992776][ C1] rcu_gp_kthread+0xed8/0x1770 [ 164.997534][ C1] kthread+0x332/0x350 [ 165.001587][ C1] ? rcu_report_qs_rsp+0x140/0x140 [ 165.006684][ C1] ? kthread_blkcg+0xe0/0xe0 [ 165.011262][ C1] ret_from_fork+0x24/0x30 [ 165.015685][ C1] NMI backtrace for cpu 1 [ 165.020002][ C1] CPU: 1 PID: 7820 Comm: udevd Not tainted 5.4.0-syzkaller #0 [ 165.027437][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 165.037527][ C1] Call Trace: [ 165.040795][ C1] [ 165.043633][ C1] dump_stack+0x1fb/0x318 [ 165.047950][ C1] nmi_cpu_backtrace+0xaf/0x1a0 [ 165.053220][ C1] ? nmi_trigger_cpumask_backtrace+0x16d/0x290 [ 165.059359][ C1] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 165.065411][ C1] nmi_trigger_cpumask_backtrace+0x174/0x290 [ 165.071377][ C1] arch_trigger_cpumask_backtrace+0x10/0x20 [ 165.077254][ C1] rcu_dump_cpu_stacks+0x15a/0x220 [ 165.082354][ C1] rcu_sched_clock_irq+0xe25/0x1ad0 [ 165.087543][ C1] ? trace_hardirqs_off+0x74/0x80 [ 165.092555][ C1] update_process_times+0x12d/0x180 [ 165.097741][ C1] tick_sched_timer+0x263/0x420 [ 165.102585][ C1] ? tick_setup_sched_timer+0x3d0/0x3d0 [ 165.108126][ C1] __hrtimer_run_queues+0x403/0x840 [ 165.113331][ C1] hrtimer_interrupt+0x38c/0xda0 [ 165.118271][ C1] ? debug_smp_processor_id+0x9/0x20 [ 165.123584][ C1] smp_apic_timer_interrupt+0x109/0x280 [ 165.129116][ C1] apic_timer_interrupt+0xf/0x20 [ 165.134040][ C1] [ 165.136971][ C1] RIP: 0010:free_thread_stack+0x18b/0x590 [ 165.142689][ C1] Code: ff ff e8 28 04 00 00 43 80 3c 2e 00 74 08 4c 89 e7 e8 09 a4 69 00 49 8b 1c 24 48 83 c3 08 48 89 d8 48 c1 e8 03 42 80 3c 28 00 <74> 08 48 89 df e8 eb a3 69 00 48 8b 1b e9 82 ff ff ff e8 de 2c 2e [ 165.162295][ C1] RSP: 0018:ffffc90006ce7760 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 165.171040][ C1] RAX: 1ffff110150cdb31 RBX: ffff8880a866d988 RCX: ffff88809e4ee1c0 [ 165.179432][ C1] RDX: 0000000000000000 RSI: 00000000fffffffc RDI: ffffea00024ffa00 [ 165.187413][ C1] RBP: ffffc90006ce7798 R08: 000000000003a768 R09: ffffed10131bf34f [ 165.195369][ C1] R10: ffffed10131bf34f R11: 0000000000000000 R12: ffff8880a866da20 [ 165.203330][ C1] R13: dffffc0000000000 R14: 1ffff110150cdb44 R15: ffff888098df9a68 [ 165.211315][ C1] put_task_stack+0xa3/0x130 [ 165.215893][ C1] finish_task_switch+0x3f1/0x550 [ 165.220910][ C1] __schedule+0x9a8/0xcc0 [ 165.225234][ C1] schedule+0x181/0x210 [ 165.229380][ C1] schedule_hrtimeout_range_clock+0x3c7/0x510 [ 165.235437][ C1] ? trace_hrtimer_expire_exit+0x2d0/0x2d0 [ 165.241234][ C1] schedule_hrtimeout_range+0x2a/0x40 [ 165.246596][ C1] poll_schedule_timeout+0x11c/0x1c0 [ 165.251871][ C1] do_sys_poll+0x82f/0x1240 [ 165.256379][ C1] ? debug_object_activate+0x2f7/0x6f0 [ 165.261825][ C1] ? debug_object_active_state+0x1e3/0x4a0 [ 165.267633][ C1] ? __lock_acquire+0xc75/0x1be0 [ 165.272567][ C1] ? __x32_compat_sys_ppoll_time64+0xd0/0xd0 [ 165.278546][ C1] ? trace_hardirqs_on+0x74/0x80 [ 165.283515][ C1] ? ktime_get_ts64+0x6e/0x2c0 [ 165.288278][ C1] ? ktime_get_ts64+0x6e/0x2c0 [ 165.293026][ C1] ? read_seqcount_begin+0x125/0x1c0 [ 165.298302][ C1] ? trace_hardirqs_on+0x74/0x80 [ 165.303221][ C1] ? ktime_get_ts64+0x6e/0x2c0 [ 165.308231][ C1] ? read_seqcount_begin+0x17a/0x1c0 [ 165.313507][ C1] ? ktime_get_ts64+0x240/0x2c0 [ 165.318342][ C1] ? timespec64_add_safe+0x171/0x1b0 [ 165.323613][ C1] __se_sys_poll+0x1b0/0x360 [ 165.328195][ C1] __x64_sys_poll+0x7b/0x90 [ 165.332689][ C1] do_syscall_64+0xf7/0x1c0 [ 165.337181][ C1] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 165.343061][ C1] RIP: 0033:0x7f0c871f0678 [ 165.347518][ C1] Code: 11 48 83 c8 ff eb ea 90 90 90 90 90 90 90 90 90 90 90 48 83 ec 28 8b 05 82 8f 2b 00 85 c0 75 17 48 63 d2 b8 07 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 51 48 83 c4 28 c3 89 54 24 08 48 89 74 24 10 [ 165.367129][ C1] RSP: 002b:00007ffe71bdcdb0 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 165.375535][ C1] RAX: ffffffffffffffda RBX: 20c49ba5e353f7cf RCX: 00007f0c871f0678 [ 165.383496][ C1] RDX: 000000000000ee37 RSI: 0000000000000001 RDI: 00007ffe71bdce70 [ 165.391636][ C1] RBP: 0000000000000000 R08: 00007ffe71bdcdc0 R09: 00007ffe71bea0b8 [ 165.399686][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000014706d0 [ 165.407651][ C1] R13: 0000000000002000 R14: 00007ffe71bdce44 R15: 0000000001457250