[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 51.436571][ T27] audit: type=1800 audit(1578463470.481:25): pid=8349 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 51.455693][ T27] audit: type=1800 audit(1578463470.481:26): pid=8349 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 51.502059][ T27] audit: type=1800 audit(1578463470.481:27): pid=8349 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.139' (ECDSA) to the list of known hosts. 2020/01/08 06:04:41 fuzzer started 2020/01/08 06:04:43 dialing manager at 10.128.0.26:35703 2020/01/08 06:04:43 syscalls: 2824 2020/01/08 06:04:43 code coverage: enabled 2020/01/08 06:04:43 comparison tracing: enabled 2020/01/08 06:04:43 extra coverage: enabled 2020/01/08 06:04:43 setuid sandbox: enabled 2020/01/08 06:04:43 namespace sandbox: enabled 2020/01/08 06:04:43 Android sandbox: /sys/fs/selinux/policy does not exist 2020/01/08 06:04:43 fault injection: enabled 2020/01/08 06:04:43 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/01/08 06:04:43 net packet injection: enabled 2020/01/08 06:04:43 net device setup: enabled 2020/01/08 06:04:43 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/01/08 06:04:43 devlink PCI setup: PCI device 0000:00:10.0 is not available 06:04:44 executing program 0: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x3, 0x6b) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0815b5055e0bcfe87b3071") connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="83755a8b7c9abd0b6d7982dfc9d8ffd41cdbc4a7956b05e0361b19f161b3a4c19859516522d5f3be67b3a35bc789cf00ee54a61c2b8c8eeb524ad1454c075bb62a12a085f41f221bea219d365ac692f98fcd65544faf2702bd843678c3caa842a7dd"], 0x1a000) write$binfmt_script(r0, &(0x7f0000000380)={'#! ', './file0'}, 0x9f6b) 06:04:44 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7a, 0x0, [0x4b564d03, 0x4]}) syzkaller login: [ 65.312780][ T8516] IPVS: ftp: loaded support on port[0] = 21 06:04:44 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0) unshare(0x2040400) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40485404, &(0x7f0000000140)={{0x1, 0x0, 0x0, 0x3}}) [ 65.474369][ T8516] chnl_net:caif_netlink_parms(): no params data found [ 65.511055][ T8519] IPVS: ftp: loaded support on port[0] = 21 [ 65.605600][ T8521] IPVS: ftp: loaded support on port[0] = 21 [ 65.619764][ T8516] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.628292][ T8516] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.641282][ T8516] device bridge_slave_0 entered promiscuous mode [ 65.669103][ T8516] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.676273][ T8516] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.684254][ T8516] device bridge_slave_1 entered promiscuous mode [ 65.738857][ T8516] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.773579][ T8516] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 06:04:44 executing program 3: r0 = open(0x0, 0x14103e, 0x0) getsockname$unix(r0, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) syz_emit_ethernet(0x0, 0x0, 0x0) munmap(&(0x7f000050f000/0x1000)=nil, 0x1000) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000931ff4)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x4, 0x0, 0x2, {0xa, 0x4e21, 0x3c, @local}}}, 0x80) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x6, 0x23, 0x0, 0x0, 0x0, 0x1, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x0, 0x4, 0x4, 0x0, 0x0, 0x6, 0xffff}, 0x0, 0x0, r1, 0x1) perf_event_open(&(0x7f000001d000)={0x0, 0x11, 0x80000001, 0x1, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000}, 0x10}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r3 = dup2(r2, r2) write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000080), 0xa) socket(0x10, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xfffffffffffffce9, 0x45, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0) [ 65.799024][ T8519] chnl_net:caif_netlink_parms(): no params data found [ 65.911467][ T8516] team0: Port device team_slave_0 added [ 65.941427][ T8521] chnl_net:caif_netlink_parms(): no params data found [ 65.962571][ T8516] team0: Port device team_slave_1 added [ 65.986435][ T8525] IPVS: ftp: loaded support on port[0] = 21 [ 66.003156][ T8519] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.020646][ T8519] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.028937][ T8519] device bridge_slave_0 entered promiscuous mode 06:04:45 executing program 4: io_setup(0x5f, &(0x7f00000000c0)) io_setup(0x3, &(0x7f0000000080)=0x0) io_destroy(r0) io_destroy(r0) [ 66.070143][ T8519] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.080955][ T8519] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.089190][ T8519] device bridge_slave_1 entered promiscuous mode [ 66.161013][ T8516] device hsr_slave_0 entered promiscuous mode [ 66.227508][ T8516] device hsr_slave_1 entered promiscuous mode [ 66.276790][ T8521] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.297259][ T8521] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.305209][ T8521] device bridge_slave_0 entered promiscuous mode 06:04:45 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="2000000012005f0214f9f407000000000a020000000000000000000000002000", 0x20) recvmmsg(r0, &(0x7f0000002f00)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/184, 0xad}], 0x2}}], 0x8, 0x0, 0x0) [ 66.326201][ T8527] IPVS: ftp: loaded support on port[0] = 21 [ 66.351088][ T8521] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.377371][ T8521] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.385014][ T8521] device bridge_slave_1 entered promiscuous mode [ 66.395759][ T8519] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.444517][ T8519] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.479471][ T8521] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.506363][ T8521] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.517452][ T8519] team0: Port device team_slave_0 added [ 66.540614][ T8519] team0: Port device team_slave_1 added [ 66.560398][ T8521] team0: Port device team_slave_0 added [ 66.571190][ T8529] IPVS: ftp: loaded support on port[0] = 21 [ 66.608122][ T8521] team0: Port device team_slave_1 added [ 66.626653][ T8525] chnl_net:caif_netlink_parms(): no params data found [ 66.689834][ T8519] device hsr_slave_0 entered promiscuous mode [ 66.727575][ T8519] device hsr_slave_1 entered promiscuous mode [ 66.787342][ T8519] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.795177][ T8519] Cannot create hsr debugfs directory [ 66.851342][ T8516] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 66.920818][ T8516] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 66.983208][ T8516] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 67.098944][ T8521] device hsr_slave_0 entered promiscuous mode [ 67.157446][ T8521] device hsr_slave_1 entered promiscuous mode [ 67.217262][ T8521] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.224855][ T8521] Cannot create hsr debugfs directory [ 67.240954][ T8516] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 67.311582][ T8525] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.318752][ T8525] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.326334][ T8525] device bridge_slave_0 entered promiscuous mode [ 67.382950][ T8525] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.390416][ T8525] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.399976][ T8525] device bridge_slave_1 entered promiscuous mode [ 67.434527][ T8519] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 67.475287][ T8527] chnl_net:caif_netlink_parms(): no params data found [ 67.501855][ T8519] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 67.551901][ T8525] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.564402][ T8525] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.584938][ T8519] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 67.622391][ T8519] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 67.698578][ T8525] team0: Port device team_slave_0 added [ 67.716437][ T8525] team0: Port device team_slave_1 added [ 67.732898][ T8529] chnl_net:caif_netlink_parms(): no params data found [ 67.821394][ T8525] device hsr_slave_0 entered promiscuous mode [ 67.897627][ T8525] device hsr_slave_1 entered promiscuous mode [ 67.937502][ T8525] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.945096][ T8525] Cannot create hsr debugfs directory [ 67.951244][ T8527] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.958506][ T8527] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.966310][ T8527] device bridge_slave_0 entered promiscuous mode [ 67.976439][ T8527] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.983609][ T8527] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.991360][ T8527] device bridge_slave_1 entered promiscuous mode [ 68.081403][ T8527] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.091585][ T8529] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.098843][ T8529] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.106388][ T8529] device bridge_slave_0 entered promiscuous mode [ 68.113566][ T8521] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 68.161017][ T8521] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 68.212654][ T8516] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.221409][ T8527] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.236326][ T8529] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.243586][ T8529] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.251545][ T8529] device bridge_slave_1 entered promiscuous mode [ 68.269697][ T8521] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 68.346631][ T8527] team0: Port device team_slave_0 added [ 68.354800][ T8529] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.369878][ T8516] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.378829][ T8529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.388404][ T8521] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 68.432791][ T8527] team0: Port device team_slave_1 added [ 68.444169][ T3153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.452500][ T3153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.467377][ T3052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.475886][ T3052] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.486288][ T3052] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.493519][ T3052] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.501440][ T3052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.510708][ T3052] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.519074][ T3052] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.526106][ T3052] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.533691][ T3052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.553347][ T8529] team0: Port device team_slave_0 added [ 68.583614][ T3071] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.592176][ T3071] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.600732][ T3071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.612139][ T3071] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.622451][ T8529] team0: Port device team_slave_1 added [ 68.633874][ T8519] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.651953][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.661251][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.669892][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.679169][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.687576][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.759773][ T8527] device hsr_slave_0 entered promiscuous mode [ 68.807765][ T8527] device hsr_slave_1 entered promiscuous mode [ 68.847338][ T8527] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.854975][ T8527] Cannot create hsr debugfs directory [ 68.869300][ T3071] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.877738][ T3071] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.930206][ T8529] device hsr_slave_0 entered promiscuous mode [ 68.957467][ T8529] device hsr_slave_1 entered promiscuous mode [ 69.007446][ T8529] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.015016][ T8529] Cannot create hsr debugfs directory [ 69.027007][ T8519] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.046229][ T8516] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.055725][ T3153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.063792][ T3153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.094224][ T8525] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.140290][ T8525] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.203323][ T8525] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 69.230855][ T2794] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.239781][ T2794] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.248223][ T2794] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.255260][ T2794] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.262816][ T2794] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.271633][ T2794] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.279990][ T2794] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.287031][ T2794] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.294603][ T2794] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.306162][ T2794] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.336775][ T8525] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 69.403239][ T3071] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.433729][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.442790][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.454004][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.462809][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.471185][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.478600][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.486049][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.494760][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.505539][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.522767][ T8516] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.542163][ T8519] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.553620][ T8519] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.589865][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.598927][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.606934][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.615413][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.636035][ T8527] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 69.709682][ T8527] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 69.759714][ T8527] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 69.799803][ T8527] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 69.881290][ T8519] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.913088][ T8521] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.928306][ T3153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.936914][ T3153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.946826][ T8529] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 69.989340][ T8529] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 70.029021][ T8529] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 70.071843][ T8529] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 70.138173][ T8521] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.149652][ T8516] device veth0_vlan entered promiscuous mode [ 70.176675][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.184833][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.193733][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.202496][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.211413][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.220728][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.245519][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.253409][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.261198][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.271462][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.280347][ T3067] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.287435][ T3067] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.295003][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.303982][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.312508][ T3067] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.319582][ T3067] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.329201][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.336959][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.364341][ T8525] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.381108][ T8516] device veth1_vlan entered promiscuous mode [ 70.390547][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.399376][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.408013][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.416659][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.426310][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.447795][ T3059] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.455974][ T3059] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.465278][ T3059] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.478741][ T8527] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.503524][ T8519] device veth0_vlan entered promiscuous mode [ 70.531296][ T8527] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.538770][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.546922][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.556714][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.564631][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.572459][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.581079][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.589494][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.597839][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.605962][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.613811][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.623101][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.631845][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.640712][ T8525] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.654239][ T8519] device veth1_vlan entered promiscuous mode [ 70.679126][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.693079][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.702183][ T3067] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.709307][ T3067] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.717358][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.727791][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.742756][ T3067] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.749865][ T3067] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.763042][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.771945][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.786063][ T3067] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.793201][ T3067] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.806689][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.814715][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 175.727132][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 175.734038][ C1] rcu: 1-...!: (10500 ticks this GP) idle=bea/1/0x4000000000000002 softirq=13070/13071 fqs=15 [ 175.744605][ C1] (t=10501 jiffies g=6701 q=1396) [ 175.749707][ C1] rcu: rcu_preempt kthread starved for 10470 jiffies! g6701 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 175.760795][ C1] rcu: RCU grace-period kthread stack dump: [ 175.766669][ C1] rcu_preempt R running task 28984 10 2 0x80004000 [ 175.774558][ C1] Call Trace: [ 175.777845][ C1] __schedule+0x9a0/0xcc0 [ 175.782173][ C1] schedule+0x181/0x210 [ 175.786347][ C1] schedule_timeout+0x14f/0x240 [ 175.791216][ C1] ? run_local_timers+0x120/0x120 [ 175.796246][ C1] rcu_gp_kthread+0xed8/0x1770 [ 175.801028][ C1] kthread+0x332/0x350 [ 175.805090][ C1] ? rcu_report_qs_rsp+0x140/0x140 [ 175.810202][ C1] ? kthread_blkcg+0xe0/0xe0 [ 175.815738][ C1] ret_from_fork+0x24/0x30 [ 175.820157][ C1] NMI backtrace for cpu 1 [ 175.824480][ C1] CPU: 1 PID: 8516 Comm: syz-executor.0 Not tainted 5.5.0-rc5-syzkaller #0 [ 175.833047][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 175.843092][ C1] Call Trace: [ 175.846369][ C1] [ 175.849217][ C1] dump_stack+0x1fb/0x318 [ 175.853540][ C1] nmi_cpu_backtrace+0xaf/0x1a0 [ 175.858380][ C1] ? nmi_trigger_cpumask_backtrace+0x16d/0x290 [ 175.864528][ C1] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 175.870582][ C1] nmi_trigger_cpumask_backtrace+0x174/0x290 [ 175.876553][ C1] arch_trigger_cpumask_backtrace+0x10/0x20 [ 175.882431][ C1] rcu_dump_cpu_stacks+0x15a/0x220 [ 175.887540][ C1] rcu_sched_clock_irq+0xe25/0x1ad0 [ 175.892729][ C1] ? trace_hardirqs_off+0x74/0x80 [ 175.897745][ C1] update_process_times+0x12d/0x180 [ 175.902935][ C1] tick_sched_timer+0x263/0x420 [ 175.907775][ C1] ? tick_setup_sched_timer+0x3d0/0x3d0 [ 175.913311][ C1] __hrtimer_run_queues+0x403/0x840 [ 175.918514][ C1] hrtimer_interrupt+0x38c/0xda0 [ 175.923456][ C1] ? debug_smp_processor_id+0x9/0x20 [ 175.928738][ C1] smp_apic_timer_interrupt+0x109/0x280 [ 175.934272][ C1] apic_timer_interrupt+0xf/0x20 [ 175.939198][ C1] [ 175.942126][ C1] RIP: 0010:free_thread_stack+0x195/0x590 [ 175.947833][ C1] Code: 2e 00 74 08 4c 89 e7 e8 39 94 6a 00 49 8b 1c 24 48 83 c3 08 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 1b 94 6a 00 <48> 8b 1b e9 82 ff ff ff e8 be 2b 2e 00 43 80 3c 2e 00 75 18 eb 1e [ 175.967427][ C1] RSP: 0018:ffffc90002077bd0 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 175.976526][ C1] RAX: 1ffff110145a7b21 RBX: ffff8880a2d3d908 RCX: ffff8880998aa540 [ 175.984483][ C1] RDX: 0000000000000000 RSI: 00000000fffffffc RDI: ffffea0001a699c0 [ 175.992447][ C1] RBP: ffffc90002077c08 R08: 000000000003a728 R09: ffffed101514e699 [ 176.000420][ C1] R10: ffffed101514e699 R11: 0000000000000000 R12: ffff8880a2d3d9a0 [ 176.008727][ C1] R13: dffffc0000000000 R14: 1ffff110145a7b34 R15: ffff8880a8a734b8 [ 176.016706][ C1] put_task_stack+0xa3/0x130 [ 176.021306][ C1] finish_task_switch+0x3f1/0x550 [ 176.026331][ C1] __schedule+0x9a8/0xcc0 [ 176.030663][ C1] schedule+0x181/0x210 [ 176.034895][ C1] do_nanosleep+0x1d0/0x6c0 [ 176.039397][ C1] hrtimer_nanosleep+0x3a6/0x5b0 [ 176.044326][ C1] ? trace_hrtimer_expire_exit+0x2d0/0x2d0 [ 176.050147][ C1] __x64_sys_nanosleep+0x186/0x1d0 [ 176.055251][ C1] do_syscall_64+0xf7/0x1c0 [ 176.059749][ C1] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 176.065631][ C1] RIP: 0033:0x4593f0 [ 176.069541][ C1] Code: c0 5b 5d c3 66 0f 1f 44 00 00 8b 04 24 48 83 c4 18 5b 5d c3 66 0f 1f 44 00 00 83 3d 41 f5 61 00 00 75 14 b8 23 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 d4 d1 fb ff c3 48 83 ec 08 e8 ea 46 00 00 [ 176.089582][ C1] RSP: 002b:00007ffe071b08f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000023 [ 176.097985][ C1] RAX: ffffffffffffffda RBX: 0000000000011414 RCX: 00000000004593f0 [ 176.105945][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007ffe071b0900 [ 176.113905][ C1] RBP: 0000000000000002 R08: 0000000000000001 R09: 00000000019e8940 [ 176.121867][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.129834][ C1] R13: 00007ffe071b0950 R14: 0000000000011404 R15: 00007ffe071b0960