[....] Starting periodic command scheduler: cron[ 25.018266] sshd (5549) used greatest stack depth: 23192 bytes left [?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 37.118879] IPVS: ftp: loaded support on port[0] = 21 [ 37.541476] tipc: TX() has been purged, node left! [ 66.896354] can: request_module (can-proto-0) failed. [ 66.907121] can: request_module (can-proto-0) failed. Warning: Permanently added '10.128.1.11' (ECDSA) to the list of known hosts. 2020/02/13 01:00:46 parsed 1 programs 2020/02/13 01:00:46 executed programs: 0 [ 76.856948] IPVS: ftp: loaded support on port[0] = 21 [ 76.858304] IPVS: ftp: loaded support on port[0] = 21 [ 76.885889] IPVS: ftp: loaded support on port[0] = 21 [ 76.889325] IPVS: ftp: loaded support on port[0] = 21 [ 76.893634] IPVS: ftp: loaded support on port[0] = 21 [ 76.908728] IPVS: ftp: loaded support on port[0] = 21 [ 77.784394] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.791533] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.798686] device bridge_slave_0 entered promiscuous mode [ 77.859626] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.869466] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.882080] device bridge_slave_1 entered promiscuous mode [ 77.944138] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.956891] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.964428] device bridge_slave_0 entered promiscuous mode [ 77.986328] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.993295] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.000328] device bridge_slave_0 entered promiscuous mode [ 78.019321] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.026626] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.034210] device bridge_slave_1 entered promiscuous mode [ 78.045841] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.053388] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.060879] device bridge_slave_0 entered promiscuous mode [ 78.070103] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.077776] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.085222] device bridge_slave_0 entered promiscuous mode [ 78.111002] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.121521] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.128747] device bridge_slave_1 entered promiscuous mode [ 78.139149] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.147028] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.154902] device bridge_slave_1 entered promiscuous mode [ 78.163810] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.170167] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.178892] device bridge_slave_0 entered promiscuous mode [ 78.189727] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.196600] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.204168] device bridge_slave_1 entered promiscuous mode [ 78.233755] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.254424] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.265918] device bridge_slave_1 entered promiscuous mode [ 78.277062] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.355642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.410058] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.453668] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.470847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.484442] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.528380] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.565307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.579763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 78.598208] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.614014] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.624522] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.654713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.672460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 78.708291] team0: Port device team_slave_0 added [ 78.732976] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 78.751327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 78.767422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 78.779633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 78.793084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 78.810800] team0: Port device team_slave_0 added [ 78.818634] team0: Port device team_slave_1 added [ 78.839788] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 78.889157] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 78.929268] team0: Port device team_slave_1 added [ 78.966712] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.004311] team0: Port device team_slave_0 added [ 79.010950] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.048616] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.067290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.085808] team0: Port device team_slave_0 added [ 79.099375] team0: Port device team_slave_0 added [ 79.113085] team0: Port device team_slave_1 added [ 79.123468] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.144406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.162469] team0: Port device team_slave_0 added [ 79.179794] team0: Port device team_slave_1 added [ 79.189108] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.204772] team0: Port device team_slave_1 added [ 79.216073] team0: Port device team_slave_1 added [ 79.253190] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.269572] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.277792] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.285635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.315970] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.359769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.368003] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.375853] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.383788] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.391539] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.425220] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.453673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.461668] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.469482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.477927] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.485681] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.498449] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.506435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.527708] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.550282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.571968] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.579760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.587950] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.596008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.613101] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.622758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.652443] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.670818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.037474] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.044104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.052556] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.058951] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.125185] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.131663] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.138399] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.144963] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.155377] ip (6316) used greatest stack depth: 23120 bytes left [ 80.223703] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.230289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.237021] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.243423] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.254921] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.261330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.268035] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.274450] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.284346] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.290789] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.297543] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.303976] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.374428] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.380830] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.387673] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.394089] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.531508] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.546689] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.560941] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.569615] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.577300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.585130] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.294385] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.460199] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.488751] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.585954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.597059] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.712172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.726064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.765663] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.863802] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.877281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.905649] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.924033] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.940785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.043933] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.057610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.076261] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.096720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.118999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.143543] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.205092] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.218837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.307070] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.325394] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.383558] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.255080] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 2020/02/13 01:00:54 executed programs: 6 [ 84.345291] hrtimer: interrupt took 25172 ns [ 192.591375] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 192.597678] (detected by 1, t=10502 jiffies, g=5733, q=933) [ 192.603494] rcu: All QSes seen, last rcu_preempt kthread activity 10502 (4294956299-4294945797), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 192.616165] syz-executor1 R running task 28176 7323 5773 0x00000800 [ 192.623375] Call Trace: [ 192.625970] [ 192.628237] sched_show_task.cold.102+0x2ee/0x35d [ 192.633096] ? can_nice.part.89+0x20/0x20 [ 192.637275] ? trace_hardirqs_off+0x41/0x1a0 [ 192.641708] rcu_sched_clock_irq.cold.86+0xb55/0xc8b [ 192.646849] update_process_times+0x23/0x50 [ 192.651177] tick_sched_handle+0x77/0x140 [ 192.655360] tick_sched_timer+0x43/0x100 [ 192.659434] __hrtimer_run_queues+0x332/0xb50 [ 192.663953] ? tick_sched_do_timer+0x140/0x140 [ 192.668695] ? hrtimer_sleeper_start_expires+0x80/0x80 [ 192.673987] ? ktime_get_update_offsets_now+0x146/0x360 [ 192.679375] hrtimer_interrupt+0x2df/0x760 [ 192.683642] smp_apic_timer_interrupt+0x16f/0x600 [ 192.688492] apic_timer_interrupt+0xf/0x20 [ 192.694819] [ 192.697065] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x2c75/0x5f30 [ 192.702885] Code: 78 61 00 4c 89 e8 48 c1 e8 03 42 80 3c 20 00 0f 85 82 28 00 00 48 83 3d 50 7a 46 07 00 0f 84 d7 1c 00 00 fb 66 0f 1f 44 00 00 <49> 8d bf 68 01 00 00 48 89 f8 48 c1 e8 03 42 80 3c 20 00 0f 85 4a [ 192.721901] RSP: 0018:ffff8881d750fae0 EFLAGS: 00000282 ORIG_RAX: ffffffffffffff13 [ 192.729618] RAX: 1ffffffff10a7791 RBX: ffffffff882ad220 RCX: 0000000000000006 [ 192.736897] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff8881c767ca94 [ 192.744197] RBP: ffff8881d750fcb0 R08: 0000000000000006 R09: fffffbfff13babaa [ 192.751619] R10: fffffbfff13baba9 R11: ffffffff89dd5d4f R12: dffffc0000000000 [ 192.758894] R13: ffffffff8853bc88 R14: ffff8881bd8000b8 R15: ffff8881bd800080 [ 192.766217] ? __kasan_check_read+0x11/0x20 [ 192.770582] ? kvm_arch_vcpu_runnable+0x540/0x540 [ 192.775497] ? get_task_pid+0xd9/0x230 [ 192.779412] ? lock_downgrade+0x900/0x900 [ 192.783592] ? rcu_read_lock_held+0x9c/0xb0 [ 192.787931] ? __kasan_check_read+0x11/0x20 [ 192.792295] kvm_vcpu_ioctl+0x507/0xac0 [ 192.796399] ? kvm_vcpu_ioctl+0x507/0xac0 [ 192.800563] ? kzalloc.constprop.74+0x10/0x10 [ 192.805282] ? rcu_read_lock_held+0x9c/0xb0 [ 192.809621] ? ioctl_file_clone+0x120/0x120 [ 192.813961] ? __fget_files+0x283/0x3e0 [ 192.817954] ? smack_inode_rename+0x280/0x280 [ 192.822469] ? ksys_dup3+0x2e0/0x2e0 [ 192.826281] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 192.831268] ? rcu_read_lock_any_held.part.10+0x50/0x50 [ 192.836644] ? trace_hardirqs_on+0x28/0x1b0 [ 192.841022] ksys_ioctl+0xc4/0x120 [ 192.844569] ? lockdep_hardirqs_on+0x42d/0x5d0 [ 192.849289] __x64_sys_ioctl+0x6e/0xb0 [ 192.853204] do_syscall_64+0xd0/0x600 [ 192.857021] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 192.862213] RIP: 0033:0x4571e9 [ 192.865518] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 192.884556] RSP: 002b:00007fcbcd1d8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 192.892273] RAX: ffffffffffffffda RBX: 00007fcbcd1d96d4 RCX: 00000000004571e9 [ 192.899549] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 192.906829] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 192.914543] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 192.921957] R13: 00000000004cf7d0 R14: 00000000004c5a59 R15: 0000000000000000 [ 192.929387] rcu: rcu_preempt kthread starved for 10502 jiffies! g5733 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 192.939807] rcu: RCU grace-period kthread stack dump: [ 192.945146] rcu_preempt R running task 29680 10 2 0x80004000 [ 192.952358] Call Trace: [ 192.954961] __schedule+0x895/0x1960 [ 192.958694] ? __sched_text_start+0x8/0x8 [ 192.962847] ? _raw_spin_unlock_irqrestore+0x7d/0xd0 [ 192.967969] ? lockdep_hardirqs_on+0x42d/0x5d0 [ 192.972559] ? _raw_spin_unlock_irqrestore+0x7d/0xd0 [ 192.977681] schedule+0xc3/0x2b0 [ 192.981056] schedule_timeout+0x38b/0xad0 [ 192.985223] ? lockdep_hardirqs_on+0x42d/0x5d0 [ 192.989815] ? _raw_spin_unlock_irqrestore+0x7d/0xd0 [ 192.995066] ? usleep_range+0x130/0x130 [ 192.999182] ? _raw_spin_unlock_irqrestore+0x68/0xd0 [ 193.004294] ? prepare_to_swait_event+0x130/0x390 [ 193.009183] ? __next_timer_interrupt+0x100/0x100 [ 193.014057] rcu_gp_kthread+0x9f2/0x1890 [ 193.018208] ? rcu_note_context_switch+0x1b30/0x1b30 [ 193.023323] ? __kthread_parkme+0x47/0x1a0 [ 193.027574] ? __kthread_parkme+0xc8/0x1a0 [ 193.031867] ? __kasan_check_read+0x11/0x20 [ 193.036201] kthread+0x334/0x3f0 [ 193.039592] ? rcu_note_context_switch+0x1b30/0x1b30 [ 193.044706] ? kthread_mod_delayed_work+0x190/0x190 [ 193.049743] ret_from_fork+0x3a/0x50