[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [ 20.942858] sshd (5536) used greatest stack depth: 23336 bytes left [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 30.854109] IPVS: ftp: loaded support on port[0] = 21 [ 31.127676] tipc: TX() has been purged, node left! [ 59.014357] can: request_module (can-proto-0) failed. [ 59.024425] can: request_module (can-proto-0) failed. Warning: Permanently added '10.128.10.39' (ECDSA) to the list of known hosts. 2020/01/14 00:36:10 parsed 1 programs 2020/01/14 00:36:11 executed programs: 0 [ 68.783318] IPVS: ftp: loaded support on port[0] = 21 [ 68.793749] IPVS: ftp: loaded support on port[0] = 21 [ 68.808762] IPVS: ftp: loaded support on port[0] = 21 [ 68.827141] IPVS: ftp: loaded support on port[0] = 21 [ 68.837279] IPVS: ftp: loaded support on port[0] = 21 [ 68.837379] IPVS: ftp: loaded support on port[0] = 21 [ 69.651327] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.659109] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.666161] device bridge_slave_0 entered promiscuous mode [ 69.734070] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.745689] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.757494] device bridge_slave_1 entered promiscuous mode [ 69.766183] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.774929] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.782434] device bridge_slave_0 entered promiscuous mode [ 69.853055] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.864425] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.876195] device bridge_slave_1 entered promiscuous mode [ 69.885618] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.892564] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.899699] device bridge_slave_0 entered promiscuous mode [ 69.917873] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.924272] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.939033] device bridge_slave_0 entered promiscuous mode [ 69.961960] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.977425] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.984997] device bridge_slave_1 entered promiscuous mode [ 69.993352] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.003110] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.010107] device bridge_slave_0 entered promiscuous mode [ 70.023649] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.031570] ip (5977) used greatest stack depth: 23176 bytes left [ 70.037995] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.048528] device bridge_slave_1 entered promiscuous mode [ 70.057976] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.064363] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.071756] device bridge_slave_0 entered promiscuous mode [ 70.089256] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.095654] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.105316] device bridge_slave_1 entered promiscuous mode [ 70.117343] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.145559] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.156830] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.164122] device bridge_slave_1 entered promiscuous mode [ 70.182204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.306080] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.329018] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.351609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.378796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.407406] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.426362] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.460922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.478759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.498962] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.513904] team0: Port device team_slave_0 added [ 70.529174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.546685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.562082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.586806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.605333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.617046] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.643004] team0: Port device team_slave_1 added [ 70.667011] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.687457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.703130] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.717083] team0: Port device team_slave_0 added [ 70.742158] team0: Port device team_slave_0 added [ 70.750421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.763590] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.792242] team0: Port device team_slave_1 added [ 70.798527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.810457] team0: Port device team_slave_1 added [ 70.836375] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.858123] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.869878] team0: Port device team_slave_0 added [ 70.888827] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.904082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.921481] team0: Port device team_slave_0 added [ 70.933313] team0: Port device team_slave_1 added [ 70.945046] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.961305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.978464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.986571] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.001027] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.010859] team0: Port device team_slave_1 added [ 71.039678] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.062147] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.070555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.086071] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.094361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.102429] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.124028] team0: Port device team_slave_0 added [ 71.141167] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.163274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.172496] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.180444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.188806] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.196376] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.204577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.226683] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.243733] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.260458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.271166] team0: Port device team_slave_1 added [ 71.292196] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.312869] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.341148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.385053] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.396811] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.406460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.437166] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.453561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.487793] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.520151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.755994] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.762659] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.769923] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.776319] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.795006] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.801447] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.808132] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.814523] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.839390] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.845798] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.852471] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.858869] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.920889] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.927409] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.934107] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.940786] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.052263] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.058711] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.065372] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.071824] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.159776] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.166203] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.172885] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.179268] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.457823] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.465201] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.479849] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.486977] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.495137] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.502700] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.733529] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.870297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.009364] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.030671] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.102075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.113300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.180785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.249671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.258729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.294714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.328606] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.393633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.405181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.424535] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.473142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.481363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.589242] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.598404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.605364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.666596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.680003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.699422] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.775774] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.848698] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.553326] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 75.611313] hrtimer: interrupt took 48040 ns 2020/01/14 00:36:18 executed programs: 6 [ 76.412474] debugfs: Directory 'vcpu0' with parent '7238-5' already present! 2020/01/14 00:36:27 executed programs: 11 [ 189.977536] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 189.983840] (detected by 1, t=10502 jiffies, g=5365, q=255) [ 189.989639] rcu: All QSes seen, last rcu_preempt kthread activity 10503 (4294956137-4294945634), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 190.002297] syz-executor4 R running task 28016 7337 5746 0x00000800 [ 190.009508] Call Trace: [ 190.012094] [ 190.014253] sched_show_task.cold.102+0x2ee/0x35d [ 190.019102] ? can_nice.part.89+0x20/0x20 [ 190.023250] ? trace_hardirqs_off+0x41/0x1a0 [ 190.027659] rcu_sched_clock_irq.cold.89+0xb2e/0xc5e [ 190.032793] update_process_times+0x23/0x50 [ 190.037114] tick_sched_handle+0x77/0x140 [ 190.041262] tick_sched_timer+0x43/0x100 [ 190.045327] __hrtimer_run_queues+0x332/0xb50 [ 190.049824] ? tick_sched_do_timer+0x140/0x140 [ 190.054416] ? hrtimer_sleeper_start_expires+0x80/0x80 [ 190.059692] ? ktime_get_update_offsets_now+0x146/0x360 [ 190.065077] hrtimer_interrupt+0x2df/0x760 [ 190.069325] smp_apic_timer_interrupt+0x16f/0x600 [ 190.074165] apic_timer_interrupt+0xf/0x20 [ 190.078391] [ 190.080624] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x2bdb/0x5ee0 [ 190.086333] Code: 0f 61 00 4c 89 e8 48 c1 e8 03 42 80 3c 20 00 0f 85 5f 2b 00 00 48 83 3d 6a 30 46 07 00 0f 84 22 1d 00 00 fb 66 0f 1f 44 00 00 <49> 8d bf 68 01 00 00 48 89 f8 48 c1 e8 03 42 80 3c 20 00 0f 85 4f [ 190.105239] RSP: 0018:ffff8881d1faf9b0 EFLAGS: 00000282 ORIG_RAX: ffffffffffffff13 [ 190.113205] RAX: 1ffffffff10a66dd RBX: ffffffff88270220 RCX: 0000000000000006 [ 190.120474] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff8881c077a8d4 [ 190.127754] RBP: ffff8881d1fafb00 R08: 0000000000000006 R09: fffffbfff13b23ca [ 190.135213] R10: fffffbfff13b23c9 R11: ffffffff89d91e4f R12: dffffc0000000000 [ 190.142494] R13: ffffffff885336e8 R14: ffff8881d7ed0138 R15: ffff8881d7ed0100 [ 190.149791] ? find_held_lock+0x36/0x1d0 [ 190.153863] ? kvm_arch_vcpu_runnable+0x540/0x540 [ 190.158725] ? rcu_read_lock_held+0x9c/0xb0 [ 190.163053] ? __kasan_check_read+0x11/0x20 [ 190.167392] kvm_vcpu_ioctl+0x507/0xb30 [ 190.171385] ? kvm_vcpu_ioctl+0x507/0xb30 [ 190.175542] ? kvm_write_guest_cached+0x10/0x10 [ 190.180215] ? __kasan_check_read+0x11/0x20 [ 190.184695] ? mark_lock+0xc5/0x11d0 [ 190.188445] ? __kasan_check_read+0x11/0x20 [ 190.192779] ? __lock_acquire+0x96a/0x4ef0 [ 190.197028] ? futex_exit_release+0x60/0x60 [ 190.201370] ? find_held_lock+0x36/0x1d0 [ 190.205450] ? __fget+0x294/0x410 [ 190.208923] do_vfs_ioctl+0x199/0x11b0 [ 190.212931] ? rcu_read_lock_held+0x9c/0xb0 [ 190.217294] ? compat_ioctl_preallocate+0x1d0/0x1d0 [ 190.222329] ? __fget+0x2ac/0x410 [ 190.225814] ? smack_inode_rename+0x280/0x280 [ 190.230328] ? ksys_dup3+0x2e0/0x2e0 [ 190.234045] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 190.239045] ? rcu_read_lock_any_held.part.10+0x50/0x50 [ 190.244441] ? trace_hardirqs_on+0x28/0x1b0 [ 190.248773] ksys_ioctl+0x62/0x90 [ 190.252345] ? lockdep_hardirqs_on+0x42d/0x5d0 [ 190.256945] __x64_sys_ioctl+0x6e/0xb0 [ 190.260851] do_syscall_64+0xd0/0x600 [ 190.264668] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 190.269864] RIP: 0033:0x4571e9 [ 190.273075] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 190.291989] RSP: 002b:00007f1f60725c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 190.299716] RAX: ffffffffffffffda RBX: 00007f1f607266d4 RCX: 00000000004571e9 [ 190.306994] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 190.314271] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 190.321545] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 190.328822] R13: 00000000004cf7d0 R14: 00000000004c5a59 R15: 0000000000000000 [ 190.336122] rcu: rcu_preempt kthread starved for 10537 jiffies! g5365 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 190.346542] rcu: RCU grace-period kthread stack dump: [ 190.351740] rcu_preempt R running task 29368 10 2 0x80004000 [ 190.358942] Call Trace: [ 190.361551] __schedule+0x895/0x1960 [ 190.365274] ? __sched_text_start+0x8/0x8 [ 190.369433] ? _raw_spin_unlock_irqrestore+0x7d/0xd0 [ 190.374557] ? lockdep_hardirqs_on+0x42d/0x5d0 [ 190.379136] ? _raw_spin_unlock_irqrestore+0x7d/0xd0 [ 190.384242] schedule+0xc3/0x2b0 [ 190.387607] schedule_timeout+0x38b/0xad0 [ 190.391752] ? lockdep_hardirqs_on+0x42d/0x5d0 [ 190.396457] ? _raw_spin_unlock_irqrestore+0x7d/0xd0 [ 190.401684] ? usleep_range+0x130/0x130 [ 190.405676] ? _raw_spin_unlock_irqrestore+0x68/0xd0 [ 190.410788] ? prepare_to_swait_event+0x130/0x390 [ 190.415641] ? __next_timer_interrupt+0x100/0x100 [ 190.420505] rcu_gp_kthread+0x997/0x1820 [ 190.424568] ? invoke_rcu_core+0x220/0x220 [ 190.428948] ? __kthread_parkme+0x47/0x1a0 [ 190.433198] ? __kthread_parkme+0xc8/0x1a0 [ 190.437445] ? __kasan_check_read+0x11/0x20 [ 190.441776] kthread+0x334/0x3f0 [ 190.445147] ? invoke_rcu_core+0x220/0x220 [ 190.449396] ? kthread_mod_delayed_work+0x190/0x190 [ 190.454541] ret_from_fork+0x3a/0x50