Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 49.968272][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 49.968279][ T26] audit: type=1400 audit(1572754628.886:42): avc: denied { map } for pid=8006 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 50.870095][ T8022] IPVS: ftp: loaded support on port[0] = 21 [ 51.314349][ T8006] can: request_module (can-proto-0) failed. [ 52.525911][ T8006] can: request_module (can-proto-0) failed. [ 52.724998][ T26] audit: type=1400 audit(1572754631.646:43): avc: denied { create } for pid=8006 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 [ 52.750085][ T26] audit: type=1400 audit(1572754631.646:44): avc: denied { create } for pid=8006 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 52.774593][ T26] audit: type=1400 audit(1572754631.646:45): avc: denied { create } for pid=8006 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 Warning: Permanently added '10.128.0.199' (ECDSA) to the list of known hosts. 2019/11/03 04:17:18 parsed 1 programs 2019/11/03 04:17:18 executed programs: 0 [ 60.107128][ T8097] IPVS: ftp: loaded support on port[0] = 21 [ 60.116699][ T8099] IPVS: ftp: loaded support on port[0] = 21 [ 60.129272][ T8101] IPVS: ftp: loaded support on port[0] = 21 [ 60.187313][ T8106] IPVS: ftp: loaded support on port[0] = 21 [ 60.206307][ T8107] IPVS: ftp: loaded support on port[0] = 21 [ 60.220697][ T8104] IPVS: ftp: loaded support on port[0] = 21 [ 60.322347][ T8097] chnl_net:caif_netlink_parms(): no params data found [ 60.411941][ T8097] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.420565][ T8097] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.428770][ T8097] device bridge_slave_0 entered promiscuous mode [ 60.456861][ T8097] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.464414][ T8097] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.472255][ T8097] device bridge_slave_1 entered promiscuous mode [ 60.489895][ T8097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.500346][ T8097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.510131][ T8101] chnl_net:caif_netlink_parms(): no params data found [ 60.552773][ T8097] team0: Port device team_slave_0 added [ 60.580943][ T8097] team0: Port device team_slave_1 added [ 60.615762][ T8099] chnl_net:caif_netlink_parms(): no params data found [ 60.632256][ T8107] chnl_net:caif_netlink_parms(): no params data found [ 60.715164][ T8097] device hsr_slave_0 entered promiscuous mode [ 60.782817][ T8097] device hsr_slave_1 entered promiscuous mode [ 60.863025][ T8106] chnl_net:caif_netlink_parms(): no params data found [ 60.875136][ T8101] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.882203][ T8101] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.890550][ T8101] device bridge_slave_0 entered promiscuous mode [ 60.901025][ T8101] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.908116][ T8101] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.916655][ T8101] device bridge_slave_1 entered promiscuous mode [ 60.936099][ T8104] chnl_net:caif_netlink_parms(): no params data found [ 61.052017][ T8104] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.074842][ T8104] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.094957][ T8104] device bridge_slave_0 entered promiscuous mode [ 61.134952][ T8101] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.150995][ T8099] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.187399][ T8099] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.214564][ T8099] device bridge_slave_0 entered promiscuous mode [ 61.233730][ T8099] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.240849][ T8099] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.249305][ T8099] device bridge_slave_1 entered promiscuous mode [ 61.299282][ T8101] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.334215][ T8104] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.341292][ T8104] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.374344][ T8104] device bridge_slave_1 entered promiscuous mode [ 61.405207][ T8106] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.417968][ T8106] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.439542][ T8106] device bridge_slave_0 entered promiscuous mode [ 61.463828][ T8107] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.470931][ T8107] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.498039][ T8107] device bridge_slave_0 entered promiscuous mode [ 61.541617][ T8106] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.566942][ T8106] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.587667][ T8106] device bridge_slave_1 entered promiscuous mode [ 61.610791][ T8107] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.621863][ T8107] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.634074][ T8107] device bridge_slave_1 entered promiscuous mode [ 61.650681][ T8101] team0: Port device team_slave_0 added [ 61.658412][ T8099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.670426][ T8099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.695708][ T8101] team0: Port device team_slave_1 added [ 61.703327][ T8104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.728144][ T8106] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.739458][ T8104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.767085][ T8107] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.777812][ T8106] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.788315][ T8099] team0: Port device team_slave_0 added [ 61.798098][ T8099] team0: Port device team_slave_1 added [ 61.809538][ T8104] team0: Port device team_slave_0 added [ 61.818942][ T8104] team0: Port device team_slave_1 added [ 61.826360][ T8107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.852016][ T8106] team0: Port device team_slave_0 added [ 61.915111][ T8101] device hsr_slave_0 entered promiscuous mode [ 61.973003][ T8101] device hsr_slave_1 entered promiscuous mode [ 62.042630][ T8101] debugfs: Directory 'hsr0' with parent '/' already present! [ 62.069239][ T8107] team0: Port device team_slave_0 added [ 62.076338][ T8106] team0: Port device team_slave_1 added [ 62.136895][ T8104] device hsr_slave_0 entered promiscuous mode [ 62.202858][ T8104] device hsr_slave_1 entered promiscuous mode [ 62.272707][ T8104] debugfs: Directory 'hsr0' with parent '/' already present! [ 62.315083][ T8099] device hsr_slave_0 entered promiscuous mode [ 62.352950][ T8099] device hsr_slave_1 entered promiscuous mode [ 62.412821][ T8099] debugfs: Directory 'hsr0' with parent '/' already present! [ 62.421846][ T8107] team0: Port device team_slave_1 added [ 62.484509][ T8106] device hsr_slave_0 entered promiscuous mode [ 62.522939][ T8106] device hsr_slave_1 entered promiscuous mode [ 62.565380][ T8106] debugfs: Directory 'hsr0' with parent '/' already present! [ 62.824958][ T8107] device hsr_slave_0 entered promiscuous mode [ 62.882843][ T8107] device hsr_slave_1 entered promiscuous mode [ 62.972608][ T8107] debugfs: Directory 'hsr0' with parent '/' already present! [ 63.200050][ T8097] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.467757][ T8097] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.586263][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.624380][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.872863][ T8104] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.952839][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.961407][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.113698][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.120918][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.267793][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.353242][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.361670][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.368930][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.522713][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.799235][ T8099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.929630][ T8107] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.022869][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.030864][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.141692][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.234026][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.308560][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.335401][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.388239][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.451070][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.460290][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.468912][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.477235][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.484837][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.494389][ T8097] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.506379][ T8104] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.519779][ T8099] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.527972][ T8234] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.537130][ T8234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.545115][ T8234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.552876][ T8234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.560498][ T8234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.576786][ T8107] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.592356][ T8097] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.607629][ T8101] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.631237][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.643363][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.651594][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.658681][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.667102][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.675679][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.684113][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.691224][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.698948][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.717919][ T8101] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.730957][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.741060][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.750678][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.757787][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.766446][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.775159][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.784197][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.792560][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.799642][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.807752][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.816352][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.824749][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.831791][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.839497][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.847867][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.855651][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.864321][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.872152][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.897571][ T8106] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.906505][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.921017][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.930103][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.940062][ T3781] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.947344][ T3781] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.955305][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.964181][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.973087][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.981668][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.990242][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.018439][ T8106] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.025822][ T26] audit: type=1400 audit(1572754644.936:46): avc: denied { associate } for pid=8097 comm="syz-executor.2" name="syz2" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 66.035892][ T8136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.069272][ T8136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.078386][ T8136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.087184][ T8136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.101161][ T8136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.109907][ T8136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.118395][ T8136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.127248][ T8136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.135955][ T8136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.144521][ T8136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.154073][ T8136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.162637][ T8136] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.170042][ T8136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.177652][ T8136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.187120][ T8136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.195494][ T8136] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.202797][ T8136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.210550][ T8136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.220265][ T8136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.228344][ T8136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.236314][ T8136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.244987][ T8136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.255589][ T8136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.263831][ T8136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.282101][ T8101] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 66.294619][ T8101] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.324106][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.342187][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.358935][ T8298] [ 66.359008][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.361317][ T8298] ============================= [ 66.370597][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.386087][ T8298] WARNING: suspicious RCU usage [ 66.388912][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.390968][ T8298] 5.4.0-rc4+ #0 Not tainted [ 66.400186][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.403883][ T8298] ----------------------------- [ 66.416842][ T8298] include/linux/kvm_host.h:536 suspicious rcu_dereference_check() usage! [ 66.417147][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.430294][ T8298] [ 66.430294][ T8298] other info that might help us debug this: [ 66.430294][ T8298] [ 66.436325][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.444754][ T8298] [ 66.444754][ T8298] rcu_scheduler_active = 2, debug_locks = 1 [ 66.453717][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.461663][ T8298] no locks held by syz-executor.2/8298. [ 66.470118][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.479668][ T8298] [ 66.479668][ T8298] stack backtrace: [ 66.484021][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.489472][ T8298] CPU: 1 PID: 8298 Comm: syz-executor.2 Not tainted 5.4.0-rc4+ #0 [ 66.498244][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.505083][ T8298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 66.505089][ T8298] Call Trace: [ 66.505108][ T8298] dump_stack+0x113/0x167 [ 66.505121][ T8298] lockdep_rcu_suspicious+0x14a/0x153 [ 66.505131][ T8298] kvm_dev_ioctl+0xc1c/0x1470 [ 66.505136][ T8298] ? find_held_lock+0x36/0x1d0 [ 66.505143][ T8298] ? kvm_debugfs_release+0x90/0x90 [ 66.505153][ T8298] ? ___might_sleep+0x16b/0x2b0 [ 66.505163][ T8298] do_vfs_ioctl+0x196/0x1150 [ 66.505170][ T8298] ? ioctl_preallocate+0x1c0/0x1c0 [ 66.505183][ T8298] ? ksys_dup3+0x2e0/0x2e0 [ 66.505195][ T8298] ? put_timespec64+0xa9/0x100 [ 66.514196][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.523749][ T8298] ? nsecs_to_jiffies+0x20/0x20 [ 66.523762][ T8298] ? tomoyo_file_ioctl+0x14/0x20 [ 66.523772][ T8298] ksys_ioctl+0x62/0x90 [ 66.523779][ T8298] ? lockdep_hardirqs_on+0x42d/0x5d0 [ 66.523784][ T8298] __x64_sys_ioctl+0x6e/0xb0 [ 66.523795][ T8298] do_syscall_64+0xca/0x5d0 [ 66.523805][ T8298] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 66.523813][ T8298] RIP: 0033:0x459f49 [ 66.527526][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.531403][ T8298] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 66.531406][ T8298] RSP: 002b:00007f7184bc5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 66.531412][ T8298] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459f49 [ 66.531416][ T8298] RDX: 0000000000000002 RSI: 000000000000ae01 RDI: 0000000000000003 [ 66.531418][ T8298] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 66.531422][ T8298] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7184bc66d4 [ 66.531425][ T8298] R13: 00000000004c30a8 R14: 00000000004d7018 R15: 00000000ffffffff [ 66.537406][ T8298] [ 66.541519][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.543026][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.546686][ T8298] ============================= [ 66.552221][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.561566][ T8298] WARNING: suspicious RCU usage [ 66.567102][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.570937][ T8298] 5.4.0-rc4+ #0 Not tainted [ 66.576398][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.589454][ T8298] ----------------------------- [ 66.595031][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.598656][ T8298] include/linux/kvm_host.h:631 suspicious rcu_dereference_check() usage! [ 66.603843][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.617514][ T8101] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.624366][ T8298] [ 66.624366][ T8298] other info that might help us debug this: [ 66.624366][ T8298] [ 66.655934][ T8298] [ 66.655934][ T8298] rcu_scheduler_active = 2, debug_locks = 1 [ 66.682048][ T8106] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 66.747186][ T8298] no locks held by syz-executor.2/8298. [ 66.766101][ T8106] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.817585][ T8298] [ 66.817585][ T8298] stack backtrace: [ 66.848759][ T8104] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.851936][ T8298] CPU: 0 PID: 8298 Comm: syz-executor.2 Not tainted 5.4.0-rc4+ #0 [ 66.858541][ T8099] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.864008][ T8298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 66.864013][ T8298] Call Trace: [ 66.864028][ T8298] dump_stack+0x113/0x167 [ 66.864040][ T8298] lockdep_rcu_suspicious+0x14a/0x153 [ 66.864050][ T8298] kvm_dev_ioctl+0xed2/0x1470 [ 66.864056][ T8298] ? find_held_lock+0x36/0x1d0 [ 66.864063][ T8298] ? kvm_debugfs_release+0x90/0x90 [ 66.864073][ T8298] ? ___might_sleep+0x16b/0x2b0 [ 66.864083][ T8298] do_vfs_ioctl+0x196/0x1150 [ 66.864090][ T8298] ? ioctl_preallocate+0x1c0/0x1c0 [ 66.864104][ T8298] ? ksys_dup3+0x2e0/0x2e0 [ 66.864112][ T8298] ? put_timespec64+0xa9/0x100 [ 66.864117][ T8298] ? nsecs_to_jiffies+0x20/0x20 [ 66.864129][ T8298] ? tomoyo_file_ioctl+0x14/0x20 [ 66.864137][ T8298] ksys_ioctl+0x62/0x90 [ 66.864141][ T8298] ? lockdep_hardirqs_on+0x42d/0x5d0 [ 66.864148][ T8298] __x64_sys_ioctl+0x6e/0xb0 [ 66.883050][ T8099] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.884745][ T8298] do_syscall_64+0xca/0x5d0 [ 66.894425][ T8298] entry_SYSCALL_64_after_hwframe+0x49/0xbe 2019/11/03 04:17:25 executed programs: 6 [ 66.894431][ T8298] RIP: 0033:0x459f49 [ 66.894439][ T8298] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 66.894442][ T8298] RSP: 002b:00007f7184bc5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 66.894447][ T8298] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459f49 [ 66.894450][ T8298] RDX: 0000000000000002 RSI: 000000000000ae01 RDI: 0000000000000003 [ 66.894453][ T8298] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 66.894456][ T8298] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7184bc66d4 [ 66.894459][ T8298] R13: 00000000004c30a8 R14: 00000000004d7018 R15: 00000000ffffffff [ 67.049925][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.058131][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.066233][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.075020][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.083999][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.092722][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.105717][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.115559][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.124494][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.133607][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.148665][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.157145][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.165709][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.174211][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.190765][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.212160][ T8106] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.252774][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.266274][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.275902][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.288019][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.298137][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.306991][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.315663][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.324880][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.333772][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.343944][ T8107] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.354072][ T8104] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.408684][ T8107] 8021q: adding VLAN 0 to HW filter on device batadv0 2019/11/03 04:17:30 executed programs: 246