[ 43.182341][ T23] audit: type=1800 audit(1578447079.491:27): pid=8127 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [ 43.228927][ T23] audit: type=1800 audit(1578447079.491:28): pid=8127 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 43.691566][ T23] audit: type=1800 audit(1578447080.031:29): pid=8127 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 43.710934][ T23] audit: type=1800 audit(1578447080.041:30): pid=8127 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.47' (ECDSA) to the list of known hosts. 2020/01/08 01:31:30 fuzzer started 2020/01/08 01:31:31 dialing manager at 10.128.0.26:35703 2020/01/08 01:31:31 syscalls: 2824 2020/01/08 01:31:31 code coverage: enabled 2020/01/08 01:31:31 comparison tracing: enabled 2020/01/08 01:31:31 extra coverage: enabled 2020/01/08 01:31:31 setuid sandbox: enabled 2020/01/08 01:31:31 namespace sandbox: enabled 2020/01/08 01:31:31 Android sandbox: /sys/fs/selinux/policy does not exist 2020/01/08 01:31:31 fault injection: enabled 2020/01/08 01:31:31 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/01/08 01:31:31 net packet injection: enabled 2020/01/08 01:31:31 net device setup: enabled 2020/01/08 01:31:31 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/01/08 01:31:31 devlink PCI setup: PCI device 0000:00:10.0 is not available 01:31:32 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x0, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/1, 0x1}], 0x20000000000000e4) 01:31:32 executing program 1: syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @random="77ba05434ae2", @val, {@ipv6}}, &(0x7f00000000c0)={0x0, 0x2, [0x4, 0x5a]}) syzkaller login: [ 56.492861][ T8294] IPVS: ftp: loaded support on port[0] = 21 [ 56.620836][ T8294] chnl_net:caif_netlink_parms(): no params data found [ 56.699203][ T8294] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.708009][ T8294] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.716076][ T8294] device bridge_slave_0 entered promiscuous mode [ 56.730373][ T8297] IPVS: ftp: loaded support on port[0] = 21 [ 56.738839][ T8294] bridge0: port 2(bridge_slave_1) entered blocking state 01:31:33 executing program 2: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x0) sysinfo(&(0x7f00000007c0)=""/154) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000240)={0x1, 0x0, 0x0, &(0x7f0000000800)}) [ 56.751890][ T8294] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.760866][ T8294] device bridge_slave_1 entered promiscuous mode [ 56.810155][ T8294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.833730][ T8294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.908339][ T8294] team0: Port device team_slave_0 added [ 56.944952][ T8294] team0: Port device team_slave_1 added 01:31:33 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) [ 56.960183][ T8297] chnl_net:caif_netlink_parms(): no params data found [ 57.038110][ T8294] device hsr_slave_0 entered promiscuous mode [ 57.124711][ T8294] device hsr_slave_1 entered promiscuous mode [ 57.188112][ T8300] IPVS: ftp: loaded support on port[0] = 21 [ 57.210513][ T8302] IPVS: ftp: loaded support on port[0] = 21 01:31:33 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f00000001c0)=ANY=[@ANYBLOB="e5ffffff", @ANYRES32=0x0], &(0x7f00000000c0)=0xfe10) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8) [ 57.233867][ T8297] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.251541][ T8297] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.260598][ T8297] device bridge_slave_0 entered promiscuous mode [ 57.304340][ T8297] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.314648][ T8297] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.323230][ T8297] device bridge_slave_1 entered promiscuous mode [ 57.408096][ T8297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.436827][ T8297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 01:31:33 executing program 5: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f0000000100)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "8811e78754a503d39c2bd6a40f03c8aa024d00000000fffffffbffff7f261e21ccf67e1db900e565aa9a9d32c7627ffe6a54cdbd77b300", 0x8002b}, 0x60) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x8b593c673d0edf9) [ 57.495371][ T8304] IPVS: ftp: loaded support on port[0] = 21 [ 57.509894][ T8297] team0: Port device team_slave_0 added [ 57.518293][ T8294] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 57.586754][ T8294] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 57.628246][ T8297] team0: Port device team_slave_1 added [ 57.634658][ T8294] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 57.722701][ T8294] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 57.826953][ T8306] IPVS: ftp: loaded support on port[0] = 21 [ 57.906375][ T8297] device hsr_slave_0 entered promiscuous mode [ 57.974787][ T8297] device hsr_slave_1 entered promiscuous mode [ 58.014569][ T8297] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.022308][ T8297] Cannot create hsr debugfs directory [ 58.033552][ T8300] chnl_net:caif_netlink_parms(): no params data found [ 58.068690][ T8302] chnl_net:caif_netlink_parms(): no params data found [ 58.179577][ T8302] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.187330][ T8302] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.195134][ T8302] device bridge_slave_0 entered promiscuous mode [ 58.209491][ T8300] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.216640][ T8300] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.224237][ T8300] device bridge_slave_0 entered promiscuous mode [ 58.231616][ T8304] chnl_net:caif_netlink_parms(): no params data found [ 58.247298][ T8302] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.254338][ T8302] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.261995][ T8302] device bridge_slave_1 entered promiscuous mode [ 58.278412][ T8300] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.287222][ T8300] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.294918][ T8300] device bridge_slave_1 entered promiscuous mode [ 58.322025][ T8302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.333970][ T8300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.346296][ T8300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.374254][ T8304] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.381534][ T8304] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.389075][ T8304] device bridge_slave_0 entered promiscuous mode [ 58.397781][ T8302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.427510][ T8304] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.435281][ T8304] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.442754][ T8304] device bridge_slave_1 entered promiscuous mode [ 58.466256][ T8304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.480021][ T8300] team0: Port device team_slave_0 added [ 58.495115][ T8304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.504204][ T8297] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 58.537129][ T8300] team0: Port device team_slave_1 added [ 58.542831][ T8297] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 58.597623][ T8294] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.614611][ T8302] team0: Port device team_slave_0 added [ 58.636773][ T8304] team0: Port device team_slave_0 added [ 58.642523][ T8297] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 58.678335][ T8306] chnl_net:caif_netlink_parms(): no params data found [ 58.688851][ T8302] team0: Port device team_slave_1 added [ 58.747032][ T8300] device hsr_slave_0 entered promiscuous mode [ 58.784670][ T8300] device hsr_slave_1 entered promiscuous mode [ 58.834756][ T8300] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.842322][ T8300] Cannot create hsr debugfs directory [ 58.848855][ T8304] team0: Port device team_slave_1 added [ 58.860508][ T8297] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 58.932818][ T2975] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.941825][ T2975] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.962130][ T8294] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.015887][ T8304] device hsr_slave_0 entered promiscuous mode [ 59.067388][ T8304] device hsr_slave_1 entered promiscuous mode [ 59.114457][ T8304] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.122006][ T8304] Cannot create hsr debugfs directory [ 59.135677][ T2975] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.145020][ T2975] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.153276][ T2975] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.160413][ T2975] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.177013][ T2975] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.214296][ T2975] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.223341][ T2975] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.232126][ T2975] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.239181][ T2975] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.286037][ T8302] device hsr_slave_0 entered promiscuous mode [ 59.334756][ T8302] device hsr_slave_1 entered promiscuous mode [ 59.364618][ T8302] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.372172][ T8302] Cannot create hsr debugfs directory [ 59.377968][ T8306] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.385104][ T8306] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.392621][ T8306] device bridge_slave_0 entered promiscuous mode [ 59.400537][ T8306] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.408391][ T8306] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.416273][ T8306] device bridge_slave_1 entered promiscuous mode [ 59.452497][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.484150][ T8306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.496101][ T8306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.527402][ T2979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.573715][ T8297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.592378][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.603492][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.612482][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.621246][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.629835][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.638121][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.648209][ T8306] team0: Port device team_slave_0 added [ 59.655413][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.678168][ T8300] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 59.716976][ T8306] team0: Port device team_slave_1 added [ 59.732283][ T8300] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 59.796369][ T8300] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 59.837025][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.844991][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.852494][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.860862][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.871566][ T8294] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.918228][ T8306] device hsr_slave_0 entered promiscuous mode [ 59.954883][ T8306] device hsr_slave_1 entered promiscuous mode [ 59.994548][ T8306] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.002260][ T8306] Cannot create hsr debugfs directory [ 60.008780][ T8300] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 60.092504][ T8297] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.114041][ T8302] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 60.158808][ T8302] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 60.222453][ T8302] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 60.276829][ T8302] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 60.316255][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.323675][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.352088][ T2979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.361065][ T2979] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.369758][ T2979] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.376901][ T2979] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.385862][ T8304] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 60.458032][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.466554][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.475489][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.483712][ T2938] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.490832][ T2938] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.523137][ T8294] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.531636][ T8304] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 60.567852][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.577113][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.585596][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.593915][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.613794][ T8297] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 60.625811][ T8297] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.647648][ T8304] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 60.696480][ T8304] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 60.736667][ T2877] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.744331][ T2877] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.753105][ T2877] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.761452][ T2877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.769825][ T2877] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.778286][ T2877] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.786486][ T2877] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.795849][ T2877] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.840246][ T8297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.847604][ T2877] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.856948][ T2877] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.891485][ T8300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.910342][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.922107][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.933121][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.942567][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.951470][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.959407][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.979718][ T8306] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 61.007152][ T8294] device veth0_vlan entered promiscuous mode [ 61.020353][ T8306] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 61.067817][ T8306] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 61.136890][ T8306] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 61.176883][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.184881][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.192493][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.201014][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.213454][ T8294] device veth1_vlan entered promiscuous mode [ 61.237301][ T8300] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.272225][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.293310][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.304854][ T8297] device veth0_vlan entered promiscuous mode [ 61.336515][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.344045][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.368824][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.378757][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.401663][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.408764][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.394392][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 166.401208][ C0] rcu: 0-...!: (1 GPs behind) idle=aaa/1/0x4000000000000002 softirq=11802/11805 fqs=1 [ 166.411084][ C0] (t=10500 jiffies g=6281 q=19) [ 166.416010][ C0] rcu: rcu_preempt kthread starved for 10498 jiffies! g6281 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 166.427089][ C0] rcu: RCU grace-period kthread stack dump: [ 166.433235][ C0] rcu_preempt R running task 29048 10 2 0x80004000 [ 166.441120][ C0] Call Trace: [ 166.444404][ C0] __schedule+0x9a0/0xcc0 [ 166.448729][ C0] schedule+0x181/0x210 [ 166.452876][ C0] schedule_timeout+0x14f/0x240 [ 166.457715][ C0] ? run_local_timers+0x120/0x120 [ 166.462728][ C0] rcu_gp_kthread+0xed8/0x1770 [ 166.467494][ C0] kthread+0x332/0x350 [ 166.471547][ C0] ? rcu_report_qs_rsp+0x140/0x140 [ 166.476641][ C0] ? kthread_blkcg+0xe0/0xe0 [ 166.481216][ C0] ret_from_fork+0x24/0x30 [ 166.485628][ C0] NMI backtrace for cpu 0 [ 166.489944][ C0] CPU: 0 PID: 8313 Comm: udevd Not tainted 5.5.0-rc5-syzkaller #0 [ 166.497726][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 166.507772][ C0] Call Trace: [ 166.511060][ C0] [ 166.513909][ C0] dump_stack+0x1fb/0x318 [ 166.518230][ C0] nmi_cpu_backtrace+0xaf/0x1a0 [ 166.523067][ C0] ? nmi_trigger_cpumask_backtrace+0x16d/0x290 [ 166.529215][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 166.535269][ C0] nmi_trigger_cpumask_backtrace+0x174/0x290 [ 166.541238][ C0] arch_trigger_cpumask_backtrace+0x10/0x20 [ 166.547118][ C0] rcu_dump_cpu_stacks+0x15a/0x220 [ 166.552222][ C0] rcu_sched_clock_irq+0xe25/0x1ad0 [ 166.557413][ C0] ? trace_hardirqs_off+0x74/0x80 [ 166.562429][ C0] update_process_times+0x12d/0x180 [ 166.567617][ C0] tick_sched_timer+0x263/0x420 [ 166.572457][ C0] ? tick_setup_sched_timer+0x3d0/0x3d0 [ 166.577989][ C0] __hrtimer_run_queues+0x403/0x840 [ 166.583189][ C0] hrtimer_interrupt+0x38c/0xda0 [ 166.588135][ C0] ? debug_smp_processor_id+0x9/0x20 [ 166.593411][ C0] smp_apic_timer_interrupt+0x109/0x280 [ 166.598945][ C0] apic_timer_interrupt+0xf/0x20 [ 166.603864][ C0] [ 166.606792][ C0] RIP: 0010:__memcg_kmem_uncharge+0xa/0x1a0 [ 166.612672][ C0] Code: 74 12 48 81 c3 08 02 00 00 48 89 df 4c 89 f6 e8 8c 85 ff ff 5b 41 5e 5d c3 0f 1f 80 00 00 00 00 55 48 89 e5 41 57 41 56 41 55 <41> 54 53 50 89 f3 49 89 fc 48 b8 00 00 00 00 00 fc ff df 4c 8d 77 [ 166.632261][ C0] RSP: 0018:ffffc90002797e18 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 166.640660][ C0] RAX: ffffffff81489244 RBX: ffffea00025a0100 RCX: ffff88809f5d2440 [ 166.648618][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffea00025a0100 [ 166.656588][ C0] RBP: ffffc90002797e30 R08: dffffc0000000000 R09: fffffbfff12c962d [ 166.664559][ C0] R10: fffffbfff12c962d R11: 0000000000000000 R12: ffff8880a361f4a0 [ 166.672517][ C0] R13: dffffc0000000000 R14: 1ffff110146c3e94 R15: ffff8880a2fcf678 [ 166.680489][ C0] ? free_thread_stack+0x124/0x590 [ 166.685598][ C0] free_thread_stack+0x12e/0x590 [ 166.690526][ C0] put_task_stack+0xa3/0x130 [ 166.695102][ C0] finish_task_switch+0x3f1/0x550 [ 166.700116][ C0] schedule_tail+0x20/0x1a0 [ 166.704608][ C0] ret_from_fork+0x8/0x30 [ 166.708923][ C0] RIP: 0033:0x7fafc5ea5f46 [ 166.713396][ C0] Code: Bad RIP value. [ 166.717451][ C0] RSP: 002b:00007ffe0f266340 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 166.725846][ C0] RAX: 0000000000000000 RBX: 00007ffe0f266340 RCX: 00007fafc5ea5f46 [ 166.733807][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 166.741767][ C0] RBP: 00007ffe0f2663a0 R08: 0000000000002047 R09: 0000000000002047 [ 166.749730][ C0] R10: 00007fafc67c2a70 R11: 0000000000000246 R12: 0000000000000000 [ 166.757686][ C0] R13: 00007ffe0f266360 R14: 0000000000000005 R15: 0000000000000005