[ 42.543391][ T24] audit: type=1800 audit(1575364241.130:26): pid=8006 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 42.565589][ T24] audit: type=1800 audit(1575364241.130:27): pid=8006 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [ 42.611477][ T24] audit: type=1800 audit(1575364241.130:28): pid=8006 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 43.442436][ T24] audit: type=1800 audit(1575364242.060:29): pid=8006 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.212' (ECDSA) to the list of known hosts. 2019/12/03 09:10:52 fuzzer started 2019/12/03 09:10:54 dialing manager at 10.128.0.26:38907 2019/12/03 09:10:54 syscalls: 2697 2019/12/03 09:10:54 code coverage: enabled 2019/12/03 09:10:54 comparison tracing: enabled 2019/12/03 09:10:54 extra coverage: extra coverage is not supported by the kernel 2019/12/03 09:10:54 setuid sandbox: enabled 2019/12/03 09:10:54 namespace sandbox: enabled 2019/12/03 09:10:54 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/03 09:10:54 fault injection: enabled 2019/12/03 09:10:54 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/03 09:10:54 net packet injection: enabled 2019/12/03 09:10:54 net device setup: enabled 2019/12/03 09:10:54 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/12/03 09:10:54 devlink PCI setup: PCI device 0000:00:10.0 is not available 09:10:55 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)) 09:10:55 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x3}) syzkaller login: [ 56.683642][ T8169] IPVS: ftp: loaded support on port[0] = 21 [ 56.785753][ T8171] IPVS: ftp: loaded support on port[0] = 21 [ 56.865506][ T8169] chnl_net:caif_netlink_parms(): no params data found 09:10:55 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_128={{0x303}, "25ca080000007200", "4b46becc9719ca3ebfd59f2490a2688a", "6d6fc0ec", "199d72551538871b"}, 0x28) sendto$inet6(r0, &(0x7f0000000180)="8e", 0x1, 0x8000, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000580), 0x1d9, 0x0, 0x0, 0x0) [ 56.926131][ T8171] chnl_net:caif_netlink_parms(): no params data found [ 56.977663][ T8169] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.994507][ T8169] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.002404][ T8169] device bridge_slave_0 entered promiscuous mode [ 57.032293][ T8171] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.054462][ T8171] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.062102][ T8171] device bridge_slave_0 entered promiscuous mode [ 57.077145][ T8169] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.084184][ T8169] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.092371][ T8169] device bridge_slave_1 entered promiscuous mode [ 57.104550][ T8171] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.111593][ T8171] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.121604][ T8175] IPVS: ftp: loaded support on port[0] = 21 [ 57.132006][ T8171] device bridge_slave_1 entered promiscuous mode [ 57.175973][ T8171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.189054][ T8169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.208252][ T8171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 09:10:55 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) read$FUSE(r0, &(0x7f0000000580), 0xefee) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, 0x2, {0x7, 0x1b, 0x0, 0x0, 0xc00}}, 0x50) [ 57.220354][ T8169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.267768][ T8171] team0: Port device team_slave_0 added [ 57.290319][ T8171] team0: Port device team_slave_1 added [ 57.306191][ T8169] team0: Port device team_slave_0 added [ 57.358331][ T8169] team0: Port device team_slave_1 added 09:10:56 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0x3, &(0x7f0000000540)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0xb, 0x9, 0x209e1e, 0x3, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000080), &(0x7f00000000c0)=""/111}, 0x18) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000600)={r0, &(0x7f0000000540), &(0x7f0000000580)=""/77}, 0x20) [ 57.417185][ T8171] device hsr_slave_0 entered promiscuous mode [ 57.485408][ T8171] device hsr_slave_1 entered promiscuous mode 09:10:56 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) [ 57.608663][ T8175] chnl_net:caif_netlink_parms(): no params data found [ 57.630011][ T8178] IPVS: ftp: loaded support on port[0] = 21 [ 57.688869][ T8169] device hsr_slave_0 entered promiscuous mode [ 57.736321][ T8169] device hsr_slave_1 entered promiscuous mode [ 57.764927][ T8169] debugfs: Directory 'hsr0' with parent '/' already present! [ 57.801922][ T8180] IPVS: ftp: loaded support on port[0] = 21 [ 57.821932][ T8182] IPVS: ftp: loaded support on port[0] = 21 [ 57.833422][ T8171] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 57.897895][ T8171] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 57.938622][ T8171] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 58.027295][ T8171] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 58.097023][ T8175] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.104115][ T8175] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.117039][ T8175] device bridge_slave_0 entered promiscuous mode [ 58.126319][ T8175] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.133680][ T8175] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.141347][ T8175] device bridge_slave_1 entered promiscuous mode [ 58.152516][ T8169] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 58.224434][ T8169] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 58.277532][ T8169] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 58.337700][ T8175] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.350292][ T8175] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.366539][ T8169] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 58.428771][ T8175] team0: Port device team_slave_0 added [ 58.449321][ T8175] team0: Port device team_slave_1 added [ 58.496126][ T8175] device hsr_slave_0 entered promiscuous mode [ 58.544769][ T8175] device hsr_slave_1 entered promiscuous mode [ 58.614436][ T8175] debugfs: Directory 'hsr0' with parent '/' already present! [ 58.655587][ T8178] chnl_net:caif_netlink_parms(): no params data found [ 58.729311][ T8180] chnl_net:caif_netlink_parms(): no params data found [ 58.767320][ T8175] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 58.826436][ T8178] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.833512][ T8178] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.841400][ T8178] device bridge_slave_0 entered promiscuous mode [ 58.879447][ T8175] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 58.936444][ T8178] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.943508][ T8178] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.953527][ T8178] device bridge_slave_1 entered promiscuous mode [ 58.985204][ T8175] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 59.016129][ T8182] chnl_net:caif_netlink_parms(): no params data found [ 59.036311][ T8178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.046676][ T8180] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.053766][ T8180] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.061959][ T8180] device bridge_slave_0 entered promiscuous mode [ 59.069544][ T8175] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 59.153353][ T8178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.165291][ T8180] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.172325][ T8180] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.180606][ T8180] device bridge_slave_1 entered promiscuous mode [ 59.192676][ T8182] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.200011][ T8182] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.208178][ T8182] device bridge_slave_0 entered promiscuous mode [ 59.219326][ T8182] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.226476][ T8182] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.234030][ T8182] device bridge_slave_1 entered promiscuous mode [ 59.243162][ T8171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.259328][ T8180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.284154][ T8180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.299009][ T8178] team0: Port device team_slave_0 added [ 59.306291][ T8178] team0: Port device team_slave_1 added [ 59.323415][ T8169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.340614][ T8182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.368510][ T8171] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.376778][ T8182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.398601][ T8180] team0: Port device team_slave_0 added [ 59.446003][ T8178] device hsr_slave_0 entered promiscuous mode [ 59.494779][ T8178] device hsr_slave_1 entered promiscuous mode [ 59.524478][ T8178] debugfs: Directory 'hsr0' with parent '/' already present! [ 59.534199][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.542787][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.561601][ T8180] team0: Port device team_slave_1 added [ 59.607013][ T8180] device hsr_slave_0 entered promiscuous mode [ 59.634882][ T8180] device hsr_slave_1 entered promiscuous mode [ 59.674589][ T8180] debugfs: Directory 'hsr0' with parent '/' already present! [ 59.688069][ T3192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.696071][ T3192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.704851][ T3192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.713302][ T3192] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.722373][ T3192] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.729530][ T3192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.740131][ T8182] team0: Port device team_slave_0 added [ 59.748642][ T8169] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.763604][ T8182] team0: Port device team_slave_1 added [ 59.779670][ T3192] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.787678][ T3192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.798406][ T3192] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.807407][ T3192] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.814492][ T3192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.822618][ T3192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.834882][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.843283][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.851963][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.859058][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.895729][ T8184] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.903626][ T8184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.912683][ T8184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.921458][ T8184] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.929911][ T8184] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.936988][ T8184] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.945042][ T8184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.978064][ T8180] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 60.026668][ T8180] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 60.066312][ T8178] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 60.110602][ T8178] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 60.207542][ T8182] device hsr_slave_0 entered promiscuous mode [ 60.254580][ T8182] device hsr_slave_1 entered promiscuous mode [ 60.294434][ T8182] debugfs: Directory 'hsr0' with parent '/' already present! [ 60.302338][ T8188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.313966][ T8188] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.322363][ T8188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.331092][ T8188] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.339897][ T8188] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.352196][ T8180] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 60.400912][ T8180] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 60.456180][ T8178] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 60.496649][ T8178] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 60.586106][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.597567][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.606834][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.615646][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.623823][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.632238][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.645757][ T8171] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.656901][ T8171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.681226][ T8175] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.693477][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.705069][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.713121][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.721567][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.729791][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.737465][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.773831][ T8188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.785768][ T8188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.794185][ T8188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.803202][ T8188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.815615][ T8169] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.828487][ T8175] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.843743][ T8182] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 60.880325][ T8182] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 60.946766][ T8182] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 60.988707][ T8182] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 61.053888][ T8169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.066697][ T8188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.076069][ T8188] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.084272][ T8188] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.091351][ T8188] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.099343][ T8188] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.108149][ T8188] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.122456][ T8178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.141923][ T8178] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.156321][ T8184] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.164228][ T8184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.172638][ T8184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.181539][ T8184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.190430][ T8184] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.198841][ T8184] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.205934][ T8184] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.219069][ T8171] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.239443][ T8184] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.246939][ T8184] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.261379][ T8184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.353175][ T8182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.376264][ T8182] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.413772][ T8182] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 61.429644][ T8182] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.463277][ T8182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.304348][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 166.311148][ C0] rcu: 0-...!: (10499 ticks this GP) idle=8b2/1/0x4000000000000002 softirq=11045/11045 fqs=7 [ 166.321625][ C0] (t=10500 jiffies g=6365 q=632) [ 166.326638][ C0] rcu: rcu_preempt kthread starved for 10483 jiffies! g6365 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 166.337717][ C0] rcu: RCU grace-period kthread stack dump: [ 166.343590][ C0] rcu_preempt R running task 28864 10 2 0x80004000 [ 166.351475][ C0] Call Trace: [ 166.354758][ C0] __schedule+0x9a0/0xcc0 [ 166.359082][ C0] schedule+0x181/0x210 [ 166.363221][ C0] schedule_timeout+0x14f/0x240 [ 166.368065][ C0] ? run_local_timers+0x120/0x120 [ 166.373078][ C0] rcu_gp_kthread+0xed8/0x1770 [ 166.377834][ C0] kthread+0x332/0x350 [ 166.381883][ C0] ? rcu_report_qs_rsp+0x140/0x140 [ 166.386976][ C0] ? kthread_blkcg+0xe0/0xe0 [ 166.391554][ C0] ret_from_fork+0x24/0x30 [ 166.395967][ C0] NMI backtrace for cpu 0 [ 166.400293][ C0] CPU: 0 PID: 8190 Comm: syz-executor.0 Not tainted 5.4.0-syzkaller #0 [ 166.408505][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 166.418540][ C0] Call Trace: [ 166.421807][ C0] [ 166.424642][ C0] dump_stack+0x1fb/0x318 [ 166.428958][ C0] nmi_cpu_backtrace+0xaf/0x1a0 [ 166.433794][ C0] ? nmi_trigger_cpumask_backtrace+0x16d/0x290 [ 166.439931][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 166.445985][ C0] nmi_trigger_cpumask_backtrace+0x174/0x290 [ 166.451951][ C0] arch_trigger_cpumask_backtrace+0x10/0x20 [ 166.457829][ C0] rcu_dump_cpu_stacks+0x15a/0x220 [ 166.462931][ C0] rcu_sched_clock_irq+0xe25/0x1ad0 [ 166.468117][ C0] ? trace_hardirqs_off+0x74/0x80 [ 166.473127][ C0] update_process_times+0x12d/0x180 [ 166.478310][ C0] tick_sched_timer+0x263/0x420 [ 166.483144][ C0] ? tick_setup_sched_timer+0x3d0/0x3d0 [ 166.488677][ C0] __hrtimer_run_queues+0x403/0x840 [ 166.493875][ C0] hrtimer_interrupt+0x38c/0xda0 [ 166.498817][ C0] ? debug_smp_processor_id+0x9/0x20 [ 166.504091][ C0] smp_apic_timer_interrupt+0x109/0x280 [ 166.509620][ C0] apic_timer_interrupt+0xf/0x20 [ 166.514539][ C0] [ 166.517465][ C0] RIP: 0010:__memcg_kmem_uncharge+0x6/0x2e0 [ 166.523340][ C0] Code: 90 8c 07 00 74 12 48 81 c3 08 02 00 00 48 89 df 4c 89 f6 e8 dc 7d ff ff 5b 41 5e 5d c3 0f 1f 80 00 00 00 00 55 48 89 e5 41 57 <41> 56 41 55 41 54 53 50 89 f3 49 89 fc 48 b8 00 00 00 00 00 fc ff [ 166.542923][ C0] RSP: 0018:ffffc9000215f498 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 166.551314][ C0] RAX: ffffffff81486ea4 RBX: ffffea0002882680 RCX: ffff888098de4480 [ 166.559283][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffea0002882680 [ 166.567267][ C0] RBP: ffffc9000215f4a0 R08: dffffc0000000000 R09: fffffbfff120248a [ 166.575226][ C0] R10: fffffbfff120248a R11: 0000000000000000 R12: ffff88808bcd1020 [ 166.583182][ C0] R13: dffffc0000000000 R14: 1ffff1101179a204 R15: ffff8880a68915a8 [ 166.591161][ C0] ? free_thread_stack+0x124/0x590 [ 166.596264][ C0] free_thread_stack+0x12e/0x590 [ 166.601188][ C0] put_task_stack+0xa3/0x130 [ 166.605764][ C0] finish_task_switch+0x3f1/0x550 [ 166.610776][ C0] __schedule+0x9a8/0xcc0 [ 166.615101][ C0] ? ___preempt_schedule_notrace+0x16/0x27 [ 166.620891][ C0] preempt_schedule_notrace+0xdb/0x120 [ 166.626332][ C0] ___preempt_schedule_notrace+0x16/0x27 [ 166.631947][ C0] ? rcu_is_watching+0x57/0xa0 [ 166.636696][ C0] rcu_is_watching+0x82/0xa0 [ 166.641274][ C0] memcg_kmem_get_cache+0x301/0x590 [ 166.646474][ C0] ? __should_failslab+0x11a/0x160 [ 166.651581][ C0] ? proc_alloc_inode+0x1f/0xe0 [ 166.656421][ C0] kmem_cache_alloc+0x86/0x2e0 [ 166.661171][ C0] ? init_once+0x20/0x20 [ 166.665400][ C0] proc_alloc_inode+0x1f/0xe0 [ 166.670058][ C0] ? init_once+0x20/0x20 [ 166.674289][ C0] new_inode_pseudo+0x68/0x240 [ 166.679048][ C0] new_inode+0x28/0x1c0 [ 166.683195][ C0] proc_pid_make_inode+0x27/0x1d0 [ 166.688208][ C0] proc_pid_instantiate+0x4f/0x1a0 [ 166.693312][ C0] proc_pid_lookup+0x21f/0x300 [ 166.698064][ C0] proc_root_lookup+0x22/0x50 [ 166.702728][ C0] __lookup_slow+0x285/0x380 [ 166.707316][ C0] walk_component+0x2d6/0x7b0 [ 166.711982][ C0] ? inode_permission+0xe0/0x520 [ 166.716910][ C0] link_path_walk+0x75b/0x1410 [ 166.721673][ C0] path_openat+0x139/0x44a0 [ 166.726174][ C0] ? __kasan_kmalloc+0x178/0x1b0 [ 166.731115][ C0] ? cache_alloc_refill+0x3b1/0x3f0 [ 166.736314][ C0] do_filp_open+0x192/0x3d0 [ 166.740808][ C0] ? noop_direct_IO+0x20/0x20 [ 166.745481][ C0] do_sys_open+0x29f/0x560 [ 166.749886][ C0] __x64_sys_open+0x87/0x90 [ 166.754373][ C0] do_syscall_64+0xf7/0x1c0 [ 166.758865][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 166.764750][ C0] RIP: 0033:0x4143f0 [ 166.768633][ C0] Code: 05 48 3d 01 f0 ff ff 0f 83 2d 19 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 83 3d 7d 40 66 00 00 75 14 b8 02 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff [ 166.788220][ C0] RSP: 002b:00007ffc9a4d9cc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 166.796615][ C0] RAX: ffffffffffffffda RBX: 00007ffc9a4d9cf4 RCX: 00000000004143f0 [ 166.804572][ C0] RDX: 00007ffc9a4d9cfa RSI: 0000000000080001 RDI: 00000000004c00fb [ 166.812526][ C0] RBP: 00007ffc9a4d9cf0 R08: 0000000000000000 R09: 0000000000000004 [ 166.820480][ C0] R10: 0000000000000075 R11: 0000000000000246 R12: 00000000004c00fb [ 166.828439][ C0] R13: 00007ffc9a4da210 R14: 0000000000000000 R15: 00007ffc9a4da220