[ 45.722765][ T27] audit: type=1800 audit(1578468218.011:30): pid=8113 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.156' (ECDSA) to the list of known hosts. 2020/01/08 07:23:48 fuzzer started 2020/01/08 07:23:49 dialing manager at 10.128.0.26:35703 2020/01/08 07:23:50 syscalls: 2824 2020/01/08 07:23:50 code coverage: enabled 2020/01/08 07:23:50 comparison tracing: enabled 2020/01/08 07:23:50 extra coverage: enabled 2020/01/08 07:23:50 setuid sandbox: enabled 2020/01/08 07:23:50 namespace sandbox: enabled 2020/01/08 07:23:50 Android sandbox: /sys/fs/selinux/policy does not exist 2020/01/08 07:23:50 fault injection: enabled 2020/01/08 07:23:50 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/01/08 07:23:50 net packet injection: enabled 2020/01/08 07:23:50 net device setup: enabled 2020/01/08 07:23:50 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/01/08 07:23:50 devlink PCI setup: PCI device 0000:00:10.0 is not available 07:23:51 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 07:23:51 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000001c0)={0xe, 0x18, 0xfa00, @id_tos={0x0, r1, 0x0, 0x3}}, 0x20) syzkaller login: [ 58.852661][ T8281] IPVS: ftp: loaded support on port[0] = 21 [ 59.013797][ T8281] chnl_net:caif_netlink_parms(): no params data found [ 59.048634][ T8284] IPVS: ftp: loaded support on port[0] = 21 [ 59.098965][ T8281] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.114083][ T8281] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.121861][ T8281] device bridge_slave_0 entered promiscuous mode 07:23:51 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x1b, 0x0}}], 0x1, 0x0, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffd) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r0, &(0x7f00000017c0), 0x315, 0x800000) [ 59.147135][ T8281] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.164949][ T8281] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.185622][ T8281] device bridge_slave_1 entered promiscuous mode [ 59.247173][ T8281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.279012][ T8281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 07:23:51 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x7a03, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e0000002f008151e00f80ecdb4cb904054865161a00030014000000000000140e00060015000000dc2976d153b4", 0x2e}], 0x1}, 0x0) [ 59.378408][ T8281] team0: Port device team_slave_0 added [ 59.392934][ T8284] chnl_net:caif_netlink_parms(): no params data found [ 59.427258][ T8281] team0: Port device team_slave_1 added [ 59.445074][ T8288] IPVS: ftp: loaded support on port[0] = 21 [ 59.508225][ T8284] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.516394][ T8284] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.525490][ T8284] device bridge_slave_0 entered promiscuous mode [ 59.556585][ T8281] device hsr_slave_0 entered promiscuous mode 07:23:51 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x29}]}, &(0x7f00000000c0)='GPL\x00', 0x5, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x67) [ 59.604559][ T8281] device hsr_slave_1 entered promiscuous mode [ 59.699104][ T8284] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.725860][ T8284] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.733833][ T8284] device bridge_slave_1 entered promiscuous mode [ 59.762595][ T8289] IPVS: ftp: loaded support on port[0] = 21 [ 59.816400][ T8284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.884626][ T8284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 07:23:52 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_ringparam}) [ 59.967846][ T8291] IPVS: ftp: loaded support on port[0] = 21 [ 59.982723][ T8284] team0: Port device team_slave_0 added [ 60.004585][ T8288] chnl_net:caif_netlink_parms(): no params data found [ 60.026169][ T8284] team0: Port device team_slave_1 added [ 60.086785][ T8281] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 60.128199][ T8281] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 60.181364][ T8281] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 60.233043][ T8281] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 60.327371][ T8284] device hsr_slave_0 entered promiscuous mode [ 60.364438][ T8284] device hsr_slave_1 entered promiscuous mode [ 60.404329][ T8284] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.412172][ T8284] Cannot create hsr debugfs directory [ 60.432506][ T8288] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.432609][ T8294] IPVS: ftp: loaded support on port[0] = 21 [ 60.441185][ T8288] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.453385][ T8288] device bridge_slave_0 entered promiscuous mode [ 60.503377][ T8288] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.511338][ T8288] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.519827][ T8288] device bridge_slave_1 entered promiscuous mode [ 60.573484][ T8288] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.586215][ T8288] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.607141][ T8289] chnl_net:caif_netlink_parms(): no params data found [ 60.668812][ T8288] team0: Port device team_slave_0 added [ 60.678568][ T8291] chnl_net:caif_netlink_parms(): no params data found [ 60.692208][ T8288] team0: Port device team_slave_1 added [ 60.745717][ T8288] device hsr_slave_0 entered promiscuous mode [ 60.784381][ T8288] device hsr_slave_1 entered promiscuous mode [ 60.824060][ T8288] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.831652][ T8288] Cannot create hsr debugfs directory [ 60.952029][ T8291] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.960787][ T8291] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.970548][ T8291] device bridge_slave_0 entered promiscuous mode [ 60.980680][ T8291] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.988532][ T8291] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.996536][ T8291] device bridge_slave_1 entered promiscuous mode [ 61.010360][ T8284] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 61.069889][ T8284] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 61.125278][ T8289] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.132414][ T8289] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.142447][ T8289] device bridge_slave_0 entered promiscuous mode [ 61.152260][ T8289] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.159780][ T8289] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.167416][ T8289] device bridge_slave_1 entered promiscuous mode [ 61.180985][ T8291] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.198085][ T8284] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 61.257638][ T8284] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 61.311245][ T8291] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.331719][ T8294] chnl_net:caif_netlink_parms(): no params data found [ 61.371106][ T8289] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.382976][ T8289] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.407941][ T8288] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 61.478643][ T8291] team0: Port device team_slave_0 added [ 61.489929][ T8291] team0: Port device team_slave_1 added [ 61.500393][ T8281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.508848][ T8288] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 61.559777][ T8288] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 61.601864][ T8288] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 61.667318][ T8289] team0: Port device team_slave_0 added [ 61.676132][ T8289] team0: Port device team_slave_1 added [ 61.726374][ T8291] device hsr_slave_0 entered promiscuous mode [ 61.774427][ T8291] device hsr_slave_1 entered promiscuous mode [ 61.834140][ T8291] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.841741][ T8291] Cannot create hsr debugfs directory [ 61.852113][ T8294] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.859803][ T8294] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.867559][ T8294] device bridge_slave_0 entered promiscuous mode [ 61.916251][ T8289] device hsr_slave_0 entered promiscuous mode [ 61.944741][ T8289] device hsr_slave_1 entered promiscuous mode [ 61.984139][ T8289] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.991910][ T8289] Cannot create hsr debugfs directory [ 62.009839][ T2787] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.017965][ T2787] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.029478][ T8294] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.036872][ T8294] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.046356][ T8294] device bridge_slave_1 entered promiscuous mode [ 62.072099][ T8281] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.095652][ T8294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.135090][ T8294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.160210][ T2791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.169340][ T2791] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.177818][ T2791] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.184999][ T2791] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.192831][ T2791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.202342][ T2791] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.210756][ T2791] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.217811][ T2791] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.243889][ T8294] team0: Port device team_slave_0 added [ 62.251752][ T2783] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.260927][ T2783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.269909][ T2783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.278380][ T2783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.287961][ T2783] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.296507][ T2783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.305104][ T2783] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.315022][ T2783] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.344825][ T8294] team0: Port device team_slave_1 added [ 62.358281][ T8281] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 62.368864][ T8281] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.438300][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.447066][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.456887][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.465410][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.474337][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.483346][ T8288] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.501562][ T8284] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.556685][ T8294] device hsr_slave_0 entered promiscuous mode [ 62.605826][ T8294] device hsr_slave_1 entered promiscuous mode [ 62.644455][ T8294] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.652056][ T8294] Cannot create hsr debugfs directory [ 62.661614][ T8289] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 62.716758][ T8289] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 62.771883][ T8288] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.790000][ T8289] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 62.858454][ T8284] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.868038][ T2783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.876941][ T2783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.884953][ T2783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.892503][ T2783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.904460][ T2780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.912965][ T2780] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.921952][ T2780] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.929160][ T2780] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.939308][ T2789] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.949278][ T8291] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 62.986676][ T8291] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 63.026148][ T8289] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.086036][ T8281] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.098458][ T8291] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 63.135648][ T2789] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.144997][ T2789] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.153253][ T2789] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.160384][ T2789] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.168529][ T2789] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.177328][ T2789] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.185755][ T2789] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.192784][ T2789] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.200574][ T2789] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.208445][ T2789] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.215955][ T2789] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.224828][ T2789] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.233582][ T2789] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.240655][ T2789] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.248362][ T2789] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.257122][ T2789] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.280176][ T8291] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 63.349053][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.357626][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.367352][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.377764][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.387079][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.405969][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.415238][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.433470][ T8284] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 63.444689][ T8284] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.475199][ T2791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.485573][ T2791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.494995][ T2791] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.503264][ T2791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.511888][ T2791] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.520687][ T2791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.528955][ T2791] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.537548][ T2791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.545856][ T2791] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.553903][ T2791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.562740][ T2791] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.571084][ T2791] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.579011][ T2791] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.617282][ T8288] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.628764][ T8288] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.645229][ T2780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.653785][ T2780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.663133][ T2780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.672132][ T2780] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.722379][ T8294] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 63.765727][ T8294] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 63.817126][ T8294] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 63.886642][ T2791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.896289][ T2791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.904597][ T2791] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.912225][ T2791] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.924468][ T8281] device veth0_vlan entered promiscuous mode [ 63.939622][ T8294] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 64.008358][ T2791] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.016796][ T2791] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.024811][ T2791] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.032345][ T2791] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.042629][ T8281] device veth1_vlan entered promiscuous mode [ 64.057307][ T8288] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.077329][ T8291] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.097617][ T8289] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.107854][ T8284] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.132734][ T8289] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.150982][ T2780] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.159133][ T2780] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.169934][ T2780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.178062][ T2780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.186131][ T2780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.193686][ T2780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.246958][ T8291] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.253723][ T2783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.266624][ T2783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.276176][ T2783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.284846][ T2783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.293448][ T2783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.302224][ T2783] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.310715][ T2783] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.317804][ T2783] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.326310][ T2783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.334995][ T2783] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.343224][ T2783] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.350314][ T2783] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.359392][ T2783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.369819][ T2783] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.401630][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.422364][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.449790][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.463063][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.474528][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.482838][ T2767] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.489938][ T2767] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.497932][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.507837][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.517148][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.534588][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.542764][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.564558][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.574837][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.582599][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 169.433934][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 169.440795][ C0] rcu: 0-...!: (10499 ticks this GP) idle=dc6/1/0x4000000000000002 softirq=11924/11924 fqs=7 [ 169.451271][ C0] (t=10501 jiffies g=6765 q=195) [ 169.456285][ C0] rcu: rcu_preempt kthread starved for 10488 jiffies! g6765 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 169.467385][ C0] rcu: RCU grace-period kthread stack dump: [ 169.473264][ C0] rcu_preempt R running task 28864 10 2 0x80004000 [ 169.481153][ C0] Call Trace: [ 169.484439][ C0] __schedule+0x9a0/0xcc0 [ 169.488784][ C0] schedule+0x181/0x210 [ 169.493015][ C0] schedule_timeout+0x14f/0x240 [ 169.497853][ C0] ? run_local_timers+0x120/0x120 [ 169.503827][ C0] rcu_gp_kthread+0xed8/0x1770 [ 169.508590][ C0] kthread+0x332/0x350 [ 169.512646][ C0] ? rcu_report_qs_rsp+0x140/0x140 [ 169.517744][ C0] ? kthread_blkcg+0xe0/0xe0 [ 169.522323][ C0] ret_from_fork+0x24/0x30 [ 169.526754][ C0] NMI backtrace for cpu 0 [ 169.531074][ C0] CPU: 0 PID: 8281 Comm: syz-executor.0 Not tainted 5.5.0-rc5-syzkaller #0 [ 169.539641][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 169.549681][ C0] Call Trace: [ 169.552955][ C0] [ 169.555796][ C0] dump_stack+0x1fb/0x318 [ 169.560123][ C0] nmi_cpu_backtrace+0xaf/0x1a0 [ 169.564964][ C0] ? nmi_trigger_cpumask_backtrace+0x16d/0x290 [ 169.571105][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 169.577248][ C0] nmi_trigger_cpumask_backtrace+0x174/0x290 [ 169.583219][ C0] arch_trigger_cpumask_backtrace+0x10/0x20 [ 169.589160][ C0] rcu_dump_cpu_stacks+0x15a/0x220 [ 169.594265][ C0] rcu_sched_clock_irq+0xe25/0x1ad0 [ 169.599457][ C0] ? trace_hardirqs_off+0x74/0x80 [ 169.604471][ C0] update_process_times+0x12d/0x180 [ 169.609659][ C0] tick_sched_timer+0x263/0x420 [ 169.614496][ C0] ? tick_setup_sched_timer+0x3d0/0x3d0 [ 169.620028][ C0] __hrtimer_run_queues+0x403/0x840 [ 169.625245][ C0] hrtimer_interrupt+0x38c/0xda0 [ 169.630218][ C0] ? debug_smp_processor_id+0x9/0x20 [ 169.635519][ C0] smp_apic_timer_interrupt+0x109/0x280 [ 169.641062][ C0] apic_timer_interrupt+0xf/0x20 [ 169.645986][ C0] [ 169.648917][ C0] RIP: 0010:__memcg_kmem_uncharge+0x12f/0x1a0 [ 169.654973][ C0] Code: 5f 7c 48 89 d8 48 c1 e8 03 42 8a 04 28 84 c0 75 3b f6 03 01 75 10 49 83 c7 10 4c 89 ff 48 8b 75 d0 e8 f5 90 00 00 48 83 c4 08 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 44 89 e1 80 e1 07 80 c1 03 38 c1 [ 169.674569][ C0] RSP: 0018:ffffc90001ec7b98 EFLAGS: 00000282 ORIG_RAX: ffffffffffffff13 [ 169.682963][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000000 [ 169.690920][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffea000250a4c0 [ 169.699082][ C0] RBP: ffffc90001ec7bc0 R08: dffffc0000000000 R09: fffffbfff124248a [ 169.707042][ C0] R10: fffffbfff124248a R11: 0000000000000000 R12: ffffea000250a4c0 [ 169.715000][ C0] R13: 1ffffd40004a149f R14: ffffea000250a4f8 R15: 0000000000000000 [ 169.722978][ C0] ? free_thread_stack+0x124/0x590 [ 169.728079][ C0] free_thread_stack+0x12e/0x590 [ 169.733005][ C0] put_task_stack+0xa3/0x130 [ 169.737584][ C0] finish_task_switch+0x3f1/0x550 [ 169.742600][ C0] __schedule+0x9a8/0xcc0 [ 169.746941][ C0] schedule+0x181/0x210 [ 169.751087][ C0] do_nanosleep+0x1d0/0x6c0 [ 169.755590][ C0] hrtimer_nanosleep+0x3a6/0x5b0 [ 169.760527][ C0] ? trace_hrtimer_expire_exit+0x2d0/0x2d0 [ 169.766323][ C0] __x64_sys_nanosleep+0x186/0x1d0 [ 169.771430][ C0] do_syscall_64+0xf7/0x1c0 [ 169.775941][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 169.781840][ C0] RIP: 0033:0x4593f0 [ 169.785765][ C0] Code: c0 5b 5d c3 66 0f 1f 44 00 00 8b 04 24 48 83 c4 18 5b 5d c3 66 0f 1f 44 00 00 83 3d 41 f5 61 00 00 75 14 b8 23 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 d4 d1 fb ff c3 48 83 ec 08 e8 ea 46 00 00 [ 169.805373][ C0] RSP: 002b:00007ffc03b1df58 EFLAGS: 00000246 ORIG_RAX: 0000000000000023 [ 169.813782][ C0] RAX: ffffffffffffffda RBX: 000000000000fb94 RCX: 00000000004593f0 [ 169.821751][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007ffc03b1df60 [ 169.829721][ C0] RBP: 0000000000000002 R08: 0000000000000001 R09: 0000000001d4a940 [ 169.837686][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 169.845661][ C0] R13: 00007ffc03b1dfb0 R14: 000000000000fb85 R15: 00007ffc03b1dfc0