[ 41.379943][ T23] audit: type=1800 audit(1575399380.463:27): pid=7923 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [ 41.420861][ T23] audit: type=1800 audit(1575399380.463:28): pid=7923 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 41.942768][ T23] audit: type=1800 audit(1575399381.063:29): pid=7923 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 41.962211][ T23] audit: type=1800 audit(1575399381.063:30): pid=7923 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.1.31' (ECDSA) to the list of known hosts. 2019/12/03 18:56:29 fuzzer started 2019/12/03 18:56:31 dialing manager at 10.128.0.26:42111 2019/12/03 18:56:31 syscalls: 2689 2019/12/03 18:56:31 code coverage: enabled 2019/12/03 18:56:31 comparison tracing: enabled 2019/12/03 18:56:31 extra coverage: extra coverage is not supported by the kernel 2019/12/03 18:56:31 setuid sandbox: enabled 2019/12/03 18:56:31 namespace sandbox: enabled 2019/12/03 18:56:31 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/03 18:56:31 fault injection: enabled 2019/12/03 18:56:31 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/03 18:56:31 net packet injection: enabled 2019/12/03 18:56:31 net device setup: enabled 2019/12/03 18:56:31 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/12/03 18:56:31 devlink PCI setup: PCI device 0000:00:10.0 is not available 18:56:32 executing program 0: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0xfe) r1 = open(&(0x7f0000000040)='./file0\x00', 0xc0042, 0x0) write$FUSE_OPEN(r1, &(0x7f0000000100)={0x20}, 0x20) 18:56:32 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x24, 0x33, 0x119, 0x0, 0x0, {0x2}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000f02}]}]}, 0x24}}, 0x0) syzkaller login: [ 53.080910][ T8086] IPVS: ftp: loaded support on port[0] = 21 [ 53.207427][ T8086] chnl_net:caif_netlink_parms(): no params data found [ 53.284542][ T8086] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.292614][ T8086] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.305057][ T8086] device bridge_slave_0 entered promiscuous mode [ 53.319594][ T8089] IPVS: ftp: loaded support on port[0] = 21 [ 53.327532][ T8086] bridge0: port 2(bridge_slave_1) entered blocking state 18:56:32 executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f00000001c0)={0x0, 0x1, 0x1200}) [ 53.338635][ T8086] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.347847][ T8086] device bridge_slave_1 entered promiscuous mode [ 53.398962][ T8086] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.420096][ T8086] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.496516][ T8086] team0: Port device team_slave_0 added [ 53.504577][ T8086] team0: Port device team_slave_1 added 18:56:32 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x200) syz_open_procfs(0x0, &(0x7f0000272000)) [ 53.556713][ T8089] chnl_net:caif_netlink_parms(): no params data found [ 53.636895][ T8086] device hsr_slave_0 entered promiscuous mode 18:56:32 executing program 4: r0 = eventfd2(0x0, 0x80800) read$eventfd(r0, &(0x7f0000000000), 0x8) [ 53.753431][ T8086] device hsr_slave_1 entered promiscuous mode [ 53.890097][ T8092] IPVS: ftp: loaded support on port[0] = 21 [ 53.911985][ T8094] IPVS: ftp: loaded support on port[0] = 21 18:56:33 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x299}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2, 0x7}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 53.959647][ T8089] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.968527][ T8089] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.977705][ T8089] device bridge_slave_0 entered promiscuous mode [ 54.027611][ T8096] IPVS: ftp: loaded support on port[0] = 21 [ 54.038942][ T8089] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.053235][ T8089] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.061497][ T8089] device bridge_slave_1 entered promiscuous mode [ 54.074707][ T8086] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.128059][ T8086] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.175923][ T8086] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.247179][ T8086] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.335720][ T8089] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.347834][ T8089] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.375177][ T8098] IPVS: ftp: loaded support on port[0] = 21 [ 54.415916][ T8089] team0: Port device team_slave_0 added [ 54.423631][ T8089] team0: Port device team_slave_1 added [ 54.545565][ T8089] device hsr_slave_0 entered promiscuous mode [ 54.593984][ T8089] device hsr_slave_1 entered promiscuous mode [ 54.633219][ T8089] debugfs: Directory 'hsr0' with parent '/' already present! [ 54.650333][ T8092] chnl_net:caif_netlink_parms(): no params data found [ 54.682102][ T8094] chnl_net:caif_netlink_parms(): no params data found [ 54.737287][ T8096] chnl_net:caif_netlink_parms(): no params data found [ 54.797393][ T8089] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 54.855217][ T8096] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.862313][ T8096] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.870897][ T8096] device bridge_slave_0 entered promiscuous mode [ 54.879225][ T8096] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.886328][ T8096] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.894327][ T8096] device bridge_slave_1 entered promiscuous mode [ 54.908752][ T8092] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.916085][ T8092] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.923831][ T8092] device bridge_slave_0 entered promiscuous mode [ 54.939721][ T8089] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 55.016820][ T8092] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.024627][ T8092] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.032455][ T8092] device bridge_slave_1 entered promiscuous mode [ 55.059408][ T8089] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 55.105114][ T8094] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.112180][ T8094] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.120782][ T8094] device bridge_slave_0 entered promiscuous mode [ 55.132519][ T8094] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.140138][ T8094] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.148269][ T8094] device bridge_slave_1 entered promiscuous mode [ 55.157009][ T8096] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.171328][ T8096] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.180681][ T8089] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 55.227386][ T8092] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.249044][ T8094] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.271177][ T8096] team0: Port device team_slave_0 added [ 55.278730][ T8092] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.292570][ T8098] chnl_net:caif_netlink_parms(): no params data found [ 55.302769][ T8094] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.321912][ T8086] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.329631][ T8096] team0: Port device team_slave_1 added [ 55.380897][ T8092] team0: Port device team_slave_0 added [ 55.392884][ T8098] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.401233][ T8098] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.408951][ T8098] device bridge_slave_0 entered promiscuous mode [ 55.420800][ T8098] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.427985][ T8098] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.435898][ T8098] device bridge_slave_1 entered promiscuous mode [ 55.451025][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.459297][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.468682][ T8086] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.478221][ T8092] team0: Port device team_slave_1 added [ 55.490349][ T8094] team0: Port device team_slave_0 added [ 55.535743][ T8096] device hsr_slave_0 entered promiscuous mode [ 55.593509][ T8096] device hsr_slave_1 entered promiscuous mode [ 55.633267][ T8096] debugfs: Directory 'hsr0' with parent '/' already present! [ 55.652442][ T8098] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.669793][ T8094] team0: Port device team_slave_1 added [ 55.690977][ T8098] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.734890][ T8092] device hsr_slave_0 entered promiscuous mode [ 55.775060][ T8092] device hsr_slave_1 entered promiscuous mode [ 55.813387][ T8092] debugfs: Directory 'hsr0' with parent '/' already present! [ 55.846578][ T8099] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.855932][ T8099] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.864772][ T8099] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.871982][ T8099] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.880070][ T8099] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.889460][ T8099] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.898155][ T8099] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.905302][ T8099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.956635][ T8094] device hsr_slave_0 entered promiscuous mode [ 55.993539][ T8094] device hsr_slave_1 entered promiscuous mode [ 56.033215][ T8094] debugfs: Directory 'hsr0' with parent '/' already present! [ 56.042489][ T8098] team0: Port device team_slave_0 added [ 56.052039][ T8098] team0: Port device team_slave_1 added [ 56.060812][ T8089] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.070531][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.079018][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.087485][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.096300][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.105694][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.124887][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.136102][ T8092] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 56.200371][ T8092] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 56.236875][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.244779][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.252320][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.262192][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.272793][ T8089] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.314795][ T8098] device hsr_slave_0 entered promiscuous mode [ 56.353446][ T8098] device hsr_slave_1 entered promiscuous mode [ 56.393190][ T8098] debugfs: Directory 'hsr0' with parent '/' already present! [ 56.420151][ T8092] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 56.465793][ T8092] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 56.506628][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.515420][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.524141][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.532250][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.544189][ T8096] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 56.599518][ T8096] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 56.658826][ T8086] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.675166][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.684044][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.692253][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.699482][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.707463][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.716109][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.724762][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.731865][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.739571][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.747995][ T8096] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 56.818985][ T8096] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 56.870923][ T8098] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 56.907099][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.929531][ T8098] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 56.954970][ T8098] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 56.995116][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.004645][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.014847][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.023587][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.042126][ T8089] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 57.053454][ T8089] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.069599][ T8094] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 57.134615][ T8098] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 57.187316][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.196273][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.205024][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.213203][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.221341][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.229653][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.252668][ T8089] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.264265][ T8094] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 57.298137][ T8094] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 57.346520][ T8094] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 57.396608][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.404563][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.411941][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.419466][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.426923][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.445595][ T8092] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.477472][ T8086] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.500224][ T8092] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.512778][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.522848][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.576840][ T8096] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.623714][ T8110] openvswitch: netlink: Tunnel attr 527 out of range max 16 [ 57.631509][ T2872] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.645343][ T2872] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.654079][ T2872] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.661164][ T2872] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.668796][ T2872] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.677489][ T2872] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.686630][ T2872] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.693734][ T2872] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.701390][ T2872] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.722721][ T8098] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.741295][ T8098] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.775033][ T8113] openvswitch: netlink: Tunnel attr 527 out of range max 16 [ 57.783763][ T8098] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 162.633091][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 162.639860][ C0] rcu: 0-...!: (10499 ticks this GP) idle=e16/1/0x4000000000000002 softirq=10462/10462 fqs=7 [ 162.650503][ C0] (t=10500 jiffies g=6273 q=324) [ 162.655518][ C0] rcu: rcu_preempt kthread starved for 10485 jiffies! g6273 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 162.666597][ C0] rcu: RCU grace-period kthread stack dump: [ 162.672471][ C0] rcu_preempt R running task 29032 10 2 0x80004000 [ 162.680358][ C0] Call Trace: [ 162.683642][ C0] __schedule+0x9a0/0xcc0 [ 162.687982][ C0] schedule+0x181/0x210 [ 162.692123][ C0] schedule_timeout+0x14f/0x240 [ 162.697072][ C0] ? run_local_timers+0x120/0x120 [ 162.702088][ C0] rcu_gp_kthread+0xed8/0x1770 [ 162.706864][ C0] kthread+0x332/0x350 [ 162.710916][ C0] ? rcu_report_qs_rsp+0x140/0x140 [ 162.716012][ C0] ? kthread_blkcg+0xe0/0xe0 [ 162.720589][ C0] ret_from_fork+0x24/0x30 [ 162.725003][ C0] NMI backtrace for cpu 0 [ 162.729319][ C0] CPU: 0 PID: 8109 Comm: blkid Not tainted 5.4.0-syzkaller #0 [ 162.736755][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 162.746793][ C0] Call Trace: [ 162.750225][ C0] [ 162.753081][ C0] dump_stack+0x1fb/0x318 [ 162.757425][ C0] nmi_cpu_backtrace+0xaf/0x1a0 [ 162.762283][ C0] ? nmi_trigger_cpumask_backtrace+0x16d/0x290 [ 162.768534][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 162.774692][ C0] nmi_trigger_cpumask_backtrace+0x174/0x290 [ 162.780781][ C0] arch_trigger_cpumask_backtrace+0x10/0x20 [ 162.786681][ C0] rcu_dump_cpu_stacks+0x15a/0x220 [ 162.791803][ C0] rcu_sched_clock_irq+0xe25/0x1ad0 [ 162.797040][ C0] ? trace_hardirqs_off+0x74/0x80 [ 162.802195][ C0] update_process_times+0x12d/0x180 [ 162.807401][ C0] tick_sched_timer+0x263/0x420 [ 162.812254][ C0] ? tick_setup_sched_timer+0x3d0/0x3d0 [ 162.817809][ C0] __hrtimer_run_queues+0x403/0x840 [ 162.823019][ C0] hrtimer_interrupt+0x38c/0xda0 [ 162.827966][ C0] ? debug_smp_processor_id+0x9/0x20 [ 162.833581][ C0] smp_apic_timer_interrupt+0x109/0x280 [ 162.839201][ C0] apic_timer_interrupt+0xf/0x20 [ 162.844129][ C0] [ 162.847232][ C0] RIP: 0010:__memcg_kmem_uncharge+0x0/0x2e0 [ 162.853128][ C0] Code: 00 eb 1b 83 3d 80 ce 8c 07 00 74 12 48 81 c3 08 02 00 00 48 89 df 4c 89 f6 e8 dc 7d ff ff 5b 41 5e 5d c3 0f 1f 80 00 00 00 00 <55> 48 89 e5 41 57 41 56 41 55 41 54 53 50 89 f3 49 89 fc 48 b8 00 [ 162.872867][ C0] RSP: 0018:ffffc900020d79e8 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 162.881274][ C0] RAX: ffffffff81486ea4 RBX: ffffea0002a01240 RCX: ffff8880a2566240 [ 162.889261][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffea0002a01240 [ 162.897221][ C0] RBP: ffffc900020d7a28 R08: 000000000003a768 R09: ffffed10140f634f [ 162.905205][ C0] R10: ffffed10140f634f R11: 0000000000000000 R12: ffff8880a861c620 [ 162.913174][ C0] R13: dffffc0000000000 R14: 1ffff110150c38c4 R15: ffff8880a07b1a68 [ 162.921159][ C0] ? free_thread_stack+0x124/0x590 [ 162.926444][ C0] ? free_thread_stack+0x12e/0x590 [ 162.931550][ C0] put_task_stack+0xa3/0x130 [ 162.936133][ C0] finish_task_switch+0x3f1/0x550 [ 162.941155][ C0] __schedule+0x9a8/0xcc0 [ 162.945483][ C0] ? ___preempt_schedule+0x16/0x18 [ 162.950580][ C0] preempt_schedule+0xdb/0x120 [ 162.955333][ C0] ___preempt_schedule+0x16/0x18 [ 162.960264][ C0] _raw_spin_unlock_irqrestore+0xcc/0xe0 [ 162.965886][ C0] __wake_up_sync_key+0xe2/0x150 [ 162.970815][ C0] pipe_release+0x17b/0x330 [ 162.975302][ C0] ? fifo_open+0xc70/0xc70 [ 162.979707][ C0] __fput+0x2e4/0x740 [ 162.983683][ C0] ____fput+0x15/0x20 [ 162.987653][ C0] task_work_run+0x17e/0x1b0 [ 162.992244][ C0] do_exit+0x5c4/0x2020 [ 162.996390][ C0] ? check_preemption_disabled+0xb4/0x260 [ 163.002191][ C0] do_group_exit+0x15c/0x2b0 [ 163.006778][ C0] __do_sys_exit_group+0x17/0x20 [ 163.011702][ C0] __se_sys_exit_group+0x14/0x20 [ 163.016624][ C0] __x64_sys_exit_group+0x3b/0x40 [ 163.021655][ C0] do_syscall_64+0xf7/0x1c0 [ 163.026171][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 163.032074][ C0] RIP: 0033:0x7f77157d91e8 [ 163.036502][ C0] Code: Bad RIP value. [ 163.040664][ C0] RSP: 002b:00007ffe0a432628 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 163.049359][ C0] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f77157d91e8 [ 163.057332][ C0] RDX: 0000000000000002 RSI: 000000000000003c RDI: 0000000000000002 [ 163.065303][ C0] RBP: 00007f7715aae840 R08: 00000000000000e7 R09: ffffffffffffffa8 [ 163.073374][ C0] R10: 00007f7715ab4740 R11: 0000000000000246 R12: 00007f7715aae840 [ 163.081350][ C0] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000