[ 42.471067][ T25] audit: type=1800 audit(1575375268.492:26): pid=8000 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 42.509250][ T25] audit: type=1800 audit(1575375268.502:27): pid=8000 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [ 42.540960][ T25] audit: type=1800 audit(1575375268.502:28): pid=8000 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 43.194538][ T25] audit: type=1800 audit(1575375269.242:29): pid=8000 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.1.56' (ECDSA) to the list of known hosts. 2019/12/03 12:14:39 fuzzer started 2019/12/03 12:14:40 dialing manager at 10.128.0.26:45711 2019/12/03 12:14:40 syscalls: 2689 2019/12/03 12:14:40 code coverage: enabled 2019/12/03 12:14:40 comparison tracing: enabled 2019/12/03 12:14:40 extra coverage: extra coverage is not supported by the kernel 2019/12/03 12:14:40 setuid sandbox: enabled 2019/12/03 12:14:40 namespace sandbox: enabled 2019/12/03 12:14:40 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/03 12:14:40 fault injection: enabled 2019/12/03 12:14:40 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/03 12:14:40 net packet injection: enabled 2019/12/03 12:14:40 net device setup: enabled 2019/12/03 12:14:40 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/12/03 12:14:40 devlink PCI setup: PCI device 0000:00:10.0 is not available 12:14:41 executing program 0: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x802, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xb}, [@typed={0x8, 0x3, @fd=r0}]}, 0x1c}}, 0x0) 12:14:42 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/.yz0\'', 0x1ff) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0, 0x1000}) r1 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) close(0xffffffffffffffff) write$vnet(r1, &(0x7f00000004c0)={0x1, {&(0x7f0000000640)=""/247, 0xf7, 0x0}}, 0x68) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)) mount$fuse(0x20000000, &(0x7f0000000180)='./file0\x00', 0x0, 0x807a00, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) syzkaller login: [ 56.123905][ T8165] IPVS: ftp: loaded support on port[0] = 21 12:14:42 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='security.ima\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="040702c904e16f147ba57f3a98697268af5de2dcb4e5700a7e6658498452a291d3965f9529ae9e7bf87bbf59345057afabb36679fec642d17b272763f97857e64ddcda08fe73932231c854c2c0d97c0cc4ada1dcde4df768766523ec49e5d70246460923caf9b2aba929063dbc50815cae38188b7149d40684e9e2b1510fca70c717ebd1be1a00dc298e0500fbfdd6d6bb21c80f936dcf738216017309a6334ba5bb5d8c7b53f39632074397267099aef9c53f6e8866438f9d71133f23cd3d5ac653de4d49e33da71b8c9489b0a9bb99a64b6c0b5e8f5a9800d577857746ba4469a72541cf7f2aefe82c28ab73bf110ee5c796da08baeee4e0611acbd288a7402c440a0b1c9754565263f5f2a1ed694f9f26a99e3529d23670cbbf674725346bc23c0c5dbe7e631964e57b679d4ba53fa8a57be56ea6c7eedf3e26009e99c6ee191b96919cfba38d63c9120298d707cb8b12176c01a017d3e39059d7bccb6d21a2b4406ac174f063b9cf210ebaea22a9e807087b9fe6a02cd27cbdee519680c7ff0a107932d6ef0b5fc1b54764148006fe6e763e24830f9e41ead699eda8bcf42ce0d6e6b19c7b80a1d8ba286e9d346532ff4b"], 0x2, 0x0) ftruncate(r0, 0xff) open(&(0x7f00000004c0)='./bus\x00', 0x0, 0x0) [ 56.283533][ T8167] IPVS: ftp: loaded support on port[0] = 21 [ 56.350371][ T8165] chnl_net:caif_netlink_parms(): no params data found [ 56.449143][ T8170] IPVS: ftp: loaded support on port[0] = 21 [ 56.458171][ T8165] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.469777][ T8165] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.479398][ T8165] device bridge_slave_0 entered promiscuous mode [ 56.490694][ T8165] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.498439][ T8165] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.506560][ T8165] device bridge_slave_1 entered promiscuous mode 12:14:42 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fb, &(0x7f0000000540)={0x2, 0x0, @local}, 0x10) listen(r0, 0x0) [ 56.571914][ T8167] chnl_net:caif_netlink_parms(): no params data found [ 56.618385][ T8165] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.668891][ T8165] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.722365][ T8165] team0: Port device team_slave_0 added [ 56.743665][ T8165] team0: Port device team_slave_1 added 12:14:42 executing program 4: eventfd(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x243, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="400000002400070500000000000080001d6b5cd1", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000014000100706669666f5f686561645f64726f70000800020000000000"], 0x40}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0xffffffffffffff31, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000002400070510000b000000000000000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000240008001c0001000000000000000000000000000004000200"], 0x48}}, 0x0) eventfd(0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 56.808121][ T8165] device hsr_slave_0 entered promiscuous mode [ 56.885480][ T8165] device hsr_slave_1 entered promiscuous mode 12:14:43 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$userio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/userio\x00', 0x0, 0x0) close(r3) [ 56.975983][ T8167] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.983084][ T8167] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.993108][ T8167] device bridge_slave_0 entered promiscuous mode [ 57.010171][ T8173] IPVS: ftp: loaded support on port[0] = 21 [ 57.044342][ T8175] IPVS: ftp: loaded support on port[0] = 21 [ 57.059700][ T8167] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.074751][ T8167] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.082911][ T8167] device bridge_slave_1 entered promiscuous mode [ 57.166197][ T8167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.185095][ T8165] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 57.219082][ T8165] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 57.277953][ T8165] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 57.348514][ T8165] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 57.410910][ T8167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.446981][ T8170] chnl_net:caif_netlink_parms(): no params data found [ 57.471072][ T8179] IPVS: ftp: loaded support on port[0] = 21 [ 57.488761][ T8167] team0: Port device team_slave_0 added [ 57.518241][ T8167] team0: Port device team_slave_1 added [ 57.564924][ T8173] chnl_net:caif_netlink_parms(): no params data found [ 57.627928][ T8167] device hsr_slave_0 entered promiscuous mode [ 57.685599][ T8167] device hsr_slave_1 entered promiscuous mode [ 57.755399][ T8167] debugfs: Directory 'hsr0' with parent '/' already present! [ 57.768979][ T8170] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.776171][ T8170] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.784045][ T8170] device bridge_slave_0 entered promiscuous mode [ 57.793115][ T8170] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.800337][ T8170] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.808988][ T8170] device bridge_slave_1 entered promiscuous mode [ 57.858847][ T8175] chnl_net:caif_netlink_parms(): no params data found [ 57.883091][ T8173] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.890483][ T8173] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.898224][ T8173] device bridge_slave_0 entered promiscuous mode [ 57.914915][ T8170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.934748][ T8173] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.943259][ T8173] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.951285][ T8173] device bridge_slave_1 entered promiscuous mode [ 57.959672][ T8170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.999623][ T8165] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.012120][ T8170] team0: Port device team_slave_0 added [ 58.034004][ T8175] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.041292][ T8175] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.049463][ T8175] device bridge_slave_0 entered promiscuous mode [ 58.058210][ T8175] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.066031][ T8175] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.077760][ T8175] device bridge_slave_1 entered promiscuous mode [ 58.094039][ T8165] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.104730][ T8170] team0: Port device team_slave_1 added [ 58.112573][ T8173] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.149323][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.158222][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.167696][ T8167] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 58.217631][ T8167] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 58.258400][ T8167] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 58.308013][ T8173] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.341894][ T8175] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.351776][ T8167] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 58.402225][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.413883][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.422705][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.429868][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.448187][ T8175] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.469444][ T8173] team0: Port device team_slave_0 added [ 58.479297][ T8180] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.487935][ T8180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.497311][ T8180] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.506432][ T8180] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.513572][ T8180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.569201][ T8170] device hsr_slave_0 entered promiscuous mode [ 58.625637][ T8170] device hsr_slave_1 entered promiscuous mode [ 58.665340][ T8170] debugfs: Directory 'hsr0' with parent '/' already present! [ 58.680942][ T8173] team0: Port device team_slave_1 added [ 58.687458][ T8179] chnl_net:caif_netlink_parms(): no params data found [ 58.709176][ T3013] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.723577][ T8175] team0: Port device team_slave_0 added [ 58.733949][ T8175] team0: Port device team_slave_1 added [ 58.788410][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.798444][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.807349][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.816444][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.825705][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.839311][ T8179] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.847750][ T8179] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.856326][ T8179] device bridge_slave_0 entered promiscuous mode [ 58.917407][ T8173] device hsr_slave_0 entered promiscuous mode [ 58.965613][ T8173] device hsr_slave_1 entered promiscuous mode [ 59.015419][ T8173] debugfs: Directory 'hsr0' with parent '/' already present! [ 59.056979][ T8175] device hsr_slave_0 entered promiscuous mode [ 59.125574][ T8175] device hsr_slave_1 entered promiscuous mode [ 59.195333][ T8175] debugfs: Directory 'hsr0' with parent '/' already present! [ 59.206985][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.218132][ T8170] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 59.277310][ T8179] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.284415][ T8179] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.292601][ T8179] device bridge_slave_1 entered promiscuous mode [ 59.326818][ T8176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.335080][ T8176] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.344853][ T8170] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 59.416922][ T8170] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 59.472026][ T8170] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 59.523167][ T8165] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.536276][ T8165] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.544597][ T3013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.553284][ T3013] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.569288][ T8179] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.581212][ T8179] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.612529][ T8167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.638614][ T8175] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 59.698704][ T8175] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 59.767366][ T8175] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 59.820105][ T8179] team0: Port device team_slave_0 added [ 59.830959][ T8179] team0: Port device team_slave_1 added [ 59.849761][ T8173] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 59.897722][ T8173] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 59.957410][ T8175] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 60.009474][ T8176] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.017667][ T8176] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.027594][ T8165] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.067609][ T8179] device hsr_slave_0 entered promiscuous mode [ 60.116934][ T8179] device hsr_slave_1 entered promiscuous mode [ 60.165340][ T8179] debugfs: Directory 'hsr0' with parent '/' already present! [ 60.172961][ T8173] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 60.227577][ T8173] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 60.282224][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.290496][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.334155][ T8167] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.376809][ T8179] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 60.407500][ T8179] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 60.467614][ T8179] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 60.508517][ T8179] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 60.590307][ T8176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.599218][ T8176] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.608103][ T8176] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.615249][ T8176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.660026][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.673139][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.682769][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.691495][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.698637][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.712777][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 165.705111][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 165.711927][ C1] rcu: 1-...!: (10499 ticks this GP) idle=0da/1/0x4000000000000002 softirq=10824/10824 fqs=143 [ 165.726219][ C1] (t=10500 jiffies g=6313 q=72) [ 165.731145][ C1] rcu: rcu_preempt kthread starved for 10205 jiffies! g6313 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 165.742230][ C1] rcu: RCU grace-period kthread stack dump: [ 165.748107][ C1] rcu_preempt R running task 29032 10 2 0x80004000 [ 165.755996][ C1] Call Trace: [ 165.759280][ C1] __schedule+0x9a0/0xcc0 [ 165.763953][ C1] schedule+0x181/0x210 [ 165.768097][ C1] schedule_timeout+0x14f/0x240 [ 165.772933][ C1] ? run_local_timers+0x120/0x120 [ 165.777950][ C1] rcu_gp_kthread+0xed8/0x1770 [ 165.782709][ C1] kthread+0x332/0x350 [ 165.786760][ C1] ? rcu_report_qs_rsp+0x140/0x140 [ 165.791856][ C1] ? kthread_blkcg+0xe0/0xe0 [ 165.796443][ C1] ret_from_fork+0x24/0x30 [ 165.800871][ C1] NMI backtrace for cpu 1 [ 165.805189][ C1] CPU: 1 PID: 8187 Comm: syz-executor.0 Not tainted 5.4.0-syzkaller #0 [ 165.813850][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 165.823890][ C1] Call Trace: [ 165.827333][ C1] [ 165.830175][ C1] dump_stack+0x1fb/0x318 [ 165.836327][ C1] nmi_cpu_backtrace+0xaf/0x1a0 [ 165.841174][ C1] ? nmi_trigger_cpumask_backtrace+0x16d/0x290 [ 165.847377][ C1] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 165.853606][ C1] nmi_trigger_cpumask_backtrace+0x174/0x290 [ 165.859600][ C1] arch_trigger_cpumask_backtrace+0x10/0x20 [ 165.865503][ C1] rcu_dump_cpu_stacks+0x15a/0x220 [ 165.870623][ C1] rcu_sched_clock_irq+0xe25/0x1ad0 [ 165.875817][ C1] ? trace_hardirqs_off+0x74/0x80 [ 165.880853][ C1] update_process_times+0x12d/0x180 [ 165.886043][ C1] tick_sched_timer+0x263/0x420 [ 165.891053][ C1] ? tick_setup_sched_timer+0x3d0/0x3d0 [ 165.896596][ C1] __hrtimer_run_queues+0x403/0x840 [ 165.901802][ C1] hrtimer_interrupt+0x38c/0xda0 [ 165.906748][ C1] ? debug_smp_processor_id+0x9/0x20 [ 165.912035][ C1] smp_apic_timer_interrupt+0x109/0x280 [ 165.917565][ C1] apic_timer_interrupt+0xf/0x20 [ 165.922483][ C1] [ 165.925419][ C1] RIP: 0010:mod_memcg_page_state+0x161/0x190 [ 165.931557][ C1] Code: 3c 20 00 74 0c 48 c7 c7 28 96 0a 89 e8 a8 9e 69 00 48 83 3d c8 21 c2 07 00 74 2d e8 99 27 2e 00 4c 89 ff 57 9d 0f 1f 44 00 00 <5b> 41 5c 41 5e 41 5f 5d c3 e8 81 27 2e 00 0f 0b e8 7a 27 2e 00 0f [ 165.951146][ C1] RSP: 0018:ffffc900026478d0 EFLAGS: 00000293 ORIG_RAX: ffffffffffffff13 [ 165.959542][ C1] RAX: ffffffff81487433 RBX: 0000000000000000 RCX: ffff88809212e3c0 [ 165.967501][ C1] RDX: 0000000000000000 RSI: 00000000fffffffc RDI: ffffea0002311080 [ 165.975461][ C1] RBP: ffffc900026478f0 R08: 000000000003a768 R09: ffffed10151ab347 [ 165.983418][ C1] R10: ffffed10151ab347 R11: 0000000000000000 R12: dffffc0000000000 [ 165.991381][ C1] R13: dffffc0000000000 R14: 00000000fffffffc R15: ffff8880a8d59a28 [ 165.999352][ C1] ? mod_memcg_page_state+0x123/0x190 [ 166.004722][ C1] free_thread_stack+0x168/0x590 [ 166.009669][ C1] put_task_stack+0xa3/0x130 [ 166.014247][ C1] finish_task_switch+0x3f1/0x550 [ 166.019264][ C1] __schedule+0x9a8/0xcc0 [ 166.023583][ C1] ? debug_smp_processor_id+0x9/0x20 [ 166.028857][ C1] schedule+0x181/0x210 [ 166.032999][ C1] schedule_preempt_disabled+0x13/0x20 [ 166.038446][ C1] mutex_optimistic_spin+0x445/0x480 [ 166.043722][ C1] __mutex_lock_common+0x2e7/0x2e10 [ 166.049604][ C1] ? rtnl_lock+0x17/0x20 [ 166.053839][ C1] ? __kasan_check_read+0x11/0x20 [ 166.058848][ C1] ? mark_lock+0x107/0x1650 [ 166.063349][ C1] mutex_lock_nested+0x1b/0x30 [ 166.068185][ C1] rtnl_lock+0x17/0x20 [ 166.072260][ C1] ip6mr_sk_done+0xa8/0x310 [ 166.076908][ C1] ? rawv6_close+0x5b/0x90 [ 166.081330][ C1] rawv6_close+0x63/0x90 [ 166.085580][ C1] inet_release+0x165/0x1c0 [ 166.090078][ C1] inet6_release+0x57/0x70 [ 166.094490][ C1] sock_close+0xe1/0x260 [ 166.098727][ C1] ? sock_mmap+0xa0/0xa0 [ 166.102959][ C1] __fput+0x2e4/0x740 [ 166.106940][ C1] ____fput+0x15/0x20 [ 166.110909][ C1] task_work_run+0x17e/0x1b0 [ 166.115519][ C1] prepare_exit_to_usermode+0x483/0x5b0 [ 166.121082][ C1] syscall_return_slowpath+0x113/0x4a0 [ 166.126540][ C1] do_syscall_64+0x11f/0x1c0 [ 166.131122][ C1] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 166.137003][ C1] RIP: 0033:0x414211 [ 166.140885][ C1] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 166.162389][ C1] RSP: 002b:00007fffeeb434e0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 166.170797][ C1] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000414211 [ 166.178841][ C1] RDX: 0000001b32020000 RSI: 0000000000000000 RDI: 0000000000000003 [ 166.186803][ C1] RBP: 0000000000000001 R08: 00000000662245ed R09: 00000000662245f1 [ 166.194775][ C1] R10: 00007fffeeb435c0 R11: 0000000000000293 R12: 000000000075bf20 [ 166.202735][ C1] R13: 000000000000ecee R14: 0000000000760ad8 R15: 000000000075bf2c