[ 49.648240][ T27] audit: type=1800 audit(1578446148.315:26): pid=8172 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 49.697333][ T27] audit: type=1800 audit(1578446148.315:27): pid=8172 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [ 49.741788][ T27] audit: type=1800 audit(1578446148.315:28): pid=8172 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 50.291373][ T27] audit: type=1800 audit(1578446148.985:29): pid=8172 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.1.0' (ECDSA) to the list of known hosts. 2020/01/08 01:15:56 fuzzer started 2020/01/08 01:15:58 dialing manager at 10.128.0.26:35703 2020/01/08 01:15:58 syscalls: 2824 2020/01/08 01:15:58 code coverage: enabled 2020/01/08 01:15:58 comparison tracing: enabled 2020/01/08 01:15:58 extra coverage: enabled 2020/01/08 01:15:58 setuid sandbox: enabled 2020/01/08 01:15:58 namespace sandbox: enabled 2020/01/08 01:15:58 Android sandbox: /sys/fs/selinux/policy does not exist 2020/01/08 01:15:58 fault injection: enabled 2020/01/08 01:15:58 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/01/08 01:15:58 net packet injection: enabled 2020/01/08 01:15:58 net device setup: enabled 2020/01/08 01:15:58 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/01/08 01:15:58 devlink PCI setup: PCI device 0000:00:10.0 is not available 01:15:59 executing program 0: r0 = socket$caif_seqpacket(0x25, 0x5, 0x0) setsockopt(r0, 0x0, 0x0, 0x0, 0x0) 01:15:59 executing program 1: r0 = open(&(0x7f0000000500)='./bus\x00', 0x8143242, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) r1 = memfd_create(&(0x7f0000000200)='/dev/\"\x00\x00\x00\x00\x00\x00\x00\xe8\x00\xeb\xf5z\x98\x00\xc8\x8d\x93\a\x8a\x8bYd>\x7f\xbek\x7fN\x1e\xdf\xf89_\xad\x8fv\x80\xab!S\xe8\xe1\x05.!N<\x8e\xe2sNL\\\xc0\xe7ZX\x8d\xddx\xc6\xb6P\x1d\xfd\x90\xd1l@.{\x1cB\xd5Feb\xd5\xb7V\x8dX\x10_p)\xba|7\xa4\xbb\xfb\xd62(\x92\\\xc3j\x870\xe5\x8c.\x955,`=\xdca\xda\x96)\xb8\x9f\x15\xb7\xfa\x0f\xfeA\x02Y%j\x04n\xe3\xa0\x03\xde\xd5\xfb\xb8\xdc\x18`\xd1S\x81\x88\xf9J~\x9d!\xbcw\xf6\xfb\xe3\xd1T\xd8\x9ft\x00\xd2\xaf\x00[\xbe\x89\n\x14\xa3\x83\x13i\xed\xe2\x92\xa8\x10\x80O\xaaw\xf7[\x7fY\xd4\xde\xd6\xea\x16#\xe4\x9e\x86j\x9c\xa3N\xde\xa3\x15DwY\x8e\xbf\x12\xdc\x19$5zf\x98V\x1aj\xd3\xc42\x06\xab\x98\xe3\x97FF\x1f\xce\xfe\xec\xb2-\xfe\xbd\xc6\xbb\xc6\x85\xd1\x84\x0eD\x7f\x12\xf7\x19\xd0N\xd1\xc4:\xb5\xae\x93\x8f\x8c\xe7H\x8d\xb2\x9c\xd1\x1f\xc6\xce\xb7\xb5(\x8dC$~\t0l\x91p\xba\xe8[\xb7U\a!\x11\x14M\x1f\xe0?X\v\x94\xd8\xfa\xcc\xfe\xe8\xbe\xe4\xc6\xc5(=\xafVD6BR\xfd\x97P\xd7nD\xcf\xba\xc4\x91t\x80\x83\x95\'\xd9\x01\x80\xcd\xb7w\xc1\x17m3\xa7\xeah\xd1\x91\xac\x0e\xfc\xd7{Sw\xac-\x81\xa5\x1e\\\x10\xe2\xde\xb9\xe9j9\xf9\xc6*-/\xa0\x8b\xb8T\x16\xccR\x96i\x05}=2.\xae\xb0\xec\xb3\xc2\xacu\x96/\xe8\xc8\x0eP#\x86\xf3nh\xe7\x9b\xeeI\x06\x9a\x81\xb0\xfam\xbd\xb0u', 0x4) ftruncate(r1, 0x1000000) readv(r1, &(0x7f0000000040)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1) syzkaller login: [ 61.251739][ T8339] IPVS: ftp: loaded support on port[0] = 21 01:16:00 executing program 2: unshare(0x2040400) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x0, 0x0) ioctl$RTC_VL_CLR(r0, 0x4605) [ 61.425660][ T8342] IPVS: ftp: loaded support on port[0] = 21 [ 61.440156][ T8339] chnl_net:caif_netlink_parms(): no params data found [ 61.554980][ T8339] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.568253][ T8339] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.588582][ T8339] device bridge_slave_0 entered promiscuous mode 01:16:00 executing program 3: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) fsetxattr$security_evm(r0, &(0x7f00000000c0)='security.evm\x00', &(0x7f0000000100), 0x1, 0x0) [ 61.618747][ T8339] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.632498][ T8339] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.658154][ T8339] device bridge_slave_1 entered promiscuous mode [ 61.696562][ T8345] IPVS: ftp: loaded support on port[0] = 21 [ 61.731668][ T8339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.749372][ T8339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.843956][ T8347] IPVS: ftp: loaded support on port[0] = 21 [ 61.854109][ T8339] team0: Port device team_slave_0 added [ 61.863058][ T8339] team0: Port device team_slave_1 added 01:16:00 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB=',defcontext=']) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, &(0x7f00000002c0)) [ 61.890714][ T8342] chnl_net:caif_netlink_parms(): no params data found [ 62.002117][ T8339] device hsr_slave_0 entered promiscuous mode [ 62.059308][ T8339] device hsr_slave_1 entered promiscuous mode 01:16:00 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_open_dev$dmmidi(&(0x7f0000000480)='/dev/dmmidi#\x00', 0x2db, 0x10002) ioctl$VIDIOC_G_AUDOUT(r1, 0x80345631, &(0x7f00000004c0)) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f00000003c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f00000000c0)={0xa, &(0x7f00000001c0)=[{0x2, 0x3, 0x6, 0xb3}, {0x3, 0x3f, 0xa, 0x5}, {0x3, 0x20, 0x6, 0x6}, {0xffff, 0x6, 0x1f, 0xff}, {0xa91, 0x7, 0xfb, 0x7e00}, {0x7, 0xe9, 0x2, 0x9}, {0x1, 0x3f, 0x3}, {0x7, 0x2, 0x0, 0x8}, {0x8, 0x0, 0x20}, {0x3, 0xfb, 0x5a, 0xffffffff}]}) write$P9_RLERRORu(r3, &(0x7f0000000440)={0x12, 0x7, 0x1, {{0x5, 'wlan0'}, 0x9}}, 0x12) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000003, 0x5c831, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0xd5e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x5d, 0x0, 0x0, 0x0, 0x8de, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6878000000000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffafd63bfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, 0x0, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000340)=ANY=[@ANYBLOB="91d3eeb8cc56d867acefc4b2359cc4427e4f304a58b707dd34caeb435b4550a047570467a170958e3b955f0c5473200a92c4c364ac161ee79518178295fe2f3d02fd01f9c4425a284d0fff5002becc54f24e0402402fe175e44d8a72f666", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x77, &(0x7f0000000000)={r9}, 0x90) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e21, @multicast1}]}, &(0x7f0000000300)=0x10) [ 62.144500][ T8349] IPVS: ftp: loaded support on port[0] = 21 [ 62.185450][ T8342] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.195224][ T8342] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.204636][ T8342] device bridge_slave_0 entered promiscuous mode [ 62.246741][ T8342] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.255028][ T8342] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.262958][ T8342] device bridge_slave_1 entered promiscuous mode [ 62.310474][ T8342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.312355][ T8352] IPVS: ftp: loaded support on port[0] = 21 [ 62.332403][ T8345] chnl_net:caif_netlink_parms(): no params data found [ 62.351681][ T8342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.421672][ T8339] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.481970][ T8339] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.541274][ T8339] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.601472][ T8339] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.662298][ T8342] team0: Port device team_slave_0 added [ 62.671009][ T8342] team0: Port device team_slave_1 added [ 62.693528][ T8347] chnl_net:caif_netlink_parms(): no params data found [ 62.722912][ T8345] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.730792][ T8345] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.739003][ T8345] device bridge_slave_0 entered promiscuous mode [ 62.749362][ T8345] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.756580][ T8345] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.765035][ T8345] device bridge_slave_1 entered promiscuous mode [ 62.826555][ T8345] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.869963][ T8342] device hsr_slave_0 entered promiscuous mode [ 62.937636][ T8342] device hsr_slave_1 entered promiscuous mode [ 62.987507][ T8342] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.995328][ T8342] Cannot create hsr debugfs directory [ 63.012685][ T8345] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.030115][ T8349] chnl_net:caif_netlink_parms(): no params data found [ 63.055170][ T8347] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.063196][ T8347] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.071995][ T8347] device bridge_slave_0 entered promiscuous mode [ 63.083541][ T8347] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.090649][ T8347] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.098459][ T8347] device bridge_slave_1 entered promiscuous mode [ 63.120658][ T8345] team0: Port device team_slave_0 added [ 63.142702][ T8349] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.150908][ T8349] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.158872][ T8349] device bridge_slave_0 entered promiscuous mode [ 63.166721][ T8349] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.174016][ T8349] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.181746][ T8349] device bridge_slave_1 entered promiscuous mode [ 63.193892][ T8345] team0: Port device team_slave_1 added [ 63.222193][ T8347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.280022][ T8345] device hsr_slave_0 entered promiscuous mode [ 63.327564][ T8345] device hsr_slave_1 entered promiscuous mode [ 63.387361][ T8345] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.394945][ T8345] Cannot create hsr debugfs directory [ 63.409001][ T8347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.429914][ T8349] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.479052][ T8349] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.494994][ T8347] team0: Port device team_slave_0 added [ 63.504019][ T8347] team0: Port device team_slave_1 added [ 63.521489][ T8349] team0: Port device team_slave_0 added [ 63.566224][ T8349] team0: Port device team_slave_1 added [ 63.586480][ T8342] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.650403][ T8342] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.731005][ T8352] chnl_net:caif_netlink_parms(): no params data found [ 63.747153][ T8342] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.799707][ T8342] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.900480][ T8347] device hsr_slave_0 entered promiscuous mode [ 63.937703][ T8347] device hsr_slave_1 entered promiscuous mode [ 63.977380][ T8347] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.984994][ T8347] Cannot create hsr debugfs directory [ 64.049956][ T8349] device hsr_slave_0 entered promiscuous mode [ 64.097655][ T8349] device hsr_slave_1 entered promiscuous mode [ 64.137393][ T8349] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.145083][ T8349] Cannot create hsr debugfs directory [ 64.194673][ T8345] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.253004][ T8345] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.313081][ T8345] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.362679][ T8345] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.459942][ T8352] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.467097][ T8352] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.474946][ T8352] device bridge_slave_0 entered promiscuous mode [ 64.492987][ T8339] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.515464][ T8352] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.523522][ T8352] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.531752][ T8352] device bridge_slave_1 entered promiscuous mode [ 64.555809][ T8352] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.583848][ T8352] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.610962][ T8349] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 64.659520][ T8349] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 64.709785][ T8349] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 64.776574][ T8352] team0: Port device team_slave_0 added [ 64.786863][ T8352] team0: Port device team_slave_1 added [ 64.807626][ T2733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.815835][ T2733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.823665][ T8349] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 64.879996][ T8339] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.910751][ T8352] device hsr_slave_0 entered promiscuous mode [ 64.947756][ T8352] device hsr_slave_1 entered promiscuous mode [ 64.987422][ T8352] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.995095][ T8352] Cannot create hsr debugfs directory [ 65.001013][ T8347] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 65.052901][ T8342] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.063139][ T2884] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.072158][ T2884] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.080834][ T2884] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.088040][ T2884] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.096373][ T2884] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.104800][ T8347] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 65.169267][ T8347] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 65.209934][ T2883] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.219085][ T2883] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.227436][ T2883] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.234474][ T2883] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.242226][ T2883] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.250149][ T2883] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.258000][ T2883] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.268806][ T8342] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.287513][ T2733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.302880][ T8347] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 65.360552][ T8345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.386428][ T2880] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.395553][ T2880] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.405066][ T2880] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.412146][ T2880] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.420183][ T2880] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.429146][ T2880] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.437435][ T2880] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.445734][ T2880] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.454128][ T2880] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.461831][ T2880] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.470468][ T2880] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.478416][ T2880] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.495197][ T8339] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 65.505799][ T8339] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.525172][ T8345] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.535556][ T2733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.544483][ T2733] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.553234][ T2733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.561698][ T2733] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.570230][ T2733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.579604][ T2733] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.588280][ T2733] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.595347][ T2733] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.602948][ T2733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.640133][ T2733] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.648392][ T2733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.656762][ T2733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.666081][ T2733] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.674696][ T2733] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.681788][ T2733] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.689623][ T2733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.699384][ T2733] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.719147][ T8339] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.757556][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.765400][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.773629][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.781195][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.789303][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.798209][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.806555][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.813638][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.821119][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.843446][ T8349] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.863066][ T8352] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 65.908013][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.919582][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.929125][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.938343][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.946502][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.955319][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.964014][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.988144][ T8352] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 66.052704][ T8352] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 66.109510][ T8339] device veth0_vlan entered promiscuous mode [ 66.117789][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.125472][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.133919][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.142304][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.150645][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.159050][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.167181][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.175469][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.183856][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.194403][ T8342] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.211477][ T8345] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 66.222259][ T8345] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.233468][ T8352] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 66.271345][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.279537][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.287987][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.296135][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.304577][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.312907][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.322476][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.330008][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.338180][ T2734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.361128][ T8347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.371277][ T8339] device veth1_vlan entered promiscuous mode [ 66.379200][ T2884] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.387033][ T2884] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.397752][ T2884] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.405096][ T2884] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.412797][ T2884] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.423547][ T8342] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.451626][ T8345] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.463847][ T8347] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.472879][ T8349] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.497768][ T2880] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.505758][ T2880] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.515487][ T2880] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.559597][ T2884] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.568517][ T2884] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.578963][ T2884] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.586022][ T2884] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.594442][ T2884] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.603257][ T2884] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.612058][ T2884] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.619160][ T2884] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.626614][ T2884] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.635419][ T2884] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.643733][ T2884] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.650800][ T2884] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.658848][ T2884] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.668110][ T2884] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.676438][ T2884] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.685417][ T2884] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.694447][ T2884] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.702527][ T2884] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.751740][ T2883] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.763665][ T2883] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.773285][ T2883] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.780388][ T2883] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.789382][ T2883] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.797971][ T2883] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.806054][ T2883] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.814585][ T2883] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.823389][ T2883] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.832010][ T2883] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.840752][ T2883] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.849773][ T2883] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.858342][ T2883] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.866798][ T2883] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.875855][ T2883] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.883876][ T2883] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 171.787242][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 171.794129][ C0] rcu: 0-...!: (10499 ticks this GP) idle=132/1/0x4000000000000002 softirq=13648/13648 fqs=148 [ 171.804778][ C0] (t=10500 jiffies g=6385 q=114) [ 171.809792][ C0] rcu: rcu_preempt kthread starved for 10204 jiffies! g6385 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 171.820873][ C0] rcu: RCU grace-period kthread stack dump: [ 171.826749][ C0] rcu_preempt R running task 28792 10 2 0x80004000 [ 171.834640][ C0] Call Trace: [ 171.837925][ C0] __schedule+0x9a0/0xcc0 [ 171.842253][ C0] schedule+0x181/0x210 [ 171.846401][ C0] schedule_timeout+0x14f/0x240 [ 171.851243][ C0] ? run_local_timers+0x120/0x120 [ 171.856257][ C0] rcu_gp_kthread+0xed8/0x1770 [ 171.861017][ C0] kthread+0x332/0x350 [ 171.865072][ C0] ? rcu_report_qs_rsp+0x140/0x140 [ 171.870170][ C0] ? kthread_blkcg+0xe0/0xe0 [ 171.874748][ C0] ret_from_fork+0x24/0x30 [ 171.879165][ C0] NMI backtrace for cpu 0 [ 171.883486][ C0] CPU: 0 PID: 83 Comm: kworker/u4:3 Not tainted 5.5.0-rc5-syzkaller #0 [ 171.891702][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 171.901834][ C0] Workqueue: 0x0 (gid-cache-wq) [ 171.906784][ C0] Call Trace: [ 171.910053][ C0] [ 171.912893][ C0] dump_stack+0x1fb/0x318 [ 171.917213][ C0] nmi_cpu_backtrace+0xaf/0x1a0 [ 171.922048][ C0] ? nmi_trigger_cpumask_backtrace+0x16d/0x290 [ 171.928191][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 171.934243][ C0] nmi_trigger_cpumask_backtrace+0x174/0x290 [ 171.940232][ C0] arch_trigger_cpumask_backtrace+0x10/0x20 [ 171.946149][ C0] rcu_dump_cpu_stacks+0x15a/0x220 [ 171.951262][ C0] rcu_sched_clock_irq+0xe25/0x1ad0 [ 171.956451][ C0] ? trace_hardirqs_off+0x74/0x80 [ 171.961477][ C0] update_process_times+0x12d/0x180 [ 171.966673][ C0] tick_sched_timer+0x263/0x420 [ 171.971519][ C0] ? tick_setup_sched_timer+0x3d0/0x3d0 [ 171.977059][ C0] __hrtimer_run_queues+0x403/0x840 [ 171.982268][ C0] hrtimer_interrupt+0x38c/0xda0 [ 171.987222][ C0] ? debug_smp_processor_id+0x9/0x20 [ 171.992504][ C0] smp_apic_timer_interrupt+0x109/0x280 [ 171.998042][ C0] apic_timer_interrupt+0xf/0x20 [ 172.002962][ C0] [ 172.005891][ C0] RIP: 0010:__memcg_kmem_uncharge+0x134/0x1a0 [ 172.011944][ C0] Code: 48 c1 e8 03 42 8a 04 28 84 c0 75 3b f6 03 01 75 10 49 83 c7 10 4c 89 ff 48 8b 75 d0 e8 f5 90 00 00 48 83 c4 08 5b 41 5c 41 5d <41> 5e 41 5f 5d c3 44 89 e1 80 e1 07 80 c1 03 38 c1 7c 96 4c 89 e7 [ 172.031532][ C0] RSP: 0018:ffffc90001107c10 EFLAGS: 00000282 ORIG_RAX: ffffffffffffff13 [ 172.039932][ C0] RAX: 0000000000000001 RBX: ffffea0002616840 RCX: 0000000000000000 [ 172.047891][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffea0002616840 [ 172.055848][ C0] RBP: ffffc90001107c20 R08: 000000000003a728 R09: ffffed10124faad9 [ 172.063807][ C0] R10: ffffed10124faad9 R11: 0000000000000000 R12: ffff888099236620 [ 172.071766][ C0] R13: dffffc0000000000 R14: ffffea0002616878 R15: 0000000000000000 [ 172.079748][ C0] free_thread_stack+0x12e/0x590 [ 172.084674][ C0] put_task_stack+0xa3/0x130 [ 172.089250][ C0] finish_task_switch+0x3f1/0x550 [ 172.094271][ C0] __schedule+0x9a8/0xcc0 [ 172.098601][ C0] schedule+0x181/0x210 [ 172.102754][ C0] worker_thread+0x10d6/0x1630 [ 172.107526][ C0] kthread+0x332/0x350 [ 172.111586][ C0] ? rcu_lock_release+0x30/0x30 [ 172.116424][ C0] ? kthread_blkcg+0xe0/0xe0 [ 172.121001][ C0] ret_from_fork+0x24/0x30