[ 44.325430][ T25] audit: type=1800 audit(1575453552.974:27): pid=8000 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [ 44.346407][ T25] audit: type=1800 audit(1575453552.974:28): pid=8000 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 45.140148][ T25] audit: type=1800 audit(1575453553.824:29): pid=8000 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 45.159697][ T25] audit: type=1800 audit(1575453553.834:30): pid=8000 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.134' (ECDSA) to the list of known hosts. 2019/12/04 09:59:21 fuzzer started 2019/12/04 09:59:23 dialing manager at 10.128.0.26:36481 2019/12/04 09:59:23 syscalls: 2691 2019/12/04 09:59:23 code coverage: enabled 2019/12/04 09:59:23 comparison tracing: enabled 2019/12/04 09:59:23 extra coverage: extra coverage is not supported by the kernel 2019/12/04 09:59:23 setuid sandbox: enabled 2019/12/04 09:59:23 namespace sandbox: enabled 2019/12/04 09:59:23 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/04 09:59:23 fault injection: enabled 2019/12/04 09:59:23 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/04 09:59:23 net packet injection: enabled 2019/12/04 09:59:23 net device setup: enabled 2019/12/04 09:59:23 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/12/04 09:59:23 devlink PCI setup: PCI device 0000:00:10.0 is not available 09:59:24 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x1, 0x178, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000c00], 0x0, 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000190000000200000008006c6f00000000000000000000000000007465716c3000000000000000000000006970365f76746930000000000000000062637366300000000000000000000000ffffffffffff000000000000aaaaaaaaaa000000000000000000b8000000b8000000e80000006970000000000000000000000000000000000000000000000000000000000000200000000000001bac1414bbffffffff000000000000000000062d00000000002e000000000000004155444954000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000ea09ffff00000000000000000000000000000000000000000001000000ffffffff00000000"]}, 0x1f0) 09:59:24 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x3, 0xc) sendmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000020307031dfffd946ff20c0020200a0009000200021d8568021baba20400ff7e", 0x24}], 0x14}, 0x0) syzkaller login: [ 55.899779][ T8164] IPVS: ftp: loaded support on port[0] = 21 09:59:24 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001700)={0x2, 0x0, [{0x0, 0x95, &(0x7f00000002c0)=""/149}, {0x0, 0xf8, &(0x7f0000000380)=""/248}]}) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) [ 55.966631][ T8166] IPVS: ftp: loaded support on port[0] = 21 [ 56.105738][ T8164] chnl_net:caif_netlink_parms(): no params data found [ 56.205085][ T8169] IPVS: ftp: loaded support on port[0] = 21 [ 56.223336][ T8164] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.231079][ T8164] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.238769][ T8164] device bridge_slave_0 entered promiscuous mode 09:59:25 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,') perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r1, r0, 0x0, 0x80000003) [ 56.271178][ T8164] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.278227][ T8164] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.286539][ T8164] device bridge_slave_1 entered promiscuous mode [ 56.297768][ T8166] chnl_net:caif_netlink_parms(): no params data found [ 56.423527][ T8164] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.442912][ T8166] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.450134][ T8166] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.471439][ T8166] device bridge_slave_0 entered promiscuous mode [ 56.480361][ T8164] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.505377][ T8166] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.521060][ T8166] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.528588][ T8166] device bridge_slave_1 entered promiscuous mode [ 56.542939][ T8164] team0: Port device team_slave_0 added [ 56.570184][ T8164] team0: Port device team_slave_1 added [ 56.578228][ T8172] IPVS: ftp: loaded support on port[0] = 21 [ 56.597502][ T8166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link 09:59:25 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MAX_AGE={0x8}]}}}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000180), 0x27a4eaa51029717, 0x0) [ 56.656345][ T8166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.745395][ T8164] device hsr_slave_0 entered promiscuous mode [ 56.812832][ T8164] device hsr_slave_1 entered promiscuous mode 09:59:25 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x8, 0x16, [{0x4}]}]}, 0x30}}, 0x0) [ 56.888117][ T8169] chnl_net:caif_netlink_parms(): no params data found [ 56.917365][ T8175] IPVS: ftp: loaded support on port[0] = 21 [ 56.933204][ T8166] team0: Port device team_slave_0 added [ 57.010279][ T8166] team0: Port device team_slave_1 added [ 57.017755][ T8164] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 57.063943][ T8164] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 57.153436][ T8177] IPVS: ftp: loaded support on port[0] = 21 [ 57.163644][ T8164] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 57.272774][ T8166] device hsr_slave_0 entered promiscuous mode [ 57.321028][ T8166] device hsr_slave_1 entered promiscuous mode [ 57.361183][ T8166] debugfs: Directory 'hsr0' with parent '/' already present! [ 57.369677][ T8164] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 57.427865][ T8169] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.435323][ T8169] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.443457][ T8169] device bridge_slave_0 entered promiscuous mode [ 57.452893][ T8169] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.459936][ T8169] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.467651][ T8169] device bridge_slave_1 entered promiscuous mode [ 57.517622][ T8169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.560047][ T8172] chnl_net:caif_netlink_parms(): no params data found [ 57.574474][ T8169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.629724][ T8169] team0: Port device team_slave_0 added [ 57.636623][ T8166] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 57.719387][ T8175] chnl_net:caif_netlink_parms(): no params data found [ 57.729078][ T8169] team0: Port device team_slave_1 added [ 57.739842][ T8166] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 57.792269][ T8166] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 57.837754][ T8166] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 57.911194][ T8172] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.918290][ T8172] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.927995][ T8172] device bridge_slave_0 entered promiscuous mode [ 57.936730][ T8172] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.944191][ T8172] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.952543][ T8172] device bridge_slave_1 entered promiscuous mode [ 58.004221][ T8169] device hsr_slave_0 entered promiscuous mode [ 58.061080][ T8169] device hsr_slave_1 entered promiscuous mode [ 58.101149][ T8169] debugfs: Directory 'hsr0' with parent '/' already present! [ 58.176199][ T8172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.189759][ T8172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.201394][ T8177] chnl_net:caif_netlink_parms(): no params data found [ 58.214024][ T8175] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.223328][ T8175] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.231623][ T8175] device bridge_slave_0 entered promiscuous mode [ 58.241887][ T8175] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.248944][ T8175] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.256915][ T8175] device bridge_slave_1 entered promiscuous mode [ 58.317893][ T8164] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.340159][ T8172] team0: Port device team_slave_0 added [ 58.348140][ T8169] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 58.393124][ T8169] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 58.453219][ T8175] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.469045][ T8172] team0: Port device team_slave_1 added [ 58.512622][ T8172] device hsr_slave_0 entered promiscuous mode [ 58.551107][ T8172] device hsr_slave_1 entered promiscuous mode [ 58.591023][ T8172] debugfs: Directory 'hsr0' with parent '/' already present! [ 58.599453][ T8169] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 58.642117][ T8177] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.649232][ T8177] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.658063][ T8177] device bridge_slave_0 entered promiscuous mode [ 58.666852][ T8175] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.682214][ T8164] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.694723][ T8169] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 58.742426][ T8177] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.749547][ T8177] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.758008][ T8177] device bridge_slave_1 entered promiscuous mode [ 58.766481][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.775086][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.783853][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.792688][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.801554][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.808719][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.829385][ T8166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.855887][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.870328][ T8177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.883511][ T8175] team0: Port device team_slave_0 added [ 58.890387][ T8177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.922614][ T3111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.931528][ T3111] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.940303][ T3111] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.947397][ T3111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.956001][ T3111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.966094][ T8175] team0: Port device team_slave_1 added [ 58.974168][ T8177] team0: Port device team_slave_0 added [ 58.984023][ T8177] team0: Port device team_slave_1 added [ 58.996730][ T8166] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.046532][ T8175] device hsr_slave_0 entered promiscuous mode [ 59.101106][ T8175] device hsr_slave_1 entered promiscuous mode [ 59.140715][ T8175] debugfs: Directory 'hsr0' with parent '/' already present! [ 59.153636][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.161499][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.169037][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.177527][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.186640][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.195727][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.204557][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.213448][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.244107][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.254761][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.265311][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.272428][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.279922][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.288901][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.297268][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.304343][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.312669][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.321100][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.330419][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.346129][ T8164] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.363336][ T8172] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 59.406225][ T8172] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 59.445622][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.454498][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.463591][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.472346][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.481699][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.490058][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.499226][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.521562][ T8172] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 59.558193][ T8166] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 59.569222][ T8166] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.593501][ T8169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.633050][ T8177] device hsr_slave_0 entered promiscuous mode [ 59.681042][ T8177] device hsr_slave_1 entered promiscuous mode [ 59.721171][ T8177] debugfs: Directory 'hsr0' with parent '/' already present! [ 59.729133][ T8172] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 59.772940][ T8182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.781840][ T8182] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.790087][ T8182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.798715][ T8182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.807823][ T8182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.816491][ T8182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.825177][ T8182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.842565][ T8175] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 59.923971][ T8175] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 59.993991][ T3111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.001696][ T3111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.011981][ T8169] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.031651][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.040296][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.051748][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.058813][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.066568][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.075431][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.084593][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.091665][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.101903][ T8178] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.109766][ T8175] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 60.175801][ T8175] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 60.225957][ T3111] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.233863][ T3111] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.241907][ T3111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.255684][ T8164] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.291432][ T8166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.313329][ T2731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.328784][ T2731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.337442][ T2731] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.345830][ T2731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.354282][ T2731] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.362836][ T2731] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.370207][ T2731] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.419060][ T2731] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.434821][ T2731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.446566][ T2731] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.458271][ T2731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.469757][ T2731] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.481983][ T8169] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.519601][ T8169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.480580][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 165.487436][ C0] rcu: 0-...!: (10499 ticks this GP) idle=0de/1/0x4000000000000002 softirq=10046/10046 fqs=3 [ 165.497928][ C0] (t=10500 jiffies g=6289 q=149) [ 165.502959][ C0] rcu: rcu_preempt kthread starved for 10494 jiffies! g6289 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 165.514054][ C0] rcu: RCU grace-period kthread stack dump: [ 165.519949][ C0] rcu_preempt R running task 29032 10 2 0x80004000 [ 165.528205][ C0] Call Trace: [ 165.531503][ C0] __schedule+0x9a0/0xcc0 [ 165.535836][ C0] schedule+0x181/0x210 [ 165.540083][ C0] schedule_timeout+0x14f/0x240 [ 165.545193][ C0] ? run_local_timers+0x120/0x120 [ 165.550216][ C0] rcu_gp_kthread+0xed8/0x1770 [ 165.554997][ C0] kthread+0x332/0x350 [ 165.559052][ C0] ? rcu_report_qs_rsp+0x140/0x140 [ 165.564166][ C0] ? kthread_blkcg+0xe0/0xe0 [ 165.568763][ C0] ret_from_fork+0x24/0x30 [ 165.573187][ C0] NMI backtrace for cpu 0 [ 165.577604][ C0] CPU: 0 PID: 8187 Comm: syz-executor.0 Not tainted 5.4.0-syzkaller #0 [ 165.585836][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 165.595899][ C0] Call Trace: [ 165.599176][ C0] [ 165.602036][ C0] dump_stack+0x1fb/0x318 [ 165.606357][ C0] nmi_cpu_backtrace+0xaf/0x1a0 [ 165.611196][ C0] ? nmi_trigger_cpumask_backtrace+0x16d/0x290 [ 165.617343][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 165.623397][ C0] nmi_trigger_cpumask_backtrace+0x174/0x290 [ 165.629363][ C0] arch_trigger_cpumask_backtrace+0x10/0x20 [ 165.635297][ C0] rcu_dump_cpu_stacks+0x15a/0x220 [ 165.640428][ C0] rcu_sched_clock_irq+0xe25/0x1ad0 [ 165.645624][ C0] ? trace_hardirqs_off+0x74/0x80 [ 165.650639][ C0] update_process_times+0x12d/0x180 [ 165.655825][ C0] tick_sched_timer+0x263/0x420 [ 165.660665][ C0] ? tick_setup_sched_timer+0x3d0/0x3d0 [ 165.666206][ C0] __hrtimer_run_queues+0x403/0x840 [ 165.671416][ C0] hrtimer_interrupt+0x38c/0xda0 [ 165.676368][ C0] ? debug_smp_processor_id+0x9/0x20 [ 165.681649][ C0] smp_apic_timer_interrupt+0x109/0x280 [ 165.687304][ C0] apic_timer_interrupt+0xf/0x20 [ 165.692225][ C0] [ 165.695154][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x31/0x50 [ 165.701300][ C0] Code: 0c 25 c0 1d 02 00 65 8b 15 38 84 8b 7e f7 c2 00 01 1f 00 75 2c 8b 91 80 13 00 00 83 fa 02 75 21 48 8b 91 88 13 00 00 48 8b 32 <48> 8d 7e 01 8b 89 84 13 00 00 48 39 cf 73 08 48 89 44 f2 08 48 89 [ 165.720890][ C0] RSP: 0018:ffffc90002467810 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 165.729290][ C0] RAX: ffffffff81487326 RBX: ffffea000248a9c0 RCX: ffff88806c304040 [ 165.737251][ C0] RDX: ffffc90001ee9000 RSI: 000000000003ffff RDI: ffffea000248a9c0 [ 165.745301][ C0] RBP: ffffc90002467838 R08: dffffc0000000000 R09: fffffbfff1287a8d [ 165.753263][ C0] R10: fffffbfff1287a8d R11: 0000000000000000 R12: ffff888093c432a0 [ 165.761220][ C0] R13: dffffc0000000000 R14: 00000000fffffffc R15: ffff88809e5bb6e8 [ 165.769196][ C0] ? mod_memcg_page_state+0x16/0x190 [ 165.774494][ C0] ? mod_memcg_page_state+0x16/0x190 [ 165.779777][ C0] free_thread_stack+0x168/0x590 [ 165.784734][ C0] put_task_stack+0xa3/0x130 [ 165.789348][ C0] finish_task_switch+0x3f1/0x550 [ 165.794369][ C0] __schedule+0x9a8/0xcc0 [ 165.798701][ C0] schedule+0x181/0x210 [ 165.802860][ C0] futex_wait_queue_me+0x2a3/0x4b0 [ 165.807970][ C0] futex_wait+0x252/0x770 [ 165.812321][ C0] do_futex+0x437/0x3d60 [ 165.816908][ C0] ? __lock_acquire+0xc75/0x1be0 [ 165.821858][ C0] ? percpu_counter_add_batch+0x153/0x170 [ 165.827569][ C0] ? __might_fault+0xf9/0x160 [ 165.832245][ C0] ? __might_fault+0xf9/0x160 [ 165.836917][ C0] ? check_preemption_disabled+0xb4/0x260 [ 165.842717][ C0] ? debug_smp_processor_id+0x9/0x20 [ 165.848007][ C0] __se_sys_futex+0x28c/0x360 [ 165.852675][ C0] ? prepare_exit_to_usermode+0x221/0x5b0 [ 165.858381][ C0] ? trace_irq_disable_rcuidle+0x23/0x1e0 [ 165.864087][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 165.869619][ C0] __x64_sys_futex+0xe5/0x100 [ 165.874285][ C0] do_syscall_64+0xf7/0x1c0 [ 165.878777][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 165.884669][ C0] RIP: 0033:0x45a679 [ 165.889420][ C0] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 165.909009][ C0] RSP: 002b:00007f3ae1e46cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 165.917406][ C0] RAX: ffffffffffffffda RBX: 000000000075bf28 RCX: 000000000045a679 [ 165.925460][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000075bf28 [ 165.933417][ C0] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 165.941477][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000075bf2c [ 165.949693][ C0] R13: 00007fffba17540f R14: 00007f3ae1e479c0 R15: 000000000075bf2c