[ 49.999297][ T25] audit: type=1800 audit(1575331711.463:27): pid=7946 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [ 50.018987][ T25] audit: type=1800 audit(1575331711.473:28): pid=7946 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 50.805793][ T25] audit: type=1800 audit(1575331712.303:29): pid=7946 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 50.825171][ T25] audit: type=1800 audit(1575331712.303:30): pid=7946 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.1.30' (ECDSA) to the list of known hosts. 2019/12/03 00:08:39 fuzzer started 2019/12/03 00:08:41 dialing manager at 10.128.0.26:38907 2019/12/03 00:08:41 syscalls: 2697 2019/12/03 00:08:41 code coverage: enabled 2019/12/03 00:08:41 comparison tracing: enabled 2019/12/03 00:08:41 extra coverage: extra coverage is not supported by the kernel 2019/12/03 00:08:41 setuid sandbox: enabled 2019/12/03 00:08:41 namespace sandbox: enabled 2019/12/03 00:08:41 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/03 00:08:41 fault injection: enabled 2019/12/03 00:08:41 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/03 00:08:41 net packet injection: enabled 2019/12/03 00:08:41 net device setup: enabled 2019/12/03 00:08:41 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/12/03 00:08:41 devlink PCI setup: PCI device 0000:00:10.0 is not available 00:08:42 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'nr0\x01\x00', 0x1132}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132}) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)={[{0x0, '\x03\x8a\xa1t\x03n\xd7\xe0\x8f\x93\xdd\x86\xdd'}]}, 0xfdef) 00:08:42 executing program 1: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) getsockopt$inet6_tcp_int(r0, 0x6, 0x0, 0x0, &(0x7f0000000140)) syzkaller login: [ 61.015708][ T8111] IPVS: ftp: loaded support on port[0] = 21 [ 61.162802][ T8111] chnl_net:caif_netlink_parms(): no params data found 00:08:42 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067f0200ff810040010000000058000b4824ca945f64009400050028845a01000000000000008000f0fffeffe809000000fff5dd0000001000010006041000090000000004fcff", 0x58}], 0x1) [ 61.207425][ T8111] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.215128][ T8111] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.238672][ T8111] device bridge_slave_0 entered promiscuous mode [ 61.259282][ T8111] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.266535][ T8111] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.287661][ T8111] device bridge_slave_1 entered promiscuous mode [ 61.317709][ T8114] IPVS: ftp: loaded support on port[0] = 21 [ 61.328187][ T8111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.338952][ T8111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.392314][ T8111] team0: Port device team_slave_0 added [ 61.409072][ T8111] team0: Port device team_slave_1 added 00:08:42 executing program 3: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000100)={0x0, 0x9, 0x4, 0x0, {0x0, 0x7530}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c67f611b"}, 0x0, 0x0, @planes=0x0, 0x4, 0x0, 0x9}) [ 61.436016][ T8116] IPVS: ftp: loaded support on port[0] = 21 [ 61.471048][ T8111] device hsr_slave_0 entered promiscuous mode [ 61.517101][ T8111] device hsr_slave_1 entered promiscuous mode [ 61.606499][ T8118] IPVS: ftp: loaded support on port[0] = 21 00:08:43 executing program 4: clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x4, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f00000002c0)=""/236, 0x1a, 0xec, 0x8}, 0x20) [ 61.693554][ T8111] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 61.770636][ T8111] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 61.839775][ T8111] netdevsim netdevsim0 netdevsim2: renamed from eth2 00:08:43 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000200)="580000001400add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) [ 61.928452][ T8111] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 61.988568][ T8114] chnl_net:caif_netlink_parms(): no params data found [ 62.014972][ T8121] IPVS: ftp: loaded support on port[0] = 21 [ 62.022688][ T8111] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.030016][ T8111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.037919][ T8111] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.044990][ T8111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.126015][ T8116] chnl_net:caif_netlink_parms(): no params data found [ 62.140276][ T8114] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.147806][ T8114] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.155939][ T8114] device bridge_slave_0 entered promiscuous mode [ 62.160346][ T8123] IPVS: ftp: loaded support on port[0] = 21 [ 62.169087][ T8114] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.176142][ T8114] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.184837][ T8114] device bridge_slave_1 entered promiscuous mode [ 62.242194][ T8124] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.251316][ T8124] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.262809][ T8118] chnl_net:caif_netlink_parms(): no params data found [ 62.294473][ T8114] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.321725][ T8118] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.331050][ T8118] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.339338][ T8118] device bridge_slave_0 entered promiscuous mode [ 62.371268][ T8114] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.394013][ T8118] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.401690][ T8118] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.409603][ T8118] device bridge_slave_1 entered promiscuous mode [ 62.430751][ T8118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.443333][ T8118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.455972][ T8116] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.464962][ T8116] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.472855][ T8116] device bridge_slave_0 entered promiscuous mode [ 62.481596][ T8121] chnl_net:caif_netlink_parms(): no params data found [ 62.512019][ T8116] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.519685][ T8116] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.527608][ T8116] device bridge_slave_1 entered promiscuous mode [ 62.547696][ T8114] team0: Port device team_slave_0 added [ 62.554476][ T8116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.569308][ T8118] team0: Port device team_slave_0 added [ 62.576531][ T8116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.599877][ T8114] team0: Port device team_slave_1 added [ 62.607276][ T8116] team0: Port device team_slave_0 added [ 62.615170][ T8116] team0: Port device team_slave_1 added [ 62.625784][ T8118] team0: Port device team_slave_1 added [ 62.710718][ T8118] device hsr_slave_0 entered promiscuous mode [ 62.747462][ T8118] device hsr_slave_1 entered promiscuous mode [ 62.796978][ T8118] debugfs: Directory 'hsr0' with parent '/' already present! [ 62.898619][ T8116] device hsr_slave_0 entered promiscuous mode [ 62.937407][ T8116] device hsr_slave_1 entered promiscuous mode [ 62.976926][ T8116] debugfs: Directory 'hsr0' with parent '/' already present! [ 62.984678][ T8121] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.992001][ T8121] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.999828][ T8121] device bridge_slave_0 entered promiscuous mode [ 63.007728][ T8121] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.014779][ T8121] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.022531][ T8121] device bridge_slave_1 entered promiscuous mode [ 63.036085][ T8111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.099688][ T8114] device hsr_slave_0 entered promiscuous mode [ 63.137157][ T8114] device hsr_slave_1 entered promiscuous mode [ 63.186877][ T8114] debugfs: Directory 'hsr0' with parent '/' already present! [ 63.252931][ T8111] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.280694][ T8121] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.293856][ T8121] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.310468][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.318856][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.343847][ T8114] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.403012][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.412604][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.420950][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.428523][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.440423][ T8123] chnl_net:caif_netlink_parms(): no params data found [ 63.454185][ T8116] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.512117][ T8118] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.548327][ T8114] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.598476][ T8121] team0: Port device team_slave_0 added [ 63.604509][ T8116] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.669733][ T8116] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.719569][ T8118] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.779018][ T8118] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.828719][ T8114] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.873369][ T8121] team0: Port device team_slave_1 added [ 63.880809][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.890361][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.899323][ T3034] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.906379][ T3034] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.914476][ T8116] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.970086][ T8118] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.018692][ T8114] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.150288][ T8121] device hsr_slave_0 entered promiscuous mode [ 64.187238][ T8121] device hsr_slave_1 entered promiscuous mode [ 64.226929][ T8121] debugfs: Directory 'hsr0' with parent '/' already present! [ 64.247040][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.283139][ T8123] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.291036][ T8123] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.305512][ T8123] device bridge_slave_0 entered promiscuous mode [ 64.314251][ T8123] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.321789][ T8123] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.329789][ T8123] device bridge_slave_1 entered promiscuous mode [ 64.336835][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.345325][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.354323][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.394968][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.407949][ T8123] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.425598][ T8123] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.451202][ T8124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.460181][ T8124] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.492358][ T8124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.501671][ T8124] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.510478][ T8124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.519473][ T8124] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.528933][ T8111] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.544111][ T8114] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.552051][ T8121] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 64.607428][ T8123] team0: Port device team_slave_0 added [ 64.614933][ T8123] team0: Port device team_slave_1 added [ 64.633325][ T8114] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.641479][ T8121] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 64.713000][ T8121] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 64.773264][ T8121] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 64.820131][ T8128] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.828291][ T8128] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.889735][ T8123] device hsr_slave_0 entered promiscuous mode [ 64.947278][ T8123] device hsr_slave_1 entered promiscuous mode [ 65.006866][ T8123] debugfs: Directory 'hsr0' with parent '/' already present! [ 65.019968][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.028977][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.037665][ T3699] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.044720][ T3699] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.052859][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.069493][ T8118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.094830][ T8116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.108222][ T8128] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.115694][ T8128] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.123987][ T8128] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.133121][ T8128] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.141783][ T8128] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.149230][ T8128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.156688][ T8128] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.169344][ T8128] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.192181][ T8118] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.209431][ T8111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.218795][ T8128] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.228206][ T8128] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.236576][ T8128] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.245734][ T8128] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.254375][ T8128] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.262778][ T8128] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.270779][ T8128] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.279104][ T8128] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.300882][ T8123] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 65.350790][ T8123] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 65.412114][ T8114] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.424312][ T8114] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.432769][ T8128] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.441124][ T8128] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.449667][ T8128] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.467797][ T8123] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 65.509304][ T8123] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 65.554214][ T8116] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.622928][ T8121] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.714650][ T8133] device nr0 entered promiscuous mode [ 170.576705][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 170.583595][ C0] rcu: 0-...!: (1 GPs behind) idle=dfe/1/0x4000000000000002 softirq=11655/11656 fqs=143 [ 170.593828][ C0] (t=10500 jiffies g=6389 q=318) [ 170.598856][ C0] rcu: rcu_preempt kthread starved for 10206 jiffies! g6389 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 170.609939][ C0] rcu: RCU grace-period kthread stack dump: [ 170.615845][ C0] rcu_preempt R running task 29032 10 2 0x80004000 [ 170.623788][ C0] Call Trace: [ 170.627109][ C0] __schedule+0x9a0/0xcc0 [ 170.631997][ C0] schedule+0x181/0x210 [ 170.636150][ C0] schedule_timeout+0x14f/0x240 [ 170.640996][ C0] ? run_local_timers+0x120/0x120 [ 170.646018][ C0] rcu_gp_kthread+0xed8/0x1770 [ 170.651057][ C0] kthread+0x332/0x350 [ 170.655458][ C0] ? rcu_report_qs_rsp+0x140/0x140 [ 170.660566][ C0] ? kthread_blkcg+0xe0/0xe0 [ 170.665160][ C0] ret_from_fork+0x24/0x30 [ 170.670281][ C0] NMI backtrace for cpu 0 [ 170.674605][ C0] CPU: 0 PID: 8114 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0 [ 170.683443][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 170.696014][ C0] Call Trace: [ 170.700212][ C0] [ 170.703058][ C0] dump_stack+0x1fb/0x318 [ 170.707380][ C0] nmi_cpu_backtrace+0xaf/0x1a0 [ 170.712355][ C0] ? nmi_trigger_cpumask_backtrace+0x16d/0x290 [ 170.718501][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 170.724557][ C0] nmi_trigger_cpumask_backtrace+0x174/0x290 [ 170.730628][ C0] arch_trigger_cpumask_backtrace+0x10/0x20 [ 170.736595][ C0] rcu_dump_cpu_stacks+0x15a/0x220 [ 170.741714][ C0] rcu_sched_clock_irq+0xe25/0x1ad0 [ 170.746906][ C0] ? trace_hardirqs_off+0x74/0x80 [ 170.751925][ C0] update_process_times+0x12d/0x180 [ 170.757490][ C0] tick_sched_timer+0x263/0x420 [ 170.762331][ C0] ? tick_setup_sched_timer+0x3d0/0x3d0 [ 170.767950][ C0] __hrtimer_run_queues+0x403/0x840 [ 170.773247][ C0] hrtimer_interrupt+0x38c/0xda0 [ 170.778204][ C0] ? debug_smp_processor_id+0x9/0x20 [ 170.783494][ C0] smp_apic_timer_interrupt+0x109/0x280 [ 170.790156][ C0] apic_timer_interrupt+0xf/0x20 [ 170.795080][ C0] [ 170.798018][ C0] RIP: 0010:mod_memcg_page_state+0x161/0x190 [ 170.803986][ C0] Code: 3c 20 00 74 0c 48 c7 c7 28 96 0a 89 e8 a8 9e 69 00 48 83 3d c8 21 c2 07 00 74 2d e8 99 27 2e 00 4c 89 ff 57 9d 0f 1f 44 00 00 <5b> 41 5c 41 5e 41 5f 5d c3 e8 81 27 2e 00 0f 0b e8 7a 27 2e 00 0f [ 170.823577][ C0] RSP: 0018:ffffc900020674f8 EFLAGS: 00000293 ORIG_RAX: ffffffffffffff13 [ 170.831973][ C0] RAX: ffffffff81487433 RBX: 0000000000000000 RCX: ffff88808f53e3c0 [ 170.839932][ C0] RDX: 0000000000000000 RSI: 00000000fffffffc RDI: ffffea00028b5340 [ 170.847905][ C0] RBP: ffffc90002067518 R08: 000000000003a768 R09: ffffed101204cab7 [ 170.855878][ C0] R10: ffffed101204cab7 R11: 0000000000000000 R12: dffffc0000000000 [ 170.863869][ C0] R13: dffffc0000000000 R14: 00000000fffffffc R15: ffff8880902655a8 [ 170.871853][ C0] ? mod_memcg_page_state+0x123/0x190 [ 170.877220][ C0] ? mod_memcg_page_state+0x123/0x190 [ 170.882576][ C0] free_thread_stack+0x168/0x590 [ 170.887499][ C0] put_task_stack+0xa3/0x130 [ 170.892078][ C0] finish_task_switch+0x3f1/0x550 [ 170.897108][ C0] __schedule+0x9a8/0xcc0 [ 170.902126][ C0] ? ___preempt_schedule+0x16/0x18 [ 170.907220][ C0] preempt_schedule+0xdb/0x120 [ 170.912058][ C0] ___preempt_schedule+0x16/0x18 [ 170.916983][ C0] try_to_wake_up+0xe78/0x1050 [ 170.921744][ C0] wake_up_q+0x8c/0xe0 [ 170.925804][ C0] __mutex_unlock_slowpath+0x586/0x5b0 [ 170.931257][ C0] mutex_unlock+0x1b/0x30 [ 170.935575][ C0] __rtnl_unlock+0x2c/0xa0 [ 170.939977][ C0] netdev_run_todo+0xe5/0xe10 [ 170.944764][ C0] rtnetlink_rcv_msg+0x890/0xd40 [ 170.949706][ C0] ? rcu_lock_release+0x9/0x30 [ 170.954461][ C0] ? rcu_lock_release+0x9/0x30 [ 170.959469][ C0] ? rcu_lock_release+0x9/0x30 [ 170.964228][ C0] netlink_rcv_skb+0x19e/0x3d0 [ 170.968989][ C0] ? rtnetlink_bind+0x80/0x80 [ 170.973833][ C0] rtnetlink_rcv+0x1c/0x20 [ 170.978238][ C0] netlink_unicast+0x767/0x920 [ 170.983006][ C0] netlink_sendmsg+0xa21/0xd40 [ 170.987775][ C0] ? netlink_getsockopt+0x9f0/0x9f0 [ 170.992964][ C0] __sys_sendto+0x442/0x5e0 [ 170.997487][ C0] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 171.003984][ C0] ? prepare_exit_to_usermode+0x221/0x5b0 [ 171.009697][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 171.015241][ C0] __x64_sys_sendto+0xe5/0x100 [ 171.019999][ C0] do_syscall_64+0xf7/0x1c0 [ 171.024665][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 171.030544][ C0] RIP: 0033:0x414373 [ 171.034430][ C0] Code: ff 0f 83 b0 19 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 83 3d fd 40 66 00 00 75 17 49 89 ca b8 2c 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 81 19 00 00 c3 48 83 ec 08 e8 87 fa ff ff [ 171.054033][ C0] RSP: 002b:00007ffdf53b1008 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 171.065509][ C0] RAX: ffffffffffffffda RBX: 0000000000a72200 RCX: 0000000000414373 [ 171.073470][ C0] RDX: 0000000000000028 RSI: 0000000000a72250 RDI: 0000000000000003 [ 171.082298][ C0] RBP: 0000000000000000 R08: 00007ffdf53b1010 R09: 000000000000000c [ 171.090264][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 171.098741][ C0] R13: 0000000000000000 R14: 0000000000a72250 R15: 0000000000000003