[ 44.066380][ T23] audit: type=1800 audit(1575455029.328:30): pid=8076 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.106' (ECDSA) to the list of known hosts. 2019/12/04 10:23:59 fuzzer started 2019/12/04 10:24:00 dialing manager at 10.128.0.26:36481 2019/12/04 10:24:00 syscalls: 2691 2019/12/04 10:24:00 code coverage: enabled 2019/12/04 10:24:00 comparison tracing: enabled 2019/12/04 10:24:00 extra coverage: extra coverage is not supported by the kernel 2019/12/04 10:24:00 setuid sandbox: enabled 2019/12/04 10:24:00 namespace sandbox: enabled 2019/12/04 10:24:00 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/04 10:24:00 fault injection: enabled 2019/12/04 10:24:00 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/04 10:24:00 net packet injection: enabled 2019/12/04 10:24:00 net device setup: enabled 2019/12/04 10:24:00 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/12/04 10:24:00 devlink PCI setup: PCI device 0000:00:10.0 is not available 10:24:01 executing program 0: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000de3000)={{0x4000001ff, 0xa}, {}, 0xff}) 10:24:01 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_ENCAP_TYPE={0x8, 0xf, 0x3}]]}}}]}, 0x38}}, 0x0) syzkaller login: [ 56.614162][ T8240] IPVS: ftp: loaded support on port[0] = 21 10:24:02 executing program 2: getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(0x0, 0x0, 0x2) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, &(0x7f00000007c0)=0x27e) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e21, @broadcast}}, 0x0, 0x0, 0x0, 0x3}, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, 0x0, &(0x7f0000000000)=0xffffffffffffff79) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) recvmsg$kcm(r1, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000003c0)={0x2, 0x4e23, @rand_addr=0x80000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) sendto$inet(r2, 0x0, 0x0, 0x2404973d, &(0x7f0000000340)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x26}}, 0xf8) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) sendto$inet(r3, 0x0, 0x0, 0x2404973d, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r5 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x5, 0x10000) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x2404973d, &(0x7f00000001c0)={0x2, 0x4e23, @loopback}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, 0x0, &(0x7f0000000280)) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000240)) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={0x0, 0x3}, 0x8) fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, 0x0, 0x0, 0x114) getegid() mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r6 = open$dir(&(0x7f00004daff8)='./file0\x00', 0x0, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) mkdirat(r6, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mkdir(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10) r7 = open(&(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0) renameat(r6, &(0x7f0000000940)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r7, &(0x7f00000009c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000100)="a4abd38028db4b2b4d2f2f3ff7b72780af4c90ccb170e60b8bf56db763e3062d037dca29d0d2f3999f98acf933", 0x2d}], 0x3, 0x0) [ 56.777912][ T8240] chnl_net:caif_netlink_parms(): no params data found [ 56.798075][ T8243] IPVS: ftp: loaded support on port[0] = 21 [ 56.822585][ T8240] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.830425][ T8240] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.838728][ T8240] device bridge_slave_0 entered promiscuous mode [ 56.850109][ T8240] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.857368][ T8240] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.865305][ T8240] device bridge_slave_1 entered promiscuous mode [ 56.892968][ T8240] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.919825][ T8240] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.977938][ T8240] team0: Port device team_slave_0 added [ 57.016709][ T8240] team0: Port device team_slave_1 added [ 57.055508][ T8246] IPVS: ftp: loaded support on port[0] = 21 [ 57.070575][ T8243] chnl_net:caif_netlink_parms(): no params data found 10:24:02 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000940)={@rand_addr="fc0cda1c80d7afbda647ff1b33914a39", 0x0, 0x0, 0xff, 0x9}, 0x20) [ 57.138754][ T8240] device hsr_slave_0 entered promiscuous mode 10:24:02 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0xfffffffffffffe7b, &(0x7f0000000000)=[{&(0x7f0000000140)="2e0000003100050ad20780648c6394fb0124fc0010000b400c000200053582c137153e370900018009641700d1bd", 0x2e}], 0x1}, 0x0) [ 57.334770][ T8240] device hsr_slave_1 entered promiscuous mode [ 57.422894][ T8248] IPVS: ftp: loaded support on port[0] = 21 [ 57.458161][ T8243] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.465559][ T8243] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.474509][ T8243] device bridge_slave_0 entered promiscuous mode [ 57.501793][ T8243] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.505664][ T8250] IPVS: ftp: loaded support on port[0] = 21 [ 57.517032][ T8243] bridge0: port 2(bridge_slave_1) entered disabled state 10:24:02 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x5, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)) [ 57.526111][ T8243] device bridge_slave_1 entered promiscuous mode [ 57.535617][ T8240] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 57.620353][ T8240] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 57.687191][ T8240] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 57.746626][ T8240] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 57.825823][ T8243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.837288][ T8252] IPVS: ftp: loaded support on port[0] = 21 [ 57.891999][ T8243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.960143][ T8248] chnl_net:caif_netlink_parms(): no params data found [ 57.989755][ T8243] team0: Port device team_slave_0 added [ 57.999220][ T8243] team0: Port device team_slave_1 added [ 58.031514][ T8250] chnl_net:caif_netlink_parms(): no params data found [ 58.068361][ T8246] chnl_net:caif_netlink_parms(): no params data found [ 58.135840][ T8243] device hsr_slave_0 entered promiscuous mode [ 58.173846][ T8243] device hsr_slave_1 entered promiscuous mode [ 58.223608][ T8243] debugfs: Directory 'hsr0' with parent '/' already present! [ 58.242625][ T8248] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.251973][ T8248] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.260538][ T8248] device bridge_slave_0 entered promiscuous mode [ 58.272625][ T8248] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.280535][ T8248] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.288340][ T8248] device bridge_slave_1 entered promiscuous mode [ 58.305708][ T8248] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.319779][ T8248] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.335373][ T8250] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.342512][ T8250] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.350284][ T8250] device bridge_slave_0 entered promiscuous mode [ 58.358067][ T8250] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.365441][ T8250] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.373197][ T8250] device bridge_slave_1 entered promiscuous mode [ 58.392175][ T8248] team0: Port device team_slave_0 added [ 58.408363][ T8246] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.420311][ T8246] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.428176][ T8246] device bridge_slave_0 entered promiscuous mode [ 58.444324][ T8248] team0: Port device team_slave_1 added [ 58.460539][ T8246] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.468407][ T8246] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.476519][ T8246] device bridge_slave_1 entered promiscuous mode [ 58.503698][ T8250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.522644][ T8250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.565106][ T8248] device hsr_slave_0 entered promiscuous mode [ 58.623719][ T8248] device hsr_slave_1 entered promiscuous mode [ 58.663594][ T8248] debugfs: Directory 'hsr0' with parent '/' already present! [ 58.708399][ T8250] team0: Port device team_slave_0 added [ 58.716220][ T8250] team0: Port device team_slave_1 added [ 58.725782][ T8243] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 58.756770][ T8246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.767826][ T8246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.780434][ T8240] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.787870][ T8243] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 58.856204][ T8243] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 58.907714][ T8252] chnl_net:caif_netlink_parms(): no params data found [ 58.928065][ T8248] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 58.956029][ T8248] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 59.015690][ T8248] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 59.056278][ T8243] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 59.107144][ T8246] team0: Port device team_slave_0 added [ 59.118617][ T8246] team0: Port device team_slave_1 added [ 59.134753][ T8248] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 59.266079][ T8250] device hsr_slave_0 entered promiscuous mode [ 59.324063][ T8250] device hsr_slave_1 entered promiscuous mode [ 59.363573][ T8250] debugfs: Directory 'hsr0' with parent '/' already present! [ 59.377425][ T8240] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.416022][ T8246] device hsr_slave_0 entered promiscuous mode [ 59.453865][ T8246] device hsr_slave_1 entered promiscuous mode [ 59.503555][ T8246] debugfs: Directory 'hsr0' with parent '/' already present! [ 59.516925][ T8254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.525928][ T8254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.553017][ T8252] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.560986][ T8252] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.569052][ T8252] device bridge_slave_0 entered promiscuous mode [ 59.578122][ T8254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.586871][ T8254] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.595640][ T8254] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.602935][ T8254] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.610972][ T8254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.620439][ T8254] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.628846][ T8254] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.635927][ T8254] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.644033][ T8254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.652593][ T8254] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.681108][ T8252] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.689037][ T8252] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.697268][ T8252] device bridge_slave_1 entered promiscuous mode [ 59.705125][ T8254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.714414][ T8254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.722982][ T8254] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.731577][ T8254] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.767871][ T8246] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 59.797829][ T8246] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 59.846990][ T8246] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 59.890259][ T8246] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 59.941966][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.951536][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.963626][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.971863][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.981377][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.990023][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.005073][ T8252] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.019212][ T8252] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.042169][ T8250] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 60.077678][ T8250] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 60.140654][ T8240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.158058][ T8250] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 60.207722][ T8252] team0: Port device team_slave_0 added [ 60.220670][ T8252] team0: Port device team_slave_1 added [ 60.230761][ T8250] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 60.286837][ T8248] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.319634][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.328123][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.336423][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.344024][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.407943][ T8252] device hsr_slave_0 entered promiscuous mode [ 60.463783][ T8252] device hsr_slave_1 entered promiscuous mode [ 60.503511][ T8252] debugfs: Directory 'hsr0' with parent '/' already present! [ 60.513794][ T8248] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.528861][ T8243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.559410][ T8240] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.569999][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.579728][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.588322][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.595546][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.603945][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.639006][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.648868][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.658903][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.666181][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.679498][ T8252] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 60.747360][ T8246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.763241][ T8259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.775498][ T8259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.786357][ T8259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.794498][ T8259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.802166][ T8252] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 60.840907][ T8252] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 60.888334][ T8246] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.899769][ T8243] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.910635][ T8253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.919551][ T8253] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.930150][ T8253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.939300][ T8253] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.948912][ T8253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.956844][ T8253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.964797][ T8252] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 61.002436][ T8250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.033060][ T8253] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.044873][ T8253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.063253][ T8253] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.071681][ T8253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.085516][ T8253] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.097451][ T8253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.107156][ T8253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.118983][ T8253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.129670][ T8253] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.141924][ T8253] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.149026][ T8253] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.163331][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 166.170109][ C0] rcu: 0-...!: (1 GPs behind) idle=19e/1/0x4000000000000002 softirq=11885/11886 fqs=0 [ 166.179994][ C0] (t=10501 jiffies g=6337 q=48) [ 166.184919][ C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g6337 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 166.195998][ C0] rcu: RCU grace-period kthread stack dump: [ 166.201872][ C0] rcu_preempt R running task 29032 10 2 0x80004000 [ 166.209756][ C0] Call Trace: [ 166.213067][ C0] __schedule+0x9a0/0xcc0 [ 166.217402][ C0] schedule+0x181/0x210 [ 166.221556][ C0] schedule_timeout+0x14f/0x240 [ 166.226407][ C0] ? run_local_timers+0x120/0x120 [ 166.231421][ C0] rcu_gp_kthread+0xed8/0x1770 [ 166.236181][ C0] kthread+0x332/0x350 [ 166.240233][ C0] ? rcu_report_qs_rsp+0x140/0x140 [ 166.245424][ C0] ? kthread_blkcg+0xe0/0xe0 [ 166.250172][ C0] ret_from_fork+0x24/0x30 [ 166.254590][ C0] NMI backtrace for cpu 0 [ 166.258911][ C0] CPU: 0 PID: 8240 Comm: syz-executor.0 Not tainted 5.4.0-syzkaller #0 [ 166.267142][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 166.277206][ C0] Call Trace: [ 166.280476][ C0] [ 166.283321][ C0] dump_stack+0x1fb/0x318 [ 166.287645][ C0] nmi_cpu_backtrace+0xaf/0x1a0 [ 166.292479][ C0] ? nmi_trigger_cpumask_backtrace+0x16d/0x290 [ 166.298620][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 166.304672][ C0] nmi_trigger_cpumask_backtrace+0x174/0x290 [ 166.310641][ C0] arch_trigger_cpumask_backtrace+0x10/0x20 [ 166.316524][ C0] rcu_dump_cpu_stacks+0x15a/0x220 [ 166.321627][ C0] rcu_sched_clock_irq+0xe25/0x1ad0 [ 166.326816][ C0] ? trace_hardirqs_off+0x74/0x80 [ 166.331832][ C0] update_process_times+0x12d/0x180 [ 166.337028][ C0] tick_sched_timer+0x263/0x420 [ 166.341868][ C0] ? tick_setup_sched_timer+0x3d0/0x3d0 [ 166.347410][ C0] __hrtimer_run_queues+0x403/0x840 [ 166.353144][ C0] hrtimer_interrupt+0x38c/0xda0 [ 166.358094][ C0] ? debug_smp_processor_id+0x9/0x20 [ 166.363371][ C0] smp_apic_timer_interrupt+0x109/0x280 [ 166.368912][ C0] apic_timer_interrupt+0xf/0x20 [ 166.373832][ C0] [ 166.376767][ C0] RIP: 0010:mod_memcg_page_state+0x3d/0x190 [ 166.382647][ C0] Code: 26 2e 00 48 83 c3 38 48 89 d8 48 c1 e8 03 49 bc 00 00 00 00 00 fc ff df 42 80 3c 20 00 74 08 48 89 df e8 b6 9b 69 00 48 8b 1b <48> 85 db 0f 84 d8 00 00 00 48 c7 c0 20 95 0a 89 48 c1 e8 03 42 80 [ 166.402245][ C0] RSP: 0018:ffffc90001e87ba0 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 166.410646][ C0] RAX: 1ffffd4000494c6f RBX: 0000000000000000 RCX: ffff88809414a240 [ 166.418608][ C0] RDX: 0000000000000000 RSI: 00000000fffffffc RDI: ffffea00024a6340 [ 166.426566][ C0] RBP: ffffc90001e87bc0 R08: 000000000003a728 R09: ffffed10131df2ff [ 166.434525][ C0] R10: ffffed10131df2ff R11: 0000000000000000 R12: dffffc0000000000 [ 166.442494][ C0] R13: dffffc0000000000 R14: 00000000fffffffc R15: ffff888098ef97e8 [ 166.450828][ C0] free_thread_stack+0x168/0x590 [ 166.455755][ C0] put_task_stack+0xa3/0x130 [ 166.460333][ C0] finish_task_switch+0x3f1/0x550 [ 166.465351][ C0] __schedule+0x9a8/0xcc0 [ 166.469676][ C0] schedule+0x181/0x210 [ 166.473840][ C0] do_nanosleep+0x1d0/0x6c0 [ 166.478354][ C0] hrtimer_nanosleep+0x3a6/0x5b0 [ 166.483282][ C0] ? trace_hrtimer_expire_exit+0x2d0/0x2d0 [ 166.489082][ C0] __x64_sys_nanosleep+0x186/0x1d0 [ 166.494189][ C0] do_syscall_64+0xf7/0x1c0 [ 166.498683][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 166.504739][ C0] RIP: 0033:0x458b20 [ 166.508622][ C0] Code: c0 5b 5d c3 66 0f 1f 44 00 00 8b 04 24 48 83 c4 18 5b 5d c3 66 0f 1f 44 00 00 83 3d 11 fe 61 00 00 75 14 b8 23 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 d4 d1 fb ff c3 48 83 ec 08 e8 ea 46 00 00 [ 166.528224][ C0] RSP: 002b:00007ffd3fff0238 EFLAGS: 00000246 ORIG_RAX: 0000000000000023 [ 166.536627][ C0] RAX: ffffffffffffffda RBX: 000000000000ee5d RCX: 0000000000458b20 [ 166.544592][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007ffd3fff0240 [ 166.552550][ C0] RBP: 0000000000000002 R08: 0000000000000001 R09: 0000000001c99940 [ 166.560511][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.568478][ C0] R13: 00007ffd3fff0290 R14: 000000000000ee53 R15: 00007ffd3fff02a0