[ 42.262270][ T23] audit: type=1800 audit(1575362913.341:27): pid=7997 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [ 42.301782][ T23] audit: type=1800 audit(1575362913.341:28): pid=7997 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 42.870845][ T23] audit: type=1800 audit(1575362914.011:29): pid=7997 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 42.890191][ T23] audit: type=1800 audit(1575362914.011:30): pid=7997 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.1.30' (ECDSA) to the list of known hosts. 2019/12/03 08:48:41 fuzzer started 2019/12/03 08:48:42 dialing manager at 10.128.0.26:38907 2019/12/03 08:48:42 syscalls: 2697 2019/12/03 08:48:42 code coverage: enabled 2019/12/03 08:48:42 comparison tracing: enabled 2019/12/03 08:48:42 extra coverage: extra coverage is not supported by the kernel 2019/12/03 08:48:42 setuid sandbox: enabled 2019/12/03 08:48:42 namespace sandbox: enabled 2019/12/03 08:48:42 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/03 08:48:42 fault injection: enabled 2019/12/03 08:48:42 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/03 08:48:42 net packet injection: enabled 2019/12/03 08:48:42 net device setup: enabled 2019/12/03 08:48:42 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/12/03 08:48:42 devlink PCI setup: PCI device 0000:00:10.0 is not available 08:48:43 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x16a, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e0000001e000503ed0080637e6394f23200d2000500fcb711407f48060006000300000002000000f88000f01700", 0x2e}], 0x1}, 0x0) 08:48:43 executing program 1: unshare(0x600) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x7003, 0x0) syzkaller login: [ 52.750991][ T8163] IPVS: ftp: loaded support on port[0] = 21 [ 52.891417][ T8163] chnl_net:caif_netlink_parms(): no params data found 08:48:44 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r2 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r4 = socket(0x10, 0x4000000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000080)={'veth0_to_team\x00', &(0x7f0000000040)=@ethtool_cmd={0x1}}) setsockopt$netlink_NETLINK_PKTINFO(r4, 0x10e, 0x3, &(0x7f00000003c0)=0x5, 0x4) getsockopt$EBT_SO_GET_INIT_INFO(r3, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00'}, &(0x7f0000000380)=0x78) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) write(r2, &(0x7f0000000280)="76fbf326faf4c5a032122f50465c0df727cfcd90bea39e389b86cbc42efcf142df38cda9ad77581a1ff9a5fa4188ad350850a6a36520fb29d3d1047d39a1c2619ac09338066aeca14a116634fdefd32c03a3eb5741e1b12b68c2c8ece00667b35fa85debb27b0050918e8f64f2b8066d9bf0e0b17e91caea4248fe8f8e61e96908616229", 0x84) getsockopt$netrom_NETROM_T2(r5, 0x103, 0x2, &(0x7f00000000c0)=0x10001, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000340)=0x7c9) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, &(0x7f00000004c0)) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, 0x0, 0xfffffdc9) bind$x25(0xffffffffffffffff, &(0x7f0000000180)={0x9, @null=' \x00'}, 0x12) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@local, 0x4, 0x1, 0x0, 0x5, 0x0, 0x8001}, 0x129) [ 52.962690][ T8163] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.984365][ T8163] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.996322][ T8163] device bridge_slave_0 entered promiscuous mode [ 53.021032][ T8163] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.037198][ T8163] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.045435][ T8163] device bridge_slave_1 entered promiscuous mode [ 53.089001][ T8166] IPVS: ftp: loaded support on port[0] = 21 [ 53.095191][ T8163] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.128646][ T8163] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.180804][ T8163] team0: Port device team_slave_0 added [ 53.198201][ T8163] team0: Port device team_slave_1 added [ 53.205528][ T8168] IPVS: ftp: loaded support on port[0] = 21 08:48:44 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='cifs\x00', 0x0, 0x0) [ 53.311362][ T8163] device hsr_slave_0 entered promiscuous mode [ 53.368185][ T8163] device hsr_slave_1 entered promiscuous mode 08:48:44 executing program 4: chdir(0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x401c5820, &(0x7f00000000c0)) [ 53.538579][ T8170] IPVS: ftp: loaded support on port[0] = 21 [ 53.594923][ T8163] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 53.672752][ T8163] netdevsim netdevsim0 netdevsim1: renamed from eth1 08:48:44 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000000001e, 0x2000000000000805, 0x0) r1 = socket(0x40000000000001e, 0x2000000000000805, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000}, 0x1c) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000180)=@req={0x10000}, 0x10) r2 = socket(0x40000000000001e, 0x2000000000000805, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) sendmsg(r2, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) [ 53.750604][ T8163] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 53.815448][ T8163] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 53.863738][ T8172] IPVS: ftp: loaded support on port[0] = 21 [ 53.923166][ T8166] chnl_net:caif_netlink_parms(): no params data found [ 53.935176][ T8174] IPVS: ftp: loaded support on port[0] = 21 [ 53.960809][ T8168] chnl_net:caif_netlink_parms(): no params data found [ 54.020365][ T8166] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.027895][ T8166] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.035611][ T8166] device bridge_slave_0 entered promiscuous mode [ 54.044947][ T8166] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.052081][ T8166] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.059948][ T8166] device bridge_slave_1 entered promiscuous mode [ 54.107585][ T8166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.125549][ T8166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.183079][ T8168] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.190549][ T8168] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.198494][ T8168] device bridge_slave_0 entered promiscuous mode [ 54.228937][ T8168] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.235986][ T8168] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.244277][ T8168] device bridge_slave_1 entered promiscuous mode [ 54.255697][ T8170] chnl_net:caif_netlink_parms(): no params data found [ 54.284683][ T8166] team0: Port device team_slave_0 added [ 54.300747][ T8168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.313581][ T8168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.346168][ T8166] team0: Port device team_slave_1 added [ 54.369746][ T8168] team0: Port device team_slave_0 added [ 54.429407][ T8166] device hsr_slave_0 entered promiscuous mode [ 54.477401][ T8166] device hsr_slave_1 entered promiscuous mode [ 54.527225][ T8166] debugfs: Directory 'hsr0' with parent '/' already present! [ 54.534995][ T8172] chnl_net:caif_netlink_parms(): no params data found [ 54.544503][ T8168] team0: Port device team_slave_1 added [ 54.552929][ T8170] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.560243][ T8170] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.567891][ T8170] device bridge_slave_0 entered promiscuous mode [ 54.593540][ T8174] chnl_net:caif_netlink_parms(): no params data found [ 54.602570][ T8170] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.610354][ T8170] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.618867][ T8170] device bridge_slave_1 entered promiscuous mode [ 54.646668][ T8170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.718817][ T8168] device hsr_slave_0 entered promiscuous mode [ 54.767569][ T8168] device hsr_slave_1 entered promiscuous mode [ 54.807228][ T8168] debugfs: Directory 'hsr0' with parent '/' already present! [ 54.836196][ T8170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.850439][ T8163] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.858770][ T8166] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 54.898857][ T8172] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.905928][ T8172] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.914372][ T8172] device bridge_slave_0 entered promiscuous mode [ 54.933378][ T8172] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.940886][ T8172] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.948923][ T8172] device bridge_slave_1 entered promiscuous mode [ 54.980692][ T8166] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 55.040561][ T8170] team0: Port device team_slave_0 added [ 55.048177][ T8172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.072702][ T8170] team0: Port device team_slave_1 added [ 55.079220][ T8166] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 55.110105][ T8172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.119513][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.128366][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.136932][ T8168] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 55.169496][ T8174] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.176572][ T8174] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.186060][ T8174] device bridge_slave_0 entered promiscuous mode [ 55.199489][ T8166] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 55.245976][ T8168] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 55.288952][ T8174] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.296042][ T8174] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.304550][ T8174] device bridge_slave_1 entered promiscuous mode [ 55.321950][ T8163] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.333030][ T8168] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 55.406060][ T8168] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 55.498749][ T8170] device hsr_slave_0 entered promiscuous mode [ 55.528018][ T8170] device hsr_slave_1 entered promiscuous mode [ 55.577676][ T8170] debugfs: Directory 'hsr0' with parent '/' already present! [ 55.587164][ T8172] team0: Port device team_slave_0 added [ 55.597147][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.605722][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.614582][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.621815][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.634053][ T8178] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.652288][ T8172] team0: Port device team_slave_1 added [ 55.663692][ T8174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.676053][ T8174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.714686][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.723732][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.733283][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.740398][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.799825][ T8172] device hsr_slave_0 entered promiscuous mode [ 55.847498][ T8172] device hsr_slave_1 entered promiscuous mode [ 55.887368][ T8172] debugfs: Directory 'hsr0' with parent '/' already present! [ 55.909403][ T8170] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 55.950030][ T2927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.958528][ T2927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.989211][ T8174] team0: Port device team_slave_0 added [ 55.999244][ T8174] team0: Port device team_slave_1 added [ 56.010129][ T8170] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 56.031788][ T2927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.040448][ T2927] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.049618][ T2927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.058261][ T2927] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.066567][ T2927] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.084991][ T8163] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 56.096846][ T8163] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.113059][ T8170] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 56.161872][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.170525][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.179813][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.189034][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.206906][ T8172] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 56.300038][ T8174] device hsr_slave_0 entered promiscuous mode [ 56.317836][ T8174] device hsr_slave_1 entered promiscuous mode [ 56.357170][ T8174] debugfs: Directory 'hsr0' with parent '/' already present! [ 56.364833][ T8170] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 56.419585][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.437262][ T8168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.444763][ T8172] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 56.489734][ T8172] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 56.575497][ T8172] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 56.662485][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.670085][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.680467][ T8163] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.693174][ T8166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.706289][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.715903][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.743938][ T8168] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.756012][ T8174] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 56.797827][ T8174] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 56.830933][ T8174] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 56.890395][ T8174] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 56.949332][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.957472][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.965071][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.974775][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.983447][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.990532][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.038515][ T8166] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.050457][ T8178] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.060437][ T8178] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.069532][ T8178] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.077939][ T8178] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.085010][ T8178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.093128][ T8178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.102249][ T8178] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.110882][ T8178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.119952][ T8178] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.128919][ T8178] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.138078][ T8178] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.146489][ T8178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.155626][ T8178] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.164441][ T8178] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.171550][ T8178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.195614][ T8168] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 57.206942][ T8168] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.235451][ T8168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.272996][ T8170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.283546][ T8186] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 57.307566][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.315911][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 162.117022][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 162.123854][ C0] rcu: 0-...!: (1 GPs behind) idle=296/1/0x4000000000000002 softirq=11442/11443 fqs=9 [ 162.133828][ C0] (t=10500 jiffies g=6033 q=374) [ 162.138850][ C0] rcu: rcu_preempt kthread starved for 10482 jiffies! g6033 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 162.149942][ C0] rcu: RCU grace-period kthread stack dump: [ 162.155819][ C0] rcu_preempt R running task 29048 10 2 0x80004000 [ 162.163709][ C0] Call Trace: [ 162.166995][ C0] __schedule+0x9a0/0xcc0 [ 162.171398][ C0] schedule+0x181/0x210 [ 162.175542][ C0] schedule_timeout+0x14f/0x240 [ 162.180381][ C0] ? run_local_timers+0x120/0x120 [ 162.185393][ C0] rcu_gp_kthread+0xed8/0x1770 [ 162.190150][ C0] kthread+0x332/0x350 [ 162.194220][ C0] ? rcu_report_qs_rsp+0x140/0x140 [ 162.199353][ C0] ? kthread_blkcg+0xe0/0xe0 [ 162.203961][ C0] ret_from_fork+0x24/0x30 [ 162.208390][ C0] NMI backtrace for cpu 0 [ 162.212879][ C0] CPU: 0 PID: 8134 Comm: udevd Not tainted 5.4.0-syzkaller #0 [ 162.220317][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 162.230365][ C0] Call Trace: [ 162.233642][ C0] [ 162.236492][ C0] dump_stack+0x1fb/0x318 [ 162.240821][ C0] nmi_cpu_backtrace+0xaf/0x1a0 [ 162.245662][ C0] ? nmi_trigger_cpumask_backtrace+0x16d/0x290 [ 162.251808][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 162.257862][ C0] nmi_trigger_cpumask_backtrace+0x174/0x290 [ 162.263845][ C0] arch_trigger_cpumask_backtrace+0x10/0x20 [ 162.269726][ C0] rcu_dump_cpu_stacks+0x15a/0x220 [ 162.274833][ C0] rcu_sched_clock_irq+0xe25/0x1ad0 [ 162.280023][ C0] ? trace_hardirqs_off+0x74/0x80 [ 162.285038][ C0] update_process_times+0x12d/0x180 [ 162.290224][ C0] tick_sched_timer+0x263/0x420 [ 162.295060][ C0] ? tick_setup_sched_timer+0x3d0/0x3d0 [ 162.300594][ C0] __hrtimer_run_queues+0x403/0x840 [ 162.305792][ C0] hrtimer_interrupt+0x38c/0xda0 [ 162.310735][ C0] ? debug_smp_processor_id+0x9/0x20 [ 162.316214][ C0] smp_apic_timer_interrupt+0x109/0x280 [ 162.321762][ C0] apic_timer_interrupt+0xf/0x20 [ 162.326687][ C0] [ 162.329620][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x4/0x50 [ 162.335675][ C0] Code: 84 00 00 00 00 00 55 48 89 e5 53 48 89 fb e8 13 00 00 00 48 8b 3d 34 e7 cc 07 48 89 de e8 64 02 3b 00 5b 5d c3 cc 48 8b 04 24 <65> 48 8b 0c 25 c0 1d 02 00 65 8b 15 b8 81 8b 7e f7 c2 00 01 1f 00 [ 162.355294][ C0] RSP: 0018:ffffc90001ce7ad8 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 162.363688][ C0] RAX: ffffffff81487326 RBX: ffffea00024aa3c0 RCX: 0000000000000000 [ 162.371643][ C0] RDX: 0000000000000000 RSI: 00000000fffffffc RDI: ffffea00024aa3c0 [ 162.379601][ C0] RBP: ffffc90001ce7b00 R08: 000000000003a768 R09: ffffed10150a42b7 [ 162.387555][ C0] R10: ffffed10150a42b7 R11: 0000000000000000 R12: ffff8880a00117a0 [ 162.395508][ C0] R13: dffffc0000000000 R14: 00000000fffffffc R15: ffff8880a85215a8 [ 162.403482][ C0] ? mod_memcg_page_state+0x16/0x190 [ 162.408758][ C0] ? free_thread_stack+0x124/0x590 [ 162.413852][ C0] ? mod_memcg_page_state+0x16/0x190 [ 162.419121][ C0] free_thread_stack+0x168/0x590 [ 162.424045][ C0] put_task_stack+0xa3/0x130 [ 162.428620][ C0] finish_task_switch+0x3f1/0x550 [ 162.433636][ C0] __schedule+0x9a8/0xcc0 [ 162.437959][ C0] schedule+0x181/0x210 [ 162.442102][ C0] schedule_hrtimeout_range_clock+0x3c7/0x510 [ 162.448156][ C0] ? trace_hrtimer_expire_exit+0x2d0/0x2d0 [ 162.453955][ C0] schedule_hrtimeout_range+0x2a/0x40 [ 162.459315][ C0] ep_poll+0xa4d/0xe80 [ 162.463389][ C0] ? do_task_dead+0xc0/0xc0 [ 162.467988][ C0] ? __kasan_check_read+0x11/0x20 [ 162.472998][ C0] do_epoll_wait+0x1ee/0x260 [ 162.477576][ C0] __x64_sys_epoll_wait+0x9a/0xb0 [ 162.482588][ C0] do_syscall_64+0xf7/0x1c0 [ 162.487083][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 162.492960][ C0] RIP: 0033:0x7f1458447943 [ 162.497364][ C0] Code: 00 31 d2 48 29 c2 64 89 11 48 83 c8 ff eb ea 90 90 90 90 90 90 90 90 83 3d b5 dc 2a 00 00 75 13 49 89 ca b8 e8 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 34 c3 48 83 ec 08 e8 3b c4 00 00 48 89 04 24 [ 162.516949][ C0] RSP: 002b:00007ffcfc446b28 EFLAGS: 00000246 ORIG_RAX: 00000000000000e8 [ 162.525428][ C0] RAX: ffffffffffffffda RBX: 000000000218f250 RCX: 00007f1458447943 [ 162.533406][ C0] RDX: 0000000000000004 RSI: 00007ffcfc446bf0 RDI: 0000000000000007 [ 162.541373][ C0] RBP: 0000000000625500 R08: 00007ffcfc446b10 R09: 00007ffcfc45a0b8 [ 162.549336][ C0] R10: 000000000000ee42 R11: 0000000000000246 R12: 000000000219efd0 [ 162.557296][ C0] R13: 00007ffcfc447c47 R14: 0000000000000005 R15: 000000000218f250