[ 45.424637][ T27] audit: type=1800 audit(1578466141.990:25): pid=8307 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 45.463093][ T27] audit: type=1800 audit(1578466141.990:26): pid=8307 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 45.507569][ T27] audit: type=1800 audit(1578466141.990:27): pid=8307 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [ 45.555238][ T27] audit: type=1800 audit(1578466141.990:28): pid=8307 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.100' (ECDSA) to the list of known hosts. 2020/01/08 06:49:13 fuzzer started 2020/01/08 06:49:16 dialing manager at 10.128.0.26:35703 2020/01/08 06:49:16 syscalls: 2824 2020/01/08 06:49:16 code coverage: enabled 2020/01/08 06:49:16 comparison tracing: enabled 2020/01/08 06:49:16 extra coverage: enabled 2020/01/08 06:49:16 setuid sandbox: enabled 2020/01/08 06:49:16 namespace sandbox: enabled 2020/01/08 06:49:16 Android sandbox: /sys/fs/selinux/policy does not exist 2020/01/08 06:49:16 fault injection: enabled 2020/01/08 06:49:16 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/01/08 06:49:16 net packet injection: enabled 2020/01/08 06:49:16 net device setup: enabled 2020/01/08 06:49:16 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/01/08 06:49:16 devlink PCI setup: PCI device 0000:00:10.0 is not available 06:49:17 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x4, 0x0, &(0x7f0000000040)) 06:49:17 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$FITRIM(r0, 0xc020662a, &(0x7f0000000040)={0xffffffff000, 0x100000000004}) syzkaller login: [ 60.845583][ T8479] IPVS: ftp: loaded support on port[0] = 21 06:49:17 executing program 2: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) mount(&(0x7f0000000300)=@filename='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) [ 61.040230][ T8479] chnl_net:caif_netlink_parms(): no params data found [ 61.050304][ T8482] IPVS: ftp: loaded support on port[0] = 21 [ 61.150557][ T8479] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.172981][ T8479] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.184417][ T8479] device bridge_slave_0 entered promiscuous mode [ 61.218696][ T8479] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.233107][ T8479] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.253899][ T8479] device bridge_slave_1 entered promiscuous mode 06:49:17 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x69, 0x10, 0x54}, [@ldst={0x7, 0x0, 0x1}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xff34, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1c4, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 61.351686][ T8484] IPVS: ftp: loaded support on port[0] = 21 [ 61.368275][ T8479] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.398029][ T8482] chnl_net:caif_netlink_parms(): no params data found [ 61.416411][ T8479] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.480057][ T8479] team0: Port device team_slave_0 added [ 61.519588][ T8479] team0: Port device team_slave_1 added [ 61.528870][ T8482] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.543747][ T8482] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.551512][ T8482] device bridge_slave_0 entered promiscuous mode [ 61.585595][ T8487] IPVS: ftp: loaded support on port[0] = 21 [ 61.609156][ T8482] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.622342][ T8482] bridge0: port 2(bridge_slave_1) entered disabled state 06:49:18 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00001a7fe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x2465a, 0x7e, &(0x7f0000ab0000)={0xa, 0x0, 0x0, @loopback={0x0, 0x3}}, 0x1c) [ 61.631134][ T8482] device bridge_slave_1 entered promiscuous mode [ 61.696247][ T8479] device hsr_slave_0 entered promiscuous mode [ 61.764937][ T8479] device hsr_slave_1 entered promiscuous mode 06:49:18 executing program 5: r0 = timerfd_create(0x0, 0x0) read(r0, 0x0, 0x0) [ 61.893673][ T8482] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.908859][ T8482] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.954535][ T8489] IPVS: ftp: loaded support on port[0] = 21 [ 62.000145][ T8484] chnl_net:caif_netlink_parms(): no params data found [ 62.017709][ T8482] team0: Port device team_slave_0 added [ 62.061644][ T8482] team0: Port device team_slave_1 added [ 62.185355][ T8482] device hsr_slave_0 entered promiscuous mode [ 62.243226][ T8482] device hsr_slave_1 entered promiscuous mode [ 62.282963][ T8482] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.290779][ T8482] Cannot create hsr debugfs directory [ 62.338106][ T8487] chnl_net:caif_netlink_parms(): no params data found [ 62.348336][ T8484] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.359160][ T8484] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.360449][ T8492] IPVS: ftp: loaded support on port[0] = 21 [ 62.375624][ T8484] device bridge_slave_0 entered promiscuous mode [ 62.387741][ T8484] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.395910][ T8484] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.403653][ T8484] device bridge_slave_1 entered promiscuous mode [ 62.439044][ T8479] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.496813][ T8479] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.559187][ T8479] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.618208][ T8479] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.666225][ T8484] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.677165][ T8484] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.759332][ T8489] chnl_net:caif_netlink_parms(): no params data found [ 62.782084][ T8484] team0: Port device team_slave_0 added [ 62.793717][ T8484] team0: Port device team_slave_1 added [ 62.829193][ T8487] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.837404][ T8487] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.845247][ T8487] device bridge_slave_0 entered promiscuous mode [ 62.896101][ T8484] device hsr_slave_0 entered promiscuous mode [ 62.933286][ T8484] device hsr_slave_1 entered promiscuous mode [ 62.972999][ T8484] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.980705][ T8484] Cannot create hsr debugfs directory [ 62.994463][ T8487] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.001565][ T8487] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.011218][ T8487] device bridge_slave_1 entered promiscuous mode [ 63.034799][ T8482] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.089641][ T8482] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.158667][ T8482] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.209839][ T8487] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.221491][ T8487] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.242068][ T8482] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.303035][ T8487] team0: Port device team_slave_0 added [ 63.342477][ T8487] team0: Port device team_slave_1 added [ 63.379245][ T8489] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.387139][ T8489] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.396017][ T8489] device bridge_slave_0 entered promiscuous mode [ 63.407028][ T8492] chnl_net:caif_netlink_parms(): no params data found [ 63.475800][ T8487] device hsr_slave_0 entered promiscuous mode [ 63.524263][ T8487] device hsr_slave_1 entered promiscuous mode [ 63.552942][ T8487] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.560535][ T8487] Cannot create hsr debugfs directory [ 63.566446][ T8489] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.573757][ T8489] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.581330][ T8489] device bridge_slave_1 entered promiscuous mode [ 63.616847][ T8492] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.624074][ T8492] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.631829][ T8492] device bridge_slave_0 entered promiscuous mode [ 63.675948][ T8492] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.683228][ T8492] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.690759][ T8492] device bridge_slave_1 entered promiscuous mode [ 63.717071][ T8489] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.729337][ T8489] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.762182][ T8492] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.779649][ T8484] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.809953][ T8484] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.871357][ T8479] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.884283][ T8492] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.904613][ T8484] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.945434][ T8484] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.996175][ T8489] team0: Port device team_slave_0 added [ 64.022027][ T8492] team0: Port device team_slave_0 added [ 64.030276][ T8492] team0: Port device team_slave_1 added [ 64.038591][ T8489] team0: Port device team_slave_1 added [ 64.104685][ T8489] device hsr_slave_0 entered promiscuous mode [ 64.143160][ T8489] device hsr_slave_1 entered promiscuous mode [ 64.192996][ T8489] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.200611][ T8489] Cannot create hsr debugfs directory [ 64.228611][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.237190][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.246375][ T8479] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.258821][ T8487] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.294764][ T8487] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.350630][ T8487] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.455571][ T8492] device hsr_slave_0 entered promiscuous mode [ 64.513168][ T8492] device hsr_slave_1 entered promiscuous mode [ 64.563015][ T8492] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.570681][ T8492] Cannot create hsr debugfs directory [ 64.576473][ T2693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.586258][ T2693] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.595371][ T2693] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.602559][ T2693] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.610760][ T2693] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.623273][ T8482] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.630060][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.642116][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.650901][ T2676] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.657993][ T2676] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.672256][ T8487] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.765140][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.804850][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.812548][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.825857][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.835333][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.844163][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.865054][ T8482] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.886809][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.918658][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.930573][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.939403][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.947937][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.956638][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.965124][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.977165][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.985937][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.994279][ T2676] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.001304][ T2676] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.009880][ T2677] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.017788][ T8489] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 65.086538][ T8479] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.099435][ T2692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.108146][ T2692] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.117571][ T2692] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.124885][ T2692] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.132379][ T2692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.144329][ T8489] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 65.186534][ T8489] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 65.240343][ T8489] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 65.304962][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.313645][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.322784][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.331254][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.368237][ T8479] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.379679][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.390890][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.399419][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.406976][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.422375][ T8482] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 65.434387][ T8482] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.460098][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.470390][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.481416][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.489930][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.511646][ T8484] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.521400][ T8487] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.535253][ T8492] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 65.585503][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.608052][ T8492] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 65.639363][ T2692] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.647170][ T2692] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.659663][ T8482] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.673914][ T8487] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.685237][ T8484] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.707331][ T8492] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 65.755114][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.762968][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.774036][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.781649][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.790021][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.799089][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.813923][ T8479] device veth0_vlan entered promiscuous mode [ 65.823376][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.831433][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.843492][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.851941][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.860492][ T2686] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.867572][ T2686] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.881423][ T8492] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 65.924616][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.932257][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.943422][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.951340][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.960934][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.969664][ T2686] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.976764][ T2686] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.985520][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.994203][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.002545][ T2686] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.009646][ T2686] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.017179][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.026004][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.034412][ T2686] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.041443][ T2686] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.049959][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.059882][ T8479] device veth1_vlan entered promiscuous mode [ 66.091990][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.100328][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.109128][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.117810][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.126775][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.135547][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.144374][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.152571][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.161186][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.170509][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.192220][ T8489] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.224519][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.233785][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.242673][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.251675][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.260927][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.269396][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.277769][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.286286][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.294632][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.302747][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.329443][ T8487] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.345082][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.357856][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.366826][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.374733][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.386973][ T8482] device veth0_vlan entered promiscuous mode [ 66.399335][ T8489] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.431698][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.444131][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.495285][ T8487] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.512818][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 171.519749][ C1] rcu: 1-...!: (1 GPs behind) idle=fc2/1/0x4000000000000002 softirq=11658/11665 fqs=0 [ 171.529653][ C1] (t=10501 jiffies g=6877 q=164) [ 171.534672][ C1] rcu: rcu_preempt kthread starved for 10502 jiffies! g6877 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 171.545758][ C1] rcu: RCU grace-period kthread stack dump: [ 171.551664][ C1] rcu_preempt R running task 29104 10 2 0x80004000 [ 171.559563][ C1] Call Trace: [ 171.562851][ C1] __schedule+0x9a0/0xcc0 [ 171.567179][ C1] schedule+0x181/0x210 [ 171.571328][ C1] schedule_timeout+0x14f/0x240 [ 171.576173][ C1] ? run_local_timers+0x120/0x120 [ 171.581192][ C1] rcu_gp_kthread+0xed8/0x1770 [ 171.585956][ C1] kthread+0x332/0x350 [ 171.590128][ C1] ? rcu_report_qs_rsp+0x140/0x140 [ 171.595241][ C1] ? kthread_blkcg+0xe0/0xe0 [ 171.599840][ C1] ret_from_fork+0x24/0x30 [ 171.604271][ C1] NMI backtrace for cpu 1 [ 171.608596][ C1] CPU: 1 PID: 8497 Comm: syz-executor.0 Not tainted 5.5.0-rc5-syzkaller #0 [ 171.617163][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 171.627208][ C1] Call Trace: [ 171.630480][ C1] [ 171.633327][ C1] dump_stack+0x1fb/0x318 [ 171.637648][ C1] nmi_cpu_backtrace+0xaf/0x1a0 [ 171.642510][ C1] ? nmi_trigger_cpumask_backtrace+0x16d/0x290 [ 171.648686][ C1] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 171.654749][ C1] nmi_trigger_cpumask_backtrace+0x174/0x290 [ 171.660726][ C1] arch_trigger_cpumask_backtrace+0x10/0x20 [ 171.668692][ C1] rcu_dump_cpu_stacks+0x15a/0x220 [ 171.673799][ C1] rcu_sched_clock_irq+0xe25/0x1ad0 [ 171.679079][ C1] ? trace_hardirqs_off+0x74/0x80 [ 171.684097][ C1] update_process_times+0x12d/0x180 [ 171.689286][ C1] tick_sched_timer+0x263/0x420 [ 171.694127][ C1] ? tick_setup_sched_timer+0x3d0/0x3d0 [ 171.699668][ C1] __hrtimer_run_queues+0x403/0x840 [ 171.704873][ C1] hrtimer_interrupt+0x38c/0xda0 [ 171.709816][ C1] ? debug_smp_processor_id+0x9/0x20 [ 171.715095][ C1] smp_apic_timer_interrupt+0x109/0x280 [ 171.720629][ C1] apic_timer_interrupt+0xf/0x20 [ 171.725551][ C1] [ 171.728480][ C1] RIP: 0010:mod_memcg_page_state+0x1/0x190 [ 171.734292][ C1] Code: 8b 3b e8 32 7e 60 00 eb 0c e8 eb 27 2e 00 eb 05 e8 e4 27 2e 00 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d c3 0f 1f 44 00 00 55 <48> 89 e5 41 57 41 56 41 54 53 41 89 f6 48 89 fb e8 ba 27 2e 00 48 [ 171.753916][ C1] RSP: 0018:ffffc90002477838 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 171.762466][ C1] RAX: 1ffff11011dd6761 RBX: ffff88808eeb3b08 RCX: 0000000000000000 [ 171.770554][ C1] RDX: ffffc90001f29000 RSI: 00000000fffffffc RDI: ffffea0002549180 [ 171.778523][ C1] RBP: ffffc90002477880 R08: dffffc0000000000 R09: fffffbfff12c962d [ 171.786487][ C1] R10: fffffbfff12c962d R11: 0000000000000000 R12: ffff88808eeb3ba0 [ 171.794452][ C1] R13: dffffc0000000000 R14: 1ffff11011dd6774 R15: ffff8880909917f8 [ 171.802441][ C1] ? free_thread_stack+0x168/0x590 [ 171.807545][ C1] put_task_stack+0xa3/0x130 [ 171.812123][ C1] finish_task_switch+0x3f1/0x550 [ 171.817143][ C1] __schedule+0x9a8/0xcc0 [ 171.821474][ C1] ? do_raw_spin_unlock+0x142/0x950 [ 171.826666][ C1] schedule+0x181/0x210 [ 171.830833][ C1] futex_wait_queue_me+0x2a3/0x4b0 [ 171.835966][ C1] futex_wait+0x252/0x770 [ 171.840386][ C1] do_futex+0x437/0x3d60 [ 171.844624][ C1] ? __lock_acquire+0xc75/0x1be0 [ 171.849570][ C1] ? trace_hardirqs_on+0x74/0x80 [ 171.854499][ C1] ? task_work_run+0x139/0x1b0 [ 171.859256][ C1] ? __might_fault+0xf9/0x160 [ 171.863928][ C1] ? __might_fault+0xf9/0x160 [ 171.868597][ C1] ? check_preemption_disabled+0xb4/0x260 [ 171.874303][ C1] ? debug_smp_processor_id+0x9/0x20 [ 171.879578][ C1] __se_sys_futex+0x28c/0x360 [ 171.884249][ C1] ? prepare_exit_to_usermode+0x221/0x5b0 [ 171.889952][ C1] ? trace_irq_disable_rcuidle+0x23/0x1e0 [ 171.895656][ C1] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 171.901103][ C1] __x64_sys_futex+0xe5/0x100 [ 171.905769][ C1] do_syscall_64+0xf7/0x1c0 [ 171.910263][ C1] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 171.916145][ C1] RIP: 0033:0x45af49 [ 171.920040][ C1] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 171.939646][ C1] RSP: 002b:00007f4d6856dcf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 171.948054][ C1] RAX: ffffffffffffffda RBX: 000000000075bf28 RCX: 000000000045af49 [ 171.956015][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000075bf28 [ 171.963971][ C1] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 171.971927][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000075bf2c [ 171.979885][ C1] R13: 00007ffd757def8f R14: 00007f4d6856e9c0 R15: 000000000075bf2c