[ 43.957281][ T25] audit: type=1800 audit(1575366904.927:25): pid=8101 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 43.977022][ T25] audit: type=1800 audit(1575366904.927:26): pid=8101 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 44.035440][ T25] audit: type=1800 audit(1575366904.937:27): pid=8101 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [ 44.077204][ T25] audit: type=1800 audit(1575366904.937:28): pid=8101 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.25' (ECDSA) to the list of known hosts. 2019/12/03 09:55:16 fuzzer started 2019/12/03 09:55:18 dialing manager at 10.128.0.26:38907 2019/12/03 09:55:18 syscalls: 2697 2019/12/03 09:55:18 code coverage: enabled 2019/12/03 09:55:18 comparison tracing: enabled 2019/12/03 09:55:18 extra coverage: extra coverage is not supported by the kernel 2019/12/03 09:55:18 setuid sandbox: enabled 2019/12/03 09:55:18 namespace sandbox: enabled 2019/12/03 09:55:18 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/03 09:55:18 fault injection: enabled 2019/12/03 09:55:18 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/03 09:55:18 net packet injection: enabled 2019/12/03 09:55:18 net device setup: enabled 2019/12/03 09:55:18 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/12/03 09:55:18 devlink PCI setup: PCI device 0000:00:10.0 is not available 09:55:19 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000736000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0xfffff000) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(r4, r1) 09:55:19 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[@ANYRES16, @ANYBLOB="898f"], 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) getsockopt$inet6_int(r0, 0x3a, 0x1, 0x0, &(0x7f0000000000)) syzkaller login: [ 58.955376][ T8265] IPVS: ftp: loaded support on port[0] = 21 [ 59.093396][ T8265] chnl_net:caif_netlink_parms(): no params data found [ 59.132859][ T8265] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.140620][ T8265] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.149677][ T8265] device bridge_slave_0 entered promiscuous mode [ 59.159256][ T8265] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.167394][ T8265] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.175352][ T8265] device bridge_slave_1 entered promiscuous mode [ 59.196708][ T8265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.208567][ T8265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.233415][ T8265] team0: Port device team_slave_0 added [ 59.236991][ T8268] IPVS: ftp: loaded support on port[0] = 21 [ 59.241144][ T8265] team0: Port device team_slave_1 added 09:55:20 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3f, 0x5, 0x7, 0x40, 0x0, 0xffff, 0x2, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000040), 0xd}, 0x4000, 0xffff, 0xe905, 0x8, 0x40, 0x7, 0x6}, 0x0, 0x5, 0xffffffffffffffff, 0xfd36a1adbeba1b8a) mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x2, 0x3f}, 0x8000000200000402, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r0, &(0x7f0000000080)={0x14}, 0xfffffff4) [ 59.308245][ T8265] device hsr_slave_0 entered promiscuous mode [ 59.395590][ T8265] device hsr_slave_1 entered promiscuous mode 09:55:20 executing program 3: r0 = creat(&(0x7f0000000340)='./file1\x00', 0x0) io_setup(0x8, &(0x7f0000000200)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) [ 59.518128][ T8270] IPVS: ftp: loaded support on port[0] = 21 [ 59.607379][ T8265] netdevsim netdevsim0 netdevsim0: renamed from eth0 09:55:20 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fsopen(&(0x7f00000000c0)='binfmt_misc\x00', 0x0) [ 59.719072][ T8265] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 59.731108][ T8272] IPVS: ftp: loaded support on port[0] = 21 [ 59.777550][ T8265] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 59.849951][ T8265] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 59.933371][ T8275] IPVS: ftp: loaded support on port[0] = 21 [ 59.941456][ T8268] chnl_net:caif_netlink_parms(): no params data found [ 59.960219][ T8265] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.967509][ T8265] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.975573][ T8265] bridge0: port 1(bridge_slave_0) entered blocking state 09:55:20 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x3, &(0x7f0000000040)=@framed={{0x15, 0xa, 0x0, 0x0, 0x0, 0x71, 0x10, 0x74}}, &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x7f\x00'/248}, 0x48) [ 59.982663][ T8265] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.128357][ T8279] IPVS: ftp: loaded support on port[0] = 21 [ 60.143351][ T8268] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.153457][ T8268] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.162216][ T8268] device bridge_slave_0 entered promiscuous mode [ 60.169990][ T8270] chnl_net:caif_netlink_parms(): no params data found [ 60.179140][ T8268] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.186657][ T8268] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.194229][ T8268] device bridge_slave_1 entered promiscuous mode [ 60.207177][ T3752] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.216719][ T3752] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.270795][ T8268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.282462][ T8268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.315421][ T8270] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.322553][ T8270] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.330503][ T8270] device bridge_slave_0 entered promiscuous mode [ 60.345031][ T8268] team0: Port device team_slave_0 added [ 60.352602][ T8268] team0: Port device team_slave_1 added [ 60.365495][ T8270] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.372554][ T8270] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.380995][ T8270] device bridge_slave_1 entered promiscuous mode [ 60.400597][ T8270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.456932][ T8268] device hsr_slave_0 entered promiscuous mode [ 60.505569][ T8268] device hsr_slave_1 entered promiscuous mode [ 60.555337][ T8268] debugfs: Directory 'hsr0' with parent '/' already present! [ 60.566684][ T8270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.624868][ T8270] team0: Port device team_slave_0 added [ 60.658585][ T8270] team0: Port device team_slave_1 added [ 60.695926][ T8265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.788772][ T8270] device hsr_slave_0 entered promiscuous mode [ 60.846974][ T8270] device hsr_slave_1 entered promiscuous mode [ 60.905481][ T8270] debugfs: Directory 'hsr0' with parent '/' already present! [ 60.920880][ T8279] chnl_net:caif_netlink_parms(): no params data found [ 60.937730][ T8275] chnl_net:caif_netlink_parms(): no params data found [ 60.949392][ T8265] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.960159][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.969107][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.978095][ T8268] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 61.048638][ T8272] chnl_net:caif_netlink_parms(): no params data found [ 61.084271][ T8268] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 61.140707][ T8268] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 61.180860][ T8268] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 61.251192][ T2983] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.260406][ T2983] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.269041][ T2983] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.276136][ T2983] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.284175][ T2983] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.293521][ T2983] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.301900][ T2983] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.308978][ T2983] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.317595][ T2983] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.326239][ T2983] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.347738][ T8270] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 61.402538][ T8270] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 61.474113][ T8275] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.482705][ T8275] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.491029][ T8275] device bridge_slave_0 entered promiscuous mode [ 61.509032][ T8270] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 61.571372][ T8270] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 61.627945][ T8275] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.635024][ T8275] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.645074][ T8275] device bridge_slave_1 entered promiscuous mode [ 61.660396][ T8279] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.669801][ T8279] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.677892][ T8279] device bridge_slave_0 entered promiscuous mode [ 61.700579][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.710196][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.732753][ T8279] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.740794][ T8279] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.748918][ T8279] device bridge_slave_1 entered promiscuous mode [ 61.771010][ T3752] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.779215][ T3752] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.788727][ T3752] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.802149][ T8272] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.809991][ T8272] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.818023][ T8272] device bridge_slave_0 entered promiscuous mode [ 61.825903][ T8272] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.833005][ T8272] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.841119][ T8272] device bridge_slave_1 entered promiscuous mode [ 61.858680][ T8275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.869974][ T8275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.880320][ T8280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.889017][ T8280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.902108][ T8265] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.914280][ T8265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.923647][ T8279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.939585][ T8279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.966557][ T8276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.974823][ T8276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.993899][ T8268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.019622][ T8275] team0: Port device team_slave_0 added [ 62.028985][ T8275] team0: Port device team_slave_1 added [ 62.037767][ T8279] team0: Port device team_slave_0 added [ 62.045080][ T8279] team0: Port device team_slave_1 added [ 62.054221][ T8272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.071687][ T8265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.098276][ T8272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.116850][ T3752] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.124247][ T3752] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.140428][ T8268] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.188796][ T8275] device hsr_slave_0 entered promiscuous mode [ 62.215667][ T8275] device hsr_slave_1 entered promiscuous mode [ 62.255463][ T8275] debugfs: Directory 'hsr0' with parent '/' already present! [ 62.269891][ T8280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.277960][ T8280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.338146][ T8279] device hsr_slave_0 entered promiscuous mode [ 62.356171][ T8279] device hsr_slave_1 entered promiscuous mode [ 62.385315][ T8279] debugfs: Directory 'hsr0' with parent '/' already present! [ 62.399502][ T8272] team0: Port device team_slave_0 added [ 62.412478][ T8272] team0: Port device team_slave_1 added [ 62.419168][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.428081][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.436721][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.443757][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.451501][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.460018][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.468429][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.475609][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.483085][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.492633][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.500510][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.514678][ T8270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.561763][ T8270] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.648744][ T3752] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.662501][ T3752] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.673354][ T3752] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.688455][ T3752] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.700173][ T3752] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.711648][ T3752] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.724537][ T3752] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.739316][ T3752] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.750003][ T3752] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.757174][ T3752] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.771548][ T3752] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.779649][ T3752] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 167.595162][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 167.602019][ C0] rcu: 0-...!: (10499 ticks this GP) idle=9ce/1/0x4000000000000002 softirq=10518/10518 fqs=40 [ 167.613359][ C0] (t=10501 jiffies g=6281 q=132) [ 167.618665][ C0] rcu: rcu_preempt kthread starved for 10421 jiffies! g6281 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 167.630552][ C0] rcu: RCU grace-period kthread stack dump: [ 167.637250][ C0] rcu_preempt R running task 29032 10 2 0x80004000 [ 167.646235][ C0] Call Trace: [ 167.649551][ C0] __schedule+0x9a0/0xcc0 [ 167.654272][ C0] schedule+0x181/0x210 [ 167.658610][ C0] schedule_timeout+0x14f/0x240 [ 167.664040][ C0] ? run_local_timers+0x120/0x120 [ 167.669181][ C0] rcu_gp_kthread+0xed8/0x1770 [ 167.673973][ C0] kthread+0x332/0x350 [ 167.678057][ C0] ? rcu_report_qs_rsp+0x140/0x140 [ 167.683247][ C0] ? kthread_blkcg+0xe0/0xe0 [ 167.688115][ C0] ret_from_fork+0x24/0x30 [ 167.693235][ C0] NMI backtrace for cpu 0 [ 167.697902][ C0] CPU: 0 PID: 8280 Comm: kworker/0:3 Not tainted 5.4.0-syzkaller #0 [ 167.705863][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 167.715941][ C0] Workqueue: ipv6_addrconf addrconf_dad_work [ 167.722110][ C0] Call Trace: [ 167.725385][ C0] [ 167.728227][ C0] dump_stack+0x1fb/0x318 [ 167.732647][ C0] nmi_cpu_backtrace+0xaf/0x1a0 [ 167.737591][ C0] ? nmi_trigger_cpumask_backtrace+0x16d/0x290 [ 167.743933][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 167.750012][ C0] nmi_trigger_cpumask_backtrace+0x174/0x290 [ 167.755990][ C0] arch_trigger_cpumask_backtrace+0x10/0x20 [ 167.761916][ C0] rcu_dump_cpu_stacks+0x15a/0x220 [ 167.767127][ C0] rcu_sched_clock_irq+0xe25/0x1ad0 [ 167.772324][ C0] ? trace_hardirqs_off+0x74/0x80 [ 167.777370][ C0] update_process_times+0x12d/0x180 [ 167.782803][ C0] tick_sched_timer+0x263/0x420 [ 167.788071][ C0] ? tick_setup_sched_timer+0x3d0/0x3d0 [ 167.793792][ C0] __hrtimer_run_queues+0x403/0x840 [ 167.799477][ C0] hrtimer_interrupt+0x38c/0xda0 [ 167.804562][ C0] ? debug_smp_processor_id+0x9/0x20 [ 167.809866][ C0] smp_apic_timer_interrupt+0x109/0x280 [ 167.815453][ C0] apic_timer_interrupt+0xf/0x20 [ 167.820388][ C0] [ 167.823329][ C0] RIP: 0010:free_thread_stack+0x18b/0x590 [ 167.829183][ C0] Code: ff ff e8 28 04 00 00 43 80 3c 2e 00 74 08 4c 89 e7 e8 09 a4 69 00 49 8b 1c 24 48 83 c3 08 48 89 d8 48 c1 e8 03 42 80 3c 28 00 <74> 08 48 89 df e8 eb a3 69 00 48 8b 1b e9 82 ff ff ff e8 de 2c 2e [ 167.850019][ C0] RSP: 0018:ffffc90001f978e8 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 167.858424][ C0] RAX: 1ffff110147acef1 RBX: ffff8880a3d67788 RCX: ffff88808ff981c0 [ 167.866470][ C0] RDX: 0000000000000000 RSI: 00000000fffffffc RDI: ffffea00028f7d40 [ 167.874697][ C0] RBP: ffffc90001f97920 R08: 000000000003a768 R09: ffffed10150f82b7 [ 167.882862][ C0] R10: ffffed10150f82b7 R11: 0000000000000000 R12: ffff8880a3d67820 [ 167.890840][ C0] R13: dffffc0000000000 R14: 1ffff110147acf04 R15: ffff8880a87c15a8 [ 167.898825][ C0] ? free_thread_stack+0x168/0x590 [ 167.903931][ C0] put_task_stack+0xa3/0x130 [ 167.908512][ C0] finish_task_switch+0x3f1/0x550 [ 167.913730][ C0] __schedule+0x9a8/0xcc0 [ 167.918056][ C0] ? debug_smp_processor_id+0x9/0x20 [ 167.923333][ C0] schedule+0x181/0x210 [ 167.927759][ C0] schedule_preempt_disabled+0x13/0x20 [ 167.933225][ C0] mutex_optimistic_spin+0x445/0x480 [ 167.938521][ C0] __mutex_lock_common+0x2e7/0x2e10 [ 167.943736][ C0] ? rtnl_lock+0x17/0x20 [ 167.948092][ C0] ? process_one_work+0x75d/0x10d0 [ 167.953200][ C0] mutex_lock_nested+0x1b/0x30 [ 167.957953][ C0] rtnl_lock+0x17/0x20 [ 167.962027][ C0] addrconf_dad_work+0x69/0x1c30 [ 167.967135][ C0] ? rcu_read_lock_sched_held+0x10b/0x170 [ 167.972862][ C0] process_one_work+0x7ef/0x10d0 [ 167.977807][ C0] worker_thread+0xc01/0x1630 [ 167.982499][ C0] kthread+0x332/0x350 [ 167.986555][ C0] ? rcu_lock_release+0x30/0x30 [ 167.991554][ C0] ? kthread_blkcg+0xe0/0xe0 [ 167.996146][ C0] ret_from_fork+0x24/0x30