[ 42.174651][ T25] audit: type=1800 audit(1575344538.514:27): pid=7947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [ 42.205507][ T25] audit: type=1800 audit(1575344538.544:28): pid=7947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 42.925844][ T25] audit: type=1800 audit(1575344539.344:29): pid=7947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 42.945019][ T25] audit: type=1800 audit(1575344539.344:30): pid=7947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.85' (ECDSA) to the list of known hosts. 2019/12/03 03:42:27 fuzzer started 2019/12/03 03:42:29 dialing manager at 10.128.0.26:38907 2019/12/03 03:42:29 syscalls: 2697 2019/12/03 03:42:29 code coverage: enabled 2019/12/03 03:42:29 comparison tracing: enabled 2019/12/03 03:42:29 extra coverage: extra coverage is not supported by the kernel 2019/12/03 03:42:29 setuid sandbox: enabled 2019/12/03 03:42:29 namespace sandbox: enabled 2019/12/03 03:42:29 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/03 03:42:29 fault injection: enabled 2019/12/03 03:42:29 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/03 03:42:29 net packet injection: enabled 2019/12/03 03:42:29 net device setup: enabled 2019/12/03 03:42:29 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/12/03 03:42:29 devlink PCI setup: PCI device 0000:00:10.0 is not available 03:42:30 executing program 0: socket$inet6(0xa, 0x80003, 0xff) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x100800000000002, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = socket$inet(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x4, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x18, 0x0, 0x0) getpeername$inet6(r2, 0x0, &(0x7f0000000880)) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='children\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r4, r3, 0x0, 0x7) setsockopt(r4, 0x0, 0x101, &(0x7f0000000100)="51190e8a859fdbbcb6a77d1fa762596f7cd34fc05f65c32696b05057fd04286fede5bd", 0x23) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890b, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x82000) perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x8) syz_open_procfs(0x0, 0x0) r5 = socket$packet(0x11, 0x20000000000003, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'lo\x00\x00\x00\x00\x02\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000100)={r6, 0x1, 0x6, @remote}, 0x10) r7 = socket(0x100000000011, 0x2, 0x0) bind(r7, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) setsockopt$packet_drop_memb(r5, 0x107, 0x2, &(0x7f0000000000)={0x0, 0x1, 0x6, @remote}, 0x10) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='children\x00') socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r9, r8, 0x0, 0x7) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r10, 0xc004743e, &(0x7f0000000180)=""/246) 03:42:30 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0x1, 0x4, 0x4, 0x234, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x5f, 0x2e, 0x80ffff, 0x80ffff, 0x2e, 0x2e], 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x3c) syzkaller login: [ 54.052732][ T8113] IPVS: ftp: loaded support on port[0] = 21 03:42:30 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x1, 0x9}, 0x3c) r2 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x4, 0x4, 0x1, 0x0, r1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r2, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) [ 54.218312][ T8113] chnl_net:caif_netlink_parms(): no params data found [ 54.295998][ T8116] IPVS: ftp: loaded support on port[0] = 21 [ 54.343433][ T8113] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.351447][ T8113] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.359362][ T8113] device bridge_slave_0 entered promiscuous mode [ 54.374938][ T8113] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.382701][ T8113] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.390558][ T8113] device bridge_slave_1 entered promiscuous mode [ 54.412792][ T8118] IPVS: ftp: loaded support on port[0] = 21 [ 54.438351][ T8113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.452272][ T8113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.519183][ T8113] team0: Port device team_slave_0 added [ 54.529417][ T8113] team0: Port device team_slave_1 added 03:42:31 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x12, 0x0, &(0x7f0000000000)=0x1a9) [ 54.604323][ T8113] device hsr_slave_0 entered promiscuous mode [ 54.681935][ T8113] device hsr_slave_1 entered promiscuous mode [ 54.759280][ T8121] IPVS: ftp: loaded support on port[0] = 21 [ 54.766673][ T8116] chnl_net:caif_netlink_parms(): no params data found 03:42:31 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x201, 0x0) ioctl$int_in(r0, 0xc000088010500c, &(0x7f0000000000)) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) [ 54.877174][ T8113] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.936723][ T8113] netdevsim netdevsim0 netdevsim1: renamed from eth1 03:42:31 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={'syz_tun\x00', {0x2, 0x0, @multicast1}}) [ 54.994397][ T8113] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 55.034019][ T8113] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 55.095963][ T8118] chnl_net:caif_netlink_parms(): no params data found [ 55.127973][ T8124] IPVS: ftp: loaded support on port[0] = 21 [ 55.134219][ T8116] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.142396][ T8116] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.150196][ T8116] device bridge_slave_0 entered promiscuous mode [ 55.160161][ T8116] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.167587][ T8116] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.175345][ T8116] device bridge_slave_1 entered promiscuous mode [ 55.192188][ T8113] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.199299][ T8113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.207023][ T8113] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.214115][ T8113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.244430][ T8126] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.253259][ T8126] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.269423][ T8127] IPVS: ftp: loaded support on port[0] = 21 [ 55.275595][ T8116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.302802][ T8116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.332694][ T8118] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.339837][ T8118] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.348083][ T8118] device bridge_slave_0 entered promiscuous mode [ 55.365665][ T8116] team0: Port device team_slave_0 added [ 55.401291][ T8118] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.408423][ T8118] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.417329][ T8118] device bridge_slave_1 entered promiscuous mode [ 55.435843][ T8116] team0: Port device team_slave_1 added [ 55.465793][ T8118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.533056][ T8116] device hsr_slave_0 entered promiscuous mode [ 55.571007][ T8116] device hsr_slave_1 entered promiscuous mode [ 55.631070][ T8116] debugfs: Directory 'hsr0' with parent '/' already present! [ 55.645251][ T8121] chnl_net:caif_netlink_parms(): no params data found [ 55.659432][ T8118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.739606][ T8118] team0: Port device team_slave_0 added [ 55.758405][ T8121] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.765676][ T8121] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.773515][ T8121] device bridge_slave_0 entered promiscuous mode [ 55.788012][ T8121] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.797000][ T8121] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.804887][ T8121] device bridge_slave_1 entered promiscuous mode [ 55.812805][ T8118] team0: Port device team_slave_1 added [ 55.836356][ T8121] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.852472][ T8113] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.862438][ T8116] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 55.913262][ T8121] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.946282][ T8124] chnl_net:caif_netlink_parms(): no params data found [ 55.954325][ T8116] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 56.003177][ T8116] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 56.047101][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.055279][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.093939][ T8118] device hsr_slave_0 entered promiscuous mode [ 56.151041][ T8118] device hsr_slave_1 entered promiscuous mode [ 56.190809][ T8118] debugfs: Directory 'hsr0' with parent '/' already present! [ 56.200038][ T8113] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.208461][ T8121] team0: Port device team_slave_0 added [ 56.218727][ T8121] team0: Port device team_slave_1 added [ 56.227384][ T8116] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 56.324590][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.333250][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.342006][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.349169][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.366798][ T8127] chnl_net:caif_netlink_parms(): no params data found [ 56.434045][ T8121] device hsr_slave_0 entered promiscuous mode [ 56.482128][ T8121] device hsr_slave_1 entered promiscuous mode [ 56.540852][ T8121] debugfs: Directory 'hsr0' with parent '/' already present! [ 56.567203][ T8130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.576032][ T8130] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.584701][ T8130] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.591796][ T8130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.631815][ T8118] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 56.682681][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.693307][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.702111][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.710894][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.719192][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.737300][ T8127] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.745308][ T8127] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.758259][ T8127] device bridge_slave_0 entered promiscuous mode [ 56.768342][ T8127] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.775503][ T8127] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.783411][ T8127] device bridge_slave_1 entered promiscuous mode [ 56.806310][ T8127] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.816757][ T8118] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 56.882827][ T8118] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 56.942801][ T8118] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 56.989670][ T8124] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.997666][ T8124] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.005571][ T8124] device bridge_slave_0 entered promiscuous mode [ 57.013042][ T8130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.022219][ T8130] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.030508][ T8130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.039051][ T8130] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.048193][ T8130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.056616][ T8130] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.065834][ T8127] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.082642][ T8113] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.100483][ T8124] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.110844][ T8124] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.118540][ T8124] device bridge_slave_1 entered promiscuous mode [ 57.141454][ T8127] team0: Port device team_slave_0 added [ 57.150067][ T8121] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 57.182752][ T8121] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 57.270281][ T8124] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.281860][ T8127] team0: Port device team_slave_1 added [ 57.288466][ T8124] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.300129][ T8121] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 57.342964][ T8126] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.350437][ T8126] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.358796][ T8121] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 57.437192][ T8113] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.485014][ T8127] device hsr_slave_0 entered promiscuous mode [ 57.551055][ T8127] device hsr_slave_1 entered promiscuous mode [ 57.590702][ T8127] debugfs: Directory 'hsr0' with parent '/' already present! [ 57.612814][ T8124] team0: Port device team_slave_0 added [ 57.639632][ T8124] team0: Port device team_slave_1 added [ 57.724006][ T8124] device hsr_slave_0 entered promiscuous mode [ 57.801076][ T8124] device hsr_slave_1 entered promiscuous mode [ 57.860797][ T8124] debugfs: Directory 'hsr0' with parent '/' already present! [ 57.877273][ T8118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.884342][ T8127] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 57.932675][ T8127] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 58.007307][ T8118] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.057946][ T8118] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 58.068665][ T8118] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.128786][ T8124] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 59.550899][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 59.556865][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 61.630917][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 61.636722][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 63.710705][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 63.716487][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 65.790702][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 65.796480][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 67.870812][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 67.876591][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 69.950695][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 69.956552][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 72.030687][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 72.036492][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 74.110684][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 74.116480][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 76.191110][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 76.196916][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 78.270690][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 78.276483][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 80.350700][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 80.356916][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 82.430707][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 82.436497][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 84.510961][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 84.516745][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 86.590717][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 86.596504][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 88.670695][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 88.676496][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 90.750703][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 90.756513][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 92.830705][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 92.836591][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 94.910696][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 94.916487][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 96.990705][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 96.996507][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 99.070700][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 99.076487][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 101.150705][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 101.156502][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 103.230717][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 103.236509][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 105.310702][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 105.316497][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 107.390688][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 107.396498][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 109.470818][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 109.477550][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 111.550725][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 111.556523][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 113.630686][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 113.636485][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 115.710679][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 115.716472][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 162.970594][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 162.977356][ C0] rcu: 0-....: (10499 ticks this GP) idle=72e/1/0x4000000000000002 softirq=10514/10514 fqs=2804 [ 162.988089][ C0] (t=10501 jiffies g=5885 q=470) [ 162.993100][ C0] rcu: rcu_preempt kthread starved for 4893 jiffies! g5885 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 163.004180][ C0] rcu: RCU grace-period kthread stack dump: [ 163.010052][ C0] rcu_preempt R running task 28792 10 2 0x80004000 [ 163.017947][ C0] Call Trace: [ 163.021230][ C0] __schedule+0x9a0/0xcc0 [ 163.025551][ C0] schedule+0x181/0x210 [ 163.029691][ C0] schedule_timeout+0x14f/0x240 [ 163.034544][ C0] ? run_local_timers+0x120/0x120 [ 163.039558][ C0] rcu_gp_kthread+0xed8/0x1770 [ 163.044338][ C0] kthread+0x332/0x350 [ 163.048397][ C0] ? rcu_report_qs_rsp+0x140/0x140 [ 163.053524][ C0] ? kthread_blkcg+0xe0/0xe0 [ 163.058119][ C0] ret_from_fork+0x24/0x30 [ 163.062547][ C0] NMI backtrace for cpu 0 [ 163.066880][ C0] CPU: 0 PID: 258 Comm: kworker/u4:4 Not tainted 5.4.0-syzkaller #0 [ 163.075044][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 163.085132][ C0] Workqueue: 0x0 (bond0) [ 163.090332][ C0] Call Trace: [ 163.094317][ C0] [ 163.097186][ C0] dump_stack+0x1fb/0x318 [ 163.101515][ C0] nmi_cpu_backtrace+0xaf/0x1a0 [ 163.106383][ C0] ? nmi_trigger_cpumask_backtrace+0x16d/0x290 [ 163.112551][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 163.118623][ C0] nmi_trigger_cpumask_backtrace+0x174/0x290 [ 163.124622][ C0] arch_trigger_cpumask_backtrace+0x10/0x20 [ 163.130528][ C0] rcu_dump_cpu_stacks+0x15a/0x220 [ 163.135666][ C0] rcu_sched_clock_irq+0xe25/0x1ad0 [ 163.140865][ C0] ? trace_hardirqs_off+0x74/0x80 [ 163.145904][ C0] update_process_times+0x12d/0x180 [ 163.151099][ C0] tick_sched_timer+0x263/0x420 [ 163.155961][ C0] ? tick_setup_sched_timer+0x3d0/0x3d0 [ 163.162636][ C0] __hrtimer_run_queues+0x403/0x840 [ 163.167862][ C0] hrtimer_interrupt+0x38c/0xda0 [ 163.172818][ C0] ? debug_smp_processor_id+0x9/0x20 [ 163.179155][ C0] smp_apic_timer_interrupt+0x109/0x280 [ 163.184708][ C0] apic_timer_interrupt+0xf/0x20 [ 163.189636][ C0] [ 163.192579][ C0] RIP: 0010:mod_memcg_page_state+0x161/0x190 [ 163.198563][ C0] Code: 3c 20 00 74 0c 48 c7 c7 28 96 0a 89 e8 a8 9e 69 00 48 83 3d c8 21 c2 07 00 74 2d e8 99 27 2e 00 4c 89 ff 57 9d 0f 1f 44 00 00 <5b> 41 5c 41 5e 41 5f 5d c3 e8 81 27 2e 00 0f 0b e8 7a 27 2e 00 0f [ 163.218178][ C0] RSP: 0018:ffffc90001bb7c00 EFLAGS: 00000293 ORIG_RAX: ffffffffffffff13 [ 163.226602][ C0] RAX: ffffffff81487433 RBX: 0000000000000000 RCX: ffff8880a93f4480 [ 163.234658][ C0] RDX: 0000000000000000 RSI: 00000000fffffffc RDI: ffffea0002922dc0 [ 163.242719][ C0] RBP: ffffc90001bb7c20 R08: 000000000003a768 R09: ffffed1015195f07 [ 163.250683][ C0] R10: ffffed1015195f07 R11: 0000000000000000 R12: dffffc0000000000 [ 163.258660][ C0] R13: dffffc0000000000 R14: 00000000fffffffc R15: ffff8880a8caf828 [ 163.266649][ C0] ? mod_memcg_page_state+0x123/0x190 [ 163.272016][ C0] free_thread_stack+0x168/0x590 [ 163.276944][ C0] put_task_stack+0xa3/0x130 [ 163.281521][ C0] finish_task_switch+0x3f1/0x550 [ 163.286533][ C0] __schedule+0x9a8/0xcc0 [ 163.290856][ C0] schedule+0x181/0x210 [ 163.296301][ C0] worker_thread+0x10d6/0x1630 [ 163.301070][ C0] kthread+0x332/0x350 [ 163.305121][ C0] ? rcu_lock_release+0x30/0x30 [ 163.309954][ C0] ? kthread_blkcg+0xe0/0xe0 [ 163.314533][ C0] ret_from_fork+0x24/0x30