[ 40.413172][ T25] audit: type=1800 audit(1575386242.432:27): pid=7889 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [ 40.434617][ T25] audit: type=1800 audit(1575386242.432:28): pid=7889 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 41.131748][ T25] audit: type=1800 audit(1575386243.202:29): pid=7889 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 41.151046][ T25] audit: type=1800 audit(1575386243.202:30): pid=7889 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.197' (ECDSA) to the list of known hosts. 2019/12/03 15:17:34 fuzzer started 2019/12/03 15:17:35 dialing manager at 10.128.0.26:45711 2019/12/03 15:17:35 syscalls: 2689 2019/12/03 15:17:35 code coverage: enabled 2019/12/03 15:17:35 comparison tracing: enabled 2019/12/03 15:17:35 extra coverage: extra coverage is not supported by the kernel 2019/12/03 15:17:35 setuid sandbox: enabled 2019/12/03 15:17:35 namespace sandbox: enabled 2019/12/03 15:17:35 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/03 15:17:35 fault injection: enabled 2019/12/03 15:17:35 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/03 15:17:35 net packet injection: enabled 2019/12/03 15:17:35 net device setup: enabled 2019/12/03 15:17:35 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/12/03 15:17:35 devlink PCI setup: PCI device 0000:00:10.0 is not available 15:17:36 executing program 0: r0 = socket$inet(0x2, 0x803, 0x85) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000000c0)={r2, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000001300)={r2, 0x3, 0x6, @dev}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) dup3(r0, r1, 0x0) 15:17:36 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8}, 0x37a) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=@bridge_getlink={0x24, 0x12, 0x221, 0x0, 0x0, {}, [@IFLA_PHYS_SWITCH_ID={0x4}]}, 0x24}}, 0x0) syzkaller login: [ 54.850629][ T8052] IPVS: ftp: loaded support on port[0] = 21 15:17:37 executing program 2: creat(&(0x7f0000000300)='./file0\x00', 0x0) setxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='security.capability\x00', &(0x7f00000001c0)=@v3, 0x18, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) [ 55.012016][ T8052] chnl_net:caif_netlink_parms(): no params data found [ 55.039695][ T8055] IPVS: ftp: loaded support on port[0] = 21 [ 55.094171][ T8052] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.101767][ T8052] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.109726][ T8052] device bridge_slave_0 entered promiscuous mode [ 55.119921][ T8052] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.127985][ T8052] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.135862][ T8052] device bridge_slave_1 entered promiscuous mode [ 55.160041][ T8052] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.173311][ T8052] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.197100][ T8052] team0: Port device team_slave_0 added [ 55.205385][ T8052] team0: Port device team_slave_1 added 15:17:37 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x31c) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendto$inet6(r0, &(0x7f0000000240)="ce0410000013f9ff00911efc0bb35c02630dffffa328b47ca8a88a37877b06345ed9cc0542607d85309662bd845011399e970800d8fcb3f6217eb878cd015763", 0x40, 0x0, 0x0, 0x0) [ 55.275351][ T8052] device hsr_slave_0 entered promiscuous mode [ 55.323839][ T8052] device hsr_slave_1 entered promiscuous mode [ 55.413757][ T8057] IPVS: ftp: loaded support on port[0] = 21 [ 55.448976][ T8055] chnl_net:caif_netlink_parms(): no params data found 15:17:37 executing program 4: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, '/\r+', 0x8, 0x0, 0x0, @local, @initdev={0xfe, 0x88, [], 0x0, 0x0}, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) [ 55.505141][ T8052] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 55.594070][ T8060] IPVS: ftp: loaded support on port[0] = 21 [ 55.605096][ T8052] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 55.665476][ T8052] netdevsim netdevsim0 netdevsim2: renamed from eth2 15:17:37 executing program 5: r0 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1a000}], 0x1}, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0)=0xf0000000, 0x4) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 55.716315][ T8052] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 55.788824][ T8055] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.796481][ T8055] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.806092][ T8055] device bridge_slave_0 entered promiscuous mode [ 55.814605][ T8055] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.821672][ T8055] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.832373][ T8055] device bridge_slave_1 entered promiscuous mode [ 55.904432][ T8055] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.919079][ T8062] IPVS: ftp: loaded support on port[0] = 21 [ 55.940022][ T8066] IPVS: ftp: loaded support on port[0] = 21 [ 55.949080][ T8055] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.966628][ T8052] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.973789][ T8052] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.981555][ T8052] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.988673][ T8052] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.997348][ T8057] chnl_net:caif_netlink_parms(): no params data found [ 56.026334][ T3067] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.035495][ T3067] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.062888][ T8055] team0: Port device team_slave_0 added [ 56.071415][ T8055] team0: Port device team_slave_1 added [ 56.155278][ T8055] device hsr_slave_0 entered promiscuous mode [ 56.193015][ T8055] device hsr_slave_1 entered promiscuous mode [ 56.252659][ T8055] debugfs: Directory 'hsr0' with parent '/' already present! [ 56.271461][ T8057] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.278670][ T8057] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.287001][ T8057] device bridge_slave_0 entered promiscuous mode [ 56.296130][ T8057] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.303234][ T8057] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.310940][ T8057] device bridge_slave_1 entered promiscuous mode [ 56.331500][ T8060] chnl_net:caif_netlink_parms(): no params data found [ 56.371780][ T8057] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.413325][ T8057] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.423949][ T8055] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 56.486043][ T8055] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 56.547211][ T8055] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 56.597783][ T8055] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 56.675672][ T8060] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.683560][ T8060] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.691219][ T8060] device bridge_slave_0 entered promiscuous mode [ 56.706448][ T8057] team0: Port device team_slave_0 added [ 56.740169][ T8060] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.749950][ T8060] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.757933][ T8060] device bridge_slave_1 entered promiscuous mode [ 56.766395][ T8057] team0: Port device team_slave_1 added [ 56.845205][ T8057] device hsr_slave_0 entered promiscuous mode [ 56.912791][ T8057] device hsr_slave_1 entered promiscuous mode [ 56.962708][ T8057] debugfs: Directory 'hsr0' with parent '/' already present! [ 57.001382][ T8062] chnl_net:caif_netlink_parms(): no params data found [ 57.049074][ T8052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.062045][ T8066] chnl_net:caif_netlink_parms(): no params data found [ 57.089523][ T8060] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.135874][ T8060] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.149420][ T8057] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 57.198760][ T8066] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.207017][ T8066] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.214974][ T8066] device bridge_slave_0 entered promiscuous mode [ 57.222002][ T8062] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.229414][ T8062] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.237580][ T8062] device bridge_slave_0 entered promiscuous mode [ 57.249520][ T8062] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.256745][ T8062] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.264605][ T8062] device bridge_slave_1 entered promiscuous mode [ 57.277162][ T8055] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.285946][ T8057] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 57.354772][ T8066] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.361863][ T8066] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.370128][ T8066] device bridge_slave_1 entered promiscuous mode [ 57.404841][ T8066] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.415586][ T8057] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 57.456398][ T8060] team0: Port device team_slave_0 added [ 57.462175][ T8057] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 57.505714][ T8062] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.516625][ T8066] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.528532][ T3862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.537446][ T3862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.548147][ T8060] team0: Port device team_slave_1 added [ 57.561675][ T8055] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.570794][ T8062] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.587797][ T8052] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.598494][ T3831] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.606624][ T3831] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.685438][ T8060] device hsr_slave_0 entered promiscuous mode [ 57.722892][ T8060] device hsr_slave_1 entered promiscuous mode [ 57.762620][ T8060] debugfs: Directory 'hsr0' with parent '/' already present! [ 57.783363][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.792360][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.804366][ T3067] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.811542][ T3067] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.831276][ T8066] team0: Port device team_slave_0 added [ 57.841780][ T8066] team0: Port device team_slave_1 added [ 57.851919][ T3831] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.860703][ T3831] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.869322][ T3831] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.876394][ T3831] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.884990][ T3831] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.895344][ T8062] team0: Port device team_slave_0 added [ 57.903617][ T8062] team0: Port device team_slave_1 added [ 57.964659][ T8066] device hsr_slave_0 entered promiscuous mode [ 58.013677][ T8066] device hsr_slave_1 entered promiscuous mode [ 58.072659][ T8066] debugfs: Directory 'hsr0' with parent '/' already present! [ 58.086229][ T3862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.095146][ T3862] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.104023][ T3862] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.111225][ T3862] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.119190][ T3862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.128077][ T3862] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.136517][ T3862] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.143577][ T3862] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.151011][ T3862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.235413][ T8062] device hsr_slave_0 entered promiscuous mode [ 58.273297][ T8062] device hsr_slave_1 entered promiscuous mode [ 58.312715][ T8062] debugfs: Directory 'hsr0' with parent '/' already present! [ 58.320304][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.328991][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.351545][ T8066] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 58.384366][ T8066] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 58.426162][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.434904][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.443707][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.452188][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.460714][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.469345][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.477751][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.486176][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.495092][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.517404][ T8060] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 58.572065][ T8060] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 58.624044][ T8066] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 58.671965][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.680349][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.689083][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.697972][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.706265][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.714862][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.723931][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.732106][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.741341][ T8055] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.757285][ T8060] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 58.794689][ T8060] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 58.834259][ T8066] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 58.874897][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.883658][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.903256][ T8052] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.910850][ T8062] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 58.982194][ T8057] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.004142][ T8062] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 59.036313][ T8062] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 59.089134][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.099774][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.107857][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.115952][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.126796][ T8057] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.139788][ T3862] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.147729][ T3862] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.156220][ T8062] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 59.207748][ T8055] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.246450][ T8052] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.272390][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.282134][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.290779][ T3067] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.297871][ T3067] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.306416][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.315129][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.324556][ T3067] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.331594][ T3067] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.339199][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.369999][ T8066] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.383963][ T8064] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.409787][ T8066] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.444151][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.456598][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.202672][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 61.208671][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 164.472413][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 164.479370][ C0] rcu: 0-...!: (10499 ticks this GP) idle=d1a/1/0x4000000000000002 softirq=10381/10381 fqs=42 [ 164.489956][ C0] (t=10501 jiffies g=6173 q=114) [ 164.495114][ C0] rcu: rcu_preempt kthread starved for 10418 jiffies! g6173 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 164.507421][ C0] rcu: RCU grace-period kthread stack dump: [ 164.513305][ C0] rcu_preempt R running task 29032 10 2 0x80004000 [ 164.521202][ C0] Call Trace: [ 164.524584][ C0] __schedule+0x9a0/0xcc0 [ 164.528920][ C0] schedule+0x181/0x210 [ 164.533075][ C0] schedule_timeout+0x14f/0x240 [ 164.537925][ C0] ? run_local_timers+0x120/0x120 [ 164.543019][ C0] rcu_gp_kthread+0xed8/0x1770 [ 164.547792][ C0] kthread+0x332/0x350 [ 164.551853][ C0] ? rcu_report_qs_rsp+0x140/0x140 [ 164.556966][ C0] ? kthread_blkcg+0xe0/0xe0 [ 164.561773][ C0] ret_from_fork+0x24/0x30 [ 164.566215][ C0] NMI backtrace for cpu 0 [ 164.570803][ C0] CPU: 0 PID: 8074 Comm: udevd Not tainted 5.4.0-syzkaller #0 [ 164.578261][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 164.588353][ C0] Call Trace: [ 164.591670][ C0] [ 164.594613][ C0] dump_stack+0x1fb/0x318 [ 164.598947][ C0] nmi_cpu_backtrace+0xaf/0x1a0 [ 164.603797][ C0] ? nmi_trigger_cpumask_backtrace+0x16d/0x290 [ 164.609950][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 164.616107][ C0] nmi_trigger_cpumask_backtrace+0x174/0x290 [ 164.622099][ C0] arch_trigger_cpumask_backtrace+0x10/0x20 [ 164.627987][ C0] rcu_dump_cpu_stacks+0x15a/0x220 [ 164.633097][ C0] rcu_sched_clock_irq+0xe25/0x1ad0 [ 164.638299][ C0] ? trace_hardirqs_off+0x74/0x80 [ 164.643410][ C0] update_process_times+0x12d/0x180 [ 164.648733][ C0] tick_sched_timer+0x263/0x420 [ 164.653579][ C0] ? tick_setup_sched_timer+0x3d0/0x3d0 [ 164.659150][ C0] __hrtimer_run_queues+0x403/0x840 [ 164.664459][ C0] hrtimer_interrupt+0x38c/0xda0 [ 164.669434][ C0] ? debug_smp_processor_id+0x9/0x20 [ 164.674753][ C0] smp_apic_timer_interrupt+0x109/0x280 [ 164.680301][ C0] apic_timer_interrupt+0xf/0x20 [ 164.685233][ C0] [ 164.688178][ C0] RIP: 0010:free_thread_stack+0x124/0x590 [ 164.693892][ C0] Code: ff 48 c1 e8 06 48 83 e0 c0 48 bf 00 00 00 00 00 ea ff ff 48 01 c7 be 03 00 00 00 e8 06 a2 60 00 e9 5d 04 00 00 e8 5c 2d 2e 00 <48> 89 df 31 f6 e8 42 af 6e 00 43 80 3c 2e 00 74 08 4c 89 e7 e8 43 [ 164.713495][ C0] RSP: 0018:ffffc900024876c8 EFLAGS: 00000293 ORIG_RAX: ffffffffffffff13 [ 164.721902][ C0] RAX: ffffffff81486ea4 RBX: ffffea000230c0c0 RCX: ffff88809455c600 [ 164.729875][ C0] RDX: 0000000000000000 RSI: 00000000fffffffc RDI: ffffea000230c0c0 [ 164.737848][ C0] RBP: ffffc90002487700 R08: 000000000003a768 R09: ffffed10150ba6c7 [ 164.745818][ C0] R10: ffffed10150ba6c7 R11: 0000000000000000 R12: ffff88808d26f0a0 [ 164.753784][ C0] R13: dffffc0000000000 R14: 1ffff11011a4de14 R15: ffff8880a85d3628 [ 164.761767][ C0] ? free_thread_stack+0x124/0x590 [ 164.766879][ C0] ? free_thread_stack+0x124/0x590 [ 164.772074][ C0] put_task_stack+0xa3/0x130 [ 164.776665][ C0] finish_task_switch+0x3f1/0x550 [ 164.781689][ C0] __schedule+0x9a8/0xcc0 [ 164.786024][ C0] preempt_schedule_irq+0xc1/0x140 [ 164.791203][ C0] retint_kernel+0x1b/0x2b [ 164.795621][ C0] RIP: 0010:kmem_cache_free+0xc8/0xf0 [ 164.801009][ C0] Code: 58 07 00 74 42 4c 89 f7 57 9d 0f 1f 44 00 00 e8 0e 98 ca ff eb 19 e8 a7 95 ca ff 48 83 3d 07 f7 58 07 00 74 24 4c 89 f7 57 9d <0f> 1f 44 00 00 4c 89 e7 4c 89 fe e8 58 01 00 00 5b 41 5c 41 5e 41 [ 164.820809][ C0] RSP: 0018:ffffc90002487910 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13 [ 164.829304][ C0] RAX: ffff88809455ce94 RBX: ffff88821bc46700 RCX: ffffffff815c0597 [ 164.837273][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000286 [ 164.845242][ C0] RBP: ffffc90002487930 R08: ffff88809455ce58 R09: fffffbfff13c8d20 [ 164.853209][ C0] R10: fffffbfff13c8d20 R11: 0000000000000000 R12: ffffffff81a70bdc [ 164.861196][ C0] R13: ffff8880a96e58f8 R14: 0000000000000286 R15: ffff8880953ee310 [ 164.869260][ C0] ? unlink_anon_vmas+0x61c/0x690 [ 164.874476][ C0] ? mark_lock+0x107/0x1650 [ 164.878987][ C0] unlink_anon_vmas+0x61c/0x690 [ 164.883837][ C0] free_pgtables+0x1ae/0x300 [ 164.888426][ C0] exit_mmap+0x28a/0x530 [ 164.892664][ C0] ? exit_aio+0x25e/0x370 [ 164.897010][ C0] __mmput+0x120/0x3a0 [ 164.901170][ C0] mmput+0x5d/0x70 [ 164.904888][ C0] flush_old_exec+0x551/0x6d0 [ 164.909579][ C0] load_elf_binary+0x652/0x3670 [ 164.914434][ C0] ? load_elf_binary+0x761/0x3670 [ 164.919461][ C0] ? search_binary_handler+0x16b/0x660 [ 164.924936][ C0] ? do_raw_read_unlock+0x42/0xf0 [ 164.929964][ C0] search_binary_handler+0x1a5/0x660 [ 164.935262][ C0] __do_execve_file+0x1573/0x1cd0 [ 164.940297][ C0] __x64_sys_execve+0x94/0xb0 [ 164.944979][ C0] do_syscall_64+0xf7/0x1c0 [ 164.949480][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 164.955367][ C0] RIP: 0033:0x7ff6e26c2207 [ 164.959793][ C0] Code: Bad RIP value. [ 164.963853][ C0] RSP: 002b:00007ffcfa131c18 EFLAGS: 00000206 ORIG_RAX: 000000000000003b [ 164.972256][ C0] RAX: ffffffffffffffda RBX: 00000000ffffffff RCX: 00007ff6e26c2207 [ 164.980315][ C0] RDX: 00000000024df280 RSI: 00007ffcfa131d10 RDI: 00007ffcfa132d20 [ 164.988399][ C0] RBP: 0000000000625500 R08: 0000000000001e1d R09: 0000000000001e1d [ 164.996369][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 00000000024df280 [ 165.004486][ C0] R13: 0000000000000007 R14: 00000000024c6250 R15: 0000000000000005