[ 40.307952][ T23] audit: type=1800 audit(1575406731.290:27): pid=7879 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [ 40.353358][ T23] audit: type=1800 audit(1575406731.290:28): pid=7879 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 40.836941][ T23] audit: type=1800 audit(1575406731.890:29): pid=7879 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 40.859046][ T23] audit: type=1800 audit(1575406731.890:30): pid=7879 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.231' (ECDSA) to the list of known hosts. 2019/12/03 20:58:59 fuzzer started 2019/12/03 20:58:59 dialing manager at 10.128.0.26:42111 syzkaller login: [ 48.825422][ T8040] ld (8040) used greatest stack depth: 23248 bytes left 2019/12/03 20:58:59 syscalls: 2689 2019/12/03 20:58:59 code coverage: enabled 2019/12/03 20:58:59 comparison tracing: enabled 2019/12/03 20:58:59 extra coverage: extra coverage is not supported by the kernel 2019/12/03 20:58:59 setuid sandbox: enabled 2019/12/03 20:58:59 namespace sandbox: enabled 2019/12/03 20:58:59 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/03 20:58:59 fault injection: enabled 2019/12/03 20:58:59 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/03 20:58:59 net packet injection: enabled 2019/12/03 20:58:59 net device setup: enabled 2019/12/03 20:58:59 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/12/03 20:58:59 devlink PCI setup: PCI device 0000:00:10.0 is not available 20:59:00 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r2, &(0x7f0000000140), 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, [@sadb_key={0xf, 0x0, 0x368, 0x0, "f7b9f08fbe39f0d0edba45b2b517844a2b69782f77ce552f162bd729b16ea622be3f696ac538668a9ba046d373256636240b59a797f079366a698028558325ce97698b841dd0bdee24b3e775705c7662f125ebf55785ca6f786fa02dd5099708a9ff77e8a7e6c036f5f8db6b1c"}]}, 0x88}}, 0x0) setsockopt(r2, 0x65, 0x1, &(0x7f0000000080), 0x1d0) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) 20:59:01 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000480)=0x2) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1000000000000e) ioctl$TCFLSH(r1, 0x540b, 0x0) [ 50.080500][ T8044] IPVS: ftp: loaded support on port[0] = 21 20:59:01 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) shutdown(r0, 0x0) [ 50.257084][ T8044] chnl_net:caif_netlink_parms(): no params data found [ 50.267887][ T8046] IPVS: ftp: loaded support on port[0] = 21 [ 50.385089][ T8044] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.403564][ T8044] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.422873][ T8044] device bridge_slave_0 entered promiscuous mode 20:59:01 executing program 3: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff}) tee(r2, r1, 0x100000000, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(0xffffffffffffffff, 0xc0845658, 0x0) [ 50.469978][ T8044] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.478028][ T8044] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.486984][ T8044] device bridge_slave_1 entered promiscuous mode [ 50.507584][ T8050] IPVS: ftp: loaded support on port[0] = 21 [ 50.564708][ T8044] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.582427][ T8046] chnl_net:caif_netlink_parms(): no params data found [ 50.613763][ T8044] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.656628][ T8052] IPVS: ftp: loaded support on port[0] = 21 [ 50.709176][ T8044] team0: Port device team_slave_0 added [ 50.726388][ T8044] team0: Port device team_slave_1 added [ 50.733830][ T8046] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.740994][ T8046] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.750466][ T8046] device bridge_slave_0 entered promiscuous mode 20:59:01 executing program 4: unshare(0x2040400) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x4004556a, &(0x7f0000000000)) [ 50.793173][ T8046] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.800259][ T8046] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.822617][ T8046] device bridge_slave_1 entered promiscuous mode [ 50.884372][ T8044] device hsr_slave_0 entered promiscuous mode [ 50.922861][ T8044] device hsr_slave_1 entered promiscuous mode [ 51.005776][ T8046] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.020502][ T8050] chnl_net:caif_netlink_parms(): no params data found 20:59:02 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x0, 0x0) dup2(r2, r3) [ 51.056964][ T8046] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.128873][ T8055] IPVS: ftp: loaded support on port[0] = 21 [ 51.185809][ T8046] team0: Port device team_slave_0 added [ 51.214254][ T8050] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.221365][ T8050] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.229014][ T8050] device bridge_slave_0 entered promiscuous mode [ 51.243264][ T8046] team0: Port device team_slave_1 added [ 51.257533][ T8050] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.266433][ T8050] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.274447][ T8050] device bridge_slave_1 entered promiscuous mode [ 51.300922][ T8052] chnl_net:caif_netlink_parms(): no params data found [ 51.316853][ T8050] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.327184][ T8044] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 51.403801][ T8058] IPVS: ftp: loaded support on port[0] = 21 [ 51.454319][ T8046] device hsr_slave_0 entered promiscuous mode [ 51.493692][ T8046] device hsr_slave_1 entered promiscuous mode [ 51.531927][ T8046] debugfs: Directory 'hsr0' with parent '/' already present! [ 51.540642][ T8050] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.564872][ T8044] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 51.616308][ T8044] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 51.666580][ T8044] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 51.725487][ T8050] team0: Port device team_slave_0 added [ 51.751084][ T8050] team0: Port device team_slave_1 added [ 51.833366][ T8050] device hsr_slave_0 entered promiscuous mode [ 51.891934][ T8050] device hsr_slave_1 entered promiscuous mode [ 51.941718][ T8050] debugfs: Directory 'hsr0' with parent '/' already present! [ 51.957260][ T8052] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.966357][ T8052] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.974187][ T8052] device bridge_slave_0 entered promiscuous mode [ 51.987091][ T8046] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 52.045807][ T8046] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 52.103804][ T8046] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 52.145423][ T8046] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 52.204582][ T8052] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.212787][ T8052] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.220322][ T8052] device bridge_slave_1 entered promiscuous mode [ 52.240598][ T8052] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.287247][ T8052] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.322505][ T8050] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 52.374619][ T8050] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 52.414462][ T8050] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 52.473790][ T8050] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 52.517735][ T8052] team0: Port device team_slave_0 added [ 52.525210][ T8052] team0: Port device team_slave_1 added [ 52.550127][ T8055] chnl_net:caif_netlink_parms(): no params data found [ 52.610641][ T8055] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.618846][ T8055] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.626672][ T8055] device bridge_slave_0 entered promiscuous mode [ 52.645416][ T8058] chnl_net:caif_netlink_parms(): no params data found [ 52.674502][ T8055] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.681761][ T8055] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.689499][ T8055] device bridge_slave_1 entered promiscuous mode [ 52.731779][ T8055] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.744628][ T8055] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.804019][ T8052] device hsr_slave_0 entered promiscuous mode [ 52.842250][ T8052] device hsr_slave_1 entered promiscuous mode [ 52.871773][ T8052] debugfs: Directory 'hsr0' with parent '/' already present! [ 52.914621][ T8058] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.922559][ T8058] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.930076][ T8058] device bridge_slave_0 entered promiscuous mode [ 52.938365][ T8058] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.946396][ T8058] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.954240][ T8058] device bridge_slave_1 entered promiscuous mode [ 52.967434][ T8055] team0: Port device team_slave_0 added [ 52.987080][ T8052] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 53.029410][ T8058] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.043078][ T8055] team0: Port device team_slave_1 added [ 53.050627][ T8058] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.066503][ T8046] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.075971][ T8052] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 53.118922][ T8044] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.139677][ T8046] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.147795][ T8052] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 53.198178][ T8052] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 53.259750][ T8059] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.267911][ T8059] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.295082][ T8044] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.312616][ T8058] team0: Port device team_slave_0 added [ 53.346507][ T8055] device hsr_slave_0 entered promiscuous mode [ 53.402080][ T8055] device hsr_slave_1 entered promiscuous mode [ 53.442774][ T8055] debugfs: Directory 'hsr0' with parent '/' already present! [ 53.459965][ T8050] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.470463][ T8059] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.479081][ T8059] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.495883][ T8059] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.503105][ T8059] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.512451][ T8059] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.520015][ T8059] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.530779][ T8059] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.542569][ T8059] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.553048][ T8059] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.560070][ T8059] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.584764][ T8046] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 53.595418][ T8046] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.607903][ T8058] team0: Port device team_slave_1 added [ 53.633635][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.641528][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.650825][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.660834][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.670193][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.678898][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.687433][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.695874][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.704759][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.713387][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.720422][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.728057][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.736722][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.745264][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.754157][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.762868][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.769897][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.777757][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.786656][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.833303][ T8058] device hsr_slave_0 entered promiscuous mode [ 53.872030][ T8058] device hsr_slave_1 entered promiscuous mode [ 53.921779][ T8058] debugfs: Directory 'hsr0' with parent '/' already present! [ 53.937772][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.946169][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.954149][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.961847][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.980801][ T2864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.994826][ T2864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.026841][ T8050] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.036651][ T8055] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 54.094014][ T8055] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 54.159584][ T8055] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 54.193190][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.200623][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.211051][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.220991][ T8046] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.228155][ T8058] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 54.263136][ T8058] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 54.324403][ T8058] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 54.373745][ T8052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.380817][ T8055] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 54.443203][ T8058] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 54.510144][ T8052] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.519646][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.528361][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.544946][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.555161][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.564707][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.573445][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.581744][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.588777][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.596364][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.605618][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.614090][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.622670][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.630832][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.639130][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.647311][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.656115][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.672711][ T2864] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.692570][ T2864] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.707581][ T2864] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.716973][ T2864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.726410][ T2864] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.798692][ T8058] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.820168][ T8058] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.862258][ T8058] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 54.879083][ T8058] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.911534][ T8058] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.691583][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 159.698481][ C0] rcu: 0-...!: (10499 ticks this GP) idle=252/1/0x4000000000000002 softirq=10894/10895 fqs=12 [ 159.709085][ C0] (t=10500 jiffies g=6013 q=626) [ 159.714104][ C0] rcu: rcu_preempt kthread starved for 10476 jiffies! g6013 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 159.725191][ C0] rcu: RCU grace-period kthread stack dump: [ 159.731073][ C0] rcu_preempt R running task 29032 10 2 0x80004000 [ 159.739054][ C0] Call Trace: [ 159.742340][ C0] __schedule+0x9a0/0xcc0 [ 159.746670][ C0] schedule+0x181/0x210 [ 159.750823][ C0] schedule_timeout+0x14f/0x240 [ 159.755665][ C0] ? run_local_timers+0x120/0x120 [ 159.760687][ C0] rcu_gp_kthread+0xed8/0x1770 [ 159.765456][ C0] kthread+0x332/0x350 [ 159.769514][ C0] ? rcu_report_qs_rsp+0x140/0x140 [ 159.774963][ C0] ? kthread_blkcg+0xe0/0xe0 [ 159.779837][ C0] ret_from_fork+0x24/0x30 [ 159.784258][ C0] NMI backtrace for cpu 0 [ 159.795355][ C0] CPU: 0 PID: 8046 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0 [ 159.803578][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 159.813799][ C0] Call Trace: [ 159.817446][ C0] [ 159.822314][ C0] dump_stack+0x1fb/0x318 [ 159.828116][ C0] nmi_cpu_backtrace+0xaf/0x1a0 [ 159.833006][ C0] ? nmi_trigger_cpumask_backtrace+0x16d/0x290 [ 159.839247][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 159.845397][ C0] nmi_trigger_cpumask_backtrace+0x174/0x290 [ 159.851369][ C0] arch_trigger_cpumask_backtrace+0x10/0x20 [ 159.857254][ C0] rcu_dump_cpu_stacks+0x15a/0x220 [ 159.862364][ C0] rcu_sched_clock_irq+0xe25/0x1ad0 [ 159.867557][ C0] ? trace_hardirqs_off+0x74/0x80 [ 159.872577][ C0] update_process_times+0x12d/0x180 [ 159.877773][ C0] tick_sched_timer+0x263/0x420 [ 159.882620][ C0] ? tick_setup_sched_timer+0x3d0/0x3d0 [ 159.888162][ C0] __hrtimer_run_queues+0x403/0x840 [ 159.893453][ C0] hrtimer_interrupt+0x38c/0xda0 [ 159.898398][ C0] ? debug_smp_processor_id+0x9/0x20 [ 159.903681][ C0] smp_apic_timer_interrupt+0x109/0x280 [ 159.909224][ C0] apic_timer_interrupt+0xf/0x20 [ 159.914149][ C0] [ 159.917086][ C0] RIP: 0010:__memcg_kmem_uncharge+0x219/0x2e0 [ 159.923146][ C0] Code: 4b 0d 89 e8 59 97 00 00 bf 01 00 00 00 e8 2f e3 9b ff 65 8b 05 d4 fd 4a 7e 85 c0 74 53 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f <5d> c3 49 8d 5f 10 48 89 df be 08 00 00 00 e8 04 c1 fa ff 48 8b 45 [ 159.942742][ C0] RSP: 0018:ffffc90002287598 EFLAGS: 00000292 ORIG_RAX: ffffffffffffff13 [ 159.951489][ C0] RAX: 0000000000000001 RBX: ffffea000234cf80 RCX: 0000000000000000 [ 159.959453][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffea000234cf80 [ 159.967418][ C0] RBP: ffffc90002287598 R08: 000000000003a768 R09: fffffbfff120248a [ 159.975386][ C0] R10: fffffbfff120248a R11: 0000000000000000 R12: ffff88808d92d320 [ 159.983352][ C0] R13: dffffc0000000000 R14: 1ffff11011b25a64 R15: ffff8880a802fa28 [ 159.991376][ C0] free_thread_stack+0x12e/0x590 [ 159.996313][ C0] put_task_stack+0xa3/0x130 [ 160.001244][ C0] finish_task_switch+0x3f1/0x550 [ 160.006265][ C0] __schedule+0x9a8/0xcc0 [ 160.010600][ C0] ? ___preempt_schedule+0x16/0x18 [ 160.015701][ C0] preempt_schedule+0xdb/0x120 [ 160.020457][ C0] ___preempt_schedule+0x16/0x18 [ 160.025390][ C0] _raw_spin_unlock+0x3a/0x40 [ 160.030062][ C0] do_anonymous_page+0x13e8/0x1610 [ 160.035176][ C0] handle_mm_fault+0x1bce/0x2890 [ 160.040156][ C0] do_user_addr_fault+0x589/0xaf0 [ 160.045177][ C0] __do_page_fault+0xd3/0x1f0 [ 160.049846][ C0] do_page_fault+0x99/0xb0 [ 160.054254][ C0] page_fault+0x39/0x40 [ 160.063352][ C0] RIP: 0010:copy_user_generic_unrolled+0x89/0xc0 [ 160.069668][ C0] Code: 38 4c 89 47 20 4c 89 4f 28 4c 89 57 30 4c 89 5f 38 48 8d 76 40 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 <4c> 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a [ 160.090873][ C0] RSP: 0018:ffffc90002287b68 EFLAGS: 00010202 [ 160.096930][ C0] RAX: ffffffff838d8901 RBX: 0000000000758078 RCX: 0000000000000007 [ 160.104894][ C0] RDX: 0000000000000000 RSI: ffff88807fa76000 RDI: 0000000000758040 [ 160.112868][ C0] RBP: ffffc90002287b98 R08: badc0ffeebadface R09: ffffed100ff4ec07 [ 160.121059][ C0] R10: ffffed100ff4ec07 R11: 0000000000000000 R12: 0000000000000038 [ 160.129030][ C0] R13: 00007ffffffff000 R14: ffff88807fa76000 R15: 0000000000758040 [ 160.137026][ C0] ? copyout+0x51/0x140 [ 160.141183][ C0] ? copyout+0xf3/0x140 [ 160.145334][ C0] copy_page_to_iter+0x3e7/0xce0 [ 160.150276][ C0] pipe_read+0x32a/0x9e0 [ 160.154527][ C0] __vfs_read+0x59e/0x730 [ 160.158910][ C0] vfs_read+0x1dd/0x420 [ 160.163068][ C0] ksys_read+0x117/0x220 [ 160.167307][ C0] __x64_sys_read+0x7b/0x90 [ 160.171804][ C0] do_syscall_64+0xf7/0x1c0 [ 160.176305][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 160.182187][ C0] RIP: 0033:0x414190 [ 160.186091][ C0] Code: 01 f0 ff ff 0f 83 90 1b 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 83 3d dd 42 66 00 00 75 14 b8 00 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 64 1b 00 00 c3 48 83 ec 08 e8 6a fc ff ff [ 160.206019][ C0] RSP: 002b:00007ffdc3681648 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 160.214610][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000414190 [ 160.222668][ C0] RDX: 0000000000000038 RSI: 0000000000758040 RDI: 00000000000000f9 [ 160.230776][ C0] RBP: 0000000000715460 R08: 0000000000006000 R09: 0000000000004000 [ 160.238763][ C0] R10: 00007ffdc3680fe0 R11: 0000000000000246 R12: 0000000000000000 [ 160.246746][ C0] R13: 00007ffdc3681680 R14: 0000000000000003 R15: 00007ffdc3681690