[ 43.153958][ T23] audit: type=1800 audit(1575410662.801:29): pid=7977 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.1.39' (ECDSA) to the list of known hosts. 2019/12/03 22:04:29 fuzzer started 2019/12/03 22:04:30 dialing manager at 10.128.0.26:42111 2019/12/03 22:04:30 syscalls: 2689 2019/12/03 22:04:30 code coverage: enabled 2019/12/03 22:04:30 comparison tracing: enabled 2019/12/03 22:04:30 extra coverage: extra coverage is not supported by the kernel 2019/12/03 22:04:30 setuid sandbox: enabled 2019/12/03 22:04:30 namespace sandbox: enabled 2019/12/03 22:04:30 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/03 22:04:30 fault injection: enabled 2019/12/03 22:04:30 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/03 22:04:30 net packet injection: enabled 2019/12/03 22:04:30 net device setup: enabled 2019/12/03 22:04:30 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/12/03 22:04:30 devlink PCI setup: PCI device 0000:00:10.0 is not available 22:04:31 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x8e0f) syz_open_dev$ndb(0x0, 0x0, 0x402) 22:04:32 executing program 1: socketpair$unix(0x1, 0x2000000000000002, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) ioctl$BLKIOOPT(r1, 0x1279, &(0x7f0000000000)) syzkaller login: [ 52.439416][ T8140] IPVS: ftp: loaded support on port[0] = 21 22:04:32 executing program 2: mknod(&(0x7f0000000300)='./bus\x00', 0x1001040, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0xb00, 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r1) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) [ 52.608956][ T8140] chnl_net:caif_netlink_parms(): no params data found [ 52.618532][ T8143] IPVS: ftp: loaded support on port[0] = 21 [ 52.739238][ T8145] IPVS: ftp: loaded support on port[0] = 21 [ 52.745772][ T8140] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.752862][ T8140] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.774627][ T8140] device bridge_slave_0 entered promiscuous mode [ 52.784866][ T8140] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.791936][ T8140] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.800951][ T8140] device bridge_slave_1 entered promiscuous mode [ 52.843466][ T8140] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.867374][ T8140] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.912859][ T8140] team0: Port device team_slave_0 added [ 52.920966][ T8140] team0: Port device team_slave_1 added 22:04:32 executing program 3: socket$unix(0x1, 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') ioctl$sock_SIOCGPGRP(r0, 0x8904, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cg\xab.\xc4\xd0\xcex\x177\x84\x0e\x95q\xd7\xf7d\xd2\x1di\x04\x18\xa9\xe5%\x12Z\xfdH\xd2\x8cp\xcc\xc4=\'\x00\xab\x1d\x99\x03\x91Kt\x98Q\x8eB\x92\x02p\xc8\\6\x86T\xb1\xfa\xaf\x8c\x8b\x94\xa5\xa2\x8aU\x14&\xab\x9c%\xd0>|\xbc\xe0\xab\xdd\xdd\x93\xf9q\x19\x86F\xd7Y\x19\v\x13\x17\xc0\x1brd.\x17\xad\xd5\x00$\x01\x87\x96\xd3XA\xb3\xb7\x81\xcd6\xd3\xe2\x8e\x8c\xd0\xf4y\xc5\x1e2\xd25\xdc\x0f\xd9\x8f~\'\xe2\xc9mCmA~\x0e\xfch\x94<(\xd3f\xbd\xc3\x91\x017L\x14X\xaf\x99\x90\x8bv\x9b#|z\x9a\x99\xaf\xbd\xb7{qJ>\"\x90\xc8\b\xc6~\rN\x16\xa5\xde\x98\xb3\xb2\xb5\xees]$\x12\xfb\xd1\n\xd5\xbe\xe4\xc4\xfd\x8c\x9e\xa6\x86WQ\xae\xaf\xf8(,\xff#\xe8|f\xcb\xaa\x1e,\xfc\xfa\xefI\x9d=$\x14\x8aI\x85_\xa6\n6\xabZ\xc5N\xa6\x1c\x8c\xd4\xf8z\xcd\\\x98gq\xc8\'\xd3\xb5\xb7\x98s\xd8\x9e}\xbbS\x98\xdc\xfa\xd1\x9b\xdcW\xaa\xe6{q\xae\xfc\b\xf1\xc4\xd9R#<\x1e\x1d2}!\xc1\xfd\xbdS\r\x8a\x11P(\xf5\xdf\xde\xde\x03g\'\x8b\xab7\\\n\x9e\xa8\xe2\x80@\x9f]\x1f,\x88\xfc\xc5\xad\x94\x00V\x8a-\xfbH\xd4\xa4\x9f\xda\x8e\x93\xc0\xbd\xd9qV}B{\xc3\xc6oT\xa9!3\xa9\xe3\x98\x99$d\xec\x9c5\xdd\xea', 0x200002, 0x0) gettid() r1 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) gettid() prctl$PR_SET_PTRACER(0x59616d61, 0x0) timer_create(0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dmmidi(0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) [ 52.957807][ T8143] chnl_net:caif_netlink_parms(): no params data found [ 53.035683][ T8140] device hsr_slave_0 entered promiscuous mode [ 53.073883][ T8140] device hsr_slave_1 entered promiscuous mode 22:04:32 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x25, &(0x7f0000000040)=[@in={0x2, 0x0, @remote}], 0x148) [ 53.161801][ T8148] IPVS: ftp: loaded support on port[0] = 21 [ 53.274707][ T8143] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.281823][ T8143] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.313797][ T8143] device bridge_slave_0 entered promiscuous mode [ 53.325798][ T8145] chnl_net:caif_netlink_parms(): no params data found [ 53.344876][ T8140] netdevsim netdevsim0 netdevsim0: renamed from eth0 22:04:33 executing program 5: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$evdev(&(0x7f00000002c0)='/dev/input/event#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x14}) epoll_pwait(r1, &(0x7f00000001c0)=[{}], 0x1, 0x0, 0x0, 0x0) [ 53.397012][ T8140] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 53.486702][ T8143] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.495012][ T8143] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.505231][ T8143] device bridge_slave_1 entered promiscuous mode [ 53.529975][ T8140] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 53.595661][ T8140] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 53.631747][ T8151] IPVS: ftp: loaded support on port[0] = 21 [ 53.631799][ T8154] IPVS: ftp: loaded support on port[0] = 21 [ 53.669118][ T8143] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.685959][ T8143] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.754240][ T8143] team0: Port device team_slave_0 added [ 53.762470][ T8143] team0: Port device team_slave_1 added [ 53.783979][ T8145] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.791238][ T8145] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.799665][ T8145] device bridge_slave_0 entered promiscuous mode [ 53.835829][ T8145] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.843850][ T8145] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.851445][ T8145] device bridge_slave_1 entered promiscuous mode [ 53.878880][ T8145] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.889242][ T8148] chnl_net:caif_netlink_parms(): no params data found [ 53.910058][ T8145] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.964914][ T8143] device hsr_slave_0 entered promiscuous mode [ 54.023690][ T8143] device hsr_slave_1 entered promiscuous mode [ 54.073234][ T8143] debugfs: Directory 'hsr0' with parent '/' already present! [ 54.140519][ T8145] team0: Port device team_slave_0 added [ 54.148450][ T8145] team0: Port device team_slave_1 added [ 54.174289][ T8140] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.188951][ T8148] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.196474][ T8148] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.204412][ T8148] device bridge_slave_0 entered promiscuous mode [ 54.213828][ T8148] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.220881][ T8148] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.228650][ T8148] device bridge_slave_1 entered promiscuous mode [ 54.305765][ T8145] device hsr_slave_0 entered promiscuous mode [ 54.333300][ T8145] device hsr_slave_1 entered promiscuous mode [ 54.403131][ T8145] debugfs: Directory 'hsr0' with parent '/' already present! [ 54.430805][ T8148] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.440535][ T8151] chnl_net:caif_netlink_parms(): no params data found [ 54.464737][ T8143] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 54.514848][ T8154] chnl_net:caif_netlink_parms(): no params data found [ 54.528990][ T8148] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.554691][ T8148] team0: Port device team_slave_0 added [ 54.562555][ T8148] team0: Port device team_slave_1 added [ 54.568488][ T8143] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 54.628401][ T8151] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.636520][ T8151] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.644391][ T8151] device bridge_slave_0 entered promiscuous mode [ 54.658737][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.667277][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.679920][ T8143] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 54.715942][ T8143] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 54.815973][ T8148] device hsr_slave_0 entered promiscuous mode [ 54.853509][ T8148] device hsr_slave_1 entered promiscuous mode [ 54.893202][ T8148] debugfs: Directory 'hsr0' with parent '/' already present! [ 54.900951][ T8151] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.908086][ T8151] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.916208][ T8151] device bridge_slave_1 entered promiscuous mode [ 54.929577][ T8140] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.956412][ T8154] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.963745][ T8154] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.971379][ T8154] device bridge_slave_0 entered promiscuous mode [ 54.989161][ T8151] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.003070][ T8145] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 55.065584][ T8154] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.072697][ T8154] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.081374][ T8154] device bridge_slave_1 entered promiscuous mode [ 55.093673][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.102260][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.110806][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.118119][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.128038][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.140029][ T8151] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.150227][ T8145] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 55.207085][ T8145] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 55.258530][ T8145] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 55.340640][ T8154] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.352233][ T3104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.361077][ T3104] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.370000][ T3104] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.377135][ T3104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.385481][ T3104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.414245][ T8154] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.430529][ T3104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.439466][ T3104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.448048][ T3104] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.457404][ T3104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.465867][ T3104] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.474617][ T3104] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.488106][ T8151] team0: Port device team_slave_0 added [ 55.496338][ T8151] team0: Port device team_slave_1 added [ 55.515837][ T8148] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 55.551949][ T8148] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 55.611790][ T8154] team0: Port device team_slave_0 added [ 55.624182][ T8154] team0: Port device team_slave_1 added [ 55.630861][ T8148] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 55.687738][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.696124][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.704897][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.713318][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.777200][ T8151] device hsr_slave_0 entered promiscuous mode [ 55.823489][ T8151] device hsr_slave_1 entered promiscuous mode [ 55.863051][ T8151] debugfs: Directory 'hsr0' with parent '/' already present! [ 55.878136][ T8148] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 56.005163][ T8154] device hsr_slave_0 entered promiscuous mode [ 56.054106][ T8154] device hsr_slave_1 entered promiscuous mode [ 56.103099][ T8154] debugfs: Directory 'hsr0' with parent '/' already present! [ 56.120635][ T8145] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.130976][ T8140] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.196125][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.205577][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.213744][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.221149][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.238217][ T8145] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.254917][ T8140] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.266093][ T8151] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 56.308234][ T8151] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 56.365047][ T8154] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 56.425184][ T8154] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 56.465200][ T8154] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 56.517155][ T8154] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 56.584410][ T8153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.596989][ T8153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.605357][ T8153] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.612477][ T8153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.636324][ T8143] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.646280][ T8151] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 56.705505][ T8151] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 56.783620][ T3000] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.791448][ T3000] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.800969][ T3000] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.810538][ T3000] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.817675][ T3000] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.831494][ T3000] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.840412][ T3000] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.849424][ T3000] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.857974][ T3000] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.867130][ T3000] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.878452][ T3000] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.887317][ T3000] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.896132][ T3000] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.906069][ T3000] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.922079][ T8143] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.965549][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.984072][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.992864][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.007063][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.040409][ T8148] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.061532][ T8148] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.107142][ T8148] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 57.119594][ T8148] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.156208][ T8148] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.002921][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 162.009699][ C0] rcu: 0-....: (10499 ticks this GP) idle=7ce/1/0x4000000000000002 softirq=11091/11091 fqs=2762 [ 162.020443][ C0] (t=10500 jiffies g=6305 q=513) [ 162.025458][ C0] rcu: rcu_preempt kthread starved for 4958 jiffies! g6305 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 162.036466][ C0] rcu: RCU grace-period kthread stack dump: [ 162.042352][ C0] rcu_preempt R running task 29032 10 2 0x80004000 [ 162.050247][ C0] Call Trace: [ 162.053538][ C0] __schedule+0x9a0/0xcc0 [ 162.057869][ C0] schedule+0x181/0x210 [ 162.062010][ C0] schedule_timeout+0x14f/0x240 [ 162.066849][ C0] ? run_local_timers+0x120/0x120 [ 162.071867][ C0] rcu_gp_kthread+0xed8/0x1770 [ 162.076628][ C0] kthread+0x332/0x350 [ 162.080682][ C0] ? rcu_report_qs_rsp+0x140/0x140 [ 162.085796][ C0] ? kthread_blkcg+0xe0/0xe0 [ 162.090373][ C0] ret_from_fork+0x24/0x30 [ 162.095050][ C0] NMI backtrace for cpu 0 [ 162.099367][ C0] CPU: 0 PID: 8162 Comm: syz-executor.0 Not tainted 5.4.0-syzkaller #0 [ 162.107584][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 162.117620][ C0] Call Trace: [ 162.120887][ C0] [ 162.123762][ C0] dump_stack+0x1fb/0x318 [ 162.128082][ C0] nmi_cpu_backtrace+0xaf/0x1a0 [ 162.132920][ C0] ? nmi_trigger_cpumask_backtrace+0x16d/0x290 [ 162.139058][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 162.145110][ C0] nmi_trigger_cpumask_backtrace+0x174/0x290 [ 162.151077][ C0] arch_trigger_cpumask_backtrace+0x10/0x20 [ 162.156956][ C0] rcu_dump_cpu_stacks+0x15a/0x220 [ 162.162056][ C0] rcu_sched_clock_irq+0xe25/0x1ad0 [ 162.167242][ C0] ? trace_hardirqs_off+0x74/0x80 [ 162.172254][ C0] update_process_times+0x12d/0x180 [ 162.177525][ C0] tick_sched_timer+0x263/0x420 [ 162.183240][ C0] ? tick_setup_sched_timer+0x3d0/0x3d0 [ 162.188784][ C0] __hrtimer_run_queues+0x403/0x840 [ 162.193983][ C0] hrtimer_interrupt+0x38c/0xda0 [ 162.198924][ C0] ? debug_smp_processor_id+0x9/0x20 [ 162.204196][ C0] smp_apic_timer_interrupt+0x109/0x280 [ 162.209745][ C0] apic_timer_interrupt+0xf/0x20 [ 162.214665][ C0] [ 162.217593][ C0] RIP: 0010:__memcg_kmem_uncharge+0x0/0x2e0 [ 162.223472][ C0] Code: 00 eb 1b 83 3d 80 ce 8c 07 00 74 12 48 81 c3 08 02 00 00 48 89 df 4c 89 f6 e8 dc 7d ff ff 5b 41 5e 5d c3 0f 1f 80 00 00 00 00 <55> 48 89 e5 41 57 41 56 41 55 41 54 53 50 89 f3 49 89 fc 48 b8 00 [ 162.243072][ C0] RSP: 0018:ffffc90001fa7880 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 162.251469][ C0] RAX: ffffffff81486ea4 RBX: ffffea0002822080 RCX: ffff8880991fe400 [ 162.259426][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffea0002822080 [ 162.267557][ C0] RBP: ffffc90001fa78c0 R08: dffffc0000000000 R09: fffffbfff120248a [ 162.275511][ C0] R10: fffffbfff120248a R11: 0000000000000000 R12: ffff8880a4980f20 [ 162.283473][ C0] R13: dffffc0000000000 R14: 1ffff110149301e4 R15: ffff8880a85799e8 [ 162.291722][ C0] ? free_thread_stack+0x124/0x590 [ 162.296824][ C0] ? free_thread_stack+0x12e/0x590 [ 162.301924][ C0] put_task_stack+0xa3/0x130 [ 162.306504][ C0] finish_task_switch+0x3f1/0x550 [ 162.311519][ C0] __schedule+0x9a8/0xcc0 [ 162.315845][ C0] ? ___preempt_schedule+0x16/0x18 [ 162.320940][ C0] preempt_schedule+0xdb/0x120 [ 162.325691][ C0] ___preempt_schedule+0x16/0x18 [ 162.330613][ C0] ? page_poisoning_enabled+0x1c/0x30 [ 162.335968][ C0] prep_new_page+0x161/0x2e0 [ 162.340546][ C0] get_page_from_freelist+0x850/0xaa0 [ 162.345917][ C0] __alloc_pages_nodemask+0x264/0x5d0 [ 162.351282][ C0] alloc_pages_vma+0x94a/0xd50 [ 162.356036][ C0] do_huge_pmd_anonymous_page+0x883/0xe50 [ 162.361747][ C0] handle_mm_fault+0x2017/0x2890 [ 162.366690][ C0] do_user_addr_fault+0x589/0xaf0 [ 162.371731][ C0] __do_page_fault+0xd3/0x1f0 [ 162.376398][ C0] do_page_fault+0x99/0xb0 [ 162.380804][ C0] page_fault+0x39/0x40 [ 162.384944][ C0] RIP: 0033:0x4418d1 [ 162.388823][ C0] Code: 2e 0f 1f 84 00 00 00 00 00 48 83 fa 20 48 89 f8 73 77 f6 c2 01 74 0b 0f b6 0e 88 0f 48 ff c6 48 ff c7 f6 c2 02 74 12 0f b7 0e <66> 89 0f 48 83 c6 02 48 83 c7 02 0f 1f 40 00 f6 c2 04 74 0c 8b 0e [ 162.408410][ C0] RSP: 002b:00007ffdac9aff18 EFLAGS: 00010202 [ 162.414459][ C0] RAX: 0000000020000080 RBX: 0000000000000000 RCX: 000000000000642f [ 162.422419][ C0] RDX: 000000000000000a RSI: 0000000000760020 RDI: 0000000020000080 [ 162.430375][ C0] RBP: 0000000000760000 R08: 0000000000000000 R09: 0000000000000004 [ 162.438329][ C0] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000001 [ 162.446293][ C0] R13: 00007ffdac9b0100 R14: 0000000000760008 R15: 00007ffdac9b0110