[ 49.372483][ T27] audit: type=1800 audit(1578485854.169:27): pid=8324 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [ 49.411157][ T27] audit: type=1800 audit(1578485854.169:28): pid=8324 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 49.961017][ T27] audit: type=1800 audit(1578485854.799:29): pid=8324 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 49.980167][ T27] audit: type=1800 audit(1578485854.809:30): pid=8324 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.185' (ECDSA) to the list of known hosts. 2020/01/08 12:17:45 fuzzer started 2020/01/08 12:17:46 dialing manager at 10.128.0.26:35703 2020/01/08 12:17:46 syscalls: 2824 2020/01/08 12:17:46 code coverage: enabled 2020/01/08 12:17:46 comparison tracing: enabled 2020/01/08 12:17:46 extra coverage: enabled 2020/01/08 12:17:46 setuid sandbox: enabled 2020/01/08 12:17:46 namespace sandbox: enabled 2020/01/08 12:17:46 Android sandbox: /sys/fs/selinux/policy does not exist 2020/01/08 12:17:46 fault injection: enabled 2020/01/08 12:17:46 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/01/08 12:17:46 net packet injection: enabled 2020/01/08 12:17:46 net device setup: enabled 2020/01/08 12:17:46 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/01/08 12:17:46 devlink PCI setup: PCI device 0000:00:10.0 is not available 12:17:47 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@ipv6_newroute={0x2c, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_PRIORITY={0x8, 0x1e}, @RTA_ENCAP={0x8, 0x16, @nested={0x4}}]}, 0x2c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492805, 0x0) 12:17:47 executing program 1: unshare(0x8020000) semget$private(0x0, 0x403, 0x0) semtimedop(0x0, &(0x7f0000000480)=[{0x0, 0x0, 0x1400}, {0x0, 0x60}], 0x2, 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') setns(r0, 0x0) syzkaller login: [ 62.402650][ T8489] IPVS: ftp: loaded support on port[0] = 21 [ 62.529822][ T8489] chnl_net:caif_netlink_parms(): no params data found [ 62.578983][ T8489] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.587078][ T8489] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.596312][ T8489] device bridge_slave_0 entered promiscuous mode [ 62.606457][ T8489] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.614957][ T8489] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.622831][ T8489] device bridge_slave_1 entered promiscuous mode [ 62.644136][ T8493] IPVS: ftp: loaded support on port[0] = 21 [ 62.653264][ T8489] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.665961][ T8489] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 12:17:47 executing program 2: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18c, &(0x7f0000000100)=[{0x0, 0xfffffffffffffe0a}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x80002, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0704000000000000ff3f03000000450001070000001419001a0015000a00070008000200000800005d14a4e91ee438", 0x39}], 0x1) sendmmsg$alg(r3, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 62.694898][ T8489] team0: Port device team_slave_0 added [ 62.704183][ T8489] team0: Port device team_slave_1 added [ 62.777825][ T8489] device hsr_slave_0 entered promiscuous mode [ 62.853744][ T8489] device hsr_slave_1 entered promiscuous mode 12:17:47 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fdinfo/4\x00') r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) sendfile(r2, r1, 0x0, 0x7fffffff) [ 62.928634][ T8495] IPVS: ftp: loaded support on port[0] = 21 [ 63.121827][ T8498] IPVS: ftp: loaded support on port[0] = 21 [ 63.136344][ T8493] chnl_net:caif_netlink_parms(): no params data found 12:17:48 executing program 4: unshare(0x400) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r0, &(0x7f0000000100)=@unspec, 0xc) [ 63.185097][ T8489] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.288421][ T8489] netdevsim netdevsim0 netdevsim1: renamed from eth1 12:17:48 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000ac0), 0xc) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) rename(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='./bus\x00') setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) ftruncate(r2, 0x200004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) [ 63.417069][ T8489] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.477395][ T8489] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.593306][ T8495] chnl_net:caif_netlink_parms(): no params data found [ 63.617899][ T8493] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.625185][ T8493] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.632827][ T8493] device bridge_slave_0 entered promiscuous mode [ 63.642535][ T8493] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.649763][ T8493] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.655332][ T8500] IPVS: ftp: loaded support on port[0] = 21 [ 63.663315][ T8493] device bridge_slave_1 entered promiscuous mode [ 63.698726][ T8502] IPVS: ftp: loaded support on port[0] = 21 [ 63.708078][ T8493] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.736508][ T8493] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.775661][ T8495] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.782793][ T8495] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.791333][ T8495] device bridge_slave_0 entered promiscuous mode [ 63.809060][ T8493] team0: Port device team_slave_0 added [ 63.818411][ T8493] team0: Port device team_slave_1 added [ 63.826962][ T8495] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.834973][ T8495] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.842657][ T8495] device bridge_slave_1 entered promiscuous mode [ 63.946604][ T8493] device hsr_slave_0 entered promiscuous mode [ 63.993678][ T8493] device hsr_slave_1 entered promiscuous mode [ 64.063575][ T8493] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.071360][ T8493] Cannot create hsr debugfs directory [ 64.083181][ T8495] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.126188][ T8495] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.154907][ T8498] chnl_net:caif_netlink_parms(): no params data found [ 64.178042][ T8495] team0: Port device team_slave_0 added [ 64.186465][ T8495] team0: Port device team_slave_1 added [ 64.265690][ T8498] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.272768][ T8498] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.280711][ T8498] device bridge_slave_0 entered promiscuous mode [ 64.292300][ T8498] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.299745][ T8498] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.307653][ T8498] device bridge_slave_1 entered promiscuous mode [ 64.348042][ T8489] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.355252][ T8500] chnl_net:caif_netlink_parms(): no params data found [ 64.375461][ T8498] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.387289][ T8498] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.399068][ T8502] chnl_net:caif_netlink_parms(): no params data found [ 64.456093][ T8495] device hsr_slave_0 entered promiscuous mode [ 64.493796][ T8495] device hsr_slave_1 entered promiscuous mode [ 64.533512][ T8495] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.541099][ T8495] Cannot create hsr debugfs directory [ 64.572776][ T8489] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.612738][ T2765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.621191][ T2765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.644483][ T8498] team0: Port device team_slave_0 added [ 64.662024][ T8500] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.669220][ T8500] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.681236][ T8500] device bridge_slave_0 entered promiscuous mode [ 64.702447][ T8498] team0: Port device team_slave_1 added [ 64.709218][ T8493] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.756683][ T2716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.765767][ T2716] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.774457][ T2716] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.781594][ T2716] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.789653][ T8500] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.799707][ T8500] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.807532][ T8500] device bridge_slave_1 entered promiscuous mode [ 64.824763][ T8502] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.831824][ T8502] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.841032][ T8502] device bridge_slave_0 entered promiscuous mode [ 64.858303][ T8493] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.915771][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.927163][ T8500] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.940055][ T8502] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.949573][ T8502] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.957351][ T8502] device bridge_slave_1 entered promiscuous mode [ 64.973506][ T8493] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 65.005687][ T2765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.014322][ T2765] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.022581][ T2765] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.029658][ T2765] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.038530][ T8500] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.086128][ T8498] device hsr_slave_0 entered promiscuous mode [ 65.124575][ T8498] device hsr_slave_1 entered promiscuous mode [ 65.163578][ T8498] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.171157][ T8498] Cannot create hsr debugfs directory [ 65.184926][ T8502] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.194877][ T8493] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 65.245758][ T8500] team0: Port device team_slave_0 added [ 65.264813][ T8502] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.288860][ T8502] team0: Port device team_slave_0 added [ 65.300273][ T3783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.309138][ T3783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.321141][ T3783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.329683][ T3783] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.338244][ T3783] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.349546][ T8500] team0: Port device team_slave_1 added [ 65.368447][ T8502] team0: Port device team_slave_1 added [ 65.408696][ T2765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.417736][ T2765] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.431941][ T8489] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 65.443259][ T8489] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.516147][ T8502] device hsr_slave_0 entered promiscuous mode [ 65.554205][ T8502] device hsr_slave_1 entered promiscuous mode [ 65.593530][ T8502] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.601107][ T8502] Cannot create hsr debugfs directory [ 65.656040][ T8500] device hsr_slave_0 entered promiscuous mode [ 65.714174][ T8500] device hsr_slave_1 entered promiscuous mode [ 65.753481][ T8500] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.761061][ T8500] Cannot create hsr debugfs directory [ 65.770335][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.781951][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.790550][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.798952][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.807288][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.860528][ T8495] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 65.901082][ T8495] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 65.949742][ T8495] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 66.036190][ T8495] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 66.085348][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.092789][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.103307][ T8489] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.222452][ T2765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.236932][ T2765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.246901][ T8502] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 66.294604][ T8498] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 66.335651][ T8498] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 66.405841][ T8498] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 66.439270][ T8493] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.446576][ T8502] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 66.519784][ T8502] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 66.567559][ T8502] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 66.634659][ T8498] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 66.706149][ T8495] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.729605][ T8495] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.744852][ T3783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.752806][ T3783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.760764][ T3783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.769680][ T3783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.779087][ T3783] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.786841][ T3783] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.804928][ T8493] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.824910][ T8489] device veth0_vlan entered promiscuous mode [ 66.832856][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.841203][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.849024][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.858844][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.867683][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.874785][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.882426][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.891833][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.900189][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.907294][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.914938][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.923592][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.931929][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.939014][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.948301][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.956188][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.965371][ T8500] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 67.009615][ T8500] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 67.079947][ T8500] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 67.139814][ T8500] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 67.202133][ T8489] device veth1_vlan entered promiscuous mode [ 67.211624][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.220654][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.229874][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.236971][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.245175][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.256098][ T3783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.280610][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.308970][ T2716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.317920][ T2716] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.327005][ T2716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.335901][ T2716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.344498][ T2716] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.352743][ T2716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.361288][ T2716] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.370285][ T2716] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.399737][ T8493] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.419510][ T8493] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.433792][ T3783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.442007][ T3783] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.452977][ T3783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.462741][ T3783] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.471515][ T3783] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.511869][ T8495] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 67.547515][ T8495] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.565758][ T3783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.575520][ T3783] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.584250][ T3783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.592660][ T3783] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.602005][ T3783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.611311][ T3783] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.620120][ T3783] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 172.623349][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 172.630099][ C1] rcu: 1-...!: (1 GPs behind) idle=f82/1/0x4000000000000002 softirq=12880/12891 fqs=36 [ 172.640062][ C1] (t=10501 jiffies g=6737 q=463) [ 172.645079][ C1] rcu: rcu_preempt kthread starved for 10430 jiffies! g6737 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 172.656162][ C1] rcu: RCU grace-period kthread stack dump: [ 172.662037][ C1] rcu_preempt R running task 29032 10 2 0x80004000 [ 172.669921][ C1] Call Trace: [ 172.673208][ C1] __schedule+0x9a0/0xcc0 [ 172.677535][ C1] schedule+0x181/0x210 [ 172.681686][ C1] schedule_timeout+0x14f/0x240 [ 172.686528][ C1] ? run_local_timers+0x120/0x120 [ 172.691558][ C1] rcu_gp_kthread+0xed8/0x1770 [ 172.696320][ C1] kthread+0x332/0x350 [ 172.700377][ C1] ? rcu_report_qs_rsp+0x140/0x140 [ 172.705474][ C1] ? kthread_blkcg+0xe0/0xe0 [ 172.710078][ C1] ret_from_fork+0x24/0x30 [ 172.714491][ C1] NMI backtrace for cpu 1 [ 172.718807][ C1] CPU: 1 PID: 2765 Comm: kworker/1:3 Not tainted 5.5.0-rc5-syzkaller #0 [ 172.727109][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 172.737161][ C1] Workqueue: rcu_gp process_srcu [ 172.742083][ C1] Call Trace: [ 172.745349][ C1] [ 172.748189][ C1] dump_stack+0x1fb/0x318 [ 172.752505][ C1] nmi_cpu_backtrace+0xaf/0x1a0 [ 172.757340][ C1] ? nmi_trigger_cpumask_backtrace+0x16d/0x290 [ 172.763484][ C1] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 172.769557][ C1] nmi_trigger_cpumask_backtrace+0x174/0x290 [ 172.775542][ C1] arch_trigger_cpumask_backtrace+0x10/0x20 [ 172.781446][ C1] rcu_dump_cpu_stacks+0x15a/0x220 [ 172.786558][ C1] rcu_sched_clock_irq+0xe25/0x1ad0 [ 172.791747][ C1] ? trace_hardirqs_off+0x74/0x80 [ 172.796769][ C1] update_process_times+0x12d/0x180 [ 172.801959][ C1] tick_sched_timer+0x263/0x420 [ 172.806814][ C1] ? tick_setup_sched_timer+0x3d0/0x3d0 [ 172.812348][ C1] __hrtimer_run_queues+0x403/0x840 [ 172.817550][ C1] hrtimer_interrupt+0x38c/0xda0 [ 172.822494][ C1] ? debug_smp_processor_id+0x9/0x20 [ 172.827772][ C1] smp_apic_timer_interrupt+0x109/0x280 [ 172.833308][ C1] apic_timer_interrupt+0xf/0x20 [ 172.838225][ C1] [ 172.841153][ C1] RIP: 0010:free_thread_stack+0x16d/0x590 [ 172.846860][ C1] Code: c3 08 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 55 94 6a 00 48 8b 3b be fc ff ff ff e8 28 04 00 00 43 80 3c 2e 00 <74> 08 4c 89 e7 e8 39 94 6a 00 49 8b 1c 24 48 83 c3 08 48 89 d8 48 [ 172.866448][ C1] RSP: 0018:ffffc90007bbf8f8 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 172.874854][ C1] RAX: ffffffff814897d3 RBX: ffff8880a2ab0f88 RCX: ffff88809fbce280 [ 172.882810][ C1] RDX: 0000000000000000 RSI: 00000000fffffffc RDI: ffffea000249f740 [ 172.890766][ C1] RBP: ffffc90007bbf930 R08: 000000000003a728 R09: fffffbfff124248a [ 172.898727][ C1] R10: fffffbfff124248a R11: 0000000000000000 R12: ffff8880a9137fa0 [ 172.906684][ C1] R13: dffffc0000000000 R14: 1ffff11015226ff4 R15: ffff8880973e18f8 [ 172.914651][ C1] ? mod_memcg_page_state+0x123/0x190 [ 172.920012][ C1] ? free_thread_stack+0x168/0x590 [ 172.925112][ C1] put_task_stack+0xa3/0x130 [ 172.929689][ C1] finish_task_switch+0x3f1/0x550 [ 172.934706][ C1] __schedule+0x9a8/0xcc0 [ 172.939032][ C1] preempt_schedule_irq+0xc1/0x140 [ 172.944132][ C1] retint_kernel+0x1b/0x2b [ 172.948532][ C1] RIP: 0010:delay_tsc+0x96/0xf0 [ 172.953372][ C1] Code: fb 41 89 c7 0f 01 f9 66 90 49 89 d4 49 c1 e4 20 49 09 c4 eb 29 0f 1f 44 00 00 66 2e 0f 1f 84 00 00 00 00 00 a8 01 75 ca f3 90 01 00 00 00 e8 e0 36 54 f9 e8 fb 6c a0 fb 41 39 c7 75 bb 0f 01 [ 172.972963][ C1] RSP: 0018:ffffc90007bbfb48 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 172.981360][ C1] RAX: 0000000080000000 RBX: 00000000000028e0 RCX: 0000000000000001 [ 172.989321][ C1] RDX: 0000000000000025 RSI: 0000000000000001 RDI: 0000000000000001 [ 172.997281][ C1] RBP: ffffc90007bbfb68 R08: ffffffff839f53f7 R09: fffffbfff149a10d [ 173.005237][ C1] R10: fffffbfff149a10d R11: 0000000000000000 R12: 00000025e5518959 [ 173.013206][ C1] R13: 0000000000000000 R14: 0000000000002ced R15: 0000000000000001 [ 173.021195][ C1] ? check_preemption_disabled+0x37/0x260 [ 173.026910][ C1] ? delay_tsc+0xc6/0xf0 [ 173.031143][ C1] __const_udelay+0x5e/0x70 [ 173.035637][ C1] try_check_zero+0x6e/0x380 [ 173.040222][ C1] process_srcu+0x1b7/0xd20 [ 173.044754][ C1] process_one_work+0x7ef/0x10d0 [ 173.049700][ C1] worker_thread+0xc01/0x1630 [ 173.054564][ C1] kthread+0x332/0x350 [ 173.058630][ C1] ? rcu_lock_release+0x30/0x30 [ 173.063473][ C1] ? kthread_blkcg+0xe0/0xe0 [ 173.068052][ C1] ret_from_fork+0x24/0x30