[ 41.469270][ T23] audit: type=1800 audit(1575333040.226:27): pid=7919 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [ 41.488812][ T23] audit: type=1800 audit(1575333040.226:28): pid=7919 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 42.039446][ T23] audit: type=1800 audit(1575333040.856:29): pid=7919 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 42.058943][ T23] audit: type=1800 audit(1575333040.856:30): pid=7919 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.15.204' (ECDSA) to the list of known hosts. 2019/12/03 00:30:50 fuzzer started 2019/12/03 00:30:52 dialing manager at 10.128.0.26:38907 2019/12/03 00:30:52 syscalls: 2697 2019/12/03 00:30:52 code coverage: enabled 2019/12/03 00:30:52 comparison tracing: enabled 2019/12/03 00:30:52 extra coverage: extra coverage is not supported by the kernel 2019/12/03 00:30:52 setuid sandbox: enabled 2019/12/03 00:30:52 namespace sandbox: enabled 2019/12/03 00:30:52 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/03 00:30:52 fault injection: enabled 2019/12/03 00:30:52 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/03 00:30:52 net packet injection: enabled 2019/12/03 00:30:52 net device setup: enabled 2019/12/03 00:30:52 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/12/03 00:30:52 devlink PCI setup: PCI device 0000:00:10.0 is not available 00:30:53 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x6b) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0815b5055e0bcfe87b3071") r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r1, &(0x7f0000000040)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "ac41d1c45d71d3ed2a4182b9a6fdfebbf3550b2209895f348f8fc6716e08d1364ad5526c6e898cbb38c310d32b6a3217fa0cb9e4cafe0569942f46cde7188b"}, 0x60) getsockname(r1, &(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @empty}}, &(0x7f0000000180)=0x7d934ddf) 00:30:53 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x785d, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) listen(r0, 0x10001) r1 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) dup3(0xffffffffffffffff, r2, 0x0) syzkaller login: [ 54.925625][ T8085] IPVS: ftp: loaded support on port[0] = 21 [ 55.020078][ T8087] IPVS: ftp: loaded support on port[0] = 21 00:30:53 executing program 2: r0 = socket(0x10, 0x803, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000740)={0x0, 0x0, 0x30}, 0xc) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000001c0), 0x58, 0x0}, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x49d}, {&(0x7f0000000400)=""/120, 0x2ce}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) [ 55.117670][ T8085] chnl_net:caif_netlink_parms(): no params data found [ 55.229626][ T8085] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.260668][ T8085] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.269173][ T8085] device bridge_slave_0 entered promiscuous mode [ 55.293895][ T8085] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.310535][ T8085] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.318078][ T8085] device bridge_slave_1 entered promiscuous mode [ 55.338801][ T8087] chnl_net:caif_netlink_parms(): no params data found [ 55.354480][ T8091] IPVS: ftp: loaded support on port[0] = 21 [ 55.362846][ T8085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.398720][ T8085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.418776][ T8087] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.426641][ T8087] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.434663][ T8087] device bridge_slave_0 entered promiscuous mode 00:30:54 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200aa0802000000000000000000000105000600200000000a00d05a396461e838ae00e50000050000001f000000000000250000000000000200010000000000102000022000627c05000500110000000a00000000010200000000000000000000000000000001170000020000000000"], 0x80}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="020a000007000000000000000000000c05001affffffff00000000000000000056a5e8f7e28ae403a294a1fff5693732d11eea39c6727146e7ff305add29ffffffff000000000081080000000000260000000000"], 0x38}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400000000000238, 0x0) [ 55.463206][ T8087] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.470978][ T8087] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.478808][ T8087] device bridge_slave_1 entered promiscuous mode [ 55.502952][ T8085] team0: Port device team_slave_0 added [ 55.510305][ T8085] team0: Port device team_slave_1 added [ 55.569666][ T8087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.643174][ T8085] device hsr_slave_0 entered promiscuous mode 00:30:54 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[]}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x24, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0xc, 0x5, [@IFLA_BRPORT_STATE={0x8, 0x22}]}}}]}, 0x44}}, 0x0) [ 55.700969][ T8085] device hsr_slave_1 entered promiscuous mode [ 55.765591][ T8091] chnl_net:caif_netlink_parms(): no params data found [ 55.784820][ T8087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.810269][ T8087] team0: Port device team_slave_0 added [ 55.862242][ T8087] team0: Port device team_slave_1 added [ 55.876296][ T8094] IPVS: ftp: loaded support on port[0] = 21 [ 55.909362][ T8091] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.919272][ T8096] IPVS: ftp: loaded support on port[0] = 21 [ 55.930571][ T8091] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.938186][ T8091] device bridge_slave_0 entered promiscuous mode [ 55.960128][ T8091] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.967246][ T8091] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.978276][ T8091] device bridge_slave_1 entered promiscuous mode 00:30:54 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@acquire={0x16c, 0x17, 0x7, 0x0, 0x0, {{@in=@remote}, @in=@remote, {@in=@initdev, @in=@local}, {{@in6=@ipv4={[], [], @local}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x0, 0x6c}, 0x2, @in=@loopback}]}]}, 0x16c}, 0x8}, 0x0) [ 56.053026][ T8087] device hsr_slave_0 entered promiscuous mode [ 56.120783][ T8087] device hsr_slave_1 entered promiscuous mode [ 56.180667][ T8087] debugfs: Directory 'hsr0' with parent '/' already present! [ 56.203892][ T8085] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.253053][ T8085] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.314403][ T8085] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 56.361820][ T8098] IPVS: ftp: loaded support on port[0] = 21 [ 56.369868][ T8091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.388099][ T8085] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 56.453646][ T8091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.489559][ T8087] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 56.543481][ T8087] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 56.603886][ T8091] team0: Port device team_slave_0 added [ 56.639870][ T8091] team0: Port device team_slave_1 added [ 56.647118][ T8087] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 56.705321][ T8087] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 56.815785][ T8094] chnl_net:caif_netlink_parms(): no params data found [ 56.831683][ T8098] chnl_net:caif_netlink_parms(): no params data found [ 56.902932][ T8091] device hsr_slave_0 entered promiscuous mode [ 56.942642][ T8091] device hsr_slave_1 entered promiscuous mode [ 56.980602][ T8091] debugfs: Directory 'hsr0' with parent '/' already present! [ 57.053209][ T8096] chnl_net:caif_netlink_parms(): no params data found [ 57.068532][ T8098] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.075759][ T8098] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.084083][ T8098] device bridge_slave_0 entered promiscuous mode [ 57.094108][ T8098] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.103623][ T8098] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.112868][ T8098] device bridge_slave_1 entered promiscuous mode [ 57.120040][ T8094] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.127239][ T8094] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.135087][ T8094] device bridge_slave_0 entered promiscuous mode [ 57.145604][ T8094] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.152716][ T8094] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.160213][ T8094] device bridge_slave_1 entered promiscuous mode [ 57.180352][ T8094] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.191354][ T8094] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.237499][ T8096] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.245307][ T8096] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.253454][ T8096] device bridge_slave_0 entered promiscuous mode [ 57.261559][ T8096] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.268595][ T8096] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.276781][ T8096] device bridge_slave_1 entered promiscuous mode [ 57.284730][ T8091] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 57.347112][ T8091] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 57.402949][ T8098] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.413937][ T8098] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.444520][ T8094] team0: Port device team_slave_0 added [ 57.456520][ T8091] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 57.523041][ T8098] team0: Port device team_slave_0 added [ 57.530080][ T8096] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.540200][ T8094] team0: Port device team_slave_1 added [ 57.547601][ T8091] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 57.584587][ T8085] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.592906][ T8098] team0: Port device team_slave_1 added [ 57.599484][ T8096] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.656875][ T8096] team0: Port device team_slave_0 added [ 57.664950][ T8096] team0: Port device team_slave_1 added [ 57.713262][ T8098] device hsr_slave_0 entered promiscuous mode [ 57.750859][ T8098] device hsr_slave_1 entered promiscuous mode [ 57.780565][ T8098] debugfs: Directory 'hsr0' with parent '/' already present! [ 57.822317][ T8094] device hsr_slave_0 entered promiscuous mode [ 57.860920][ T8094] device hsr_slave_1 entered promiscuous mode [ 57.910631][ T8094] debugfs: Directory 'hsr0' with parent '/' already present! [ 57.927196][ T8085] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.948304][ T8105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.956518][ T8105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.012937][ T3015] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.022324][ T3015] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.031083][ T3015] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.038306][ T3015] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.046695][ T3015] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.055891][ T3015] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.064244][ T3015] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.071303][ T3015] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.078759][ T3015] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.113095][ T8096] device hsr_slave_0 entered promiscuous mode [ 58.170893][ T8096] device hsr_slave_1 entered promiscuous mode [ 58.210604][ T8096] debugfs: Directory 'hsr0' with parent '/' already present! [ 58.224911][ T8098] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 58.274548][ T8099] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.282703][ T8099] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.296258][ T8087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.310412][ T8094] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 58.351929][ T8098] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 58.402930][ T8098] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 58.463224][ T8100] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.472091][ T8100] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.480365][ T8100] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.490384][ T8100] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.498823][ T8100] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.507501][ T8100] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.515728][ T8100] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.524001][ T8100] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.537148][ T8087] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.546002][ T8094] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 58.585349][ T8098] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 58.645897][ T8091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.654498][ T8085] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.664692][ T8100] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.673010][ T8100] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.680831][ T8100] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.692431][ T8094] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 58.746760][ T8094] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 58.816019][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.825775][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.834569][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.841669][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.849179][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.857087][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.865378][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.877446][ T8091] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.904232][ T8096] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 58.971957][ T8105] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.979483][ T8105] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.987337][ T8105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.996042][ T8105] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.005154][ T8105] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.012279][ T8105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.019969][ T8105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.028529][ T8105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.042916][ T8105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.051408][ T8105] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.059621][ T8105] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.066694][ T8105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.074618][ T8105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.083692][ T8105] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.101021][ T8096] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 59.137750][ T8085] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.149481][ T3015] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.158703][ T3015] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.166788][ T3015] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.176311][ T3015] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.184995][ T3015] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.193465][ T3015] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.214702][ T8096] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 59.254004][ T8096] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 59.329345][ T8098] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.342523][ T8100] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.351366][ T8100] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.359902][ T8100] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.369138][ T8100] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.378699][ T8100] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.385811][ T8100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.398720][ T8087] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.429809][ T8100] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.451811][ T8100] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 164.470435][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 164.477179][ C0] rcu: 0-...!: (10499 ticks this GP) idle=642/1/0x4000000000000002 softirq=10680/10680 fqs=39 [ 164.487715][ C0] (t=10501 jiffies g=6141 q=178) [ 164.492725][ C0] rcu: rcu_preempt kthread starved for 10424 jiffies! g6141 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 164.503815][ C0] rcu: RCU grace-period kthread stack dump: [ 164.509699][ C0] rcu_preempt R running task 29032 10 2 0x80004000 [ 164.517589][ C0] Call Trace: [ 164.520877][ C0] __schedule+0x9a0/0xcc0 [ 164.525208][ C0] schedule+0x181/0x210 [ 164.529354][ C0] schedule_timeout+0x14f/0x240 [ 164.534192][ C0] ? run_local_timers+0x120/0x120 [ 164.539205][ C0] rcu_gp_kthread+0xed8/0x1770 [ 164.543980][ C0] kthread+0x332/0x350 [ 164.548031][ C0] ? rcu_report_qs_rsp+0x140/0x140 [ 164.553124][ C0] ? kthread_blkcg+0xe0/0xe0 [ 164.557698][ C0] ret_from_fork+0x24/0x30 [ 164.562115][ C0] NMI backtrace for cpu 0 [ 164.566430][ C0] CPU: 0 PID: 8098 Comm: syz-executor.5 Not tainted 5.4.0-syzkaller #0 [ 164.574644][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 164.584699][ C0] Call Trace: [ 164.587967][ C0] [ 164.590803][ C0] dump_stack+0x1fb/0x318 [ 164.595122][ C0] nmi_cpu_backtrace+0xaf/0x1a0 [ 164.599956][ C0] ? nmi_trigger_cpumask_backtrace+0x16d/0x290 [ 164.606094][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 164.612157][ C0] nmi_trigger_cpumask_backtrace+0x174/0x290 [ 164.618123][ C0] arch_trigger_cpumask_backtrace+0x10/0x20 [ 164.623998][ C0] rcu_dump_cpu_stacks+0x15a/0x220 [ 164.629448][ C0] rcu_sched_clock_irq+0xe25/0x1ad0 [ 164.634631][ C0] ? trace_hardirqs_off+0x74/0x80 [ 164.639640][ C0] update_process_times+0x12d/0x180 [ 164.644823][ C0] tick_sched_timer+0x263/0x420 [ 164.649656][ C0] ? tick_setup_sched_timer+0x3d0/0x3d0 [ 164.655282][ C0] __hrtimer_run_queues+0x403/0x840 [ 164.660477][ C0] hrtimer_interrupt+0x38c/0xda0 [ 164.665415][ C0] ? debug_smp_processor_id+0x9/0x20 [ 164.670701][ C0] smp_apic_timer_interrupt+0x109/0x280 [ 164.676232][ C0] apic_timer_interrupt+0xf/0x20 [ 164.681148][ C0] [ 164.684076][ C0] RIP: 0010:__memcg_kmem_uncharge+0xd/0x2e0 [ 164.689952][ C0] Code: 81 c3 08 02 00 00 48 89 df 4c 89 f6 e8 dc 7d ff ff 5b 41 5e 5d c3 0f 1f 80 00 00 00 00 55 48 89 e5 41 57 41 56 41 55 41 54 53 <50> 89 f3 49 89 fc 48 b8 00 00 00 00 00 fc ff df 4c 8d 77 38 4d 89 [ 164.709537][ C0] RSP: 0018:ffffc90001f96e60 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 164.717930][ C0] RAX: ffffffff81486ea4 RBX: ffffea000292f2c0 RCX: ffff88809d83c400 [ 164.725886][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffea000292f2c0 [ 164.735316][ C0] RBP: ffffc90001f96e88 R08: 000000000003a768 R09: ffffed1012b3e33f [ 164.743276][ C0] R10: ffffed1012b3e33f R11: 0000000000000000 R12: ffff8880a29fe6a0 [ 164.751229][ C0] R13: dffffc0000000000 R14: 1ffff1101453fcd4 R15: ffff8880959f19e8 [ 164.759198][ C0] ? free_thread_stack+0x124/0x590 [ 164.764301][ C0] free_thread_stack+0x12e/0x590 [ 164.769225][ C0] put_task_stack+0xa3/0x130 [ 164.773801][ C0] finish_task_switch+0x3f1/0x550 [ 164.778821][ C0] __schedule+0x9a8/0xcc0 [ 164.783143][ C0] ? ___preempt_schedule+0x16/0x18 [ 164.788237][ C0] preempt_schedule+0xdb/0x120 [ 164.793332][ C0] ? addrconf_notify+0x1c17/0x3c90 [ 164.798425][ C0] ___preempt_schedule+0x16/0x18 [ 164.803347][ C0] ? mark_lock+0x107/0x1650 [ 164.807834][ C0] __local_bh_enable_ip+0x17d/0x240 [ 164.813015][ C0] ? addrconf_notify+0x1c17/0x3c90 [ 164.818108][ C0] _raw_write_unlock_bh+0x2f/0x40 [ 164.823117][ C0] addrconf_notify+0x1c17/0x3c90 [ 164.828064][ C0] ? clusterip_netdev_event+0x48b/0x4a0 [ 164.833614][ C0] raw_notifier_call_chain+0xec/0x190 [ 164.838971][ C0] __dev_notify_flags+0x24d/0x4d0 [ 164.843982][ C0] dev_change_flags+0xec/0x190 [ 164.848731][ C0] do_setlink+0xb2e/0x3960 [ 164.853137][ C0] ? __nla_validate_parse+0x18cd/0x1f40 [ 164.858677][ C0] ? __kasan_check_read+0x11/0x20 [ 164.863688][ C0] rtnl_newlink+0x14dd/0x1bd0 [ 164.868348][ C0] ? rtnl_newlink+0x371/0x1bd0 [ 164.873152][ C0] ? __mutex_lock_common+0x4f5/0x2e10 [ 164.878505][ C0] ? rtnetlink_rcv_msg+0x83c/0xd40 [ 164.883597][ C0] ? rcu_lock_release+0x9/0x30 [ 164.888530][ C0] ? rtnl_setlink+0x490/0x490 [ 164.893222][ C0] rtnetlink_rcv_msg+0x889/0xd40 [ 164.898179][ C0] ? rcu_lock_release+0x9/0x30 [ 164.902948][ C0] ? rcu_lock_release+0x9/0x30 [ 164.907708][ C0] ? rcu_lock_release+0x9/0x30 [ 164.912463][ C0] netlink_rcv_skb+0x19e/0x3d0 [ 164.917219][ C0] ? rtnetlink_bind+0x80/0x80 [ 164.921891][ C0] rtnetlink_rcv+0x1c/0x20 [ 164.926299][ C0] netlink_unicast+0x767/0x920 [ 164.931057][ C0] netlink_sendmsg+0xa21/0xd40 [ 164.935814][ C0] ? netlink_getsockopt+0x9f0/0x9f0 [ 164.940998][ C0] __sys_sendto+0x442/0x5e0 [ 164.945495][ C0] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 164.951546][ C0] ? prepare_exit_to_usermode+0x221/0x5b0 [ 164.957249][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 164.962691][ C0] __x64_sys_sendto+0xe5/0x100 [ 164.967439][ C0] do_syscall_64+0xf7/0x1c0 [ 164.971933][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 164.977809][ C0] RIP: 0033:0x414373 [ 164.981692][ C0] Code: ff 0f 83 b0 19 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 83 3d fd 40 66 00 00 75 17 49 89 ca b8 2c 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 81 19 00 00 c3 48 83 ec 08 e8 87 fa ff ff [ 165.001279][ C0] RSP: 002b:00007ffd7ec62638 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 165.009673][ C0] RAX: ffffffffffffffda RBX: 0000000000a72200 RCX: 0000000000414373 [ 165.017631][ C0] RDX: 000000000000002c RSI: 0000000000a72250 RDI: 0000000000000003 [ 165.025585][ C0] RBP: 0000000000000000 R08: 00007ffd7ec62640 R09: 000000000000000c [ 165.033541][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 165.041495][ C0] R13: 0000000000000000 R14: 0000000000a72250 R15: 0000000000000003