[ 43.477326][ T23] audit: type=1800 audit(1578482627.744:27): pid=8136 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [ 43.510247][ T23] audit: type=1800 audit(1578482627.744:28): pid=8136 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 44.222036][ T23] audit: type=1800 audit(1578482628.524:29): pid=8136 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 44.242277][ T23] audit: type=1800 audit(1578482628.524:30): pid=8136 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.113' (ECDSA) to the list of known hosts. 2020/01/08 11:23:59 fuzzer started 2020/01/08 11:24:00 dialing manager at 10.128.0.26:35703 2020/01/08 11:24:00 syscalls: 2824 2020/01/08 11:24:00 code coverage: enabled 2020/01/08 11:24:00 comparison tracing: enabled 2020/01/08 11:24:00 extra coverage: enabled 2020/01/08 11:24:00 setuid sandbox: enabled 2020/01/08 11:24:00 namespace sandbox: enabled 2020/01/08 11:24:00 Android sandbox: /sys/fs/selinux/policy does not exist 2020/01/08 11:24:00 fault injection: enabled 2020/01/08 11:24:00 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/01/08 11:24:00 net packet injection: enabled 2020/01/08 11:24:00 net device setup: enabled 2020/01/08 11:24:00 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/01/08 11:24:00 devlink PCI setup: PCI device 0000:00:10.0 is not available 11:24:01 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(0x0, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x6) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x2, 0x105084) r3 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r1, r2, 0x0, 0x102000004) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f0000000040)=0x81) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000340)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000000)) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x20000, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r5, 0x12, 0x3, 0x0, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vbi(0x0, 0x2, 0x2) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 11:24:01 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280), 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) write$P9_RCLUNK(r1, &(0x7f0000000000)={0x7}, 0x7) fallocate(r1, 0x0, 0x0, 0x2000402) fallocate(r0, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000002c0)={0x4, r1, 0x0, 0x8}) syzkaller login: [ 57.575464][ T8301] IPVS: ftp: loaded support on port[0] = 21 [ 57.701995][ T8301] chnl_net:caif_netlink_parms(): no params data found [ 57.792585][ T8301] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.807347][ T8301] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.815229][ T8301] device bridge_slave_0 entered promiscuous mode 11:24:02 executing program 2: r0 = io_uring_setup(0xd, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) io_uring_enter(r0, 0x0, 0x7, 0x1, 0x0, 0x0) [ 57.839517][ T8301] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.846670][ T8301] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.854848][ T8304] IPVS: ftp: loaded support on port[0] = 21 [ 57.867899][ T8301] device bridge_slave_1 entered promiscuous mode [ 57.914140][ T8301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.935716][ T8301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.983533][ T8301] team0: Port device team_slave_0 added [ 58.022770][ T8301] team0: Port device team_slave_1 added 11:24:02 executing program 3: unshare(0x2000400) r0 = socket(0x11, 0x80a, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x21, 0x0, 0x0) [ 58.085834][ T8304] chnl_net:caif_netlink_parms(): no params data found [ 58.141078][ T8301] device hsr_slave_0 entered promiscuous mode [ 58.218509][ T8301] device hsr_slave_1 entered promiscuous mode 11:24:02 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = dup(r0) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000180)=0x40, 0x4) [ 58.283561][ T8307] IPVS: ftp: loaded support on port[0] = 21 [ 58.306723][ T8309] IPVS: ftp: loaded support on port[0] = 21 [ 58.370084][ T8304] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.379341][ T8304] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.399085][ T8304] device bridge_slave_0 entered promiscuous mode [ 58.409818][ T8304] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.416900][ T8304] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.448048][ T8304] device bridge_slave_1 entered promiscuous mode [ 58.542493][ T8304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.584356][ T8304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.623945][ T8311] IPVS: ftp: loaded support on port[0] = 21 11:24:02 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x2, 0x1, 0x1c}]}, &(0x7f0000000040)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 58.626241][ T8301] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 58.702987][ T8301] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 58.750106][ T8301] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 58.800292][ T8304] team0: Port device team_slave_0 added [ 58.808425][ T8304] team0: Port device team_slave_1 added [ 58.843268][ T8301] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 58.926703][ T8307] chnl_net:caif_netlink_parms(): no params data found [ 58.956066][ T8313] IPVS: ftp: loaded support on port[0] = 21 [ 58.968702][ T8309] chnl_net:caif_netlink_parms(): no params data found [ 59.029853][ T8304] device hsr_slave_0 entered promiscuous mode [ 59.067603][ T8304] device hsr_slave_1 entered promiscuous mode [ 59.107342][ T8304] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.115055][ T8304] Cannot create hsr debugfs directory [ 59.224537][ T8307] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.231950][ T8307] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.239884][ T8307] device bridge_slave_0 entered promiscuous mode [ 59.263288][ T8309] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.271624][ T8309] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.279286][ T8309] device bridge_slave_0 entered promiscuous mode [ 59.288790][ T8311] chnl_net:caif_netlink_parms(): no params data found [ 59.308255][ T8307] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.315312][ T8307] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.328096][ T8307] device bridge_slave_1 entered promiscuous mode [ 59.341396][ T8309] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.348561][ T8309] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.356092][ T8309] device bridge_slave_1 entered promiscuous mode [ 59.416888][ T8307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.429987][ T8309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.446141][ T8301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.453608][ T8304] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 59.480105][ T8307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.495889][ T8309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.506149][ T8304] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 59.534903][ T8304] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 59.579588][ T8304] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 59.655283][ T8307] team0: Port device team_slave_0 added [ 59.661720][ T8311] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.669041][ T8311] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.676723][ T8311] device bridge_slave_0 entered promiscuous mode [ 59.686646][ T8311] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.693730][ T8311] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.701722][ T8311] device bridge_slave_1 entered promiscuous mode [ 59.710266][ T8309] team0: Port device team_slave_0 added [ 59.719514][ T8309] team0: Port device team_slave_1 added [ 59.736992][ T8301] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.745708][ T8307] team0: Port device team_slave_1 added [ 59.810761][ T8309] device hsr_slave_0 entered promiscuous mode [ 59.847725][ T8309] device hsr_slave_1 entered promiscuous mode [ 59.898098][ T8309] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.905666][ T8309] Cannot create hsr debugfs directory [ 59.918269][ T8317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.926659][ T8317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.028937][ T8307] device hsr_slave_0 entered promiscuous mode [ 60.067491][ T8307] device hsr_slave_1 entered promiscuous mode [ 60.117358][ T8307] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.124934][ T8307] Cannot create hsr debugfs directory [ 60.137434][ T3910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.146257][ T3910] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.157563][ T3910] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.164675][ T3910] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.177939][ T8311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.220796][ T3887] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.228901][ T3887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.237418][ T3887] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.245906][ T3887] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.253010][ T3887] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.261498][ T3887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.271877][ T8311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.296004][ T8311] team0: Port device team_slave_0 added [ 60.304888][ T8311] team0: Port device team_slave_1 added [ 60.329874][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.347594][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.355975][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.364645][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.373088][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.381753][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.390070][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.398969][ T8317] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.410723][ T8313] chnl_net:caif_netlink_parms(): no params data found [ 60.435806][ T8301] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.452689][ T8301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.519402][ T8311] device hsr_slave_0 entered promiscuous mode [ 60.558532][ T8311] device hsr_slave_1 entered promiscuous mode [ 60.597531][ T8311] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.605091][ T8311] Cannot create hsr debugfs directory [ 60.614352][ T8317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.623610][ T8317] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.725654][ T8309] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 60.791833][ T3921] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.799344][ T3921] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.825611][ T8313] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.833831][ T8313] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.842676][ T8313] device bridge_slave_0 entered promiscuous mode [ 60.850854][ T8309] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 60.909469][ T8307] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 60.952346][ T8307] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 61.002106][ T8301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.009258][ T8313] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.016317][ T8313] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.024488][ T8313] device bridge_slave_1 entered promiscuous mode [ 61.035026][ T8309] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 61.102361][ T8309] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 61.159074][ T8307] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 61.202915][ T8304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.230007][ T8307] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 61.277540][ T8313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.295052][ T8313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.332135][ T8313] team0: Port device team_slave_0 added [ 61.340034][ T8313] team0: Port device team_slave_1 added [ 61.354803][ T8304] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.366655][ T3910] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.375698][ T3910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.384333][ T3910] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.392040][ T3910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.421664][ T8311] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 61.464650][ T8301] device veth0_vlan entered promiscuous mode [ 61.509012][ T8313] device hsr_slave_0 entered promiscuous mode [ 61.538552][ T8313] device hsr_slave_1 entered promiscuous mode [ 61.587462][ T8313] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.595055][ T8313] Cannot create hsr debugfs directory [ 61.600992][ T3921] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.609865][ T3921] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.618128][ T3921] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.626465][ T3921] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.634894][ T3921] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.641955][ T3921] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.651201][ T8311] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 61.690645][ T8311] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 61.742373][ T8301] device veth1_vlan entered promiscuous mode [ 61.773238][ T3921] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.781182][ T3921] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.788887][ T3921] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.796683][ T3921] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.805042][ T3921] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.813760][ T3921] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.822364][ T3921] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.829445][ T3921] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.848628][ T8311] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 61.908050][ T8309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.922911][ T3921] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.943707][ T3921] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.952886][ T3921] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.961275][ T3921] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.970072][ T3921] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.979015][ T3921] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.004405][ T3921] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.013468][ T3921] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.022186][ T3921] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.030493][ T3921] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.050349][ T8307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.097200][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 167.104074][ C0] rcu: 0-...!: (10499 ticks this GP) idle=336/1/0x4000000000000002 softirq=10239/10239 fqs=9 [ 167.114567][ C0] (t=10500 jiffies g=6281 q=115) [ 167.119582][ C0] rcu: rcu_preempt kthread starved for 10481 jiffies! g6281 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 167.130667][ C0] rcu: RCU grace-period kthread stack dump: [ 167.136544][ C0] rcu_preempt R running task 28984 10 2 0x80004000 [ 167.144431][ C0] Call Trace: [ 167.147719][ C0] __schedule+0x9a0/0xcc0 [ 167.152046][ C0] schedule+0x181/0x210 [ 167.156191][ C0] schedule_timeout+0x14f/0x240 [ 167.161028][ C0] ? run_local_timers+0x120/0x120 [ 167.166046][ C0] rcu_gp_kthread+0xed8/0x1770 [ 167.170825][ C0] kthread+0x332/0x350 [ 167.174880][ C0] ? rcu_report_qs_rsp+0x140/0x140 [ 167.179982][ C0] ? kthread_blkcg+0xe0/0xe0 [ 167.184666][ C0] ret_from_fork+0x24/0x30 [ 167.189080][ C0] NMI backtrace for cpu 0 [ 167.193397][ C0] CPU: 0 PID: 8313 Comm: syz-executor.5 Not tainted 5.5.0-rc5-syzkaller #0 [ 167.201965][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 167.212006][ C0] Call Trace: [ 167.215284][ C0] [ 167.218128][ C0] dump_stack+0x1fb/0x318 [ 167.222450][ C0] nmi_cpu_backtrace+0xaf/0x1a0 [ 167.227288][ C0] ? nmi_trigger_cpumask_backtrace+0x16d/0x290 [ 167.233430][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 167.239483][ C0] nmi_trigger_cpumask_backtrace+0x174/0x290 [ 167.245451][ C0] arch_trigger_cpumask_backtrace+0x10/0x20 [ 167.251334][ C0] rcu_dump_cpu_stacks+0x15a/0x220 [ 167.256446][ C0] rcu_sched_clock_irq+0xe25/0x1ad0 [ 167.261633][ C0] ? trace_hardirqs_off+0x74/0x80 [ 167.266644][ C0] update_process_times+0x12d/0x180 [ 167.271832][ C0] tick_sched_timer+0x263/0x420 [ 167.276810][ C0] ? tick_setup_sched_timer+0x3d0/0x3d0 [ 167.282358][ C0] __hrtimer_run_queues+0x403/0x840 [ 167.287573][ C0] hrtimer_interrupt+0x38c/0xda0 [ 167.292527][ C0] ? debug_smp_processor_id+0x9/0x20 [ 167.297809][ C0] smp_apic_timer_interrupt+0x109/0x280 [ 167.303352][ C0] apic_timer_interrupt+0xf/0x20 [ 167.308279][ C0] [ 167.311212][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x22/0x50 [ 167.317356][ C0] Code: 84 f4 3b 00 5b 5d c3 cc 48 8b 04 24 65 48 8b 0c 25 c0 1d 02 00 65 8b 15 38 5f 8b 7e f7 c2 00 01 1f 00 75 2c 8b 91 80 13 00 00 <83> fa 02 75 21 48 8b 91 88 13 00 00 48 8b 32 48 8d 7e 01 8b 89 84 [ 167.336950][ C0] RSP: 0018:ffffc90002386eb0 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 167.345350][ C0] RAX: ffffffff814897d3 RBX: 0000000000000000 RCX: ffff8880974c81c0 [ 167.353436][ C0] RDX: 0000000000000000 RSI: 00000000fffffffc RDI: ffffea000247f540 [ 167.361503][ C0] RBP: ffffc90002386ed8 R08: 000000000003a728 R09: fffffbfff124248a [ 167.369466][ C0] R10: fffffbfff124248a R11: 0000000000000000 R12: dffffc0000000000 [ 167.377427][ C0] R13: dffffc0000000000 R14: 00000000fffffffc R15: ffff8880a83c9778 [ 167.385408][ C0] ? mod_memcg_page_state+0x123/0x190 [ 167.390776][ C0] ? mod_memcg_page_state+0x123/0x190 [ 167.396135][ C0] free_thread_stack+0x168/0x590 [ 167.401063][ C0] put_task_stack+0xa3/0x130 [ 167.405642][ C0] finish_task_switch+0x3f1/0x550 [ 167.410658][ C0] __schedule+0x9a8/0xcc0 [ 167.414982][ C0] ? stack_trace_save+0x150/0x150 [ 167.419992][ C0] ? ___preempt_schedule_notrace+0x16/0x27 [ 167.425785][ C0] preempt_schedule_notrace+0xdb/0x120 [ 167.431233][ C0] ___preempt_schedule_notrace+0x16/0x27 [ 167.436852][ C0] ? rcu_is_watching+0x57/0xa0 [ 167.441626][ C0] rcu_is_watching+0x82/0xa0 [ 167.446223][ C0] __kernel_text_address+0x74/0x110 [ 167.451441][ C0] unwind_get_return_address+0x4c/0x90 [ 167.456906][ C0] arch_stack_walk+0x98/0xe0 [ 167.461513][ C0] stack_trace_save+0xb6/0x150 [ 167.466391][ C0] __kasan_kmalloc+0x11c/0x1b0 [ 167.471156][ C0] ? __kasan_kmalloc+0x11c/0x1b0 [ 167.476090][ C0] ? kasan_slab_alloc+0xf/0x20 [ 167.480847][ C0] ? kmem_cache_alloc_trace+0x1fa/0x2f0 [ 167.486486][ C0] ? inetdev_init+0x80/0x3f0 [ 167.491067][ C0] ? inetdev_event+0x22f/0x1350 [ 167.495913][ C0] ? raw_notifier_call_chain+0xec/0x190 [ 167.501456][ C0] ? register_netdevice+0x143b/0x1950 [ 167.506931][ C0] ? nsim_create+0x1d4/0x230 [ 167.511521][ C0] ? __nsim_dev_port_add+0x289/0x4d0 [ 167.516805][ C0] ? nsim_dev_probe+0xb55/0xef0 [ 167.521648][ C0] ? nsim_bus_probe+0x15/0x20 [ 167.526311][ C0] ? really_probe+0x71c/0xf40 [ 167.530973][ C0] ? driver_probe_device+0xfc/0x260 [ 167.536166][ C0] ? __device_attach_driver+0x336/0x3f0 [ 167.541699][ C0] ? bus_for_each_drv+0x12b/0x180 [ 167.546714][ C0] ? __device_attach+0x1ea/0x390 [ 167.551645][ C0] ? device_initial_probe+0x1a/0x20 [ 167.556832][ C0] ? bus_probe_device+0xb9/0x1f0 [ 167.561764][ C0] ? device_add+0x1710/0x1ad0 [ 167.566431][ C0] ? device_register+0x1d/0x20 [ 167.571181][ C0] ? new_device_store+0x286/0x510 [ 167.576191][ C0] ? bus_attr_store+0x78/0x90 [ 167.580858][ C0] ? sysfs_kf_write+0x281/0x2f0 [ 167.585710][ C0] ? kernfs_fop_write+0x3fd/0x500 [ 167.590729][ C0] ? __vfs_write+0xb8/0x740 [ 167.595219][ C0] ? vfs_write+0x275/0x590 [ 167.599634][ C0] ? ksys_write+0x117/0x220 [ 167.604133][ C0] ? __x64_sys_write+0x7b/0x90 [ 167.608886][ C0] ? do_syscall_64+0xf7/0x1c0 [ 167.613552][ C0] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 167.619614][ C0] ? ___preempt_schedule_notrace+0x16/0x27 [ 167.625430][ C0] ? lockdep_hardirqs_on+0x3c5/0x7d0 [ 167.630707][ C0] ? kmem_cache_alloc_trace+0x199/0x2f0 [ 167.636246][ C0] kasan_slab_alloc+0xf/0x20 [ 167.640827][ C0] kmem_cache_alloc_trace+0x1fa/0x2f0 [ 167.646187][ C0] ? inetdev_init+0x80/0x3f0 [ 167.650766][ C0] inetdev_init+0x80/0x3f0 [ 167.655169][ C0] inetdev_event+0x22f/0x1350 [ 167.659835][ C0] ? netdev_upper_walk+0x1a0/0x1a0 [ 167.664929][ C0] ? add_default_gids+0xe0/0xe0 [ 167.669764][ C0] ? enum_all_gids_of_dev_cb+0x2d0/0x2d0 [ 167.675381][ C0] ? del_netdev_ips+0x30/0x30 [ 167.680049][ C0] raw_notifier_call_chain+0xec/0x190 [ 167.685412][ C0] register_netdevice+0x143b/0x1950 [ 167.690616][ C0] nsim_create+0x1d4/0x230 [ 167.695025][ C0] __nsim_dev_port_add+0x289/0x4d0 [ 167.700126][ C0] ? debugfs_create_file_unsafe+0x4a/0x60 [ 167.705836][ C0] ? nsim_bpf_dev_init+0x1eb/0x220 [ 167.710936][ C0] nsim_dev_probe+0xb55/0xef0 [ 167.715615][ C0] nsim_bus_probe+0x15/0x20 [ 167.720106][ C0] really_probe+0x71c/0xf40 [ 167.724601][ C0] driver_probe_device+0xfc/0x260 [ 167.729615][ C0] ? parse_option_str+0x1bf/0x200 [ 167.734627][ C0] __device_attach_driver+0x336/0x3f0 [ 167.739985][ C0] ? coredump_store+0x90/0x90 [ 167.744645][ C0] bus_for_each_drv+0x12b/0x180 [ 167.749488][ C0] __device_attach+0x1ea/0x390 [ 167.754244][ C0] device_initial_probe+0x1a/0x20 [ 167.759262][ C0] bus_probe_device+0xb9/0x1f0 [ 167.764013][ C0] device_add+0x1710/0x1ad0 [ 167.768519][ C0] device_register+0x1d/0x20 [ 167.773094][ C0] new_device_store+0x286/0x510 [ 167.777929][ C0] ? nsim_num_vf+0x50/0x50 [ 167.782333][ C0] bus_attr_store+0x78/0x90 [ 167.786819][ C0] ? bus_attr_show+0x90/0x90 [ 167.791398][ C0] sysfs_kf_write+0x281/0x2f0 [ 167.796070][ C0] ? sysfs_kf_read+0x370/0x370 [ 167.800821][ C0] kernfs_fop_write+0x3fd/0x500 [ 167.805660][ C0] ? kernfs_fop_read+0x580/0x580 [ 167.810584][ C0] __vfs_write+0xb8/0x740 [ 167.814932][ C0] ? rcu_read_lock_any_held+0x13d/0x1a0 [ 167.820467][ C0] ? __sb_start_write+0x382/0x430 [ 167.825481][ C0] vfs_write+0x275/0x590 [ 167.829715][ C0] ksys_write+0x117/0x220 [ 167.834034][ C0] __x64_sys_write+0x7b/0x90 [ 167.838615][ C0] do_syscall_64+0xf7/0x1c0 [ 167.843125][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 167.849007][ C0] RIP: 0033:0x414a00 [ 167.852899][ C0] Code: b0 89 c8 f7 d8 eb ed b8 6e 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 83 3d 6d 3a 66 00 00 75 14 b8 01 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 c4 1b 00 00 c3 48 83 ec 08 e8 ca fc ff ff [ 167.872497][ C0] RSP: 002b:00007ffc2cb0aaa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 167.880900][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000414a00 [ 167.888860][ C0] RDX: 0000000000000003 RSI: 00007ffc2cb0aad0 RDI: 0000000000000004 [ 167.896819][ C0] RBP: 00007ffc2cb0aad0 R08: 0000000000000000 R09: 0000000000000003 [ 167.904782][ C0] R10: 0000000000000075 R11: 0000000000000246 R12: 00000000004c05e5 [ 167.912744][ C0] R13: 0000000000000004 R14: 0000000000000000 R15: 0000000000000000