[ 43.098730][ T25] audit: type=1800 audit(1575333685.259:26): pid=7972 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 43.147321][ T25] audit: type=1800 audit(1575333685.259:27): pid=7972 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [ 43.170607][ T25] audit: type=1800 audit(1575333685.259:28): pid=7972 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 43.865174][ T25] audit: type=1800 audit(1575333686.059:29): pid=7972 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.85' (ECDSA) to the list of known hosts. 2019/12/03 00:41:33 fuzzer started 2019/12/03 00:41:35 dialing manager at 10.128.0.26:38907 2019/12/03 00:41:35 syscalls: 2697 2019/12/03 00:41:35 code coverage: enabled 2019/12/03 00:41:35 comparison tracing: enabled 2019/12/03 00:41:35 extra coverage: extra coverage is not supported by the kernel 2019/12/03 00:41:35 setuid sandbox: enabled 2019/12/03 00:41:35 namespace sandbox: enabled 2019/12/03 00:41:35 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/03 00:41:35 fault injection: enabled 2019/12/03 00:41:35 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/03 00:41:35 net packet injection: enabled 2019/12/03 00:41:35 net device setup: enabled 2019/12/03 00:41:35 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/12/03 00:41:35 devlink PCI setup: PCI device 0000:00:10.0 is not available 00:41:36 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0000001d00810ee00f80ecdb4cb9e307f029a00d0000002f003efb0a0002000300000000000f00060005000600", 0x2e}], 0x1}, 0x0) 00:41:36 executing program 1: r0 = socket(0x10, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300007c00010000000000000800000000000000ce204b70bebeee92b6b3e434"], 0x48}}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) syzkaller login: [ 54.100114][ T8139] IPVS: ftp: loaded support on port[0] = 21 [ 54.274205][ T8139] chnl_net:caif_netlink_parms(): no params data found [ 54.274935][ T8142] IPVS: ftp: loaded support on port[0] = 21 00:41:36 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000008880)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2}}, 0x0, 0x0, 0x0, 0x0, 0xdf8fcee03e08ccf}, 0x98) [ 54.356710][ T8139] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.382984][ T8139] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.391056][ T8139] device bridge_slave_0 entered promiscuous mode [ 54.417180][ T8139] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.433016][ T8139] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.440912][ T8139] device bridge_slave_1 entered promiscuous mode [ 54.496591][ T8139] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.514298][ T8139] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.557630][ T8139] team0: Port device team_slave_0 added [ 54.588500][ T8139] team0: Port device team_slave_1 added [ 54.601701][ T8142] chnl_net:caif_netlink_parms(): no params data found [ 54.610935][ T8144] IPVS: ftp: loaded support on port[0] = 21 00:41:36 executing program 3: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pipe(0x0) close(0xffffffffffffffff) r2 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @local, 0x2}, {0xa, 0x0, 0xfffffffd, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, 0x0, 0x0) dup2(r1, 0xffffffffffffffff) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) r5 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000580)={0x3, 0x3ca, 0xfa00, {{0xa, 0x4e22, 0x0, @mcast2}, {0xa, 0x0, 0x0, @local}, r6}}, 0x48) dup2(r3, r4) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @rand_addr="fe800000000000007029e5e36fc3e001"}}}, 0x284) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f0000000580)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @rand_addr="f40a250b388d101af1158aec7455e37b"}, {0xa, 0x0, 0x0, @local}}}, 0x48) r9 = dup2(0xffffffffffffffff, r7) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r9, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20a120}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16], 0x2}, 0x1, 0x0, 0x0, 0x20004000}, 0x20000812) r10 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, 0x0, 0x0) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r11, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @rand_addr="fe800000000000007029e5e36fc3e001"}, r12}}, 0x284) dup2(r10, 0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x80287010, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000001440)={0x0, 0x4}, 0x4) [ 54.726339][ T8139] device hsr_slave_0 entered promiscuous mode [ 54.783256][ T8139] device hsr_slave_1 entered promiscuous mode 00:41:37 executing program 4: r0 = socket(0x10, 0x2, 0x0) sendto(r0, &(0x7f0000000680)="120000001200e7ef3fb657d0d459b501bca1", 0x12, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x3d}, {&(0x7f00000000c0)=""/85, 0x4e4}, {&(0x7f00000024c0)=""/4096, 0x1058}, {&(0x7f0000000400)=""/120, 0x10c}, {&(0x7f0000000480)=""/60, 0xc6}, {&(0x7f0000000280)=""/77, 0x2f}, {&(0x7f0000000540)=""/154, 0x6dc}, {&(0x7f0000000000)=""/22, 0x1de}], 0x8, &(0x7f0000000140)=""/191, 0x1f9}}], 0x400000000000257, 0x6, &(0x7f0000003700)={0x77359400}) [ 54.888046][ T8142] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.899309][ T8142] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.923787][ T8142] device bridge_slave_0 entered promiscuous mode [ 54.957936][ T8142] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.959390][ T8147] IPVS: ftp: loaded support on port[0] = 21 [ 54.973021][ T8142] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.980938][ T8142] device bridge_slave_1 entered promiscuous mode [ 55.032642][ T8139] netdevsim netdevsim0 netdevsim0: renamed from eth0 00:41:37 executing program 5: r0 = memfd_create(&(0x7f0000000180)='GVL\x00\x00\x90U\x91\xaf\xd4\x01j\x12W\x11\x97e4\x0f\xc5m\xcc\x1b\xc2Y\x11\xdf\xd6\xb2n\xe1\x82\xd6\xb3\x1a\x98H\x06l\x0e\xa0\xa23\xba\nB\x87v\xaa\xe0\xec\xcb\xaf\xe7y\x87\x13\x06\xa8\xc4\xb4\x90\xa1\xef\xc5F\x80\xa0-\xcd{1uj1p\xfc\xe8\xc7uQ\xbfay\x8c\xb2\xca\xc8\xf5\x8be3\xa1,\x96\xc1k\x80\x04\x12\xb9!\xe6\x88\xc0U:\xe3\xc3\x92', 0x0) fallocate(r0, 0x3, 0xd52, 0x3ff) [ 55.147407][ T8139] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 55.215145][ T8139] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 55.246264][ T8139] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 55.295344][ T8142] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.326053][ T8149] IPVS: ftp: loaded support on port[0] = 21 [ 55.357209][ T8142] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.392648][ T8151] IPVS: ftp: loaded support on port[0] = 21 [ 55.408530][ T8142] team0: Port device team_slave_0 added [ 55.418154][ T8142] team0: Port device team_slave_1 added [ 55.427558][ T8144] chnl_net:caif_netlink_parms(): no params data found [ 55.515473][ T8142] device hsr_slave_0 entered promiscuous mode [ 55.553635][ T8142] device hsr_slave_1 entered promiscuous mode [ 55.593446][ T8142] debugfs: Directory 'hsr0' with parent '/' already present! [ 55.615490][ T8144] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.622605][ T8144] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.632343][ T8144] device bridge_slave_0 entered promiscuous mode [ 55.641562][ T8144] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.649339][ T8144] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.657151][ T8144] device bridge_slave_1 entered promiscuous mode [ 55.695058][ T8144] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.738525][ T8144] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.747840][ T8142] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 55.785336][ T8142] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 55.856096][ T8142] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 55.926220][ T8142] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 56.005916][ T8147] chnl_net:caif_netlink_parms(): no params data found [ 56.040062][ T8144] team0: Port device team_slave_0 added [ 56.049082][ T8144] team0: Port device team_slave_1 added [ 56.106407][ T8139] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.130217][ T8149] chnl_net:caif_netlink_parms(): no params data found [ 56.145742][ T8147] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.153114][ T8147] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.160660][ T8147] device bridge_slave_0 entered promiscuous mode [ 56.169162][ T8147] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.176279][ T8147] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.184198][ T8147] device bridge_slave_1 entered promiscuous mode [ 56.224668][ T8144] device hsr_slave_0 entered promiscuous mode [ 56.273415][ T8144] device hsr_slave_1 entered promiscuous mode [ 56.313056][ T8144] debugfs: Directory 'hsr0' with parent '/' already present! [ 56.340562][ T8151] chnl_net:caif_netlink_parms(): no params data found [ 56.361586][ T8147] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.396140][ T8147] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.408517][ T8139] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.427673][ T8149] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.436054][ T8149] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.444596][ T8149] device bridge_slave_0 entered promiscuous mode [ 56.457341][ T2995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.465433][ T2995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.504773][ T8149] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.511869][ T8149] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.522462][ T8149] device bridge_slave_1 entered promiscuous mode [ 56.540184][ T8149] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.554863][ T8147] team0: Port device team_slave_0 added [ 56.562602][ T8147] team0: Port device team_slave_1 added [ 56.571201][ T8151] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.578498][ T8151] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.586411][ T8151] device bridge_slave_0 entered promiscuous mode [ 56.597494][ T8149] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.616826][ T8151] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.624755][ T8151] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.632292][ T8151] device bridge_slave_1 entered promiscuous mode [ 56.652302][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.662542][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.671155][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.678381][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.687626][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.704475][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.714762][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.724494][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.731532][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.739438][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.749527][ T8149] team0: Port device team_slave_0 added [ 56.761145][ T8144] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 56.817387][ T8144] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 56.864657][ T8144] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 56.940018][ T8144] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 57.000690][ T8149] team0: Port device team_slave_1 added [ 57.014890][ T8142] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.056105][ T8147] device hsr_slave_0 entered promiscuous mode [ 57.093385][ T8147] device hsr_slave_1 entered promiscuous mode [ 57.162968][ T8147] debugfs: Directory 'hsr0' with parent '/' already present! [ 57.177123][ T8151] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.205041][ T8151] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.218356][ T2995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.227409][ T2995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.236388][ T2995] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.244932][ T2995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.253836][ T2995] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.262365][ T2995] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.336472][ T8149] device hsr_slave_0 entered promiscuous mode [ 57.393312][ T8149] device hsr_slave_1 entered promiscuous mode [ 57.442997][ T8149] debugfs: Directory 'hsr0' with parent '/' already present! [ 57.464044][ T8157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.472308][ T8157] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.486403][ T8142] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.519031][ T8157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.529070][ T8157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.551107][ T8151] team0: Port device team_slave_0 added [ 57.557521][ T8147] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 57.625391][ T8147] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 57.665470][ T8157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.674605][ T8157] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.683021][ T8157] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.690069][ T8157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.697694][ T8157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.706402][ T8157] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.714848][ T8157] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.721871][ T8157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.730962][ T8157] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.738867][ T8157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.747187][ T8157] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.764096][ T8151] team0: Port device team_slave_1 added [ 57.771774][ T8147] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 57.819608][ T8139] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.837817][ T8147] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 57.886805][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.895367][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.911860][ T8142] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 57.922698][ T8142] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.967011][ T8151] device hsr_slave_0 entered promiscuous mode [ 58.014106][ T8151] device hsr_slave_1 entered promiscuous mode [ 58.073183][ T8151] debugfs: Directory 'hsr0' with parent '/' already present! [ 58.092286][ T8139] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.104877][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.118410][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.127026][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.137423][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.145810][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.154089][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.162215][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.170478][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.179173][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.186642][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.194090][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.202365][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.210800][ T8149] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 58.276047][ T8149] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 58.334114][ T8149] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 58.375037][ T8149] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 58.441325][ T8144] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.490567][ T8142] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.520174][ T8161] bridge: RTM_DELNEIGH with unconfigured vlan 6 on bridge0 [ 58.532659][ T8162] bridge: RTM_DELNEIGH with unconfigured vlan 6 on bridge0 [ 163.492851][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 163.499684][ C0] rcu: 0-...!: (10499 ticks this GP) idle=af2/1/0x4000000000000002 softirq=11510/11510 fqs=2 [ 163.510187][ C0] (t=10501 jiffies g=6269 q=273) [ 163.515224][ C0] rcu: rcu_preempt kthread starved for 10498 jiffies! g6269 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 163.526327][ C0] rcu: RCU grace-period kthread stack dump: [ 163.532206][ C0] rcu_preempt R running task 29032 10 2 0x80004000 [ 163.540096][ C0] Call Trace: [ 163.543384][ C0] __schedule+0x9a0/0xcc0 [ 163.547710][ C0] schedule+0x181/0x210 [ 163.551859][ C0] schedule_timeout+0x14f/0x240 [ 163.556701][ C0] ? run_local_timers+0x120/0x120 [ 163.561722][ C0] rcu_gp_kthread+0xed8/0x1770 [ 163.566504][ C0] kthread+0x332/0x350 [ 163.570562][ C0] ? rcu_report_qs_rsp+0x140/0x140 [ 163.575658][ C0] ? kthread_blkcg+0xe0/0xe0 [ 163.580236][ C0] ret_from_fork+0x24/0x30 [ 163.584655][ C0] NMI backtrace for cpu 0 [ 163.588977][ C0] CPU: 0 PID: 8147 Comm: syz-executor.3 Not tainted 5.4.0-syzkaller #0 [ 163.597196][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 163.607237][ C0] Call Trace: [ 163.610509][ C0] [ 163.613350][ C0] dump_stack+0x1fb/0x318 [ 163.617667][ C0] nmi_cpu_backtrace+0xaf/0x1a0 [ 163.622509][ C0] ? nmi_trigger_cpumask_backtrace+0x16d/0x290 [ 163.628653][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 163.634709][ C0] nmi_trigger_cpumask_backtrace+0x174/0x290 [ 163.640680][ C0] arch_trigger_cpumask_backtrace+0x10/0x20 [ 163.646564][ C0] rcu_dump_cpu_stacks+0x15a/0x220 [ 163.651670][ C0] rcu_sched_clock_irq+0xe25/0x1ad0 [ 163.656866][ C0] ? trace_hardirqs_off+0x74/0x80 [ 163.661883][ C0] update_process_times+0x12d/0x180 [ 163.667071][ C0] tick_sched_timer+0x263/0x420 [ 163.671910][ C0] ? tick_setup_sched_timer+0x3d0/0x3d0 [ 163.677452][ C0] __hrtimer_run_queues+0x403/0x840 [ 163.682650][ C0] hrtimer_interrupt+0x38c/0xda0 [ 163.687589][ C0] ? debug_smp_processor_id+0x9/0x20 [ 163.694252][ C0] smp_apic_timer_interrupt+0x109/0x280 [ 163.699786][ C0] apic_timer_interrupt+0xf/0x20 [ 163.704703][ C0] [ 163.707630][ C0] RIP: 0010:mod_memcg_page_state+0x30/0x190 [ 163.713511][ C0] Code: 41 56 41 54 53 41 89 f6 48 89 fb e8 da 28 2e 00 48 83 c3 38 48 89 d8 48 c1 e8 03 49 bc 00 00 00 00 00 fc ff df 42 80 3c 20 00 <74> 08 48 89 df e8 b6 9f 69 00 48 8b 1b 48 85 db 0f 84 d8 00 00 00 [ 163.733102][ C0] RSP: 0018:ffffc90001fd74f8 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 163.741504][ C0] RAX: 1ffffd400047d347 RBX: ffffea00023e9a38 RCX: ffff8880a2b92300 [ 163.749460][ C0] RDX: 0000000000000000 RSI: 00000000fffffffc RDI: ffffea00023e9a00 [ 163.757448][ C0] RBP: ffffc90001fd7518 R08: dffffc0000000000 R09: fffffbfff120248a [ 163.765432][ C0] R10: fffffbfff120248a R11: 0000000000000000 R12: dffffc0000000000 [ 163.773390][ C0] R13: dffffc0000000000 R14: 00000000fffffffc R15: ffff8880a94c5868 [ 163.781371][ C0] ? mod_memcg_page_state+0x16/0x190 [ 163.786644][ C0] free_thread_stack+0x168/0x590 [ 163.791573][ C0] put_task_stack+0xa3/0x130 [ 163.796155][ C0] finish_task_switch+0x3f1/0x550 [ 163.801177][ C0] __schedule+0x9a8/0xcc0 [ 163.805505][ C0] ? ___preempt_schedule+0x16/0x18 [ 163.810603][ C0] preempt_schedule+0xdb/0x120 [ 163.815354][ C0] ___preempt_schedule+0x16/0x18 [ 163.820284][ C0] try_to_wake_up+0xe78/0x1050 [ 163.825071][ C0] wake_up_q+0x8c/0xe0 [ 163.829159][ C0] __mutex_unlock_slowpath+0x586/0x5b0 [ 163.834627][ C0] mutex_unlock+0x1b/0x30 [ 163.838955][ C0] __rtnl_unlock+0x2c/0xa0 [ 163.843389][ C0] netdev_run_todo+0xe5/0xe10 [ 163.848090][ C0] rtnetlink_rcv_msg+0x890/0xd40 [ 163.853051][ C0] ? rcu_lock_release+0x9/0x30 [ 163.857817][ C0] ? rcu_lock_release+0x9/0x30 [ 163.862587][ C0] ? rcu_lock_release+0x9/0x30 [ 163.867361][ C0] netlink_rcv_skb+0x19e/0x3d0 [ 163.872120][ C0] ? rtnetlink_bind+0x80/0x80 [ 163.876791][ C0] rtnetlink_rcv+0x1c/0x20 [ 163.881295][ C0] netlink_unicast+0x767/0x920 [ 163.886228][ C0] netlink_sendmsg+0xa21/0xd40 [ 163.891000][ C0] ? netlink_getsockopt+0x9f0/0x9f0 [ 163.896191][ C0] __sys_sendto+0x442/0x5e0 [ 163.900690][ C0] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 163.906748][ C0] ? prepare_exit_to_usermode+0x221/0x5b0 [ 163.912462][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 163.917907][ C0] __x64_sys_sendto+0xe5/0x100 [ 163.922658][ C0] do_syscall_64+0xf7/0x1c0 [ 163.927153][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 163.933032][ C0] RIP: 0033:0x414373 [ 163.936924][ C0] Code: ff 0f 83 b0 19 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 83 3d fd 40 66 00 00 75 17 49 89 ca b8 2c 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 81 19 00 00 c3 48 83 ec 08 e8 87 fa ff ff [ 163.956513][ C0] RSP: 002b:00007ffe70f97d18 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 163.964930][ C0] RAX: ffffffffffffffda RBX: 0000000000a72200 RCX: 0000000000414373 [ 163.972904][ C0] RDX: 000000000000002c RSI: 0000000000a72250 RDI: 0000000000000003 [ 163.980885][ C0] RBP: 0000000000000000 R08: 00007ffe70f97d20 R09: 000000000000000c [ 163.988852][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 163.996811][ C0] R13: 0000000000000000 R14: 0000000000a72250 R15: 0000000000000003