[ 42.632347][ T23] audit: type=1800 audit(1575320798.203:27): pid=7955 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [ 42.711150][ T23] audit: type=1800 audit(1575320798.313:28): pid=7955 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 43.391470][ T23] audit: type=1800 audit(1575320798.993:29): pid=7955 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 43.410942][ T23] audit: type=1800 audit(1575320798.993:30): pid=7955 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.246' (ECDSA) to the list of known hosts. 2019/12/02 21:06:49 fuzzer started 2019/12/02 21:06:51 dialing manager at 10.128.0.26:38907 2019/12/02 21:06:51 syscalls: 2697 2019/12/02 21:06:51 code coverage: enabled 2019/12/02 21:06:51 comparison tracing: enabled 2019/12/02 21:06:51 extra coverage: extra coverage is not supported by the kernel 2019/12/02 21:06:51 setuid sandbox: enabled 2019/12/02 21:06:51 namespace sandbox: enabled 2019/12/02 21:06:51 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/02 21:06:51 fault injection: enabled 2019/12/02 21:06:51 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/02 21:06:51 net packet injection: enabled 2019/12/02 21:06:51 net device setup: enabled 2019/12/02 21:06:51 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/12/02 21:06:51 devlink PCI setup: PCI device 0000:00:10.0 is not available 21:06:52 executing program 0: unshare(0x40400) r0 = syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) ioctl$NBD_DISCONNECT(r0, 0x1262) 21:06:52 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000040)) syzkaller login: [ 56.862490][ T8118] IPVS: ftp: loaded support on port[0] = 21 [ 56.958681][ T8120] IPVS: ftp: loaded support on port[0] = 21 21:06:52 executing program 2: r0 = semget$private(0x0, 0x7, 0x0) semop(r0, &(0x7f0000000140)=[{0x0, 0x6}, {0x0, 0x7fff}], 0x2) [ 57.061145][ T8118] chnl_net:caif_netlink_parms(): no params data found [ 57.179167][ T8118] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.186823][ T8118] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.194410][ T8118] device bridge_slave_0 entered promiscuous mode [ 57.209513][ T8118] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.217201][ T8118] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.226974][ T8118] device bridge_slave_1 entered promiscuous mode [ 57.241027][ T8125] IPVS: ftp: loaded support on port[0] = 21 [ 57.247157][ T8120] chnl_net:caif_netlink_parms(): no params data found [ 57.289726][ T8118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.323791][ T8118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 21:06:52 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000040)) [ 57.340582][ T8120] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.349643][ T8120] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.358222][ T8120] device bridge_slave_0 entered promiscuous mode [ 57.392522][ T8120] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.400375][ T8120] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.409913][ T8120] device bridge_slave_1 entered promiscuous mode [ 57.430771][ T8118] team0: Port device team_slave_0 added [ 57.497744][ T8118] team0: Port device team_slave_1 added [ 57.539355][ T8120] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.566288][ T8120] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.592772][ T8125] chnl_net:caif_netlink_parms(): no params data found [ 57.615844][ T8128] IPVS: ftp: loaded support on port[0] = 21 [ 57.626043][ T8120] team0: Port device team_slave_0 added 21:06:53 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)='status\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14a5, 0x0, @perf_bp, 0x0, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet6_buf(r1, 0x29, 0x4e, 0x0, &(0x7f0000001100)) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) gettid() setsockopt$inet_opts(r0, 0x0, 0x8, &(0x7f0000000100), 0x0) shmget(0x0, 0x3000, 0x1, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000140)=""/237) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x400000000000009, 0x0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) [ 57.689599][ T8118] device hsr_slave_0 entered promiscuous mode [ 57.747034][ T8118] device hsr_slave_1 entered promiscuous mode [ 57.799871][ T8120] team0: Port device team_slave_1 added [ 57.841356][ T8125] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.865024][ T8125] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.872584][ T8125] device bridge_slave_0 entered promiscuous mode 21:06:53 executing program 5: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x20, r0, 0x3d, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x20}}, 0x0) r1 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xffd7) splice(r2, 0x0, r4, 0x0, 0x80000000, 0x0) [ 57.891770][ T8130] IPVS: ftp: loaded support on port[0] = 21 [ 57.904411][ T8125] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.925287][ T8125] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.932882][ T8125] device bridge_slave_1 entered promiscuous mode [ 57.978095][ T8120] device hsr_slave_0 entered promiscuous mode [ 58.025358][ T8120] device hsr_slave_1 entered promiscuous mode [ 58.085109][ T8120] debugfs: Directory 'hsr0' with parent '/' already present! [ 58.122410][ T8118] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 58.187356][ T8125] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.198485][ T8125] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.218371][ T8118] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 58.228348][ T8132] IPVS: ftp: loaded support on port[0] = 21 [ 58.270818][ T8118] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 58.328557][ T8118] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 58.388716][ T8125] team0: Port device team_slave_0 added [ 58.417700][ T8125] team0: Port device team_slave_1 added [ 58.463912][ T8120] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 58.597665][ T8125] device hsr_slave_0 entered promiscuous mode [ 58.635304][ T8125] device hsr_slave_1 entered promiscuous mode [ 58.675118][ T8125] debugfs: Directory 'hsr0' with parent '/' already present! [ 58.685048][ T8120] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 58.738604][ T8120] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 58.828491][ T8120] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 58.943338][ T8128] chnl_net:caif_netlink_parms(): no params data found [ 59.002167][ T8128] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.009972][ T8128] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.017722][ T8128] device bridge_slave_0 entered promiscuous mode [ 59.024765][ T8125] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 59.066752][ T8130] chnl_net:caif_netlink_parms(): no params data found [ 59.089016][ T8128] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.096210][ T8128] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.103723][ T8128] device bridge_slave_1 entered promiscuous mode [ 59.111310][ T8125] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 59.150666][ T8125] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 59.214317][ T8125] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 59.277728][ T8118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.298994][ T8128] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.309952][ T8128] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.354589][ T8132] chnl_net:caif_netlink_parms(): no params data found [ 59.390829][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.399432][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.417638][ T8128] team0: Port device team_slave_0 added [ 59.424751][ T8128] team0: Port device team_slave_1 added [ 59.432759][ T8118] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.447571][ T8130] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.454621][ T8130] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.462658][ T8130] device bridge_slave_0 entered promiscuous mode [ 59.472584][ T8130] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.480259][ T8130] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.488735][ T8130] device bridge_slave_1 entered promiscuous mode [ 59.507721][ T8130] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.529991][ T3191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.538667][ T3191] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.547112][ T3191] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.554198][ T3191] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.562518][ T3191] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.578925][ T8120] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.627343][ T8128] device hsr_slave_0 entered promiscuous mode [ 59.666285][ T8128] device hsr_slave_1 entered promiscuous mode [ 59.715045][ T8128] debugfs: Directory 'hsr0' with parent '/' already present! [ 59.722837][ T8130] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.741318][ T8135] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.749950][ T8135] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.758668][ T8135] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.765763][ T8135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.773691][ T8135] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.793644][ T8120] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.805837][ T8132] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.812886][ T8132] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.821102][ T8132] device bridge_slave_0 entered promiscuous mode [ 59.830463][ T8135] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.839020][ T8135] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.871537][ T8130] team0: Port device team_slave_0 added [ 59.881498][ T8132] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.889482][ T8132] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.897184][ T8132] device bridge_slave_1 entered promiscuous mode [ 59.904702][ T8128] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 59.957335][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.966306][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.974550][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.981655][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.989306][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.998131][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.016804][ T8130] team0: Port device team_slave_1 added [ 60.029055][ T8128] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 60.092833][ T8128] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 60.148091][ T8135] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.156521][ T8135] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.164688][ T8135] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.173284][ T8135] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.181551][ T8135] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.188629][ T8135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.196494][ T8135] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.204870][ T8135] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.213228][ T8135] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.221461][ T8135] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.229662][ T8135] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.237876][ T8135] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.248724][ T8135] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.259320][ T8125] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.272476][ T8118] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.283606][ T8128] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 60.328886][ T8136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.343805][ T8125] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.352076][ T8132] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.364088][ T8132] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.389666][ T8136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.398353][ T8136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.406855][ T8136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.426844][ T8136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.437791][ T8136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.446550][ T8136] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.453580][ T8136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.461916][ T8136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.496636][ T8130] device hsr_slave_0 entered promiscuous mode [ 60.565780][ T8130] device hsr_slave_1 entered promiscuous mode [ 60.625109][ T8130] debugfs: Directory 'hsr0' with parent '/' already present! [ 60.639528][ T8132] team0: Port device team_slave_0 added [ 60.651573][ T8132] team0: Port device team_slave_1 added [ 60.664757][ T8135] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.673494][ T8135] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.682186][ T8135] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.689279][ T8135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.730036][ T8121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.738808][ T8121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.750070][ T8121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.759970][ T8121] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.768901][ T8121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.777521][ T8121] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.786094][ T8121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.794411][ T8121] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.802729][ T8121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.811481][ T8121] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.820065][ T8121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.828425][ T8121] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.837181][ T8121] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.844815][ T8121] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.897815][ T8132] device hsr_slave_0 entered promiscuous mode [ 60.935502][ T8132] device hsr_slave_1 entered promiscuous mode [ 60.985021][ T8132] debugfs: Directory 'hsr0' with parent '/' already present! [ 61.001576][ T8118] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.012693][ T8125] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.028919][ T8138] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.036688][ T8138] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.044068][ T8138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.054140][ T8138] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.062492][ T8138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.070790][ T8138] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.103958][ T8132] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 61.155160][ T3191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.163364][ T3191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.188192][ T8132] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 61.250569][ T8120] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.263366][ T8132] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 61.307186][ T8132] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 61.360387][ T8130] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 166.384905][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 166.391668][ C0] rcu: 0-...!: (10499 ticks this GP) idle=0fa/1/0x4000000000000002 softirq=10679/10688 fqs=0 [ 166.402123][ C0] (t=10501 jiffies g=6209 q=60) [ 166.407049][ C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g6209 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 166.418127][ C0] rcu: RCU grace-period kthread stack dump: [ 166.423997][ C0] rcu_preempt R running task 29032 10 2 0x80004000 [ 166.431881][ C0] Call Trace: [ 166.435164][ C0] __schedule+0x9a0/0xcc0 [ 166.439485][ C0] schedule+0x181/0x210 [ 166.443632][ C0] schedule_timeout+0x14f/0x240 [ 166.448469][ C0] ? run_local_timers+0x120/0x120 [ 166.453483][ C0] rcu_gp_kthread+0xed8/0x1770 [ 166.458236][ C0] kthread+0x332/0x350 [ 166.462287][ C0] ? rcu_report_qs_rsp+0x140/0x140 [ 166.467378][ C0] ? kthread_blkcg+0xe0/0xe0 [ 166.471974][ C0] ret_from_fork+0x24/0x30 [ 166.476390][ C0] NMI backtrace for cpu 0 [ 166.480703][ C0] CPU: 0 PID: 7786 Comm: udevd Not tainted 5.4.0-syzkaller #0 [ 166.488134][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 166.498169][ C0] Call Trace: [ 166.501437][ C0] [ 166.504278][ C0] dump_stack+0x1fb/0x318 [ 166.508599][ C0] nmi_cpu_backtrace+0xaf/0x1a0 [ 166.513434][ C0] ? nmi_trigger_cpumask_backtrace+0x16d/0x290 [ 166.519575][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 166.525640][ C0] nmi_trigger_cpumask_backtrace+0x174/0x290 [ 166.531611][ C0] arch_trigger_cpumask_backtrace+0x10/0x20 [ 166.537487][ C0] rcu_dump_cpu_stacks+0x15a/0x220 [ 166.542585][ C0] rcu_sched_clock_irq+0xe25/0x1ad0 [ 166.547791][ C0] ? trace_hardirqs_off+0x74/0x80 [ 166.552831][ C0] update_process_times+0x12d/0x180 [ 166.558025][ C0] tick_sched_timer+0x263/0x420 [ 166.562866][ C0] ? tick_setup_sched_timer+0x3d0/0x3d0 [ 166.568399][ C0] __hrtimer_run_queues+0x403/0x840 [ 166.573604][ C0] hrtimer_interrupt+0x38c/0xda0 [ 166.578551][ C0] ? debug_smp_processor_id+0x9/0x20 [ 166.583825][ C0] smp_apic_timer_interrupt+0x109/0x280 [ 166.589354][ C0] apic_timer_interrupt+0xf/0x20 [ 166.594271][ C0] [ 166.597196][ C0] RIP: 0010:free_thread_stack+0x12e/0x590 [ 166.602901][ C0] Code: bf 00 00 00 00 00 ea ff ff 48 01 c7 be 03 00 00 00 e8 06 a2 60 00 e9 5d 04 00 00 e8 5c 2d 2e 00 48 89 df 31 f6 e8 42 af 6e 00 <43> 80 3c 2e 00 74 08 4c 89 e7 e8 43 a4 69 00 49 8b 1c 24 48 83 c3 [ 166.622486][ C0] RSP: 0018:ffffc90006dc7b18 EFLAGS: 00000292 ORIG_RAX: ffffffffffffff13 [ 166.630884][ C0] RAX: 0000000000000001 RBX: ffffea000280a700 RCX: 0000000000000000 [ 166.638846][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffea000280a700 [ 166.646803][ C0] RBP: ffffc90006dc7b50 R08: dffffc0000000000 R09: fffffbfff120248a [ 166.654760][ C0] R10: fffffbfff120248a R11: 0000000000000000 R12: ffff8880a81f4fa0 [ 166.663152][ C0] R13: dffffc0000000000 R14: 1ffff1101503e9f4 R15: ffff8880a800d568 [ 166.671125][ C0] ? free_thread_stack+0x12e/0x590 [ 166.676224][ C0] put_task_stack+0xa3/0x130 [ 166.680798][ C0] finish_task_switch+0x3f1/0x550 [ 166.685832][ C0] __schedule+0x9a8/0xcc0 [ 166.690162][ C0] preempt_schedule_irq+0xc1/0x140 [ 166.695265][ C0] retint_kernel+0x1b/0x2b [ 166.699670][ C0] RIP: 0010:kmem_cache_alloc+0x1a8/0x2e0 [ 166.705285][ C0] Code: 8b 7d d0 57 9d 0f 1f 44 00 00 e8 83 b1 ca ff eb 1e e8 1c af ca ff 48 83 3d 7c 10 59 07 00 0f 84 33 01 00 00 48 8b 7d d0 57 9d <0f> 1f 44 00 00 41 0f 18 0e e9 21 00 00 00 89 d8 c1 e8 08 83 e0 01 [ 166.724875][ C0] RSP: 0018:ffffc90006dc7d68 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13 [ 166.733271][ C0] RAX: ffff8880a3966b54 RBX: 0000000000000cc0 RCX: ffff8880a39662c0 [ 166.741227][ C0] RDX: 0000000000000000 RSI: ffffffff81be59ca RDI: 0000000000000286 [ 166.749183][ C0] RBP: ffffc90006dc7da0 R08: ffff8880a3966b18 R09: ffffed101553fbc1 [ 166.757138][ C0] R10: ffffed101553fbc1 R11: 0000000000000000 R12: ffff8880aa9f9a80 [ 166.765095][ C0] R13: ffff8880aa9f9a80 R14: ffff88806c200800 R15: 0000000000000cc0 [ 166.773073][ C0] ? getname_flags+0xba/0x640 [ 166.777739][ C0] ? getname_flags+0xba/0x640 [ 166.782403][ C0] getname_flags+0xba/0x640 [ 166.786921][ C0] user_path_at_empty+0x2d/0x50 [ 166.791762][ C0] do_utimes+0x1fe/0x2d0 [ 166.795993][ C0] ? prepare_exit_to_usermode+0x221/0x5b0 [ 166.801711][ C0] __x64_sys_utimensat+0xfb/0x1e0 [ 166.806723][ C0] ? do_syscall_64+0x1d/0x1c0 [ 166.811390][ C0] do_syscall_64+0xf7/0x1c0 [ 166.815903][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 166.821797][ C0] RIP: 0033:0x7efc31dc7a32 [ 166.826206][ C0] Code: 2b 00 31 d2 48 29 c2 64 89 11 48 83 c8 ff eb ea 90 90 90 90 90 90 90 90 48 85 f6 74 2b 4c 63 d1 48 63 ff b8 18 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 02 f3 c3 48 8b 15 d5 33 2b 00 f7 d8 64 89 02 [ 166.845801][ C0] RSP: 002b:00007fffd8f2dd78 EFLAGS: 00000206 ORIG_RAX: 0000000000000118 [ 166.854211][ C0] RAX: ffffffffffffffda RBX: 000000000141e600 RCX: 00007efc31dc7a32 [ 166.862172][ C0] RDX: 0000000000000000 RSI: 000000000141e600 RDI: ffffffffffffff9c [ 166.870129][ C0] RBP: 0000000001405250 R08: 0000000000000006 R09: 00007efc31e1c1d0 [ 166.878084][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 00000000000063b0 [ 166.886038][ C0] R13: 0000000000002b00 R14: 0000000000000000 R15: 0000000000000000