[ 43.703255][ T25] audit: type=1800 audit(1575356408.984:26): pid=7961 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 43.735883][ T25] audit: type=1800 audit(1575356408.984:27): pid=7961 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [ 43.755623][ T25] audit: type=1800 audit(1575356408.984:28): pid=7961 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 44.794875][ T25] audit: type=1800 audit(1575356410.104:29): pid=7961 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.119' (ECDSA) to the list of known hosts. 2019/12/03 07:00:20 fuzzer started 2019/12/03 07:00:22 dialing manager at 10.128.0.26:38907 2019/12/03 07:00:22 syscalls: 2697 2019/12/03 07:00:22 code coverage: enabled 2019/12/03 07:00:22 comparison tracing: enabled 2019/12/03 07:00:22 extra coverage: extra coverage is not supported by the kernel 2019/12/03 07:00:22 setuid sandbox: enabled 2019/12/03 07:00:22 namespace sandbox: enabled 2019/12/03 07:00:22 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/03 07:00:22 fault injection: enabled 2019/12/03 07:00:22 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/03 07:00:22 net packet injection: enabled 2019/12/03 07:00:22 net device setup: enabled 2019/12/03 07:00:22 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/12/03 07:00:22 devlink PCI setup: PCI device 0000:00:10.0 is not available 07:00:23 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3) readlinkat(r0, &(0x7f00000008c0)='./file0\x00', &(0x7f0000000900)=""/226, 0xe2) socket$inet(0x2, 0x80001, 0x84) syz_mount_image$xfs(&(0x7f00000002c0)='xfs\x00', &(0x7f0000000300)='./file0\x00', 0x4, 0x8, &(0x7f0000000740)=[{0x0, 0x0, 0xffffffff}, {&(0x7f0000000440)="8b5511c9820cf4b5b95bd71cebb0612d395c6d53b057b61cc37b849491691ac454a9312af0ce55f5ee71b5f65c006cf420", 0x31, 0x8}, {&(0x7f0000000480)="6f9a4d792350f8f3e4e5f5f1871248590ecf01047b2ac239cc69563f220567ce4487d1e305c26aee2c145e13e3cda9f86e3a74e9856cebf299c8508799818fde1b4a7f219b5c967ee3ee32068b3f59dda789c579e9480ccacc58757c6d09cdc608", 0x61, 0x81}, {&(0x7f0000000500), 0x0, 0x5}, {&(0x7f0000000580)="b2dc1c26e56d30ddaa14e5a8dc75e82ee7528b5f2de038cd3a60a58de473c06cd5f59a1cd61639b4857eb21e7c3651e7202f652ee1a3b31e5dd51ff1c1e5d68bd7db9947671c6624e2ba5103fb7fb9b5fbad51ed46717e3192012af427a2159105a73283a00ec963ace84e623b7b85b4", 0x70, 0x1}, {&(0x7f0000000600)="f32306f3a8d7d833d066bf05a793023d4cc1c23f583bd61d30708d1e81de132efa0f9ca075878e7a449df193b4b27e95", 0x30, 0x10001}, {&(0x7f0000000640)="4ab8a34d3f815a7adc000b4227fa171513769763a39522502854036937b1051ef6988f8038bb2d02299cce79b4b5385441d04080d025e444b28596f2861d94ba258a986eecba997eefb630d7d5cd690c7ed1df78c774e6efd049aad3b7ea18de37b73d2df8349b19533c1c208b2cd95ef76affec54bed256f22bbea53189cc1602de3d6a40db8f7ca1892a06a17b06811a9205e157ba4272a2189bf24e53602dd8d0362b798cec7bf4c9d5aea46d62474947de735184", 0xb6, 0x9}, {&(0x7f0000000700), 0x0, 0x6}], 0x20, &(0x7f0000000800)=ANY=[@ANYBLOB="6c6f67627566633d301bb76d0b2107f6b630303030303030303030302c6e6f71756f74612c716e6f656e666f7263652c616c6c6f6373697a653d2c6e6f616c69676e2c6c6f6762756630303030303030303030303030303030332c6673636f6e746578743d73797374656d5f7d2c636f6e746578743d73797361646d5f752c"]) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000880)=@assoc_value={0x0}, 0x0) socketpair$unix(0x1, 0xca9a27311d5f30a1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getdents64(r4, &(0x7f0000000100)=""/241, 0xf1) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) accept$alg(r5, 0x0, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r7 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r6, r7, 0x0, 0x1) ioctl$VIDIOC_RESERVED(r7, 0x5601, 0x0) sendmsg$sock(r5, &(0x7f0000002700)={&(0x7f0000000080)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x7, @remote, 0xfff}}, 0x80, &(0x7f00000025c0), 0x0, &(0x7f0000002680)=[@txtime={{0x18, 0x1, 0x3d, 0x100}}, @txtime={{0x18}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}], 0x48}, 0x8d4e39ec63eaba6e) io_setup(0xe35a, &(0x7f0000000a00)=0x0) pipe2(&(0x7f0000000b00), 0x80800) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) accept$alg(r9, 0x0, 0x0) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r11 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r10, r11, 0x0, 0x1) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r15 = fcntl$dupfd(r14, 0x0, r13) ioctl$PERF_EVENT_IOC_ENABLE(r15, 0x8912, 0x400200) r16 = open(&(0x7f0000000180)='./file1\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r16, 0x0) ftruncate(r16, 0x1045) readv(r16, &(0x7f0000000040)=[{&(0x7f0000002480)=""/4096, 0x1000}], 0x1) r17 = socket$alg(0x26, 0x5, 0x0) bind$alg(r17, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) r18 = accept$alg(r17, 0x0, 0x0) sendmmsg(r18, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x80, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, 0x0, 0x0, &(0x7f0000007b00)}}], 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) r19 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r20 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r19, r20, 0x0, 0x1) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001f80)='/proc/self/net/pfkey\x00', 0x10000, 0x0) r21 = socket$alg(0x26, 0x5, 0x0) bind$alg(r21, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) sendmmsg(0xffffffffffffffff, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x80, &(0x7f00000000c0)}}, {{0x0, 0x0, &(0x7f0000007ac0), 0x0, &(0x7f0000007b00)}}], 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) io_submit(r8, 0x200000a1, &(0x7f0000002100)) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x17, &(0x7f0000000040)={r2}, 0x10) 07:00:24 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000002300)=[{&(0x7f00000020c0)="2a4b08b9643c84c2663ab1594e31ace5882b018a1cd6fcb811c4391612afa9fe3ad26bd3c5061918e9ffcc5287a6b8305f66931fe5a94ad6558831c8e0894d6e2323d173d53a60c88f7133e37c7070e288229684049b99bf212856d3179f52e9a26da73f978b1b15cdc610e0", 0x6c}], 0x1}}], 0x1, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002000)="24b38b20d0ef3254115223ef6cf758327575c041e002a8089496079b1b45009349041eca724fdec73fab9b04e4a4a5af1d03000000000000007faa62b9c0d263274f4a010c4f93ef85516b042511f32764171ba9bd278cbe360c22f184073fe215dee02fe37161246323ee9c82c790add905b90a64adab9fef855d72abb637d460fc6fb5a9eec5535b119c9dfbde3f76323a5af634e4235a33d57e226460104ca0dedf1f0e8365cd43d106c41d009976034d6557bf8917cad630598f6e58fd1770012d78aabb64ffffffed00", 0xcc) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @remote}}, 0x5c) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0x0, 0x9}, 0x14) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x40, &(0x7f0000001fde), 0x4) syzkaller login: [ 58.779014][ T8123] IPVS: ftp: loaded support on port[0] = 21 [ 58.898135][ T8123] chnl_net:caif_netlink_parms(): no params data found [ 58.974328][ T8123] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.982357][ T8123] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.001684][ T8123] device bridge_slave_0 entered promiscuous mode [ 59.013585][ T8123] bridge0: port 2(bridge_slave_1) entered blocking state 07:00:24 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000080)={0x0}) clock_settime(0x0, &(0x7f00000000c0)={r3}) [ 59.020757][ T8123] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.039430][ T8123] device bridge_slave_1 entered promiscuous mode [ 59.056707][ T8126] IPVS: ftp: loaded support on port[0] = 21 [ 59.082933][ T8123] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.105498][ T8123] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.157399][ T8123] team0: Port device team_slave_0 added [ 59.175444][ T8123] team0: Port device team_slave_1 added 07:00:24 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x9, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x2, 0x1, 0x2c}]}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 59.335148][ T8123] device hsr_slave_0 entered promiscuous mode [ 59.362237][ T8123] device hsr_slave_1 entered promiscuous mode [ 59.429237][ T8129] IPVS: ftp: loaded support on port[0] = 21 [ 59.439383][ T8126] chnl_net:caif_netlink_parms(): no params data found 07:00:24 executing program 4: r0 = perf_event_open(&(0x7f0000000140)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) [ 59.514260][ T8131] IPVS: ftp: loaded support on port[0] = 21 [ 59.523558][ T8123] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 59.579898][ T8123] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 59.656510][ T8123] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 59.719713][ T8123] netdevsim netdevsim0 netdevsim3: renamed from eth3 07:00:25 executing program 5: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x15, 0x80005, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x5450, 0x0) [ 59.765989][ T8126] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.774142][ T8126] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.782327][ T8126] device bridge_slave_0 entered promiscuous mode [ 59.831051][ T8133] IPVS: ftp: loaded support on port[0] = 21 [ 59.845674][ T8126] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.855264][ T8126] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.868465][ T8126] device bridge_slave_1 entered promiscuous mode [ 59.880552][ T8123] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.887810][ T8123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.895837][ T8123] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.903111][ T8123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.960500][ T8135] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.963044][ T8136] IPVS: ftp: loaded support on port[0] = 21 [ 59.974076][ T8135] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.995619][ T8126] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.006393][ T8126] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.033693][ T8129] chnl_net:caif_netlink_parms(): no params data found [ 60.055277][ T8126] team0: Port device team_slave_0 added [ 60.062687][ T8126] team0: Port device team_slave_1 added [ 60.117925][ T8129] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.125820][ T8129] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.133780][ T8129] device bridge_slave_0 entered promiscuous mode [ 60.156439][ T8131] chnl_net:caif_netlink_parms(): no params data found [ 60.165254][ T8129] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.172708][ T8129] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.180302][ T8129] device bridge_slave_1 entered promiscuous mode [ 60.224168][ T8126] device hsr_slave_0 entered promiscuous mode [ 60.262709][ T8126] device hsr_slave_1 entered promiscuous mode [ 60.302641][ T8126] debugfs: Directory 'hsr0' with parent '/' already present! [ 60.358014][ T8129] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.393569][ T8129] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.409255][ T8131] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.418312][ T8131] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.426465][ T8131] device bridge_slave_0 entered promiscuous mode [ 60.478873][ T8123] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.488035][ T8131] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.495675][ T8131] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.503678][ T8131] device bridge_slave_1 entered promiscuous mode [ 60.524762][ T8131] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.538826][ T8126] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 60.588831][ T8131] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.604355][ T8129] team0: Port device team_slave_0 added [ 60.617215][ T8131] team0: Port device team_slave_0 added [ 60.626167][ T8126] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 60.653162][ T8126] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 60.704981][ T8126] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 60.754708][ T8131] team0: Port device team_slave_1 added [ 60.762061][ T8129] team0: Port device team_slave_1 added [ 60.768372][ T8133] chnl_net:caif_netlink_parms(): no params data found [ 60.837520][ T3891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.845938][ T3891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.884152][ T8129] device hsr_slave_0 entered promiscuous mode [ 60.941940][ T8129] device hsr_slave_1 entered promiscuous mode [ 60.981718][ T8129] debugfs: Directory 'hsr0' with parent '/' already present! [ 60.994188][ T8136] chnl_net:caif_netlink_parms(): no params data found [ 61.006181][ T8123] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.093423][ T8131] device hsr_slave_0 entered promiscuous mode [ 61.142235][ T8131] device hsr_slave_1 entered promiscuous mode [ 61.181816][ T8131] debugfs: Directory 'hsr0' with parent '/' already present! [ 61.229272][ T8133] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.240728][ T8133] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.249116][ T8133] device bridge_slave_0 entered promiscuous mode [ 61.287592][ T8129] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 61.364508][ T8129] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 61.403498][ T8133] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.410710][ T8133] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.418784][ T8133] device bridge_slave_1 entered promiscuous mode [ 61.426144][ T8131] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 61.488413][ T8136] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.495714][ T8136] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.503813][ T8136] device bridge_slave_0 entered promiscuous mode [ 61.510897][ T8140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.519614][ T8140] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.528278][ T8140] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.535379][ T8140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.554703][ T8129] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 61.603399][ T8129] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 61.680418][ T8131] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 61.743176][ T8136] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.750257][ T8136] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.758174][ T8136] device bridge_slave_1 entered promiscuous mode [ 61.766304][ T8140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.775519][ T8140] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.784030][ T8140] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.791064][ T8140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.798987][ T8140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.807852][ T8140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.816762][ T8140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.826194][ T8140] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.834804][ T8140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.843637][ T8140] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.856867][ T8123] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 61.868451][ T8123] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.894000][ T8131] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 61.957626][ T8131] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 62.014097][ T8140] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.022224][ T8140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.030505][ T8140] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.039129][ T8140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.047613][ T8140] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.056338][ T8140] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.065210][ T8133] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.076144][ T8133] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.098030][ T8136] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.109323][ T8136] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.160800][ T8133] team0: Port device team_slave_0 added [ 62.168395][ T8133] team0: Port device team_slave_1 added [ 62.186122][ T8136] team0: Port device team_slave_0 added [ 62.195547][ T8136] team0: Port device team_slave_1 added [ 62.215116][ T8142] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.222711][ T8142] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.250698][ T8123] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.304297][ T8133] device hsr_slave_0 entered promiscuous mode [ 62.351954][ T8133] device hsr_slave_1 entered promiscuous mode [ 62.411676][ T8133] debugfs: Directory 'hsr0' with parent '/' already present! [ 62.426383][ T8126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.494897][ T8136] device hsr_slave_0 entered promiscuous mode [ 62.532021][ T8136] device hsr_slave_1 entered promiscuous mode [ 62.581672][ T8136] debugfs: Directory 'hsr0' with parent '/' already present! [ 62.597301][ T8126] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.613954][ T8142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.622793][ T8142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.662210][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.677092][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.685886][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.693009][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.702006][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.711372][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.719823][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.726887][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.734992][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.744507][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.781985][ T8133] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 62.824582][ T8133] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 167.841502][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 167.848288][ C1] rcu: 1-...!: (10499 ticks this GP) idle=49a/1/0x4000000000000002 softirq=11544/11544 fqs=39 [ 167.858849][ C1] (t=10500 jiffies g=6337 q=147) [ 167.863867][ C1] rcu: rcu_preempt kthread starved for 10418 jiffies! g6337 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 167.874963][ C1] rcu: RCU grace-period kthread stack dump: [ 167.880845][ C1] rcu_preempt R running task 29032 10 2 0x80004000 [ 167.888740][ C1] Call Trace: [ 167.892031][ C1] __schedule+0x9a0/0xcc0 [ 167.896359][ C1] schedule+0x181/0x210 [ 167.900507][ C1] schedule_timeout+0x14f/0x240 [ 167.905350][ C1] ? run_local_timers+0x120/0x120 [ 167.910367][ C1] rcu_gp_kthread+0xed8/0x1770 [ 167.915135][ C1] kthread+0x332/0x350 [ 167.919195][ C1] ? rcu_report_qs_rsp+0x140/0x140 [ 167.924295][ C1] ? kthread_blkcg+0xe0/0xe0 [ 167.928878][ C1] ret_from_fork+0x24/0x30 [ 167.933298][ C1] NMI backtrace for cpu 1 [ 167.937621][ C1] CPU: 1 PID: 8145 Comm: syz-executor.0 Not tainted 5.4.0-syzkaller #0 [ 167.945844][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 167.955892][ C1] Call Trace: [ 167.959167][ C1] [ 167.962010][ C1] dump_stack+0x1fb/0x318 [ 167.966345][ C1] nmi_cpu_backtrace+0xaf/0x1a0 [ 167.971183][ C1] ? nmi_trigger_cpumask_backtrace+0x16d/0x290 [ 167.977327][ C1] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 167.983384][ C1] nmi_trigger_cpumask_backtrace+0x174/0x290 [ 167.989370][ C1] arch_trigger_cpumask_backtrace+0x10/0x20 [ 167.995257][ C1] rcu_dump_cpu_stacks+0x15a/0x220 [ 168.000368][ C1] rcu_sched_clock_irq+0xe25/0x1ad0 [ 168.005564][ C1] ? trace_hardirqs_off+0x74/0x80 [ 168.010582][ C1] update_process_times+0x12d/0x180 [ 168.015773][ C1] tick_sched_timer+0x263/0x420 [ 168.020616][ C1] ? tick_setup_sched_timer+0x3d0/0x3d0 [ 168.026161][ C1] __hrtimer_run_queues+0x403/0x840 [ 168.031361][ C1] hrtimer_interrupt+0x38c/0xda0 [ 168.036308][ C1] ? debug_smp_processor_id+0x9/0x20 [ 168.041587][ C1] smp_apic_timer_interrupt+0x109/0x280 [ 168.047122][ C1] apic_timer_interrupt+0xf/0x20 [ 168.052042][ C1] [ 168.054975][ C1] RIP: 0010:__memcg_kmem_uncharge+0x20c/0x2e0 [ 168.061029][ C1] Code: 36 15 bd 88 e8 65 db a4 ff 48 c7 c7 98 4b 0d 89 e8 59 97 00 00 bf 01 00 00 00 e8 2f e3 9b ff 65 8b 05 d4 fd 4a 7e 85 c0 74 53 <48> 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 49 8d 5f 10 48 89 df [ 168.081580][ C1] RSP: 0018:ffffc90002637698 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 168.089983][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000000 [ 168.097942][ C1] RDX: ffffc90001ec9000 RSI: 0000000000000000 RDI: ffffea00028b22c0 [ 168.105900][ C1] RBP: ffffc900026376c8 R08: 000000000003a768 R09: fffffbfff120248a [ 168.113859][ C1] R10: fffffbfff120248a R11: 0000000000000000 R12: ffffea00028b22c0 [ 168.121818][ C1] R13: 1ffffd400051645f R14: ffffea00028b22f8 R15: 0000000000000000 [ 168.129804][ C1] ? free_thread_stack+0x124/0x590 [ 168.134905][ C1] free_thread_stack+0x12e/0x590 [ 168.139835][ C1] put_task_stack+0xa3/0x130 [ 168.144418][ C1] finish_task_switch+0x3f1/0x550 [ 168.149439][ C1] __schedule+0x9a8/0xcc0 [ 168.153767][ C1] ? ___preempt_schedule+0x16/0x18 [ 168.158868][ C1] preempt_schedule+0xdb/0x120 [ 168.163649][ C1] ___preempt_schedule+0x16/0x18 [ 168.168602][ C1] try_to_wake_up+0xe78/0x1050 [ 168.173458][ C1] ? wake_up_state+0xb/0x10 [ 168.178013][ C1] wake_up_process+0x10/0x20 [ 168.182606][ C1] kthread_stop+0xf5/0x210 [ 168.187103][ C1] __loop_clr_fd+0x637/0x900 [ 168.191776][ C1] lo_ioctl+0x100e/0x2220 [ 168.196095][ C1] ? __kasan_slab_free+0x12a/0x1e0 [ 168.201193][ C1] ? kasan_slab_free+0xe/0x10 [ 168.205864][ C1] ? kfree+0x115/0x200 [ 168.209925][ C1] ? tomoyo_path_number_perm+0x4e1/0x640 [ 168.215546][ C1] ? tomoyo_file_ioctl+0x23/0x30 [ 168.220476][ C1] ? security_file_ioctl+0x6d/0xd0 [ 168.225581][ C1] ? __x64_sys_ioctl+0xa3/0x120 [ 168.230418][ C1] ? do_syscall_64+0xf7/0x1c0 [ 168.235084][ C1] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 168.241152][ C1] ? debug_check_no_obj_freed+0x505/0x5b0 [ 168.246881][ C1] ? rcu_lock_release+0x9/0x30 [ 168.251643][ C1] ? rcu_lock_release+0x9/0x30 [ 168.256397][ C1] ? lo_release+0x1f0/0x1f0 [ 168.260891][ C1] blkdev_ioctl+0x7f4/0x2ac0 [ 168.265476][ C1] ? tomoyo_path_number_perm+0x53e/0x640 [ 168.271121][ C1] block_ioctl+0xbd/0x100 [ 168.275445][ C1] ? blkdev_iopoll+0x100/0x100 [ 168.280201][ C1] do_vfs_ioctl+0x744/0x1730 [ 168.284778][ C1] ? __fget+0x471/0x510 [ 168.288932][ C1] ? tomoyo_file_ioctl+0x23/0x30 [ 168.293988][ C1] ? security_file_ioctl+0xa1/0xd0 [ 168.299120][ C1] __x64_sys_ioctl+0xe3/0x120 [ 168.303823][ C1] do_syscall_64+0xf7/0x1c0 [ 168.308347][ C1] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 168.314239][ C1] RIP: 0033:0x45a4e7 [ 168.318135][ C1] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 168.337730][ C1] RSP: 002b:00007f24c9d17a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 168.346127][ C1] RAX: ffffffffffffffda RBX: 00007f24c9d17b40 RCX: 000000000045a4e7 [ 168.354099][ C1] RDX: 0000000000000000 RSI: 0000000000004c01 RDI: 0000000000000008 [ 168.362064][ C1] RBP: 0000000000000008 R08: 00007f24c9d17b40 R09: 00007f24c9d17ae0 [ 168.370029][ C1] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000007 [ 168.377993][ C1] R13: 00000000004cab30 R14: 00000000004e3f70 R15: 00000000ffffffff