[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 46.142500][ T23] audit: type=1800 audit(1575419290.734:25): pid=8210 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 46.168821][ T23] audit: type=1800 audit(1575419290.734:26): pid=8210 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 46.227913][ T23] audit: type=1800 audit(1575419290.734:27): pid=8210 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.121' (ECDSA) to the list of known hosts. 2019/12/04 00:28:20 fuzzer started 2019/12/04 00:28:22 dialing manager at 10.128.0.26:42111 2019/12/04 00:28:22 syscalls: 2689 2019/12/04 00:28:22 code coverage: enabled 2019/12/04 00:28:22 comparison tracing: enabled 2019/12/04 00:28:22 extra coverage: extra coverage is not supported by the kernel 2019/12/04 00:28:22 setuid sandbox: enabled 2019/12/04 00:28:22 namespace sandbox: enabled 2019/12/04 00:28:22 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/04 00:28:22 fault injection: enabled 2019/12/04 00:28:22 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/04 00:28:22 net packet injection: enabled 2019/12/04 00:28:22 net device setup: enabled 2019/12/04 00:28:22 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/12/04 00:28:22 devlink PCI setup: PCI device 0000:00:10.0 is not available 00:28:23 executing program 0: socket$inet6(0xa, 0x80003, 0x6) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x4e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="eb3c906d6b66732e666174000204010002000270f7f82b0ee8", 0x19}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x0) 00:28:23 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0dd52f23d67c8e7, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0xfc, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x420000a77, 0x0) fcntl$setpipe(r2, 0x408, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r5}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) syzkaller login: [ 59.330054][ T8374] IPVS: ftp: loaded support on port[0] = 21 [ 59.478856][ T8374] chnl_net:caif_netlink_parms(): no params data found 00:28:24 executing program 2: r0 = open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000100000008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="10000000000000002000000000000000"], 0x5c, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) flistxattr(r1, 0x0, 0x0) [ 59.564981][ T8374] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.582505][ T8374] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.592169][ T8374] device bridge_slave_0 entered promiscuous mode [ 59.612356][ T8374] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.619551][ T8374] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.628884][ T8374] device bridge_slave_1 entered promiscuous mode [ 59.647510][ T8377] IPVS: ftp: loaded support on port[0] = 21 [ 59.677739][ T8374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.702467][ T8374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.758533][ T8374] team0: Port device team_slave_0 added [ 59.779390][ T8374] team0: Port device team_slave_1 added [ 59.837029][ T8379] IPVS: ftp: loaded support on port[0] = 21 00:28:24 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = getpid() getpriority(0x1, r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x1, 0x0, 0x0, &(0x7f0000000200)=""/109, 0x0}) getpeername$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000480)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)) arch_prctl$ARCH_SET_GS(0x1001, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x4, 0x0, &(0x7f00000000c0)=0x2ac) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) [ 59.897862][ T8374] device hsr_slave_0 entered promiscuous mode [ 59.972769][ T8374] device hsr_slave_1 entered promiscuous mode [ 60.064866][ T8382] IPVS: ftp: loaded support on port[0] = 21 [ 60.074576][ T8377] chnl_net:caif_netlink_parms(): no params data found 00:28:24 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="7c0000002c00010700"/20, @ANYRES32, @ANYBLOB="00000002000000000300000058000100627066005000208195b5363d1f3bc445b4a79a5be60200080004000000000004000500400002003c00010000000000020000200000000000000084799c570b75daf6a86081eca80289160000001100000000000000001000"/116], 0x7c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) [ 60.171112][ T8374] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 60.297598][ T8374] netdevsim netdevsim0 netdevsim1: renamed from eth1 00:28:24 executing program 5: unshare(0x2040400) r0 = memfd_create(&(0x7f00000002c0)=']\x9dL\x00', 0x0) fstat(r0, &(0x7f0000000540)) [ 60.391988][ T8374] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 60.453444][ T8374] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 60.483947][ T8377] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.491131][ T8377] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.504830][ T8377] device bridge_slave_0 entered promiscuous mode [ 60.513637][ T8377] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.520953][ T8377] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.529125][ T8377] device bridge_slave_1 entered promiscuous mode [ 60.567235][ T8377] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.578160][ T8377] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.595563][ T8384] IPVS: ftp: loaded support on port[0] = 21 [ 60.623574][ T8377] team0: Port device team_slave_0 added [ 60.624251][ T8386] IPVS: ftp: loaded support on port[0] = 21 [ 60.631720][ T8377] team0: Port device team_slave_1 added [ 60.784023][ T8377] device hsr_slave_0 entered promiscuous mode [ 60.822819][ T8377] device hsr_slave_1 entered promiscuous mode [ 60.862051][ T8377] debugfs: Directory 'hsr0' with parent '/' already present! [ 60.873226][ T8382] chnl_net:caif_netlink_parms(): no params data found [ 60.892723][ T8379] chnl_net:caif_netlink_parms(): no params data found [ 60.946794][ T8382] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.954597][ T8382] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.962928][ T8382] device bridge_slave_0 entered promiscuous mode [ 60.984814][ T8377] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 61.035639][ T8377] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 61.084447][ T8382] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.091929][ T8382] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.099590][ T8382] device bridge_slave_1 entered promiscuous mode [ 61.127171][ T8379] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.134804][ T8379] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.145332][ T8379] device bridge_slave_0 entered promiscuous mode [ 61.153581][ T8377] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 61.206759][ T8382] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.220134][ T8382] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.231383][ T8379] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.240488][ T8379] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.248651][ T8379] device bridge_slave_1 entered promiscuous mode [ 61.256449][ T8377] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 61.337440][ T8379] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.357621][ T8379] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.399121][ T8382] team0: Port device team_slave_0 added [ 61.410088][ T8382] team0: Port device team_slave_1 added [ 61.419848][ T8379] team0: Port device team_slave_0 added [ 61.429967][ T8379] team0: Port device team_slave_1 added [ 61.453442][ T8384] chnl_net:caif_netlink_parms(): no params data found [ 61.524911][ T8379] device hsr_slave_0 entered promiscuous mode [ 61.602676][ T8379] device hsr_slave_1 entered promiscuous mode [ 61.631610][ T8379] debugfs: Directory 'hsr0' with parent '/' already present! [ 61.704365][ T8382] device hsr_slave_0 entered promiscuous mode [ 61.771970][ T8382] device hsr_slave_1 entered promiscuous mode [ 61.801700][ T8382] debugfs: Directory 'hsr0' with parent '/' already present! [ 61.832921][ T8386] chnl_net:caif_netlink_parms(): no params data found [ 61.852786][ T8374] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.874698][ T8384] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.883561][ T8384] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.892180][ T8384] device bridge_slave_0 entered promiscuous mode [ 61.936973][ T8384] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.945236][ T8384] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.954158][ T8384] device bridge_slave_1 entered promiscuous mode [ 61.973897][ T8379] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 62.004230][ T8386] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.012080][ T8386] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.020337][ T8386] device bridge_slave_0 entered promiscuous mode [ 62.038691][ T8386] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.047747][ T8386] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.056586][ T8386] device bridge_slave_1 entered promiscuous mode [ 62.078445][ T8384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.089264][ T8379] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 62.164495][ T8382] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 62.215436][ T8382] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 62.274048][ T8382] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 62.315116][ T8386] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.325878][ T8382] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 62.374716][ T8384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.389668][ T8379] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 62.459953][ T8386] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.485074][ T8387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.493872][ T8387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.502630][ T8379] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 62.534011][ T8374] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.548381][ T8384] team0: Port device team_slave_0 added [ 62.556744][ T8384] team0: Port device team_slave_1 added [ 62.577390][ T8386] team0: Port device team_slave_0 added [ 62.585008][ T8386] team0: Port device team_slave_1 added [ 62.597450][ T8377] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.606655][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.615683][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.625102][ T3006] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.632385][ T3006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.640790][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.658250][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.667650][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.677240][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.684591][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.718095][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.774526][ T8386] device hsr_slave_0 entered promiscuous mode [ 62.831833][ T8386] device hsr_slave_1 entered promiscuous mode [ 62.882043][ T8386] debugfs: Directory 'hsr0' with parent '/' already present! [ 62.910619][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.920783][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.930317][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.939047][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.948129][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.956796][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.966324][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.975036][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.984298][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.996765][ T8377] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.044718][ T8384] device hsr_slave_0 entered promiscuous mode [ 63.101983][ T8384] device hsr_slave_1 entered promiscuous mode [ 63.143015][ T8384] debugfs: Directory 'hsr0' with parent '/' already present! [ 63.153299][ T8374] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.166442][ T8387] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.177160][ T8387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.186766][ T8387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.234889][ T8387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.244989][ T8387] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.254216][ T8387] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.261593][ T8387] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.270357][ T8387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.280866][ T8387] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.289616][ T8387] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.296950][ T8387] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.305168][ T8387] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.339702][ T8379] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.354939][ T8387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.366029][ T8387] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.374116][ T8387] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.382374][ T8387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.390985][ T8387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.399678][ T8387] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.408952][ T8387] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.421044][ T8386] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 63.473932][ T8386] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 63.514268][ T8386] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 63.554166][ T8386] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 63.617197][ T8379] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.632225][ T8374] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.643083][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.650906][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.659282][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.669158][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.679126][ T8384] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 63.723777][ T8384] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 63.768109][ T8384] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 63.836501][ T8382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.845616][ T8384] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 63.884801][ T8377] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 63.895599][ T8377] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.909738][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.919365][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.929297][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.939474][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.949268][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.979414][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.988520][ T3006] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.997472][ T3006] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.005145][ T3006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.020426][ T8382] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.073099][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.082576][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.091305][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.114232][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.128686][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.137662][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.152848][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.161490][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.168576][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.182365][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.191314][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.206462][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.217101][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.233280][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.337145][ T8397] FAT-fs (loop0): Directory bread(block 7255) failed [ 64.360457][ T8397] FAT-fs (loop0): Directory bread(block 7256) failed [ 169.101433][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 169.108996][ C0] rcu: 0-...!: (10499 ticks this GP) idle=416/1/0x4000000000000002 softirq=10670/10670 fqs=13 [ 169.119602][ C0] (t=10501 jiffies g=6933 q=131) [ 169.124759][ C0] rcu: rcu_preempt kthread starved for 10474 jiffies! g6933 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 169.135842][ C0] rcu: RCU grace-period kthread stack dump: [ 169.141725][ C0] rcu_preempt R running task 29032 10 2 0x80004000 [ 169.149749][ C0] Call Trace: [ 169.153042][ C0] __schedule+0x9a0/0xcc0 [ 169.157377][ C0] schedule+0x181/0x210 [ 169.161523][ C0] schedule_timeout+0x14f/0x240 [ 169.166392][ C0] ? run_local_timers+0x120/0x120 [ 169.171516][ C0] rcu_gp_kthread+0xed8/0x1770 [ 169.176298][ C0] kthread+0x332/0x350 [ 169.180382][ C0] ? rcu_report_qs_rsp+0x140/0x140 [ 169.185483][ C0] ? kthread_blkcg+0xe0/0xe0 [ 169.190067][ C0] ret_from_fork+0x24/0x30 [ 169.194499][ C0] NMI backtrace for cpu 0 [ 169.198847][ C0] CPU: 0 PID: 8379 Comm: syz-executor.2 Not tainted 5.4.0-syzkaller #0 [ 169.207068][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 169.217236][ C0] Call Trace: [ 169.220602][ C0] [ 169.223462][ C0] dump_stack+0x1fb/0x318 [ 169.227799][ C0] nmi_cpu_backtrace+0xaf/0x1a0 [ 169.232642][ C0] ? nmi_trigger_cpumask_backtrace+0x16d/0x290 [ 169.238793][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 169.244850][ C0] nmi_trigger_cpumask_backtrace+0x174/0x290 [ 169.250847][ C0] arch_trigger_cpumask_backtrace+0x10/0x20 [ 169.256734][ C0] rcu_dump_cpu_stacks+0x15a/0x220 [ 169.261842][ C0] rcu_sched_clock_irq+0xe25/0x1ad0 [ 169.267049][ C0] ? trace_hardirqs_off+0x74/0x80 [ 169.272076][ C0] update_process_times+0x12d/0x180 [ 169.277266][ C0] tick_sched_timer+0x263/0x420 [ 169.282112][ C0] ? tick_setup_sched_timer+0x3d0/0x3d0 [ 169.287652][ C0] __hrtimer_run_queues+0x403/0x840 [ 169.292876][ C0] hrtimer_interrupt+0x38c/0xda0 [ 169.297826][ C0] ? debug_smp_processor_id+0x9/0x20 [ 169.303278][ C0] smp_apic_timer_interrupt+0x109/0x280 [ 169.309268][ C0] apic_timer_interrupt+0xf/0x20 [ 169.314194][ C0] [ 169.317234][ C0] RIP: 0010:free_thread_stack+0x133/0x590 [ 169.323157][ C0] Code: 00 ea ff ff 48 01 c7 be 03 00 00 00 e8 06 a2 60 00 e9 5d 04 00 00 e8 5c 2d 2e 00 48 89 df 31 f6 e8 42 af 6e 00 43 80 3c 2e 00 <74> 08 4c 89 e7 e8 43 a4 69 00 49 8b 1c 24 48 83 c3 08 48 89 d8 48 [ 169.342844][ C0] RSP: 0018:ffffc90002a37948 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 169.351428][ C0] RAX: 0000000000000001 RBX: ffffea0002715940 RCX: 0000000000000000 [ 169.359407][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffea0002715940 [ 169.367373][ C0] RBP: ffffc90002a37980 R08: dffffc0000000000 R09: fffffbfff120248a [ 169.376406][ C0] R10: fffffbfff120248a R11: 0000000000000000 R12: ffff88808bba96a0 [ 169.384591][ C0] R13: dffffc0000000000 R14: 1ffff110117752d4 R15: ffff8880a6c799e8 [ 169.392681][ C0] ? free_thread_stack+0x12e/0x590 [ 169.397791][ C0] put_task_stack+0xa3/0x130 [ 169.402373][ C0] finish_task_switch+0x3f1/0x550 [ 169.408133][ C0] __schedule+0x9a8/0xcc0 [ 169.412497][ C0] preempt_schedule_irq+0xc1/0x140 [ 169.417622][ C0] retint_kernel+0x1b/0x2b [ 169.422148][ C0] RIP: 0010:lock_acquire+0x1b2/0x250 [ 169.427447][ C0] Code: c1 e8 03 42 80 3c 30 00 74 0c 48 c7 c7 28 96 0a 89 e8 b2 7e 56 00 48 83 3d d2 01 af 07 00 0f 84 9c 00 00 00 48 8b 7d c0 57 9d <0f> 1f 44 00 00 48 83 c4 30 5b 41 5c 41 5d 41 5e 41 5f 5d c3 44 89 [ 169.447855][ C0] RSP: 0018:ffffc90002a37b98 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13 [ 169.456274][ C0] RAX: 1ffffffff12152c5 RBX: 0000000000000000 RCX: ffffffff815c6b62 [ 169.464239][ C0] RDX: dffffc0000000000 RSI: 0000000000000008 RDI: 0000000000000286 [ 169.472202][ C0] RBP: ffffc90002a37bf0 R08: dffffc0000000000 R09: fffffbfff13c8d1f [ 169.480169][ C0] R10: fffffbfff13c8d1f R11: 0000000000000000 R12: 0000000000000001 [ 169.488830][ C0] R13: 0000000000000000 R14: dffffc0000000000 R15: ffffffff890fe0f0 [ 169.496818][ C0] ? validate_chain+0x92/0x7bc0 [ 169.501679][ C0] __fs_reclaim_acquire+0x24/0x30 [ 169.506703][ C0] ? __fs_reclaim_acquire+0x4/0x30 [ 169.511808][ C0] fs_reclaim_acquire+0x5f/0xd0 [ 169.516671][ C0] kmem_cache_alloc_trace+0x31/0x2f0 [ 169.521947][ C0] ? smack_sk_alloc_security+0x10b/0x2c0 [ 169.527590][ C0] smack_sk_alloc_security+0x10b/0x2c0 [ 169.533175][ C0] security_sk_alloc+0x6c/0xd0 [ 169.537952][ C0] sk_prot_alloc+0xd7/0x290 [ 169.542467][ C0] sk_alloc+0x38/0x9c0 [ 169.546531][ C0] unix_create1+0x91/0x560 [ 169.550940][ C0] ? rcu_lock_release+0x9/0x30 [ 169.555699][ C0] unix_create+0x136/0x1c0 [ 169.560112][ C0] __sock_create+0x5cc/0x910 [ 169.564695][ C0] __sys_socket+0xe7/0x2e0 [ 169.569241][ C0] __x64_sys_socket+0x7a/0x90 [ 169.573917][ C0] do_syscall_64+0xf7/0x1c0 [ 169.578531][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 169.584440][ C0] RIP: 0033:0x45d1c7 [ 169.588337][ C0] Code: 00 00 00 49 89 ca b8 36 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 4a 8b fb ff c3 66 0f 1f 84 00 00 00 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 2d 8b fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 169.607942][ C0] RSP: 002b:00007ffe186b6038 EFLAGS: 00000202 ORIG_RAX: 0000000000000029 [ 169.616364][ C0] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 000000000045d1c7 [ 169.624335][ C0] RDX: 0000000000000000 RSI: 0000000000080002 RDI: 0000000000000001 [ 169.634039][ C0] RBP: 00000000004bfbf5 R08: 0000000000000000 R09: 0000000000000008 [ 169.642004][ C0] R10: 0000000000000078 R11: 0000000000000202 R12: 0000000000000003 [ 169.650064][ C0] R13: 0000000000000006 R14: 0000000000000000 R15: 00007ffe186b63c0