[ 42.325007][ T25] audit: type=1800 audit(1575355909.557:30): pid=7975 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.119' (ECDSA) to the list of known hosts. 2019/12/03 06:52:01 fuzzer started 2019/12/03 06:52:02 dialing manager at 10.128.0.26:38907 2019/12/03 06:52:03 syscalls: 2697 2019/12/03 06:52:03 code coverage: enabled 2019/12/03 06:52:03 comparison tracing: enabled 2019/12/03 06:52:03 extra coverage: extra coverage is not supported by the kernel 2019/12/03 06:52:03 setuid sandbox: enabled 2019/12/03 06:52:03 namespace sandbox: enabled 2019/12/03 06:52:03 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/03 06:52:03 fault injection: enabled 2019/12/03 06:52:03 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/03 06:52:03 net packet injection: enabled 2019/12/03 06:52:03 net device setup: enabled 2019/12/03 06:52:03 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/12/03 06:52:03 devlink PCI setup: PCI device 0000:00:10.0 is not available 06:52:03 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x69, 0x10, 0x70}, [@ldst={0x4}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1c4, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 06:52:04 executing program 1: mount$fuseblk(&(0x7f0000000040)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r0 = getpgrp(0x0) setpriority(0x0, r0, 0xffff) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffd000/0x2000)=nil) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) geteuid() accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r4 = syz_open_procfs(0x0, &(0x7f0000000100)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r3, r4, 0x0, 0x1) ioctl$TIOCNXCL(r4, 0x540d) r5 = getpgid(0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f00000001c0)={0x3, 0x3, 0x0, 0x0, r5}) sched_setaffinity(r5, 0x31f, &(0x7f0000000500)) r6 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_SET(r6, 0x1, &(0x7f00000001c0)={{0x6, 0x0, 0xee01, 0x0, 0xee01, 0x80}, 0x0, 0x4, 0x0, 0x20, 0x0, 0x0, 0x200}) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) stat(&(0x7f0000000540)='./bus/file0\x00', &(0x7f0000000640)) r7 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = syz_open_dev$mice(0x0, 0x0, 0x28100) r10 = socket$inet_udp(0x2, 0x2, 0x0) r11 = socket$pptp(0x18, 0x1, 0x2) r12 = open(0x0, 0x0, 0x0) getdents64(r12, 0x0, 0x600) r13 = socket$xdp(0x2c, 0x3, 0x0) r14 = open(0x0, 0x0, 0x0) getdents64(r14, 0x0, 0x600) r15 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r16 = socket$inet6_sctp(0xa, 0x5, 0x84) r17 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) lstat(&(0x7f0000000080)='./control\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x0, &(0x7f00000017c0)=ANY=[@ANYBLOB="28000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r15, @ANYRES32=r16, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000d2b9e79d54d4", @ANYRES32, @ANYRES32=r17, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=r18, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYBLOB="000000001c0000000000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="000000001400", @ANYBLOB, @ANYRES32, @ANYRES32], 0x9a, 0x4040040}, 0x4000000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) r20 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r21 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getresuid(&(0x7f0000000d00)=0x0, &(0x7f0000000d40), &(0x7f0000000d80)) r23 = getegid() sendmmsg$unix(r12, &(0x7f0000000ec0)=[{&(0x7f0000000600)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000680)="edeb45a6f7243ea5942b31ca24ee3be5171194a8906847cc7a828998c9d891ac87d53b1ac1d1653e2cfa25ebeff6ee329fe25becc79ebb58927f8bcb3fa8cf588b27ab856dab637a1dbd6d3d700910ed79e528ef2bdf30ae4eab01fff7b5c322b575cfdc684f54a17de2103472c3946599703d8bcce2a658c4", 0x79}, {&(0x7f00000002c0)="2ec31be5f286fb6a7b6bafb02ff955df940bcc391e14c25a349db22c72b6db83e2db0021fa9eb84e63aef1", 0x2b}, {&(0x7f0000000700)="821cbca9a9a50fe2b5f7dd2f9fda162ecdd9509fc2dab0f8859580a21fd4977f40dd194c765657c1b444", 0x2a}, {&(0x7f0000000740)="6b2fdeeaea0d18f4cfb62b4e908f367f684e3e25d3dad878224bb32bbbf8806f3d284a26b0da6d5ad3a3b88c33fef1aa0be244e00ab5a1995fa26f1433d9c378f517d41e6201a8bf1313ec5a16cbee85bcac7dc491de461de0c343dc80552c174c83ee835149", 0x66}], 0x4, &(0x7f00000008c0)=[@rights={{0x18, 0x1, 0x1, [r13, r14]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r18}}}, @rights={{0x18, 0x1, 0x1, [r11, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r9]}}, @rights={{0x1c, 0x1, 0x1, [r10, r8, 0xffffffffffffffff]}}], 0xa8, 0x4000000}, {&(0x7f00000009c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000a80)=[{&(0x7f0000000a40)="b2aee10efaa7425efbf124b583d6fb143c5304c5722814b903ddc8", 0x1b}], 0x1, &(0x7f0000000dc0)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, r19}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r7, r20, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r9]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x24, 0x1, 0x1, [r9, 0xffffffffffffffff, r7, 0xffffffffffffffff, r21]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r22, r23}}}], 0xd8, 0xbfecbd20c6d21766}], 0x2, 0x2) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x6, 0x0, r18, 0x0, 0xee01, 0x80}, 0xa99, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200}) shmget(0x1, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) r24 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_SET(r24, 0x1, &(0x7f00000001c0)={{0x6, 0x0, 0xee01, 0x0, 0xee01, 0x80}, 0x0, 0x4, 0x0, 0x20, 0x0, 0x0, 0x200}) shmctl$IPC_SET(0x0, 0x1, 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) write$binfmt_script(r1, &(0x7f00000004c0)=ANY=[@ANYRES32], 0x4) sendfile(r1, r2, 0x0, 0x20000102000007) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000240)={0x0, 0x1, 0x1}) socket(0x200000000000011, 0x4000000000080002, 0x0) r25 = socket(0x1e, 0x1, 0x0) syz_genetlink_get_family_id$team(0x0) r26 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r26, 0x0, 0x27, &(0x7f0000002d80)={@multicast2, @local}, 0xc) r27 = socket(0x0, 0x2, 0x0) setsockopt$inet_int(r27, 0x0, 0x8, 0x0, 0x0) getsockopt$inet_pktinfo(r27, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) r28 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r28, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) accept4$packet(r28, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000280)=0x14, 0x80000) r29 = socket(0x0, 0x2, 0x0) setsockopt$inet_int(r29, 0x0, 0x8, 0x0, 0x0) getsockopt$inet_pktinfo(r29, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) getsockopt$inet_IP_IPSEC_POLICY(r29, 0x0, 0x10, &(0x7f0000000900)={{{@in6=@ipv4={[], [], @loopback}, @in=@multicast1}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f00000003c0)=0xfd) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, 0x0) socket(0x1e, 0x1, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') r30 = socket$inet_tcp(0x2, 0x1, 0x0) r31 = socket$inet6(0xa, 0x2, 0x0) close(r31) r32 = open(&(0x7f0000000080)='./bus\x00', 0x141242, 0x0) ftruncate(r32, 0x200004) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r31, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x1}, 0x8) sendfile(r31, r32, 0x0, 0x80001d000010) ioctl$VIDIOC_ENUMINPUT(r32, 0xc050561a, 0x0) setsockopt$inet_mreqn(r32, 0x0, 0x27, &(0x7f0000002d80)={@multicast2, @local}, 0xc) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) setsockopt$inet_mreqn(r30, 0x0, 0x27, &(0x7f0000002d80)={@loopback, @local, r33}, 0x1) syz_open_dev$sndpcmc(&(0x7f0000000a00)='/dev/snd/pcmC#D#c\x00', 0x101, 0x400) r34 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r34, 0x0, 0x10, &(0x7f0000000c80)={{{@in6=@ipv4={[], [], @loopback}, @in=@multicast1}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f00000006c0)=0xfffffffffffffe8d) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) r35 = accept$alg(0xffffffffffffffff, 0x0, 0x0) poll(&(0x7f00000001c0)=[{r35}], 0x1, 0x7) sendmsg$TEAM_CMD_PORT_LIST_GET(r25, &(0x7f0000000600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x83048002}, 0xc, &(0x7f00000005c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="b47cde0d95ee551f0b8c8af5e7ee00000000e1a8d35f", @ANYRES16=0x0], 0x2}, 0x1, 0x0, 0x0, 0x80}, 0x4000) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000002d80)={@multicast2, @local}, 0xc) syzkaller login: [ 56.908824][ T8141] IPVS: ftp: loaded support on port[0] = 21 [ 57.044679][ T8143] IPVS: ftp: loaded support on port[0] = 21 [ 57.067041][ T8141] chnl_net:caif_netlink_parms(): no params data found 06:52:04 executing program 2: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x5, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x34}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x4, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 57.146080][ T8141] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.154390][ T8141] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.162689][ T8141] device bridge_slave_0 entered promiscuous mode [ 57.180510][ T8141] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.187679][ T8141] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.195916][ T8141] device bridge_slave_1 entered promiscuous mode [ 57.292339][ T8141] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.307828][ T8143] chnl_net:caif_netlink_parms(): no params data found [ 57.324233][ T8147] IPVS: ftp: loaded support on port[0] = 21 [ 57.330375][ T8141] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.382093][ T8141] team0: Port device team_slave_0 added [ 57.410603][ T8141] team0: Port device team_slave_1 added 06:52:04 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000000)="0200eeffffff01000000ff07000000000000000000000000000000ffffff800000004200000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}]) [ 57.436595][ T8143] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.445485][ T8143] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.453752][ T8143] device bridge_slave_0 entered promiscuous mode [ 57.467689][ T8143] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.475627][ T8143] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.486525][ T8143] device bridge_slave_1 entered promiscuous mode [ 57.550744][ T8141] device hsr_slave_0 entered promiscuous mode [ 57.588329][ T8141] device hsr_slave_1 entered promiscuous mode [ 57.657089][ T8150] IPVS: ftp: loaded support on port[0] = 21 [ 57.674401][ T8143] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.691895][ T8143] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 06:52:05 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000000), 0x4) [ 57.782435][ T8143] team0: Port device team_slave_0 added [ 57.800574][ T8141] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 57.872240][ T8141] netdevsim netdevsim0 netdevsim1: renamed from eth1 06:52:05 executing program 5: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x2, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)) [ 57.964272][ T8143] team0: Port device team_slave_1 added [ 57.984945][ T8141] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 58.051623][ T8141] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 58.115343][ T8153] IPVS: ftp: loaded support on port[0] = 21 [ 58.190530][ T8143] device hsr_slave_0 entered promiscuous mode [ 58.248435][ T8143] device hsr_slave_1 entered promiscuous mode [ 58.298132][ T8143] debugfs: Directory 'hsr0' with parent '/' already present! [ 58.307265][ T8147] chnl_net:caif_netlink_parms(): no params data found [ 58.376955][ T8150] chnl_net:caif_netlink_parms(): no params data found [ 58.405603][ T8155] IPVS: ftp: loaded support on port[0] = 21 [ 58.417938][ T8147] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.426659][ T8147] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.437838][ T8147] device bridge_slave_0 entered promiscuous mode [ 58.477804][ T8147] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.485506][ T8147] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.493391][ T8147] device bridge_slave_1 entered promiscuous mode [ 58.505194][ T8143] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 58.563194][ T8143] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 58.634070][ T8143] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 58.701100][ T8147] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.710386][ T8150] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.717484][ T8150] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.725563][ T8150] device bridge_slave_0 entered promiscuous mode [ 58.735282][ T8150] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.742424][ T8150] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.750517][ T8150] device bridge_slave_1 entered promiscuous mode [ 58.771489][ T8143] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 58.831353][ T8147] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.862180][ T8150] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.906429][ T8147] team0: Port device team_slave_0 added [ 58.914801][ T8150] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.927573][ T8141] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.946359][ T8147] team0: Port device team_slave_1 added [ 59.021339][ T8147] device hsr_slave_0 entered promiscuous mode [ 59.079233][ T8147] device hsr_slave_1 entered promiscuous mode [ 59.118174][ T8147] debugfs: Directory 'hsr0' with parent '/' already present! [ 59.132243][ T8150] team0: Port device team_slave_0 added [ 59.140791][ T8150] team0: Port device team_slave_1 added [ 59.177221][ T8153] chnl_net:caif_netlink_parms(): no params data found [ 59.204317][ T8155] chnl_net:caif_netlink_parms(): no params data found [ 59.241224][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.249378][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.300769][ T8150] device hsr_slave_0 entered promiscuous mode [ 59.339852][ T8150] device hsr_slave_1 entered promiscuous mode [ 59.388196][ T8150] debugfs: Directory 'hsr0' with parent '/' already present! [ 59.407492][ T8141] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.433923][ T8155] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.441261][ T8155] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.451743][ T8155] device bridge_slave_0 entered promiscuous mode [ 59.461997][ T8155] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.469175][ T8155] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.476811][ T8155] device bridge_slave_1 entered promiscuous mode [ 59.494241][ T8153] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.501418][ T8153] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.509203][ T8153] device bridge_slave_0 entered promiscuous mode [ 59.516867][ T8153] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.524043][ T8153] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.531764][ T8153] device bridge_slave_1 entered promiscuous mode [ 59.550633][ T8155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.577847][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.586890][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.595467][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.602639][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.611704][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.620556][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.629066][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.636332][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.643943][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.652675][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.673780][ T8155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.692148][ T8153] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.712090][ T8153] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.729373][ T8147] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 59.786484][ T8150] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 59.821814][ T8150] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 59.892719][ T8143] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.899776][ T8147] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 59.940276][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.953235][ T8155] team0: Port device team_slave_0 added [ 59.963037][ T8153] team0: Port device team_slave_0 added [ 59.969279][ T8150] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 60.034353][ T8147] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 60.081206][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.090359][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.100149][ T8155] team0: Port device team_slave_1 added [ 60.108274][ T8153] team0: Port device team_slave_1 added [ 60.115388][ T8150] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 60.170398][ T8147] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 60.212293][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.220244][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.230570][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.239449][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.247091][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.268781][ T8143] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.310494][ T8155] device hsr_slave_0 entered promiscuous mode [ 60.381077][ T8155] device hsr_slave_1 entered promiscuous mode [ 60.418233][ T8155] debugfs: Directory 'hsr0' with parent '/' already present! [ 60.431967][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.441262][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.450185][ T3105] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.457220][ T3105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.464938][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.473188][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.481641][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.490274][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.498950][ T3105] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.505979][ T3105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.513875][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.551727][ T8153] device hsr_slave_0 entered promiscuous mode [ 60.608752][ T8153] device hsr_slave_1 entered promiscuous mode [ 60.658117][ T8153] debugfs: Directory 'hsr0' with parent '/' already present! [ 60.683963][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.693283][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.702633][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.711565][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.720360][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.764406][ T8141] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.776572][ T8141] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.794660][ T8143] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 60.808745][ T8143] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.825339][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.833803][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.842138][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.850880][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.859841][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.868564][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.877050][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.885490][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.895126][ T8155] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 60.944446][ T8155] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 60.989648][ T8155] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 61.040112][ T8153] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 61.090409][ T8153] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 61.134164][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.155487][ T8141] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.162543][ T8155] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 61.231179][ T8153] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 61.280503][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.287936][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.322972][ T8153] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 61.404553][ T8150] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.420818][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.442111][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 166.447982][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 166.454740][ C0] rcu: 0-...!: (10499 ticks this GP) idle=71a/1/0x4000000000000002 softirq=10843/10843 fqs=1 [ 166.465225][ C0] (t=10501 jiffies g=6005 q=16) [ 166.470149][ C0] rcu: rcu_preempt kthread starved for 10500 jiffies! g6005 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 166.481229][ C0] rcu: RCU grace-period kthread stack dump: [ 166.487101][ C0] rcu_preempt R running task 29032 10 2 0x80004000 [ 166.494984][ C0] Call Trace: [ 166.498269][ C0] __schedule+0x9a0/0xcc0 [ 166.502592][ C0] schedule+0x181/0x210 [ 166.506732][ C0] schedule_timeout+0x14f/0x240 [ 166.511567][ C0] ? run_local_timers+0x120/0x120 [ 166.516578][ C0] rcu_gp_kthread+0xed8/0x1770 [ 166.521341][ C0] kthread+0x332/0x350 [ 166.525391][ C0] ? rcu_report_qs_rsp+0x140/0x140 [ 166.530484][ C0] ? kthread_blkcg+0xe0/0xe0 [ 166.535060][ C0] ret_from_fork+0x24/0x30 [ 166.539477][ C0] NMI backtrace for cpu 0 [ 166.543793][ C0] CPU: 0 PID: 8163 Comm: udevd Not tainted 5.4.0-syzkaller #0 [ 166.551227][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 166.561264][ C0] Call Trace: [ 166.564532][ C0] [ 166.567380][ C0] dump_stack+0x1fb/0x318 [ 166.571698][ C0] nmi_cpu_backtrace+0xaf/0x1a0 [ 166.576530][ C0] ? nmi_trigger_cpumask_backtrace+0x16d/0x290 [ 166.582680][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 166.588730][ C0] nmi_trigger_cpumask_backtrace+0x174/0x290 [ 166.594697][ C0] arch_trigger_cpumask_backtrace+0x10/0x20 [ 166.600572][ C0] rcu_dump_cpu_stacks+0x15a/0x220 [ 166.605675][ C0] rcu_sched_clock_irq+0xe25/0x1ad0 [ 166.610863][ C0] ? trace_hardirqs_off+0x74/0x80 [ 166.615872][ C0] update_process_times+0x12d/0x180 [ 166.621081][ C0] tick_sched_timer+0x263/0x420 [ 166.625915][ C0] ? tick_setup_sched_timer+0x3d0/0x3d0 [ 166.631444][ C0] __hrtimer_run_queues+0x403/0x840 [ 166.636653][ C0] hrtimer_interrupt+0x38c/0xda0 [ 166.641601][ C0] ? debug_smp_processor_id+0x9/0x20 [ 166.646877][ C0] smp_apic_timer_interrupt+0x109/0x280 [ 166.652410][ C0] apic_timer_interrupt+0xf/0x20 [ 166.657328][ C0] [ 166.660265][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x4/0x50 [ 166.666405][ C0] Code: 84 00 00 00 00 00 55 48 89 e5 53 48 89 fb e8 13 00 00 00 48 8b 3d 34 e7 cc 07 48 89 de e8 64 02 3b 00 5b 5d c3 cc 48 8b 04 24 <65> 48 8b 0c 25 c0 1d 02 00 65 8b 15 b8 81 8b 7e f7 c2 00 01 1f 00 [ 166.685992][ C0] RSP: 0018:ffffc90001f976f0 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 166.694400][ C0] RAX: ffffffff81486ea4 RBX: ffffea00025bd2c0 RCX: ffff88808d31e2c0 [ 166.702395][ C0] RDX: 0000000000000000 RSI: 00000000fffffffc RDI: ffffea00025bd2c0 [ 166.710356][ C0] RBP: ffffc90001f97730 R08: dffffc0000000000 R09: fffffbfff1287025 [ 166.718321][ C0] R10: fffffbfff1287025 R11: 0000000000000000 R12: ffff88809fc8f420 [ 166.726294][ C0] R13: dffffc0000000000 R14: 1ffff11013f91e84 R15: ffff8880a8475568 [ 166.734391][ C0] ? free_thread_stack+0x124/0x590 [ 166.739514][ C0] ? free_thread_stack+0x124/0x590 [ 166.744621][ C0] put_task_stack+0xa3/0x130 [ 166.749224][ C0] finish_task_switch+0x3f1/0x550 [ 166.754265][ C0] __schedule+0x9a8/0xcc0 [ 166.758629][ C0] preempt_schedule_irq+0xc1/0x140 [ 166.763738][ C0] retint_kernel+0x1b/0x2b [ 166.768163][ C0] RIP: 0010:debug_lockdep_rcu_enabled+0x8/0xe0 [ 166.774310][ C0] Code: 48 c7 c7 f4 d8 80 89 e8 66 f0 4e 00 eb d5 0f 1f 40 00 55 48 89 e5 e8 a7 b7 00 00 e8 a2 b8 00 00 5d c3 55 48 89 e5 41 57 41 56 <53> 48 c7 c0 1c 82 43 89 48 c1 e8 03 49 bf 00 00 00 00 00 fc ff df [ 166.794033][ C0] RSP: 0018:ffffc90001f97940 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff02 [ 166.802455][ C0] RAX: 0000000000000000 RBX: ffff88808d31e2c0 RCX: ffff88808d31e2c0 [ 166.810435][ C0] RDX: dffffc0000000000 RSI: ffff88808d31eb78 RDI: 0000000000000286 [ 166.818509][ C0] RBP: ffffc90001f97950 R08: ffffffff81a5bf25 R09: ffffed1015d86fcd [ 166.826494][ C0] R10: ffffed1015d86fcd R11: 0000000000000000 R12: 0000000000000000 [ 166.834469][ C0] R13: 1ffff11011a63c5a R14: ffff88808d31e2d0 R15: 000000000000008a [ 166.842472][ C0] ? exit_mmap+0x2d5/0x530 [ 166.846904][ C0] ___might_sleep+0x66/0x5e0 [ 166.851500][ C0] ? rcu_read_lock_sched_held+0x10b/0x170 [ 166.857222][ C0] __might_sleep+0x8f/0x100 [ 166.861740][ C0] exit_mmap+0x363/0x530 [ 166.866496][ C0] ? exit_aio+0x25e/0x370 [ 166.870841][ C0] __mmput+0x120/0x3a0 [ 166.874902][ C0] mmput+0x5d/0x70 [ 166.878614][ C0] flush_old_exec+0x551/0x6d0 [ 166.883311][ C0] load_elf_binary+0x652/0x3670 [ 166.888177][ C0] ? load_elf_binary+0x711/0x3670 [ 166.893221][ C0] ? search_binary_handler+0x16b/0x660 [ 166.898701][ C0] ? do_raw_read_unlock+0x42/0xf0 [ 166.903732][ C0] search_binary_handler+0x1a5/0x660 [ 166.909014][ C0] __do_execve_file+0x1573/0x1cd0 [ 166.914049][ C0] __x64_sys_execve+0x94/0xb0 [ 166.918736][ C0] do_syscall_64+0xf7/0x1c0 [ 166.923254][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 166.929174][ C0] RIP: 0033:0x7fc8baa08207 [ 166.933593][ C0] Code: Bad RIP value. [ 166.937662][ C0] RSP: 002b:00007ffed9b77c98 EFLAGS: 00000202 ORIG_RAX: 000000000000003b [ 166.946066][ C0] RAX: ffffffffffffffda RBX: 00000000ffffffff RCX: 00007fc8baa08207 [ 166.954025][ C0] RDX: 0000000001f78fd0 RSI: 00007ffed9b77d90 RDI: 00007ffed9b78da0 [ 166.961980][ C0] RBP: 0000000000625500 R08: 0000000000001fb0 R09: 0000000000001fb0 [ 166.969936][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000001f78fd0 [ 166.977895][ C0] R13: 0000000000000007 R14: 0000000001f69250 R15: 0000000000000005