[ 43.346708][ T25] audit: type=1800 audit(1575375354.176:25): pid=8022 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 43.385857][ T25] audit: type=1800 audit(1575375354.176:26): pid=8022 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 43.433078][ T25] audit: type=1800 audit(1575375354.176:27): pid=8022 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [ 43.454860][ T25] audit: type=1800 audit(1575375354.186:28): pid=8022 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.74' (ECDSA) to the list of known hosts. 2019/12/03 12:16:01 fuzzer started 2019/12/03 12:16:03 dialing manager at 10.128.0.26:45711 2019/12/03 12:16:03 syscalls: 2689 2019/12/03 12:16:03 code coverage: enabled 2019/12/03 12:16:03 comparison tracing: enabled 2019/12/03 12:16:03 extra coverage: extra coverage is not supported by the kernel 2019/12/03 12:16:03 setuid sandbox: enabled 2019/12/03 12:16:03 namespace sandbox: enabled 2019/12/03 12:16:03 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/03 12:16:03 fault injection: enabled 2019/12/03 12:16:03 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/03 12:16:03 net packet injection: enabled 2019/12/03 12:16:03 net device setup: enabled 2019/12/03 12:16:03 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/12/03 12:16:03 devlink PCI setup: PCI device 0000:00:10.0 is not available 12:16:04 executing program 0: r0 = socket(0x10, 0x2, 0x0) sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x8) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r3}]]}}}]}, 0x38}}, 0x0) recvmmsg(r0, &(0x7f0000003fc0), 0x56, 0x2, 0x0) 12:16:04 executing program 1: r0 = socket$kcm(0x10, 0x800000000002, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1b0000001a008100a00f4467aacc985d80ecdb4cb9040a48651600", 0x1b}], 0x1}, 0x0) syzkaller login: [ 53.984663][ T8185] IPVS: ftp: loaded support on port[0] = 21 [ 54.111631][ T8185] chnl_net:caif_netlink_parms(): no params data found [ 54.162957][ T8185] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.186203][ T8185] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.193917][ T8185] device bridge_slave_0 entered promiscuous mode 12:16:05 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) semctl$SETALL(0x0, 0x0, 0x11, 0x0) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24000000) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) [ 54.209736][ T8188] IPVS: ftp: loaded support on port[0] = 21 [ 54.216621][ T8185] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.223771][ T8185] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.235445][ T8185] device bridge_slave_1 entered promiscuous mode [ 54.281105][ T8185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.301569][ T8185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.381335][ T8185] team0: Port device team_slave_0 added [ 54.397920][ T8185] team0: Port device team_slave_1 added [ 54.457063][ T8188] chnl_net:caif_netlink_parms(): no params data found 12:16:05 executing program 3: syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@broadcast, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2}, @icmp=@parameter_prob={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @empty=0x1000000}}}}}}, 0x0) [ 54.538659][ T8185] device hsr_slave_0 entered promiscuous mode [ 54.606472][ T8185] device hsr_slave_1 entered promiscuous mode 12:16:05 executing program 4: openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/autofs\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={0x0, @in6={{0xa, 0x4e21, 0xe, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0x0, 0x7}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') writev(r2, &(0x7f0000000200)=[{&(0x7f0000000000)="13", 0x8}], 0x1) write$P9_RSTATFS(r2, &(0x7f0000000640)={0x43, 0x9, 0x2, {0x2, 0x7, 0x4, 0x2, 0x9, 0x8000, 0x20, 0x400, 0xfffffffd}}, 0x43) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005) ioctl$KVM_GET_LAPIC(r1, 0x8400ae8e, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lstat(&(0x7f00000005c0)='./file1\x00', &(0x7f0000000a00)) readlinkat(r0, &(0x7f0000000100)='./file1\x00', &(0x7f00000001c0)=""/38, 0x26) lsetxattr$security_selinux(&(0x7f0000000880)='./file0\x00', &(0x7f0000000400)='security.selinux\x00', &(0x7f0000000900)='system_u:object_r:init_exec_t:s0\x00', 0x21, 0x5) r3 = getpgrp(0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000140)=0x1000000) setpriority(0x0, r3, 0xffff) pidfd_send_signal(r1, 0x7, &(0x7f0000000480)={0x0, 0x0, 0x3}, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x20, r6, 0x701, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x6}]}]}, 0x20}}, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000d80)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40b9a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d41f6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8614c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145484a69a188c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"}) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r7, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f0000000500)=@v3={0x3000000, [{0x0, 0x4}, {0x692, 0x2}]}, 0x18, 0x0) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000440)='./file0\x00', &(0x7f00000006c0)=[&(0x7f0000000580)='wlan1\x00', &(0x7f0000000600)='security.capability\x00'], &(0x7f0000000780)=[&(0x7f0000000700)='proc\x00', &(0x7f0000000740)='!\x00']) [ 54.684199][ T8191] IPVS: ftp: loaded support on port[0] = 21 [ 54.712766][ T8193] IPVS: ftp: loaded support on port[0] = 21 [ 54.769637][ T8188] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.777667][ T8188] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.785646][ T8188] device bridge_slave_0 entered promiscuous mode [ 54.835653][ T8185] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.898180][ T8185] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.938082][ T8188] bridge0: port 2(bridge_slave_1) entered blocking state 12:16:05 executing program 5: bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r2, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) [ 54.945187][ T8188] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.955807][ T8188] device bridge_slave_1 entered promiscuous mode [ 54.976659][ T8185] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.992367][ T8195] IPVS: ftp: loaded support on port[0] = 21 [ 55.008559][ T8185] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 55.102182][ T8188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.154054][ T8188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.181160][ T8193] chnl_net:caif_netlink_parms(): no params data found [ 55.191943][ T8198] IPVS: ftp: loaded support on port[0] = 21 [ 55.203116][ T8188] team0: Port device team_slave_0 added [ 55.242239][ T8188] team0: Port device team_slave_1 added [ 55.254682][ T8193] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.262905][ T8193] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.270669][ T8193] device bridge_slave_0 entered promiscuous mode [ 55.314010][ T8193] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.321336][ T8193] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.329027][ T8193] device bridge_slave_1 entered promiscuous mode [ 55.398930][ T8188] device hsr_slave_0 entered promiscuous mode [ 55.456512][ T8188] device hsr_slave_1 entered promiscuous mode [ 55.496280][ T8188] debugfs: Directory 'hsr0' with parent '/' already present! [ 55.506591][ T8193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.524465][ T8193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.539838][ T8191] chnl_net:caif_netlink_parms(): no params data found [ 55.581209][ T8193] team0: Port device team_slave_0 added [ 55.591012][ T8193] team0: Port device team_slave_1 added [ 55.622147][ T8191] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.631391][ T8191] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.639556][ T8191] device bridge_slave_0 entered promiscuous mode [ 55.669313][ T8191] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.676738][ T8191] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.684282][ T8191] device bridge_slave_1 entered promiscuous mode [ 55.720070][ T8188] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 55.808893][ T8193] device hsr_slave_0 entered promiscuous mode [ 55.846456][ T8193] device hsr_slave_1 entered promiscuous mode [ 55.886235][ T8193] debugfs: Directory 'hsr0' with parent '/' already present! [ 55.919408][ T8188] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 55.980626][ T8188] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 56.059150][ T8188] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 56.140453][ T8185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.150702][ T8191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.180567][ T8195] chnl_net:caif_netlink_parms(): no params data found [ 56.205773][ T8185] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.214399][ T8191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.249927][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.258395][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.283421][ T8191] team0: Port device team_slave_0 added [ 56.289983][ T8193] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 56.348164][ T8198] chnl_net:caif_netlink_parms(): no params data found [ 56.371460][ T8191] team0: Port device team_slave_1 added [ 56.381094][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.389841][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.398832][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.405943][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.413978][ T8193] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 56.479647][ T8195] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.486893][ T8195] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.494598][ T8195] device bridge_slave_0 entered promiscuous mode [ 56.511510][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.522692][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.531667][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.541773][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.548893][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.558118][ T8193] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 56.603650][ T8193] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 56.658629][ T8195] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.665810][ T8195] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.673744][ T8195] device bridge_slave_1 entered promiscuous mode [ 56.689999][ T8195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.718814][ T8198] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.725978][ T8198] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.734220][ T8198] device bridge_slave_0 entered promiscuous mode [ 56.743198][ T8198] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.750365][ T8198] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.758284][ T8198] device bridge_slave_1 entered promiscuous mode [ 56.765987][ T8195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.848012][ T8191] device hsr_slave_0 entered promiscuous mode [ 56.886529][ T8191] device hsr_slave_1 entered promiscuous mode [ 56.926271][ T8191] debugfs: Directory 'hsr0' with parent '/' already present! [ 56.948971][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.960119][ T8195] team0: Port device team_slave_0 added [ 56.973364][ T8195] team0: Port device team_slave_1 added [ 56.987557][ T8198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.998272][ T8198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.012898][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.044538][ T8198] team0: Port device team_slave_0 added [ 57.063342][ T8198] team0: Port device team_slave_1 added [ 57.072836][ T8188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.129490][ T8195] device hsr_slave_0 entered promiscuous mode [ 57.166845][ T8195] device hsr_slave_1 entered promiscuous mode [ 57.226341][ T8195] debugfs: Directory 'hsr0' with parent '/' already present! [ 57.243651][ T3049] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.252475][ T3049] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.261036][ T3049] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.330934][ T8198] device hsr_slave_0 entered promiscuous mode [ 57.376585][ T8198] device hsr_slave_1 entered promiscuous mode [ 57.416305][ T8198] debugfs: Directory 'hsr0' with parent '/' already present! [ 57.444588][ T8191] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 57.521308][ T8191] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 57.578445][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.587281][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.597297][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.605517][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.624850][ T8188] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.645508][ T8185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.658739][ T8185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.666772][ T8191] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 57.708278][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.715982][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.723836][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.732136][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.760432][ T8191] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 57.797613][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.806613][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.815525][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.825488][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.833084][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.841730][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.850005][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.857095][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.864973][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.884238][ T8198] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 57.919168][ T8195] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 57.991276][ T8195] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 58.058401][ T8195] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 58.098216][ T8195] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 58.153237][ T3049] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.162008][ T3049] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.171108][ T3049] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.181905][ T3049] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.190471][ T3049] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.199763][ T3049] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.208385][ T3049] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.216888][ T3049] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.225098][ T8198] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 58.271764][ T8198] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 58.331368][ T8198] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 58.391173][ T8188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.402342][ T8188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.416485][ T8193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.433050][ T8196] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.441478][ T8196] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.449316][ T8196] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.457831][ T8196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.466261][ T8196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.495354][ T8185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.535698][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.544193][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.553836][ T8193] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.589621][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.598209][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.609621][ T8188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.632272][ T8198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.685389][ T8191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.735872][ T8198] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.752715][ T3049] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.764252][ T3049] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.779482][ T3049] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.786771][ T3049] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.805134][ T3049] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.814384][ T3049] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.830425][ T3049] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.837800][ T3049] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.853803][ T3049] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.862838][ T3049] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.877887][ T3049] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.893128][ T3049] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.903450][ T3049] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.918370][ T3049] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 163.806085][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 163.812975][ C0] rcu: 0-...!: (1 GPs behind) idle=db2/1/0x4000000000000002 softirq=10858/10860 fqs=6 [ 163.822965][ C0] (t=10501 jiffies g=6173 q=183) [ 163.828838][ C0] rcu: rcu_preempt kthread starved for 10489 jiffies! g6173 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 163.840623][ C0] rcu: RCU grace-period kthread stack dump: [ 163.846510][ C0] rcu_preempt I29032 10 2 0x80004000 [ 163.852882][ C0] Call Trace: [ 163.856191][ C0] __schedule+0x9a0/0xcc0 [ 163.860522][ C0] schedule+0x181/0x210 [ 163.864669][ C0] schedule_timeout+0x14f/0x240 [ 163.869509][ C0] ? run_local_timers+0x120/0x120 [ 163.874525][ C0] rcu_gp_kthread+0xed8/0x1770 [ 163.879449][ C0] kthread+0x332/0x350 [ 163.883515][ C0] ? rcu_report_qs_rsp+0x140/0x140 [ 163.888643][ C0] ? kthread_blkcg+0xe0/0xe0 [ 163.893232][ C0] ret_from_fork+0x24/0x30 [ 163.897846][ C0] NMI backtrace for cpu 0 [ 163.902192][ C0] CPU: 0 PID: 8208 Comm: blkid Not tainted 5.4.0-syzkaller #0 [ 163.909643][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 163.919691][ C0] Call Trace: [ 163.922969][ C0] [ 163.925817][ C0] dump_stack+0x1fb/0x318 [ 163.930154][ C0] nmi_cpu_backtrace+0xaf/0x1a0 [ 163.934991][ C0] ? nmi_trigger_cpumask_backtrace+0x16d/0x290 [ 163.941249][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 163.947304][ C0] nmi_trigger_cpumask_backtrace+0x174/0x290 [ 163.953285][ C0] arch_trigger_cpumask_backtrace+0x10/0x20 [ 163.959251][ C0] rcu_dump_cpu_stacks+0x15a/0x220 [ 163.964355][ C0] rcu_sched_clock_irq+0xe25/0x1ad0 [ 163.969545][ C0] ? trace_hardirqs_off+0x74/0x80 [ 163.974565][ C0] update_process_times+0x12d/0x180 [ 163.979840][ C0] tick_sched_timer+0x263/0x420 [ 163.984680][ C0] ? tick_setup_sched_timer+0x3d0/0x3d0 [ 163.990217][ C0] __hrtimer_run_queues+0x403/0x840 [ 163.995420][ C0] hrtimer_interrupt+0x38c/0xda0 [ 164.000448][ C0] ? debug_smp_processor_id+0x9/0x20 [ 164.005728][ C0] smp_apic_timer_interrupt+0x109/0x280 [ 164.011270][ C0] apic_timer_interrupt+0xf/0x20 [ 164.016190][ C0] [ 164.019290][ C0] RIP: 0010:free_thread_stack+0x18b/0x590 [ 164.025009][ C0] Code: ff ff e8 28 04 00 00 43 80 3c 2e 00 74 08 4c 89 e7 e8 09 a4 69 00 49 8b 1c 24 48 83 c3 08 48 89 d8 48 c1 e8 03 42 80 3c 28 00 <74> 08 48 89 df e8 eb a3 69 00 48 8b 1b e9 82 ff ff ff e8 de 2c 2e [ 164.044612][ C0] RSP: 0018:ffffc90002127948 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 164.053012][ C0] RAX: 1ffff11014e7d551 RBX: ffff8880a73eaa88 RCX: ffff888094500480 [ 164.061153][ C0] RDX: 0000000000000000 RSI: 00000000fffffffc RDI: ffffea000232ec80 [ 164.069137][ C0] RBP: ffffc90002127980 R08: 000000000003a768 R09: ffffed1014e9fe7f [ 164.077128][ C0] R10: ffffed1014e9fe7f R11: 0000000000000000 R12: ffff8880a73eab20 [ 164.085094][ C0] R13: dffffc0000000000 R14: 1ffff11014e7d564 R15: ffff8880a74ff3e8 [ 164.093193][ C0] ? free_thread_stack+0x168/0x590 [ 164.098351][ C0] put_task_stack+0xa3/0x130 [ 164.102944][ C0] finish_task_switch+0x3f1/0x550 [ 164.107965][ C0] __schedule+0x9a8/0xcc0 [ 164.112294][ C0] preempt_schedule_irq+0xc1/0x140 [ 164.117395][ C0] retint_kernel+0x1b/0x2b [ 164.121995][ C0] RIP: 0010:kmem_cache_free+0xc8/0xf0 [ 164.127353][ C0] Code: 58 07 00 74 42 4c 89 f7 57 9d 0f 1f 44 00 00 e8 0e 98 ca ff eb 19 e8 a7 95 ca ff 48 83 3d 07 f7 58 07 00 74 24 4c 89 f7 57 9d <0f> 1f 44 00 00 4c 89 e7 4c 89 fe e8 58 01 00 00 5b 41 5c 41 5e 41 [ 164.147729][ C0] RSP: 0018:ffffc90002127b90 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13 [ 164.156393][ C0] RAX: ffff888094500d14 RBX: ffff8880aa9ec540 RCX: ffff888094500480 [ 164.164352][ C0] RDX: 0000000000000000 RSI: ffffffff8147b56c RDI: 0000000000000286 [ 164.172397][ C0] RBP: ffffc90002127bb0 R08: ffff888094500cd8 R09: ffffc900021279ac [ 164.180365][ C0] R10: 000000000000000f R11: 0000000000000000 R12: ffffffff8147b56c [ 164.188323][ C0] R13: dffffc0000000000 R14: 0000000000000286 R15: ffff888094deab58 [ 164.196289][ C0] ? vm_area_free+0x1c/0x20 [ 164.200781][ C0] ? vm_area_free+0x1c/0x20 [ 164.205275][ C0] vm_area_free+0x1c/0x20 [ 164.209601][ C0] exit_mmap+0x45d/0x530 [ 164.213829][ C0] ? exit_aio+0x25e/0x370 [ 164.218613][ C0] __mmput+0x120/0x3a0 [ 164.222670][ C0] mmput+0x5d/0x70 [ 164.226379][ C0] exit_mm+0x50a/0x590 [ 164.230444][ C0] do_exit+0x544/0x2020 [ 164.234588][ C0] ? check_preemption_disabled+0xb4/0x260 [ 164.240302][ C0] do_group_exit+0x15c/0x2b0 [ 164.244883][ C0] __do_sys_exit_group+0x17/0x20 [ 164.249893][ C0] __se_sys_exit_group+0x14/0x20 [ 164.254859][ C0] __x64_sys_exit_group+0x3b/0x40 [ 164.259889][ C0] do_syscall_64+0xf7/0x1c0 [ 164.264511][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 164.270424][ C0] RIP: 0033:0x7f8ecb9f61e8 [ 164.275384][ C0] Code: Bad RIP value. [ 164.279448][ C0] RSP: 002b:00007ffe70f79758 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 164.287893][ C0] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f8ecb9f61e8 [ 164.295860][ C0] RDX: 0000000000000002 RSI: 000000000000003c RDI: 0000000000000002 [ 164.303827][ C0] RBP: 00007f8ecbccb840 R08: 00000000000000e7 R09: ffffffffffffffa8 [ 164.311791][ C0] R10: 00007f8ecbcd1740 R11: 0000000000000246 R12: 00007f8ecbccb840 [ 164.319908][ C0] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000