[ 43.324093][ T25] audit: type=1800 audit(1575365997.678:28): pid=8033 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [ 43.706703][ T8100] sshd (8100) used greatest stack depth: 23704 bytes left [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 43.959100][ T25] audit: type=1800 audit(1575365998.428:29): pid=8033 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 43.978438][ T25] audit: type=1800 audit(1575365998.428:30): pid=8033 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.1.26' (ECDSA) to the list of known hosts. 2019/12/03 09:40:09 fuzzer started 2019/12/03 09:40:11 dialing manager at 10.128.0.26:38907 2019/12/03 09:40:11 syscalls: 2697 2019/12/03 09:40:11 code coverage: enabled 2019/12/03 09:40:11 comparison tracing: enabled 2019/12/03 09:40:11 extra coverage: extra coverage is not supported by the kernel 2019/12/03 09:40:11 setuid sandbox: enabled 2019/12/03 09:40:11 namespace sandbox: enabled 2019/12/03 09:40:11 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/03 09:40:11 fault injection: enabled 2019/12/03 09:40:11 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/03 09:40:11 net packet injection: enabled 2019/12/03 09:40:11 net device setup: enabled 2019/12/03 09:40:11 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/12/03 09:40:11 devlink PCI setup: PCI device 0000:00:10.0 is not available 09:40:12 executing program 0: socket$unix(0x1, 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cg\xab.\xc4\xd0\xcex\x177\x84\x0e\x95q\xd7\xf7d\xd2\x1di\x04\x18\xa9\xe5%\x12Z\xfdH\xd2\x8cp\xcc\xc4=\'\x00\xab\x1d\x99\x03\x91Kt\x98Q\x8eB\x92\x02p\xc8\\6\x86T\xb1\xfa\xaf\x8c\x8b\x94\xa5\xa2\x8aU\x14&\xab\x9c%\xd0>|\xbc\xe0\xab\xdd\xdd\x93\xf9q\x19\x86F\xd7Y\x19\v\x13\x17\xc0\x1brd.\x17\xad\xd5\x00$\x01\x87\x96\xd3XA\xb3\xb7\x81\xcd6\xd3\xe2\x8e\x8c\xd0\xf4y\xc5\x1e2\xd25\xdc\x0f\xd9\x8f~\'\xe2\xc9mCmA~\x0e\xfch\x94<(\xd3f\xbd\xc3\x91\x017L\x14X\xaf\x99\x90\x8bv\x9b#|z\x9a\x99\xaf\xbd\xb7{qJ>\"\x90\xc8\b\xc6~\rN\x16\xa5\xde\x98\xb3\xb2\xb5\xees]$\x12\xfb\xd1\n\xd5\xbe\xe4\xc4\xfd\x8c\x9e\xa6\x86WQ\xae\xaf\xf8(,\xff#\xe8|f\xcb\xaa\x1e,\xfc\xfa\xefI\x9d=$\x14\x8aI\x85_\xa6\n6\xabZ\xc5N\xa6\x1c\x8c\xd4\xf8z\xcd\\\x98gq\xc8\'\xd3\xb5\xb7\x98s\xd8\x9e}\xbbS\x98\xdc\xfa\xd1\x9b\xdcW\xaa\xe6{q\xae\xfc\b\xf1\xc4\xd9R#<\x1e\x1d2}!\xc1\xfd\xbdS\r\x8a\x11P(\xf5\xdf\xde\xde\x03g\'\x8b\xab7\\\n\x9e\xa8\xe2\x80@\x9f]\x1f,\x88\xfc\xc5\xad\x94\x00V\x8a-\xfbH\xd4\xa4\x9f\xda\x8e\x93\xc0\xbd\xd9qV}B{\xc3\xc6oT\xa9!3\xa9\xe3\x98\x99$d\xec\x9c5\xdd\xea', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x0, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = inotify_init1(0x0) r5 = gettid() fcntl$setown(r4, 0x8, 0x0) r6 = getpid() r7 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) sendmsg$key(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0xfffffffffffffe38}}, 0x0) r9 = gettid() waitid(0x83b895581628fca4, r9, &(0x7f0000000040), 0x2, &(0x7f0000000480)) sendmsg$key(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r8, @ANYRESDEC=r9]], 0xfffffffffffffe56}}, 0x20004850) r10 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r10) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @tid=r10}, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) writev(r11, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001000096368fe07072b03003700000a0014000300450201070300001419001a00120002000e00010006000300"/57, 0x39}], 0x1) kcmp(r10, r10, 0x3, 0xffffffffffffffff, r11) ptrace$setopts(0x4206, r10, 0x0, 0x0) r12 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={r12, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r10, r12, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r13}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r9, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r13}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r13}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r13}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r6, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='comm\x00', r13}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r13}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r5, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000000)='ppp0eth1]*em0\x00', r13}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000000080)='trusted\\#&>#\x00', r13}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r2, 0x0, 0x13, &(0x7f0000000280)='em1{bdevbdevvmnet1\x00', r13}, 0x30) socket$netlink(0x10, 0x3, 0x0) 09:40:12 executing program 1: syz_open_dev$audion(0x0, 0x0, 0x100800) ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4040ae9e, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpid() r0 = getpid() perf_event_open(&(0x7f0000000180)={0xda1e32710f9baac2, 0x70, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/userio\x00', 0x0, 0x0) r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/userio\x00', 0x2000000000000006, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f0000000000)={0x1, 0x6}, 0x2) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000740)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) dup2(r1, r2) rt_tgsigqueueinfo(r0, 0x0, 0x16, 0x0) ptrace(0xffffffffffffffff, 0x0) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) ptrace$getenv(0x4201, 0x0, 0x0, 0x0) getpriority(0x2, 0x0) syzkaller login: [ 58.130596][ T8196] IPVS: ftp: loaded support on port[0] = 21 [ 58.208228][ T8198] IPVS: ftp: loaded support on port[0] = 21 09:40:12 executing program 2: r0 = memfd_create(&(0x7f0000000080)='nR\xc3A\xf9\x13\xe8^)=o9\xe0\xd5\xe2o@\xc6\x15,\xcc\xf5\x81 Iwlabel\x00', 0x0) write(r0, &(0x7f00000000c0)='i', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0x6, 0x0, &(0x7f0000000200)=0x31) [ 58.315018][ T8196] chnl_net:caif_netlink_parms(): no params data found [ 58.405920][ T8198] chnl_net:caif_netlink_parms(): no params data found [ 58.418245][ T8196] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.427495][ T8196] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.435897][ T8196] device bridge_slave_0 entered promiscuous mode [ 58.456648][ T8196] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.466614][ T8196] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.475007][ T8196] device bridge_slave_1 entered promiscuous mode [ 58.517368][ T8198] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.524893][ T8198] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.533622][ T8198] device bridge_slave_0 entered promiscuous mode [ 58.542445][ T8196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.554555][ T8196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.564100][ T8198] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.571153][ T8198] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.580898][ T8198] device bridge_slave_1 entered promiscuous mode [ 58.593355][ T8202] IPVS: ftp: loaded support on port[0] = 21 09:40:13 executing program 3: r0 = memfd_create(&(0x7f0000001fc1)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fallocate(r0, 0x0, 0x0, 0x1) read(r0, 0x0, 0x10) [ 58.614261][ T8196] team0: Port device team_slave_0 added [ 58.624757][ T8196] team0: Port device team_slave_1 added [ 58.638857][ T8198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.652001][ T8198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.756477][ T8196] device hsr_slave_0 entered promiscuous mode [ 58.813351][ T8196] device hsr_slave_1 entered promiscuous mode 09:40:13 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="34000000150005ba644ced00000000000a000000", @ANYRES32, @ANYBLOB="140002"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) [ 58.869464][ T8198] team0: Port device team_slave_0 added [ 58.891558][ T8198] team0: Port device team_slave_1 added [ 58.909570][ T8204] IPVS: ftp: loaded support on port[0] = 21 [ 59.007987][ T8198] device hsr_slave_0 entered promiscuous mode [ 59.065113][ T8198] device hsr_slave_1 entered promiscuous mode [ 59.104831][ T8198] debugfs: Directory 'hsr0' with parent '/' already present! 09:40:13 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f00000001c0)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f00000000c0)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa, 0x1000000}}) [ 59.130150][ T8196] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 59.140762][ T8206] IPVS: ftp: loaded support on port[0] = 21 [ 59.195817][ T8196] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 59.246275][ T8196] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 59.305954][ T8196] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 59.465633][ T8202] chnl_net:caif_netlink_parms(): no params data found [ 59.492853][ T8208] IPVS: ftp: loaded support on port[0] = 21 [ 59.514791][ T8198] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 59.556250][ T8198] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 59.627644][ T8198] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 59.691122][ T8198] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 59.765860][ T8202] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.775437][ T8202] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.784415][ T8202] device bridge_slave_0 entered promiscuous mode [ 59.818701][ T8202] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.826814][ T8202] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.837397][ T8202] device bridge_slave_1 entered promiscuous mode [ 59.856621][ T8202] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.907187][ T8202] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.928114][ T8204] chnl_net:caif_netlink_parms(): no params data found [ 59.973442][ T8202] team0: Port device team_slave_0 added [ 59.999796][ T8206] chnl_net:caif_netlink_parms(): no params data found [ 60.009660][ T8202] team0: Port device team_slave_1 added [ 60.028109][ T8198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.062475][ T8196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.137012][ T8202] device hsr_slave_0 entered promiscuous mode [ 60.173148][ T8202] device hsr_slave_1 entered promiscuous mode [ 60.213278][ T8202] debugfs: Directory 'hsr0' with parent '/' already present! [ 60.221070][ T8204] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.229553][ T8204] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.237401][ T8204] device bridge_slave_0 entered promiscuous mode [ 60.270298][ T8209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.278861][ T8209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.291030][ T8204] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.291055][ T8204] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.307290][ T8204] device bridge_slave_1 entered promiscuous mode [ 60.325175][ T8198] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.334560][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.342373][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.359981][ T8206] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.367241][ T8206] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.375782][ T8206] device bridge_slave_0 entered promiscuous mode [ 60.388182][ T8206] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.395334][ T8206] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.403154][ T8206] device bridge_slave_1 entered promiscuous mode [ 60.438204][ T8204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.454948][ T8204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.466729][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.475453][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.484085][ T2950] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.491211][ T2950] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.499243][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.508698][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.517152][ T2950] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.524226][ T2950] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.532681][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.550125][ T8198] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 60.561486][ T8198] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.594531][ T8206] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.606147][ T8196] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.614161][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.623449][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.631961][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.640771][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.649883][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.658700][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.667181][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.675844][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.684727][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.693134][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.701437][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.709293][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.717281][ T8202] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 60.773702][ T8206] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.795851][ T8204] team0: Port device team_slave_0 added [ 60.802237][ T8208] chnl_net:caif_netlink_parms(): no params data found [ 60.829489][ T8202] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 60.875701][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.884281][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.892641][ T2950] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.899890][ T2950] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.908235][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.917557][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.926852][ T2950] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.934059][ T2950] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.941531][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.950939][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.960991][ T8204] team0: Port device team_slave_1 added [ 60.994944][ T8202] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 61.035471][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.043332][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.051999][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.060497][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.068130][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.076090][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.092089][ T8196] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 61.104425][ T8196] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.165431][ T8204] device hsr_slave_0 entered promiscuous mode [ 61.213229][ T8204] device hsr_slave_1 entered promiscuous mode [ 61.252928][ T8204] debugfs: Directory 'hsr0' with parent '/' already present! [ 61.267392][ T8206] team0: Port device team_slave_0 added [ 61.275253][ T8206] team0: Port device team_slave_1 added [ 61.283496][ T8198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.290545][ T8202] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 61.345487][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.355156][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.363563][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.371728][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.380170][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.388442][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.397759][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.409736][ T8208] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.417414][ T8208] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.425656][ T8208] device bridge_slave_0 entered promiscuous mode [ 61.465748][ T8206] device hsr_slave_0 entered promiscuous mode [ 61.508040][ T8206] device hsr_slave_1 entered promiscuous mode [ 61.562956][ T8206] debugfs: Directory 'hsr0' with parent '/' already present! [ 61.587961][ T8208] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.595716][ T8208] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.604315][ T8208] device bridge_slave_1 entered promiscuous mode [ 61.715188][ T8206] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 166.722728][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 166.729566][ C1] rcu: 1-...!: (1 GPs behind) idle=4e2/1/0x4000000000000002 softirq=10522/10523 fqs=17 [ 166.739545][ C1] (t=10500 jiffies g=6221 q=192) [ 166.744567][ C1] rcu: rcu_preempt kthread starved for 10465 jiffies! g6221 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 166.755653][ C1] rcu: RCU grace-period kthread stack dump: [ 166.761530][ C1] rcu_preempt R running task 28824 10 2 0x80004000 [ 166.769419][ C1] Call Trace: [ 166.772704][ C1] __schedule+0x9a0/0xcc0 [ 166.777033][ C1] schedule+0x181/0x210 [ 166.781185][ C1] schedule_timeout+0x14f/0x240 [ 166.786027][ C1] ? run_local_timers+0x120/0x120 [ 166.791084][ C1] rcu_gp_kthread+0xed8/0x1770 [ 166.795852][ C1] kthread+0x332/0x350 [ 166.799913][ C1] ? rcu_report_qs_rsp+0x140/0x140 [ 166.805022][ C1] ? kthread_blkcg+0xe0/0xe0 [ 166.809606][ C1] ret_from_fork+0x24/0x30 [ 166.814025][ C1] NMI backtrace for cpu 1 [ 166.818360][ C1] CPU: 1 PID: 8220 Comm: modprobe Not tainted 5.4.0-syzkaller #0 [ 166.826080][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 166.836160][ C1] Call Trace: [ 166.839437][ C1] [ 166.842301][ C1] dump_stack+0x1fb/0x318 [ 166.846627][ C1] nmi_cpu_backtrace+0xaf/0x1a0 [ 166.851471][ C1] ? nmi_trigger_cpumask_backtrace+0x16d/0x290 [ 166.857792][ C1] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 166.863848][ C1] nmi_trigger_cpumask_backtrace+0x174/0x290 [ 166.869842][ C1] arch_trigger_cpumask_backtrace+0x10/0x20 [ 166.875726][ C1] rcu_dump_cpu_stacks+0x15a/0x220 [ 166.880930][ C1] rcu_sched_clock_irq+0xe25/0x1ad0 [ 166.886132][ C1] ? trace_hardirqs_off+0x74/0x80 [ 166.891150][ C1] update_process_times+0x12d/0x180 [ 166.896341][ C1] tick_sched_timer+0x263/0x420 [ 166.901183][ C1] ? tick_setup_sched_timer+0x3d0/0x3d0 [ 166.906715][ C1] __hrtimer_run_queues+0x403/0x840 [ 166.911919][ C1] hrtimer_interrupt+0x38c/0xda0 [ 166.916849][ C1] ? switch_mm_irqs_off+0x855/0xae0 [ 166.922068][ C1] ? debug_smp_processor_id+0x9/0x20 [ 166.927349][ C1] smp_apic_timer_interrupt+0x109/0x280 [ 166.932900][ C1] apic_timer_interrupt+0xf/0x20 [ 166.937823][ C1] [ 166.940774][ C1] RIP: 0010:free_thread_stack+0x177/0x590 [ 166.946486][ C1] Code: 80 3c 28 00 74 08 48 89 df e8 25 a4 69 00 48 8b 3b be fc ff ff ff e8 28 04 00 00 43 80 3c 2e 00 74 08 4c 89 e7 e8 09 a4 69 00 <49> 8b 1c 24 48 83 c3 08 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 [ 166.966084][ C1] RSP: 0018:ffffc900023c7b98 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 166.974488][ C1] RAX: ffffffff81487433 RBX: ffff88806c050488 RCX: ffff888092e70440 [ 166.982451][ C1] RDX: 0000000000000000 RSI: 00000000fffffffc RDI: ffffea00028c1080 [ 166.990415][ C1] RBP: ffffc900023c7bd0 R08: 000000000003a768 R09: ffffed10150a92a7 [ 166.998374][ C1] R10: ffffed10150a92a7 R11: 0000000000000000 R12: ffff88806c050520 [ 167.006426][ C1] R13: dffffc0000000000 R14: 1ffff1100d80a0a4 R15: ffff8880a8549528 [ 167.014404][ C1] ? mod_memcg_page_state+0x123/0x190 [ 167.019776][ C1] ? free_thread_stack+0x168/0x590 [ 167.024879][ C1] put_task_stack+0xa3/0x130 [ 167.029457][ C1] finish_task_switch+0x3f1/0x550 [ 167.034476][ C1] __schedule+0x9a8/0xcc0 [ 167.038806][ C1] ? ___preempt_schedule+0x16/0x18 [ 167.043904][ C1] preempt_schedule+0xdb/0x120 [ 167.048802][ C1] ___preempt_schedule+0x16/0x18 [ 167.053762][ C1] ? do_exit+0x1431/0x2020 [ 167.058182][ C1] _raw_write_unlock_irq+0x77/0x80 [ 167.063326][ C1] do_exit+0x1431/0x2020 [ 167.067710][ C1] do_group_exit+0x15c/0x2b0 [ 167.072316][ C1] __do_sys_exit_group+0x17/0x20 [ 167.077282][ C1] __se_sys_exit_group+0x14/0x20 [ 167.082297][ C1] __x64_sys_exit_group+0x3b/0x40 [ 167.087312][ C1] do_syscall_64+0xf7/0x1c0 [ 167.091967][ C1] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 167.097889][ C1] RIP: 0033:0x7f9b7d4fa1e8 [ 167.102333][ C1] Code: Bad RIP value. [ 167.106517][ C1] RSP: 002b:00007fffdbd3daf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 167.114927][ C1] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f9b7d4fa1e8 [ 167.122892][ C1] RDX: 0000000000000001 RSI: 000000000000003c RDI: 0000000000000001 [ 167.130881][ C1] RBP: 00007f9b7d7cf840 R08: 00000000000000e7 R09: ffffffffffffffa8 [ 167.138851][ C1] R10: 00007f9b7d7d5740 R11: 0000000000000246 R12: 00007f9b7d7cf840 [ 167.146816][ C1] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000