[ 42.364509][ T23] audit: type=1800 audit(1575321761.636:27): pid=7912 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [ 42.388693][ T23] audit: type=1800 audit(1575321761.636:28): pid=7912 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 43.141895][ T23] audit: type=1800 audit(1575321762.476:29): pid=7912 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 43.161075][ T23] audit: type=1800 audit(1575321762.486:30): pid=7912 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.215' (ECDSA) to the list of known hosts. 2019/12/02 21:22:53 fuzzer started 2019/12/02 21:22:55 dialing manager at 10.128.0.26:38907 2019/12/02 21:22:55 syscalls: 2697 2019/12/02 21:22:55 code coverage: enabled 2019/12/02 21:22:55 comparison tracing: enabled 2019/12/02 21:22:55 extra coverage: extra coverage is not supported by the kernel 2019/12/02 21:22:55 setuid sandbox: enabled 2019/12/02 21:22:55 namespace sandbox: enabled 2019/12/02 21:22:55 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/02 21:22:55 fault injection: enabled 2019/12/02 21:22:55 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/02 21:22:55 net packet injection: enabled 2019/12/02 21:22:55 net device setup: enabled 2019/12/02 21:22:55 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/12/02 21:22:55 devlink PCI setup: PCI device 0000:00:10.0 is not available 21:22:56 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x22}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 21:22:56 executing program 1: creat(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x17cd, 0x0) mount$fuse(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x79fd, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x3, 0x0) syzkaller login: [ 57.585531][ T8077] IPVS: ftp: loaded support on port[0] = 21 [ 57.602699][ T8079] IPVS: ftp: loaded support on port[0] = 21 21:22:57 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_ACTIVE_SLAVE={0x8, 0x2, r4}, @IFLA_BOND_MODE={0x8, 0x1, 0x1}]}}}]}, 0x44}}, 0x0) [ 57.713964][ T8077] chnl_net:caif_netlink_parms(): no params data found [ 57.838853][ T8082] IPVS: ftp: loaded support on port[0] = 21 [ 57.869835][ T8077] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.879597][ T8077] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.888274][ T8077] device bridge_slave_0 entered promiscuous mode [ 57.915645][ T8077] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.922738][ T8077] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.930922][ T8077] device bridge_slave_1 entered promiscuous mode 21:22:57 executing program 3: r0 = socket$inet6(0xa, 0x802, 0x73) sendmmsg$inet6(r0, &(0x7f0000004d40)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0}}, {{&(0x7f0000000680)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000a00)=[@rthdr={{0xf1, 0x29, 0x39, {0x0, 0x740}}}], 0x18}}], 0x2, 0x0) [ 57.957791][ T8079] chnl_net:caif_netlink_parms(): no params data found [ 57.968341][ T8077] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.982040][ T8077] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.057243][ T8077] team0: Port device team_slave_0 added [ 58.072715][ T8077] team0: Port device team_slave_1 added [ 58.116548][ T8079] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.133796][ T8079] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.141659][ T8079] device bridge_slave_0 entered promiscuous mode 21:22:57 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x10032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000300)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0xf, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0xff0a) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x17, &(0x7f0000000080), 0x10) r4 = dup2(r0, r2) dup3(r4, r1, 0x0) [ 58.206441][ T8077] device hsr_slave_0 entered promiscuous mode [ 58.257737][ T8077] device hsr_slave_1 entered promiscuous mode [ 58.326916][ T8079] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.343721][ T8079] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.351701][ T8079] device bridge_slave_1 entered promiscuous mode [ 58.428790][ T8082] chnl_net:caif_netlink_parms(): no params data found [ 58.439087][ T8085] IPVS: ftp: loaded support on port[0] = 21 21:22:57 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x1004e20, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f00000003c0)=0x3, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x4e20}, 0x10) read(r0, &(0x7f0000000100)=""/171, 0xab) [ 58.479289][ T8088] IPVS: ftp: loaded support on port[0] = 21 [ 58.532485][ T8079] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.554455][ T8082] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.561576][ T8082] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.577690][ T8082] device bridge_slave_0 entered promiscuous mode [ 58.592875][ T8079] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.636728][ T8082] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.645782][ T8082] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.653309][ T8082] device bridge_slave_1 entered promiscuous mode [ 58.660515][ T8077] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 58.737178][ T8079] team0: Port device team_slave_0 added [ 58.752215][ T8077] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 58.787503][ T8077] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 58.847472][ T8077] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 58.914471][ T8079] team0: Port device team_slave_1 added [ 58.914660][ T8090] IPVS: ftp: loaded support on port[0] = 21 [ 58.944538][ T8082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.961303][ T8082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.026188][ T8079] device hsr_slave_0 entered promiscuous mode [ 59.073942][ T8079] device hsr_slave_1 entered promiscuous mode [ 59.123955][ T8079] debugfs: Directory 'hsr0' with parent '/' already present! [ 59.144465][ T8082] team0: Port device team_slave_0 added [ 59.151434][ T8082] team0: Port device team_slave_1 added [ 59.196552][ T8079] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 59.295397][ T8082] device hsr_slave_0 entered promiscuous mode [ 59.374400][ T8082] device hsr_slave_1 entered promiscuous mode [ 59.433686][ T8082] debugfs: Directory 'hsr0' with parent '/' already present! [ 59.446804][ T8079] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 59.488386][ T8079] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 59.535365][ T8079] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 59.631984][ T8088] chnl_net:caif_netlink_parms(): no params data found [ 59.708982][ T8088] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.716173][ T8088] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.724472][ T8088] device bridge_slave_0 entered promiscuous mode [ 59.762989][ T8088] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.771772][ T8088] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.779520][ T8088] device bridge_slave_1 entered promiscuous mode [ 59.796668][ T8077] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.803444][ T8082] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 59.845287][ T8090] chnl_net:caif_netlink_parms(): no params data found [ 59.867522][ T8088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.882360][ T8082] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 59.919039][ T8082] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 59.966614][ T8082] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 60.037821][ T8088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.049881][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.058295][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.069186][ T8077] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.077191][ T8085] chnl_net:caif_netlink_parms(): no params data found [ 60.109466][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.118155][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.126851][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.134057][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.143156][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.151464][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.160307][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.169755][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.176848][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.203404][ T8090] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.211950][ T8090] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.219952][ T8090] device bridge_slave_0 entered promiscuous mode [ 60.230896][ T8088] team0: Port device team_slave_0 added [ 60.239247][ T8088] team0: Port device team_slave_1 added [ 60.269122][ T8090] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.276369][ T8090] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.287100][ T8090] device bridge_slave_1 entered promiscuous mode [ 60.355390][ T8088] device hsr_slave_0 entered promiscuous mode [ 60.404092][ T8088] device hsr_slave_1 entered promiscuous mode [ 60.443809][ T8088] debugfs: Directory 'hsr0' with parent '/' already present! [ 60.451470][ T8085] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.458662][ T8085] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.469510][ T8085] device bridge_slave_0 entered promiscuous mode [ 60.479918][ T8079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.489723][ T8090] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.501102][ T8090] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.523153][ T8085] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.530865][ T8085] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.539371][ T8085] device bridge_slave_1 entered promiscuous mode [ 60.557254][ T2688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.566206][ T2688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.574088][ T2688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.612313][ T8079] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.624048][ T8088] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 60.656983][ T8085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.671379][ T8085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.693289][ T8090] team0: Port device team_slave_0 added [ 60.700626][ T8088] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 60.735938][ T8088] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 60.776500][ T8095] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.785307][ T8095] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.793882][ T8095] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.802176][ T8095] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.809314][ T8095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.817079][ T8095] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.825743][ T8095] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.834070][ T8095] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.841090][ T8095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.849578][ T8095] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.862799][ T8085] team0: Port device team_slave_0 added [ 60.870634][ T8090] team0: Port device team_slave_1 added [ 60.878153][ T8088] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 60.960552][ T8085] team0: Port device team_slave_1 added [ 60.980035][ T8095] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.988886][ T8095] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.999298][ T8095] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.007837][ T8095] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.016601][ T8095] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.025239][ T8095] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.034864][ T8095] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.042507][ T8095] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.107003][ T8090] device hsr_slave_0 entered promiscuous mode [ 61.174012][ T8090] device hsr_slave_1 entered promiscuous mode [ 61.223690][ T8090] debugfs: Directory 'hsr0' with parent '/' already present! [ 61.231781][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.241092][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.249467][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.258017][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.291906][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.300860][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.309574][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.318996][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.332967][ T8079] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.347394][ T8079] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.363135][ T8077] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.374470][ T8077] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.406354][ T8085] device hsr_slave_0 entered promiscuous mode [ 61.443983][ T8085] device hsr_slave_1 entered promiscuous mode [ 61.493955][ T8085] debugfs: Directory 'hsr0' with parent '/' already present! [ 61.505070][ T8082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.512886][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.521687][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.529913][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.538239][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.595043][ T8090] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 61.646095][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.653547][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.666367][ T8079] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.684145][ T8082] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.697471][ T8085] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 61.726681][ T8090] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 61.806088][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.814859][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.822459][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.830127][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.840530][ T8088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.857989][ T8085] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 61.915829][ T8085] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 61.955082][ T8090] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 61.995348][ T8090] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 62.055824][ T3891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.064368][ T3891] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.072596][ T3891] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.079668][ T3891] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.087203][ T3891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.095827][ T3891] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.104390][ T3891] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.111545][ T3891] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.119209][ T3891] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.141621][ T8085] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 62.202495][ T8077] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.279444][ T8090] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.297315][ T8090] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.330020][ T8090] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 62.340855][ T8090] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.381113][ T8090] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.183575][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 167.190379][ C1] rcu: 1-...!: (10499 ticks this GP) idle=65e/1/0x4000000000000002 softirq=11168/11170 fqs=11 [ 167.200949][ C1] (t=10501 jiffies g=6225 q=614) [ 167.205964][ C1] rcu: rcu_preempt kthread starved for 10480 jiffies! g6225 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 167.217046][ C1] rcu: RCU grace-period kthread stack dump: [ 167.222922][ C1] rcu_preempt R running task 29032 10 2 0x80004000 [ 167.230828][ C1] Call Trace: [ 167.234112][ C1] __schedule+0x9a0/0xcc0 [ 167.238443][ C1] schedule+0x181/0x210 [ 167.242604][ C1] schedule_timeout+0x14f/0x240 [ 167.247441][ C1] ? run_local_timers+0x120/0x120 [ 167.252477][ C1] rcu_gp_kthread+0xed8/0x1770 [ 167.257240][ C1] kthread+0x332/0x350 [ 167.261291][ C1] ? rcu_report_qs_rsp+0x140/0x140 [ 167.266394][ C1] ? kthread_blkcg+0xe0/0xe0 [ 167.270974][ C1] ret_from_fork+0x24/0x30 [ 167.275395][ C1] NMI backtrace for cpu 1 [ 167.279722][ C1] CPU: 1 PID: 8100 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0 [ 167.287938][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 167.297993][ C1] Call Trace: [ 167.301266][ C1] [ 167.304107][ C1] dump_stack+0x1fb/0x318 [ 167.308462][ C1] nmi_cpu_backtrace+0xaf/0x1a0 [ 167.313321][ C1] ? nmi_trigger_cpumask_backtrace+0x16d/0x290 [ 167.319476][ C1] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 167.325541][ C1] nmi_trigger_cpumask_backtrace+0x174/0x290 [ 167.331511][ C1] arch_trigger_cpumask_backtrace+0x10/0x20 [ 167.337387][ C1] rcu_dump_cpu_stacks+0x15a/0x220 [ 167.342495][ C1] rcu_sched_clock_irq+0xe25/0x1ad0 [ 167.347685][ C1] ? trace_hardirqs_off+0x74/0x80 [ 167.352697][ C1] update_process_times+0x12d/0x180 [ 167.357886][ C1] tick_sched_timer+0x263/0x420 [ 167.362722][ C1] ? tick_setup_sched_timer+0x3d0/0x3d0 [ 167.368375][ C1] __hrtimer_run_queues+0x403/0x840 [ 167.373572][ C1] hrtimer_interrupt+0x38c/0xda0 [ 167.378512][ C1] ? debug_smp_processor_id+0x9/0x20 [ 167.383789][ C1] smp_apic_timer_interrupt+0x109/0x280 [ 167.389322][ C1] apic_timer_interrupt+0xf/0x20 [ 167.394251][ C1] [ 167.397184][ C1] RIP: 0010:__memcg_kmem_uncharge+0xa/0x2e0 [ 167.403064][ C1] Code: 74 12 48 81 c3 08 02 00 00 48 89 df 4c 89 f6 e8 dc 7d ff ff 5b 41 5e 5d c3 0f 1f 80 00 00 00 00 55 48 89 e5 41 57 41 56 41 55 <41> 54 53 50 89 f3 49 89 fc 48 b8 00 00 00 00 00 fc ff df 4c 8d 77 [ 167.422657][ C1] RSP: 0018:ffffc900022f72f0 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 167.431054][ C1] RAX: ffffffff81486ea4 RBX: ffffea00024a1880 RCX: 0000000000040000 [ 167.439013][ C1] RDX: ffffc90006d29000 RSI: 0000000000000000 RDI: ffffea00024a1880 [ 167.446972][ C1] RBP: ffffc900022f7308 R08: 000000000003a768 R09: ffffed10150b56a7 [ 167.454951][ C1] R10: ffffed10150b56a7 R11: 0000000000000000 R12: ffff8880a494dca0 [ 167.462926][ C1] R13: dffffc0000000000 R14: 1ffff11014929b94 R15: ffff8880a85ab528 [ 167.470920][ C1] ? free_thread_stack+0x124/0x590 [ 167.476062][ C1] free_thread_stack+0x12e/0x590 [ 167.481026][ C1] put_task_stack+0xa3/0x130 [ 167.485614][ C1] finish_task_switch+0x3f1/0x550 [ 167.490632][ C1] __schedule+0x9a8/0xcc0 [ 167.494960][ C1] preempt_schedule_irq+0xc1/0x140 [ 167.500064][ C1] retint_kernel+0x1b/0x2b [ 167.504500][ C1] RIP: 0010:memcpy_erms+0x8/0x10 [ 167.509443][ C1] Code: cc cc eb 1e 0f 1f 00 48 89 f8 48 89 d1 48 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 c3 66 0f 1f 44 00 00 48 89 f8 48 89 d1 f3 a4 0f 1f 80 00 00 00 00 48 89 f8 48 83 fa 20 72 7e 40 38 fe 7c 35 [ 167.529053][ C1] RSP: 0018:ffffc900022f7568 EFLAGS: 00000256 ORIG_RAX: ffffffffffffff13 [ 167.537456][ C1] RAX: ffff8880a240f096 RBX: 0000000000000006 RCX: 0000000000000000 [ 167.545414][ C1] RDX: 0000000000000006 RSI: ffffffff88bde136 RDI: ffff8880a240f09c [ 167.554069][ C1] RBP: ffffc900022f7590 R08: dffffc0000000000 R09: ffffed1014481e14 [ 167.562039][ C1] R10: ffffed1014481e14 R11: 0000000000000000 R12: ffffffff87e0b9d0 [ 167.570000][ C1] R13: ffffffff88bde130 R14: ffffffff88bde130 R15: ffff8880a240f096 [ 167.577976][ C1] ? vsnprintf+0x180/0x1c00 [ 167.582583][ C1] ? memcpy+0x49/0x60 [ 167.586553][ C1] vsnprintf+0x180/0x1c00 [ 167.590878][ C1] audit_log_vformat+0x2d1/0x880 [ 167.595823][ C1] audit_log_format+0x76/0xa0 [ 167.600491][ C1] ? skb_put+0x10f/0x210 [ 167.604933][ C1] integrity_audit_msg+0x213/0x370 [ 167.610041][ C1] ima_add_violation+0x3cf/0x470 [ 167.615000][ C1] process_measurement+0x623/0x18d0 [ 167.620205][ C1] ? rcu_lock_release+0x9/0x30 [ 167.624961][ C1] ? rcu_lock_release+0x21/0x30 [ 167.629798][ C1] ? smk_of_task_struct+0x1c5/0x1d0 [ 167.634985][ C1] ? smack_task_getsecid+0x26/0x90 [ 167.640089][ C1] ima_file_check+0x9b/0xe0 [ 167.644585][ C1] path_openat+0x1760/0x44a0 [ 167.649202][ C1] do_filp_open+0x192/0x3d0 [ 167.653713][ C1] do_sys_open+0x29f/0x560 [ 167.658120][ C1] __x64_sys_open+0x87/0x90 [ 167.662617][ C1] do_syscall_64+0xf7/0x1c0 [ 167.667110][ C1] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 167.672986][ C1] RIP: 0033:0x45a679 [ 167.676865][ C1] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 167.696472][ C1] RSP: 002b:00007f306477ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 167.704872][ C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a679 [ 167.712844][ C1] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000020000040 [ 167.720800][ C1] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 167.728760][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f306477b6d4 [ 167.736718][ C1] R13: 00000000004fd7df R14: 00000000004deae0 R15: 00000000ffffffff