[ 40.505280][ T23] audit: type=1800 audit(1575345814.715:27): pid=7868 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [ 40.532215][ T23] audit: type=1800 audit(1575345814.715:28): pid=7868 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 41.049688][ T23] audit: type=1800 audit(1575345815.325:29): pid=7868 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 41.069146][ T23] audit: type=1800 audit(1575345815.325:30): pid=7868 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.15.212' (ECDSA) to the list of known hosts. 2019/12/03 04:03:42 fuzzer started 2019/12/03 04:03:43 dialing manager at 10.128.0.26:38907 2019/12/03 04:03:43 syscalls: 2697 2019/12/03 04:03:43 code coverage: enabled 2019/12/03 04:03:43 comparison tracing: enabled 2019/12/03 04:03:43 extra coverage: extra coverage is not supported by the kernel 2019/12/03 04:03:43 setuid sandbox: enabled 2019/12/03 04:03:43 namespace sandbox: enabled 2019/12/03 04:03:43 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/03 04:03:43 fault injection: enabled 2019/12/03 04:03:43 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/03 04:03:43 net packet injection: enabled 2019/12/03 04:03:43 net device setup: enabled 2019/12/03 04:03:43 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/12/03 04:03:43 devlink PCI setup: PCI device 0000:00:10.0 is not available 04:03:44 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000001c0)={{0x2, 0x4e21, @loopback}, {0x1127bb6743fa1ec7, @dev}, 0x10, {0x2, 0x4e23, @remote}, 'nr0\x00'}) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) getsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x0, &(0x7f00000004c0)) accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x39, &(0x7f0000000340)={0x0, 0x1}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r0, &(0x7f00000012c0)="20048a927f1f6588b967481241ba7860f46ef65ac618ded8971495abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf746bec66ba", 0xfe6a, 0xe, 0x0, 0xfffffffffffffe2b) 04:03:44 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8b22, &(0x7f00000000c0)='wlan0\x00$\x14\x17\xf2\x8dS\x98\b\x9f\xeeY\t\x19\x03;H\xf6\xaa\xd4\xb7Rc\xf8\xb0j\xb0\xf2[\xdc\xe5F\x8f\xfejv?') syzkaller login: [ 50.558034][ T8031] IPVS: ftp: loaded support on port[0] = 21 [ 50.719830][ T8033] IPVS: ftp: loaded support on port[0] = 21 [ 50.738734][ T8031] chnl_net:caif_netlink_parms(): no params data found 04:03:45 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='veno\x00', 0x5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x100) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[@ANYRES32=r0], 0x100000530) [ 50.821584][ T8031] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.828698][ T8031] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.855652][ T8031] device bridge_slave_0 entered promiscuous mode [ 50.877913][ T8031] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.892820][ T8031] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.911719][ T8031] device bridge_slave_1 entered promiscuous mode [ 51.000036][ T8031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.017685][ T8033] chnl_net:caif_netlink_parms(): no params data found [ 51.032910][ T8031] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 04:03:45 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000500)='+\x8b\x8a\xa9\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) write$binfmt_misc(r2, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) sendfile(r1, r2, &(0x7f0000000000), 0xffff) fcntl$addseals(r2, 0x409, 0x8) r3 = socket$packet(0x11, 0x3, 0x300) r4 = dup3(r3, r2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) dup3(r4, r0, 0x0) [ 51.049522][ T8038] IPVS: ftp: loaded support on port[0] = 21 [ 51.099037][ T8031] team0: Port device team_slave_0 added [ 51.138093][ T8033] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.160713][ T8033] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.168552][ T8033] device bridge_slave_0 entered promiscuous mode [ 51.193567][ T8031] team0: Port device team_slave_1 added [ 51.211158][ T8033] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.218410][ T8033] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.239673][ T8033] device bridge_slave_1 entered promiscuous mode 04:03:45 executing program 4: unshare(0x8020000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00\x90\x92\xb3\xe6L\xc9l`w_G-\x18p\xffMG\x1c~\xefC\xb9\xf6Vr\x11x\x1d\x1dh\xe1[\xfa\xb4Y\\\xe0\xd3\xb0\xbd[W\x06#\x836\xd9\r>R\x1c\xca!MR\xbf\x93\xcc,P\x90\xdf\x8d^\xd4\xecW\xab\xdc!\x029\x82\xc1\xba5o\xa0{r\xb5v\xea\xd8\x05\xb0IC\xa3\xfa\xf8\x87\x1d\x06\x1d\xd9\x9aR\xe3\x036\xa3\n\xcb\xec\xa7; \xa1\xe1w\x0f~\xebw\xb3\x1a\xf2\x00\xf2\x97\xb2l?\x10M\xfc\xa7\xd3\xa5#-=\xf5\xf8\x10\x1f\xb2\xfe\x80\xb5s\x05gI\x9a\x1do\x15\x1f\xd8\x93Wb\xe48M\xd9') mq_open(&(0x7f0000000140)='*\x89-vboxnet1vmnet0,posix_acl_access\x00', 0xd2b0a038b49ed8f2, 0x0, 0x0) setns(r2, 0x0) [ 51.345328][ T8031] device hsr_slave_0 entered promiscuous mode [ 51.402689][ T8031] device hsr_slave_1 entered promiscuous mode [ 51.446448][ T8033] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.462824][ T8040] IPVS: ftp: loaded support on port[0] = 21 [ 51.483766][ T8042] IPVS: ftp: loaded support on port[0] = 21 04:03:45 executing program 5: r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000300)=@chain={'key_or_keyring:', 0x0, ':chain\x00'}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000300)=@chain={'key_or_keyring:', 0x0, ':chain\x00'}) [ 51.496191][ T8033] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.584431][ T8033] team0: Port device team_slave_0 added [ 51.648692][ T8033] team0: Port device team_slave_1 added [ 51.674314][ T8031] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 51.794531][ T8033] device hsr_slave_0 entered promiscuous mode [ 51.840957][ T8033] device hsr_slave_1 entered promiscuous mode [ 51.890735][ T8033] debugfs: Directory 'hsr0' with parent '/' already present! [ 51.905802][ T8031] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 51.973795][ T8031] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 52.031884][ T8038] chnl_net:caif_netlink_parms(): no params data found [ 52.040371][ T8031] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 52.087693][ T8045] IPVS: ftp: loaded support on port[0] = 21 [ 52.157915][ T8038] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.166095][ T8038] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.173700][ T8038] device bridge_slave_0 entered promiscuous mode [ 52.184346][ T8038] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.192306][ T8038] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.199817][ T8038] device bridge_slave_1 entered promiscuous mode [ 52.236748][ T8033] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 52.283457][ T8033] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 52.311876][ T8040] chnl_net:caif_netlink_parms(): no params data found [ 52.320254][ T8033] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 52.354026][ T8038] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.381356][ T8033] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 52.423742][ T8038] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.446690][ T8038] team0: Port device team_slave_0 added [ 52.454372][ T8038] team0: Port device team_slave_1 added [ 52.602300][ T8038] device hsr_slave_0 entered promiscuous mode [ 52.671005][ T8038] device hsr_slave_1 entered promiscuous mode [ 52.750721][ T8038] debugfs: Directory 'hsr0' with parent '/' already present! [ 52.764785][ T8040] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.772590][ T8040] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.780146][ T8040] device bridge_slave_0 entered promiscuous mode [ 52.789728][ T8045] chnl_net:caif_netlink_parms(): no params data found [ 52.806963][ T8040] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.814215][ T8040] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.822173][ T8040] device bridge_slave_1 entered promiscuous mode [ 52.837522][ T8042] chnl_net:caif_netlink_parms(): no params data found [ 52.868517][ T8040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.883053][ T8040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.905307][ T8045] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.912647][ T8045] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.920223][ T8045] device bridge_slave_0 entered promiscuous mode [ 52.928715][ T8045] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.935907][ T8045] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.943555][ T8045] device bridge_slave_1 entered promiscuous mode [ 53.000683][ T8040] team0: Port device team_slave_0 added [ 53.016352][ T8031] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.023595][ T8042] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.034482][ T8042] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.042401][ T8042] device bridge_slave_0 entered promiscuous mode [ 53.050772][ T8042] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.057822][ T8042] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.066015][ T8042] device bridge_slave_1 entered promiscuous mode [ 53.072929][ T8038] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 53.114079][ T8040] team0: Port device team_slave_1 added [ 53.119856][ T8038] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 53.173782][ T8045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.184857][ T8045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.222048][ T8038] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 53.263707][ T8045] team0: Port device team_slave_0 added [ 53.272059][ T8033] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.280716][ T8042] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.290066][ T8038] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 53.338437][ T8045] team0: Port device team_slave_1 added [ 53.350111][ T8042] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.413361][ T8040] device hsr_slave_0 entered promiscuous mode [ 53.450970][ T8040] device hsr_slave_1 entered promiscuous mode [ 53.510747][ T8040] debugfs: Directory 'hsr0' with parent '/' already present! [ 53.526374][ T8031] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.551643][ T8042] team0: Port device team_slave_0 added [ 53.562354][ T3137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.570583][ T3137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.578119][ T3137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.586834][ T3137] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.595508][ T3137] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.602680][ T3137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.611756][ T3137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.620212][ T3137] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.628565][ T3137] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.635612][ T3137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.644555][ T3137] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.652699][ T3137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.660234][ T3137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.723268][ T8045] device hsr_slave_0 entered promiscuous mode [ 53.760917][ T8045] device hsr_slave_1 entered promiscuous mode [ 53.800701][ T8045] debugfs: Directory 'hsr0' with parent '/' already present! [ 53.811895][ T8042] team0: Port device team_slave_1 added [ 53.835622][ T2709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.846295][ T2709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.855799][ T2709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.864527][ T2709] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.876114][ T8033] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.972409][ T8042] device hsr_slave_0 entered promiscuous mode [ 54.011326][ T8042] device hsr_slave_1 entered promiscuous mode [ 54.070750][ T8042] debugfs: Directory 'hsr0' with parent '/' already present! [ 54.079737][ T8049] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.088502][ T8049] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.097147][ T8049] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.106039][ T8040] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 54.151864][ T8045] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 54.186237][ T8045] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 54.226308][ T8045] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 54.295034][ T8040] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 54.352420][ T8049] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.363622][ T8049] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.374819][ T8031] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.386747][ T8031] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.394736][ T8045] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 54.444502][ T8040] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 54.472606][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.482275][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.490377][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.499191][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.508228][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.515300][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.524577][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.533279][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.541808][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.548830][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.556369][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.565021][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.595968][ T8040] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 54.638300][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.646162][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.655151][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.664685][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.679360][ T8042] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 54.719886][ T8042] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 54.752651][ T8042] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 54.810263][ T8031] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.829499][ T8042] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 54.854431][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.862000][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.869401][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.878636][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.902587][ T8033] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 54.914266][ T8033] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.928531][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.937103][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.945511][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.953731][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.965571][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.989806][ T8033] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.021566][ T8049] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.028999][ T8049] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.075173][ T8038] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.097219][ T8038] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.185236][ T8038] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 55.213023][ T8038] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.283237][ T8038] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.060545][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 160.067307][ C0] rcu: 0-...!: (10499 ticks this GP) idle=f6a/1/0x4000000000000002 softirq=9928/9928 fqs=38 [ 160.077764][ C0] (t=10501 jiffies g=6205 q=398) [ 160.082783][ C0] rcu: rcu_preempt kthread starved for 10424 jiffies! g6205 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 160.093868][ C0] rcu: RCU grace-period kthread stack dump: [ 160.099747][ C0] rcu_preempt R running task 29032 10 2 0x80004000 [ 160.107645][ C0] Call Trace: [ 160.110936][ C0] __schedule+0x9a0/0xcc0 [ 160.115261][ C0] schedule+0x181/0x210 [ 160.119404][ C0] schedule_timeout+0x14f/0x240 [ 160.124243][ C0] ? run_local_timers+0x120/0x120 [ 160.129257][ C0] rcu_gp_kthread+0xed8/0x1770 [ 160.134026][ C0] kthread+0x332/0x350 [ 160.138101][ C0] ? rcu_report_qs_rsp+0x140/0x140 [ 160.143234][ C0] ? kthread_blkcg+0xe0/0xe0 [ 160.147830][ C0] ret_from_fork+0x24/0x30 [ 160.152256][ C0] NMI backtrace for cpu 0 [ 160.156576][ C0] CPU: 0 PID: 8045 Comm: syz-executor.5 Not tainted 5.4.0-syzkaller #0 [ 160.164796][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 160.174853][ C0] Call Trace: [ 160.178129][ C0] [ 160.180973][ C0] dump_stack+0x1fb/0x318 [ 160.185293][ C0] nmi_cpu_backtrace+0xaf/0x1a0 [ 160.190128][ C0] ? nmi_trigger_cpumask_backtrace+0x16d/0x290 [ 160.196972][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 160.203022][ C0] nmi_trigger_cpumask_backtrace+0x174/0x290 [ 160.208986][ C0] arch_trigger_cpumask_backtrace+0x10/0x20 [ 160.214861][ C0] rcu_dump_cpu_stacks+0x15a/0x220 [ 160.219962][ C0] rcu_sched_clock_irq+0xe25/0x1ad0 [ 160.225147][ C0] ? trace_hardirqs_off+0x74/0x80 [ 160.230161][ C0] update_process_times+0x12d/0x180 [ 160.235344][ C0] tick_sched_timer+0x263/0x420 [ 160.240354][ C0] ? tick_setup_sched_timer+0x3d0/0x3d0 [ 160.245887][ C0] __hrtimer_run_queues+0x403/0x840 [ 160.251082][ C0] hrtimer_interrupt+0x38c/0xda0 [ 160.256021][ C0] ? debug_smp_processor_id+0x9/0x20 [ 160.261295][ C0] smp_apic_timer_interrupt+0x109/0x280 [ 160.266823][ C0] apic_timer_interrupt+0xf/0x20 [ 160.271838][ C0] [ 160.274763][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x50 [ 160.280813][ C0] Code: 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 53 48 89 fb e8 13 00 00 00 48 8b 3d 34 e7 cc 07 48 89 de e8 64 02 3b 00 5b 5d c3 cc <48> 8b 04 24 65 48 8b 0c 25 c0 1d 02 00 65 8b 15 b8 81 8b 7e f7 c2 [ 160.300399][ C0] RSP: 0018:ffffc90001f87a90 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 160.308794][ C0] RAX: 1ffff11013f36931 RBX: ffffea00029e3f40 RCX: 0000000000000000 [ 160.316750][ C0] RDX: 0000000000000000 RSI: 00000000fffffffc RDI: ffffea00029e3f40 [ 160.324791][ C0] RBP: ffffc90001f87ab8 R08: dffffc0000000000 R09: fffffbfff120248a [ 160.332746][ C0] R10: fffffbfff120248a R11: 0000000000000000 R12: ffff88809f9b4a20 [ 160.340700][ C0] R13: dffffc0000000000 R14: 00000000fffffffc R15: ffff8880a8747628 [ 160.348676][ C0] ? mod_memcg_page_state+0x16/0x190 [ 160.353945][ C0] free_thread_stack+0x168/0x590 [ 160.358868][ C0] put_task_stack+0xa3/0x130 [ 160.363442][ C0] finish_task_switch+0x3f1/0x550 [ 160.368456][ C0] __schedule+0x9a8/0xcc0 [ 160.372779][ C0] preempt_schedule_irq+0xc1/0x140 [ 160.377874][ C0] retint_kernel+0x1b/0x2b [ 160.382294][ C0] RIP: 0010:kmem_cache_free+0xc8/0xf0 [ 160.387649][ C0] Code: 58 07 00 74 42 4c 89 f7 57 9d 0f 1f 44 00 00 e8 0e 98 ca ff eb 19 e8 a7 95 ca ff 48 83 3d 07 f7 58 07 00 74 24 4c 89 f7 57 9d <0f> 1f 44 00 00 4c 89 e7 4c 89 fe e8 58 01 00 00 5b 41 5c 41 5e 41 [ 160.407357][ C0] RSP: 0018:ffffc90001f87d10 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13 [ 160.415758][ C0] RAX: ffff88809753ced4 RBX: ffff8880aa9eb000 RCX: ffff88809753c640 [ 160.423726][ C0] RDX: 0000000000000000 RSI: ffffffff83474bc4 RDI: 0000000000000286 [ 160.431702][ C0] RBP: ffffc90001f87d30 R08: ffff88809753ce98 R09: ffffc90001f87b14 [ 160.439666][ C0] R10: 000000000000000b R11: 0000000000000000 R12: ffffffff83474bc4 [ 160.447624][ C0] R13: ffff888095bf2cc0 R14: 0000000000000286 R15: ffff8880a304d1f8 [ 160.455598][ C0] ? security_file_free+0xc4/0xe0 [ 160.460618][ C0] ? security_file_free+0xc4/0xe0 [ 160.465649][ C0] security_file_free+0xc4/0xe0 [ 160.470489][ C0] __fput+0x506/0x740 [ 160.474465][ C0] ____fput+0x15/0x20 [ 160.478440][ C0] task_work_run+0x17e/0x1b0 [ 160.483019][ C0] prepare_exit_to_usermode+0x483/0x5b0 [ 160.488555][ C0] syscall_return_slowpath+0x113/0x4a0 [ 160.494002][ C0] do_syscall_64+0x11f/0x1c0 [ 160.498578][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 160.504457][ C0] RIP: 0033:0x45e433 [ 160.508335][ C0] Code: 48 89 ee 48 89 e7 e8 2c 1f fa ff 31 c0 48 89 e2 be 33 89 00 00 89 df e8 bb c0 ff ff 85 c0 78 17 48 63 fb b8 03 00 00 00 0f 05 <8b> 44 24 10 48 83 c4 38 5b 5d c3 66 90 48 c7 c2 d4 ff ff ff 48 63 [ 160.527922][ C0] RSP: 002b:00007ffe95171aa0 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 160.536314][ C0] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 000000000045e433 [ 160.544269][ C0] RDX: 00007ffe95171aa0 RSI: 0000000000008933 RDI: 0000000000000004 [ 160.552223][ C0] RBP: 00000000004bfb19 R08: 000000000000000a R09: 000000000000000a [ 160.560175][ C0] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000003 [ 160.568129][ C0] R13: 0000000000000006 R14: 0000000000000000 R15: 00007ffe95171d30