[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 50.619137][ T23] audit: type=1800 audit(1578479766.832:25): pid=8409 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 50.638370][ T23] audit: type=1800 audit(1578479766.842:26): pid=8409 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 50.687174][ T23] audit: type=1800 audit(1578479766.842:27): pid=8409 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.85' (ECDSA) to the list of known hosts. 2020/01/08 10:36:17 fuzzer started 2020/01/08 10:36:18 dialing manager at 10.128.0.26:35703 2020/01/08 10:36:19 syscalls: 2824 2020/01/08 10:36:19 code coverage: enabled 2020/01/08 10:36:19 comparison tracing: enabled 2020/01/08 10:36:19 extra coverage: enabled 2020/01/08 10:36:19 setuid sandbox: enabled 2020/01/08 10:36:19 namespace sandbox: enabled 2020/01/08 10:36:19 Android sandbox: /sys/fs/selinux/policy does not exist 2020/01/08 10:36:19 fault injection: enabled 2020/01/08 10:36:19 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/01/08 10:36:19 net packet injection: enabled 2020/01/08 10:36:19 net device setup: enabled 2020/01/08 10:36:19 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/01/08 10:36:19 devlink PCI setup: PCI device 0000:00:10.0 is not available 10:36:19 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = socket(0x200040000000015, 0x805, 0x0) getsockopt(r0, 0x114, 0x2710, &(0x7f0000000040)=""/13, &(0x7f00000000c0)=0x100ea) setxattr$trusted_overlay_origin(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000280)='trusted.overlay.origin\x00', &(0x7f0000000340)='y\x00', 0x53, 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 10:36:20 executing program 1: ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, 0x0) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x200, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x4010, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, 0x0) r0 = getpid() rt_tgsigqueueinfo(0x0, r0, 0x16, &(0x7f0000000000)) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000002300)="104113ba46a509469d1b68f5fb31a90d7b0092de14b4698de7158d2693520231f1f334984c34cb7414030c3ff28e6235a0343c51199105ab596a5fe019521473fd4afb9947de8ac6ae4ba7373ed43cbe117892afd00f8cb533493cfcc61d9146c62c8306a686e1097715e451ef86a613a899d4c1e5f53ca85a117ae578a5558df91f46f2ff6fae93c3") ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000100)={0x0, 0x2000000}) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x3b, 0x0, @tid=r0}, &(0x7f0000000180)) timer_create(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) r2 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) dup2(r2, r1) unshare(0x40000000) syzkaller login: [ 63.973762][ T8577] IPVS: ftp: loaded support on port[0] = 21 [ 64.066820][ T8581] IPVS: ftp: loaded support on port[0] = 21 [ 64.123364][ T8577] chnl_net:caif_netlink_parms(): no params data found [ 64.167504][ T8577] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.175687][ T8577] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.183840][ T8577] device bridge_slave_0 entered promiscuous mode [ 64.193987][ T8577] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.202081][ T8577] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.210075][ T8577] device bridge_slave_1 entered promiscuous mode 10:36:20 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r0, r1) splice(r3, 0x0, r2, 0x0, 0x7fffffff, 0x0) [ 64.235551][ T8577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.247176][ T8577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.271448][ T8577] team0: Port device team_slave_0 added [ 64.279062][ T8577] team0: Port device team_slave_1 added [ 64.412121][ T8577] device hsr_slave_0 entered promiscuous mode [ 64.451102][ T8577] device hsr_slave_1 entered promiscuous mode 10:36:20 executing program 3: mkdir(&(0x7f0000000080)='./control\x00', 0x0) setxattr$smack_xattr_label(&(0x7f00000002c0)='./control\x00', &(0x7f0000000300)='security.SMACK64\x00', &(0x7f0000000340)={'@(nodevmime_typemime_type'}, 0x1a, 0x1) [ 64.535600][ T8581] chnl_net:caif_netlink_parms(): no params data found [ 64.540156][ T8585] IPVS: ftp: loaded support on port[0] = 21 [ 64.654994][ T8581] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.669841][ T8581] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.678518][ T8581] device bridge_slave_0 entered promiscuous mode [ 64.724474][ T8581] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.740000][ T8581] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.747579][ T8581] device bridge_slave_1 entered promiscuous mode [ 64.767178][ T8587] IPVS: ftp: loaded support on port[0] = 21 10:36:21 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffff}) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r1 = syz_open_pts(r0, 0x0) poll(&(0x7f0000000240)=[{r1}], 0x1, 0x0) [ 64.826932][ T8581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.890173][ T8581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.989590][ T8577] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.042062][ T8585] chnl_net:caif_netlink_parms(): no params data found [ 65.055107][ T8581] team0: Port device team_slave_0 added [ 65.071834][ T8581] team0: Port device team_slave_1 added 10:36:21 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x7ff}, 0x10) write(r2, &(0x7f0000000080)="200000001a00010000000066835f7f081c140200000000000000000004001f00", 0x20) [ 65.099555][ T8577] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.151909][ T8577] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.209148][ T8577] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.276786][ T8590] IPVS: ftp: loaded support on port[0] = 21 [ 65.294273][ T8577] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.301442][ T8577] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.309110][ T8577] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.316200][ T8577] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.326653][ T2870] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.334689][ T2870] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.372271][ T8581] device hsr_slave_0 entered promiscuous mode [ 65.420277][ T8581] device hsr_slave_1 entered promiscuous mode [ 65.489849][ T8581] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.497582][ T8581] Cannot create hsr debugfs directory [ 65.539157][ T8592] IPVS: ftp: loaded support on port[0] = 21 [ 65.554945][ T8585] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.562230][ T8585] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.570078][ T8585] device bridge_slave_0 entered promiscuous mode [ 65.581258][ T8585] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.588305][ T8585] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.596607][ T8585] device bridge_slave_1 entered promiscuous mode [ 65.642138][ T8585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.686333][ T8585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.763076][ T8587] chnl_net:caif_netlink_parms(): no params data found [ 65.780550][ T8585] team0: Port device team_slave_0 added [ 65.789150][ T8590] chnl_net:caif_netlink_parms(): no params data found [ 65.812757][ T8585] team0: Port device team_slave_1 added [ 65.901460][ T8585] device hsr_slave_0 entered promiscuous mode [ 65.950019][ T8585] device hsr_slave_1 entered promiscuous mode [ 65.999887][ T8585] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.007490][ T8585] Cannot create hsr debugfs directory [ 66.017782][ T8577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.033604][ T8581] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 66.081057][ T8590] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.088130][ T8590] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.096040][ T8590] device bridge_slave_0 entered promiscuous mode [ 66.114220][ T8587] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.121955][ T8587] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.129563][ T8587] device bridge_slave_0 entered promiscuous mode [ 66.138693][ T8581] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 66.191410][ T8590] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.198485][ T8590] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.206322][ T8590] device bridge_slave_1 entered promiscuous mode [ 66.223203][ T8587] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.230560][ T8587] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.238221][ T8587] device bridge_slave_1 entered promiscuous mode [ 66.252741][ T8581] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 66.309093][ T8590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.327140][ T8581] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 66.390374][ T8590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.403287][ T8587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.415693][ T8587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.435402][ T2870] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.443635][ T2870] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.467335][ T8590] team0: Port device team_slave_0 added [ 66.477304][ T8590] team0: Port device team_slave_1 added [ 66.561606][ T8590] device hsr_slave_0 entered promiscuous mode [ 66.600165][ T8590] device hsr_slave_1 entered promiscuous mode [ 66.639905][ T8590] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.647494][ T8590] Cannot create hsr debugfs directory [ 66.657816][ T8592] chnl_net:caif_netlink_parms(): no params data found [ 66.675656][ T8577] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.692171][ T8587] team0: Port device team_slave_0 added [ 66.702665][ T8587] team0: Port device team_slave_1 added [ 66.735304][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.744051][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.753174][ T2931] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.760301][ T2931] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.786932][ T8585] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 66.873312][ T8585] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 66.901625][ T8585] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 66.945426][ T8585] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 66.993044][ T2933] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.001954][ T2933] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.010738][ T2933] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.017776][ T2933] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.025478][ T2933] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.092007][ T8587] device hsr_slave_0 entered promiscuous mode [ 67.140107][ T8587] device hsr_slave_1 entered promiscuous mode [ 67.200430][ T8587] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.208019][ T8587] Cannot create hsr debugfs directory [ 67.233435][ T2921] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.242696][ T8592] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.250974][ T8592] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.258610][ T8592] device bridge_slave_0 entered promiscuous mode [ 67.292716][ T2972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.301709][ T2972] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.313607][ T8592] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.322479][ T8592] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.330424][ T8592] device bridge_slave_1 entered promiscuous mode [ 67.352292][ T2972] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.363118][ T2972] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.371608][ T2972] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.395537][ T8590] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 67.442445][ T2921] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.450939][ T2921] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.459327][ T2921] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.467732][ T2921] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.494180][ T8592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.504815][ T8590] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 67.563796][ T8577] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.582208][ T8592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.601851][ T8590] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 67.643421][ T8590] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 67.708654][ T8592] team0: Port device team_slave_0 added [ 67.732085][ T8592] team0: Port device team_slave_1 added [ 67.741073][ T8587] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 67.784472][ T8587] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 67.841345][ T8587] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 67.884888][ T8587] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 67.935788][ T2933] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.943313][ T2933] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.954823][ T8577] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.964377][ T8581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.044381][ T8592] device hsr_slave_0 entered promiscuous mode [ 68.100132][ T8592] device hsr_slave_1 entered promiscuous mode [ 68.129840][ T8592] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.137446][ T8592] Cannot create hsr debugfs directory [ 68.168732][ T8585] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.176875][ T2933] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.187937][ T2933] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.236565][ T8581] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.250029][ T2933] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.258921][ T2933] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.299467][ T8590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.327408][ T2972] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.335295][ T2972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.347014][ T2972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.355836][ T2972] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.364271][ T2972] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.371326][ T2972] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.378950][ T2972] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.388084][ T2972] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.396469][ T2972] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.403542][ T2972] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.411124][ T2972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.419497][ T2972] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.427654][ T2972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.436891][ T2972] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.444794][ T2972] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.452572][ T2972] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.462667][ T8577] device veth0_vlan entered promiscuous mode [ 68.467529][ T8590] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.468709][ T8577] device veth1_vlan entered promiscuous mode [ 68.497605][ T8592] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 68.534243][ T8585] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.550470][ T2933] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.558582][ T2933] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.566408][ T2933] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.576623][ T2933] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.585707][ T2933] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.595123][ T2933] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.603582][ T2933] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.610651][ T2933] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.618155][ T2933] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.626760][ T2933] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.635153][ T2933] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.642226][ T2933] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.649973][ T2933] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.659245][ T2933] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.674753][ T8592] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 68.734613][ T2933] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.743082][ T2933] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.751916][ T2933] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.760647][ T2933] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.768858][ T2933] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.775931][ T2933] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.783663][ T2933] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.792638][ T2933] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.801275][ T2933] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.809495][ T2933] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.816574][ T2933] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.824290][ T2933] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.833011][ T2933] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.841460][ T2933] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.863827][ T8587] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.872938][ T8592] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 68.913972][ T8592] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 68.979563][ T2933] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.987507][ T2933] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.998296][ T2933] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.006129][ T2933] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.015241][ T2933] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.024019][ T2933] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.033455][ T2933] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.041884][ T2933] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.050321][ T2933] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.058430][ T2933] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.081085][ T8587] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.106572][ T2870] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.126595][ T2870] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.151730][ T2870] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.159543][ T2870] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.173218][ T2870] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.196089][ T2870] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.224659][ T2870] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.238099][ T2870] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.252717][ T2870] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.264285][ T2870] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.276048][ T2870] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.287570][ T2870] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.299620][ T2870] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 174.139696][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 174.146590][ C1] rcu: 1-...!: (10499 ticks this GP) idle=e1a/1/0x4000000000000002 softirq=12984/12984 fqs=44 [ 174.157168][ C1] (t=10501 jiffies g=6673 q=200) [ 174.162194][ C1] rcu: rcu_preempt kthread starved for 10413 jiffies! g6673 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 174.174242][ C1] rcu: RCU grace-period kthread stack dump: [ 174.180116][ C1] rcu_preempt R running task 29032 10 2 0x80004000 [ 174.188005][ C1] Call Trace: [ 174.191289][ C1] __schedule+0x9a0/0xcc0 [ 174.195618][ C1] schedule+0x181/0x210 [ 174.199761][ C1] schedule_timeout+0x14f/0x240 [ 174.204624][ C1] ? run_local_timers+0x120/0x120 [ 174.209647][ C1] rcu_gp_kthread+0xed8/0x1770 [ 174.214440][ C1] kthread+0x332/0x350 [ 174.218526][ C1] ? rcu_report_qs_rsp+0x140/0x140 [ 174.223647][ C1] ? kthread_blkcg+0xe0/0xe0 [ 174.228241][ C1] ret_from_fork+0x24/0x30 [ 174.232663][ C1] NMI backtrace for cpu 1 [ 174.236996][ C1] CPU: 1 PID: 8598 Comm: syz-executor.0 Not tainted 5.5.0-rc5-syzkaller #0 [ 174.245584][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 174.255633][ C1] Call Trace: [ 174.258917][ C1] [ 174.261781][ C1] dump_stack+0x1fb/0x318 [ 174.266130][ C1] nmi_cpu_backtrace+0xaf/0x1a0 [ 174.270977][ C1] ? nmi_trigger_cpumask_backtrace+0x16d/0x290 [ 174.277134][ C1] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 174.283215][ C1] nmi_trigger_cpumask_backtrace+0x174/0x290 [ 174.289212][ C1] arch_trigger_cpumask_backtrace+0x10/0x20 [ 174.295104][ C1] rcu_dump_cpu_stacks+0x15a/0x220 [ 174.300211][ C1] rcu_sched_clock_irq+0xe25/0x1ad0 [ 174.305436][ C1] ? trace_hardirqs_off+0x74/0x80 [ 174.310463][ C1] update_process_times+0x12d/0x180 [ 174.315660][ C1] tick_sched_timer+0x263/0x420 [ 174.320503][ C1] ? tick_setup_sched_timer+0x3d0/0x3d0 [ 174.326068][ C1] __hrtimer_run_queues+0x403/0x840 [ 174.331286][ C1] hrtimer_interrupt+0x38c/0xda0 [ 174.336256][ C1] ? debug_smp_processor_id+0x9/0x20 [ 174.341541][ C1] smp_apic_timer_interrupt+0x109/0x280 [ 174.347109][ C1] apic_timer_interrupt+0xf/0x20 [ 174.352052][ C1] [ 174.355003][ C1] RIP: 0010:free_thread_stack+0x151/0x590 [ 174.360711][ C1] Code: 31 f6 e8 02 8d 6f 00 43 80 3c 2e 00 74 08 4c 89 e7 e8 73 94 6a 00 49 8b 1c 24 48 83 c3 08 48 89 d8 48 c1 e8 03 42 80 3c 28 00 <74> 08 48 89 df e8 55 94 6a 00 48 8b 3b be fc ff ff ff e8 28 04 00 [ 174.380325][ C1] RSP: 0018:ffffc900023876d8 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 174.388749][ C1] RAX: 1ffff110133c0671 RBX: ffff888099e03388 RCX: 0000000000000000 [ 174.396719][ C1] RDX: ffffc90001e29000 RSI: 0000000000000000 RDI: ffffea0002556a40 [ 174.404693][ C1] RBP: ffffc90002387710 R08: 000000000003a728 R09: ffffed1012666ed9 [ 174.412662][ C1] R10: ffffed1012666ed9 R11: 0000000000000000 R12: ffff888099e03420 [ 174.420723][ C1] R13: dffffc0000000000 R14: 1ffff110133c0684 R15: ffff8880933376b8 [ 174.428736][ C1] ? free_thread_stack+0x12e/0x590 [ 174.433848][ C1] put_task_stack+0xa3/0x130 [ 174.438432][ C1] finish_task_switch+0x3f1/0x550 [ 174.443454][ C1] __schedule+0x9a8/0xcc0 [ 174.447799][ C1] preempt_schedule_irq+0xc1/0x140 [ 174.452911][ C1] retint_kernel+0x1b/0x2b [ 174.457328][ C1] RIP: 0010:__find_get_block+0x235/0xb10 [ 174.462969][ C1] Code: fc ff df 80 3c 08 00 74 0c 48 c7 c7 78 95 2a 89 e8 40 9e e7 ff 48 83 3d e0 0c 5f 07 00 0f 84 b3 08 00 00 fb 66 0f 1f 44 00 00 <48> 85 db 74 43 e8 d1 35 ab ff 48 89 df e8 19 d7 ff ff 49 89 de 48 [ 174.482689][ C1] RSP: 0018:ffffc90002387920 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff02 [ 174.491101][ C1] RAX: 1ffffffff12552af RBX: ffff8880962007e0 RCX: dffffc0000000000 [ 174.499067][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff888069b5c884 [ 174.507046][ C1] RBP: ffffc90002387968 R08: ffff888069b5c898 R09: fffffbfff140cf2e [ 174.515017][ C1] R10: fffffbfff140cf2e R11: 0000000000000000 R12: 00000000000341b8 [ 174.522982][ C1] R13: 0000000000000009 R14: 0000000000001000 R15: 0000000000000000 [ 174.530995][ C1] __getblk_gfp+0x2f/0x2a0 [ 174.535410][ C1] ext4_getblk+0x162/0x460 [ 174.539830][ C1] ext4_bread+0x4a/0x340 [ 174.544068][ C1] __ext4_read_dirblock+0x36/0xd90 [ 174.549219][ C1] ? fscrypt_setup_filename+0x95/0xd70 [ 174.554686][ C1] ? __kasan_check_read+0x11/0x20 [ 174.559704][ C1] ? ext4_add_entry+0x4c4/0x3db0 [ 174.564635][ C1] ext4_add_entry+0x2455/0x3db0 [ 174.569478][ C1] ? ext4_mark_iloc_dirty+0x2408/0x32f0 [ 174.575054][ C1] ? ext4_mark_inode_dirty+0x314/0x570 [ 174.580521][ C1] ext4_mkdir+0xd03/0x1460 [ 174.584949][ C1] vfs_mkdir+0x43f/0x610 [ 174.589198][ C1] do_mkdirat+0x1d7/0x320 [ 174.593548][ C1] __x64_sys_mkdir+0x60/0x70 [ 174.598151][ C1] do_syscall_64+0xf7/0x1c0 [ 174.602655][ C1] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 174.608539][ C1] RIP: 0033:0x45af49 [ 174.612439][ C1] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 174.632034][ C1] RSP: 002b:00007f22a3844c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 174.640435][ C1] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 000000000045af49 [ 174.648409][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180 [ 174.656381][ C1] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 174.664420][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f22a38456d4 [ 174.672408][ C1] R13: 00000000004c09b2 R14: 00000000004e03f0 R15: 00000000ffffffff