[ 42.945343][ T25] audit: type=1800 audit(1575380001.103:26): pid=7971 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 42.996089][ T25] audit: type=1800 audit(1575380001.103:27): pid=7971 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [ 43.029636][ T25] audit: type=1800 audit(1575380001.103:28): pid=7971 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 43.811676][ T25] audit: type=1800 audit(1575380001.993:29): pid=7971 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.1.3' (ECDSA) to the list of known hosts. 2019/12/03 13:33:30 fuzzer started 2019/12/03 13:33:32 dialing manager at 10.128.0.26:45711 2019/12/03 13:33:32 syscalls: 2689 2019/12/03 13:33:32 code coverage: enabled 2019/12/03 13:33:32 comparison tracing: enabled 2019/12/03 13:33:32 extra coverage: extra coverage is not supported by the kernel 2019/12/03 13:33:32 setuid sandbox: enabled 2019/12/03 13:33:32 namespace sandbox: enabled 2019/12/03 13:33:32 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/03 13:33:32 fault injection: enabled 2019/12/03 13:33:32 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/03 13:33:32 net packet injection: enabled 2019/12/03 13:33:32 net device setup: enabled 2019/12/03 13:33:32 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/12/03 13:33:32 devlink PCI setup: PCI device 0000:00:10.0 is not available 13:33:33 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000]}}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x70}}, 0x0) 13:33:33 executing program 1: r0 = socket(0x10, 0x2, 0x0) sendto(r0, &(0x7f0000000200)="120000001200e7ef007b1a3fcd00000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x9}, {&(0x7f00000000c0)=""/85, 0x4e4}, {&(0x7f00000024c0)=""/4096, 0x1034}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0xc6}, {&(0x7f0000000280)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x1d}], 0x1fb, &(0x7f0000002400)=""/191, 0x1f9}}], 0x4000000000001de, 0x6, &(0x7f0000003700)={0x77359400}) syzkaller login: [ 55.314401][ T8136] IPVS: ftp: loaded support on port[0] = 21 13:33:33 executing program 2: mount$fuseblk(&(0x7f0000000040)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r0 = getpgrp(0x0) setpriority(0x0, r0, 0xffff) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffd000/0x2000)=nil) setresuid(0x0, 0x0, 0x0) geteuid() accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r4 = syz_open_procfs(0x0, &(0x7f0000000100)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r3, r4, 0x0, 0x1) ioctl$TIOCNXCL(r4, 0x540d) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r5 = getpgid(0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x3, 0x3, 0x0, 0x0, r5}) sched_setaffinity(r5, 0x31f, &(0x7f0000000500)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x6, 0x0, 0xee01, 0x0, 0xee01, 0x80}, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x200}) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) stat(&(0x7f0000000540)='./bus/file0\x00', &(0x7f0000000640)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$pptp(0x18, 0x1, 0x2) r6 = open(0x0, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) open(0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r7 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getresuid(&(0x7f0000000d00), &(0x7f0000000d40), 0x0) r8 = socket$inet6(0xa, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x1a, 0x0, 0x0) bind$inet6(r8, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="00000000000000000000ffff00"}, 0x1c) socket$inet6(0xa, 0x0, 0x0) r9 = socket$inet6(0xa, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x1a, 0x0, 0x0) bind$inet6(r9, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="00000000000000000000ffff00"}, 0x1c) sendmmsg$unix(r6, &(0x7f0000000ec0)=[{&(0x7f00000009c0)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="000000001400000000000001a3a21b27d8c71fb88127bc00", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r7, @ANYRES64=r8, @ANYRES32=0x0, @ANYRES16=r9, @ANYRES32=0x0, @ANYBLOB], 0x5a, 0xbfecbd20c6d21766}], 0x1, 0x2) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x6, 0x0, 0x0, 0x0, 0xee01}, 0xa99, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200}) shmget(0x1, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_SET(0x0, 0x1, 0x0) shmctl$IPC_SET(0x0, 0x1, 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000102000007) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000240)={0x0, 0x1, 0x1}) socket(0x0, 0x0, 0x0) socket(0x1e, 0x1, 0x0) syz_genetlink_get_family_id$team(0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000280)=0x14, 0x80000) syz_open_dev$sndpcmc(&(0x7f0000000a00)='/dev/snd/pcmC#D#c\x00', 0x101, 0x400) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) [ 55.469155][ T8138] IPVS: ftp: loaded support on port[0] = 21 [ 55.481438][ T8136] chnl_net:caif_netlink_parms(): no params data found [ 55.610292][ T8136] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.625626][ T8136] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.633690][ T8136] device bridge_slave_0 entered promiscuous mode 13:33:33 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000000c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000fefff67a0af0fff8ffffef79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7050000040000006a0a00fe00000000850000000b000000b7000000000000009500010000000000"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r2, 0x0, 0xe80, 0x0, &(0x7f0000000380)="a6833c15ce9573f3ce05d1a282ee", 0x0, 0x57d}, 0x28) [ 55.707405][ T8136] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.719529][ T8136] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.734765][ T8136] device bridge_slave_1 entered promiscuous mode [ 55.811235][ T8142] IPVS: ftp: loaded support on port[0] = 21 [ 55.819368][ T8138] chnl_net:caif_netlink_parms(): no params data found [ 55.831163][ T8136] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.868981][ T8136] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.937521][ T8136] team0: Port device team_slave_0 added [ 55.946093][ T8138] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.953175][ T8138] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.964118][ T8138] device bridge_slave_0 entered promiscuous mode [ 55.978529][ T8136] team0: Port device team_slave_1 added 13:33:34 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) [ 55.997347][ T8138] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.004442][ T8138] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.036031][ T8138] device bridge_slave_1 entered promiscuous mode [ 56.103815][ T8144] IPVS: ftp: loaded support on port[0] = 21 [ 56.122493][ T8138] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.146858][ T8138] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.169889][ T8148] IPVS: ftp: loaded support on port[0] = 21 13:33:34 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e0000002a000500d25a80648c000000040000001000094002376ee6735e000000053582c137153e370900018000", 0x2e}], 0x1}, 0x0) [ 56.207845][ T8136] device hsr_slave_0 entered promiscuous mode [ 56.247115][ T8136] device hsr_slave_1 entered promiscuous mode [ 56.370359][ T8138] team0: Port device team_slave_0 added [ 56.381090][ T8142] chnl_net:caif_netlink_parms(): no params data found [ 56.388820][ T8150] IPVS: ftp: loaded support on port[0] = 21 [ 56.408615][ T8138] team0: Port device team_slave_1 added [ 56.469896][ T8136] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.553366][ T8136] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.648016][ T8138] device hsr_slave_0 entered promiscuous mode [ 56.715327][ T8138] device hsr_slave_1 entered promiscuous mode [ 56.795204][ T8138] debugfs: Directory 'hsr0' with parent '/' already present! [ 56.813900][ T8142] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.821128][ T8142] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.828976][ T8142] device bridge_slave_0 entered promiscuous mode [ 56.837005][ T8142] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.844067][ T8142] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.852217][ T8142] device bridge_slave_1 entered promiscuous mode [ 56.859383][ T8136] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 56.958973][ T8136] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 57.012548][ T8142] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.056784][ T8148] chnl_net:caif_netlink_parms(): no params data found [ 57.079441][ T8142] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.101930][ T8148] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.109153][ T8148] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.117053][ T8148] device bridge_slave_0 entered promiscuous mode [ 57.144194][ T8148] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.151777][ T8148] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.159628][ T8148] device bridge_slave_1 entered promiscuous mode [ 57.183760][ T8138] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 57.249112][ T8138] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 57.300961][ T8138] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 57.360843][ T8142] team0: Port device team_slave_0 added [ 57.368302][ T8142] team0: Port device team_slave_1 added [ 57.379823][ T8148] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.389261][ T8138] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 57.486260][ T8148] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.506149][ T8148] team0: Port device team_slave_0 added [ 57.559085][ T8142] device hsr_slave_0 entered promiscuous mode [ 57.625325][ T8142] device hsr_slave_1 entered promiscuous mode [ 57.675188][ T8142] debugfs: Directory 'hsr0' with parent '/' already present! [ 57.689581][ T8144] chnl_net:caif_netlink_parms(): no params data found [ 57.708749][ T8148] team0: Port device team_slave_1 added [ 57.726903][ T8150] chnl_net:caif_netlink_parms(): no params data found [ 57.848407][ T8148] device hsr_slave_0 entered promiscuous mode [ 57.885510][ T8148] device hsr_slave_1 entered promiscuous mode [ 57.935125][ T8148] debugfs: Directory 'hsr0' with parent '/' already present! [ 57.943823][ T8150] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.952078][ T8150] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.960287][ T8150] device bridge_slave_0 entered promiscuous mode [ 57.972189][ T8150] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.979641][ T8150] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.987815][ T8150] device bridge_slave_1 entered promiscuous mode [ 58.013973][ T8144] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.021488][ T8144] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.029596][ T8144] device bridge_slave_0 entered promiscuous mode [ 58.037941][ T8150] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.063665][ T8144] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.071844][ T8144] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.080083][ T8144] device bridge_slave_1 entered promiscuous mode [ 58.100547][ T8150] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.117355][ T8142] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 58.169339][ T8142] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 58.227939][ T8142] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 58.288407][ T8144] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.318250][ T8142] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 58.384616][ T8144] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.401725][ T8148] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 58.468705][ T8150] team0: Port device team_slave_0 added [ 58.477156][ T8150] team0: Port device team_slave_1 added [ 58.538452][ T8150] device hsr_slave_0 entered promiscuous mode [ 58.575414][ T8150] device hsr_slave_1 entered promiscuous mode [ 58.605201][ T8150] debugfs: Directory 'hsr0' with parent '/' already present! [ 58.612904][ T8148] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 58.670614][ T8148] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 58.739943][ T8136] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.751023][ T8144] team0: Port device team_slave_0 added [ 58.758528][ T8144] team0: Port device team_slave_1 added [ 58.770612][ T8138] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.778363][ T8148] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 58.888787][ T8144] device hsr_slave_0 entered promiscuous mode [ 58.948133][ T8144] device hsr_slave_1 entered promiscuous mode [ 58.985185][ T8144] debugfs: Directory 'hsr0' with parent '/' already present! [ 59.010002][ T8136] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.036264][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.044798][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.058645][ T8138] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.084892][ T8144] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 59.126874][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.134577][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.142844][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.151668][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.160465][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.167848][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.176010][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.184534][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.193171][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.200297][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.208677][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.217439][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.225900][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.232938][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.261399][ T8150] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 59.297098][ T8150] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 59.337241][ T8150] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 59.386927][ T8144] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 59.427301][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.436113][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.448182][ T8148] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.465714][ T8150] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 59.517469][ T8144] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 59.568602][ T8144] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 59.617610][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.627648][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.636654][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.645174][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.652235][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.663796][ T8142] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.701912][ T8148] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.714564][ T8142] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.724545][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.733801][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.742840][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.751805][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.760461][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.769482][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.778206][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.786823][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.795562][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.803311][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.811216][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.819734][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.827663][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.841366][ T8136] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.853042][ T8136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.874564][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.883342][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.892409][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.901450][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.910162][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.918739][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.927726][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.936263][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.943328][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.951232][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.959838][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.968531][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.975650][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.983157][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.991883][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.000725][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.037899][ T8154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.049569][ T8154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.058772][ T8154] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.066452][ T8154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.074133][ T8154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.082534][ T8154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.090079][ T8154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.098813][ T8154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.107305][ T8154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.123270][ T8154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.131795][ T8154] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.138879][ T8154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.146549][ T8154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.155327][ T8154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.163736][ T8154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.182920][ T8148] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 60.194176][ T8148] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.214411][ T8156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.224059][ T8156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.232971][ T8156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.242806][ T8156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.251646][ T8156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.260199][ T8156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.268721][ T8156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.277759][ T8156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.286506][ T8156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.296191][ T8156] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.304073][ T8156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.325755][ T8136] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.334280][ T8154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.343243][ T8154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.352513][ T8154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.361832][ T8154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.386578][ T8138] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.412974][ T8142] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 60.423743][ T8142] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.450726][ T8148] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.462044][ T8154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.471999][ T8154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.487349][ T8154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.500175][ T8154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.510470][ T8154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.522397][ T8154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.533183][ T8154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.547448][ T8154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.562421][ T8154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.572210][ T8154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.603314][ T8142] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.623969][ T8150] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.646120][ T8150] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.687749][ T8150] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 60.703479][ T8150] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.742621][ T8150] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.484976][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 165.491979][ C0] rcu: 0-...!: (10499 ticks this GP) idle=0c6/1/0x4000000000000002 softirq=11230/11231 fqs=13 [ 165.502841][ C0] (t=10501 jiffies g=6445 q=424) [ 165.508046][ C0] rcu: rcu_preempt kthread starved for 10475 jiffies! g6445 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 165.519809][ C0] rcu: RCU grace-period kthread stack dump: [ 165.526367][ C0] rcu_preempt R running task 29032 10 2 0x80004000 [ 165.534471][ C0] Call Trace: [ 165.537765][ C0] __schedule+0x9a0/0xcc0 [ 165.542829][ C0] schedule+0x181/0x210 [ 165.547103][ C0] schedule_timeout+0x14f/0x240 [ 165.552039][ C0] ? run_local_timers+0x120/0x120 [ 165.557177][ C0] rcu_gp_kthread+0xed8/0x1770 [ 165.562033][ C0] kthread+0x332/0x350 [ 165.566102][ C0] ? rcu_report_qs_rsp+0x140/0x140 [ 165.571292][ C0] ? kthread_blkcg+0xe0/0xe0 [ 165.576056][ C0] ret_from_fork+0x24/0x30 [ 165.580570][ C0] NMI backtrace for cpu 0 [ 165.585157][ C0] CPU: 0 PID: 8159 Comm: kworker/u4:3 Not tainted 5.4.0-syzkaller #0 [ 165.593382][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 165.603518][ C0] Call Trace: [ 165.607144][ C0] [ 165.610168][ C0] dump_stack+0x1fb/0x318 [ 165.614607][ C0] nmi_cpu_backtrace+0xaf/0x1a0 [ 165.619991][ C0] ? nmi_trigger_cpumask_backtrace+0x16d/0x290 [ 165.626414][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 165.633007][ C0] nmi_trigger_cpumask_backtrace+0x174/0x290 [ 165.638985][ C0] arch_trigger_cpumask_backtrace+0x10/0x20 [ 165.645072][ C0] rcu_dump_cpu_stacks+0x15a/0x220 [ 165.650273][ C0] rcu_sched_clock_irq+0xe25/0x1ad0 [ 165.655950][ C0] ? trace_hardirqs_off+0x74/0x80 [ 165.661064][ C0] update_process_times+0x12d/0x180 [ 165.666434][ C0] tick_sched_timer+0x263/0x420 [ 165.671295][ C0] ? tick_setup_sched_timer+0x3d0/0x3d0 [ 165.676839][ C0] __hrtimer_run_queues+0x403/0x840 [ 165.682237][ C0] hrtimer_interrupt+0x38c/0xda0 [ 165.687186][ C0] ? debug_smp_processor_id+0x9/0x20 [ 165.692474][ C0] smp_apic_timer_interrupt+0x109/0x280 [ 165.698248][ C0] apic_timer_interrupt+0xf/0x20 [ 165.703177][ C0] [ 165.706115][ C0] RIP: 0010:mod_memcg_page_state+0x6/0x190 [ 165.712006][ C0] Code: 5f 00 eb 0c e8 0b 29 2e 00 eb 05 e8 04 29 2e 00 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d c3 0f 1f 44 00 00 55 48 89 e5 41 57 <41> 56 41 54 53 41 89 f6 48 89 fb e8 da 28 2e 00 48 83 c3 38 48 89 [ 165.736082][ C0] RSP: 0018:ffffc90002087e28 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 165.744660][ C0] RAX: 1ffff1101455b581 RBX: ffff8880a2adac08 RCX: 0000000000000000 [ 165.752718][ C0] RDX: 0000000000000000 RSI: 00000000fffffffc RDI: ffffea00028b4040 [ 165.761083][ C0] RBP: ffffc90002087e30 R08: 000000000003a768 R09: ffffed10127d3b3f [ 165.769247][ C0] R10: ffffed10127d3b3f R11: 0000000000000000 R12: ffff8880a2adaca0 [ 165.777910][ C0] R13: dffffc0000000000 R14: 1ffff1101455b594 R15: ffff888093e9d9e8 [ 165.786618][ C0] free_thread_stack+0x168/0x590 [ 165.791805][ C0] put_task_stack+0xa3/0x130 [ 165.796443][ C0] finish_task_switch+0x3f1/0x550 [ 165.801994][ C0] ? proc_cap_handler+0x450/0x450 [ 165.807034][ C0] schedule_tail+0x20/0x1a0 [ 165.811540][ C0] ? proc_cap_handler+0x450/0x450 [ 165.816819][ C0] ret_from_fork+0x8/0x30