[ 42.859340][ T25] audit: type=1800 audit(1575349971.547:26): pid=7998 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 42.889491][ T25] audit: type=1800 audit(1575349971.547:27): pid=7998 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [ 42.916304][ T25] audit: type=1800 audit(1575349971.547:28): pid=7998 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 43.611146][ T25] audit: type=1800 audit(1575349972.327:29): pid=7998 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.1.61' (ECDSA) to the list of known hosts. 2019/12/03 05:13:01 fuzzer started 2019/12/03 05:13:03 dialing manager at 10.128.0.26:38907 2019/12/03 05:13:03 syscalls: 2697 2019/12/03 05:13:03 code coverage: enabled 2019/12/03 05:13:03 comparison tracing: enabled 2019/12/03 05:13:03 extra coverage: extra coverage is not supported by the kernel 2019/12/03 05:13:03 setuid sandbox: enabled 2019/12/03 05:13:03 namespace sandbox: enabled 2019/12/03 05:13:03 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/03 05:13:03 fault injection: enabled 2019/12/03 05:13:03 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/03 05:13:03 net packet injection: enabled 2019/12/03 05:13:03 net device setup: enabled 2019/12/03 05:13:03 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/12/03 05:13:03 devlink PCI setup: PCI device 0000:00:10.0 is not available 05:13:04 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xb4/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec{3nC\xbe\xd2v:\x95\xf2\x99:\xa2fK>\xc8i\xb3\xad4\x05\x87GJ%\x95\x9f{G\xd02j\xdek\xca\x9ax\xcd:P~\xd3g\xa5T04\xee\xe8[2\xd7\x8e\x92~m\x1f4\xef.\xd1\xf9!V\xb5\xf7\x12\x85\x7f\xbf\xe6\x1f\xa1\xcc\xd4\xda\n~>0\xc5.\x84\xda\xfc\x9e\xde\xaa\xee\xa6\xbb\xc20\x9e\xd5\x93\xf0p6N\xd6WL\x7fP\xe3\xd9\x8dK\xffG\xe0\x98\x14\xb5\xe5z\x036\xc2o\xc8\xa9\xdc\x85\xd8\x14\xcda\xf2\xc5Xr\x9d\x91\xd0\x18\x86\xa2\xdb\xbe\xa3bwE{\xcbr\x88\xc5\xc3\xab\t\x9a\x0e\xd7\xbcb\\\f\x05O\xe2dUQ\xef?W\xf49U\x16\xe8\xee\xea\xaa\x88\x1f\xf3Lp4\xf1\xe9\xb2!\x0e+\x9f\x89\x03^z\xa8C\xa2\x14\xd6Pt\x89\xc0\xbe\xff\xd60$\x0e\x81\xa3\xccO\x101\x10\x9d\xb7\xf3\xba\xaa\xd6\xdf*\xe7\"`\xb8.\x97G\f\xe1xh\x16\x9f^\x06C', 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xb4/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec{3nC\xbe\xd2v:\x95\xf2\x99:\xa2fK>\xc8i\xb3\xad4\x05\x87GJ%\x95\x9f{G\xd02j\xdek\xca\x9ax\xcd:P~\xd3g\xa5T04\xee\xe8[2\xd7\x8e\x92~m\x1f4\xef.\xd1\xf9!V\xb5\xf7\x12\x85\x7f\xbf\xe6\x1f\xa1\xcc\xd4\xda\n~>0\xc5.\x84\xda\xfc\x9e\xde\xaa\xee\xa6\xbb\xc20\x9e\xd5\x93\xf0p6N\xd6WL\x7fP\xe3\xd9\x8dK\xffG\xe0\x98\x14\xb5\xe5z\x036\xc2o\xc8\xa9\xdc\x85\xd8\x14\xcda\xf2\xc5Xr\x9d\x91\xd0\x18\x86\xa2\xdb\xbe\xa3bwE{\xcbr\x88\xc5\xc3\xab\t\x9a\x0e\xd7\xbcb\\\f\x05O\xe2dUQ\xef?W\xf49U\x16\xe8\xee\xea\xaa\x88\x1f\xf3Lp4\xf1\xe9\xb2!\x0e+\x9f\x89\x03^z\xa8C\xa2\x14\xd6Pt\x89\xc0\xbe\xff\xd60$\x0e\x81\xa3\xccO\x101\x10\x9d\xb7\xf3\xba\xaa\xd6\xdf*\xe7\"`\xb8.\x97G\f\xe1xh\x16\x9f^\x06C', 0x0, 0x0) fcntl$notify(r4, 0x402, 0x80000013) dup2(r4, r3) 05:13:04 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x16, 0x0, 0x40001, 0x1, 0x0, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000040)={r0, &(0x7f0000000000), 0x0}, 0x20) syzkaller login: [ 55.717878][ T8163] IPVS: ftp: loaded support on port[0] = 21 05:13:04 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001440)=ANY=[@ANYBLOB="200000006800032500000000a90300000200000000000000080005000200000000000001f36b6744254ffe2e4173f657dcd8d2476d04795bd3bfc6afb407dcb7d4380144abbbb4bc9481b435845656e6f859b78cc7d5fae9a6180e9485b06f1ffb80abb4b501000000000c6d757a3ccfa13467b13edfa6014ad02808a5605d1b73d76ea549012287087c9acc01ec20b742f70000000000000076dc99133f08000000382b013034197c9ffa10d6f56c338fe8f6d77505d76a2b09317034abef015aa5a0e80a088ea01a35d1379de0190f43ea54e58966dd6b696733139b64e8d84d2864c900000000000000", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x218fe53f1794f59, 0x0) [ 55.886239][ T8165] IPVS: ftp: loaded support on port[0] = 21 [ 55.917372][ T8163] chnl_net:caif_netlink_parms(): no params data found 05:13:04 executing program 3: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0xc) sendmsg(r0, &(0x7f0000000200)={0x0, 0x6000000, &(0x7f0000009ff0)=[{&(0x7f0000000180)="24000000040607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) [ 56.026062][ T8163] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.050986][ T8163] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.059108][ T8163] device bridge_slave_0 entered promiscuous mode [ 56.115232][ T8163] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.128573][ T8163] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.146569][ T8163] device bridge_slave_1 entered promiscuous mode [ 56.177852][ T8171] IPVS: ftp: loaded support on port[0] = 21 [ 56.198512][ T8165] chnl_net:caif_netlink_parms(): no params data found [ 56.235107][ T8163] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.278156][ T8163] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.311152][ T8163] team0: Port device team_slave_0 added [ 56.345899][ T8172] IPVS: ftp: loaded support on port[0] = 21 [ 56.355874][ T8163] team0: Port device team_slave_1 added [ 56.369558][ T8165] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.376642][ T8165] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.385119][ T8165] device bridge_slave_0 entered promiscuous mode 05:13:05 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-blowfish-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) sendto$unix(r1, &(0x7f0000000140), 0x14ded905162a6a4b, 0x0, 0x0, 0x429) recvfrom(r1, &(0x7f0000001240)=""/4096, 0xfffffffffffffeb8, 0x0, 0x0, 0x0) [ 56.393079][ T8165] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.402240][ T8165] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.410544][ T8165] device bridge_slave_1 entered promiscuous mode [ 56.473637][ T8163] device hsr_slave_0 entered promiscuous mode [ 56.531248][ T8163] device hsr_slave_1 entered promiscuous mode [ 56.594038][ T8165] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.633179][ T8174] IPVS: ftp: loaded support on port[0] = 21 05:13:05 executing program 5: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000640)='memgry.\x00\x00\x00\x00\x00', 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x8) close(0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp\x00') sendfile(r0, r1, &(0x7f0000000100)=0x6, 0xe0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs_stats_percpu\x00') sendfile(r2, r3, &(0x7f0000000100)=0x6, 0xe0) ioctl$DRM_IOCTL_AGP_ACQUIRE(r3, 0x6430) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0xf, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x0, 0x80000005, 0x0, 0x9817991b48edfb27, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup\x00\f\x7f\xd9\xfa;\x8b\x88gb\xefi\x16\x91\xbb\xc4\xd5Jk\tU~ \xa4\vR\\\x8a\xdb\xcel\xe0\xa3[\xae\x9d\xac\x84\x9f\v\x9e\x9f\r\x10\x1f\xd3\x80\xc1\xccq\xab\x01y\xed\xfc\x96)\xf6_>+\xa03\xf4\xcc0\xbbE\xb0\xc3\x94\xd53\x87\xd6\xc4\\\xc7\x82\xe9\xaf\xb5\xb6\x15\xf4K2\x17\f\x98\x1c\xebq/\xf5\x81#\x85\xc5\xa0\xfd\xfac\xd9\xf2c`\xe9[c\a\x12\x1bb\x82\x83\x86d\xf0k\xa8\x90\x06\xa8\x1cK\xea\x19\x91\a1z)\xde_r`\xee\xb6\x9e\xcb\x05\x00\x00\x82\xa1\t\xc9\x05\xcc^', 0x200002, 0x0) r5 = semget$private(0x0, 0x4, 0x0) semop(r5, &(0x7f0000000100)=[{0x0, 0x0, 0x1000}], 0x1) semctl$IPC_RMID(r5, 0x0, 0x0) r6 = openat$cgroup_int(r4, &(0x7f0000000200)='memory.high\x00\x90\x80\xa4\x96\xbb\xe4\xb2\xa2\x01\xc0\xb8*Z\xef\xf8\x0e\x1f]\xf7\x10\xdb\xfe\xe4\x1d\xc6\x92\x7f\xeeK_p\t\x8c\x9f5\xd0\xef)\xd8\x04\xbf\xc2N\x1c\xf0R\xdc\r\xb1Gf\xba\xd11#<\xaf^,s\x85\x10R\x99\xc2D\xee\n\"\xf9c\x15{\xc1[\xef\x06\x8a\xcd\x9d\xc8\x90#\xd0\xe7\xe3\xe0\xa9\xf3\xc0n\x1f\xd1\x11P\xe20\xcd\x1c\xfa\xfd\xa3\xcf\x9c\xc6\xb7]\x16\xc7\xd7\xb4/\x82\xd1\xae\xd9TM\x05a\xe5\xc5U\x91\xbe\x81\xac4\x9d\x02`\xe7\xa6q\x1f@\x1f\x1f?tm\x9c\xd1\x8c\xa1\xb5\xe0`H)\x97r\xc0?y\x9cc=c`A^\x9f\xcd\xbc\xf4m>I\xae\xdf\x946\xe7M`\xeb\x9fm\xbe+n\x00\x18k\x98\xab\xd5\xeet\"d\x81\x94\x04\xf5\xeb', 0x2, 0x0) write$cgroup_int(r6, 0x0, 0x0) [ 56.653868][ T8165] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.746944][ T8165] team0: Port device team_slave_0 added [ 56.791220][ T8163] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.832424][ T8165] team0: Port device team_slave_1 added [ 56.838155][ T8163] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.893349][ T8163] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 56.954831][ T8177] IPVS: ftp: loaded support on port[0] = 21 [ 56.975004][ T8163] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 57.024366][ T8171] chnl_net:caif_netlink_parms(): no params data found [ 57.100838][ T8165] device hsr_slave_0 entered promiscuous mode [ 57.150357][ T8165] device hsr_slave_1 entered promiscuous mode [ 57.189386][ T8165] debugfs: Directory 'hsr0' with parent '/' already present! [ 57.239270][ T8171] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.246389][ T8171] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.255015][ T8171] device bridge_slave_0 entered promiscuous mode [ 57.264158][ T8171] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.271416][ T8171] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.278933][ T8171] device bridge_slave_1 entered promiscuous mode [ 57.306428][ T8172] chnl_net:caif_netlink_parms(): no params data found [ 57.338602][ T8165] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 57.391927][ T8165] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 57.448788][ T8171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.461819][ T8171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.477689][ T8165] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 57.522208][ T8165] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 57.624987][ T8174] chnl_net:caif_netlink_parms(): no params data found [ 57.644395][ T8171] team0: Port device team_slave_0 added [ 57.651565][ T8171] team0: Port device team_slave_1 added [ 57.672299][ T8172] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.680711][ T8172] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.688310][ T8172] device bridge_slave_0 entered promiscuous mode [ 57.713766][ T8172] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.721030][ T8172] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.728633][ T8172] device bridge_slave_1 entered promiscuous mode [ 57.811607][ T8171] device hsr_slave_0 entered promiscuous mode [ 57.869469][ T8171] device hsr_slave_1 entered promiscuous mode [ 57.919381][ T8171] debugfs: Directory 'hsr0' with parent '/' already present! [ 57.949104][ T8172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.959794][ T8174] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.966838][ T8174] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.975296][ T8174] device bridge_slave_0 entered promiscuous mode [ 57.985029][ T8174] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.992188][ T8174] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.000072][ T8174] device bridge_slave_1 entered promiscuous mode [ 58.016762][ T8172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.044035][ T8174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.074258][ T8172] team0: Port device team_slave_0 added [ 58.085364][ T8174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.098403][ T8171] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 58.141457][ T8171] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 58.191849][ T8172] team0: Port device team_slave_1 added [ 58.197555][ T8171] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 58.295268][ T8171] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 58.363057][ T8174] team0: Port device team_slave_0 added [ 58.373498][ T8174] team0: Port device team_slave_1 added [ 58.386398][ T8177] chnl_net:caif_netlink_parms(): no params data found [ 58.431274][ T8172] device hsr_slave_0 entered promiscuous mode [ 58.489941][ T8172] device hsr_slave_1 entered promiscuous mode [ 58.549323][ T8172] debugfs: Directory 'hsr0' with parent '/' already present! [ 58.594165][ T8172] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 58.640825][ T8172] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 58.673767][ T8165] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.692493][ T8163] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.706850][ T8172] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 58.731926][ T8172] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 58.822417][ T8174] device hsr_slave_0 entered promiscuous mode [ 58.870014][ T8174] device hsr_slave_1 entered promiscuous mode [ 58.909441][ T8174] debugfs: Directory 'hsr0' with parent '/' already present! [ 58.936984][ T8177] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.944778][ T8177] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.952977][ T8177] device bridge_slave_0 entered promiscuous mode [ 58.962680][ T8177] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.970145][ T8177] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.977922][ T8177] device bridge_slave_1 entered promiscuous mode [ 58.992368][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.000822][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.037252][ T8177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.054116][ T8174] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 59.093847][ T8163] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.102119][ T8177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.119747][ T8171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.128368][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.136193][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.145332][ T8174] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 59.203601][ T8174] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 59.244888][ T8174] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 59.304300][ T8165] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.318164][ T8171] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.326905][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.335859][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.344949][ T2944] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.352213][ T2944] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.360324][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.367942][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.376213][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.384669][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.393018][ T2944] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.400084][ T2944] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.412362][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.442739][ T8177] team0: Port device team_slave_0 added [ 59.462877][ T2595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.472310][ T2595] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.482414][ T2595] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.489517][ T2595] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.497010][ T2595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.505920][ T2595] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.514287][ T2595] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.521375][ T2595] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.528868][ T2595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.537473][ T2595] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.545940][ T2595] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.553029][ T2595] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.560802][ T2595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.569306][ T2595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.577666][ T2595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.586233][ T2595] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.594491][ T2595] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.601581][ T2595] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.609032][ T2595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.617521][ T2595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.626970][ T2595] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.634833][ T2595] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.643592][ T8177] team0: Port device team_slave_1 added [ 59.667786][ T8172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.691054][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.700985][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.710071][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.718376][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.727422][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.736092][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.745099][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.753987][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.762208][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.770857][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.779059][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.787383][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.795454][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.803874][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.812603][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.820488][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.828128][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.902031][ T8177] device hsr_slave_0 entered promiscuous mode [ 59.949643][ T8177] device hsr_slave_1 entered promiscuous mode [ 59.999390][ T8177] debugfs: Directory 'hsr0' with parent '/' already present! [ 60.030623][ T8172] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.044345][ T8163] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 60.055874][ T8163] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.075149][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.082825][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.091045][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.100024][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.108416][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.116849][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.125089][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.133775][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.157331][ T8177] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 60.217236][ T8177] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 60.290164][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.297786][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.306155][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.314994][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.324875][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.333384][ T2944] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.340484][ T2944] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.348007][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.356759][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.365073][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.373348][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.384362][ T8165] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.406996][ T8163] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.415542][ T8177] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 60.441617][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.450396][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.458822][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.467593][ T2944] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.474699][ T2944] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.482475][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.489963][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.497345][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.506679][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.530934][ T8165] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.550155][ T8177] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 60.582395][ T8171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.595652][ T8182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.604471][ T8182] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.613218][ T8182] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.621581][ T8182] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.628968][ T8182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.637685][ T8182] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.646132][ T8182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.654355][ T8182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.662929][ T8182] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.673547][ T8172] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.685204][ T8172] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.698184][ T8174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.721564][ T8182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.736109][ T8182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.755313][ T8182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.763642][ T8182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.776781][ T8182] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.785312][ T8182] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.825400][ T8172] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.836391][ T8174] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.886063][ T8174] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 60.896929][ T8174] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.936382][ T8174] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.769166][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 165.775906][ C0] rcu: 0-...!: (10499 ticks this GP) idle=a12/1/0x4000000000000002 softirq=9881/9881 fqs=8 [ 165.786175][ C0] (t=10501 jiffies g=6309 q=405) [ 165.791191][ C0] rcu: rcu_preempt kthread starved for 10485 jiffies! g6309 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 165.802279][ C0] rcu: RCU grace-period kthread stack dump: [ 165.808149][ C0] rcu_preempt R running task 29032 10 2 0x80004000 [ 165.816039][ C0] Call Trace: [ 165.819326][ C0] __schedule+0x9a0/0xcc0 [ 165.823653][ C0] schedule+0x181/0x210 [ 165.827795][ C0] schedule_timeout+0x14f/0x240 [ 165.832639][ C0] ? run_local_timers+0x120/0x120 [ 165.837650][ C0] rcu_gp_kthread+0xed8/0x1770 [ 165.842406][ C0] kthread+0x332/0x350 [ 165.846455][ C0] ? rcu_report_qs_rsp+0x140/0x140 [ 165.851553][ C0] ? kthread_blkcg+0xe0/0xe0 [ 165.856131][ C0] ret_from_fork+0x24/0x30 [ 165.860543][ C0] NMI backtrace for cpu 0 [ 165.864860][ C0] CPU: 0 PID: 8184 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0 [ 165.873071][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 165.883108][ C0] Call Trace: [ 165.886376][ C0] [ 165.889217][ C0] dump_stack+0x1fb/0x318 [ 165.893532][ C0] nmi_cpu_backtrace+0xaf/0x1a0 [ 165.898364][ C0] ? nmi_trigger_cpumask_backtrace+0x16d/0x290 [ 165.904504][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 165.910553][ C0] nmi_trigger_cpumask_backtrace+0x174/0x290 [ 165.916518][ C0] arch_trigger_cpumask_backtrace+0x10/0x20 [ 165.922391][ C0] rcu_dump_cpu_stacks+0x15a/0x220 [ 165.927492][ C0] rcu_sched_clock_irq+0xe25/0x1ad0 [ 165.932682][ C0] ? trace_hardirqs_off+0x74/0x80 [ 165.937691][ C0] update_process_times+0x12d/0x180 [ 165.942881][ C0] tick_sched_timer+0x263/0x420 [ 165.947719][ C0] ? tick_setup_sched_timer+0x3d0/0x3d0 [ 165.953250][ C0] __hrtimer_run_queues+0x403/0x840 [ 165.958447][ C0] hrtimer_interrupt+0x38c/0xda0 [ 165.963385][ C0] ? debug_smp_processor_id+0x9/0x20 [ 165.968655][ C0] smp_apic_timer_interrupt+0x109/0x280 [ 165.974188][ C0] apic_timer_interrupt+0xf/0x20 [ 165.979103][ C0] [ 165.982027][ C0] RIP: 0010:free_thread_stack+0x18b/0x590 [ 165.987732][ C0] Code: ff ff e8 28 04 00 00 43 80 3c 2e 00 74 08 4c 89 e7 e8 09 a4 69 00 49 8b 1c 24 48 83 c3 08 48 89 d8 48 c1 e8 03 42 80 3c 28 00 <74> 08 48 89 df e8 eb a3 69 00 48 8b 1b e9 82 ff ff ff e8 de 2c 2e [ 166.007318][ C0] RSP: 0000:ffffc90001fa7d40 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 166.015714][ C0] RAX: 1ffff110136c8751 RBX: ffff88809b643a88 RCX: ffff8880a871c1c0 [ 166.023670][ C0] RDX: 0000000000000000 RSI: 00000000fffffffc RDI: ffffea00029b4380 [ 166.031632][ C0] RBP: ffffc90001fa7d78 R08: 000000000003a768 R09: ffffed10150f9eaf [ 166.039595][ C0] R10: ffffed10150f9eaf R11: 0000000000000000 R12: ffff88808d014620 [ 166.047573][ C0] R13: dffffc0000000000 R14: 1ffff11011a028c4 R15: ffff8880a87cf568 [ 166.055565][ C0] put_task_stack+0xa3/0x130 [ 166.060164][ C0] finish_task_switch+0x3f1/0x550 [ 166.065185][ C0] __schedule+0x9a8/0xcc0 [ 166.069506][ C0] ? check_preemption_disabled+0xb4/0x260 [ 166.075232][ C0] schedule+0x181/0x210 [ 166.079381][ C0] prepare_exit_to_usermode+0x2d4/0x5b0 [ 166.084927][ C0] ret_from_intr+0x26/0x36 [ 166.089329][ C0] RIP: 0033:0x40f630 [ 166.093213][ C0] Code: 08 41 bd 00 00 00 80 4a 8d 04 2e 48 3d ff ff ff 7e 0f 87 94 00 00 00 45 31 ff 31 db 31 ed 0f 1f 40 00 48 89 df 89 f0 48 31 f7 e8 10 83 f6 3d 31 c6 44 8d 4f 04 41 89 f8 8d 1c f6 89 d8 c1 e8 [ 166.112801][ C0] RSP: 002b:00007fff3d0a6050 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13 [ 166.121214][ C0] RAX: 0000000081a2fd3f RBX: 00000000d1fca6f9 RCX: 0000001b33020000 [ 166.129169][ C0] RDX: 0000001b320202ec RSI: ffffffff81a2fd3f RDI: ffffffff505e5bc6 [ 166.137144][ C0] RBP: 00000000000000b3 R08: 000000007a145ab4 R09: 000000007a145ab8 [ 166.145099][ C0] R10: 00007fff3d0a61f0 R11: 0000000000000246 R12: 000000000075bfa8 [ 166.153055][ C0] R13: 0000000080000000 R14: 00007f789e65c008 R15: 0000000000001df1 [ 166.161027][ C0] ? apply_to_page_range+0x5ff/0x980