[ 41.814113][ T25] audit: type=1800 audit(1575437794.458:26): pid=7978 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 41.860440][ T25] audit: type=1800 audit(1575437794.458:27): pid=7978 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [ 41.880280][ T25] audit: type=1800 audit(1575437794.458:28): pid=7978 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 42.558405][ T25] audit: type=1800 audit(1575437795.228:29): pid=7978 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.1.20' (ECDSA) to the list of known hosts. 2019/12/04 05:36:46 fuzzer started 2019/12/04 05:36:47 dialing manager at 10.128.0.26:42111 2019/12/04 05:36:47 syscalls: 2689 2019/12/04 05:36:47 code coverage: enabled 2019/12/04 05:36:47 comparison tracing: enabled 2019/12/04 05:36:47 extra coverage: extra coverage is not supported by the kernel 2019/12/04 05:36:47 setuid sandbox: enabled 2019/12/04 05:36:47 namespace sandbox: enabled 2019/12/04 05:36:47 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/04 05:36:47 fault injection: enabled 2019/12/04 05:36:47 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/04 05:36:47 net packet injection: enabled 2019/12/04 05:36:47 net device setup: enabled 2019/12/04 05:36:47 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/12/04 05:36:47 devlink PCI setup: PCI device 0000:00:10.0 is not available 05:36:48 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) add_key$user(&(0x7f0000000140)='user\x00', 0x0, &(0x7f0000000240), 0x0, 0x0) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() 05:36:48 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 040'], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_update={'update ', 'default', 0x20, 'user:', 'load '}, 0x1a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0xca, 0xfffffffffffffffe) syzkaller login: [ 56.050247][ T8144] IPVS: ftp: loaded support on port[0] = 21 05:36:48 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x69, 0x10, 0x54}, [@ldst={0x6, 0x0, 0x1}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xff34, &(0x7f000000cf3d)=""/195, 0x0, 0x8, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1c4, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 56.204382][ T8147] IPVS: ftp: loaded support on port[0] = 21 [ 56.240931][ T8144] chnl_net:caif_netlink_parms(): no params data found [ 56.368886][ T8144] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.394734][ T8144] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.403090][ T8144] device bridge_slave_0 entered promiscuous mode [ 56.430216][ T8144] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.438075][ T8144] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.446163][ T8144] device bridge_slave_1 entered promiscuous mode [ 56.453696][ T8147] chnl_net:caif_netlink_parms(): no params data found [ 56.467737][ T8150] IPVS: ftp: loaded support on port[0] = 21 [ 56.505973][ T8144] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.516101][ T8147] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.523179][ T8147] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.532467][ T8147] device bridge_slave_0 entered promiscuous mode [ 56.542188][ T8147] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.551104][ T8147] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.559189][ T8147] device bridge_slave_1 entered promiscuous mode [ 56.569432][ T8144] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 05:36:49 executing program 3: socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() getpgrp(r0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getown(r2, 0x9) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r3, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r3, &(0x7f00000006c0)=ANY=[@ANYBLOB="00e69600fca9e69643cbe284d88ab2a9b3a0a68463024c0b86d299cae44620434ed674278f0251bbcc1b6d0a3b8bbc1b1a1c1bddadb4cdd3361dfc460a58496d609fcd556864b0a34647d369bbfa4114232cda6465adfb66353ed4f6acd59fa4d7ff5559e3c91d8f3af04b784ec7908ae6fcfdf6feaa28119661e54386079419ce1d73e2155e1249eb6e6c15eb54a1e582d41180102ababe49296237860000000000000000f8f42b188370d23d0198634b9cb6f80821d22da970770c2c479d7e597054106900"/210], 0x14) fallocate(r3, 0x3, 0x0, 0x8020003) writev(r3, &(0x7f0000000380)=[{&(0x7f0000000200)="e5", 0x1}], 0x1) [ 56.612778][ T8144] team0: Port device team_slave_0 added [ 56.625303][ T8147] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.647694][ T8147] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.677097][ T8144] team0: Port device team_slave_1 added [ 56.707446][ T8147] team0: Port device team_slave_0 added [ 56.736288][ T8147] team0: Port device team_slave_1 added 05:36:49 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="700800002400070500"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff0000000008000100746266004408020008000600000000006b0001000000000000000000000000000404020000000000755700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000390700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100001000000000000000000000000001000010000000000000000000000000004040200"/2136], 0x870}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 56.806707][ T8144] device hsr_slave_0 entered promiscuous mode 05:36:49 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in=@local, 0x80, 0x80, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x2b}, 0x0, @in=@loopback}}, 0xe8) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) [ 57.004476][ T8144] device hsr_slave_1 entered promiscuous mode [ 57.092368][ T8155] IPVS: ftp: loaded support on port[0] = 21 [ 57.107467][ T8153] IPVS: ftp: loaded support on port[0] = 21 [ 57.152371][ T8157] IPVS: ftp: loaded support on port[0] = 21 [ 57.206379][ T8147] device hsr_slave_0 entered promiscuous mode [ 57.254798][ T8147] device hsr_slave_1 entered promiscuous mode [ 57.294336][ T8147] debugfs: Directory 'hsr0' with parent '/' already present! [ 57.336291][ T8150] chnl_net:caif_netlink_parms(): no params data found [ 57.389058][ T8144] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 57.447748][ T8144] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 57.500401][ T8144] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 57.579717][ T8144] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 57.618898][ T8147] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 57.678459][ T8147] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 57.747048][ T8147] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 57.801019][ T8147] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 57.876383][ T8150] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.883483][ T8150] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.891808][ T8150] device bridge_slave_0 entered promiscuous mode [ 57.899753][ T8150] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.906861][ T8150] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.914710][ T8150] device bridge_slave_1 entered promiscuous mode [ 57.962805][ T8150] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.977125][ T8153] chnl_net:caif_netlink_parms(): no params data found [ 58.019698][ T8150] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.029308][ T8153] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.036726][ T8153] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.045716][ T8153] device bridge_slave_0 entered promiscuous mode [ 58.053371][ T8153] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.061569][ T8153] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.069253][ T8153] device bridge_slave_1 entered promiscuous mode [ 58.117133][ T8153] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.135453][ T8155] chnl_net:caif_netlink_parms(): no params data found [ 58.163166][ T8153] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.175186][ T8150] team0: Port device team_slave_0 added [ 58.194743][ T8157] chnl_net:caif_netlink_parms(): no params data found [ 58.206349][ T8150] team0: Port device team_slave_1 added [ 58.225467][ T8153] team0: Port device team_slave_0 added [ 58.233244][ T8153] team0: Port device team_slave_1 added [ 58.273853][ T8155] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.282003][ T8155] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.289860][ T8155] device bridge_slave_0 entered promiscuous mode [ 58.298688][ T8155] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.305814][ T8155] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.313581][ T8155] device bridge_slave_1 entered promiscuous mode [ 58.355812][ T8150] device hsr_slave_0 entered promiscuous mode [ 58.394385][ T8150] device hsr_slave_1 entered promiscuous mode [ 58.444871][ T8150] debugfs: Directory 'hsr0' with parent '/' already present! [ 58.458047][ T8157] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.465251][ T8157] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.472823][ T8157] device bridge_slave_0 entered promiscuous mode [ 58.481691][ T8157] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.488897][ T8157] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.496812][ T8157] device bridge_slave_1 entered promiscuous mode [ 58.559832][ T8144] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.579924][ T8150] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 58.626951][ T8155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.638105][ T8155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.659325][ T8157] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.716787][ T8153] device hsr_slave_0 entered promiscuous mode [ 58.754467][ T8153] device hsr_slave_1 entered promiscuous mode [ 58.794163][ T8153] debugfs: Directory 'hsr0' with parent '/' already present! [ 58.801762][ T8150] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 58.856380][ T8150] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 58.916505][ T8150] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 58.961293][ T8155] team0: Port device team_slave_0 added [ 58.968817][ T8157] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.994941][ T8144] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.002784][ T8155] team0: Port device team_slave_1 added [ 59.018219][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.027436][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.040305][ T8147] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.054136][ T2611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.062660][ T2611] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.072367][ T2611] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.079556][ T2611] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.088892][ T2611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.097600][ T2611] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.105987][ T2611] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.113020][ T2611] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.120547][ T2611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.129022][ T2611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.171252][ T8147] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.179065][ T2611] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.189056][ T2611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.198353][ T2611] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.206825][ T2611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.216406][ T2611] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.225718][ T2611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.233254][ T2611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.240983][ T2611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.249195][ T2611] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.296890][ T8155] device hsr_slave_0 entered promiscuous mode [ 59.345186][ T8155] device hsr_slave_1 entered promiscuous mode [ 59.394312][ T8155] debugfs: Directory 'hsr0' with parent '/' already present! [ 59.401945][ T8153] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 59.467202][ T8153] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 59.516588][ T8153] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 59.572247][ T8163] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.581196][ T8163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.589951][ T8163] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.615223][ T8153] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 59.666886][ T8157] team0: Port device team_slave_0 added [ 59.673979][ T8157] team0: Port device team_slave_1 added [ 59.682513][ T8144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.725850][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.736992][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.745396][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.752414][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.763600][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.788017][ T8151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.797329][ T8151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.806137][ T8151] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.813176][ T8151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.824479][ T8155] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 59.876379][ T8155] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 59.957071][ T8157] device hsr_slave_0 entered promiscuous mode [ 60.015233][ T8157] device hsr_slave_1 entered promiscuous mode [ 60.054267][ T8157] debugfs: Directory 'hsr0' with parent '/' already present! [ 60.068472][ T8144] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.081600][ T8150] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.088946][ T8155] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 60.142103][ T2611] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.150080][ T2611] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.157960][ T2611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.166687][ T2611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.175297][ T2611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.183643][ T2611] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.192164][ T2611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.200823][ T2611] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.210171][ T2611] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.228596][ T8155] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 60.305614][ T2611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.313716][ T2611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.405674][ T8155] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.428646][ T8155] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.462914][ T8150] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.527142][ T8150] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 60.542230][ T8150] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.581639][ T8150] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.454047][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 165.460849][ C0] rcu: 0-...!: (1 GPs behind) idle=af2/1/0x4000000000000002 softirq=10140/10141 fqs=11 [ 165.470918][ C0] (t=10501 jiffies g=6253 q=732) [ 165.475939][ C0] rcu: rcu_preempt kthread starved for 10480 jiffies! g6253 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 165.487027][ C0] rcu: RCU grace-period kthread stack dump: [ 165.492909][ C0] rcu_preempt R running task 29104 10 2 0x80004000 [ 165.500801][ C0] Call Trace: [ 165.504090][ C0] __schedule+0x9a0/0xcc0 [ 165.508419][ C0] schedule+0x181/0x210 [ 165.512563][ C0] schedule_timeout+0x14f/0x240 [ 165.517397][ C0] ? run_local_timers+0x120/0x120 [ 165.522411][ C0] rcu_gp_kthread+0xed8/0x1770 [ 165.527171][ C0] kthread+0x332/0x350 [ 165.531241][ C0] ? rcu_report_qs_rsp+0x140/0x140 [ 165.536352][ C0] ? kthread_blkcg+0xe0/0xe0 [ 165.540959][ C0] ret_from_fork+0x24/0x30 [ 165.545388][ C0] NMI backtrace for cpu 0 [ 165.549724][ C0] CPU: 0 PID: 8157 Comm: syz-executor.5 Not tainted 5.4.0-syzkaller #0 [ 165.557948][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 165.567991][ C0] Call Trace: [ 165.571265][ C0] [ 165.574128][ C0] dump_stack+0x1fb/0x318 [ 165.578450][ C0] nmi_cpu_backtrace+0xaf/0x1a0 [ 165.583284][ C0] ? nmi_trigger_cpumask_backtrace+0x16d/0x290 [ 165.589426][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 165.595489][ C0] nmi_trigger_cpumask_backtrace+0x174/0x290 [ 165.601459][ C0] arch_trigger_cpumask_backtrace+0x10/0x20 [ 165.607337][ C0] rcu_dump_cpu_stacks+0x15a/0x220 [ 165.612446][ C0] rcu_sched_clock_irq+0xe25/0x1ad0 [ 165.617651][ C0] ? trace_hardirqs_off+0x74/0x80 [ 165.622673][ C0] update_process_times+0x12d/0x180 [ 165.627883][ C0] tick_sched_timer+0x263/0x420 [ 165.632725][ C0] ? tick_setup_sched_timer+0x3d0/0x3d0 [ 165.638267][ C0] __hrtimer_run_queues+0x403/0x840 [ 165.643479][ C0] hrtimer_interrupt+0x38c/0xda0 [ 165.648419][ C0] ? debug_smp_processor_id+0x9/0x20 [ 165.653697][ C0] smp_apic_timer_interrupt+0x109/0x280 [ 165.659232][ C0] apic_timer_interrupt+0xf/0x20 [ 165.664148][ C0] [ 165.667073][ C0] RIP: 0010:free_thread_stack+0x151/0x590 [ 165.672777][ C0] Code: 31 f6 e8 42 af 6e 00 43 80 3c 2e 00 74 08 4c 89 e7 e8 43 a4 69 00 49 8b 1c 24 48 83 c3 08 48 89 d8 48 c1 e8 03 42 80 3c 28 00 <74> 08 48 89 df e8 25 a4 69 00 48 8b 3b be fc ff ff ff e8 28 04 00 [ 165.692366][ C0] RSP: 0018:ffffc900024b72b8 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 165.700772][ C0] RAX: 1ffff11014dcb2a1 RBX: ffff8880a6e59508 RCX: 0000000000000000 [ 165.708725][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffea0002a0cfc0 [ 165.716682][ C0] RBP: ffffc900024b72f0 R08: dffffc0000000000 R09: fffffbfff120248a [ 165.724636][ C0] R10: fffffbfff120248a R11: 0000000000000000 R12: ffff8880a6e595a0 [ 165.732590][ C0] R13: dffffc0000000000 R14: 1ffff11014dcb2b4 R15: ffff8880a9567568 [ 165.740576][ C0] ? free_thread_stack+0x12e/0x590 [ 165.745695][ C0] put_task_stack+0xa3/0x130 [ 165.750306][ C0] finish_task_switch+0x3f1/0x550 [ 165.755448][ C0] __schedule+0x9a8/0xcc0 [ 165.759798][ C0] ? ___preempt_schedule+0x16/0x18 [ 165.764905][ C0] preempt_schedule+0xdb/0x120 [ 165.769666][ C0] ___preempt_schedule+0x16/0x18 [ 165.774606][ C0] try_to_wake_up+0xe78/0x1050 [ 165.779382][ C0] wake_up_q+0x8c/0xe0 [ 165.783443][ C0] __mutex_unlock_slowpath+0x586/0x5b0 [ 165.788894][ C0] mutex_unlock+0x1b/0x30 [ 165.793209][ C0] __rtnl_unlock+0x2c/0xa0 [ 165.797634][ C0] netdev_run_todo+0xe5/0xe10 [ 165.802310][ C0] rtnl_unlock+0xe/0x10 [ 165.806451][ C0] nsim_create+0x224/0x230 [ 165.810853][ C0] __nsim_dev_port_add+0x289/0x4d0 [ 165.815980][ C0] ? debugfs_create_file_unsafe+0x4a/0x60 [ 165.821706][ C0] ? nsim_bpf_dev_init+0x1eb/0x220 [ 165.826814][ C0] nsim_dev_probe+0xb55/0xef0 [ 165.831502][ C0] nsim_bus_probe+0x15/0x20 [ 165.835996][ C0] really_probe+0x71c/0xf40 [ 165.840489][ C0] driver_probe_device+0xfc/0x260 [ 165.845500][ C0] ? parse_option_str+0x1bf/0x200 [ 165.850508][ C0] __device_attach_driver+0x336/0x3f0 [ 165.855865][ C0] ? coredump_store+0x90/0x90 [ 165.860526][ C0] bus_for_each_drv+0x12b/0x180 [ 165.865366][ C0] __device_attach+0x1ea/0x390 [ 165.870122][ C0] device_initial_probe+0x1a/0x20 [ 165.875129][ C0] bus_probe_device+0xb9/0x1f0 [ 165.879883][ C0] device_add+0x1710/0x1ad0 [ 165.884387][ C0] device_register+0x1d/0x20 [ 165.888959][ C0] new_device_store+0x286/0x510 [ 165.893793][ C0] ? nsim_num_vf+0x50/0x50 [ 165.898196][ C0] bus_attr_store+0x78/0x90 [ 165.902681][ C0] ? bus_attr_show+0x90/0x90 [ 165.907257][ C0] sysfs_kf_write+0x281/0x2f0 [ 165.911917][ C0] ? sysfs_kf_read+0x370/0x370 [ 165.916667][ C0] kernfs_fop_write+0x3e4/0x4e0 [ 165.921599][ C0] ? kernfs_fop_read+0x580/0x580 [ 165.926523][ C0] __vfs_write+0xb8/0x740 [ 165.930842][ C0] ? rcu_read_lock_any_held+0x13d/0x1a0 [ 165.936370][ C0] ? __sb_start_write+0x382/0x430 [ 165.941396][ C0] vfs_write+0x275/0x590 [ 165.945641][ C0] ksys_write+0x117/0x220 [ 165.949966][ C0] __x64_sys_write+0x7b/0x90 [ 165.954546][ C0] do_syscall_64+0xf7/0x1c0 [ 165.959037][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 165.964925][ C0] RIP: 0033:0x414130 [ 165.968809][ C0] Code: b0 89 c8 f7 d8 eb ed b8 6e 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 83 3d 3d 43 66 00 00 75 14 b8 01 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 c4 1b 00 00 c3 48 83 ec 08 e8 ca fc ff ff [ 165.988399][ C0] RSP: 002b:00007ffef7038738 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 165.996795][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000414130 [ 166.004769][ C0] RDX: 0000000000000003 RSI: 00007ffef7038760 RDI: 0000000000000004 [ 166.012724][ C0] RBP: 00007ffef7038760 R08: 0000000000007ffc R09: 0000000000000003 [ 166.020681][ C0] R10: 0000000000000075 R11: 0000000000000246 R12: 00000000004bfc97 [ 166.028636][ C0] R13: 0000000000000004 R14: 0000000000000000 R15: 0000000000000000