[ 46.331511][ T27] audit: type=1800 audit(1578445835.658:27): pid=8207 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [ 46.377686][ T27] audit: type=1800 audit(1578445835.658:28): pid=8207 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 46.890874][ T27] audit: type=1800 audit(1578445836.268:29): pid=8207 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 46.923531][ T27] audit: type=1800 audit(1578445836.268:30): pid=8207 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.126' (ECDSA) to the list of known hosts. 2020/01/08 01:10:43 fuzzer started 2020/01/08 01:10:44 dialing manager at 10.128.0.26:35703 2020/01/08 01:10:44 checking machine... 2020/01/08 01:10:44 checking revisions... 2020/01/08 01:10:44 testing simple program... syzkaller login: [ 55.179928][ T8372] IPVS: ftp: loaded support on port[0] = 21 2020/01/08 01:10:44 building call list... [ 55.513539][ T21] tipc: TX() has been purged, node left! [ 56.273579][ T8369] can: request_module (can-proto-0) failed. executing program [ 58.595276][ T8369] can: request_module (can-proto-0) failed. [ 58.606431][ T8369] can: request_module (can-proto-0) failed. 2020/01/08 01:10:58 syscalls: 2824 2020/01/08 01:10:58 code coverage: enabled 2020/01/08 01:10:58 comparison tracing: enabled 2020/01/08 01:10:58 extra coverage: enabled 2020/01/08 01:10:58 setuid sandbox: enabled 2020/01/08 01:10:58 namespace sandbox: enabled 2020/01/08 01:10:58 Android sandbox: /sys/fs/selinux/policy does not exist 2020/01/08 01:10:58 fault injection: enabled 2020/01/08 01:10:58 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/01/08 01:10:58 net packet injection: enabled 2020/01/08 01:10:58 net device setup: enabled 2020/01/08 01:10:58 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/01/08 01:10:58 devlink PCI setup: PCI device 0000:00:10.0 is not available 01:10:59 executing program 0: r0 = getpgrp(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r2 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffdb0}, 0x8, 0x0) rt_tgsigqueueinfo(r0, r1, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x7}) read(r2, &(0x7f0000481000)=""/128, 0x374) 01:10:59 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8e18) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) fallocate(r0, 0x3, 0x9ffc, 0x8003) fallocate(r0, 0x3, 0x5e89, 0xfff9) [ 69.919437][ T8420] IPVS: ftp: loaded support on port[0] = 21 [ 69.987217][ T8422] IPVS: ftp: loaded support on port[0] = 21 [ 70.074910][ T8420] chnl_net:caif_netlink_parms(): no params data found 01:10:59 executing program 2: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x3309, 0x0) [ 70.183685][ T8420] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.191310][ T8420] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.199250][ T8420] device bridge_slave_0 entered promiscuous mode [ 70.237140][ T8420] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.253547][ T8420] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.261361][ T8420] device bridge_slave_1 entered promiscuous mode [ 70.291223][ T8422] chnl_net:caif_netlink_parms(): no params data found [ 70.311862][ T8420] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.342972][ T8426] IPVS: ftp: loaded support on port[0] = 21 [ 70.349130][ T8420] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 01:10:59 executing program 3: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) unshare(0x20600) r1 = socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x10e, 0xc, &(0x7f0000000080), 0x4) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0xfd, &(0x7f0000000280)=[{&(0x7f0000000000)="2e00000052008100a00f80854a36b8ab1c9599161a000300030000000000000020000200000040d819a9ffe20000", 0x2e}], 0x1}, 0x0) [ 70.411718][ T8420] team0: Port device team_slave_0 added [ 70.435784][ T8422] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.442851][ T8422] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.464702][ T8422] device bridge_slave_0 entered promiscuous mode [ 70.484883][ T8420] team0: Port device team_slave_1 added [ 70.490629][ T8422] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.513522][ T8422] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.521366][ T8422] device bridge_slave_1 entered promiscuous mode [ 70.578485][ T8422] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.646262][ T8420] device hsr_slave_0 entered promiscuous mode [ 70.663857][ T8420] device hsr_slave_1 entered promiscuous mode 01:11:00 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xd07, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8}, @IFLA_LINKINFO={0x10, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0x4}}}, @IFLA_TXQLEN={0x8}]}, 0x40}}, 0x0) [ 70.706746][ T8422] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.725336][ T8428] IPVS: ftp: loaded support on port[0] = 21 [ 70.777935][ T8422] team0: Port device team_slave_0 added [ 70.785891][ T8422] team0: Port device team_slave_1 added 01:11:00 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_ax25_SIOCDELRT(r0, 0x891d, 0x0) [ 70.996212][ T8422] device hsr_slave_0 entered promiscuous mode [ 71.044339][ T8422] device hsr_slave_1 entered promiscuous mode [ 71.103693][ T8422] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.111437][ T8422] Cannot create hsr debugfs directory [ 71.161492][ T8431] IPVS: ftp: loaded support on port[0] = 21 [ 71.194391][ T8426] chnl_net:caif_netlink_parms(): no params data found [ 71.196318][ T8433] IPVS: ftp: loaded support on port[0] = 21 [ 71.276663][ T8420] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.327689][ T8420] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.430309][ T8420] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.507187][ T8420] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.571208][ T8422] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.661136][ T8422] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.726180][ T8428] chnl_net:caif_netlink_parms(): no params data found [ 71.750474][ T8426] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.760300][ T8426] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.768035][ T8426] device bridge_slave_0 entered promiscuous mode [ 71.776366][ T8426] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.783504][ T8426] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.791761][ T8426] device bridge_slave_1 entered promiscuous mode [ 71.804597][ T8422] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.865846][ T8422] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.947631][ T8426] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.991479][ T8426] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.013386][ T8428] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.020641][ T8428] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.028576][ T8428] device bridge_slave_0 entered promiscuous mode [ 72.037710][ T8428] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.045238][ T8428] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.052775][ T8428] device bridge_slave_1 entered promiscuous mode [ 72.079827][ T8428] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.091149][ T8428] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.107299][ T8431] chnl_net:caif_netlink_parms(): no params data found [ 72.117985][ T8426] team0: Port device team_slave_0 added [ 72.132748][ T8426] team0: Port device team_slave_1 added [ 72.180580][ T8428] team0: Port device team_slave_0 added [ 72.198750][ T8428] team0: Port device team_slave_1 added [ 72.215453][ T8420] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.295380][ T8428] device hsr_slave_0 entered promiscuous mode [ 72.353903][ T8428] device hsr_slave_1 entered promiscuous mode [ 72.403800][ T8428] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.411393][ T8428] Cannot create hsr debugfs directory [ 72.421862][ T8433] chnl_net:caif_netlink_parms(): no params data found [ 72.431716][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.440747][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.485322][ T8426] device hsr_slave_0 entered promiscuous mode [ 72.523792][ T8426] device hsr_slave_1 entered promiscuous mode [ 72.563654][ T8426] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.563687][ T8426] Cannot create hsr debugfs directory [ 72.620011][ T8420] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.630964][ T8431] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.638440][ T8431] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.646990][ T8431] device bridge_slave_0 entered promiscuous mode [ 72.656973][ T8431] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.664293][ T8431] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.671818][ T8431] device bridge_slave_1 entered promiscuous mode [ 72.692732][ T8422] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.727170][ T8431] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.737502][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.747111][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.755604][ T2671] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.762739][ T2671] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.771030][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.797003][ T8431] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.821174][ T8431] team0: Port device team_slave_0 added [ 72.842345][ T3783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.851395][ T3783] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.860251][ T3783] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.867345][ T3783] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.878074][ T8431] team0: Port device team_slave_1 added [ 72.900194][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.914575][ T8422] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.924420][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.932014][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.940409][ T8433] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.948358][ T8433] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.958515][ T8433] device bridge_slave_0 entered promiscuous mode [ 73.035342][ T8431] device hsr_slave_0 entered promiscuous mode [ 73.073896][ T8431] device hsr_slave_1 entered promiscuous mode [ 73.103522][ T8431] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.111088][ T8431] Cannot create hsr debugfs directory [ 73.117776][ T3783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.126276][ T3783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.135181][ T3783] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.143687][ T3783] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.150721][ T3783] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.172985][ T8433] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.186853][ T8433] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.195267][ T8433] device bridge_slave_1 entered promiscuous mode [ 73.212129][ T3783] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.237256][ T8426] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.285852][ T8426] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.329193][ T8433] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.339335][ T8426] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.375416][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.384512][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.392691][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.401240][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.410098][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.419595][ T8428] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.475680][ T8428] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.531671][ T8428] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.578970][ T8433] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.588222][ T8426] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.631324][ T8420] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 73.642862][ T8420] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.654567][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.663077][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.672522][ T2671] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.679615][ T2671] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.687509][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.696286][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.705423][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.713692][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.721767][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.730472][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.741535][ T8428] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.836263][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.863920][ T8433] team0: Port device team_slave_0 added [ 73.870668][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.880184][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.888990][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.900201][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.908516][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.917070][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.936408][ T8422] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.948559][ T8422] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.966145][ T8433] team0: Port device team_slave_1 added [ 73.974166][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.981787][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.990114][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.998167][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.007460][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.050457][ T8420] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.126839][ T8433] device hsr_slave_0 entered promiscuous mode [ 74.194379][ T8433] device hsr_slave_1 entered promiscuous mode [ 74.253629][ T8433] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.261202][ T8433] Cannot create hsr debugfs directory [ 74.307341][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.315721][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.326504][ T8422] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.338569][ T8428] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.394935][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.404571][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.413044][ T8431] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 74.506080][ T8431] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 74.526264][ T8433] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 74.576305][ T8433] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 74.625034][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.632697][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.641116][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.649709][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.661969][ T8428] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.682837][ T8426] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.690596][ T8431] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 74.718243][ T8431] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 74.785416][ T8433] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 74.819137][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.827816][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.838499][ T8422] device veth0_vlan entered promiscuous mode [ 74.856079][ T8433] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 74.918191][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.925905][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.933529][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.941994][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.950544][ T2671] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.957644][ T2671] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.965410][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.973548][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.981630][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.989857][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.003284][ T8422] device veth1_vlan entered promiscuous mode [ 75.011646][ T8420] device veth0_vlan entered promiscuous mode [ 75.028410][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.039241][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.047326][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.055806][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.063322][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.071971][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.080482][ T2763] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.087555][ T2763] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.095509][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.124086][ T8420] device veth1_vlan entered promiscuous mode [ 75.134322][ T8426] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.144940][ T3783] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.152897][ T3783] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.170624][ T3783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.203508][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.212369][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.224510][ T2763] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.231567][ T2763] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.239291][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.248410][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.257431][ T2763] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.264515][ T2763] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.272187][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.280787][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.302716][ T8428] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 75.313988][ T8428] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.329841][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.339297][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.348607][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.366813][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.376406][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.385443][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.399471][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.408227][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.423266][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.432029][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.446292][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.459648][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.476799][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.490517][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.498702][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 180.513422][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 180.520279][ C0] rcu: 0-...!: (1 GPs behind) idle=2fe/1/0x4000000000000002 softirq=11901/11903 fqs=33 [ 180.530264][ C0] (t=10500 jiffies g=7465 q=233) [ 180.535281][ C0] rcu: rcu_preempt kthread starved for 10431 jiffies! g7465 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 180.546362][ C0] rcu: RCU grace-period kthread stack dump: [ 180.552237][ C0] rcu_preempt R running task 28984 10 2 0x80004000 [ 180.560129][ C0] Call Trace: [ 180.563416][ C0] __schedule+0x9a0/0xcc0 [ 180.567746][ C0] schedule+0x181/0x210 [ 180.571892][ C0] schedule_timeout+0x14f/0x240 [ 180.576731][ C0] ? run_local_timers+0x120/0x120 [ 180.581747][ C0] rcu_gp_kthread+0xed8/0x1770 [ 180.586512][ C0] kthread+0x332/0x350 [ 180.590573][ C0] ? rcu_report_qs_rsp+0x140/0x140 [ 180.595678][ C0] ? kthread_blkcg+0xe0/0xe0 [ 180.600260][ C0] ret_from_fork+0x24/0x30 [ 180.604700][ C0] NMI backtrace for cpu 0 [ 180.609020][ C0] CPU: 0 PID: 8441 Comm: syz-executor.1 Not tainted 5.5.0-rc5-syzkaller #0 [ 180.617587][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 180.627626][ C0] Call Trace: [ 180.630903][ C0] [ 180.633745][ C0] dump_stack+0x1fb/0x318 [ 180.638065][ C0] nmi_cpu_backtrace+0xaf/0x1a0 [ 180.642904][ C0] ? nmi_trigger_cpumask_backtrace+0x16d/0x290 [ 180.649047][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 180.655099][ C0] nmi_trigger_cpumask_backtrace+0x174/0x290 [ 180.661069][ C0] arch_trigger_cpumask_backtrace+0x10/0x20 [ 180.666951][ C0] rcu_dump_cpu_stacks+0x15a/0x220 [ 180.672058][ C0] rcu_sched_clock_irq+0xe25/0x1ad0 [ 180.677250][ C0] ? trace_hardirqs_off+0x74/0x80 [ 180.682268][ C0] update_process_times+0x12d/0x180 [ 180.687459][ C0] tick_sched_timer+0x263/0x420 [ 180.692299][ C0] ? tick_setup_sched_timer+0x3d0/0x3d0 [ 180.697836][ C0] __hrtimer_run_queues+0x403/0x840 [ 180.703038][ C0] hrtimer_interrupt+0x38c/0xda0 [ 180.707983][ C0] ? debug_smp_processor_id+0x9/0x20 [ 180.713258][ C0] smp_apic_timer_interrupt+0x109/0x280 [ 180.718795][ C0] apic_timer_interrupt+0xf/0x20 [ 180.723714][ C0] [ 180.726649][ C0] RIP: 0010:free_thread_stack+0x124/0x590 [ 180.732360][ C0] Code: ff 48 c1 e8 06 48 83 e0 c0 48 bf 00 00 00 00 00 ea ff ff 48 01 c7 be 03 00 00 00 e8 86 91 61 00 e9 5d 04 00 00 e8 3c 2c 2e 00 <48> 89 df 31 f6 e8 02 8d 6f 00 43 80 3c 2e 00 74 08 4c 89 e7 e8 73 [ 180.751963][ C0] RSP: 0018:ffffc90002bc7618 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 180.760361][ C0] RAX: ffffffff81489244 RBX: ffffea00024f9980 RCX: 0000000000040000 [ 180.768319][ C0] RDX: ffffc9000eaf0000 RSI: 000000000003ffff RDI: 0000000000040000 [ 180.776278][ C0] RBP: ffffc90002bc7650 R08: 000000000003a728 R09: ffffed1012b59289 [ 180.784240][ C0] R10: ffffed1012b59289 R11: 0000000000000000 R12: ffff8880a8838d20 [ 180.793277][ C0] R13: dffffc0000000000 R14: 1ffff110151071a4 R15: ffff888095ac9438 [ 180.801276][ C0] ? free_thread_stack+0x124/0x590 [ 180.806389][ C0] ? free_thread_stack+0x124/0x590 [ 180.811495][ C0] put_task_stack+0xa3/0x130 [ 180.816076][ C0] finish_task_switch+0x3f1/0x550 [ 180.821092][ C0] __schedule+0x9a8/0xcc0 [ 180.825442][ C0] ? ___preempt_schedule+0x16/0x18 [ 180.830543][ C0] preempt_schedule+0xdb/0x120 [ 180.835298][ C0] ___preempt_schedule+0x16/0x18 [ 180.840227][ C0] _raw_read_unlock+0x3a/0x40 [ 180.844896][ C0] ext4_es_lookup_extent+0x322/0x720 [ 180.850173][ C0] ext4_da_get_block_prep+0x24b/0x1250 [ 180.855627][ C0] ? _raw_spin_unlock+0x27/0x40 [ 180.860581][ C0] ? create_empty_buffers+0x53f/0x5a0 [ 180.865947][ C0] ext4_block_write_begin+0x80c/0x13e0 [ 180.871404][ C0] ? trace_ext4_da_release_space+0x2d0/0x2d0 [ 180.877382][ C0] ext4_da_write_begin+0x70e/0xf70 [ 180.882492][ C0] generic_perform_write+0x25d/0x4e0 [ 180.887779][ C0] ext4_buffered_write_iter+0x467/0x5f0 [ 180.893316][ C0] ext4_file_write_iter+0x546/0x1f50 [ 180.898591][ C0] ? lock_acquire+0x158/0x250 [ 180.903253][ C0] ? __fdget_pos+0x243/0x2e0 [ 180.907864][ C0] ? iov_iter_init+0x8a/0x170 [ 180.912557][ C0] __vfs_write+0x5a1/0x740 [ 180.916980][ C0] vfs_write+0x275/0x590 [ 180.921220][ C0] ksys_write+0x117/0x220 [ 180.925547][ C0] __x64_sys_write+0x7b/0x90 [ 180.930136][ C0] do_syscall_64+0xf7/0x1c0 [ 180.934635][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 180.940531][ C0] RIP: 0033:0x45af49 [ 180.944446][ C0] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 180.964051][ C0] RSP: 002b:00007f252d1d1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 180.972473][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 180.980440][ C0] RDX: 00000000fffffe58 RSI: 0000000020000080 RDI: 0000000000000003 [ 180.988594][ C0] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 180.996559][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f252d1d26d4 [ 181.004538][ C0] R13: 00000000004ccea8 R14: 00000000004e8280 R15: 00000000ffffffff