[ 43.329824][ T25] audit: type=1800 audit(1575436719.411:25): pid=7986 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 43.349410][ T25] audit: type=1800 audit(1575436719.431:26): pid=7986 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 43.395925][ T25] audit: type=1800 audit(1575436719.431:27): pid=7986 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [ 43.444311][ T25] audit: type=1800 audit(1575436719.431:28): pid=7986 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.154' (ECDSA) to the list of known hosts. 2019/12/04 05:18:48 fuzzer started 2019/12/04 05:18:50 dialing manager at 10.128.0.26:42111 2019/12/04 05:18:50 syscalls: 2689 2019/12/04 05:18:50 code coverage: enabled 2019/12/04 05:18:50 comparison tracing: enabled 2019/12/04 05:18:50 extra coverage: extra coverage is not supported by the kernel 2019/12/04 05:18:50 setuid sandbox: enabled 2019/12/04 05:18:50 namespace sandbox: enabled 2019/12/04 05:18:50 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/04 05:18:50 fault injection: enabled 2019/12/04 05:18:50 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/04 05:18:50 net packet injection: enabled 2019/12/04 05:18:50 net device setup: enabled 2019/12/04 05:18:50 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/12/04 05:18:50 devlink PCI setup: PCI device 0000:00:10.0 is not available 05:18:51 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x2, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r4, r0, 0x0) 05:18:51 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="1400000013000507ed008064d20010000b000080", 0x14}], 0x1}, 0x0) syzkaller login: [ 55.531112][ T8149] IPVS: ftp: loaded support on port[0] = 21 [ 55.632751][ T8151] IPVS: ftp: loaded support on port[0] = 21 05:18:51 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2048, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x501, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'nr0\x01\x00', 0x4009}) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = socket$inet6(0xa, 0xaff0e82ef0bdde8, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x100000206201) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000200)=0xa7) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x2, &(0x7f0000000180)=ANY=[@ANYBLOB="0300", @ANYRES32, @ANYBLOB='\x00'/10], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f00000018c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83CZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x00\x00\x00\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8dx\xd5\x1dU*s)\x12[\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xddeF>29\v\x02\xa2b\x13R\xef\xffA,\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x81\x10:\x0e(\xdd\xfc\xc9\xc6\xb4\xf0\'f:\xbd\xfe\x11\xf8\xc8W\x81s^\xd9W\xf1\x94\xaf\xc5\x8a\xb4f\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2A') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000600)) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="00ae81000000aef186dd43e971e254e37a"], 0x70ad) [ 55.701776][ T8149] chnl_net:caif_netlink_parms(): no params data found [ 55.831320][ T8149] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.849463][ T8149] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.857773][ T8149] device bridge_slave_0 entered promiscuous mode [ 55.870300][ T8151] chnl_net:caif_netlink_parms(): no params data found [ 55.898783][ T8149] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.912579][ T8149] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.920164][ T8149] device bridge_slave_1 entered promiscuous mode [ 55.948780][ T8155] IPVS: ftp: loaded support on port[0] = 21 [ 55.989087][ T8149] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link 05:18:52 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r0, 0xffffffffffffffff, 0x7fff, 0x0) [ 56.019040][ T8149] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.028906][ T8151] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.036465][ T8151] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.044954][ T8151] device bridge_slave_0 entered promiscuous mode [ 56.075101][ T8151] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.082189][ T8151] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.093691][ T8151] device bridge_slave_1 entered promiscuous mode [ 56.106105][ T8149] team0: Port device team_slave_0 added [ 56.130666][ T8149] team0: Port device team_slave_1 added [ 56.150682][ T8151] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.197634][ T8151] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 05:18:52 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)={[{0x2d, 'pids'}]}, 0x6) [ 56.284972][ T8149] device hsr_slave_0 entered promiscuous mode [ 56.334100][ T8149] device hsr_slave_1 entered promiscuous mode [ 56.399708][ T8151] team0: Port device team_slave_0 added [ 56.431607][ T8159] IPVS: ftp: loaded support on port[0] = 21 [ 56.439282][ T8155] chnl_net:caif_netlink_parms(): no params data found [ 56.451768][ T8151] team0: Port device team_slave_1 added [ 56.466271][ T8149] netdevsim netdevsim0 netdevsim0: renamed from eth0 05:18:52 executing program 5: futex(0xfffffffffffffffe, 0x85, 0x0, 0x0, 0x0, 0x0) [ 56.540261][ T8149] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.618786][ T8149] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 56.678268][ T8149] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 56.728622][ T8161] IPVS: ftp: loaded support on port[0] = 21 [ 56.784549][ T8151] device hsr_slave_0 entered promiscuous mode [ 56.842602][ T8151] device hsr_slave_1 entered promiscuous mode [ 56.882378][ T8151] debugfs: Directory 'hsr0' with parent '/' already present! [ 56.895566][ T8155] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.903209][ T8155] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.910912][ T8155] device bridge_slave_0 entered promiscuous mode [ 56.921065][ T8155] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.928618][ T8155] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.936677][ T8155] device bridge_slave_1 entered promiscuous mode [ 56.971983][ T8163] IPVS: ftp: loaded support on port[0] = 21 [ 57.049724][ T8155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.062926][ T8155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.073065][ T8151] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 57.137020][ T8151] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 57.206466][ T8151] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 57.266255][ T8151] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 57.333568][ T8159] chnl_net:caif_netlink_parms(): no params data found [ 57.373327][ T8155] team0: Port device team_slave_0 added [ 57.392153][ T8149] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.416735][ T8155] team0: Port device team_slave_1 added [ 57.428525][ T8159] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.436166][ T8159] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.444006][ T8159] device bridge_slave_0 entered promiscuous mode [ 57.470550][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.479125][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.491360][ T8159] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.498833][ T8159] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.506986][ T8159] device bridge_slave_1 entered promiscuous mode [ 57.594996][ T8155] device hsr_slave_0 entered promiscuous mode [ 57.632720][ T8155] device hsr_slave_1 entered promiscuous mode [ 57.674234][ T8155] debugfs: Directory 'hsr0' with parent '/' already present! [ 57.691197][ T8159] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.704226][ T8149] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.717331][ T8163] chnl_net:caif_netlink_parms(): no params data found [ 57.747616][ T8159] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.800058][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.809539][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.818199][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.825418][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.834487][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.843121][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.851413][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.858634][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.866852][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.877501][ T8159] team0: Port device team_slave_0 added [ 57.885238][ T8159] team0: Port device team_slave_1 added [ 57.902071][ T8156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.964918][ T8159] device hsr_slave_0 entered promiscuous mode [ 58.002697][ T8159] device hsr_slave_1 entered promiscuous mode [ 58.032385][ T8159] debugfs: Directory 'hsr0' with parent '/' already present! [ 58.053655][ T8163] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.060752][ T8163] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.070839][ T8163] device bridge_slave_0 entered promiscuous mode [ 58.079149][ T8163] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.086898][ T8163] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.094781][ T8163] device bridge_slave_1 entered promiscuous mode [ 58.103927][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.112950][ T8161] chnl_net:caif_netlink_parms(): no params data found [ 58.128990][ T8155] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 58.166174][ T8151] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.197209][ T8155] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 58.252947][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.260881][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.268926][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.277625][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.286335][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.295134][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.304811][ T8151] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.311589][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.328307][ T8155] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 58.376207][ T8155] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 58.435361][ T8163] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.450184][ T8149] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 58.461072][ T8149] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.475592][ T8161] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.484394][ T8161] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.492100][ T8161] device bridge_slave_0 entered promiscuous mode [ 58.507125][ T8163] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.521008][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.530674][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.539575][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.547954][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.556962][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.576718][ T8161] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.584666][ T8161] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.592805][ T8161] device bridge_slave_1 entered promiscuous mode [ 58.608390][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.617578][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.626571][ T3055] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.633649][ T3055] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.642676][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.651454][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.660841][ T3055] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.667919][ T3055] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.676067][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.685102][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.701007][ T8151] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 58.712197][ T8151] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.736796][ T8159] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 58.777210][ T8159] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 58.846358][ T8163] team0: Port device team_slave_0 added [ 58.853634][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.861449][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.870632][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.879174][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.888152][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.896814][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.905365][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.913813][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.921970][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.930355][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.939163][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.968624][ T8159] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 59.015181][ T8163] team0: Port device team_slave_1 added [ 59.033533][ T8161] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.048609][ T8161] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.059319][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.067453][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.075253][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.082727][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.104150][ T8159] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 59.205076][ T8163] device hsr_slave_0 entered promiscuous mode [ 59.242850][ T8163] device hsr_slave_1 entered promiscuous mode [ 59.282486][ T8163] debugfs: Directory 'hsr0' with parent '/' already present! [ 59.291416][ T8149] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.314196][ T8155] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.328260][ T8151] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.339764][ T8161] team0: Port device team_slave_0 added [ 59.355555][ T8155] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.369366][ T8156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.377606][ T8156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.398189][ T8161] team0: Port device team_slave_1 added [ 59.445328][ T8161] device hsr_slave_0 entered promiscuous mode [ 59.503333][ T8161] device hsr_slave_1 entered promiscuous mode [ 59.562357][ T8161] debugfs: Directory 'hsr0' with parent '/' already present! [ 59.582977][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.591935][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.600692][ T3055] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.607765][ T3055] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.615508][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.624058][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.632722][ T3055] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.639767][ T3055] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.647319][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.656401][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.664858][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.673420][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.681585][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.690128][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.701480][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.709352][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.753637][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.761819][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.777624][ T8163] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 59.815179][ T8163] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 59.855408][ T8161] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 59.914399][ T8161] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 59.961036][ T8163] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 164.982200][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 164.988965][ C0] rcu: 0-...!: (10499 ticks this GP) idle=056/1/0x4000000000000002 softirq=11740/11741 fqs=41 [ 164.999513][ C0] (t=10501 jiffies g=6397 q=114) [ 165.004524][ C0] rcu: rcu_preempt kthread starved for 10420 jiffies! g6397 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 165.015603][ C0] rcu: RCU grace-period kthread stack dump: [ 165.021474][ C0] rcu_preempt R running task 29104 10 2 0x80004000 [ 165.029360][ C0] Call Trace: [ 165.032644][ C0] __schedule+0x9a0/0xcc0 [ 165.036969][ C0] schedule+0x181/0x210 [ 165.041109][ C0] schedule_timeout+0x14f/0x240 [ 165.045949][ C0] ? run_local_timers+0x120/0x120 [ 165.050963][ C0] rcu_gp_kthread+0xed8/0x1770 [ 165.055719][ C0] kthread+0x332/0x350 [ 165.059770][ C0] ? rcu_report_qs_rsp+0x140/0x140 [ 165.064869][ C0] ? kthread_blkcg+0xe0/0xe0 [ 165.069441][ C0] ret_from_fork+0x24/0x30 [ 165.073853][ C0] NMI backtrace for cpu 0 [ 165.078167][ C0] CPU: 0 PID: 8170 Comm: udevd Not tainted 5.4.0-syzkaller #0 [ 165.085603][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 165.095642][ C0] Call Trace: [ 165.098915][ C0] [ 165.101756][ C0] dump_stack+0x1fb/0x318 [ 165.106075][ C0] nmi_cpu_backtrace+0xaf/0x1a0 [ 165.110908][ C0] ? nmi_trigger_cpumask_backtrace+0x16d/0x290 [ 165.117053][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 165.123106][ C0] nmi_trigger_cpumask_backtrace+0x174/0x290 [ 165.129070][ C0] arch_trigger_cpumask_backtrace+0x10/0x20 [ 165.134952][ C0] rcu_dump_cpu_stacks+0x15a/0x220 [ 165.140053][ C0] rcu_sched_clock_irq+0xe25/0x1ad0 [ 165.145248][ C0] ? trace_hardirqs_off+0x74/0x80 [ 165.150261][ C0] update_process_times+0x12d/0x180 [ 165.155468][ C0] tick_sched_timer+0x263/0x420 [ 165.160324][ C0] ? tick_setup_sched_timer+0x3d0/0x3d0 [ 165.165864][ C0] __hrtimer_run_queues+0x403/0x840 [ 165.171086][ C0] hrtimer_interrupt+0x38c/0xda0 [ 165.176054][ C0] ? debug_smp_processor_id+0x9/0x20 [ 165.181332][ C0] smp_apic_timer_interrupt+0x109/0x280 [ 165.186869][ C0] apic_timer_interrupt+0xf/0x20 [ 165.191786][ C0] [ 165.194715][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x48/0x50 [ 165.200857][ C0] Code: 80 13 00 00 83 fa 02 75 21 48 8b 91 88 13 00 00 48 8b 32 48 8d 7e 01 8b 89 84 13 00 00 48 39 cf 73 08 48 89 44 f2 08 48 89 3a 0f 1f 80 00 00 00 00 4c 8b 04 24 65 48 8b 04 25 c0 1d 02 00 65 [ 165.220535][ C0] RSP: 0018:ffffc90002847730 EFLAGS: 00000293 ORIG_RAX: ffffffffffffff13 [ 165.228932][ C0] RAX: ffffffff81487326 RBX: ffffea000244b6c0 RCX: ffff88808e7e2180 [ 165.236888][ C0] RDX: 0000000000000000 RSI: 00000000fffffffc RDI: ffffea000244b6c0 [ 165.244845][ C0] RBP: ffffc90002847758 R08: 000000000003a768 R09: ffffed101254e72f [ 165.252804][ C0] R10: ffffed101254e72f R11: 0000000000000000 R12: ffff88808f4ec2a0 [ 165.260761][ C0] R13: dffffc0000000000 R14: 00000000fffffffc R15: ffff888092a73968 [ 165.268736][ C0] ? mod_memcg_page_state+0x16/0x190 [ 165.274013][ C0] ? mod_memcg_page_state+0x16/0x190 [ 165.279308][ C0] free_thread_stack+0x168/0x590 [ 165.284245][ C0] put_task_stack+0xa3/0x130 [ 165.288835][ C0] finish_task_switch+0x3f1/0x550 [ 165.293864][ C0] __schedule+0x9a8/0xcc0 [ 165.298195][ C0] preempt_schedule_irq+0xc1/0x140 [ 165.303300][ C0] retint_kernel+0x1b/0x2b [ 165.307704][ C0] RIP: 0010:kmem_cache_free+0xc8/0xf0 [ 165.313073][ C0] Code: 58 07 00 74 42 4c 89 f7 57 9d 0f 1f 44 00 00 e8 0e 98 ca ff eb 19 e8 a7 95 ca ff 48 83 3d 07 f7 58 07 00 74 24 4c 89 f7 57 9d <0f> 1f 44 00 00 4c 89 e7 4c 89 fe e8 58 01 00 00 5b 41 5c 41 5e 41 [ 165.332681][ C0] RSP: 0018:ffffc900028479b0 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff02 [ 165.341085][ C0] RAX: ffff88808e7e2a14 RBX: ffff8880aa9ec540 RCX: ffffffff815c0597 [ 165.349042][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000286 [ 165.357085][ C0] RBP: ffffc900028479d0 R08: ffff88808e7e29d8 R09: fffffbfff13c8d20 [ 165.365044][ C0] R10: fffffbfff13c8d20 R11: 0000000000000000 R12: ffffffff8147b56c [ 165.373009][ C0] R13: dffffc0000000000 R14: 0000000000000286 R15: ffff8880a0b14a90 [ 165.380979][ C0] ? vm_area_free+0x1c/0x20 [ 165.385477][ C0] ? mark_lock+0x107/0x1650 [ 165.389970][ C0] vm_area_free+0x1c/0x20 [ 165.394286][ C0] exit_mmap+0x45d/0x530 [ 165.398511][ C0] ? exit_aio+0x25e/0x370 [ 165.402855][ C0] __mmput+0x120/0x3a0 [ 165.406933][ C0] mmput+0x5d/0x70 [ 165.410746][ C0] flush_old_exec+0x551/0x6d0 [ 165.415428][ C0] load_elf_binary+0x652/0x3670 [ 165.420290][ C0] ? load_elf_binary+0x761/0x3670 [ 165.425304][ C0] ? search_binary_handler+0x16b/0x660 [ 165.430765][ C0] ? do_raw_read_unlock+0x42/0xf0 [ 165.435782][ C0] search_binary_handler+0x1a5/0x660 [ 165.441063][ C0] __do_execve_file+0x1573/0x1cd0 [ 165.446094][ C0] __x64_sys_execve+0x94/0xb0 [ 165.450761][ C0] do_syscall_64+0xf7/0x1c0 [ 165.455253][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 165.461128][ C0] RIP: 0033:0x7fa95c110207 [ 165.465546][ C0] Code: Bad RIP value. [ 165.469595][ C0] RSP: 002b:00007ffecc90e918 EFLAGS: 00000206 ORIG_RAX: 000000000000003b [ 165.477996][ C0] RAX: ffffffffffffffda RBX: 00000000ffffffff RCX: 00007fa95c110207 [ 165.486473][ C0] RDX: 0000000000f12fe0 RSI: 00007ffecc90ea10 RDI: 00007ffecc90fa20 [ 165.494432][ C0] RBP: 0000000000625500 R08: 0000000000001041 R09: 0000000000001041 [ 165.502390][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000f12fe0 [ 165.510348][ C0] R13: 0000000000000007 R14: 0000000000f02250 R15: 0000000000000005