[ 43.470830][ T23] audit: type=1800 audit(1575425445.382:30): pid=7933 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.188' (ECDSA) to the list of known hosts. 2019/12/04 02:10:52 fuzzer started 2019/12/04 02:10:53 dialing manager at 10.128.0.26:42111 2019/12/04 02:10:53 syscalls: 2689 2019/12/04 02:10:53 code coverage: enabled 2019/12/04 02:10:53 comparison tracing: enabled 2019/12/04 02:10:53 extra coverage: extra coverage is not supported by the kernel 2019/12/04 02:10:53 setuid sandbox: enabled 2019/12/04 02:10:53 namespace sandbox: enabled 2019/12/04 02:10:53 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/04 02:10:53 fault injection: enabled 2019/12/04 02:10:53 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/04 02:10:53 net packet injection: enabled 2019/12/04 02:10:53 net device setup: enabled 2019/12/04 02:10:53 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/12/04 02:10:53 devlink PCI setup: PCI device 0000:00:10.0 is not available 02:10:54 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0x400000000000003, 0x0, 0x403, 0xf, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @sadb_key={0x1, 0x9}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr="2d997e568b940344a40733b5e36b51d3"}}]}, 0x78}}, 0x0) 02:10:55 executing program 1: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000000140)="25bca274769e620a2734fa0095e0612687ecb86a5c8802a9d8aea872943afd874e2f98b579a7086270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0xa00000000000000}}]}) syzkaller login: [ 53.237214][ T8096] IPVS: ftp: loaded support on port[0] = 21 02:10:55 executing program 2: syz_open_dev$mouse(0x0, 0x0, 0x0) setxattr$security_smack_transmute(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000200)='TRUE', 0x4, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000380)=r1, 0xffffffffffffff17) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x28000}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) waitid(0x83b895581628fca4, r2, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) munlockall() prctl$PR_SET_PTRACER(0x59616d61, 0x0) gettid() socket(0x15, 0x80005, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000000)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "07a30cd41929926a9335701c068b17b9fc07cd039f5a47009833063800"}}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = fcntl$dupfd(r4, 0x0, r4) bind$bt_rfcomm(r5, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x2}}, 0xa) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000000)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "07a30cd41929926a9335701c068b17b9fc07cd039f5a47009833063800"}}) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = fcntl$dupfd(r6, 0x0, r6) bind$bt_rfcomm(r7, &(0x7f0000000000)={0x1f, {0xffffffffffffffff}}, 0xa) socket$inet6(0xa, 0x2, 0x0) [ 53.445259][ T8096] chnl_net:caif_netlink_parms(): no params data found [ 53.456003][ T8099] IPVS: ftp: loaded support on port[0] = 21 [ 53.557547][ T8101] IPVS: ftp: loaded support on port[0] = 21 [ 53.581176][ T8096] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.588260][ T8096] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.599453][ T8096] device bridge_slave_0 entered promiscuous mode [ 53.611365][ T8096] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.618822][ T8096] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.627970][ T8096] device bridge_slave_1 entered promiscuous mode [ 53.669669][ T8096] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.703784][ T8096] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 02:10:55 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 53.753375][ T8099] chnl_net:caif_netlink_parms(): no params data found [ 53.787499][ T8096] team0: Port device team_slave_0 added [ 53.854040][ T8096] team0: Port device team_slave_1 added [ 53.903304][ T8099] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.913057][ T8099] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.931116][ T8099] device bridge_slave_0 entered promiscuous mode [ 53.951478][ T8099] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.958819][ T8099] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.967290][ T8099] device bridge_slave_1 entered promiscuous mode [ 54.017375][ T8101] chnl_net:caif_netlink_parms(): no params data found [ 54.028579][ T8099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link 02:10:56 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000005c0)='J', 0x1, 0xfffffffffffffffe) keyctl$chown(0x5, r2, 0x0, 0x0) [ 54.063015][ T8096] device hsr_slave_0 entered promiscuous mode [ 54.102542][ T8096] device hsr_slave_1 entered promiscuous mode [ 54.161454][ T8099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.174246][ T8105] IPVS: ftp: loaded support on port[0] = 21 [ 54.250536][ T8099] team0: Port device team_slave_0 added [ 54.273208][ T8099] team0: Port device team_slave_1 added 02:10:56 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000180)="8907040400", 0x5) connect$inet(r0, &(0x7f00000001c0), 0x10) [ 54.312598][ T8101] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.326626][ T8101] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.338568][ T8101] device bridge_slave_0 entered promiscuous mode [ 54.372545][ T8096] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.391425][ T8107] IPVS: ftp: loaded support on port[0] = 21 [ 54.442159][ T8101] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.449422][ T8101] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.458162][ T8101] device bridge_slave_1 entered promiscuous mode [ 54.501681][ T8099] device hsr_slave_0 entered promiscuous mode [ 54.560270][ T8099] device hsr_slave_1 entered promiscuous mode [ 54.620118][ T8099] debugfs: Directory 'hsr0' with parent '/' already present! [ 54.633672][ T8096] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.714848][ T8096] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.773050][ T8101] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.786167][ T8101] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.810150][ T8096] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.857616][ T8109] IPVS: ftp: loaded support on port[0] = 21 [ 54.897323][ T8101] team0: Port device team_slave_0 added [ 54.905166][ T8101] team0: Port device team_slave_1 added [ 54.942812][ T8099] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 55.006614][ T8099] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 55.053054][ T8099] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 55.162669][ T8101] device hsr_slave_0 entered promiscuous mode [ 55.220402][ T8101] device hsr_slave_1 entered promiscuous mode [ 55.290107][ T8101] debugfs: Directory 'hsr0' with parent '/' already present! [ 55.301110][ T8099] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 55.344007][ T8105] chnl_net:caif_netlink_parms(): no params data found [ 55.402571][ T8107] chnl_net:caif_netlink_parms(): no params data found [ 55.464644][ T8107] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.472356][ T8107] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.481015][ T8107] device bridge_slave_0 entered promiscuous mode [ 55.488944][ T8107] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.496179][ T8107] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.504439][ T8107] device bridge_slave_1 entered promiscuous mode [ 55.528662][ T8105] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.537119][ T8105] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.545996][ T8105] device bridge_slave_0 entered promiscuous mode [ 55.556035][ T8105] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.563326][ T8105] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.571366][ T8105] device bridge_slave_1 entered promiscuous mode [ 55.586572][ T8101] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 55.636201][ T8101] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 55.723200][ T8107] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.734621][ T8107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.749381][ T8101] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 55.808396][ T8101] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 55.870617][ T8105] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.882022][ T8105] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.921929][ T8107] team0: Port device team_slave_0 added [ 55.931932][ T8107] team0: Port device team_slave_1 added [ 55.966205][ T8105] team0: Port device team_slave_0 added [ 55.972955][ T8109] chnl_net:caif_netlink_parms(): no params data found [ 56.022806][ T8107] device hsr_slave_0 entered promiscuous mode [ 56.071752][ T8107] device hsr_slave_1 entered promiscuous mode [ 56.110218][ T8107] debugfs: Directory 'hsr0' with parent '/' already present! [ 56.119753][ T8105] team0: Port device team_slave_1 added [ 56.138719][ T8096] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.179545][ T8099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.202821][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.211853][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.229339][ T8096] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.262856][ T8105] device hsr_slave_0 entered promiscuous mode [ 56.301116][ T8105] device hsr_slave_1 entered promiscuous mode [ 56.340166][ T8105] debugfs: Directory 'hsr0' with parent '/' already present! [ 56.352048][ T8109] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.359422][ T8109] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.367950][ T8109] device bridge_slave_0 entered promiscuous mode [ 56.376408][ T8109] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.383775][ T8109] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.392150][ T8109] device bridge_slave_1 entered promiscuous mode [ 56.437988][ T8099] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.457344][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.466199][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.474395][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.483235][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.491811][ T2725] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.498938][ T2725] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.508413][ T8109] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.537907][ T8096] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 56.548938][ T8096] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.567295][ T8107] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 56.622946][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.631764][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.642403][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.651415][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.658654][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.667793][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.676953][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.685823][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.694645][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.703373][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.712477][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.722179][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.730812][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.739445][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.748453][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.756749][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.766365][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.775439][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.782939][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.791840][ T8109] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.807225][ T8105] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 56.846786][ T8105] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 56.891654][ T8107] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 56.942735][ T8110] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.951294][ T8110] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.959328][ T8110] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.967604][ T8110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.976413][ T8110] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.985513][ T8110] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.992625][ T8110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.001608][ T8110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.022112][ T8096] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.039758][ T8109] team0: Port device team_slave_0 added [ 57.054360][ T8105] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 57.121874][ T8107] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 57.161983][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.169650][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.177961][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.197778][ T8109] team0: Port device team_slave_1 added [ 57.208172][ T8101] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.216013][ T8105] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 57.257040][ T8107] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 57.328322][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.337755][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.346710][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.355420][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.364603][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.403839][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.429233][ T2725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.498953][ T8105] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.515097][ T8105] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.545345][ T8105] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 57.556197][ T8105] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.584208][ T8105] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.605877][ T8099] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 162.449903][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 162.456730][ C0] rcu: 0-...!: (10499 ticks this GP) idle=a3a/1/0x4000000000000002 softirq=11504/11504 fqs=8 [ 162.467329][ C0] (t=10500 jiffies g=5885 q=580) [ 162.472356][ C0] rcu: rcu_preempt kthread starved for 10482 jiffies! g5885 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 162.483445][ C0] rcu: RCU grace-period kthread stack dump: [ 162.489342][ C0] rcu_preempt R running task 29032 10 2 0x80004000 [ 162.497374][ C0] Call Trace: [ 162.500670][ C0] __schedule+0x9a0/0xcc0 [ 162.505002][ C0] schedule+0x181/0x210 [ 162.509153][ C0] schedule_timeout+0x14f/0x240 [ 162.514000][ C0] ? run_local_timers+0x120/0x120 [ 162.519022][ C0] rcu_gp_kthread+0xed8/0x1770 [ 162.524830][ C0] kthread+0x332/0x350 [ 162.528901][ C0] ? rcu_report_qs_rsp+0x140/0x140 [ 162.534098][ C0] ? kthread_blkcg+0xe0/0xe0 [ 162.538676][ C0] ret_from_fork+0x24/0x30 [ 162.543093][ C0] NMI backtrace for cpu 0 [ 162.547411][ C0] CPU: 0 PID: 8096 Comm: syz-executor.0 Not tainted 5.4.0-syzkaller #0 [ 162.555628][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 162.565664][ C0] Call Trace: [ 162.568934][ C0] [ 162.571778][ C0] dump_stack+0x1fb/0x318 [ 162.576100][ C0] nmi_cpu_backtrace+0xaf/0x1a0 [ 162.580938][ C0] ? nmi_trigger_cpumask_backtrace+0x16d/0x290 [ 162.587080][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 162.593155][ C0] nmi_trigger_cpumask_backtrace+0x174/0x290 [ 162.599135][ C0] arch_trigger_cpumask_backtrace+0x10/0x20 [ 162.605035][ C0] rcu_dump_cpu_stacks+0x15a/0x220 [ 162.610152][ C0] rcu_sched_clock_irq+0xe25/0x1ad0 [ 162.615355][ C0] ? trace_hardirqs_off+0x74/0x80 [ 162.620374][ C0] update_process_times+0x12d/0x180 [ 162.625581][ C0] tick_sched_timer+0x263/0x420 [ 162.630447][ C0] ? tick_setup_sched_timer+0x3d0/0x3d0 [ 162.636017][ C0] __hrtimer_run_queues+0x403/0x840 [ 162.641230][ C0] hrtimer_interrupt+0x38c/0xda0 [ 162.646179][ C0] ? debug_smp_processor_id+0x9/0x20 [ 162.651591][ C0] smp_apic_timer_interrupt+0x109/0x280 [ 162.657165][ C0] apic_timer_interrupt+0xf/0x20 [ 162.662107][ C0] [ 162.665051][ C0] RIP: 0010:free_thread_stack+0x148/0x590 [ 162.670763][ C0] Code: 00 e8 5c 2d 2e 00 48 89 df 31 f6 e8 42 af 6e 00 43 80 3c 2e 00 74 08 4c 89 e7 e8 43 a4 69 00 49 8b 1c 24 48 83 c3 08 48 89 d8 <48> c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 25 a4 69 00 48 8b 3b [ 162.690365][ C0] RSP: 0018:ffffc90001eb7bd0 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13 [ 162.698770][ C0] RAX: ffff888098954a88 RBX: ffff888098954a88 RCX: 0000000000000000 [ 162.706726][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffea00027cb480 [ 162.714683][ C0] RBP: ffffc90001eb7c08 R08: 000000000003a768 R09: fffffbfff120248a [ 162.722638][ C0] R10: fffffbfff120248a R11: 0000000000000000 R12: ffff888098954b20 [ 162.730596][ C0] R13: dffffc0000000000 R14: 1ffff1101312a964 R15: ffff88809150f4e8 [ 162.738583][ C0] put_task_stack+0xa3/0x130 [ 162.743159][ C0] finish_task_switch+0x3f1/0x550 [ 162.748175][ C0] __schedule+0x9a8/0xcc0 [ 162.752498][ C0] schedule+0x181/0x210 [ 162.756640][ C0] do_nanosleep+0x1d0/0x6c0 [ 162.761184][ C0] hrtimer_nanosleep+0x3a6/0x5b0 [ 162.766132][ C0] ? trace_hrtimer_expire_exit+0x2d0/0x2d0 [ 162.771932][ C0] __x64_sys_nanosleep+0x186/0x1d0 [ 162.777050][ C0] do_syscall_64+0xf7/0x1c0 [ 162.781558][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 162.787455][ C0] RIP: 0033:0x458b20 [ 162.791341][ C0] Code: c0 5b 5d c3 66 0f 1f 44 00 00 8b 04 24 48 83 c4 18 5b 5d c3 66 0f 1f 44 00 00 83 3d 11 fe 61 00 00 75 14 b8 23 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 d4 d1 fb ff c3 48 83 ec 08 e8 ea 46 00 00 [ 162.810947][ C0] RSP: 002b:00007fff4753a4e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000023 [ 162.819351][ C0] RAX: ffffffffffffffda RBX: 000000000000e036 RCX: 0000000000458b20 [ 162.827311][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007fff4753a4f0 [ 162.835274][ C0] RBP: 0000000000000002 R08: 0000000000000001 R09: 0000000000c74940 [ 162.843234][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 162.851193][ C0] R13: 00007fff4753a540 R14: 000000000000e036 R15: 00007fff4753a550