[ 41.092854][ T23] audit: type=1800 audit(1575361649.096:26): pid=7964 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 41.148003][ T23] audit: type=1800 audit(1575361649.096:27): pid=7964 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [ 41.196813][ T23] audit: type=1800 audit(1575361649.126:28): pid=7964 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 42.012820][ T23] audit: type=1800 audit(1575361650.036:29): pid=7964 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.17' (ECDSA) to the list of known hosts. 2019/12/03 08:27:39 fuzzer started 2019/12/03 08:27:41 dialing manager at 10.128.0.26:38907 2019/12/03 08:27:41 syscalls: 2697 2019/12/03 08:27:41 code coverage: enabled 2019/12/03 08:27:41 comparison tracing: enabled 2019/12/03 08:27:41 extra coverage: extra coverage is not supported by the kernel 2019/12/03 08:27:41 setuid sandbox: enabled 2019/12/03 08:27:41 namespace sandbox: enabled 2019/12/03 08:27:41 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/03 08:27:41 fault injection: enabled 2019/12/03 08:27:41 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/03 08:27:41 net packet injection: enabled 2019/12/03 08:27:41 net device setup: enabled 2019/12/03 08:27:41 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/12/03 08:27:41 devlink PCI setup: PCI device 0000:00:10.0 is not available 08:27:42 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) r5 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r6 = add_key$keyring(&(0x7f0000000300)='keyring\x00', &(0x7f00000006c0)={'syz', 0x3}, 0x0, 0x0, r5) keyctl$chown(0x4, r6, 0x0, r4) 08:27:42 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1cfe48b81bf00153, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9}, 0x0, 0xf, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x1f2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = semget(0x3, 0x5, 0x2e3) semget(0x2, 0x0, 0x200) r2 = semget(0x2, 0x3, 0x8) semop(r2, 0x0, 0xa9b01d486ca589ab) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x40}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_pts(r3, 0x40000) write$binfmt_aout(r3, &(0x7f0000000240)=ANY=[], 0x35b) ioctl$TCSETA(r4, 0x5406, &(0x7f00000004c0)={0xfffffffffffffffd, 0x40000004, 0x0, 0xfc63, 0xfffffffffffffffc, 0x0, 0x0, 0x2000000000000, 0x0, 0x4}) ioctl$TCSETSF(r4, 0x5412, &(0x7f0000000040)={0x17, 0x5b03}) time(&(0x7f0000000440)) socket$nl_generic(0x10, 0x3, 0x10) r5 = getpgrp(0x0) r6 = gettid() rt_tgsigqueueinfo(r5, r6, 0x200000000000011, &(0x7f0000000100)={0x0, 0x0, 0x1}) perf_event_open(&(0x7f0000000180)={0xfffffffffffffffd, 0x70, 0x3, 0xf0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x4}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x3, 0x0) r7 = syz_open_dev$vcsa(&(0x7f00000003c0)='/d}v/vcsa#\x10', 0x0, 0x402) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000940)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r7, 0x40485404, &(0x7f0000000340)={{0x0, 0x1, 0x100, 0x0, 0x5475}, 0xaa3, 0x6}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r10 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$uinput_user_dev(r10, 0x0, 0x0) fallocate(r10, 0x0, 0x0, 0x2000002) fallocate(r9, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r9, 0xc028660f, &(0x7f0000000040)={0x0, r10, 0xfffffffffffffffc, 0x8, 0x20}) r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='loginuid\x00') sendfile(r11, r11, 0x0, 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x7, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x10000, 0x2, 0x0, 0x4000000000000000, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x5}, 0x48}, 0x0, 0xfffffffffffffffc, r11, 0x0) syz_open_procfs(0x0, &(0x7f0000000400)='mountinfo\x00') rename(&(0x7f0000000780)='./file0\x00', &(0x7f00000006c0)='./file1\x00') r12 = syz_open_dev$vcsa(&(0x7f0000000500)='/dev/vcsa#\x00', 0x3, 0x404800) ioctl$EXT4_IOC_MOVE_EXT(r12, 0xc028660f, &(0x7f0000000540)={0x0, r0, 0x2, 0x100, 0x3}) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xffffffffffffffa3}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRES64=r1], 0x1}, 0x1, 0x0, 0x0, 0x20005}, 0x1) syzkaller login: [ 54.633652][ T8129] IPVS: ftp: loaded support on port[0] = 21 08:27:42 executing program 2: prlimit64(0x0, 0x7, &(0x7f0000000280)={0x5, 0x200}, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = fsopen(&(0x7f0000000080)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) [ 54.789879][ T8129] chnl_net:caif_netlink_parms(): no params data found [ 54.814350][ T8132] IPVS: ftp: loaded support on port[0] = 21 [ 54.903633][ T8129] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.918110][ T8129] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.939653][ T8129] device bridge_slave_0 entered promiscuous mode [ 54.949978][ T8129] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.957130][ T8129] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.964995][ T8129] device bridge_slave_1 entered promiscuous mode [ 54.990166][ T8134] IPVS: ftp: loaded support on port[0] = 21 [ 55.004077][ T8129] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.062986][ T8129] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 08:27:43 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x3, &(0x7f0000000040)=@framed={{0x15, 0xa, 0x0, 0x0, 0x0, 0x71, 0x10, 0x63}}, &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x7f\x00'/248}, 0x48) [ 55.121413][ T8129] team0: Port device team_slave_0 added [ 55.136147][ T8129] team0: Port device team_slave_1 added [ 55.166412][ T8132] chnl_net:caif_netlink_parms(): no params data found [ 55.257086][ T8129] device hsr_slave_0 entered promiscuous mode [ 55.295145][ T8129] device hsr_slave_1 entered promiscuous mode 08:27:43 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xa8}]}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) sendmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000004c0)="4f3e41b5b0e62974f2a92bf4f669e99bf660401bd8b0e8141db87bb3662d38024e9e461419e30e92012917dd643aa5bf1aed71062bf296b3eb2e98301832f28fd16238e6c025294cf41bb1cd0940a34b4c4eb38ee3b0f1ee134ae0fad43f031d", 0x4d}, {&(0x7f0000000100)="cfb3edc4670f13f0d85e730d6be4cd0ddc71ec4a07b49664ba579bd7efb6a5e796c80d6137e0de05f16cf508ccd8074037448fc69c6a0a74eba95a66bc0fa2eded2640b6ec8b65838b88bbe6459f666a079dae270e3e9e8e", 0x435}], 0x2}}], 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000780)='/dev/kvm\x00', 0x0, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f0000000900)="82dedceff18f25da9dbcfe2c8bcaaec948d9fe148eb16bcbafaa264c3e90d27cf5479df53a361a43470ad912ca0b85d676ca37eb828555bed6383d52b1e9b2e8b93cad7408cd8ad858453d", 0xfdfd, 0x11, 0x0, 0x0) [ 55.440501][ T8137] IPVS: ftp: loaded support on port[0] = 21 [ 55.479782][ T8132] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.504602][ T8132] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.512246][ T8132] device bridge_slave_0 entered promiscuous mode [ 55.539627][ T8140] IPVS: ftp: loaded support on port[0] = 21 [ 55.552408][ T8134] chnl_net:caif_netlink_parms(): no params data found 08:27:43 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x53}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0xc0105502, 0x0) syz_open_dev$vcsn(0x0, 0x7285, 0x3cd703) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r1, 0x400, 0x1) fcntl$setlease(r1, 0x400, 0x0) [ 55.580637][ T8132] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.589194][ T8132] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.597268][ T8132] device bridge_slave_1 entered promiscuous mode [ 55.604350][ T8129] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 55.658266][ T8129] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 55.733855][ T8129] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 55.778652][ T8129] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 55.855711][ T8132] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.867195][ T8132] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.895258][ T8143] IPVS: ftp: loaded support on port[0] = 21 [ 55.949641][ T8132] team0: Port device team_slave_0 added [ 55.970950][ T8134] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.978478][ T8134] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.986482][ T8134] device bridge_slave_0 entered promiscuous mode [ 55.994353][ T8132] team0: Port device team_slave_1 added [ 56.029330][ T8134] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.036525][ T8134] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.044019][ T8134] device bridge_slave_1 entered promiscuous mode [ 56.069553][ T8134] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.146107][ T8132] device hsr_slave_0 entered promiscuous mode [ 56.194882][ T8132] device hsr_slave_1 entered promiscuous mode [ 56.264596][ T8132] debugfs: Directory 'hsr0' with parent '/' already present! [ 56.276104][ T8134] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.302716][ T8134] team0: Port device team_slave_0 added [ 56.326434][ T8140] chnl_net:caif_netlink_parms(): no params data found [ 56.336335][ T8134] team0: Port device team_slave_1 added [ 56.390698][ T8137] chnl_net:caif_netlink_parms(): no params data found [ 56.426277][ T8140] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.433420][ T8140] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.441881][ T8140] device bridge_slave_0 entered promiscuous mode [ 56.449346][ T8132] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 56.496417][ T8143] chnl_net:caif_netlink_parms(): no params data found [ 56.557070][ T8134] device hsr_slave_0 entered promiscuous mode [ 56.594822][ T8134] device hsr_slave_1 entered promiscuous mode [ 56.634812][ T8134] debugfs: Directory 'hsr0' with parent '/' already present! [ 56.642460][ T8140] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.649830][ T8140] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.657575][ T8140] device bridge_slave_1 entered promiscuous mode [ 56.664978][ T8132] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 56.726530][ T8132] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 56.790134][ T8132] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 56.852928][ T8140] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.867465][ T8140] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.892865][ T8143] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.901011][ T8143] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.908554][ T8143] device bridge_slave_0 entered promiscuous mode [ 56.918276][ T8143] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.925881][ T8143] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.933420][ T8143] device bridge_slave_1 entered promiscuous mode [ 56.972097][ T8137] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.979527][ T8137] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.990053][ T8137] device bridge_slave_0 entered promiscuous mode [ 57.001536][ T8137] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.008819][ T8137] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.016704][ T8137] device bridge_slave_1 entered promiscuous mode [ 57.028694][ T8143] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.040282][ T8143] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.050983][ T8140] team0: Port device team_slave_0 added [ 57.058674][ T8140] team0: Port device team_slave_1 added [ 57.094359][ T8137] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.107567][ T8137] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.118730][ T8129] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.125798][ T8134] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 57.167365][ T8143] team0: Port device team_slave_0 added [ 57.198545][ T8140] device hsr_slave_0 entered promiscuous mode [ 57.237597][ T8140] device hsr_slave_1 entered promiscuous mode [ 57.294635][ T8140] debugfs: Directory 'hsr0' with parent '/' already present! [ 57.312253][ T8137] team0: Port device team_slave_0 added [ 57.319196][ T8143] team0: Port device team_slave_1 added [ 57.326821][ T8137] team0: Port device team_slave_1 added [ 57.332539][ T8134] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 57.366515][ T8134] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 57.451800][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.460611][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.470071][ T8134] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 57.596412][ T8137] device hsr_slave_0 entered promiscuous mode [ 57.624732][ T8137] device hsr_slave_1 entered promiscuous mode [ 57.674678][ T8137] debugfs: Directory 'hsr0' with parent '/' already present! [ 57.684659][ T8129] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.698195][ T8140] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 57.759022][ T8140] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 57.816336][ T8140] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 57.872424][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.880933][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.889634][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.896831][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.905768][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.914146][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.922479][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.929524][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.987122][ T8143] device hsr_slave_0 entered promiscuous mode [ 58.024791][ T8143] device hsr_slave_1 entered promiscuous mode [ 58.094663][ T8143] debugfs: Directory 'hsr0' with parent '/' already present! [ 58.102285][ T8140] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 58.188017][ T3910] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.199179][ T3910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.234127][ T8137] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 58.298436][ T8137] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 58.349634][ T8137] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 58.417344][ T8137] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 58.490761][ T8129] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 58.502171][ T8129] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.513687][ T8147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.523258][ T8147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.531801][ T8147] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.539990][ T8147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.548519][ T8147] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.556803][ T8147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.565916][ T8147] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.575659][ T8147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.583742][ T8147] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.591895][ T8147] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.599530][ T8147] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.610450][ T8143] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 58.673628][ T8143] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 58.729951][ T8132] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.738271][ T8143] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 58.798258][ T8134] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.816273][ T8143] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 58.850760][ T8134] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.858336][ T3190] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.866526][ T3190] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.873889][ T3190] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.881688][ T3190] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.898134][ T8132] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.912997][ T8140] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.925660][ T8129] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.932670][ T3910] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.940955][ T3910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.949903][ T3910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.958421][ T3910] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.967152][ T3910] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.974178][ T3910] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.991494][ T8140] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.009463][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.018931][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.028875][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.037949][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.045051][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.052797][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.061677][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.070171][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.077257][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.085449][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.093056][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.100706][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.109079][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.118020][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.126572][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.133591][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.141268][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.150150][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.158727][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.167772][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.189458][ T8137] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.239253][ T8147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.249011][ T8147] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.257566][ T8147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.266350][ T8147] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.277416][ T8147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.286150][ T8147] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.294152][ T8147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.305817][ T8147] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.313960][ T8147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.323237][ T8147] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.331718][ T8147] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.338791][ T8147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.347086][ T8147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.355769][ T8147] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.363963][ T8147] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.371027][ T8147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.382649][ T8132] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.395551][ T8132] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.414666][ T8147] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.422566][ T8147] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.437894][ T8147] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.455043][ T8147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.463348][ T8147] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.472952][ T8147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.482074][ T8147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.491457][ T8147] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.499990][ T8147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.508691][ T8147] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.520973][ T8137] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.547851][ T8134] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.567471][ T8134] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.620874][ T8143] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.642845][ T8143] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.687049][ T8143] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 59.701784][ T8143] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.739560][ T8143] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.474445][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 164.481201][ C0] rcu: 0-...!: (10499 ticks this GP) idle=55e/1/0x4000000000000002 softirq=10727/10727 fqs=14 [ 164.491809][ C0] (t=10501 jiffies g=6249 q=579) [ 164.496836][ C0] rcu: rcu_preempt kthread starved for 10474 jiffies! g6249 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 164.508104][ C0] rcu: RCU grace-period kthread stack dump: [ 164.513989][ C0] rcu_preempt I29032 10 2 0x80004000 [ 164.520312][ C0] Call Trace: [ 164.523602][ C0] __schedule+0x9a0/0xcc0 [ 164.527929][ C0] schedule+0x181/0x210 [ 164.532074][ C0] schedule_timeout+0x14f/0x240 [ 164.536914][ C0] ? run_local_timers+0x120/0x120 [ 164.541926][ C0] rcu_gp_kthread+0xed8/0x1770 [ 164.546682][ C0] kthread+0x332/0x350 [ 164.550733][ C0] ? rcu_report_qs_rsp+0x140/0x140 [ 164.555828][ C0] ? kthread_blkcg+0xe0/0xe0 [ 164.560403][ C0] ret_from_fork+0x24/0x30 [ 164.564841][ C0] NMI backtrace for cpu 0 [ 164.569161][ C0] CPU: 0 PID: 8129 Comm: syz-executor.0 Not tainted 5.4.0-syzkaller #0 [ 164.577377][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 164.587412][ C0] Call Trace: [ 164.590679][ C0] [ 164.593516][ C0] dump_stack+0x1fb/0x318 [ 164.597919][ C0] nmi_cpu_backtrace+0xaf/0x1a0 [ 164.602754][ C0] ? nmi_trigger_cpumask_backtrace+0x16d/0x290 [ 164.608892][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 164.614940][ C0] nmi_trigger_cpumask_backtrace+0x174/0x290 [ 164.620906][ C0] arch_trigger_cpumask_backtrace+0x10/0x20 [ 164.626785][ C0] rcu_dump_cpu_stacks+0x15a/0x220 [ 164.632150][ C0] rcu_sched_clock_irq+0xe25/0x1ad0 [ 164.637335][ C0] ? trace_hardirqs_off+0x74/0x80 [ 164.642345][ C0] update_process_times+0x12d/0x180 [ 164.647530][ C0] tick_sched_timer+0x263/0x420 [ 164.652365][ C0] ? tick_setup_sched_timer+0x3d0/0x3d0 [ 164.657894][ C0] __hrtimer_run_queues+0x403/0x840 [ 164.663089][ C0] hrtimer_interrupt+0x38c/0xda0 [ 164.668033][ C0] ? debug_smp_processor_id+0x9/0x20 [ 164.673306][ C0] smp_apic_timer_interrupt+0x109/0x280 [ 164.678835][ C0] apic_timer_interrupt+0xf/0x20 [ 164.683752][ C0] [ 164.686680][ C0] RIP: 0010:free_thread_stack+0x195/0x590 [ 164.692383][ C0] Code: 2e 00 74 08 4c 89 e7 e8 09 a4 69 00 49 8b 1c 24 48 83 c3 08 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 eb a3 69 00 <48> 8b 1b e9 82 ff ff ff e8 de 2c 2e 00 43 80 3c 2e 00 75 18 eb 1e [ 164.711986][ C0] RSP: 0018:ffffc900024b7c18 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 164.720383][ C0] RAX: 1ffff110121655a1 RBX: ffff888090b2ad08 RCX: ffff8880a03e0300 [ 164.728336][ C0] RDX: 0000000000000000 RSI: 00000000fffffffc RDI: ffffea00024f5a80 [ 164.736291][ C0] RBP: ffffc900024b7c50 R08: 000000000003a768 R09: ffffed1014a6aeaf [ 164.744246][ C0] R10: ffffed1014a6aeaf R11: 0000000000000000 R12: ffff888090b2ada0 [ 164.752199][ C0] R13: dffffc0000000000 R14: 1ffff110121655b4 R15: ffff8880a5357568 [ 164.760172][ C0] ? free_thread_stack+0x168/0x590 [ 164.765269][ C0] put_task_stack+0xa3/0x130 [ 164.769842][ C0] finish_task_switch+0x3f1/0x550 [ 164.774857][ C0] __schedule+0x9a8/0xcc0 [ 164.779178][ C0] preempt_schedule_irq+0xc1/0x140 [ 164.784271][ C0] retint_kernel+0x1b/0x2b [ 164.788672][ C0] RIP: 0010:prepare_exit_to_usermode+0x2ae/0x5b0 [ 164.794984][ C0] Code: 45 a0 42 80 3c 28 00 74 0c 48 c7 c7 38 96 0a 89 e8 57 a0 b1 00 48 83 3d 87 23 0a 08 00 0f 84 fa 02 00 00 fb 66 0f 1f 44 00 00 <44> 89 e6 83 e6 08 31 ff e8 d5 2c 76 00 44 89 e0 83 e0 08 75 07 e8 [ 164.814571][ C0] RSP: 0018:ffffc900024b7e60 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff02 [ 164.822963][ C0] RAX: 1ffffffff12152c7 RBX: ffff8880a03e0a70 RCX: ffff8880a03e0300 [ 164.830921][ C0] RDX: 0000000000000000 RSI: ffffffff810076d3 RDI: ffff8880a03e0b44 [ 164.838878][ C0] RBP: ffffc900024b7ec0 R08: ffff8880a03e0b58 R09: ffffed101407c061 [ 164.846832][ C0] R10: ffffed101407c061 R11: 0000000000000000 R12: 0000000000000008 [ 164.854788][ C0] R13: dffffc0000000000 R14: 1ffff1101407c060 R15: ffff8880a03e0300 [ 164.862758][ C0] ? syscall_return_slowpath+0x113/0x4a0 [ 164.868386][ C0] syscall_return_slowpath+0x113/0x4a0 [ 164.873829][ C0] do_syscall_64+0x11f/0x1c0 [ 164.878405][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 164.884281][ C0] RIP: 0033:0x4144ba [ 164.888160][ C0] Code: 0f 83 6a 18 00 00 c3 66 0f 1f 84 00 00 00 00 00 8b 05 be 3f 66 00 85 c0 75 36 45 31 d2 48 63 d2 48 63 ff b8 3d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 d4 ff ff ff f7 [ 164.907746][ C0] RSP: 002b:00007ffc26f11fb8 EFLAGS: 00000246 ORIG_RAX: 000000000000003d [ 164.916138][ C0] RAX: 0000000000000000 RBX: 000000000000e822 RCX: 00000000004144ba [ 164.924615][ C0] RDX: 0000000040000001 RSI: 00007ffc26f11ff0 RDI: ffffffffffffffff [ 164.932568][ C0] RBP: 0000000000000002 R08: 0000000000000001 R09: 0000000000ea5940 [ 164.940521][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 164.948475][ C0] R13: 00007ffc26f11ff0 R14: 000000000000e814 R15: 00007ffc26f12000