[ 43.738160][ T23] audit: type=1800 audit(1575361597.008:29): pid=8067 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.132' (ECDSA) to the list of known hosts. 2019/12/03 08:26:45 fuzzer started 2019/12/03 08:26:47 dialing manager at 10.128.0.26:38907 2019/12/03 08:26:47 syscalls: 2697 2019/12/03 08:26:47 code coverage: enabled 2019/12/03 08:26:47 comparison tracing: enabled 2019/12/03 08:26:47 extra coverage: extra coverage is not supported by the kernel 2019/12/03 08:26:47 setuid sandbox: enabled 2019/12/03 08:26:47 namespace sandbox: enabled 2019/12/03 08:26:47 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/03 08:26:47 fault injection: enabled 2019/12/03 08:26:47 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/03 08:26:47 net packet injection: enabled 2019/12/03 08:26:47 net device setup: enabled 2019/12/03 08:26:47 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/12/03 08:26:47 devlink PCI setup: PCI device 0000:00:10.0 is not available 08:26:48 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getown(r2, 0x9) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000100)=""/79, 0x1000001b3) lseek(r3, 0xfffffffffffffffe, 0x0) getdents64(r3, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000400)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) sched_setparam(0x0, &(0x7f0000000240)=0x3) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r5) splice(r4, 0x0, r5, 0x0, 0x10000, 0x0) r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, 0x0) getsockname$packet(r6, &(0x7f0000001240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001280)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, 0x0, 0x0) r7 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x10, r7, 0x0) r8 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0) r9 = socket$inet6(0xa, 0x3, 0x6) r10 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r9, r10, &(0x7f0000000240)=0x202, 0x4000000000dc) r11 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)) sendmsg$NBD_CMD_RECONFIGURE(r10, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000b80)=ANY=[@ANYBLOB, @ANYRES16=r11, @ANYBLOB="050c27bd7000ffdbdf2503000000e7401191a1d7da378753f18bb8db0c21d74b8c1994cb573ff0c5320e3fe397bd8a7c25799573fdffffffffffffff16ed2d05dfcd8089ed7cfcc53c2c4c19daee0a2449ee45439a1b546b1aba6dcc98"], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x8040) sendmsg$NBD_CMD_RECONFIGURE(r8, &(0x7f00000001c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYRES16, @ANYRES16=r11, @ANYBLOB="000829bd7000fddbdf25030000000c00050020000000000000000c00030007000000000000000c00040008000000001e08184400080001000000000000000c0008006c000000000000000c000200f52c2f740000ffffffff060000a666414e000000000000050100000000000000"], 0x3}, 0x1, 0x0, 0x0, 0x40000}, 0x24010855) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r12, 0x40086602, 0x400007) fsetxattr(r12, 0x0, &(0x7f0000000540)='em0/ppp1\xc5em0\x00', 0xd, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r11, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, [{0x8, 0x1, r12}, {0x8, 0x1, r6}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000085}, 0x100) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)={0x50, r11, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000080}, 0x4) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x50, r11, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x200}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x20010}, 0x4) r13 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_QUERYCAP(r13, 0x80685600, 0x0) prctl$PR_GET_KEEPCAPS(0x7) r14 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r14, 0xae60) ioctl$KVM_CREATE_VCPU(r14, 0xae41, 0x0) 08:26:48 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={0x14, 0x19, 0xffffffffffffffff, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) syzkaller login: [ 55.613899][ T8232] IPVS: ftp: loaded support on port[0] = 21 08:26:49 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="1400000013000507ed008064d200100034000080", 0x14}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 55.741021][ T8234] IPVS: ftp: loaded support on port[0] = 21 [ 55.801455][ T8232] chnl_net:caif_netlink_parms(): no params data found [ 55.898556][ T8237] IPVS: ftp: loaded support on port[0] = 21 08:26:49 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000c000100626f6e64000015001400020008000200", @ANYRES32], 0x4}}, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000140)=""/216) ioctl$EVIOCGREP(r0, 0x4010744d, 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000000)=0x1) [ 55.974130][ T8232] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.984263][ T8232] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.993929][ T8232] device bridge_slave_0 entered promiscuous mode [ 56.029410][ T8234] chnl_net:caif_netlink_parms(): no params data found [ 56.059388][ T8232] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.077009][ T8232] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.086393][ T8232] device bridge_slave_1 entered promiscuous mode [ 56.168070][ T8232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.202436][ T8232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 08:26:49 executing program 4: unshare(0x20000) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000028c0), 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') mount(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x0, 0x1000, 0x0) unlink(&(0x7f0000000080)='./file0\x00') ioprio_get$uid(0x0, 0x0) [ 56.261719][ T8234] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.271968][ T8234] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.281602][ T8234] device bridge_slave_0 entered promiscuous mode [ 56.313636][ T8234] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.322006][ T8234] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.333072][ T8234] device bridge_slave_1 entered promiscuous mode [ 56.345811][ T8237] chnl_net:caif_netlink_parms(): no params data found [ 56.347301][ T8240] IPVS: ftp: loaded support on port[0] = 21 [ 56.364629][ T8232] team0: Port device team_slave_0 added [ 56.390935][ T8234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.402677][ T8232] team0: Port device team_slave_1 added [ 56.421894][ T8234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.460637][ T8234] team0: Port device team_slave_0 added [ 56.494955][ T8234] team0: Port device team_slave_1 added 08:26:49 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c96ef15640cf8bc693f5ec9154a614f04000070c1000000016598578744ec74540722a910af9164293d3c047f88127d19a042b3e8f99ffba79e9ef678f641f1f7f4270ba9867067b74515bab0db5fc04e81ea03210a957dd4131b475a6825ed0234cd3d2775ef1ed78ae41338346c4aa5691432b91d910f931ccfff722c1105e34a5ab6cef9fa13980100008000000000d77d8a8a7bc8b518265c9b7160f8dd5005f1fb252329a6ce14d9bbb713c5c9fc3c9a9b518e8770f6ac329ba520b9afacab10baa883ea9b4aa53544e405d58522656241b2607a44f73ec98905f804baaabad2e0fe2d8011f8a8fd85b8bbe2795e32baaf5b6965ccddc8a1f13763f401017904fc47ee5f46ac9a33ea0956b71e1f6c156545"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mknod$loop(&(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x0) chown(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) [ 56.578723][ T8232] device hsr_slave_0 entered promiscuous mode [ 56.636355][ T8232] device hsr_slave_1 entered promiscuous mode [ 56.696664][ T8237] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.703744][ T8237] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.712148][ T8237] device bridge_slave_0 entered promiscuous mode [ 56.721318][ T8237] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.728474][ T8237] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.736317][ T8237] device bridge_slave_1 entered promiscuous mode [ 56.759248][ T8245] IPVS: ftp: loaded support on port[0] = 21 [ 56.776691][ T8237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.790241][ T8237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.817047][ T8243] IPVS: ftp: loaded support on port[0] = 21 [ 56.845490][ T8237] team0: Port device team_slave_0 added [ 56.888835][ T8234] device hsr_slave_0 entered promiscuous mode [ 56.926429][ T8234] device hsr_slave_1 entered promiscuous mode [ 56.996105][ T8234] debugfs: Directory 'hsr0' with parent '/' already present! [ 57.021905][ T8237] team0: Port device team_slave_1 added [ 57.042738][ T8232] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 57.109758][ T8232] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 57.192531][ T8232] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 57.239360][ T8232] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 57.343838][ T8240] chnl_net:caif_netlink_parms(): no params data found [ 57.399296][ T8237] device hsr_slave_0 entered promiscuous mode [ 57.436425][ T8237] device hsr_slave_1 entered promiscuous mode [ 57.476086][ T8237] debugfs: Directory 'hsr0' with parent '/' already present! [ 57.496655][ T8234] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 57.564470][ T8234] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 57.611430][ T8234] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 57.693889][ T8240] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.701876][ T8240] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.710498][ T8240] device bridge_slave_0 entered promiscuous mode [ 57.718238][ T8234] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 57.778600][ T8240] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.785684][ T8240] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.795326][ T8240] device bridge_slave_1 entered promiscuous mode [ 57.825231][ T8240] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.864009][ T8243] chnl_net:caif_netlink_parms(): no params data found [ 57.882018][ T8240] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.891595][ T8237] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 57.939036][ T8237] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 58.032625][ T8243] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.040960][ T8243] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.048984][ T8243] device bridge_slave_0 entered promiscuous mode [ 58.057463][ T8243] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.064522][ T8243] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.072375][ T8243] device bridge_slave_1 entered promiscuous mode [ 58.080223][ T8237] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 58.129566][ T8237] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 58.193934][ T8240] team0: Port device team_slave_0 added [ 58.219078][ T8245] chnl_net:caif_netlink_parms(): no params data found [ 58.248455][ T8240] team0: Port device team_slave_1 added [ 58.256434][ T8243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.282772][ T8234] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.306996][ T8243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.320911][ T8232] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.332017][ T8245] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.340639][ T8245] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.349094][ T8245] device bridge_slave_0 entered promiscuous mode [ 58.360434][ T8245] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.367540][ T8245] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.375207][ T8245] device bridge_slave_1 entered promiscuous mode [ 58.398642][ T8232] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.439842][ T8240] device hsr_slave_0 entered promiscuous mode [ 58.496469][ T8240] device hsr_slave_1 entered promiscuous mode [ 58.536099][ T8240] debugfs: Directory 'hsr0' with parent '/' already present! [ 58.555882][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.564829][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.573074][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.581188][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.592290][ T8234] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.612095][ T8243] team0: Port device team_slave_0 added [ 58.632016][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.641619][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.650261][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.657458][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.665481][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.674321][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.682803][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.689868][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.697712][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.706609][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.716380][ T8245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.727986][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.750788][ T8243] team0: Port device team_slave_1 added [ 58.765168][ T8245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.778534][ T8248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.787295][ T8248] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.795463][ T8248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.803982][ T8248] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.812266][ T8248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.820730][ T8248] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.829244][ T8248] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.845089][ T8237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.855322][ T8232] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.869587][ T8232] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.917976][ T8243] device hsr_slave_0 entered promiscuous mode [ 58.969767][ T8243] device hsr_slave_1 entered promiscuous mode [ 59.016087][ T8243] debugfs: Directory 'hsr0' with parent '/' already present! [ 59.027404][ T8250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.036003][ T8250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.044173][ T8250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.053152][ T8250] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.062957][ T8250] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.070063][ T8250] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.077593][ T8250] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.106601][ T8232] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.144196][ T8237] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.157771][ T8240] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 59.188291][ T8252] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.195748][ T8252] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.206122][ T8252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.215162][ T8252] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.223869][ T8252] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.231068][ T8252] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.239315][ T8252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.247370][ T8252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.254997][ T8252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.265214][ T8245] team0: Port device team_slave_0 added [ 59.287229][ T8240] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 59.329172][ T8240] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 164.455912][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 164.462677][ C0] rcu: 0-...!: (1 GPs behind) idle=2fa/1/0x4000000000000002 softirq=10778/10781 fqs=4 [ 164.472551][ C0] (t=10501 jiffies g=6241 q=146) [ 164.478000][ C0] rcu: rcu_preempt kthread starved for 10494 jiffies! g6241 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 164.489078][ C0] rcu: RCU grace-period kthread stack dump: [ 164.494952][ C0] rcu_preempt R running task 29032 10 2 0x80004000 [ 164.502837][ C0] Call Trace: [ 164.506123][ C0] __schedule+0x9a0/0xcc0 [ 164.510485][ C0] schedule+0x181/0x210 [ 164.514649][ C0] schedule_timeout+0x14f/0x240 [ 164.519500][ C0] ? run_local_timers+0x120/0x120 [ 164.524517][ C0] rcu_gp_kthread+0xed8/0x1770 [ 164.529279][ C0] kthread+0x332/0x350 [ 164.533347][ C0] ? rcu_report_qs_rsp+0x140/0x140 [ 164.538444][ C0] ? kthread_blkcg+0xe0/0xe0 [ 164.543026][ C0] ret_from_fork+0x24/0x30 [ 164.547444][ C0] NMI backtrace for cpu 0 [ 164.551761][ C0] CPU: 0 PID: 21 Comm: kworker/u4:1 Not tainted 5.4.0-syzkaller #0 [ 164.560239][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 164.570304][ C0] Workqueue: events_unbound fsnotify_mark_destroy_workfn [ 164.577307][ C0] Call Trace: [ 164.580576][ C0] [ 164.583418][ C0] dump_stack+0x1fb/0x318 [ 164.587738][ C0] nmi_cpu_backtrace+0xaf/0x1a0 [ 164.592605][ C0] ? nmi_trigger_cpumask_backtrace+0x16d/0x290 [ 164.598762][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 164.604815][ C0] nmi_trigger_cpumask_backtrace+0x174/0x290 [ 164.610782][ C0] arch_trigger_cpumask_backtrace+0x10/0x20 [ 164.616672][ C0] rcu_dump_cpu_stacks+0x15a/0x220 [ 164.621785][ C0] rcu_sched_clock_irq+0xe25/0x1ad0 [ 164.626978][ C0] ? trace_hardirqs_off+0x74/0x80 [ 164.631995][ C0] update_process_times+0x12d/0x180 [ 164.637196][ C0] tick_sched_timer+0x263/0x420 [ 164.642036][ C0] ? tick_setup_sched_timer+0x3d0/0x3d0 [ 164.647568][ C0] __hrtimer_run_queues+0x403/0x840 [ 164.652767][ C0] hrtimer_interrupt+0x38c/0xda0 [ 164.657798][ C0] ? debug_smp_processor_id+0x9/0x20 [ 164.663075][ C0] smp_apic_timer_interrupt+0x109/0x280 [ 164.668617][ C0] apic_timer_interrupt+0xf/0x20 [ 164.673535][ C0] [ 164.676479][ C0] RIP: 0010:__memcg_kmem_uncharge+0x213/0x2e0 [ 164.682535][ C0] Code: a4 ff 48 c7 c7 98 4b 0d 89 e8 59 97 00 00 bf 01 00 00 00 e8 2f e3 9b ff 65 8b 05 d4 fd 4a 7e 85 c0 74 53 48 83 c4 08 5b 41 5c <41> 5d 41 5e 41 5f 5d c3 49 8d 5f 10 48 89 df be 08 00 00 00 e8 04 [ 164.702127][ C0] RSP: 0018:ffffc90000dd78b0 EFLAGS: 00000296 ORIG_RAX: ffffffffffffff13 [ 164.710613][ C0] RAX: 0000000000000001 RBX: ffffea00025331c0 RCX: 0000000000000000 [ 164.718659][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffea00025331c0 [ 164.726702][ C0] RBP: ffffc90000dd78c8 R08: 000000000003a768 R09: ffffed1011fed6c7 [ 164.734661][ C0] R10: ffffed1011fed6c7 R11: 0000000000000000 R12: ffff8880a99dcaa0 [ 164.742620][ C0] R13: 1ffffd40004a663f R14: ffffea00025331f8 R15: 0000000000000000 [ 164.750604][ C0] free_thread_stack+0x12e/0x590 [ 164.755530][ C0] put_task_stack+0xa3/0x130 [ 164.760111][ C0] finish_task_switch+0x3f1/0x550 [ 164.765131][ C0] __schedule+0x9a8/0xcc0 [ 164.769457][ C0] ? ___preempt_schedule+0x16/0x18 [ 164.774562][ C0] preempt_schedule+0xdb/0x120 [ 164.779316][ C0] ___preempt_schedule+0x16/0x18 [ 164.784245][ C0] _raw_spin_unlock_irqrestore+0xcc/0xe0 [ 164.789867][ C0] __call_srcu+0x7ab/0xb00 [ 164.794294][ C0] __synchronize_srcu+0x1cf/0x260 [ 164.799325][ C0] ? rcu_read_lock_any_held+0x1a0/0x1a0 [ 164.804881][ C0] synchronize_srcu+0x2cb/0x2f0 [ 164.809726][ C0] fsnotify_mark_destroy_workfn+0xe5/0x2a0 [ 164.815517][ C0] ? rcu_read_lock_sched_held+0x10b/0x170 [ 164.821317][ C0] process_one_work+0x7ef/0x10d0 [ 164.826261][ C0] worker_thread+0xc01/0x1630 [ 164.830950][ C0] kthread+0x332/0x350 [ 164.835007][ C0] ? rcu_lock_release+0x30/0x30 [ 164.839846][ C0] ? kthread_blkcg+0xe0/0xe0 [ 164.844462][ C0] ret_from_fork+0x24/0x30