[ 43.901821][ T25] audit: type=1800 audit(1575462744.420:27): pid=8005 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [ 43.948521][ T25] audit: type=1800 audit(1575462744.430:28): pid=8005 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 44.391619][ T25] audit: type=1800 audit(1575462744.970:29): pid=8005 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 44.411250][ T25] audit: type=1800 audit(1575462744.970:30): pid=8005 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.78' (ECDSA) to the list of known hosts. 2019/12/04 12:32:33 fuzzer started 2019/12/04 12:32:34 dialing manager at 10.128.0.26:36481 2019/12/04 12:32:34 syscalls: 2691 2019/12/04 12:32:34 code coverage: enabled 2019/12/04 12:32:34 comparison tracing: enabled 2019/12/04 12:32:34 extra coverage: extra coverage is not supported by the kernel 2019/12/04 12:32:34 setuid sandbox: enabled 2019/12/04 12:32:34 namespace sandbox: enabled 2019/12/04 12:32:34 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/04 12:32:34 fault injection: enabled 2019/12/04 12:32:34 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/04 12:32:34 net packet injection: enabled 2019/12/04 12:32:34 net device setup: enabled 2019/12/04 12:32:34 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/12/04 12:32:34 devlink PCI setup: PCI device 0000:00:10.0 is not available 12:32:35 executing program 0: clock_gettime(0x0, 0x0) clock_gettime(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(0x0, 0x0) unshare(0x600) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'bond_slave_0\x00'}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'bond_slave_0\x00', {0x2, 0x0, @dev}}) 12:32:35 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/igmp6\x00') lseek(r0, 0x8e, 0x0) syzkaller login: [ 55.139217][ T8169] IPVS: ftp: loaded support on port[0] = 21 12:32:35 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x299}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x4, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 55.311368][ T8169] chnl_net:caif_netlink_parms(): no params data found [ 55.322131][ T8172] IPVS: ftp: loaded support on port[0] = 21 [ 55.382511][ T8169] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.390245][ T8169] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.398743][ T8169] device bridge_slave_0 entered promiscuous mode [ 55.408465][ T8169] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.415972][ T8169] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.424920][ T8169] device bridge_slave_1 entered promiscuous mode [ 55.485870][ T8169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link 12:32:36 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) dup2(r2, r3) [ 55.548190][ T8169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.606594][ T8172] chnl_net:caif_netlink_parms(): no params data found [ 55.637039][ T8169] team0: Port device team_slave_0 added [ 55.654149][ T8169] team0: Port device team_slave_1 added [ 55.696536][ T8176] IPVS: ftp: loaded support on port[0] = 21 [ 55.733790][ T8172] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.741212][ T8172] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.755924][ T8172] device bridge_slave_0 entered promiscuous mode 12:32:36 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) mprotect(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000009) socket(0x40000000002, 0x3, 0x2) pipe(&(0x7f0000000000)) recvmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{&(0x7f0000000440)=@isdn, 0x80, 0x0}}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) mremap(&(0x7f00002be000/0x3000)=nil, 0x3000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) munmap(&(0x7f000050f000/0x1000)=nil, 0x1000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x10) r3 = dup2(r2, r2) write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000080), 0xa) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) socket(0x10, 0x0, 0x0) pwritev(r1, &(0x7f0000000040)=[{0x0}], 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000240), 0x0}, 0x20) write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000002c0)={0x50, 0xddce151d3a496628, 0x0, {0x7, 0x1f, 0x3f, 0x0, 0x0, 0xfffffffffffffffa, 0x5}}, 0x50) sendto$inet(r2, &(0x7f0000000000), 0xfffffffffffffce9, 0x45, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'rfc3686(ctr-aes-aesni)\x00'}, 0x58) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe2\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00\t\x96\xe3\xea\xfa7R\xe2\xaaU\x98\xe3\x85\xb2\xdf\xc4\x9e!-&\xd9\xff\xe6\xb5<\xddfm\xe7\xe2\x9b\xbb\xd7`\xaf o\"\xea\x9f\xab\xf3\xff\xf9\xf9\xaf\xe2\xa0\x8c\xca\x8c\xdc`\x00\xac\xfd9Lc1\xc1yF\xa8\xa3\x99\xff\x84\x15\xe1K\f\x8dOV%\x81*\x84\xc4\r\xd8\xae\xbe\xfc\x02t\xd0\xf6%\x9b~>\x87j\x00^K\xfb\x17\x81\x0ff\xb4\x93\xfd\xb1\xf8\xe4\xd2\xf7]\xaa\x8bX.\x1b]=\x8c\x17\xbe\x11\xff\xcd\xc10\xd3F8\x0f\xe0\x1b\x1a\xb13\xdb\x8a\xee,\xc3\x1c\xban~u\xdf\xc9-\xd9E\x8e', 0x275a, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f0000000000)=0x1, 0x4) [ 55.818293][ T8169] device hsr_slave_0 entered promiscuous mode [ 55.863072][ T8169] device hsr_slave_1 entered promiscuous mode 12:32:36 executing program 5: r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$NBD_DISCONNECT(0xffffffffffffffff, 0xab08) r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r4 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x2) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r2, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r6 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) write$binfmt_aout(r6, &(0x7f0000000580)=ANY=[@ANYBLOB='V'], 0x1) ioctl$UI_SET_MSCBIT(r6, 0x40045568, 0x12) fallocate(r5, 0x0, 0x0, 0x1000f4) ftruncate(r1, 0x8200) openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB="566e037cc2d18541de7050489837f0e3eeddd110d7085365acdb0ecb068ae5ec05290a62527a414d9bd285e3d15d79e58bf8c04a16e73acfa5f07ad5083aefcd7781ab586b22a15befccfb8b82cb3eea9246d669451d7edb63e63d855728f2da36b89de5079b8e933fdd47c39b9fba0a611b14b68ec37d4cc1b69e98220f2e9b2de1f2a736eefefbb5c4bdb9e60741510f01ef008868cafc61308f33560631"], 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r8, r7) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) getresuid(&(0x7f0000004180), 0x0, 0x0) [ 55.995334][ T8172] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.002431][ T8172] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.016668][ T8172] device bridge_slave_1 entered promiscuous mode [ 56.038174][ T8180] IPVS: ftp: loaded support on port[0] = 21 [ 56.079953][ T8178] IPVS: ftp: loaded support on port[0] = 21 [ 56.107867][ T8172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.164517][ T8172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.181820][ T8169] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.236339][ T8169] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.342315][ T8182] IPVS: ftp: loaded support on port[0] = 21 [ 56.359888][ T8169] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 56.426561][ T8169] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 56.485797][ T8172] team0: Port device team_slave_0 added [ 56.494708][ T8172] team0: Port device team_slave_1 added [ 56.524753][ T8176] chnl_net:caif_netlink_parms(): no params data found [ 56.609139][ T8178] chnl_net:caif_netlink_parms(): no params data found [ 56.665076][ T8172] device hsr_slave_0 entered promiscuous mode [ 56.713387][ T8172] device hsr_slave_1 entered promiscuous mode [ 56.763048][ T8172] debugfs: Directory 'hsr0' with parent '/' already present! [ 56.820435][ T8180] chnl_net:caif_netlink_parms(): no params data found [ 56.891536][ T8176] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.898862][ T8176] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.907378][ T8176] device bridge_slave_0 entered promiscuous mode [ 56.923289][ T8178] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.930425][ T8178] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.939231][ T8178] device bridge_slave_0 entered promiscuous mode [ 56.950535][ T8178] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.957704][ T8178] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.965626][ T8178] device bridge_slave_1 entered promiscuous mode [ 56.972949][ T8180] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.979987][ T8180] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.990533][ T8180] device bridge_slave_0 entered promiscuous mode [ 57.009118][ T8180] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.016320][ T8180] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.026473][ T8180] device bridge_slave_1 entered promiscuous mode [ 57.033892][ T8176] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.040960][ T8176] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.049349][ T8176] device bridge_slave_1 entered promiscuous mode [ 57.077215][ T8178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.112261][ T8172] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 57.159374][ T8172] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 57.206582][ T8178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.226415][ T8180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.239402][ T8176] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.250179][ T8176] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.259427][ T8172] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 57.326042][ T8180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.341327][ T8182] chnl_net:caif_netlink_parms(): no params data found [ 57.354901][ T8172] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 57.390688][ T8178] team0: Port device team_slave_0 added [ 57.416016][ T8176] team0: Port device team_slave_0 added [ 57.427896][ T8176] team0: Port device team_slave_1 added [ 57.435153][ T8178] team0: Port device team_slave_1 added [ 57.444379][ T8180] team0: Port device team_slave_0 added [ 57.456628][ T8169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.468248][ T8180] team0: Port device team_slave_1 added [ 57.535110][ T8176] device hsr_slave_0 entered promiscuous mode [ 57.583391][ T8176] device hsr_slave_1 entered promiscuous mode [ 57.632956][ T8176] debugfs: Directory 'hsr0' with parent '/' already present! [ 57.715381][ T8178] device hsr_slave_0 entered promiscuous mode [ 57.753364][ T8178] device hsr_slave_1 entered promiscuous mode [ 57.803014][ T8178] debugfs: Directory 'hsr0' with parent '/' already present! [ 57.826798][ T8182] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.834345][ T8182] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.843681][ T8182] device bridge_slave_0 entered promiscuous mode [ 57.851478][ T8182] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.859377][ T8182] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.867516][ T8182] device bridge_slave_1 entered promiscuous mode [ 57.925827][ T8180] device hsr_slave_0 entered promiscuous mode [ 57.983458][ T8180] device hsr_slave_1 entered promiscuous mode [ 58.052961][ T8180] debugfs: Directory 'hsr0' with parent '/' already present! [ 58.066899][ T8169] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.079047][ T8177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.087923][ T8177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.155000][ T8188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.163987][ T8188] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.174448][ T8188] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.181614][ T8188] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.190159][ T8188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.199141][ T8188] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.207927][ T8188] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.217379][ T8188] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.225296][ T8188] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.245421][ T8182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.257532][ T8176] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 58.317428][ T8176] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 58.367819][ T3126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.388655][ T8182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.406003][ T8176] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 58.475461][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.484488][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.493371][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.502827][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.514816][ T8178] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 58.555423][ T8178] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 58.594836][ T8180] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 58.640069][ T8180] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 58.695474][ T8176] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 58.742411][ T8172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.752064][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.761362][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.770584][ T8178] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 58.798627][ T8178] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 58.845304][ T8180] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 58.890523][ T8180] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 58.938216][ T8182] team0: Port device team_slave_0 added [ 58.946097][ T8182] team0: Port device team_slave_1 added [ 59.009127][ T8182] device hsr_slave_0 entered promiscuous mode [ 59.053195][ T8182] device hsr_slave_1 entered promiscuous mode [ 59.092905][ T8182] debugfs: Directory 'hsr0' with parent '/' already present! [ 59.102499][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.111287][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.120152][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.128467][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.141004][ T8169] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.171909][ T8172] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.195354][ T8188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.205010][ T8188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.246036][ T8177] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.256976][ T8177] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.266843][ T8177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.276438][ T8177] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.285045][ T8177] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.292192][ T8177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.300076][ T8177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.308639][ T8177] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.317295][ T8177] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.324386][ T8177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.332281][ T8177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.346692][ T8178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.371679][ T8182] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 59.396716][ T8177] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.407420][ T8177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.416097][ T8177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.425338][ T8177] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.434505][ T8177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.443599][ T8177] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.451856][ T8177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.460699][ T8177] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.469197][ T8177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.477864][ T8177] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.487696][ T8177] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.503935][ T8182] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 59.544958][ T8182] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 59.596506][ T8169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.618313][ T8176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.627628][ T8182] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 59.665769][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.673593][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.688550][ T8172] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.709870][ T8176] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.728976][ T8188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.742193][ T8188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.751763][ T8188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.760391][ T8188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.780664][ T8178] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.804374][ T8177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.819159][ T8177] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.828817][ T8177] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.835942][ T8177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.842369][ T8177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.852491][ T8177] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.867324][ T8177] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.874633][ T8177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.894569][ T8177] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 164.872744][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 164.879747][ C1] (detected by 1, t=10502 jiffies, g=6141, q=175) [ 164.886234][ C1] rcu: All QSes seen, last rcu_preempt kthread activity 10503 (4294953626-4294943123), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 164.899577][ C1] syz-executor.1 R running task 24504 8172 8170 0x0000400a [ 164.907461][ C1] Call Trace: [ 164.910732][ C1] [ 164.913578][ C1] sched_show_task+0x40f/0x560 [ 164.918509][ C1] rcu_sched_clock_irq+0x1861/0x1ad0 [ 164.923790][ C1] update_process_times+0x12d/0x180 [ 164.928976][ C1] tick_sched_timer+0x263/0x420 [ 164.933827][ C1] ? tick_setup_sched_timer+0x3d0/0x3d0 [ 164.939359][ C1] __hrtimer_run_queues+0x403/0x840 [ 164.944559][ C1] hrtimer_interrupt+0x38c/0xda0 [ 164.949496][ C1] ? debug_smp_processor_id+0x9/0x20 [ 164.954770][ C1] smp_apic_timer_interrupt+0x109/0x280 [ 164.960308][ C1] apic_timer_interrupt+0xf/0x20 [ 164.965226][ C1] [ 164.968158][ C1] RIP: 0010:free_thread_stack+0x133/0x590 [ 164.973864][ C1] Code: 00 ea ff ff 48 01 c7 be 03 00 00 00 e8 f6 9e 60 00 e9 5d 04 00 00 e8 dc 2a 2e 00 48 89 df 31 f6 e8 a2 a1 6e 00 43 80 3c 2e 00 <74> 08 4c 89 e7 e8 43 a0 69 00 49 8b 1c 24 48 83 c3 08 48 89 d8 48 [ 164.993553][ C1] RSP: 0018:ffffc900023a7bd0 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 165.001960][ C1] RAX: 0000000000000001 RBX: ffffea0002213d40 RCX: 0000000000000000 [ 165.009925][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffea0002213d40 [ 165.018064][ C1] RBP: ffffc900023a7c08 R08: dffffc0000000000 R09: fffffbfff1287a8d [ 165.026027][ C1] R10: fffffbfff1287a8d R11: 0000000000000000 R12: ffff8880a1b51520 [ 165.033987][ C1] R13: dffffc0000000000 R14: 1ffff1101436a2a4 R15: ffff8880a81c1428 [ 165.041974][ C1] put_task_stack+0xa3/0x130 [ 165.046554][ C1] finish_task_switch+0x3f1/0x550 [ 165.051572][ C1] __schedule+0x9a8/0xcc0 [ 165.055899][ C1] schedule+0x181/0x210 [ 165.060060][ C1] do_nanosleep+0x1d0/0x6c0 [ 165.064560][ C1] hrtimer_nanosleep+0x3a6/0x5b0 [ 165.069488][ C1] ? trace_hrtimer_expire_exit+0x2d0/0x2d0 [ 165.075286][ C1] __x64_sys_nanosleep+0x186/0x1d0 [ 165.080388][ C1] do_syscall_64+0xf7/0x1c0 [ 165.084880][ C1] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 165.090756][ C1] RIP: 0033:0x458b20 [ 165.094638][ C1] Code: c0 5b 5d c3 66 0f 1f 44 00 00 8b 04 24 48 83 c4 18 5b 5d c3 66 0f 1f 44 00 00 83 3d 11 fe 61 00 00 75 14 b8 23 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 d4 d1 fb ff c3 48 83 ec 08 e8 ea 46 00 00 [ 165.114751][ C1] RSP: 002b:00007fffb4c7e328 EFLAGS: 00000246 ORIG_RAX: 0000000000000023 [ 165.123164][ C1] RAX: ffffffffffffffda RBX: 000000000000e9a5 RCX: 0000000000458b20 [ 165.131127][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007fffb4c7e330 [ 165.139085][ C1] RBP: 0000000000000002 R08: 0000000000000001 R09: 0000000000e62940 [ 165.147046][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.155003][ C1] R13: 00007fffb4c7e380 R14: 000000000000e99b R15: 00007fffb4c7e390 [ 165.162985][ C1] rcu: rcu_preempt kthread starved for 10531 jiffies! g6141 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 165.174071][ C1] rcu: RCU grace-period kthread stack dump: [ 165.179945][ C1] rcu_preempt R running task 29104 10 2 0x80004000 [ 165.187833][ C1] Call Trace: [ 165.191120][ C1] __schedule+0x9a0/0xcc0 [ 165.195460][ C1] schedule+0x181/0x210 [ 165.199633][ C1] schedule_timeout+0x14f/0x240 [ 165.204481][ C1] ? run_local_timers+0x120/0x120 [ 165.209508][ C1] rcu_gp_kthread+0xed8/0x1770 [ 165.214274][ C1] kthread+0x332/0x350 [ 165.218333][ C1] ? rcu_report_qs_rsp+0x140/0x140 [ 165.223443][ C1] ? kthread_blkcg+0xe0/0xe0 [ 165.228025][ C1] ret_from_fork+0x24/0x30