[ 46.433996][ T23] audit: type=1800 audit(1575438944.392:26): pid=8126 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 46.497963][ T23] audit: type=1800 audit(1575438944.392:27): pid=8126 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [ 46.531419][ T23] audit: type=1800 audit(1575438944.392:28): pid=8126 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 47.227849][ T23] audit: type=1800 audit(1575438945.212:29): pid=8126 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.79' (ECDSA) to the list of known hosts. 2019/12/04 05:55:55 fuzzer started 2019/12/04 05:55:56 dialing manager at 10.128.0.26:42111 2019/12/04 05:55:56 syscalls: 2689 2019/12/04 05:55:56 code coverage: enabled 2019/12/04 05:55:56 comparison tracing: enabled 2019/12/04 05:55:56 extra coverage: extra coverage is not supported by the kernel 2019/12/04 05:55:56 setuid sandbox: enabled 2019/12/04 05:55:56 namespace sandbox: enabled 2019/12/04 05:55:56 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/04 05:55:56 fault injection: enabled 2019/12/04 05:55:56 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/04 05:55:56 net packet injection: enabled 2019/12/04 05:55:56 net device setup: enabled 2019/12/04 05:55:56 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/12/04 05:55:56 devlink PCI setup: PCI device 0000:00:10.0 is not available 05:55:57 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000080)=' ') 05:55:57 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) write(r2, &(0x7f0000000080)="240000001a005f0014f9f407000904000a00000000000000000000000800190000000000", 0x24) syzkaller login: [ 59.981852][ T8293] IPVS: ftp: loaded support on port[0] = 21 05:55:58 executing program 2: r0 = socket$kcm(0x2, 0x2, 0x73) bind(r0, &(0x7f0000000080)=@pppol2tpv3in6={0x2, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80) r1 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) close(r1) [ 60.062412][ T8295] IPVS: ftp: loaded support on port[0] = 21 [ 60.172286][ T8293] chnl_net:caif_netlink_parms(): no params data found [ 60.285586][ T8293] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.293249][ T8293] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.302284][ T8299] IPVS: ftp: loaded support on port[0] = 21 [ 60.309397][ T8293] device bridge_slave_0 entered promiscuous mode [ 60.328355][ T8295] chnl_net:caif_netlink_parms(): no params data found 05:55:58 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x5, [@var={0x1, 0x0, 0x0, 0xe, 0x2}, @enum]}, {0x0, [0x5f, 0x2e, 0x61]}}, 0x0, 0x39}, 0x20) [ 60.340982][ T8293] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.350608][ T8293] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.359027][ T8293] device bridge_slave_1 entered promiscuous mode [ 60.445416][ T8293] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.459515][ T8295] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.468227][ T8295] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.478435][ T8295] device bridge_slave_0 entered promiscuous mode [ 60.501747][ T8293] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.513328][ T8295] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.522707][ T8295] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.531337][ T8295] device bridge_slave_1 entered promiscuous mode [ 60.601738][ T8293] team0: Port device team_slave_0 added [ 60.618163][ T8302] IPVS: ftp: loaded support on port[0] = 21 05:55:58 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0xa1493c1701022a07) socket$inet6_udp(0xa, 0x2, 0x0) pipe(&(0x7f0000000700)={0xffffffffffffffff}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, &(0x7f0000000240)={0x0, 0xfffffffe, 0x7ff, 0x3f}) recvfrom$x25(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x99226cce8fe52e3d, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000580)={&(0x7f0000000300), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x38, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e24}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xcd}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x77d}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x6800}, 0x42800) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') r2 = syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x3, 0x1) r3 = syz_open_dev$dmmidi(&(0x7f00000001c0)='/dev/dmmidi#\x00', 0x6, 0x80002) sendto$netrom(r3, &(0x7f0000000940), 0x0, 0x800, 0x0, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x0, &(0x7f0000000340)={@loopback, @initdev}, &(0x7f0000000900)=0xa) add_key(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) request_key(&(0x7f00000003c0)='cif\x83\x14\xc5\xda[\x03s.su\x7fj\xf6\xdd\xc4\xbasV\xea\xdd\xfa\x8f\x03\x99q\xef\x98g}!\x84C~\x1a\xaf\xf8\x87\x8ar\xf9\xc4\x9c\x81g\x89q\xc3uY\xb2\xb4\xd2.\'\xacMPXC\v\xdc\xb5\xd8p\x151\'3\x17\xf4Q\xbc\xfb\xe8\xac\xf3\x8cuh~', &(0x7f00000005c0)={'syz', 0x0}, 0x0, 0xffffffffffffffff) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, 0x0) add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0x0) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, &(0x7f0000000640)=""/79, &(0x7f0000000080)=0x4f) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1dcc11275f852e7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, @perf_bp={&(0x7f0000000140), 0x8}, 0x20000a01c, 0x2, 0x2, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0xf24e96747c77a447) mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f00000002c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) fsetxattr(0xffffffffffffffff, &(0x7f00000000c0)=@known='system.sockprotoname\x00', &(0x7f0000000600)='wlan1#wlan0!(nodevppp0vboxnet1wlan1[posix_acl_accessmd5sum\x00', 0x3b, 0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() semget$private(0x0, 0x0, 0x0) eventfd(0x7) ioctl$CAPI_NCCI_GETUNIT(0xffffffffffffffff, 0x80044327, 0x0) [ 60.644813][ T8293] team0: Port device team_slave_1 added [ 60.657625][ T8295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.677556][ T8299] chnl_net:caif_netlink_parms(): no params data found [ 60.698766][ T8295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.806540][ T8293] device hsr_slave_0 entered promiscuous mode [ 60.844512][ T8293] device hsr_slave_1 entered promiscuous mode 05:55:58 executing program 5: bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x2000, &(0x7f0000000000)=[{&(0x7f0000000140)="2e0000003100050ad25a80648c6394fb0124fc0010000b400c000200053582c137153e370900018025641700d1bd", 0x2e}], 0x1}, 0x0) [ 60.959410][ T8304] IPVS: ftp: loaded support on port[0] = 21 [ 60.991442][ T8295] team0: Port device team_slave_0 added [ 61.006637][ T8295] team0: Port device team_slave_1 added [ 61.024340][ T8299] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.031414][ T8299] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.039779][ T8299] device bridge_slave_0 entered promiscuous mode [ 61.058173][ T8299] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.071622][ T8299] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.082821][ T8299] device bridge_slave_1 entered promiscuous mode [ 61.097807][ T8293] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 61.157892][ T8293] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 61.232937][ T8299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.256513][ T8293] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 61.307186][ T8293] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 61.406977][ T8295] device hsr_slave_0 entered promiscuous mode [ 61.464370][ T8295] device hsr_slave_1 entered promiscuous mode [ 61.534079][ T8295] debugfs: Directory 'hsr0' with parent '/' already present! [ 61.542844][ T8299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.578546][ T8307] IPVS: ftp: loaded support on port[0] = 21 [ 61.591142][ T8299] team0: Port device team_slave_0 added [ 61.629224][ T8302] chnl_net:caif_netlink_parms(): no params data found [ 61.640967][ T8299] team0: Port device team_slave_1 added [ 61.756753][ T8299] device hsr_slave_0 entered promiscuous mode [ 61.795614][ T8299] device hsr_slave_1 entered promiscuous mode [ 61.843999][ T8299] debugfs: Directory 'hsr0' with parent '/' already present! [ 61.880133][ T8295] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 61.929580][ T8295] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 61.976991][ T8295] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 62.040333][ T8302] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.047588][ T8302] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.055493][ T8302] device bridge_slave_0 entered promiscuous mode [ 62.069281][ T8302] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.076913][ T8302] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.085098][ T8302] device bridge_slave_1 entered promiscuous mode [ 62.092468][ T8295] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 62.185532][ T8304] chnl_net:caif_netlink_parms(): no params data found [ 62.210752][ T8299] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 62.256271][ T8299] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 62.307125][ T8299] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 62.378937][ T8299] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 62.429647][ T8302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.456374][ T8302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.506894][ T8304] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.516695][ T8304] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.525863][ T8304] device bridge_slave_0 entered promiscuous mode [ 62.541469][ T8302] team0: Port device team_slave_0 added [ 62.562776][ T8304] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.571166][ T8304] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.579099][ T8304] device bridge_slave_1 entered promiscuous mode [ 62.595755][ T8302] team0: Port device team_slave_1 added [ 62.603804][ T8293] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.611233][ T8307] chnl_net:caif_netlink_parms(): no params data found [ 62.639746][ T8304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.668674][ T8304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.747010][ T8302] device hsr_slave_0 entered promiscuous mode [ 62.804366][ T8302] device hsr_slave_1 entered promiscuous mode [ 62.844059][ T8302] debugfs: Directory 'hsr0' with parent '/' already present! [ 62.865901][ T8307] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.873003][ T8307] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.880979][ T8307] device bridge_slave_0 entered promiscuous mode [ 62.889960][ T8304] team0: Port device team_slave_0 added [ 62.898303][ T8304] team0: Port device team_slave_1 added [ 62.912160][ T8293] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.924256][ T8307] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.931323][ T8307] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.939570][ T8307] device bridge_slave_1 entered promiscuous mode [ 62.960027][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.968567][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.991974][ T8299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.010817][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.020615][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.029227][ T3685] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.036522][ T3685] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.046695][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.056697][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.065339][ T3685] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.072540][ T3685] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.080327][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.089235][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.100135][ T8295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.108921][ T8302] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.157338][ T8307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.171410][ T8299] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.226747][ T8304] device hsr_slave_0 entered promiscuous mode [ 63.254307][ T8304] device hsr_slave_1 entered promiscuous mode [ 63.314047][ T8304] debugfs: Directory 'hsr0' with parent '/' already present! [ 63.330595][ T8311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.339373][ T8311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.347414][ T8311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.356072][ T8311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.366145][ T8311] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.374922][ T8311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.384519][ T8311] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.393508][ T8311] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.402091][ T8302] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.447704][ T8307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.472377][ T8307] team0: Port device team_slave_0 added [ 63.479651][ T8307] team0: Port device team_slave_1 added [ 63.490637][ T8302] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.554462][ T8293] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 63.565033][ T8293] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.593058][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.602192][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.613583][ T3005] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.620826][ T3005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.628819][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.637562][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.646059][ T3005] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.653089][ T3005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.661250][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.670250][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.679068][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.687334][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.695917][ T8302] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.796441][ T8307] device hsr_slave_0 entered promiscuous mode [ 63.844258][ T8307] device hsr_slave_1 entered promiscuous mode [ 63.894020][ T8307] debugfs: Directory 'hsr0' with parent '/' already present! [ 63.904278][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.912206][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.922547][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.930844][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.939250][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.959700][ T8295] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.998072][ T8304] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 64.036159][ T8304] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 64.098849][ T8304] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 64.165807][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.174572][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.183174][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.191746][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.200284][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.209016][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.216521][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.229447][ T8293] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.268234][ T8304] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 64.318471][ T8299] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 64.329266][ T8299] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.341438][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.350770][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.359506][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.368029][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.376658][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.385328][ T3685] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.392719][ T3685] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.400428][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.409207][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.417673][ T3685] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.425100][ T3685] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.432580][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.441337][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.449769][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.458355][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.466824][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.475663][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.484069][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.492335][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.500885][ T8307] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 64.546283][ T8307] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 64.591487][ T8295] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 64.602395][ T8295] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.623777][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.632402][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.641037][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.649293][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.658287][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.667611][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.676186][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.686239][ T8307] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 64.732413][ T8307] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 64.791229][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.799738][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.809682][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.877010][ T8299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.933650][ T8307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.960203][ T8307] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.003728][ T8307] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 65.019459][ T8307] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.053469][ T8307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 169.893865][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 169.900638][ C1] rcu: 1-...!: (1 GPs behind) idle=cde/1/0x4000000000000002 softirq=12505/12513 fqs=7 [ 169.910516][ C1] (t=10500 jiffies g=6353 q=583) [ 169.915531][ C1] rcu: rcu_preempt kthread starved for 10483 jiffies! g6353 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 169.926618][ C1] rcu: RCU grace-period kthread stack dump: [ 169.932493][ C1] rcu_preempt R running task 29032 10 2 0x80004000 [ 169.940990][ C1] Call Trace: [ 169.944291][ C1] __schedule+0x9a0/0xcc0 [ 169.948617][ C1] schedule+0x181/0x210 [ 169.952760][ C1] schedule_timeout+0x14f/0x240 [ 169.957595][ C1] ? run_local_timers+0x120/0x120 [ 169.962615][ C1] rcu_gp_kthread+0xed8/0x1770 [ 169.967376][ C1] kthread+0x332/0x350 [ 169.971429][ C1] ? rcu_report_qs_rsp+0x140/0x140 [ 169.976530][ C1] ? kthread_blkcg+0xe0/0xe0 [ 169.981105][ C1] ret_from_fork+0x24/0x30 [ 169.985524][ C1] NMI backtrace for cpu 1 [ 169.989842][ C1] CPU: 1 PID: 8295 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0 [ 169.998059][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 170.008100][ C1] Call Trace: [ 170.011367][ C1] [ 170.015508][ C1] dump_stack+0x1fb/0x318 [ 170.019824][ C1] nmi_cpu_backtrace+0xaf/0x1a0 [ 170.024703][ C1] ? nmi_trigger_cpumask_backtrace+0x16d/0x290 [ 170.030842][ C1] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 170.036904][ C1] nmi_trigger_cpumask_backtrace+0x174/0x290 [ 170.042869][ C1] arch_trigger_cpumask_backtrace+0x10/0x20 [ 170.048756][ C1] rcu_dump_cpu_stacks+0x15a/0x220 [ 170.053860][ C1] rcu_sched_clock_irq+0xe25/0x1ad0 [ 170.059049][ C1] ? trace_hardirqs_off+0x74/0x80 [ 170.064073][ C1] update_process_times+0x12d/0x180 [ 170.069262][ C1] tick_sched_timer+0x263/0x420 [ 170.074098][ C1] ? tick_setup_sched_timer+0x3d0/0x3d0 [ 170.079628][ C1] __hrtimer_run_queues+0x403/0x840 [ 170.084825][ C1] hrtimer_interrupt+0x38c/0xda0 [ 170.089855][ C1] ? debug_smp_processor_id+0x9/0x20 [ 170.095130][ C1] smp_apic_timer_interrupt+0x109/0x280 [ 170.100661][ C1] apic_timer_interrupt+0xf/0x20 [ 170.105581][ C1] [ 170.108507][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x22/0x50 [ 170.114662][ C1] Code: 64 02 3b 00 5b 5d c3 cc 48 8b 04 24 65 48 8b 0c 25 c0 1d 02 00 65 8b 15 b8 81 8b 7e f7 c2 00 01 1f 00 75 2c 8b 91 80 13 00 00 <83> fa 02 75 21 48 8b 91 88 13 00 00 48 8b 32 48 8d 7e 01 8b 89 84 [ 170.142842][ C1] RSP: 0018:ffffc90002197440 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 170.151240][ C1] RAX: ffffffff81487326 RBX: ffffea0002798a40 RCX: ffff8880a7eac680 [ 170.159216][ C1] RDX: 0000000000000000 RSI: 00000000fffffffc RDI: ffffea0002798a40 [ 170.167187][ C1] RBP: ffffc90002197468 R08: 000000000003a768 R09: ffffed1015078747 [ 170.175164][ C1] R10: ffffed1015078747 R11: 0000000000000000 R12: ffff88809b79dd20 [ 170.183136][ C1] R13: dffffc0000000000 R14: 00000000fffffffc R15: ffff8880a83c3a28 [ 170.191112][ C1] ? mod_memcg_page_state+0x16/0x190 [ 170.196395][ C1] ? mod_memcg_page_state+0x16/0x190 [ 170.201665][ C1] free_thread_stack+0x168/0x590 [ 170.206606][ C1] put_task_stack+0xa3/0x130 [ 170.211194][ C1] finish_task_switch+0x3f1/0x550 [ 170.216209][ C1] __schedule+0x9a8/0xcc0 [ 170.220533][ C1] preempt_schedule_irq+0xc1/0x140 [ 170.225631][ C1] retint_kernel+0x1b/0x2b [ 170.230049][ C1] RIP: 0010:update_stack_state+0xa9/0x530 [ 170.235757][ C1] Code: 4d 8d 77 38 4c 89 f0 48 c1 e8 03 80 3c 18 00 74 08 4c 89 f7 e8 d8 de 7c 00 49 8b 06 48 83 c0 10 48 89 85 78 ff ff ff 45 89 ec <41> 83 e4 01 49 f7 dc 4d 21 ec 49 83 e4 fe 4c 89 a5 70 ff ff ff 4c [ 170.256574][ C1] RSP: 0018:ffffc900021976c0 EFLAGS: 00000282 ORIG_RAX: ffffffffffffff13 [ 170.264972][ C1] RAX: ffffc90002197ee0 RBX: dffffc0000000000 RCX: 0000000000000000 [ 170.272928][ C1] RDX: 0000000000000008 RSI: ffffc90002197f10 RDI: ffffc90002197820 [ 170.280891][ C1] RBP: ffffc90002197768 R08: ffffffff81659d9d R09: ffffc90002197820 [ 170.288861][ C1] R10: fffff52000432f10 R11: 0000000000000000 R12: 0000000002197f10 [ 170.296821][ C1] R13: ffffc90002197f10 R14: ffffc90002197858 R15: ffffc90002197820 [ 170.304796][ C1] ? stack_trace_consume_entry+0x17d/0x260 [ 170.310609][ C1] unwind_next_frame+0x3f1/0x7a0 [ 170.315534][ C1] ? __unwind_start+0x36a/0x440 [ 170.320376][ C1] ? stack_trace_save+0x150/0x150 [ 170.325385][ C1] arch_stack_walk+0xb4/0xe0 [ 170.329968][ C1] ? __x64_sys_ioctl+0xa3/0x120 [ 170.334832][ C1] stack_trace_save+0xb6/0x150 [ 170.339595][ C1] __kasan_kmalloc+0x11c/0x1b0 [ 170.344353][ C1] ? __kasan_kmalloc+0x11c/0x1b0 [ 170.349277][ C1] ? kasan_kmalloc+0x9/0x10 [ 170.353766][ C1] ? __kmalloc+0x254/0x340 [ 170.358173][ C1] ? tomoyo_encode2+0x273/0x5a0 [ 170.363015][ C1] ? tomoyo_realpath_from_path+0x769/0x7c0 [ 170.368811][ C1] ? tomoyo_path_number_perm+0x166/0x640 [ 170.374428][ C1] ? tomoyo_file_ioctl+0x23/0x30 [ 170.379358][ C1] ? security_file_ioctl+0x6d/0xd0 [ 170.384467][ C1] ? __x64_sys_ioctl+0xa3/0x120 [ 170.389304][ C1] ? do_syscall_64+0xf7/0x1c0 [ 170.393967][ C1] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 170.400024][ C1] ? __kasan_kmalloc+0x11c/0x1b0 [ 170.404944][ C1] ? kasan_kmalloc+0x9/0x10 [ 170.409431][ C1] ? __kmalloc+0x254/0x340 [ 170.413834][ C1] ? tomoyo_realpath_from_path+0xdc/0x7c0 [ 170.419536][ C1] ? tomoyo_path_number_perm+0x166/0x640 [ 170.425156][ C1] ? tomoyo_file_ioctl+0x23/0x30 [ 170.430078][ C1] ? security_file_ioctl+0x6d/0xd0 [ 170.435173][ C1] ? __x64_sys_ioctl+0xa3/0x120 [ 170.440010][ C1] ? do_syscall_64+0xf7/0x1c0 [ 170.444677][ C1] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 170.450732][ C1] ? rcu_read_lock_sched_held+0x10b/0x170 [ 170.456438][ C1] ? trace_mm_page_alloc+0x18c/0x1f0 [ 170.461714][ C1] ? cache_grow_end+0x143/0x170 [ 170.466564][ C1] ? tomoyo_encode2+0x273/0x5a0 [ 170.471839][ C1] ? __kmalloc+0x1c0/0x340 [ 170.476243][ C1] ? tomoyo_encode2+0x273/0x5a0 [ 170.481077][ C1] kasan_kmalloc+0x9/0x10 [ 170.485591][ C1] __kmalloc+0x254/0x340 [ 170.489975][ C1] ? tomoyo_encode2+0x273/0x5a0 [ 170.494840][ C1] tomoyo_encode2+0x273/0x5a0 [ 170.499519][ C1] tomoyo_realpath_from_path+0x769/0x7c0 [ 170.505170][ C1] tomoyo_path_number_perm+0x166/0x640 [ 170.510651][ C1] ? smack_file_ioctl+0x226/0x2e0 [ 170.515670][ C1] ? assoc_array_gc+0x1371/0x1440 [ 170.520690][ C1] tomoyo_file_ioctl+0x23/0x30 [ 170.525443][ C1] security_file_ioctl+0x6d/0xd0 [ 170.530375][ C1] __x64_sys_ioctl+0xa3/0x120 [ 170.535042][ C1] do_syscall_64+0xf7/0x1c0 [ 170.539538][ C1] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 170.545417][ C1] RIP: 0033:0x45a4e7 [ 170.549302][ C1] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 170.568891][ C1] RSP: 002b:00007fffaf480cf8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 170.577289][ C1] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045a4e7 [ 170.585253][ C1] RDX: 00007fffaf480d00 RSI: 0000000000008933 RDI: 0000000000000004 [ 170.593224][ C1] RBP: 00000000004bfb5a R08: 0000000000000009 R09: 00007fffaf480de8 [ 170.601182][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000004bfb5a [ 170.609147][ C1] R13: 0000000000000000 R14: 0000000000000003 R15: 00007fffaf480de8