[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 44.546178][ T26] audit: type=1800 audit(1575329799.581:25): pid=8087 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 44.566202][ T26] audit: type=1800 audit(1575329799.581:26): pid=8087 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 44.608605][ T26] audit: type=1800 audit(1575329799.581:27): pid=8087 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.160' (ECDSA) to the list of known hosts. 2019/12/02 23:36:49 fuzzer started 2019/12/02 23:36:51 dialing manager at 10.128.0.26:38907 2019/12/02 23:36:51 syscalls: 2697 2019/12/02 23:36:51 code coverage: enabled 2019/12/02 23:36:51 comparison tracing: enabled 2019/12/02 23:36:51 extra coverage: extra coverage is not supported by the kernel 2019/12/02 23:36:51 setuid sandbox: enabled 2019/12/02 23:36:51 namespace sandbox: enabled 2019/12/02 23:36:51 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/02 23:36:51 fault injection: enabled 2019/12/02 23:36:51 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/02 23:36:51 net packet injection: enabled 2019/12/02 23:36:51 net device setup: enabled 2019/12/02 23:36:51 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/12/02 23:36:51 devlink PCI setup: PCI device 0000:00:10.0 is not available 23:36:52 executing program 0: epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) fchdir(0xffffffffffffffff) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000) openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x40, 0x0) fchdir(0xffffffffffffffff) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffffffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x101}}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000740)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\a\xd2\x8f(.\xf6\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e\xab\x8d\xed\xa6\\\x1c\xc3\x97\x94\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\x15v$\xc5\xbc\x11N\t\x9ej5)\x00\x00\x009\x8c4\xc4\x88C\xa2B\x8b\x81\v\xea\t\xf0\x8fw\a\f\x15\xe2\xd0q\xbb\t\xbf\x85\x98~\v\xd8D\xab9(\xf6.\x15\xcd2-\xf2\xc4\xd8\x00a\xd5\xd9\xb5Z\xd7\xb4\xac\x1d_+k\xd6\x8ag\xdceHE\xd5\x1c\x8a\xbd#\xcc\x82\xc2\xc2(\xb6\xe1\x99p\x9b\xa3D\xd2\x91\x96\xef\x05\fv\x16\x14\xcc\xea\x9d\x11w\x1e\xb5VG\x9ad\x9a`=^h\x8c8\xc9\"\x1eO\xb5vk\xc9\v\x17\x95\xf7\x19\x99\x99\x92\xc3\xc0\x8a\x18\xc7\"g\xd7B\x8f\x85\x18\xf3\x02\xa7\xb6\x83\x92\xefY\xef\x85\x92\x10E\x18\xbc\xacy\xd6\xa7Wh\xcd\xd0\xfa\xcc\x01\xeb\xdf\xad\xfd\xb0\xee\xfb\xc2(\x8cj\xd0uj{4\xb2\xe1p\x88u6\x9a;\xaa\x9f+J\x9e\xe3\xcc\xc7O\xad\x84\x8c;\x92~,\x15\xb2\x97\f~\xa0W\x16\x8b\a\x88\xaa\xe4C\xaf\x90\xdf\x7f\xe51\x00/n\xb5f\x1a\x8c+\xea<\xe3N@\x9e\xec\xbe{\x90x\xc6\xd7\xeeI\x1d\xcbY\xe1\x01\xd2d\xae\xd1(>\xa3\xa9\x93\x16\xc6G\x94|\x00\x00\x00\x00\x00\x00\x00\x00\x91\x00+/pF\xfa]\xc4\xb3\xfc~\x13\xc3\x8aV\xa5\n\xe9H\xad\xf5\xa7{\x90\b\x9bb\xb8gY\xdb', 0x2761, 0x0) write$cgroup_pid(r2, &(0x7f0000000080), 0xfffffe38) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x660c, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 23:36:52 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, 0x0) perf_event_open(0x0, r1, 0x5, 0xffffffffffffffff, 0x0) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r2 = dup(r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) ioctl$VHOST_GET_VRING_BASE(0xffffffffffffffff, 0xc008af12, &(0x7f00000004c0)) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000180)='lp\x00', 0x3) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f00000000c0)='syz1\x00') setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x1c) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) shutdown(r0, 0x1) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) syzkaller login: [ 57.594472][ T8249] IPVS: ftp: loaded support on port[0] = 21 [ 57.736851][ T8249] chnl_net:caif_netlink_parms(): no params data found 23:36:52 executing program 2: request_key(&(0x7f0000000100)='logon\x00', &(0x7f0000000040), 0x0, 0xfffffffffffffffd) [ 57.792732][ T8249] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.809302][ T8249] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.825039][ T8249] device bridge_slave_0 entered promiscuous mode [ 57.851719][ T8249] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.858931][ T8249] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.879677][ T8249] device bridge_slave_1 entered promiscuous mode [ 57.912982][ T8252] IPVS: ftp: loaded support on port[0] = 21 [ 57.922452][ T8249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.951117][ T8249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.995797][ T8249] team0: Port device team_slave_0 added [ 58.011162][ T8254] IPVS: ftp: loaded support on port[0] = 21 [ 58.022976][ T8249] team0: Port device team_slave_1 added 23:36:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f0000000180)={0x8fb1049f491af421, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfcd], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x0) [ 58.091364][ T8249] device hsr_slave_0 entered promiscuous mode [ 58.160640][ T8249] device hsr_slave_1 entered promiscuous mode 23:36:53 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, 0x0, 0x0) [ 58.317182][ T8249] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 58.381669][ T8249] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 58.451351][ T8249] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 58.472420][ T8256] IPVS: ftp: loaded support on port[0] = 21 [ 58.492331][ T8249] netdevsim netdevsim0 netdevsim3: renamed from eth3 23:36:53 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) connect$vsock_stream(r0, &(0x7f0000000280)={0x28, 0x0, 0x0, @my=0x0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xb000) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x3ff800) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000200), 0x8) [ 58.578131][ T8249] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.585388][ T8249] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.593296][ T8249] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.600533][ T8249] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.630443][ T8259] IPVS: ftp: loaded support on port[0] = 21 [ 58.662704][ T8252] chnl_net:caif_netlink_parms(): no params data found [ 58.733593][ T8252] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.741445][ T8252] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.749664][ T8252] device bridge_slave_0 entered promiscuous mode [ 58.760693][ T8254] chnl_net:caif_netlink_parms(): no params data found [ 58.776600][ T1075] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.786134][ T1075] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.795882][ T8252] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.803327][ T8252] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.811269][ T8252] device bridge_slave_1 entered promiscuous mode [ 58.813331][ T8263] IPVS: ftp: loaded support on port[0] = 21 [ 58.867987][ T8252] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.895142][ T8252] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.924705][ T8254] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.932874][ T8254] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.941214][ T8254] device bridge_slave_0 entered promiscuous mode [ 58.964578][ T8254] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.972479][ T8254] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.980683][ T8254] device bridge_slave_1 entered promiscuous mode [ 58.990873][ T8252] team0: Port device team_slave_0 added [ 58.997875][ T8252] team0: Port device team_slave_1 added [ 59.054569][ T8259] chnl_net:caif_netlink_parms(): no params data found [ 59.100276][ T8252] device hsr_slave_0 entered promiscuous mode [ 59.149289][ T8252] device hsr_slave_1 entered promiscuous mode [ 59.198701][ T8252] debugfs: Directory 'hsr0' with parent '/' already present! [ 59.211297][ T8249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.223253][ T8254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.235408][ T8254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.260270][ T8254] team0: Port device team_slave_0 added [ 59.267371][ T8254] team0: Port device team_slave_1 added [ 59.292457][ T8259] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.299832][ T8259] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.307602][ T8259] device bridge_slave_0 entered promiscuous mode [ 59.338242][ T8259] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.345882][ T8259] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.353706][ T8259] device bridge_slave_1 entered promiscuous mode [ 59.412806][ T8254] device hsr_slave_0 entered promiscuous mode [ 59.458946][ T8254] device hsr_slave_1 entered promiscuous mode [ 59.498681][ T8254] debugfs: Directory 'hsr0' with parent '/' already present! [ 59.525707][ T8249] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.552305][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.563414][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.572753][ T8259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.584754][ T8256] chnl_net:caif_netlink_parms(): no params data found [ 59.604818][ T8252] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 59.661337][ T8259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.694022][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.702602][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.711531][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.718625][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.726994][ T8252] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 59.815950][ T8256] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.823358][ T8256] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.831188][ T8256] device bridge_slave_0 entered promiscuous mode [ 59.839333][ T8252] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 59.891897][ T8259] team0: Port device team_slave_0 added [ 59.897704][ T8252] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 59.951664][ T8264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.961633][ T8264] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.970213][ T8264] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.977251][ T8264] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.987983][ T8256] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.000155][ T8256] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.008026][ T8256] device bridge_slave_1 entered promiscuous mode [ 60.017141][ T8259] team0: Port device team_slave_1 added [ 60.033295][ T8263] chnl_net:caif_netlink_parms(): no params data found [ 60.049138][ T8254] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 60.091090][ T8254] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 60.146851][ T8256] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.171447][ T8254] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 60.211248][ T8254] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 60.266362][ T8256] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.276324][ T8264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.351751][ T8259] device hsr_slave_0 entered promiscuous mode [ 60.389079][ T8259] device hsr_slave_1 entered promiscuous mode [ 60.438702][ T8259] debugfs: Directory 'hsr0' with parent '/' already present! [ 60.460173][ T8263] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.467352][ T8263] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.475298][ T8263] device bridge_slave_0 entered promiscuous mode [ 60.483393][ T8263] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.490651][ T8263] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.498719][ T8263] device bridge_slave_1 entered promiscuous mode [ 60.509829][ T8261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.520802][ T8256] team0: Port device team_slave_0 added [ 60.538319][ T8263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.552340][ T8263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.576943][ T8263] team0: Port device team_slave_0 added [ 60.584735][ T8256] team0: Port device team_slave_1 added [ 60.607930][ T8263] team0: Port device team_slave_1 added [ 60.661449][ T8263] device hsr_slave_0 entered promiscuous mode [ 60.699065][ T8263] device hsr_slave_1 entered promiscuous mode [ 60.748724][ T8263] debugfs: Directory 'hsr0' with parent '/' already present! [ 60.766901][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.775830][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.784937][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.793308][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.801875][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.850219][ T8256] device hsr_slave_0 entered promiscuous mode [ 60.888963][ T8256] device hsr_slave_1 entered promiscuous mode [ 60.938811][ T8256] debugfs: Directory 'hsr0' with parent '/' already present! [ 60.964479][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.973031][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.031291][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.045610][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.057150][ T8263] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 61.100414][ T8256] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 61.144148][ T8256] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 61.221444][ T8263] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 61.280544][ T8259] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 61.344429][ T8249] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.354144][ T8256] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 61.391339][ T8263] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 61.451280][ T8263] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 61.492585][ T8259] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 61.554768][ T8256] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 61.603752][ T8252] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.617616][ T8254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.624820][ T8259] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 61.676988][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.684959][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.696083][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.704836][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.716551][ T8259] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 61.774907][ T8252] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.786836][ T8249] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.810168][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.817827][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.852201][ T8254] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.860967][ T8264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.872506][ T8264] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.881616][ T8264] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.888759][ T8264] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.896999][ T8264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.906037][ T8264] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.914729][ T8264] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.921829][ T8264] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.947530][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.959785][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.969887][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.978322][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.987423][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.996377][ T3063] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.003467][ T3063] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.028078][ T8256] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.043492][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.055370][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.073315][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.082861][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.089993][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.098265][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.109736][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.112490][ C0] hrtimer: interrupt took 26389 ns [ 62.119079][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.137926][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.147554][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.183130][ T8252] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 62.201204][ T8252] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.237433][ T8254] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 62.250727][ T8254] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.299639][ T8254] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.324663][ T8269] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.340106][ T8269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.357180][ T8269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.366758][ T8269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.381139][ T8269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.393713][ T8269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.404680][ T8269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.419231][ T8269] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.427718][ T8269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.442722][ T8269] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.453536][ T8269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.466000][ T8269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.477337][ T8269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.490211][ T8269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.504273][ T8269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.513157][ T8269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.525997][ T8269] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.534952][ T8269] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.550956][ T8259] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.570795][ T8256] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.597653][ T8269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.606546][ T8269] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.620612][ T8269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.633031][ T8269] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.642509][ T8269] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.665868][ T8252] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.688187][ T8259] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.711945][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.724886][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.740680][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.747787][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.762426][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.773996][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.787046][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.794216][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.808711][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.816848][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.861873][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.875979][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.885257][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.900312][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.915547][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.925547][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.939055][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.947584][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.954687][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.968336][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.977187][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.994400][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.001517][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.039083][ T8263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.059126][ T8269] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.067532][ T8269] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.081388][ T8269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.096865][ T8269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.109006][ T8269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.118139][ T8269] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.133303][ T8269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.144476][ T8269] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.158240][ T8269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.168394][ T8269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.182779][ T8269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.193829][ T8269] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.216270][ T8256] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 63.235083][ T8256] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.261561][ T8259] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.280164][ T8259] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.305700][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.313849][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.337585][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.346685][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.361276][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.374491][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.385661][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.398401][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.408388][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.425528][ T8263] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.450783][ T8269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.475504][ T8259] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.510965][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.519321][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.541718][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 167.148487][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 167.155308][ C0] rcu: 0-...!: (10499 ticks this GP) idle=0fe/1/0x4000000000000002 softirq=10202/10202 fqs=60 [ 167.165889][ C0] (t=10500 jiffies g=6525 q=1406) [ 167.170990][ C0] rcu: rcu_preempt kthread starved for 10360 jiffies! g6525 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 167.182601][ C0] rcu: RCU grace-period kthread stack dump: [ 167.188473][ C0] rcu_preempt R running task 29032 10 2 0x80004000 [ 167.196382][ C0] Call Trace: [ 167.199677][ C0] __schedule+0x9a0/0xcc0 [ 167.204033][ C0] schedule+0x181/0x210 [ 167.208191][ C0] schedule_timeout+0x14f/0x240 [ 167.213052][ C0] ? run_local_timers+0x120/0x120 [ 167.218098][ C0] rcu_gp_kthread+0xed8/0x1770 [ 167.222868][ C0] kthread+0x332/0x350 [ 167.226931][ C0] ? rcu_report_qs_rsp+0x140/0x140 [ 167.232041][ C0] ? kthread_blkcg+0xe0/0xe0 [ 167.236630][ C0] ret_from_fork+0x24/0x30 [ 167.241058][ C0] NMI backtrace for cpu 0 [ 167.245382][ C0] CPU: 0 PID: 8271 Comm: syz-executor.0 Not tainted 5.4.0-syzkaller #0 [ 167.253602][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 167.263639][ C0] Call Trace: [ 167.266909][ C0] [ 167.269750][ C0] dump_stack+0x1fb/0x318 [ 167.274069][ C0] nmi_cpu_backtrace+0xaf/0x1a0 [ 167.278939][ C0] ? nmi_trigger_cpumask_backtrace+0x16d/0x290 [ 167.285949][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 167.292041][ C0] nmi_trigger_cpumask_backtrace+0x174/0x290 [ 167.298161][ C0] arch_trigger_cpumask_backtrace+0x10/0x20 [ 167.304072][ C0] rcu_dump_cpu_stacks+0x15a/0x220 [ 167.309195][ C0] rcu_sched_clock_irq+0xe25/0x1ad0 [ 167.314412][ C0] ? trace_hardirqs_off+0x74/0x80 [ 167.319438][ C0] update_process_times+0x12d/0x180 [ 167.324635][ C0] tick_sched_timer+0x263/0x420 [ 167.329479][ C0] ? tick_setup_sched_timer+0x3d0/0x3d0 [ 167.335017][ C0] __hrtimer_run_queues+0x403/0x840 [ 167.340227][ C0] hrtimer_interrupt+0x38c/0xda0 [ 167.345170][ C0] ? debug_smp_processor_id+0x9/0x20 [ 167.350447][ C0] smp_apic_timer_interrupt+0x109/0x280 [ 167.355981][ C0] apic_timer_interrupt+0xf/0x20 [ 167.360921][ C0] [ 167.363876][ C0] RIP: 0010:free_thread_stack+0x124/0x590 [ 167.369593][ C0] Code: ff 48 c1 e8 06 48 83 e0 c0 48 bf 00 00 00 00 00 ea ff ff 48 01 c7 be 03 00 00 00 e8 06 a2 60 00 e9 5d 04 00 00 e8 5c 2d 2e 00 <48> 89 df 31 f6 e8 42 af 6e 00 43 80 3c 2e 00 74 08 4c 89 e7 e8 43 [ 167.389205][ C0] RSP: 0018:ffffc900024976b8 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 167.397617][ C0] RAX: ffffffff81486ea4 RBX: ffffea00028dadc0 RCX: 0000000000040000 [ 167.405580][ C0] RDX: ffffc90001f49000 RSI: 000000000003ffff RDI: 0000000000040000 [ 167.413741][ C0] RBP: ffffc900024976f0 R08: 000000000003a768 R09: ffffed1014ec2eb7 [ 167.421710][ C0] R10: ffffed1014ec2eb7 R11: 0000000000000000 R12: ffff8880a2784e20 [ 167.429929][ C0] R13: dffffc0000000000 R14: 1ffff110144f09c4 R15: ffff8880a76175a8 [ 167.437909][ C0] ? free_thread_stack+0x124/0x590 [ 167.443011][ C0] ? free_thread_stack+0x124/0x590 [ 167.448110][ C0] put_task_stack+0xa3/0x130 [ 167.452686][ C0] finish_task_switch+0x3f1/0x550 [ 167.457700][ C0] __schedule+0x9a8/0xcc0 [ 167.462029][ C0] preempt_schedule_irq+0xc1/0x140 [ 167.467125][ C0] retint_kernel+0x1b/0x2b [ 167.471535][ C0] RIP: 0010:rcu_is_watching+0x6f/0xa0 [ 167.476904][ C0] Code: 03 00 49 03 1e 48 89 df be 04 00 00 00 e8 d9 30 4e 00 48 89 d8 48 c1 e8 03 42 8a 04 38 84 c0 75 1e 8b 03 65 ff 0d 8d 6d 9e 7e <74> 0c 83 e0 02 d1 e8 5b 41 5e 41 5f 5d c3 e8 67 b0 9c ff eb ed 89 [ 167.496504][ C0] RSP: 0018:ffffc90002497908 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13 [ 167.504899][ C0] RAX: 00000000000070fe RBX: ffff8880aec37e60 RCX: ffffffff8163b027 [ 167.512860][ C0] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff8880aec37e60 [ 167.520818][ C0] RBP: ffffc90002497920 R08: dffffc0000000000 R09: ffffed1015d86fcd [ 167.528773][ C0] R10: ffffed1015d86fcd R11: 0000000000000000 R12: 1ffff92000492f2b [ 167.536732][ C0] R13: dffffc0000000000 R14: ffffffff88dff0c0 R15: dffffc0000000000 [ 167.544702][ C0] ? rcu_is_watching+0x57/0xa0 [ 167.549454][ C0] ? rcu_is_watching+0x57/0xa0 [ 167.554204][ C0] find_get_entry+0x758/0x850 [ 167.558877][ C0] pagecache_get_page+0x5b/0xd30 [ 167.563804][ C0] grab_cache_page_write_begin+0x5c/0xa0 [ 167.569425][ C0] ext4_da_write_begin+0x48f/0xf70 [ 167.574544][ C0] generic_perform_write+0x25d/0x4e0 [ 167.579854][ C0] ext4_buffered_write_iter+0x467/0x5f0 [ 167.585389][ C0] ext4_file_write_iter+0x546/0x1f50 [ 167.590664][ C0] ? lock_acquire+0x158/0x250 [ 167.595332][ C0] ? __fdget_pos+0x243/0x2e0 [ 167.599911][ C0] ? iov_iter_init+0x8a/0x170 [ 167.604577][ C0] __vfs_write+0x5a1/0x740 [ 167.608992][ C0] vfs_write+0x275/0x590 [ 167.613512][ C0] ksys_write+0x117/0x220 [ 167.617834][ C0] __x64_sys_write+0x7b/0x90 [ 167.622414][ C0] do_syscall_64+0xf7/0x1c0 [ 167.626921][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 167.632804][ C0] RIP: 0033:0x45a679 [ 167.636690][ C0] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 167.656278][ C0] RSP: 002b:00007f54aacc2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 167.664674][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a679 [ 167.672630][ C0] RDX: 00000000fffffe38 RSI: 0000000020000080 RDI: 0000000000000006 [ 167.680588][ C0] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 167.688543][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f54aacc36d4 [ 167.696498][ C0] R13: 00000000004cbac0 R14: 00000000004e56b0 R15: 00000000ffffffff