[ 56.371113][ T23] audit: type=1800 audit(1575416327.571:30): pid=8135 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.74' (ECDSA) to the list of known hosts. 2019/12/03 23:38:56 fuzzer started 2019/12/03 23:38:58 dialing manager at 10.128.0.26:42111 2019/12/03 23:38:58 syscalls: 2689 2019/12/03 23:38:58 code coverage: enabled 2019/12/03 23:38:58 comparison tracing: enabled 2019/12/03 23:38:58 extra coverage: extra coverage is not supported by the kernel 2019/12/03 23:38:58 setuid sandbox: enabled 2019/12/03 23:38:58 namespace sandbox: enabled 2019/12/03 23:38:58 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/03 23:38:58 fault injection: enabled 2019/12/03 23:38:58 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/03 23:38:58 net packet injection: enabled 2019/12/03 23:38:58 net device setup: enabled 2019/12/03 23:38:58 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/12/03 23:38:58 devlink PCI setup: PCI device 0000:00:10.0 is not available 23:38:59 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000140)="890704faf3", 0x5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet_opts(r0, 0x0, 0x4, 0x0, &(0x7f00000002c0)=0x11) 23:38:59 executing program 1: r0 = gettid() rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) r1 = getpid() rt_tgsigqueueinfo(r1, r0, 0x12, &(0x7f00003efff0)={0x0, 0x0, 0x8}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000ff8)={0xfffffffffffffdb0}, 0x8, 0x0) read(r2, &(0x7f0000000100)=""/128, 0x190) syzkaller login: [ 68.010560][ T8298] IPVS: ftp: loaded support on port[0] = 21 [ 68.189096][ T8298] chnl_net:caif_netlink_parms(): no params data found 23:38:59 executing program 2: r0 = open(&(0x7f0000000000)='./bus\x00', 0x1c18e2, 0x1a) pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x2ed}], 0x1000000000000098, 0x0) r1 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r1, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = dup(r3) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x7, 0x0) dup(r2) r5 = socket$unix(0x1, 0x5, 0x0) bind$unix(r5, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r6 = gettid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003f40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="a50d0000000000001500e1ff00000000", @ANYRES32=r5, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r6, @ANYRES32, @ANYRES32=0x0], 0x4c}], 0x1, 0x0) getresuid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)) getgroups(0x4, &(0x7f00000002c0)=[0xee00, 0xee00, 0xee01, 0xee01]) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r7, &(0x7f0000000200)=ANY=[@ANYRES16], 0x2) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r8, &(0x7f0000000200)=ANY=[@ANYRES16], 0x2) pipe(&(0x7f0000000380)={0xffffffffffffffff}) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r11 = dup(r10) splice(r9, 0x0, r11, 0x0, 0x7, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff}) r13 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r14 = dup(r13) splice(r12, 0x0, r14, 0x0, 0x7, 0x0) pipe(&(0x7f0000000300)) pipe(&(0x7f0000000380)={0xffffffffffffffff}) r16 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r17 = dup(r16) splice(r15, 0x0, r17, 0x0, 0x7, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r18, &(0x7f0000000200)=ANY=[@ANYRES16], 0x2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r18, 0xc0502100, &(0x7f0000000340)) getuid() getegid() pipe(&(0x7f0000000380)={0xffffffffffffffff}) r20 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r21 = dup(r20) splice(r19, 0x0, r21, 0x0, 0x7, 0x0) syz_open_dev$sndmidi(&(0x7f00000003c0)='/dev/snd/midiC#D#\x00', 0x0, 0x641002) r22 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) dup(r22) r23 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) dup(r23) r24 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) dup(r24) pipe(&(0x7f0000000380)={0xffffffffffffffff}) r26 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r27 = dup(r26) splice(r25, 0x0, r27, 0x0, 0x7, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff}) r29 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r30 = dup(r29) splice(r28, 0x0, r30, 0x0, 0x7, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff}) r32 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r33 = dup(r32) splice(r31, 0x0, r33, 0x0, 0x7, 0x0) r34 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) dup(r34) openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x101003, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) fspick(r1, &(0x7f0000000440)='./bus\x00', 0x2) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r35, &(0x7f0000000200)=ANY=[@ANYRES16], 0x2) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r36, &(0x7f0000000200)=ANY=[@ANYRES16], 0x2) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r37, &(0x7f0000000200)=ANY=[@ANYRES16], 0x2) openat$vcs(0xffffffffffffff9c, &(0x7f0000000480)='/dev/vcs\x00', 0x40001, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r38, &(0x7f0000000200)=ANY=[@ANYRES16], 0x2) r39 = socket$unix(0x1, 0x5, 0x0) bind$unix(r39, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r40 = gettid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003f40)=[{0x0, 0x176, 0x0, 0x0, &(0x7f0000002800)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="a50d0000000000001500e1ff00000000", @ANYRES32=r39, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES64, @ANYRES32, @ANYRES32=0x0], 0x4c}], 0x0, 0x0) getpgid(r40) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0), &(0x7f0000000500)=0xc) r41 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fstat(r41, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r42) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_open_dev$amidi(&(0x7f0000000bc0)='/dev/amidi#\x00', 0x2, 0x4c1400) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r43, &(0x7f0000000200)=ANY=[@ANYRES16], 0x2) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r44, &(0x7f0000000200)=ANY=[@ANYRES16], 0x2) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r45, &(0x7f0000000200)=ANY=[@ANYRES16], 0x2) r46 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) dup(r46) openat$dir(0xffffffffffffff9c, &(0x7f0000000c00)='./bus\x00', 0x400, 0xe4) r47 = socket$unix(0x1, 0x5, 0x0) bind$unix(r47, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r48 = gettid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003f40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="a50d0000000000001500e1ff00000000", @ANYRES32=r47, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r48, @ANYRES32, @ANYRES32=0x0], 0x4c}], 0x1, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r49, &(0x7f0000000200)=ANY=[@ANYRES16], 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(r49, 0x29, 0x23, &(0x7f0000000c40)={{{@in6=@ipv4={[], [], @dev}, @in=@loopback}}, {{@in6=@initdev}, 0x0, @in6=@loopback}}, &(0x7f0000000d40)=0xe8) r50 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fstat(r50, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x2, &(0x7f0000000100)=[r51, 0x0]) socket$unix(0x1, 0x5, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff}) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) splice(r52, 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x0) r53 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fstat(r53, &(0x7f0000000380)) pipe(&(0x7f0000000380)={0xffffffffffffffff}) r55 = dup(0xffffffffffffffff) splice(r54, 0x0, r55, 0x0, 0x7, 0x0) pipe(&(0x7f0000000380)) r56 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) dup(r56) dup(0xffffffffffffffff) dup(0xffffffffffffffff) [ 68.232080][ T8298] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.273061][ T8298] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.281085][ T8298] device bridge_slave_0 entered promiscuous mode [ 68.305854][ T8298] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.313078][ T8298] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.320892][ T8298] device bridge_slave_1 entered promiscuous mode [ 68.357957][ T8298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.376893][ T8301] IPVS: ftp: loaded support on port[0] = 21 [ 68.394207][ T8298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.446773][ T8303] IPVS: ftp: loaded support on port[0] = 21 [ 68.462605][ T8298] team0: Port device team_slave_0 added 23:38:59 executing program 3: r0 = socket(0x10, 0x2, 0x0) sendto(r0, &(0x7f0000000200)="120000001200e7ef007b1a3fcd00000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x9}, {&(0x7f00000000c0)=""/85, 0x4e4}, {&(0x7f00000024c0)=""/4096, 0x1034}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0xc6}, {&(0x7f0000000280)=""/77, 0x1734}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x1de}], 0x3a4, &(0x7f0000002400)=""/191, 0x1f9}}], 0x4000000000001de, 0x6, &(0x7f0000003700)={0x77359400}) [ 68.486936][ T8298] team0: Port device team_slave_1 added [ 68.575636][ T8298] device hsr_slave_0 entered promiscuous mode [ 68.613317][ T8298] device hsr_slave_1 entered promiscuous mode 23:38:59 executing program 4: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm-monitor\x00', 0x0, 0x0) close(r0) [ 68.730898][ T8305] IPVS: ftp: loaded support on port[0] = 21 [ 68.829972][ T8301] chnl_net:caif_netlink_parms(): no params data found [ 68.846386][ T8298] netdevsim netdevsim0 netdevsim0: renamed from eth0 23:39:00 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25NOUID(r0, 0x8915, 0x0) [ 68.957736][ T8303] chnl_net:caif_netlink_parms(): no params data found [ 68.973111][ T8298] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.025151][ T8298] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.083806][ T8298] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.093500][ T8309] IPVS: ftp: loaded support on port[0] = 21 [ 69.170274][ T8298] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.177514][ T8298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.185596][ T8298] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.192816][ T8298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.228497][ T8311] IPVS: ftp: loaded support on port[0] = 21 [ 69.249370][ T8303] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.257372][ T8303] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.265105][ T8303] device bridge_slave_0 entered promiscuous mode [ 69.279651][ T3764] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.287686][ T3764] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.298890][ T8301] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.305990][ T8301] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.314316][ T8301] device bridge_slave_0 entered promiscuous mode [ 69.322204][ T8301] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.329587][ T8301] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.337496][ T8301] device bridge_slave_1 entered promiscuous mode [ 69.357914][ T8303] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.365060][ T8303] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.372606][ T8303] device bridge_slave_1 entered promiscuous mode [ 69.412149][ T8301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.428490][ T8303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.442779][ T8301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.458624][ T8303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.521263][ T8303] team0: Port device team_slave_0 added [ 69.530091][ T8303] team0: Port device team_slave_1 added [ 69.542767][ T8301] team0: Port device team_slave_0 added [ 69.551624][ T8301] team0: Port device team_slave_1 added [ 69.583779][ T8309] chnl_net:caif_netlink_parms(): no params data found [ 69.665284][ T8303] device hsr_slave_0 entered promiscuous mode [ 69.713476][ T8303] device hsr_slave_1 entered promiscuous mode [ 69.763143][ T8303] debugfs: Directory 'hsr0' with parent '/' already present! [ 69.835656][ T8301] device hsr_slave_0 entered promiscuous mode [ 69.903470][ T8301] device hsr_slave_1 entered promiscuous mode [ 69.953186][ T8301] debugfs: Directory 'hsr0' with parent '/' already present! [ 69.991636][ T8305] chnl_net:caif_netlink_parms(): no params data found [ 70.008152][ T8309] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.016064][ T8309] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.024132][ T8309] device bridge_slave_0 entered promiscuous mode [ 70.054922][ T8309] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.062009][ T8309] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.072152][ T8309] device bridge_slave_1 entered promiscuous mode [ 70.104326][ T8309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.114867][ T8303] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.170322][ T8298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.183418][ T8309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.193516][ T8303] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.231937][ T8303] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.285184][ T8301] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.325094][ T8301] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.391703][ T8309] team0: Port device team_slave_0 added [ 70.406569][ T8303] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.467218][ T8301] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.515250][ T8305] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.522334][ T8305] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.530324][ T8305] device bridge_slave_0 entered promiscuous mode [ 70.538687][ T8309] team0: Port device team_slave_1 added [ 70.555059][ T8298] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.561892][ T8301] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.618277][ T8305] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.625505][ T8305] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.633576][ T8305] device bridge_slave_1 entered promiscuous mode [ 70.640546][ T8311] chnl_net:caif_netlink_parms(): no params data found [ 70.649427][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.658713][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.689359][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.701217][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.709972][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.717204][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.724855][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.733647][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.742112][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.749219][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.815842][ T8309] device hsr_slave_0 entered promiscuous mode [ 70.853483][ T8309] device hsr_slave_1 entered promiscuous mode [ 70.883186][ T8309] debugfs: Directory 'hsr0' with parent '/' already present! [ 70.920643][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.930897][ T8305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.944953][ T8311] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.952050][ T8311] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.960435][ T8311] device bridge_slave_0 entered promiscuous mode [ 70.972578][ T8311] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.983268][ T8311] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.990990][ T8311] device bridge_slave_1 entered promiscuous mode [ 71.011406][ T8305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.038493][ T8305] team0: Port device team_slave_0 added [ 71.046261][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.055745][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.064308][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.078840][ T8311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.089257][ T8305] team0: Port device team_slave_1 added [ 71.104935][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.113920][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.122432][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.138591][ T8311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.157344][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.166436][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.175715][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.184277][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.215983][ T8305] device hsr_slave_0 entered promiscuous mode [ 71.253446][ T8305] device hsr_slave_1 entered promiscuous mode [ 71.283311][ T8305] debugfs: Directory 'hsr0' with parent '/' already present! [ 71.310070][ T8311] team0: Port device team_slave_0 added [ 71.320642][ T8311] team0: Port device team_slave_1 added [ 71.328548][ T8298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.340968][ T8309] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 71.396056][ T8309] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 71.468955][ T8314] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.476787][ T8314] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.485220][ T8309] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 71.525370][ T8309] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 71.605715][ T8311] device hsr_slave_0 entered promiscuous mode [ 71.624072][ T8311] device hsr_slave_1 entered promiscuous mode [ 71.663122][ T8311] debugfs: Directory 'hsr0' with parent '/' already present! [ 71.674589][ T8298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.695191][ T8301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.741021][ T8303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.769341][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.785993][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.795694][ T8301] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.805651][ T8305] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.845490][ T8305] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.885710][ T8311] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 71.927339][ T8311] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 71.994421][ T8305] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.037536][ T8305] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 177.262979][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 177.269869][ C1] rcu: 1-...!: (1 GPs behind) idle=e1a/1/0x4000000000000002 softirq=11344/11346 fqs=31 [ 177.279939][ C1] (t=10501 jiffies g=6885 q=184) [ 177.284979][ C1] rcu: rcu_preempt kthread starved for 10440 jiffies! g6885 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 177.296206][ C1] rcu: RCU grace-period kthread stack dump: [ 177.302115][ C1] rcu_preempt R running task 28864 10 2 0x80004000 [ 177.310021][ C1] Call Trace: [ 177.313325][ C1] __schedule+0x9a0/0xcc0 [ 177.317693][ C1] schedule+0x181/0x210 [ 177.321855][ C1] schedule_timeout+0x14f/0x240 [ 177.326723][ C1] ? run_local_timers+0x120/0x120 [ 177.331769][ C1] rcu_gp_kthread+0xed8/0x1770 [ 177.336560][ C1] kthread+0x332/0x350 [ 177.340621][ C1] ? rcu_report_qs_rsp+0x140/0x140 [ 177.345722][ C1] ? kthread_blkcg+0xe0/0xe0 [ 177.350304][ C1] ret_from_fork+0x24/0x30 [ 177.354725][ C1] NMI backtrace for cpu 1 [ 177.359042][ C1] CPU: 1 PID: 427 Comm: kworker/u4:5 Not tainted 5.4.0-syzkaller #0 [ 177.366999][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 177.377050][ C1] Workqueue: events_unbound fsnotify_connector_destroy_workfn [ 177.384491][ C1] Call Trace: [ 177.387767][ C1] [ 177.390609][ C1] dump_stack+0x1fb/0x318 [ 177.394934][ C1] nmi_cpu_backtrace+0xaf/0x1a0 [ 177.399778][ C1] ? nmi_trigger_cpumask_backtrace+0x16d/0x290 [ 177.405927][ C1] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 177.411982][ C1] nmi_trigger_cpumask_backtrace+0x174/0x290 [ 177.418095][ C1] arch_trigger_cpumask_backtrace+0x10/0x20 [ 177.424000][ C1] rcu_dump_cpu_stacks+0x15a/0x220 [ 177.429113][ C1] rcu_sched_clock_irq+0xe25/0x1ad0 [ 177.434304][ C1] ? trace_hardirqs_off+0x74/0x80 [ 177.439319][ C1] update_process_times+0x12d/0x180 [ 177.444509][ C1] tick_sched_timer+0x263/0x420 [ 177.449366][ C1] ? tick_setup_sched_timer+0x3d0/0x3d0 [ 177.454925][ C1] __hrtimer_run_queues+0x403/0x840 [ 177.460136][ C1] hrtimer_interrupt+0x38c/0xda0 [ 177.465079][ C1] ? debug_smp_processor_id+0x9/0x20 [ 177.470357][ C1] smp_apic_timer_interrupt+0x109/0x280 [ 177.475897][ C1] apic_timer_interrupt+0xf/0x20 [ 177.480822][ C1] [ 177.483750][ C1] RIP: 0010:free_thread_stack+0x133/0x590 [ 177.489473][ C1] Code: 00 ea ff ff 48 01 c7 be 03 00 00 00 e8 06 a2 60 00 e9 5d 04 00 00 e8 5c 2d 2e 00 48 89 df 31 f6 e8 42 af 6e 00 43 80 3c 2e 00 <74> 08 4c 89 e7 e8 43 a4 69 00 49 8b 1c 24 48 83 c3 08 48 89 d8 48 [ 177.509168][ C1] RSP: 0018:ffffc90002657908 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 177.517603][ C1] RAX: 0000000000000001 RBX: ffffea0002a58980 RCX: 0000000000000000 [ 177.525582][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffea0002a58980 [ 177.533565][ C1] RBP: ffffc90002657940 R08: dffffc0000000000 R09: fffffbfff120248a [ 177.541527][ C1] R10: fffffbfff120248a R11: 0000000000000000 R12: ffff88809047b520 [ 177.549487][ C1] R13: dffffc0000000000 R14: 1ffff1101208f6a4 R15: ffff8880a80b1a68 [ 177.557473][ C1] ? free_thread_stack+0x12e/0x590 [ 177.562575][ C1] put_task_stack+0xa3/0x130 [ 177.567163][ C1] finish_task_switch+0x3f1/0x550 [ 177.572185][ C1] __schedule+0x9a8/0xcc0 [ 177.576513][ C1] ? ___preempt_schedule+0x16/0x18 [ 177.581609][ C1] preempt_schedule+0xdb/0x120 [ 177.586360][ C1] ___preempt_schedule+0x16/0x18 [ 177.591293][ C1] _raw_spin_unlock_irqrestore+0xcc/0xe0 [ 177.596913][ C1] __call_srcu+0x7ab/0xb00 [ 177.601332][ C1] __synchronize_srcu+0x1cf/0x260 [ 177.606343][ C1] ? rcu_read_lock_any_held+0x1a0/0x1a0 [ 177.611883][ C1] synchronize_srcu+0x2cb/0x2f0 [ 177.616736][ C1] fsnotify_connector_destroy_workfn+0x44/0xb0 [ 177.622876][ C1] process_one_work+0x7ef/0x10d0 [ 177.627820][ C1] worker_thread+0xc01/0x1630 [ 177.632505][ C1] kthread+0x332/0x350 [ 177.636562][ C1] ? rcu_lock_release+0x30/0x30 [ 177.641403][ C1] ? kthread_blkcg+0xe0/0xe0 [ 177.645980][ C1] ret_from_fork+0x24/0x30