[ 40.773807][ T23] audit: type=1800 audit(1575346327.368:27): pid=7894 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [ 40.805327][ T23] audit: type=1800 audit(1575346327.368:28): pid=7894 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 41.338726][ T23] audit: type=1800 audit(1575346327.988:29): pid=7894 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 41.357929][ T23] audit: type=1800 audit(1575346327.998:30): pid=7894 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.201' (ECDSA) to the list of known hosts. 2019/12/03 04:12:17 fuzzer started 2019/12/03 04:12:18 dialing manager at 10.128.0.26:38907 2019/12/03 04:12:18 syscalls: 2697 2019/12/03 04:12:18 code coverage: enabled 2019/12/03 04:12:18 comparison tracing: enabled 2019/12/03 04:12:18 extra coverage: extra coverage is not supported by the kernel 2019/12/03 04:12:18 setuid sandbox: enabled 2019/12/03 04:12:18 namespace sandbox: enabled 2019/12/03 04:12:18 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/03 04:12:18 fault injection: enabled 2019/12/03 04:12:18 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/03 04:12:18 net packet injection: enabled 2019/12/03 04:12:18 net device setup: enabled 2019/12/03 04:12:18 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/12/03 04:12:18 devlink PCI setup: PCI device 0000:00:10.0 is not available 04:12:19 executing program 0: mount$fuseblk(&(0x7f0000000040)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r0 = getpgrp(0x0) setpriority(0x0, r0, 0xffff) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffd000/0x2000)=nil) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) r3 = geteuid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') syz_open_procfs(0x0, &(0x7f0000000100)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) r7 = getpgid(0x0) sched_setaffinity(r7, 0x0, 0x0) r8 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_SET(r8, 0x1, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) fstat(r6, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x6, r3, 0x0, 0x0, 0xee01, 0x83}, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x200}) shmget(0x1, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) r9 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, 0x0, 0xee01, 0x0, 0xee01}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200}) shmctl$IPC_SET(r9, 0x1, 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000102000007) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000100)={@empty, 0x2c}) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000240)={0x0, 0x1, 0x1}) socket(0x200000000000011, 0x4000000000080002, 0x0) socket(0x0, 0x1, 0x0) syz_genetlink_get_family_id$team(0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r10, 0x0, 0x24, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, 0x0) setsockopt$inet_mreqn(r10, 0x0, 0x0, &(0x7f0000002d80)={@multicast2, @local, r11}, 0xc) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, 0x0) r12 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r12, 0x0, 0x27, 0x0, 0x0) 04:12:19 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000700)='cpu.stat\x00', 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x122) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc080661a, &(0x7f00000001c0)={{0x0, 0x0, @identifier="169d87ef8d7ab7ebd2ab66e1a776a142"}}) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000440)='cgroup2\x00', 0x0, 0x0) mkdir(0x0, 0x0) r1 = creat(&(0x7f00000002c0)='./file0//ile0\x00', 0x15fe9fe02ba4aa92) rmdir(&(0x7f0000000340)='./file0//ile0\x00') r2 = epoll_create(0x0) ioprio_get$uid(0x1, 0xffffffffffffffff) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0xc0406618, &(0x7f00000004c0)={{0x0, 0x0, @reserved="b8272ff778cbf86f4ecb4712b9bbea5e91130e906521ba322b68bf21c51dbc70"}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r3 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r3, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x38}, [{0x3}]}, 0x58) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) readahead(r3, 0x1, 0x7fffffff) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$KDGKBLED(r1, 0x4b64, &(0x7f0000000300)) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924924924924f0, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x48002}, 0xc, &(0x7f00000005c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="573a1720000000", @ANYRES16=r5, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x4890}, 0x84040) connect(r4, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710, @host}, 0x80) chmod(&(0x7f0000000500)='./file0//ile0\x00', 0x0) syzkaller login: [ 53.205127][ T8060] IPVS: ftp: loaded support on port[0] = 21 04:12:20 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x2b, 0x1, 0x0) r4 = dup(r3) ioctl$NBD_SET_SOCK(r0, 0xab00, r4) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) [ 53.363077][ T8060] chnl_net:caif_netlink_parms(): no params data found [ 53.388618][ T8063] IPVS: ftp: loaded support on port[0] = 21 [ 53.462983][ T8060] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.489796][ T8060] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.497946][ T8060] device bridge_slave_0 entered promiscuous mode [ 53.531612][ T8060] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.538769][ T8060] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.546726][ T8060] device bridge_slave_1 entered promiscuous mode [ 53.586724][ T8060] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.600301][ T8060] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.615552][ T8066] IPVS: ftp: loaded support on port[0] = 21 04:12:20 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) close(r0) socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000), 0x4) [ 53.648739][ T8060] team0: Port device team_slave_0 added [ 53.699922][ T8060] team0: Port device team_slave_1 added [ 53.756512][ T8063] chnl_net:caif_netlink_parms(): no params data found 04:12:20 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x5, 0x1, 0x98}]}, &(0x7f0000000100)='GPL\x00'}, 0x48) [ 53.853323][ T8060] device hsr_slave_0 entered promiscuous mode [ 53.971654][ T8060] device hsr_slave_1 entered promiscuous mode [ 54.065830][ T8071] IPVS: ftp: loaded support on port[0] = 21 [ 54.075246][ T8069] IPVS: ftp: loaded support on port[0] = 21 04:12:20 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x3, &(0x7f0000000040)=@framed={{0x15, 0xa, 0x0, 0x0, 0x0, 0x71, 0x10, 0x69}}, &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x7f\x00'/248}, 0x48) [ 54.187753][ T8063] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.195803][ T8063] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.203836][ T8063] device bridge_slave_0 entered promiscuous mode [ 54.211392][ T8060] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.282602][ T8060] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.348044][ T8066] chnl_net:caif_netlink_parms(): no params data found [ 54.357083][ T8063] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.364463][ T8063] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.373276][ T8063] device bridge_slave_1 entered promiscuous mode [ 54.392015][ T8063] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.401954][ T8060] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.462540][ T8060] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.534766][ T8074] IPVS: ftp: loaded support on port[0] = 21 [ 54.546559][ T8063] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.572298][ T8063] team0: Port device team_slave_0 added [ 54.606881][ T8063] team0: Port device team_slave_1 added [ 54.628448][ T8066] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.636586][ T8066] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.644387][ T8066] device bridge_slave_0 entered promiscuous mode [ 54.652465][ T8066] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.659817][ T8066] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.667377][ T8066] device bridge_slave_1 entered promiscuous mode [ 54.684616][ T8066] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.706209][ T8066] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.745308][ T8066] team0: Port device team_slave_0 added [ 54.754691][ T8066] team0: Port device team_slave_1 added [ 54.801737][ T8063] device hsr_slave_0 entered promiscuous mode [ 54.869128][ T8063] device hsr_slave_1 entered promiscuous mode [ 54.919061][ T8063] debugfs: Directory 'hsr0' with parent '/' already present! [ 54.950605][ T8071] chnl_net:caif_netlink_parms(): no params data found [ 55.041759][ T8066] device hsr_slave_0 entered promiscuous mode [ 55.109128][ T8066] device hsr_slave_1 entered promiscuous mode [ 55.158952][ T8066] debugfs: Directory 'hsr0' with parent '/' already present! [ 55.223473][ T8071] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.233087][ T8071] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.240846][ T8071] device bridge_slave_0 entered promiscuous mode [ 55.275280][ T8071] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.283910][ T8071] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.292027][ T8071] device bridge_slave_1 entered promiscuous mode [ 55.299173][ T8063] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 55.350775][ T8069] chnl_net:caif_netlink_parms(): no params data found [ 55.359961][ T8074] chnl_net:caif_netlink_parms(): no params data found [ 55.368431][ T8063] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 55.421346][ T8063] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 55.463445][ T8063] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 55.543189][ T8066] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 55.595913][ T8066] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 55.660407][ T8066] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 55.703282][ T8066] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 55.770108][ T8071] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.782584][ T8071] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.815924][ T8069] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.823220][ T8069] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.831343][ T8069] device bridge_slave_0 entered promiscuous mode [ 55.838744][ T8069] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.845905][ T8069] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.855428][ T8069] device bridge_slave_1 entered promiscuous mode [ 55.872860][ T8071] team0: Port device team_slave_0 added [ 55.880282][ T8074] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.887310][ T8074] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.894989][ T8074] device bridge_slave_0 entered promiscuous mode [ 55.903003][ T8074] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.910191][ T8074] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.917819][ T8074] device bridge_slave_1 entered promiscuous mode [ 55.927393][ T8069] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.938205][ T8071] team0: Port device team_slave_1 added [ 55.961781][ T8069] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.031609][ T8071] device hsr_slave_0 entered promiscuous mode [ 56.089270][ T8071] device hsr_slave_1 entered promiscuous mode [ 56.128960][ T8071] debugfs: Directory 'hsr0' with parent '/' already present! [ 56.137842][ T8074] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.149734][ T8074] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.181563][ T8069] team0: Port device team_slave_0 added [ 56.189515][ T8069] team0: Port device team_slave_1 added [ 56.204932][ T8074] team0: Port device team_slave_0 added [ 56.212337][ T8074] team0: Port device team_slave_1 added [ 56.222638][ T8060] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.302323][ T8069] device hsr_slave_0 entered promiscuous mode [ 56.339139][ T8069] device hsr_slave_1 entered promiscuous mode [ 56.378939][ T8069] debugfs: Directory 'hsr0' with parent '/' already present! [ 56.386605][ T8071] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 56.435071][ T8071] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 56.531519][ T8074] device hsr_slave_0 entered promiscuous mode [ 56.569340][ T8074] device hsr_slave_1 entered promiscuous mode [ 56.608999][ T8074] debugfs: Directory 'hsr0' with parent '/' already present! [ 56.626376][ T8071] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 56.660679][ T8071] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 56.718272][ T8066] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.740811][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.750165][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.772265][ T8066] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.783644][ T8060] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.795937][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.804265][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.828748][ T8065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.837693][ T8065] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.846643][ T8065] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.853874][ T8065] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.865468][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.873963][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.882639][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.891148][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.898333][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.906781][ T8069] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 56.971082][ T8069] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 57.026998][ T8063] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.039184][ T8075] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.052684][ T8075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.063169][ T8075] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.072461][ T8075] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.079554][ T8075] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.087540][ T8069] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 57.151388][ T8069] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 57.219428][ T8074] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 57.286803][ T8076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.295684][ T8076] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.304173][ T8076] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.311290][ T8076] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.319154][ T8076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.328239][ T8076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.343918][ T8063] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.362478][ T8074] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 57.421078][ T8074] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 57.461697][ T8075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.470328][ T8075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.477840][ T8075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.487441][ T8075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.496167][ T8075] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.504415][ T8075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.523787][ T8060] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 57.535584][ T8060] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.560502][ T8074] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 57.621849][ T8075] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.630819][ T8075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.639858][ T8075] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.648172][ T8075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.656864][ T8075] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.665284][ T8075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.673839][ T8075] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.682105][ T8075] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.689179][ T8075] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.696977][ T8075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.705627][ T8075] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.714209][ T8075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.723725][ T8075] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.732108][ T8075] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.739181][ T8075] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.747069][ T8075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.755828][ T8075] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.764242][ T8075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.772915][ T8075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.781400][ T8075] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.790987][ T8075] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.798697][ T8075] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.806920][ T8075] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.830117][ T8076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.838392][ T8076] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.847304][ T8076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.856925][ T8076] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.881542][ T8076] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.889779][ T8076] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.897159][ T8076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.906383][ T8076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.915931][ T8076] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.926213][ T8076] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.935003][ T8066] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.945428][ T8060] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.964388][ T8071] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.986327][ T876] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.995552][ T876] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.004920][ T876] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.014368][ T876] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.027705][ T8063] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.039758][ T8063] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.064291][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.081107][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.099781][ T8066] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.114016][ T8071] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.122097][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.135581][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.143317][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.151585][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.169252][ T8063] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.200197][ T8076] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.207629][ T8076] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.249364][ T8076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.257974][ T8076] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.309453][ T8088] block nbd2: shutting down sockets [ 163.298806][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 163.305547][ C0] rcu: 0-...!: (10500 ticks this GP) idle=fe6/1/0x4000000000000002 softirq=10296/10296 fqs=6 [ 163.316073][ C0] (t=10501 jiffies g=6089 q=74) [ 163.321027][ C0] rcu: rcu_preempt kthread starved for 10490 jiffies! g6089 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 163.332114][ C0] rcu: RCU grace-period kthread stack dump: [ 163.337993][ C0] rcu_preempt R running task 29032 10 2 0x80004000 [ 163.345887][ C0] Call Trace: [ 163.349181][ C0] __schedule+0x9a0/0xcc0 [ 163.353977][ C0] schedule+0x181/0x210 [ 163.358124][ C0] schedule_timeout+0x14f/0x240 [ 163.362966][ C0] ? run_local_timers+0x120/0x120 [ 163.367999][ C0] rcu_gp_kthread+0xed8/0x1770 [ 163.372774][ C0] kthread+0x332/0x350 [ 163.376848][ C0] ? rcu_report_qs_rsp+0x140/0x140 [ 163.381963][ C0] ? kthread_blkcg+0xe0/0xe0 [ 163.386542][ C0] ret_from_fork+0x24/0x30 [ 163.390967][ C0] NMI backtrace for cpu 0 [ 163.395296][ C0] CPU: 0 PID: 8083 Comm: blkid Not tainted 5.4.0-syzkaller #0 [ 163.402747][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 163.412910][ C0] Call Trace: [ 163.416194][ C0] [ 163.419070][ C0] dump_stack+0x1fb/0x318 [ 163.423394][ C0] nmi_cpu_backtrace+0xaf/0x1a0 [ 163.428266][ C0] ? nmi_trigger_cpumask_backtrace+0x16d/0x290 [ 163.434428][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 163.440490][ C0] nmi_trigger_cpumask_backtrace+0x174/0x290 [ 163.446460][ C0] arch_trigger_cpumask_backtrace+0x10/0x20 [ 163.452448][ C0] rcu_dump_cpu_stacks+0x15a/0x220 [ 163.457567][ C0] rcu_sched_clock_irq+0xe25/0x1ad0 [ 163.462757][ C0] ? trace_hardirqs_off+0x74/0x80 [ 163.467771][ C0] update_process_times+0x12d/0x180 [ 163.472964][ C0] tick_sched_timer+0x263/0x420 [ 163.477805][ C0] ? tick_setup_sched_timer+0x3d0/0x3d0 [ 163.483339][ C0] __hrtimer_run_queues+0x403/0x840 [ 163.488545][ C0] hrtimer_interrupt+0x38c/0xda0 [ 163.493485][ C0] ? debug_smp_processor_id+0x9/0x20 [ 163.498765][ C0] smp_apic_timer_interrupt+0x109/0x280 [ 163.504294][ C0] apic_timer_interrupt+0xf/0x20 [ 163.509224][ C0] [ 163.512166][ C0] RIP: 0010:mod_memcg_page_state+0x30/0x190 [ 163.518056][ C0] Code: 41 56 41 54 53 41 89 f6 48 89 fb e8 da 28 2e 00 48 83 c3 38 48 89 d8 48 c1 e8 03 49 bc 00 00 00 00 00 fc ff df 42 80 3c 20 00 <74> 08 48 89 df e8 b6 9f 69 00 48 8b 1b 48 85 db 0f 84 d8 00 00 00 [ 163.537658][ C0] RSP: 0018:ffffc900023178c0 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 163.546058][ C0] RAX: 1ffffd40005368df RBX: ffffea00029b46f8 RCX: ffff8880a8c6c5c0 [ 163.554017][ C0] RDX: 0000000000000000 RSI: 00000000fffffffc RDI: ffffea00029b46c0 [ 163.561973][ C0] RBP: ffffc900023178e0 R08: 000000000003a768 R09: ffffed10150a7ea7 [ 163.569941][ C0] R10: ffffed10150a7ea7 R11: 0000000000000000 R12: dffffc0000000000 [ 163.577895][ C0] R13: dffffc0000000000 R14: 00000000fffffffc R15: ffff8880a853f528 [ 163.585896][ C0] free_thread_stack+0x168/0x590 [ 163.590830][ C0] put_task_stack+0xa3/0x130 [ 163.595414][ C0] finish_task_switch+0x3f1/0x550 [ 163.600436][ C0] __schedule+0x9a8/0xcc0 [ 163.604763][ C0] ? ___preempt_schedule+0x16/0x18 [ 163.609857][ C0] preempt_schedule+0xdb/0x120 [ 163.614608][ C0] ___preempt_schedule+0x16/0x18 [ 163.619533][ C0] _raw_spin_unlock+0x3a/0x40 [ 163.624191][ C0] validate_mm+0x5e3/0x9b0 [ 163.628605][ C0] __vma_adjust+0x2280/0x2390 [ 163.633290][ C0] __split_vma+0x356/0x490 [ 163.637699][ C0] split_vma+0x7a/0xd0 [ 163.641763][ C0] mprotect_fixup+0x63d/0x790 [ 163.646434][ C0] ? security_file_mprotect+0xa8/0xd0 [ 163.651807][ C0] do_mprotect_pkey+0x6c2/0x8d0 [ 163.656650][ C0] __x64_sys_mprotect+0x80/0x90 [ 163.661484][ C0] do_syscall_64+0xf7/0x1c0 [ 163.665973][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 163.671850][ C0] RIP: 0033:0x7f45e26f5447 [ 163.676252][ C0] Code: 73 01 c3 48 8d 0d 5d ad 20 00 31 d2 48 29 c2 89 11 48 83 c8 ff eb eb 90 90 90 90 90 90 90 90 90 90 90 90 b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8d 0d 2d ad 20 00 31 d2 48 29 c2 89 [ 163.695841][ C0] RSP: 002b:00007ffde9e1c8a8 EFLAGS: 00000206 ORIG_RAX: 000000000000000a [ 163.704235][ C0] RAX: ffffffffffffffda RBX: 00007f45e28f7000 RCX: 00007f45e26f5447 [ 163.712189][ C0] RDX: 0000000000000000 RSI: 00000000001ff000 RDI: 00007f45e1f2a000 [ 163.720142][ C0] RBP: 00007ffde9e1cba0 R08: 0000000000000003 R09: 0000000000000000 [ 163.728096][ C0] R10: 0000000000000001 R11: 0000000000000206 R12: 00007ffde9e1cc88 [ 163.736052][ C0] R13: 0000000000000002 R14: 0000000000000030 R15: 00007ffde9e1c8f0