[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 49.372429][ T23] audit: type=1800 audit(1575396466.116:25): pid=8217 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 49.393074][ T23] audit: type=1800 audit(1575396466.116:26): pid=8217 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 49.445298][ T23] audit: type=1800 audit(1575396466.116:27): pid=8217 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.31' (ECDSA) to the list of known hosts. 2019/12/03 18:07:54 fuzzer started 2019/12/03 18:07:56 dialing manager at 10.128.0.26:42111 2019/12/03 18:07:56 syscalls: 2689 2019/12/03 18:07:56 code coverage: enabled 2019/12/03 18:07:56 comparison tracing: enabled 2019/12/03 18:07:56 extra coverage: extra coverage is not supported by the kernel 2019/12/03 18:07:56 setuid sandbox: enabled 2019/12/03 18:07:56 namespace sandbox: enabled 2019/12/03 18:07:56 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/03 18:07:56 fault injection: enabled 2019/12/03 18:07:56 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/03 18:07:56 net packet injection: enabled 2019/12/03 18:07:56 net device setup: enabled 2019/12/03 18:07:56 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/12/03 18:07:56 devlink PCI setup: PCI device 0000:00:10.0 is not available 18:07:57 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_SECURITY(r2, 0x12, 0x3, &(0x7f0000000000), 0x4a09f6) 18:07:57 executing program 1: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) mount$overlay(0x400025, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) syzkaller login: [ 60.788088][ T8383] IPVS: ftp: loaded support on port[0] = 21 18:07:57 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x12, 0x0, 0x0) unshare(0x0) getpid() sched_setscheduler(0x0, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x06', 0x1ff) socket$inet_udplite(0x2, 0x2, 0x88) ioprio_get$uid(0x3, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) lseek(0xffffffffffffffff, 0x0, 0x1) socket$inet6_sctp(0xa, 0x0, 0x84) getsockname(0xffffffffffffffff, &(0x7f00000009c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f0000000a40)=0x80) [ 60.948939][ T8383] chnl_net:caif_netlink_parms(): no params data found [ 61.017955][ T8386] IPVS: ftp: loaded support on port[0] = 21 [ 61.036847][ T8383] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.045696][ T8383] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.054170][ T8383] device bridge_slave_0 entered promiscuous mode [ 61.068325][ T8383] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.075655][ T8383] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.084724][ T8383] device bridge_slave_1 entered promiscuous mode [ 61.112847][ T8383] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.128815][ T8383] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.173734][ T8383] team0: Port device team_slave_0 added [ 61.183050][ T8383] team0: Port device team_slave_1 added 18:07:58 executing program 3: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @rand_addr=0xdd}}, 0x24) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000100100000100000005e8000000000000e458c598ba4904c77813ab29fb450a2e834efe3f87695931515781ae36a4d148f269399022f544be4fac9508cce4df4d7015eb590bbfb45e2584f446722053f1502598808b355f7b815bdb2281145dd688759944bd09b0f55e7ca54b07bd9189de8daeb173aca360f4bca4f5019235efcea227e56f94ddc8d5e02f38fdcdad2e5cc22b1f090ecf60605f3d912967"], 0x18}}], 0x1, 0x0) recvfrom(r0, 0x0, 0x0, 0x7ffffffff000, 0x0, 0x0) [ 61.306752][ T8383] device hsr_slave_0 entered promiscuous mode [ 61.394224][ T8383] device hsr_slave_1 entered promiscuous mode [ 61.502142][ T8386] chnl_net:caif_netlink_parms(): no params data found [ 61.524969][ T8389] IPVS: ftp: loaded support on port[0] = 21 18:07:58 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) r1 = socket$unix(0x1, 0x2, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r3 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x80}], 0x30}, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x344) recvmmsg(r3, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f0000003580)=""/4096, 0x300}], 0x1}}], 0x500, 0x0, 0x0) [ 61.548964][ T8383] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 61.553358][ T8391] IPVS: ftp: loaded support on port[0] = 21 [ 61.663097][ T8383] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 61.715242][ T8383] netdevsim netdevsim0 netdevsim2: renamed from eth2 18:07:58 executing program 5: r0 = socket(0x18, 0x0, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x843, 0x0, 0x0) [ 61.793623][ T8383] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 61.907224][ T8393] IPVS: ftp: loaded support on port[0] = 21 [ 61.918161][ T8386] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.927744][ T8386] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.943203][ T8386] device bridge_slave_0 entered promiscuous mode [ 61.956056][ T8383] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.963373][ T8383] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.972365][ T8383] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.979463][ T8383] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.997321][ T2726] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.006525][ T2726] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.017885][ T8386] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.025767][ T8386] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.034064][ T8386] device bridge_slave_1 entered promiscuous mode [ 62.065427][ T8386] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.086410][ T8386] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.126696][ T8386] team0: Port device team_slave_0 added [ 62.127638][ T8395] IPVS: ftp: loaded support on port[0] = 21 [ 62.190573][ T8386] team0: Port device team_slave_1 added [ 62.247050][ T8389] chnl_net:caif_netlink_parms(): no params data found [ 62.324607][ T8386] device hsr_slave_0 entered promiscuous mode [ 62.382669][ T8386] device hsr_slave_1 entered promiscuous mode [ 62.451922][ T8386] debugfs: Directory 'hsr0' with parent '/' already present! [ 62.482466][ T8391] chnl_net:caif_netlink_parms(): no params data found [ 62.497771][ T8389] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.505477][ T8389] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.513619][ T8389] device bridge_slave_0 entered promiscuous mode [ 62.523065][ T8393] chnl_net:caif_netlink_parms(): no params data found [ 62.544517][ T8389] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.551608][ T8389] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.559774][ T8389] device bridge_slave_1 entered promiscuous mode [ 62.630525][ T8389] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.642096][ T8389] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.670876][ T8393] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.679785][ T8393] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.688005][ T8393] device bridge_slave_0 entered promiscuous mode [ 62.700456][ T8393] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.707720][ T8393] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.716606][ T8393] device bridge_slave_1 entered promiscuous mode [ 62.729689][ T8391] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.737552][ T8391] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.745521][ T8391] device bridge_slave_0 entered promiscuous mode [ 62.757287][ T8389] team0: Port device team_slave_0 added [ 62.768534][ T8386] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 62.837992][ T8386] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 62.884189][ T8391] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.891305][ T8391] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.899577][ T8391] device bridge_slave_1 entered promiscuous mode [ 62.912587][ T8389] team0: Port device team_slave_1 added [ 62.931197][ T8391] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.945755][ T8391] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.957000][ T8386] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.015907][ T8386] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.075625][ T8393] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.099158][ T8391] team0: Port device team_slave_0 added [ 63.126107][ T8393] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.147543][ T8391] team0: Port device team_slave_1 added [ 63.204791][ T8391] device hsr_slave_0 entered promiscuous mode [ 63.264083][ T8391] device hsr_slave_1 entered promiscuous mode [ 63.301958][ T8391] debugfs: Directory 'hsr0' with parent '/' already present! [ 63.364785][ T8389] device hsr_slave_0 entered promiscuous mode [ 63.392313][ T8389] device hsr_slave_1 entered promiscuous mode [ 63.431859][ T8389] debugfs: Directory 'hsr0' with parent '/' already present! [ 63.459948][ T8383] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.484918][ T8393] team0: Port device team_slave_0 added [ 63.521328][ T3108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.531266][ T3108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.542340][ T8393] team0: Port device team_slave_1 added [ 63.548285][ T8395] chnl_net:caif_netlink_parms(): no params data found [ 63.560216][ T8383] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.611284][ T8391] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.651578][ T3108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.660549][ T3108] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.669196][ T3108] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.677196][ T3108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.734525][ T8393] device hsr_slave_0 entered promiscuous mode [ 63.772146][ T8393] device hsr_slave_1 entered promiscuous mode [ 63.821951][ T8393] debugfs: Directory 'hsr0' with parent '/' already present! [ 63.834236][ T8391] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.913891][ T8391] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.964350][ T8389] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.023923][ T8389] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.094886][ T8391] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.165682][ T8389] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.224598][ T3108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.233278][ T3108] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.242234][ T3108] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.249314][ T3108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.265814][ T8395] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.273310][ T8395] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.281154][ T8395] device bridge_slave_0 entered promiscuous mode [ 64.290366][ T8395] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.297628][ T8395] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.305443][ T8395] device bridge_slave_1 entered promiscuous mode [ 64.321901][ T8389] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.368738][ T3108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.377661][ T3108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.386621][ T3108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.395939][ T3108] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.416095][ T8393] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 64.473415][ T8393] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 64.525687][ T8395] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.547638][ T3108] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.555620][ T3108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.564620][ T3108] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.573600][ T3108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.582165][ T3108] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.593081][ T8393] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 64.644757][ T8393] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 64.717703][ T8395] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.752032][ T8386] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.768875][ T8395] team0: Port device team_slave_0 added [ 64.781181][ T8383] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.794723][ T8383] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.815597][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.824499][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.834743][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.843233][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.856104][ T8395] team0: Port device team_slave_1 added [ 64.925173][ T8395] device hsr_slave_0 entered promiscuous mode [ 64.962165][ T8395] device hsr_slave_1 entered promiscuous mode [ 65.001854][ T8395] debugfs: Directory 'hsr0' with parent '/' already present! [ 65.034751][ T8386] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.077230][ T8383] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.084714][ T8395] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 65.118576][ T8395] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 65.164946][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.172782][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.180394][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.189308][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.197658][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.204769][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.213219][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.242589][ T8395] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 65.265629][ T8395] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 65.327332][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.338629][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.348138][ T2726] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.355285][ T2726] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.364876][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.375979][ T8391] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.439817][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.451034][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.464495][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.479906][ T8393] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.514638][ T8389] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.537364][ T8389] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.584209][ T8389] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 65.600794][ T8389] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.635835][ T8389] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.461703][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 170.468556][ C1] rcu: 1-...!: (10499 ticks this GP) idle=362/1/0x4000000000000002 softirq=11296/11296 fqs=14 [ 170.479138][ C1] (t=10500 jiffies g=7241 q=561) [ 170.484155][ C1] rcu: rcu_preempt kthread starved for 10470 jiffies! g7241 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 170.495236][ C1] rcu: RCU grace-period kthread stack dump: [ 170.501113][ C1] rcu_preempt R running task 29032 10 2 0x80004000 [ 170.509004][ C1] Call Trace: [ 170.512295][ C1] __schedule+0x9a0/0xcc0 [ 170.516764][ C1] schedule+0x181/0x210 [ 170.520931][ C1] schedule_timeout+0x14f/0x240 [ 170.525794][ C1] ? run_local_timers+0x120/0x120 [ 170.530823][ C1] rcu_gp_kthread+0xed8/0x1770 [ 170.535588][ C1] kthread+0x332/0x350 [ 170.539643][ C1] ? rcu_report_qs_rsp+0x140/0x140 [ 170.544744][ C1] ? kthread_blkcg+0xe0/0xe0 [ 170.549673][ C1] ret_from_fork+0x24/0x30 [ 170.554095][ C1] NMI backtrace for cpu 1 [ 170.558415][ C1] CPU: 1 PID: 620 Comm: kworker/u4:8 Not tainted 5.4.0-syzkaller #0 [ 170.566373][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 170.576560][ C1] Workqueue: 0x0 (gid-cache-wq) [ 170.581571][ C1] Call Trace: [ 170.584844][ C1] [ 170.587688][ C1] dump_stack+0x1fb/0x318 [ 170.592014][ C1] nmi_cpu_backtrace+0xaf/0x1a0 [ 170.596854][ C1] ? nmi_trigger_cpumask_backtrace+0x16d/0x290 [ 170.603139][ C1] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 170.609249][ C1] nmi_trigger_cpumask_backtrace+0x174/0x290 [ 170.615240][ C1] arch_trigger_cpumask_backtrace+0x10/0x20 [ 170.621259][ C1] rcu_dump_cpu_stacks+0x15a/0x220 [ 170.626432][ C1] rcu_sched_clock_irq+0xe25/0x1ad0 [ 170.631636][ C1] ? trace_hardirqs_off+0x74/0x80 [ 170.636754][ C1] update_process_times+0x12d/0x180 [ 170.641952][ C1] tick_sched_timer+0x263/0x420 [ 170.646805][ C1] ? tick_setup_sched_timer+0x3d0/0x3d0 [ 170.652343][ C1] __hrtimer_run_queues+0x403/0x840 [ 170.657546][ C1] hrtimer_interrupt+0x38c/0xda0 [ 170.662491][ C1] ? debug_smp_processor_id+0x9/0x20 [ 170.667780][ C1] smp_apic_timer_interrupt+0x109/0x280 [ 170.673317][ C1] apic_timer_interrupt+0xf/0x20 [ 170.678238][ C1] [ 170.681168][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x22/0x50 [ 170.687309][ C1] Code: 64 02 3b 00 5b 5d c3 cc 48 8b 04 24 65 48 8b 0c 25 c0 1d 02 00 65 8b 15 b8 81 8b 7e f7 c2 00 01 1f 00 75 2c 8b 91 80 13 00 00 <83> fa 02 75 21 48 8b 91 88 13 00 00 48 8b 32 48 8d 7e 01 8b 89 84 [ 170.706926][ C1] RSP: 0018:ffffc90003107bf8 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 170.715339][ C1] RAX: ffffffff81487326 RBX: ffffea00027b07c0 RCX: ffff8880a82f4100 [ 170.723303][ C1] RDX: 0000000000000000 RSI: 00000000fffffffc RDI: ffffea00027b07c0 [ 170.731263][ C1] RBP: ffffc90003107c20 R08: dffffc0000000000 R09: fffffbfff120248a [ 170.739225][ C1] R10: fffffbfff120248a R11: 0000000000000000 R12: ffff88809fe085a0 [ 170.747191][ C1] R13: dffffc0000000000 R14: 00000000fffffffc R15: ffff88809f337928 [ 170.755172][ C1] ? mod_memcg_page_state+0x16/0x190 [ 170.760452][ C1] ? free_thread_stack+0x124/0x590 [ 170.765554][ C1] ? mod_memcg_page_state+0x16/0x190 [ 170.770828][ C1] free_thread_stack+0x168/0x590 [ 170.775756][ C1] put_task_stack+0xa3/0x130 [ 170.780336][ C1] finish_task_switch+0x3f1/0x550 [ 170.785398][ C1] __schedule+0x9a8/0xcc0 [ 170.789949][ C1] schedule+0x181/0x210 [ 170.794134][ C1] worker_thread+0x10d6/0x1630 [ 170.798926][ C1] kthread+0x332/0x350 [ 170.802992][ C1] ? rcu_lock_release+0x30/0x30 [ 170.807841][ C1] ? kthread_blkcg+0xe0/0xe0 [ 170.812423][ C1] ret_from_fork+0x24/0x30