[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 45.151241][ T23] audit: type=1800 audit(1575437934.247:25): pid=8059 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 45.176814][ T23] audit: type=1800 audit(1575437934.247:26): pid=8059 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 45.226848][ T23] audit: type=1800 audit(1575437934.257:27): pid=8059 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.33' (ECDSA) to the list of known hosts. 2019/12/04 05:39:02 fuzzer started 2019/12/04 05:39:03 dialing manager at 10.128.0.26:42111 2019/12/04 05:39:04 syscalls: 2689 2019/12/04 05:39:04 code coverage: enabled 2019/12/04 05:39:04 comparison tracing: enabled 2019/12/04 05:39:04 extra coverage: extra coverage is not supported by the kernel 2019/12/04 05:39:04 setuid sandbox: enabled 2019/12/04 05:39:04 namespace sandbox: enabled 2019/12/04 05:39:04 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/04 05:39:04 fault injection: enabled 2019/12/04 05:39:04 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/04 05:39:04 net packet injection: enabled 2019/12/04 05:39:04 net device setup: enabled 2019/12/04 05:39:04 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/12/04 05:39:04 devlink PCI setup: PCI device 0000:00:10.0 is not available 05:39:05 executing program 0: symlink(&(0x7f0000000140)='..', &(0x7f00000000c0)='./file0\x00') r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa800}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) r2 = dup2(r0, r1) write$FUSE_DIRENT(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="100000000600"/16], 0x10) 05:39:05 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000140)='GPL\x00', 0x1, 0xc3, &(0x7f0000000240)=""/195}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x1000000000000f, &(0x7f0000000180)=0x57bb, 0x2ca) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f0000009000)=r0, 0x4) syzkaller login: [ 56.094997][ T8225] IPVS: ftp: loaded support on port[0] = 21 [ 56.243521][ T8225] chnl_net:caif_netlink_parms(): no params data found [ 56.286322][ T8225] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.295874][ T8225] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.303894][ T8225] device bridge_slave_0 entered promiscuous mode [ 56.314872][ T8225] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.322208][ T8225] bridge0: port 2(bridge_slave_1) entered disabled state 05:39:05 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) [ 56.331023][ T8225] device bridge_slave_1 entered promiscuous mode [ 56.353886][ T8225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.378687][ T8225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.389175][ T8228] IPVS: ftp: loaded support on port[0] = 21 [ 56.454808][ T8225] team0: Port device team_slave_0 added [ 56.489727][ T8225] team0: Port device team_slave_1 added 05:39:05 executing program 3: setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000180)={@in={{0x2, 0x0, @remote}}, 0x0, 0x0, 0x0, "5c7d866ff43751f8873fcb0dab400c418118817f88dd32c8a5bd1f9694cbaa0000000000007f422dd7098bd36505c1c3e348680b1006156fe10ef3d50b45685df5fda61c86a7608eaf0a00"}, 0x349) r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, 0x0, &(0x7f0000000140)) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000040)=0x90) [ 56.571196][ T8225] device hsr_slave_0 entered promiscuous mode [ 56.647842][ T8225] device hsr_slave_1 entered promiscuous mode [ 56.743075][ T8230] IPVS: ftp: loaded support on port[0] = 21 [ 56.753459][ T8233] IPVS: ftp: loaded support on port[0] = 21 [ 56.821243][ T8228] chnl_net:caif_netlink_parms(): no params data found 05:39:06 executing program 4: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @dev}, 0x14) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x0, 0x8de7d8f023d06bd7}, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) [ 56.882339][ T8225] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.940401][ T8225] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 57.002555][ T8225] netdevsim netdevsim0 netdevsim2: renamed from eth2 05:39:06 executing program 5: gettid() r0 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x3, 0x10080) ioctl$PPPIOCGIDLE(r0, 0x8010743f, &(0x7f00000003c0)) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000180), 0x4) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) times(&(0x7f0000000100)) bind$rxrpc(r0, &(0x7f00000001c0)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e20, 0x10000, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3}}, 0x24) r1 = getpgrp(0x0) setpriority(0x0, r1, 0xffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000040)=ANY=[@ANYBLOB='[DTmS::],0::'], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ceph\x00', 0x0, 0x0) [ 57.076472][ T8225] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 57.132513][ T8228] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.144027][ T8228] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.152257][ T8228] device bridge_slave_0 entered promiscuous mode [ 57.164866][ T8228] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.171927][ T8228] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.182623][ T8228] device bridge_slave_1 entered promiscuous mode [ 57.204380][ T8235] IPVS: ftp: loaded support on port[0] = 21 [ 57.260389][ T8225] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.267590][ T8225] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.275321][ T8225] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.282405][ T8225] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.298281][ T8228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.324849][ T8239] IPVS: ftp: loaded support on port[0] = 21 [ 57.332123][ T3007] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.339817][ T3007] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.354013][ T8228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.363244][ T8233] chnl_net:caif_netlink_parms(): no params data found [ 57.429091][ T8228] team0: Port device team_slave_0 added [ 57.461566][ T8228] team0: Port device team_slave_1 added [ 57.467565][ T8233] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.474817][ T8233] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.482491][ T8233] device bridge_slave_0 entered promiscuous mode [ 57.491708][ T8233] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.498804][ T8233] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.506372][ T8233] device bridge_slave_1 entered promiscuous mode [ 57.521536][ T8230] chnl_net:caif_netlink_parms(): no params data found [ 57.537314][ T8233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.548352][ T8233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.613722][ T8233] team0: Port device team_slave_0 added [ 57.623826][ T8233] team0: Port device team_slave_1 added [ 57.679808][ T8228] device hsr_slave_0 entered promiscuous mode [ 57.737180][ T8228] device hsr_slave_1 entered promiscuous mode [ 57.776907][ T8228] debugfs: Directory 'hsr0' with parent '/' already present! [ 57.801250][ T8230] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.808717][ T8230] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.816271][ T8230] device bridge_slave_0 entered promiscuous mode [ 57.888556][ T8233] device hsr_slave_0 entered promiscuous mode [ 57.958525][ T8233] device hsr_slave_1 entered promiscuous mode [ 58.006865][ T8233] debugfs: Directory 'hsr0' with parent '/' already present! [ 58.017043][ T8230] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.024100][ T8230] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.032511][ T8230] device bridge_slave_1 entered promiscuous mode [ 58.049103][ T8235] chnl_net:caif_netlink_parms(): no params data found [ 58.106215][ T8230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.124839][ T8230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.145156][ T8239] chnl_net:caif_netlink_parms(): no params data found [ 58.166097][ T8235] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.174238][ T8235] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.181870][ T8235] device bridge_slave_0 entered promiscuous mode [ 58.192947][ T8235] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.200822][ T8235] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.208665][ T8235] device bridge_slave_1 entered promiscuous mode [ 58.220980][ T8225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.254652][ T8228] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 58.301946][ T8228] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 58.369806][ T8228] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 58.424002][ T8233] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 58.459128][ T8233] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 58.510539][ T8230] team0: Port device team_slave_0 added [ 58.517990][ T8235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.534418][ T8228] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 58.598676][ T8233] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 58.660578][ T8230] team0: Port device team_slave_1 added [ 58.666326][ T8233] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 58.722347][ T8235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.744166][ T8235] team0: Port device team_slave_0 added [ 58.755302][ T8235] team0: Port device team_slave_1 added [ 58.819421][ T8230] device hsr_slave_0 entered promiscuous mode [ 58.857208][ T8230] device hsr_slave_1 entered promiscuous mode [ 58.916922][ T8230] debugfs: Directory 'hsr0' with parent '/' already present! [ 58.925815][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.934753][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.945373][ T8225] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.953368][ T8239] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.960891][ T8239] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.968999][ T8239] device bridge_slave_0 entered promiscuous mode [ 58.993437][ T8239] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.001384][ T8239] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.009150][ T8239] device bridge_slave_1 entered promiscuous mode [ 59.090186][ T8235] device hsr_slave_0 entered promiscuous mode [ 59.137207][ T8235] device hsr_slave_1 entered promiscuous mode [ 59.186957][ T8235] debugfs: Directory 'hsr0' with parent '/' already present! [ 59.196466][ T8239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.207839][ T8239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.232835][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.243088][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.251697][ T3007] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.258761][ T3007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.320002][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.329232][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.337966][ T3007] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.344997][ T3007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.353057][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.361949][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.370621][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.379046][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.387734][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.401006][ T8235] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 59.460212][ T8235] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 59.519635][ T8235] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 59.580228][ T8235] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 59.638377][ T8239] team0: Port device team_slave_0 added [ 59.645604][ T8239] team0: Port device team_slave_1 added [ 59.655440][ T8240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.664496][ T8240] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.676617][ T8233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.693551][ T8230] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 59.748799][ T8230] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 59.797622][ T8240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.805912][ T8240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.824277][ T8230] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 59.911419][ T8239] device hsr_slave_0 entered promiscuous mode [ 59.958369][ T8239] device hsr_slave_1 entered promiscuous mode [ 59.996923][ T8239] debugfs: Directory 'hsr0' with parent '/' already present! [ 60.004552][ T8230] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 60.070566][ T8228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.080896][ T8225] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.093951][ T8225] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.103233][ T8237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.112789][ T8237] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.127123][ T8233] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.143353][ T8228] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.159930][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.168176][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.175697][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.183630][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.223643][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.233363][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.241926][ T3007] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.248999][ T3007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.257553][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.265994][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.274474][ T3007] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.281549][ T3007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.289375][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.297949][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.306150][ T3007] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.313212][ T3007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.320799][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.329383][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.337707][ T3007] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.344728][ T3007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.352420][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.360885][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.369326][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.377875][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.386173][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.394634][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.403262][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.411468][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.419328][ T3007] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.444021][ T8225] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.465114][ T8228] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 60.476074][ T8228] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.493405][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.502256][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.509940][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.518402][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.526556][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.534934][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.543705][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.552095][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.560371][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.569104][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.577740][ T8239] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 60.633008][ T8239] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 60.678752][ T8239] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 60.730661][ T8239] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 60.788619][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.796119][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.803889][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.813154][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.821916][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.829462][ T2764] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.855525][ T8233] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 60.866479][ T8233] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.891891][ T8235] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.906456][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.915608][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.926942][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.935091][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.944739][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.961907][ T8228] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.986446][ T8230] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.006176][ T8235] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.055627][ T8239] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.075801][ T8233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.133369][ T8235] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 61.149349][ T8235] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.190330][ T8235] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.066781][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 166.073614][ C1] rcu: 1-...!: (1 GPs behind) idle=b2e/1/0x4000000000000002 softirq=12450/12458 fqs=6 [ 166.083489][ C1] (t=10500 jiffies g=6653 q=557) [ 166.088499][ C1] rcu: rcu_preempt kthread starved for 10487 jiffies! g6653 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 166.099578][ C1] rcu: RCU grace-period kthread stack dump: [ 166.105465][ C1] rcu_preempt R running task 29032 10 2 0x80004000 [ 166.113366][ C1] Call Trace: [ 166.116664][ C1] __schedule+0x9a0/0xcc0 [ 166.121001][ C1] schedule+0x181/0x210 [ 166.125153][ C1] schedule_timeout+0x14f/0x240 [ 166.129998][ C1] ? run_local_timers+0x120/0x120 [ 166.135107][ C1] rcu_gp_kthread+0xed8/0x1770 [ 166.139875][ C1] kthread+0x332/0x350 [ 166.143933][ C1] ? rcu_report_qs_rsp+0x140/0x140 [ 166.149033][ C1] ? kthread_blkcg+0xe0/0xe0 [ 166.153614][ C1] ret_from_fork+0x24/0x30 [ 166.158039][ C1] NMI backtrace for cpu 1 [ 166.162362][ C1] CPU: 1 PID: 8247 Comm: syz-executor.0 Not tainted 5.4.0-syzkaller #0 [ 166.170577][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 166.180618][ C1] Call Trace: [ 166.183891][ C1] [ 166.186730][ C1] dump_stack+0x1fb/0x318 [ 166.191063][ C1] nmi_cpu_backtrace+0xaf/0x1a0 [ 166.195898][ C1] ? nmi_trigger_cpumask_backtrace+0x16d/0x290 [ 166.202039][ C1] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 166.208091][ C1] nmi_trigger_cpumask_backtrace+0x174/0x290 [ 166.214058][ C1] arch_trigger_cpumask_backtrace+0x10/0x20 [ 166.219940][ C1] rcu_dump_cpu_stacks+0x15a/0x220 [ 166.225043][ C1] rcu_sched_clock_irq+0xe25/0x1ad0 [ 166.230229][ C1] ? trace_hardirqs_off+0x74/0x80 [ 166.235328][ C1] update_process_times+0x12d/0x180 [ 166.240636][ C1] tick_sched_timer+0x263/0x420 [ 166.245503][ C1] ? tick_setup_sched_timer+0x3d0/0x3d0 [ 166.251046][ C1] __hrtimer_run_queues+0x403/0x840 [ 166.256255][ C1] hrtimer_interrupt+0x38c/0xda0 [ 166.261232][ C1] ? debug_smp_processor_id+0x9/0x20 [ 166.266513][ C1] smp_apic_timer_interrupt+0x109/0x280 [ 166.272046][ C1] apic_timer_interrupt+0xf/0x20 [ 166.276966][ C1] [ 166.279897][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x14/0x50 [ 166.286047][ C1] Code: 00 00 00 48 8b 3d 74 25 cd 07 48 89 de e8 64 02 3b 00 5b 5d c3 cc 48 8b 04 24 65 48 8b 0c 25 c0 1d 02 00 65 8b 15 b8 81 8b 7e c2 00 01 1f 00 75 2c 8b 91 80 13 00 00 83 fa 02 75 21 48 8b 91 [ 166.305643][ C1] RSP: 0018:ffffc900022675c8 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 166.314038][ C1] RAX: ffffffff81487433 RBX: 0000000000000000 RCX: ffff8880a4b6c040 [ 166.321996][ C1] RDX: 0000000000000001 RSI: 000000000003ffff RDI: 0000000000040000 [ 166.329966][ C1] RBP: ffffc900022675f0 R08: 000000000003a768 R09: ffffed101331aa97 [ 166.337930][ C1] R10: ffffed101331aa97 R11: 0000000000000000 R12: dffffc0000000000 [ 166.345893][ C1] R13: dffffc0000000000 R14: 00000000fffffffc R15: ffff8880998d54a8 [ 166.353881][ C1] ? mod_memcg_page_state+0x123/0x190 [ 166.359252][ C1] ? free_thread_stack+0x124/0x590 [ 166.364349][ C1] ? mod_memcg_page_state+0x123/0x190 [ 166.369709][ C1] free_thread_stack+0x168/0x590 [ 166.374636][ C1] put_task_stack+0xa3/0x130 [ 166.379214][ C1] finish_task_switch+0x3f1/0x550 [ 166.384231][ C1] __schedule+0x9a8/0xcc0 [ 166.388555][ C1] ? ___preempt_schedule+0x16/0x18 [ 166.393653][ C1] preempt_schedule+0xdb/0x120 [ 166.398406][ C1] ___preempt_schedule+0x16/0x18 [ 166.403328][ C1] ? vprintk_emit+0x2fe/0x3a0 [ 166.407985][ C1] ? vprintk_emit+0x368/0x3a0 [ 166.412649][ C1] vprintk_emit+0x36d/0x3a0 [ 166.417143][ C1] vprintk_default+0x28/0x30 [ 166.421715][ C1] vprintk_func+0x158/0x170 [ 166.426204][ C1] printk+0x62/0x8d [ 166.430000][ C1] ? kobject_uevent_env+0x5c/0x1210 [ 166.435190][ C1] kobject_uevent_env+0xc4/0x1210 [ 166.440201][ C1] ? __kasan_check_write+0x14/0x20 [ 166.445296][ C1] ? __mutex_unlock_slowpath+0x13c/0x5b0 [ 166.450922][ C1] kobject_uevent+0x1f/0x30 [ 166.455413][ C1] device_add+0xffd/0x1ad0 [ 166.459817][ C1] ? device_add+0xaf1/0x1ad0 [ 166.464403][ C1] device_create_vargs+0x1c8/0x220 [ 166.469506][ C1] bdi_register_va+0x78/0x590 [ 166.474171][ C1] super_setup_bdi_name+0xec/0x190 [ 166.479309][ C1] ? fuse_dev_install+0x177/0x1b0 [ 166.484318][ C1] fuse_fill_super_common+0x500/0xf60 [ 166.489712][ C1] ? __kasan_check_write+0x14/0x20 [ 166.494805][ C1] ? fuse_conn_init+0x5a0/0x740 [ 166.499640][ C1] fuse_fill_super+0x27a/0x330 [ 166.504393][ C1] get_tree_nodev+0xb7/0x170 [ 166.508965][ C1] ? fuse_get_tree+0xe0/0xe0 [ 166.513540][ C1] fuse_get_tree+0x92/0xe0 [ 166.517939][ C1] vfs_get_tree+0x8b/0x2a0 [ 166.522342][ C1] do_mount+0x16bb/0x24f0 [ 166.526662][ C1] ? copy_mount_options+0x308/0x3c0 [ 166.531845][ C1] ksys_mount+0xcc/0x100 [ 166.536077][ C1] __x64_sys_mount+0xbf/0xd0 [ 166.540654][ C1] do_syscall_64+0xf7/0x1c0 [ 166.545143][ C1] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 166.551022][ C1] RIP: 0033:0x45a679 [ 166.554907][ C1] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 166.574684][ C1] RSP: 002b:00007f0298150c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 166.583081][ C1] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045a679 [ 166.591036][ C1] RDX: 0000000020000240 RSI: 0000000020000200 RDI: 0000000000000000 [ 166.598989][ C1] RBP: 000000000075bf20 R08: 0000000020000400 R09: 0000000000000000 [ 166.606949][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f02981516d4 [ 166.614902][ C1] R13: 00000000004c79ea R14: 00000000004de828 R15: 00000000ffffffff