[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 45.165742][ T26] audit: type=1800 audit(1575464534.628:25): pid=8181 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 45.191394][ T26] audit: type=1800 audit(1575464534.628:26): pid=8181 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 45.219117][ T26] audit: type=1800 audit(1575464534.628:27): pid=8181 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.15.195' (ECDSA) to the list of known hosts. 2019/12/04 13:02:23 fuzzer started 2019/12/04 13:02:25 dialing manager at 10.128.0.26:36481 2019/12/04 13:02:25 syscalls: 2691 2019/12/04 13:02:25 code coverage: enabled 2019/12/04 13:02:25 comparison tracing: enabled 2019/12/04 13:02:25 extra coverage: extra coverage is not supported by the kernel 2019/12/04 13:02:25 setuid sandbox: enabled 2019/12/04 13:02:25 namespace sandbox: enabled 2019/12/04 13:02:25 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/04 13:02:25 fault injection: enabled 2019/12/04 13:02:25 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/04 13:02:25 net packet injection: enabled 2019/12/04 13:02:25 net device setup: enabled 2019/12/04 13:02:25 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/12/04 13:02:25 devlink PCI setup: PCI device 0000:00:10.0 is not available 13:02:26 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) bpf$MAP_CREATE(0xa, &(0x7f0000000000), 0x338) 13:02:26 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8000400) openat(0xffffffffffffffff, &(0x7f00000001c0)='./bus\x00', 0x0, 0x0) r3 = socket(0x1e, 0x805, 0x0) close(r3) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f000095dffc)=0x42) setsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000100)=@assoc_value={r5}, 0x8) syzkaller login: [ 56.938367][ T8348] IPVS: ftp: loaded support on port[0] = 21 [ 57.013033][ T8350] IPVS: ftp: loaded support on port[0] = 21 13:02:26 executing program 2: creat(0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, 0xffffffffffffffff, 0x0) fstat(0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f00000006c0)) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000400)={0xa0, 0x19, 0x1, {0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x8, 0x100000000, 0x0, 0x4, 0x0, 0x0, 0x1ff}}, 0x53) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x0, 0x0) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='mountinfo\x00') preadv(r0, &(0x7f0000000700)=[{&(0x7f0000000140)=""/191, 0xbf}], 0x1, 0xffffffd) ioctl$PPPIOCGNPMODE(0xffffffffffffffff, 0xc008744c, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ') openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) write$vhci(0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0) [ 57.128943][ T8348] chnl_net:caif_netlink_parms(): no params data found [ 57.215521][ T8350] chnl_net:caif_netlink_parms(): no params data found [ 57.260458][ T8348] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.271241][ T8348] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.279832][ T8348] device bridge_slave_0 entered promiscuous mode [ 57.308808][ T8348] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.317221][ T8348] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.327281][ T8348] device bridge_slave_1 entered promiscuous mode [ 57.346765][ T8350] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.354621][ T8350] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.373849][ T8350] device bridge_slave_0 entered promiscuous mode 13:02:26 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @mcast1, 0x2b22}, 0x1c) [ 57.408989][ T8350] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.417400][ T8350] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.427704][ T8350] device bridge_slave_1 entered promiscuous mode [ 57.448095][ T8348] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.487316][ T8348] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.521084][ T8350] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.549959][ T8354] IPVS: ftp: loaded support on port[0] = 21 [ 57.577211][ T8350] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.598417][ T8348] team0: Port device team_slave_0 added [ 57.627986][ T8348] team0: Port device team_slave_1 added [ 57.652676][ T8350] team0: Port device team_slave_0 added [ 57.675392][ T8350] team0: Port device team_slave_1 added 13:02:27 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="10000000140081ae00d175040f62b04a", 0x10}], 0x1}, 0x0) [ 57.709398][ T8356] IPVS: ftp: loaded support on port[0] = 21 [ 57.809523][ T8348] device hsr_slave_0 entered promiscuous mode [ 57.874151][ T8348] device hsr_slave_1 entered promiscuous mode 13:02:27 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) r0 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x7d, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000380)={r1, @in={{0x2, 0x0, @empty}}}, 0x90) syz_mount_image$bfs(&(0x7f0000000100)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xffffffffffffffd7, 0x80}], 0x81, 0x0) [ 58.006442][ T8350] device hsr_slave_0 entered promiscuous mode [ 58.034025][ T8350] device hsr_slave_1 entered promiscuous mode [ 58.073796][ T8350] debugfs: Directory 'hsr0' with parent '/' already present! [ 58.100949][ T8358] IPVS: ftp: loaded support on port[0] = 21 [ 58.179827][ T8348] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 58.239155][ T8348] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 58.311428][ T8360] IPVS: ftp: loaded support on port[0] = 21 [ 58.345631][ T8348] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 58.397406][ T8348] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 58.437723][ T8350] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 58.517077][ T8350] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 58.581396][ T8354] chnl_net:caif_netlink_parms(): no params data found [ 58.600924][ T8350] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 58.655484][ T8350] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 58.759227][ T8354] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.766900][ T8354] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.775928][ T8354] device bridge_slave_0 entered promiscuous mode [ 58.786581][ T8354] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.793728][ T8354] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.801446][ T8354] device bridge_slave_1 entered promiscuous mode [ 58.830091][ T8354] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.858270][ T8354] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.922042][ T8354] team0: Port device team_slave_0 added [ 58.929685][ T8354] team0: Port device team_slave_1 added [ 58.969525][ T8356] chnl_net:caif_netlink_parms(): no params data found [ 59.037586][ T8354] device hsr_slave_0 entered promiscuous mode [ 59.094104][ T8354] device hsr_slave_1 entered promiscuous mode [ 59.133685][ T8354] debugfs: Directory 'hsr0' with parent '/' already present! [ 59.202327][ T8354] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 59.237261][ T8354] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 59.335586][ T8358] chnl_net:caif_netlink_parms(): no params data found [ 59.354843][ T8356] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.362381][ T8356] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.371899][ T8356] device bridge_slave_0 entered promiscuous mode [ 59.381237][ T8356] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.390361][ T8356] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.398850][ T8356] device bridge_slave_1 entered promiscuous mode [ 59.408402][ T8354] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 59.475922][ T8354] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 59.547350][ T8360] chnl_net:caif_netlink_parms(): no params data found [ 59.611585][ T8356] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.625287][ T8348] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.633522][ T8360] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.640755][ T8360] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.648572][ T8360] device bridge_slave_0 entered promiscuous mode [ 59.657641][ T8358] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.665158][ T8358] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.672855][ T8358] device bridge_slave_0 entered promiscuous mode [ 59.682018][ T8358] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.689845][ T8358] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.698467][ T8358] device bridge_slave_1 entered promiscuous mode [ 59.707865][ T8356] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.721979][ T8360] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.730330][ T8360] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.738420][ T8360] device bridge_slave_1 entered promiscuous mode [ 59.767286][ T8356] team0: Port device team_slave_0 added [ 59.788586][ T8356] team0: Port device team_slave_1 added [ 59.799073][ T8348] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.808127][ T8360] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.820778][ T8360] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.839600][ T8350] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.848259][ T8358] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.859858][ T2966] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.868661][ T2966] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.886456][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.895307][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.904467][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.911642][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.921265][ T8366] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.938666][ T8358] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.969580][ T8358] team0: Port device team_slave_0 added [ 59.978769][ T8360] team0: Port device team_slave_0 added [ 59.986577][ T8360] team0: Port device team_slave_1 added [ 60.036445][ T8356] device hsr_slave_0 entered promiscuous mode [ 60.084745][ T8356] device hsr_slave_1 entered promiscuous mode [ 60.124139][ T8356] debugfs: Directory 'hsr0' with parent '/' already present! [ 60.134815][ T8358] team0: Port device team_slave_1 added [ 60.168942][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.177926][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.186540][ T3070] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.193654][ T3070] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.201433][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.209856][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.217641][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.226502][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.235257][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.244102][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.253619][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.325715][ T8360] device hsr_slave_0 entered promiscuous mode [ 60.375040][ T8360] device hsr_slave_1 entered promiscuous mode [ 60.413793][ T8360] debugfs: Directory 'hsr0' with parent '/' already present! [ 60.426221][ T8350] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.476420][ T8358] device hsr_slave_0 entered promiscuous mode [ 60.514128][ T8358] device hsr_slave_1 entered promiscuous mode [ 60.553754][ T8358] debugfs: Directory 'hsr0' with parent '/' already present! [ 60.573503][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.584994][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.622239][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.631969][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.640878][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.648183][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.656094][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.665402][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.673847][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.680996][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.688612][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.697466][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.708719][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.737633][ T8354] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.744692][ T8356] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 60.785234][ T8358] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 60.840306][ T8358] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 60.885983][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.897874][ T8348] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.910145][ T8348] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.921149][ T8356] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 60.956541][ T8360] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 61.027549][ T8358] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 61.096733][ T8358] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 61.175264][ T8366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.183834][ T8366] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.192099][ T8366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.206210][ T8356] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 61.245176][ T8360] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 61.296907][ T8360] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 61.365390][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.373205][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.387293][ T8354] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.394522][ T8356] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 61.440224][ T8360] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 61.496777][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.506026][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.516078][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.524583][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.532830][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.541939][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.550401][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.557506][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.565373][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.574146][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.582462][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.589567][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.597144][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.606399][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.614404][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.631105][ T2966] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.639822][ T2966] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.648854][ T2966] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.656577][ T2966] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.673500][ T8354] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 61.685150][ T8354] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.717964][ T8350] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.732027][ T8350] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.742017][ T8362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.751747][ T8362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.760426][ T8362] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.769918][ T8362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.779745][ T8362] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.788616][ T8362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.797199][ T8362] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.806015][ T8362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.814866][ T8362] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.823036][ T8362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.831673][ T8362] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.840657][ T8362] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.848817][ T8362] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.882056][ T8348] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.942860][ T8362] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.956428][ T8362] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.966361][ T8350] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.008501][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.020320][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.032338][ T8358] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.050292][ T8356] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.061757][ T8354] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.129971][ T8358] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.113531][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 167.120537][ C0] (detected by 0, t=10502 jiffies, g=7033, q=148) [ 167.127022][ C0] rcu: All QSes seen, last rcu_preempt kthread activity 10503 (4294953835-4294943332), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 167.140363][ C0] syz-executor.0 R running task 27968 8374 8348 0x0000400e [ 167.148257][ C0] Call Trace: [ 167.151527][ C0] [ 167.154458][ C0] sched_show_task+0x40f/0x560 [ 167.159213][ C0] rcu_sched_clock_irq+0x1861/0x1ad0 [ 167.164749][ C0] update_process_times+0x12d/0x180 [ 167.169935][ C0] tick_sched_timer+0x263/0x420 [ 167.174770][ C0] ? tick_setup_sched_timer+0x3d0/0x3d0 [ 167.180307][ C0] __hrtimer_run_queues+0x403/0x840 [ 167.185503][ C0] hrtimer_interrupt+0x38c/0xda0 [ 167.190441][ C0] ? debug_smp_processor_id+0x9/0x20 [ 167.195714][ C0] smp_apic_timer_interrupt+0x109/0x280 [ 167.201243][ C0] apic_timer_interrupt+0xf/0x20 [ 167.206171][ C0] [ 167.209108][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x14/0x50 [ 167.215251][ C0] Code: 00 00 00 48 8b 3d f4 3c cd 07 48 89 de e8 d4 01 3b 00 5b 5d c3 cc 48 8b 04 24 65 48 8b 0c 25 c0 1d 02 00 65 8b 15 38 84 8b 7e c2 00 01 1f 00 75 2c 8b 91 80 13 00 00 83 fa 02 75 21 48 8b 91 [ 167.234840][ C0] RSP: 0018:ffffc900023e7858 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 167.243245][ C0] RAX: ffffffff81486ea4 RBX: ffffea000260f300 RCX: ffff8880a36c0040 [ 167.251201][ C0] RDX: 0000000000000001 RSI: 000000000003ffff RDI: 0000000000040000 [ 167.259161][ C0] RBP: ffffc900023e7898 R08: dffffc0000000000 R09: fffffbfff1287a8d [ 167.267132][ C0] R10: fffffbfff1287a8d R11: 0000000000000000 R12: ffff88808fd71d20 [ 167.275087][ C0] R13: dffffc0000000000 R14: 1ffff11011fae3a4 R15: ffff8880a2aa3a28 [ 167.283054][ C0] ? free_thread_stack+0x124/0x590 [ 167.288157][ C0] ? free_thread_stack+0x124/0x590 [ 167.293255][ C0] put_task_stack+0xa3/0x130 [ 167.297833][ C0] finish_task_switch+0x3f1/0x550 [ 167.302846][ C0] __schedule+0x9a8/0xcc0 [ 167.307952][ C0] ? ___preempt_schedule+0x16/0x18 [ 167.313062][ C0] preempt_schedule+0xdb/0x120 [ 167.317813][ C0] ___preempt_schedule+0x16/0x18 [ 167.322738][ C0] try_to_wake_up+0xe78/0x1050 [ 167.327500][ C0] wake_up_q+0x8c/0xe0 [ 167.331557][ C0] futex_wake+0x51c/0x6f0 [ 167.335886][ C0] do_futex+0x3f5/0x3d60 [ 167.340135][ C0] ? __lock_acquire+0xc75/0x1be0 [ 167.345075][ C0] ? __might_fault+0xf9/0x160 [ 167.349742][ C0] ? __might_fault+0xf9/0x160 [ 167.354425][ C0] ? check_preemption_disabled+0xb4/0x260 [ 167.360126][ C0] ? debug_smp_processor_id+0x9/0x20 [ 167.365405][ C0] __se_sys_futex+0x28c/0x360 [ 167.370066][ C0] ? prepare_exit_to_usermode+0x221/0x5b0 [ 167.375770][ C0] ? trace_irq_disable_rcuidle+0x23/0x1e0 [ 167.381489][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 167.386935][ C0] __x64_sys_futex+0xe5/0x100 [ 167.391608][ C0] do_syscall_64+0xf7/0x1c0 [ 167.396148][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 167.402025][ C0] RIP: 0033:0x45a679 [ 167.405917][ C0] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 167.425507][ C0] RSP: 002b:00007f480fe27cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 167.433902][ C0] RAX: ffffffffffffffda RBX: 000000000075bf28 RCX: 000000000045a679 [ 167.441857][ C0] RDX: 00000000004c7d7c RSI: 0000000000000081 RDI: 000000000075bf2c [ 167.449831][ C0] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 167.457789][ C0] R10: 0000000000000003 R11: 0000000000000246 R12: 000000000075bf2c [ 167.466353][ C0] R13: 00007ffd9dba4ccf R14: 00007f480fe289c0 R15: 000000000075bf2c [ 167.474337][ C0] rcu: rcu_preempt kthread starved for 10538 jiffies! g7033 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 167.485446][ C0] rcu: RCU grace-period kthread stack dump: [ 167.491320][ C0] rcu_preempt R running task 29032 10 2 0x80004000 [ 167.499207][ C0] Call Trace: [ 167.502487][ C0] __schedule+0x9a0/0xcc0 [ 167.506813][ C0] schedule+0x181/0x210 [ 167.510957][ C0] schedule_timeout+0x14f/0x240 [ 167.515791][ C0] ? run_local_timers+0x120/0x120 [ 167.520832][ C0] rcu_gp_kthread+0xed8/0x1770 [ 167.525620][ C0] kthread+0x332/0x350 [ 167.529685][ C0] ? rcu_report_qs_rsp+0x140/0x140 [ 167.534784][ C0] ? kthread_blkcg+0xe0/0xe0 [ 167.539361][ C0] ret_from_fork+0x24/0x30