Warning: Permanently added '10.128.15.203' (ECDSA) to the list of known hosts. 2019/12/03 11:03:01 fuzzer started 2019/12/03 11:03:03 dialing manager at 10.128.0.26:38907 2019/12/03 11:03:03 syscalls: 2697 2019/12/03 11:03:03 code coverage: enabled 2019/12/03 11:03:03 comparison tracing: enabled 2019/12/03 11:03:03 extra coverage: extra coverage is not supported by the kernel 2019/12/03 11:03:03 setuid sandbox: enabled 2019/12/03 11:03:03 namespace sandbox: enabled 2019/12/03 11:03:03 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/03 11:03:03 fault injection: enabled 2019/12/03 11:03:03 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/03 11:03:03 net packet injection: enabled 2019/12/03 11:03:03 net device setup: enabled 2019/12/03 11:03:03 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/12/03 11:03:03 devlink PCI setup: PCI device 0000:00:10.0 is not available 11:03:04 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000180)=ANY=[@ANYBLOB="7f08040403400900ff010000400001000073c6e369002300b6674c28838e4a81000000000010010000f35900d54a00000000fe80000eda961150ae2ab95b11b26b580000000000000000e8e700a200f90000bb4000000000009b0365030fb426870e43f933a4c3180000000000561e9d4c6e82b4374a019022911771a2fe97b2b1b5f21d6359934eea1d"], 0x48) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x6, 0x0, 0x0) 11:03:04 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) shmctl$IPC_STAT(0x0, 0x2, 0x0) syzkaller login: [ 56.071412][ T8184] IPVS: ftp: loaded support on port[0] = 21 [ 56.233312][ T8186] IPVS: ftp: loaded support on port[0] = 21 [ 56.242338][ T8184] chnl_net:caif_netlink_parms(): no params data found 11:03:04 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r0, 0x1, 0x2000000000f, &(0x7f0000f10000)=0xfffff82d, 0x4) bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="580000001500add427323b472545b45602117fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) [ 56.321998][ T8184] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.330779][ T8184] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.340236][ T8184] device bridge_slave_0 entered promiscuous mode [ 56.365844][ T8184] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.372924][ T8184] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.397970][ T8184] device bridge_slave_1 entered promiscuous mode [ 56.479543][ T8190] IPVS: ftp: loaded support on port[0] = 21 [ 56.485968][ T8184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.504837][ T8186] chnl_net:caif_netlink_parms(): no params data found [ 56.519093][ T8184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 11:03:05 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0x4004550c, 0x0) [ 56.595493][ T8184] team0: Port device team_slave_0 added [ 56.607586][ T8186] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.615993][ T8186] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.627568][ T8186] device bridge_slave_0 entered promiscuous mode [ 56.647267][ T8184] team0: Port device team_slave_1 added [ 56.664534][ T8186] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.671603][ T8186] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.694771][ T8186] device bridge_slave_1 entered promiscuous mode 11:03:05 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clock_gettime(0x3, &(0x7f0000000000)) [ 56.796495][ T8184] device hsr_slave_0 entered promiscuous mode [ 56.846498][ T8184] device hsr_slave_1 entered promiscuous mode [ 56.911196][ T8192] IPVS: ftp: loaded support on port[0] = 21 [ 56.935794][ T8186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.955696][ T8186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.027270][ T8184] netdevsim netdevsim0 netdevsim0: renamed from eth0 11:03:05 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x7}]}}, &(0x7f0000000280)=""/240, 0x26, 0xf0, 0x8}, 0x20) [ 57.107430][ T8184] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 57.170687][ T8186] team0: Port device team_slave_0 added [ 57.181462][ T8186] team0: Port device team_slave_1 added [ 57.188030][ T8190] chnl_net:caif_netlink_parms(): no params data found [ 57.197412][ T8184] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 57.235930][ T8184] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 57.288542][ T8195] IPVS: ftp: loaded support on port[0] = 21 [ 57.311477][ T8197] IPVS: ftp: loaded support on port[0] = 21 [ 57.396230][ T8186] device hsr_slave_0 entered promiscuous mode [ 57.454106][ T8186] device hsr_slave_1 entered promiscuous mode [ 57.493970][ T8186] debugfs: Directory 'hsr0' with parent '/' already present! [ 57.511143][ T8190] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.520408][ T8190] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.528068][ T8190] device bridge_slave_0 entered promiscuous mode [ 57.552902][ T8190] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.560439][ T8190] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.568210][ T8190] device bridge_slave_1 entered promiscuous mode [ 57.590117][ T8190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.603102][ T8190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.648146][ T8190] team0: Port device team_slave_0 added [ 57.659128][ T8190] team0: Port device team_slave_1 added [ 57.672177][ T8186] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 57.826078][ T8190] device hsr_slave_0 entered promiscuous mode [ 57.864480][ T8190] device hsr_slave_1 entered promiscuous mode [ 57.924126][ T8190] debugfs: Directory 'hsr0' with parent '/' already present! [ 57.935770][ T8186] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 58.009519][ T8192] chnl_net:caif_netlink_parms(): no params data found [ 58.025242][ T8186] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 58.075773][ T8186] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 58.128404][ T8184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.161147][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.169377][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.179446][ T8190] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 58.237708][ T8184] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.249342][ T8192] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.257726][ T8192] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.265327][ T8192] device bridge_slave_0 entered promiscuous mode [ 58.273096][ T8192] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.280226][ T8192] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.287926][ T8192] device bridge_slave_1 entered promiscuous mode [ 58.297598][ T8190] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 58.357172][ T8190] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 58.428009][ T8190] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 58.494480][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.502951][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.513411][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.520553][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.529080][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.545803][ T8192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.593148][ T8192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.609327][ T8195] chnl_net:caif_netlink_parms(): no params data found [ 58.625567][ T8199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.634607][ T8199] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.642846][ T8199] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.649921][ T8199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.675372][ T8184] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 58.686714][ T8184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.700010][ T8197] chnl_net:caif_netlink_parms(): no params data found [ 58.711957][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.720497][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.730862][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.739374][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.748079][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.756703][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.765279][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.773404][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.781963][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.790342][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.799220][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.807075][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.825165][ T8192] team0: Port device team_slave_0 added [ 58.857587][ T8192] team0: Port device team_slave_1 added [ 58.897048][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.905007][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.916959][ T8184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.929283][ T8197] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.936801][ T8197] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.950012][ T8197] device bridge_slave_0 entered promiscuous mode [ 58.961350][ T8197] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.968636][ T8197] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.976438][ T8197] device bridge_slave_1 entered promiscuous mode [ 58.983592][ T8195] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.990909][ T8195] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.003285][ T8195] device bridge_slave_0 entered promiscuous mode [ 59.011278][ T8195] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.018482][ T8195] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.026380][ T8195] device bridge_slave_1 entered promiscuous mode [ 59.054499][ T8197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.078212][ T8197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.103618][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 164.110589][ C0] (detected by 0, t=10502 jiffies, g=5901, q=71) [ 164.116985][ C0] rcu: All QSes seen, last rcu_preempt kthread activity 10503 (4294953564-4294943061), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 164.130324][ C0] rcu_preempt R running task 29032 10 2 0x80004008 [ 164.138207][ C0] Call Trace: [ 164.141478][ C0] [ 164.144321][ C0] sched_show_task+0x40f/0x560 [ 164.149075][ C0] rcu_sched_clock_irq+0x1861/0x1ad0 [ 164.154351][ C0] update_process_times+0x12d/0x180 [ 164.159548][ C0] tick_sched_timer+0x263/0x420 [ 164.164379][ C0] ? tick_setup_sched_timer+0x3d0/0x3d0 [ 164.169929][ C0] __hrtimer_run_queues+0x403/0x840 [ 164.175126][ C0] hrtimer_interrupt+0x38c/0xda0 [ 164.180075][ C0] ? debug_smp_processor_id+0x9/0x20 [ 164.185348][ C0] smp_apic_timer_interrupt+0x109/0x280 [ 164.190874][ C0] apic_timer_interrupt+0xf/0x20 [ 164.195800][ C0] [ 164.198727][ C0] RIP: 0010:free_thread_stack+0x133/0x590 [ 164.204427][ C0] Code: 00 ea ff ff 48 01 c7 be 03 00 00 00 e8 06 a2 60 00 e9 5d 04 00 00 e8 5c 2d 2e 00 48 89 df 31 f6 e8 42 af 6e 00 43 80 3c 2e 00 <74> 08 4c 89 e7 e8 43 a4 69 00 49 8b 1c 24 48 83 c3 08 48 89 d8 48 [ 164.224012][ C0] RSP: 0018:ffffc90000d0fc48 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 164.232409][ C0] RAX: 0000000000000001 RBX: ffffea0001b18900 RCX: 0000000000000000 [ 164.240366][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffea0001b18900 [ 164.248327][ C0] RBP: ffffc90000d0fc80 R08: dffffc0000000000 R09: fffffbfff120248a [ 164.256280][ C0] R10: fffffbfff120248a R11: 0000000000000000 R12: ffff88806c5fa4a0 [ 164.264236][ C0] R13: dffffc0000000000 R14: 1ffff1100d8bf494 R15: ffff88808e5f18a8 [ 164.272206][ C0] ? free_thread_stack+0x12e/0x590 [ 164.277301][ C0] put_task_stack+0xa3/0x130 [ 164.281872][ C0] finish_task_switch+0x3f1/0x550 [ 164.286884][ C0] __schedule+0x9a8/0xcc0 [ 164.291205][ C0] schedule+0x181/0x210 [ 164.295349][ C0] schedule_timeout+0x14f/0x240 [ 164.300184][ C0] ? run_local_timers+0x120/0x120 [ 164.305197][ C0] rcu_gp_kthread+0xed8/0x1770 [ 164.309951][ C0] kthread+0x332/0x350 [ 164.314000][ C0] ? rcu_report_qs_rsp+0x140/0x140 [ 164.319103][ C0] ? kthread_blkcg+0xe0/0xe0 [ 164.323678][ C0] ret_from_fork+0x24/0x30 [ 164.328091][ C0] rcu: rcu_preempt kthread starved for 10524 jiffies! g5901 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 164.339166][ C0] rcu: RCU grace-period kthread stack dump: [ 164.345034][ C0] rcu_preempt R running task 29032 10 2 0x80004008 [ 164.352914][ C0] Call Trace: [ 164.356180][ C0] [ 164.359016][ C0] sched_show_task+0x40f/0x560 [ 164.363769][ C0] rcu_check_gp_kthread_starvation+0x170/0x1b0 [ 164.369909][ C0] rcu_sched_clock_irq+0x17d3/0x1ad0 [ 164.375187][ C0] update_process_times+0x12d/0x180 [ 164.380368][ C0] tick_sched_timer+0x263/0x420 [ 164.385204][ C0] ? tick_setup_sched_timer+0x3d0/0x3d0 [ 164.390732][ C0] __hrtimer_run_queues+0x403/0x840 [ 164.395927][ C0] hrtimer_interrupt+0x38c/0xda0 [ 164.400864][ C0] ? debug_smp_processor_id+0x9/0x20 [ 164.406133][ C0] smp_apic_timer_interrupt+0x109/0x280 [ 164.411658][ C0] apic_timer_interrupt+0xf/0x20 [ 164.416573][ C0] [ 164.419495][ C0] RIP: 0010:free_thread_stack+0x133/0x590 [ 164.425196][ C0] Code: 00 ea ff ff 48 01 c7 be 03 00 00 00 e8 06 a2 60 00 e9 5d 04 00 00 e8 5c 2d 2e 00 48 89 df 31 f6 e8 42 af 6e 00 43 80 3c 2e 00 <74> 08 4c 89 e7 e8 43 a4 69 00 49 8b 1c 24 48 83 c3 08 48 89 d8 48 [ 164.444781][ C0] RSP: 0018:ffffc90000d0fc48 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 164.453172][ C0] RAX: 0000000000000001 RBX: ffffea0001b18900 RCX: 0000000000000000 [ 164.461125][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffea0001b18900 [ 164.469080][ C0] RBP: ffffc90000d0fc80 R08: dffffc0000000000 R09: fffffbfff120248a [ 164.477033][ C0] R10: fffffbfff120248a R11: 0000000000000000 R12: ffff88806c5fa4a0 [ 164.484988][ C0] R13: dffffc0000000000 R14: 1ffff1100d8bf494 R15: ffff88808e5f18a8 [ 164.492960][ C0] ? free_thread_stack+0x12e/0x590 [ 164.498057][ C0] put_task_stack+0xa3/0x130 [ 164.502633][ C0] finish_task_switch+0x3f1/0x550 [ 164.507681][ C0] __schedule+0x9a8/0xcc0 [ 164.512020][ C0] schedule+0x181/0x210 [ 164.516165][ C0] schedule_timeout+0x14f/0x240 [ 164.521003][ C0] ? run_local_timers+0x120/0x120 [ 164.526029][ C0] rcu_gp_kthread+0xed8/0x1770 [ 164.530788][ C0] kthread+0x332/0x350 [ 164.534843][ C0] ? rcu_report_qs_rsp+0x140/0x140 [ 164.539942][ C0] ? kthread_blkcg+0xe0/0xe0 [ 164.544519][ C0] ret_from_fork+0x24/0x30