[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 43.574945][ T25] audit: type=1800 audit(1575319898.787:25): pid=8015 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 43.594282][ T25] audit: type=1800 audit(1575319898.787:26): pid=8015 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 43.628943][ T25] audit: type=1800 audit(1575319898.797:27): pid=8015 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.78' (ECDSA) to the list of known hosts. 2019/12/02 20:51:49 fuzzer started 2019/12/02 20:51:51 dialing manager at 10.128.0.26:38907 2019/12/02 20:51:51 syscalls: 2697 2019/12/02 20:51:51 code coverage: enabled 2019/12/02 20:51:51 comparison tracing: enabled 2019/12/02 20:51:51 extra coverage: extra coverage is not supported by the kernel 2019/12/02 20:51:51 setuid sandbox: enabled 2019/12/02 20:51:51 namespace sandbox: enabled 2019/12/02 20:51:51 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/02 20:51:51 fault injection: enabled 2019/12/02 20:51:51 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/02 20:51:51 net packet injection: enabled 2019/12/02 20:51:51 net device setup: enabled 2019/12/02 20:51:51 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/12/02 20:51:51 devlink PCI setup: PCI device 0000:00:10.0 is not available 20:51:52 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x5, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000040)="9b247f9c17", 0x0, 0xffffffff, 0x0, 0x0, 0x0}) 20:51:52 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x6b) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0815b5055e0bcfe87b3071") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x2, 0x2}]}]}}, &(0x7f00000002c0)=""/236, 0x32, 0xec, 0x8}, 0x20) syzkaller login: [ 57.152191][ T8179] IPVS: ftp: loaded support on port[0] = 21 20:51:52 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x1, 0x3) [ 57.299688][ T8179] chnl_net:caif_netlink_parms(): no params data found [ 57.311294][ T8182] IPVS: ftp: loaded support on port[0] = 21 [ 57.390243][ T8179] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.399326][ T8179] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.407604][ T8179] device bridge_slave_0 entered promiscuous mode [ 57.427207][ T8179] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.435911][ T8179] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.444381][ T8179] device bridge_slave_1 entered promiscuous mode [ 57.509008][ T8179] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.530712][ T8179] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 20:51:52 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x4, 0x4, 0x100000009}, 0x2c) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f00000002c0)={r0, &(0x7f0000000140), 0x0}, 0x18) [ 57.555069][ T8182] chnl_net:caif_netlink_parms(): no params data found [ 57.565696][ T8185] IPVS: ftp: loaded support on port[0] = 21 [ 57.595414][ T8179] team0: Port device team_slave_0 added [ 57.637520][ T8179] team0: Port device team_slave_1 added [ 57.681802][ T8182] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.689439][ T8182] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.702429][ T8182] device bridge_slave_0 entered promiscuous mode [ 57.757531][ T8179] device hsr_slave_0 entered promiscuous mode 20:51:53 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = socket$packet(0x11, 0x0, 0x300) recvmmsg(r0, &(0x7f0000004300), 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000340)={0xa, 0x14e24}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) [ 57.892031][ T8179] device hsr_slave_1 entered promiscuous mode [ 57.960438][ T8182] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.981811][ T8182] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.989375][ T8182] device bridge_slave_1 entered promiscuous mode [ 58.027580][ T8189] IPVS: ftp: loaded support on port[0] = 21 [ 58.068582][ T8187] IPVS: ftp: loaded support on port[0] = 21 [ 58.079584][ T8179] netdevsim netdevsim0 netdevsim0: renamed from eth0 20:51:53 executing program 5: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x417500, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r1 = open(&(0x7f0000000140)='./bus\x00', 0x14103e, 0x0) write$binfmt_elf64(r0, 0x0, 0x0) accept$packet(r1, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getown(r3, 0x9) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xffdc, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000400)={0x0, r3, 0x0, 0x1, &(0x7f00000003c0)='\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r2, 0xffffffffffffffff, 0x0, 0x12, &(0x7f00000001c0)='/dev/input/mouse#\x00', r4}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r5, r1, 0x0, 0x30, &(0x7f0000000240)='(\xc7\xe4\x80#\xad\xa3\xe5GPL\xb4G%)em1trusted*ppp1(ppp0\x03\x00\x00\x005sum}7us\x00', r4}, 0x30) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r6, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x4e22, @empty}, {0x2, 0x4e20, @loopback}, {0x2, 0x4e24, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}) ioctl$sock_inet_SIOCADDRT(r6, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0x0, @dev={0xac, 0x2}}, {0x2, 0x0, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x2, 0x46a}) listen(r6, 0x0) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r7, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) shutdown(r7, 0x1) recvmsg(r7, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) fcntl$setstatus(r7, 0x4, 0x2400) [ 58.116923][ T8179] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 58.175532][ T8182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.217789][ T8179] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 58.273490][ T8179] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 58.307554][ T8182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.346852][ T8192] IPVS: ftp: loaded support on port[0] = 21 [ 58.366406][ T8182] team0: Port device team_slave_0 added [ 58.394309][ T8185] chnl_net:caif_netlink_parms(): no params data found [ 58.404190][ T8182] team0: Port device team_slave_1 added [ 58.504122][ T8182] device hsr_slave_0 entered promiscuous mode [ 58.542096][ T8182] device hsr_slave_1 entered promiscuous mode [ 58.601887][ T8182] debugfs: Directory 'hsr0' with parent '/' already present! [ 58.627848][ T8185] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.635616][ T8185] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.643661][ T8185] device bridge_slave_0 entered promiscuous mode [ 58.651587][ T8185] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.658881][ T8185] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.666711][ T8185] device bridge_slave_1 entered promiscuous mode [ 58.716528][ T8192] chnl_net:caif_netlink_parms(): no params data found [ 58.744456][ T8185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.755993][ T8185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.836635][ T8182] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 58.894803][ T8189] chnl_net:caif_netlink_parms(): no params data found [ 58.913003][ T8185] team0: Port device team_slave_0 added [ 58.924753][ T8182] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 58.983980][ T8182] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 59.034759][ T8185] team0: Port device team_slave_1 added [ 59.040561][ T8192] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.048280][ T8192] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.055983][ T8192] device bridge_slave_0 entered promiscuous mode [ 59.066493][ T8192] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.074007][ T8192] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.084657][ T8192] device bridge_slave_1 entered promiscuous mode [ 59.100609][ T8182] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 59.186050][ T8189] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.195694][ T8189] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.203473][ T8189] device bridge_slave_0 entered promiscuous mode [ 59.211980][ T8187] chnl_net:caif_netlink_parms(): no params data found [ 59.236973][ T8192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.246686][ T8189] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.254385][ T8189] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.263207][ T8189] device bridge_slave_1 entered promiscuous mode [ 59.288493][ T8192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.365003][ T8185] device hsr_slave_0 entered promiscuous mode [ 59.412141][ T8185] device hsr_slave_1 entered promiscuous mode [ 59.451797][ T8185] debugfs: Directory 'hsr0' with parent '/' already present! [ 59.462222][ T8192] team0: Port device team_slave_0 added [ 59.475910][ T8192] team0: Port device team_slave_1 added [ 59.510732][ T8189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.520504][ T8187] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.527777][ T8187] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.538843][ T8187] device bridge_slave_0 entered promiscuous mode [ 59.604360][ T8192] device hsr_slave_0 entered promiscuous mode [ 59.652010][ T8192] device hsr_slave_1 entered promiscuous mode [ 59.701810][ T8192] debugfs: Directory 'hsr0' with parent '/' already present! [ 59.710533][ T8189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.724075][ T8187] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.731141][ T8187] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.738920][ T8187] device bridge_slave_1 entered promiscuous mode [ 59.755612][ T8187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.782921][ T8187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.795546][ T8182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.809322][ T8185] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 59.858879][ T8189] team0: Port device team_slave_0 added [ 59.879350][ T8185] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 59.946050][ T8185] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 59.994517][ T8185] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 60.034702][ T8189] team0: Port device team_slave_1 added [ 60.043195][ T8187] team0: Port device team_slave_0 added [ 60.068090][ T8187] team0: Port device team_slave_1 added [ 60.082431][ T8192] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 60.138046][ T8192] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 60.196330][ T8179] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.206002][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.214486][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.223997][ T8182] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.244586][ T8192] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 60.294055][ T8192] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 60.340861][ T3760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.350222][ T3760] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.359222][ T3760] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.366544][ T3760] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.375776][ T3760] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.424268][ T8189] device hsr_slave_0 entered promiscuous mode [ 60.472207][ T8189] device hsr_slave_1 entered promiscuous mode [ 60.522000][ T8189] debugfs: Directory 'hsr0' with parent '/' already present! [ 60.595302][ T8187] device hsr_slave_0 entered promiscuous mode [ 60.662146][ T8187] device hsr_slave_1 entered promiscuous mode [ 60.701866][ T8187] debugfs: Directory 'hsr0' with parent '/' already present! [ 60.721138][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.736442][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.745882][ T3755] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.753025][ T3755] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.777381][ T8179] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.795290][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.805673][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.815252][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.824830][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.833387][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.840941][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.863797][ T8189] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 60.925887][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.939337][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.948147][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.956801][ T3042] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.963895][ T3042] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.972559][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.981069][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.989887][ T3042] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.996968][ T3042] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.005526][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.014306][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.024363][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.036536][ T8189] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 61.088526][ T8189] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 61.137545][ T8187] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 61.173550][ T8187] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 61.223272][ T3760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.234765][ T3760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.243317][ T3760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.252656][ T3760] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.268746][ T8179] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 61.280412][ T8179] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.301426][ T8189] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 61.337432][ T8187] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 61.383589][ T8193] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.392417][ T8193] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.401019][ T8193] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.409644][ T8193] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.418417][ T8193] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.426842][ T8193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.435263][ T8193] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.443868][ T8193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.464874][ T8187] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 61.505501][ T8182] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.516715][ T8182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.532153][ T8193] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.540417][ T8193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.548916][ T8193] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.557710][ T8193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.571271][ T8192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.614141][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.621608][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.635472][ T8182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.658880][ T8192] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.676925][ T8179] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.684514][ T3760] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.697571][ T3760] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.705441][ T3760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.716306][ T3760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.729048][ T8185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.771196][ T8200] BPF: (anon) type_id=2 bits_offset=2 [ 61.777250][ T8200] BPF: [ 61.780201][ T8200] BPF:Invalid member bits_offset [ 61.799057][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.815234][ T8200] BPF: [ 61.815234][ T8200] [ 61.824680][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 166.831647][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 166.839442][ C0] (detected by 0, t=10502 jiffies, g=6357, q=64) [ 166.845847][ C0] rcu: All QSes seen, last rcu_preempt kthread activity 10503 (4294953801-4294943298), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 166.859807][ C0] syz-executor.4 R running task 24480 8189 8188 0x0000400a [ 166.867702][ C0] Call Trace: [ 166.871093][ C0] [ 166.874040][ C0] sched_show_task+0x40f/0x560 [ 166.878915][ C0] rcu_sched_clock_irq+0x1861/0x1ad0 [ 166.884194][ C0] update_process_times+0x12d/0x180 [ 166.889407][ C0] tick_sched_timer+0x263/0x420 [ 166.894247][ C0] ? tick_setup_sched_timer+0x3d0/0x3d0 [ 166.899800][ C0] __hrtimer_run_queues+0x403/0x840 [ 166.905013][ C0] hrtimer_interrupt+0x38c/0xda0 [ 166.909964][ C0] ? debug_smp_processor_id+0x9/0x20 [ 166.915240][ C0] smp_apic_timer_interrupt+0x109/0x280 [ 166.920773][ C0] apic_timer_interrupt+0xf/0x20 [ 166.925711][ C0] [ 166.928681][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x22/0x50 [ 166.934833][ C0] Code: 64 02 3b 00 5b 5d c3 cc 48 8b 04 24 65 48 8b 0c 25 c0 1d 02 00 65 8b 15 b8 81 8b 7e f7 c2 00 01 1f 00 75 2c 8b 91 80 13 00 00 <83> fa 02 75 21 48 8b 91 88 13 00 00 48 8b 32 48 8d 7e 01 8b 89 84 [ 166.954427][ C0] RSP: 0018:ffffc900025878f0 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 166.962825][ C0] RAX: ffffffff81487326 RBX: ffffea0001af08c0 RCX: ffff888095c32300 [ 166.970786][ C0] RDX: 0000000000000000 RSI: 00000000fffffffc RDI: ffffea0001af08c0 [ 166.978754][ C0] RBP: ffffc90002587918 R08: 000000000003a768 R09: ffffed101327d327 [ 166.986712][ C0] R10: ffffed101327d327 R11: 0000000000000000 R12: ffff88806bc1fc20 [ 166.994670][ C0] R13: dffffc0000000000 R14: 00000000fffffffc R15: ffff8880993e9928 [ 167.002646][ C0] ? mod_memcg_page_state+0x16/0x190 [ 167.007923][ C0] ? mod_memcg_page_state+0x16/0x190 [ 167.013207][ C0] free_thread_stack+0x168/0x590 [ 167.018171][ C0] put_task_stack+0xa3/0x130 [ 167.022864][ C0] finish_task_switch+0x3f1/0x550 [ 167.027915][ C0] __schedule+0x9a8/0xcc0 [ 167.032259][ C0] preempt_schedule_irq+0xc1/0x140 [ 167.037398][ C0] retint_kernel+0x1b/0x2b [ 167.041814][ C0] RIP: 0010:kfree+0x1a3/0x200 [ 167.047189][ C0] Code: 48 83 3d 67 19 59 07 00 74 68 4c 89 f7 57 9d 0f 1f 44 00 00 eb 19 e8 ec b7 ca ff 48 83 3d 4c 19 59 07 00 74 51 4c 89 f7 57 9d <0f> 1f 44 00 00 5b 41 5c 41 5e 41 5f 5d c3 48 ff c9 48 89 c8 e9 c8 [ 167.066911][ C0] RSP: 0018:ffffc90002587b78 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13 [ 167.075855][ C0] RAX: ffff888095c32b94 RBX: ffff8880aa800a80 RCX: ffff888095c32300 [ 167.083833][ C0] RDX: 0000000000000000 RSI: ffffffff86380c36 RDI: 0000000000000286 [ 167.091811][ C0] RBP: ffffc90002587b98 R08: ffff888095c32b58 R09: ffffc90002587974 [ 167.099776][ C0] R10: 000000000000000c R11: 0000000000000000 R12: ffff8880968be400 [ 167.107911][ C0] R13: 0000000000000000 R14: 0000000000000286 R15: ffffffff86380c36 [ 167.116386][ C0] ? skb_release_data+0x726/0x8c0 [ 167.121437][ C0] ? skb_release_data+0x726/0x8c0 [ 167.126459][ C0] skb_release_data+0x726/0x8c0 [ 167.131328][ C0] __kfree_skb+0x59/0x1c0 [ 167.135677][ C0] consume_skb+0x72/0x110 [ 167.140268][ C0] skb_free_datagram+0x28/0xd0 [ 167.145570][ C0] netlink_recvmsg+0x5b1/0xfb0 [ 167.150366][ C0] ? security_socket_recvmsg+0xa9/0xd0 [ 167.155853][ C0] ? netlink_sendmsg+0xd40/0xd40 [ 167.160789][ C0] __sys_recvfrom+0x328/0x4b0 [ 167.165539][ C0] ? debug_smp_processor_id+0x1c/0x20 [ 167.171029][ C0] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 167.177104][ C0] ? prepare_exit_to_usermode+0x221/0x5b0 [ 167.182954][ C0] ? trace_irq_disable_rcuidle+0x23/0x1e0 [ 167.188687][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 167.194142][ C0] __x64_sys_recvfrom+0xe5/0x100 [ 167.199093][ C0] do_syscall_64+0xf7/0x1c0 [ 167.203932][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 167.210386][ C0] RIP: 0033:0x41425d [ 167.214651][ C0] Code: 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 8b 05 1e 42 66 00 85 c0 75 3e 45 31 c9 45 31 c0 4c 63 d1 48 63 ff b8 2d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 0b c3 66 2e 0f 1f 84 00 00 00 00 00 48 c7 c2 [ 167.237827][ C0] RSP: 002b:00007ffce5a90f18 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 167.246274][ C0] RAX: ffffffffffffffda RBX: 0000000000a72200 RCX: 000000000041425d [ 167.254243][ C0] RDX: 0000000000000400 RSI: 0000000000a72250 RDI: 0000000000000003 [ 167.262239][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 167.270213][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 167.278198][ C0] R13: 0000000000000000 R14: 0000000000a72250 R15: 0000000000000003 [ 167.286193][ C0] rcu: rcu_preempt kthread starved for 10547 jiffies! g6357 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 167.297317][ C0] rcu: RCU grace-period kthread stack dump: [ 167.303204][ C0] rcu_preempt R running task 29032 10 2 0x80004000 [ 167.311268][ C0] Call Trace: [ 167.314557][ C0] __schedule+0x9a0/0xcc0 [ 167.319036][ C0] schedule+0x181/0x210 [ 167.323205][ C0] schedule_timeout+0x14f/0x240 [ 167.328055][ C0] ? run_local_timers+0x120/0x120 [ 167.333095][ C0] rcu_gp_kthread+0xed8/0x1770 [ 167.337865][ C0] kthread+0x332/0x350 [ 167.341955][ C0] ? rcu_report_qs_rsp+0x140/0x140 [ 167.347063][ C0] ? kthread_blkcg+0xe0/0xe0 [ 167.351659][ C0] ret_from_fork+0x24/0x30