Warning: Permanently added '10.128.15.199' (ECDSA) to the list of known hosts. 2019/12/04 01:48:40 fuzzer started 2019/12/04 01:48:41 dialing manager at 10.128.0.26:42111 2019/12/04 01:48:41 syscalls: 2689 2019/12/04 01:48:41 code coverage: enabled 2019/12/04 01:48:41 comparison tracing: enabled 2019/12/04 01:48:41 extra coverage: extra coverage is not supported by the kernel 2019/12/04 01:48:41 setuid sandbox: enabled 2019/12/04 01:48:41 namespace sandbox: enabled 2019/12/04 01:48:41 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/04 01:48:41 fault injection: enabled 2019/12/04 01:48:41 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/04 01:48:41 net packet injection: enabled 2019/12/04 01:48:41 net device setup: enabled 2019/12/04 01:48:41 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/12/04 01:48:41 devlink PCI setup: PCI device 0000:00:10.0 is not available 01:48:42 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001d00)='/dev/vcs\x00', 0x4000, 0x0) syz_emit_ethernet(0x4, &(0x7f0000000c00)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60d865bb00782f00fe8000000000000000000d00000000aafe8000000000000000000000000000aa00000000502cc0421c498876b0a9ad93531580c3766da354c1defbf6e5ee99e62a5e771903b693c035cfba0cffd42e64b9850b10cec9c614b7b4c8cf1e26329e3f3b01626b44b12b356b3f62cbbd2e02c5a81ac8229a9a6ceab301355d1213a6d80625795c1f95e3e70d4c609c0678608ed0180ea98cdac94b8a9b4c468331d80ef5518dbb4a020573f6da1ee372317a265655d3f5a9a76354f85a56c955b12e27bc6d32c43f4fe45b5b636c9ceee6ae672c38cb5e309bc10490d8dbf1784b81a887cbc222285a6bbe97dbd4cbb80e6c59af316b24fe7e5c8f552d24c2b52efbadf4a66c9ce823b49792905e1db9fa918ab8", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0) r1 = msgget$private(0x0, 0x84) msgctl$IPC_RMID(r1, 0x0) r2 = socket$kcm(0x11, 0x2, 0x0) sendmsg$sock(r2, &(0x7f0000000600)={&(0x7f0000000440)=@nl=@proc={0x10, 0x0, 0x6}, 0x80, 0x0, 0x0, &(0x7f0000000580)=[@mark={{0x14}}], 0x18}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000740)='T\xf0O\x81\xdbX\xa1\xb6') socket$l2tp(0x18, 0x1, 0x1) r4 = socket$isdn(0x22, 0x3, 0x22) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) preadv(r3, &(0x7f0000000500), 0x0, 0x206) r5 = socket$kcm(0x11, 0x2, 0x0) sendmsg$sock(r5, &(0x7f0000000600)={&(0x7f0000000440)=@nl=@proc={0x10, 0x0, 0x6}, 0x80, 0x0, 0x0, &(0x7f0000000580)=[@mark={{0x14}}], 0x18}, 0x0) preadv(r0, &(0x7f0000000900)=[{&(0x7f0000000040)}, {&(0x7f0000000240)=""/168, 0xa8}, {&(0x7f0000000300)=""/81, 0x51}, {0x0}, {&(0x7f0000000080)=""/64, 0x40}, {&(0x7f0000000140)=""/31, 0x1f}, {&(0x7f0000000780)=""/234, 0xea}, {&(0x7f0000000680)=""/169, 0xa9}, {&(0x7f0000000880)=""/66, 0x42}], 0x9, 0x8) r6 = syz_open_procfs(0x0, &(0x7f0000000740)='net/dev\x00') r7 = socket$l2tp(0x18, 0x1, 0x1) sendfile(r7, r6, 0x0, 0x50000000000443) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x3}, @fwd={0x0, 0x0, 0x0, 0x5}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x2, [{0x0, 0x1}]}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x48}, 0x20) preadv(r6, &(0x7f0000000500)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r6, 0xc008551c, &(0x7f0000000240)=ANY=[]) r8 = getpid() rt_tgsigqueueinfo(r8, r8, 0x4000000000000016, &(0x7f0000000600)) syz_open_procfs(0x0, 0x0) socket$l2tp(0x18, 0x1, 0x1) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 01:48:42 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_nanosleep(0x2, 0x9195f5, &(0x7f00000000c0)={0x0, 0x989680}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) syzkaller login: [ 55.917686][ T8130] IPVS: ftp: loaded support on port[0] = 21 [ 56.006889][ T8132] IPVS: ftp: loaded support on port[0] = 21 01:48:42 executing program 2: r0 = io_uring_setup(0x72, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, [], {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) [ 56.162954][ T8130] chnl_net:caif_netlink_parms(): no params data found [ 56.229305][ T8135] IPVS: ftp: loaded support on port[0] = 21 [ 56.294386][ T8130] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.302602][ T8130] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.311034][ T8130] device bridge_slave_0 entered promiscuous mode [ 56.321228][ T8130] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.328303][ T8130] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.336343][ T8130] device bridge_slave_1 entered promiscuous mode 01:48:43 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x6b) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0815b5055e0bcfe87b3071") r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000000)={0x0, 0xe2, &(0x7f00000000c0)={&(0x7f0000000100)={0x6c, r2, 0x5, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x2, [0x0, 0xc202]}, 0x8000}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast1}}}}]}]}, 0x6c}}, 0x0) [ 56.361209][ T8130] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.370998][ T8132] chnl_net:caif_netlink_parms(): no params data found [ 56.411768][ T8130] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.506188][ T8130] team0: Port device team_slave_0 added [ 56.519738][ T8132] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.526978][ T8132] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.549933][ T8132] device bridge_slave_0 entered promiscuous mode [ 56.559207][ T8132] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.579601][ T8132] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.587553][ T8132] device bridge_slave_1 entered promiscuous mode [ 56.598379][ T8130] team0: Port device team_slave_1 added [ 56.637770][ T8139] IPVS: ftp: loaded support on port[0] = 21 [ 56.646120][ T8135] chnl_net:caif_netlink_parms(): no params data found [ 56.676654][ T8132] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link 01:48:43 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) r3 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000580), 0x2a9, &(0x7f0000000100)=[@op]}], 0x492499d, 0x0) 01:48:43 executing program 5: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r0, 0x400, 0x1) rt_sigprocmask(0x0, &(0x7f0000da1000)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000061000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) truncate(&(0x7f0000000080)='./file0\x00', 0x0) fcntl$setlease(r0, 0x400, 0x2) [ 56.871388][ T8130] device hsr_slave_0 entered promiscuous mode [ 56.929682][ T8130] device hsr_slave_1 entered promiscuous mode [ 56.990756][ T8132] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.006863][ T8135] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.014009][ T8135] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.021900][ T8135] device bridge_slave_0 entered promiscuous mode [ 57.036370][ T8141] IPVS: ftp: loaded support on port[0] = 21 [ 57.036545][ T8143] IPVS: ftp: loaded support on port[0] = 21 [ 57.048732][ T8135] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.059097][ T8135] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.068714][ T8135] device bridge_slave_1 entered promiscuous mode [ 57.125099][ T8132] team0: Port device team_slave_0 added [ 57.130986][ T8130] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 57.183633][ T8130] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 57.233649][ T8130] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 57.283148][ T8135] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.295422][ T8132] team0: Port device team_slave_1 added [ 57.322765][ T8130] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 57.362340][ T8135] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.451181][ T8132] device hsr_slave_0 entered promiscuous mode [ 57.489759][ T8132] device hsr_slave_1 entered promiscuous mode [ 57.529661][ T8132] debugfs: Directory 'hsr0' with parent '/' already present! [ 57.552118][ T8135] team0: Port device team_slave_0 added [ 57.575125][ T8135] team0: Port device team_slave_1 added [ 57.651169][ T8135] device hsr_slave_0 entered promiscuous mode [ 57.689805][ T8135] device hsr_slave_1 entered promiscuous mode [ 57.729478][ T8135] debugfs: Directory 'hsr0' with parent '/' already present! [ 57.831327][ T8141] chnl_net:caif_netlink_parms(): no params data found [ 57.840776][ T8143] chnl_net:caif_netlink_parms(): no params data found [ 57.858421][ T8132] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 57.892370][ T8132] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 57.944437][ T8132] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 57.993612][ T8132] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 58.044392][ T8139] chnl_net:caif_netlink_parms(): no params data found [ 58.055020][ T8135] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 58.114485][ T8135] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 58.172099][ T8135] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 58.248139][ T8135] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 58.304903][ T8143] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.312633][ T8143] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.324340][ T8143] device bridge_slave_0 entered promiscuous mode [ 58.332054][ T8143] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.339104][ T8143] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.347108][ T8143] device bridge_slave_1 entered promiscuous mode [ 58.356463][ T8141] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.363593][ T8141] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.371558][ T8141] device bridge_slave_0 entered promiscuous mode [ 58.388742][ T8139] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.396502][ T8139] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.404114][ T8139] device bridge_slave_0 entered promiscuous mode [ 58.415970][ T8130] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.436597][ T8141] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.445609][ T8141] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.453886][ T8141] device bridge_slave_1 entered promiscuous mode [ 58.465539][ T8139] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.472838][ T8139] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.480697][ T8139] device bridge_slave_1 entered promiscuous mode [ 58.497732][ T8139] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.508603][ T8143] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.528510][ T8130] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.537347][ T8139] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.551843][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.560811][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.571571][ T8141] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.585330][ T8141] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.598687][ T8143] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.646750][ T8143] team0: Port device team_slave_0 added [ 58.654509][ T8143] team0: Port device team_slave_1 added [ 58.667409][ T8139] team0: Port device team_slave_0 added [ 58.677248][ T8141] team0: Port device team_slave_0 added [ 58.697847][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.707228][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.717355][ T2726] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.724532][ T2726] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.734770][ T8139] team0: Port device team_slave_1 added [ 58.746305][ T8141] team0: Port device team_slave_1 added [ 58.802451][ T8143] device hsr_slave_0 entered promiscuous mode [ 58.850004][ T8143] device hsr_slave_1 entered promiscuous mode [ 58.889571][ T8143] debugfs: Directory 'hsr0' with parent '/' already present! [ 58.904057][ T8148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.913179][ T8148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.922234][ T8148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.931343][ T8148] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.938386][ T8148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.031924][ T8141] device hsr_slave_0 entered promiscuous mode [ 59.070160][ T8141] device hsr_slave_1 entered promiscuous mode [ 59.109562][ T8141] debugfs: Directory 'hsr0' with parent '/' already present! [ 59.181276][ T8139] device hsr_slave_0 entered promiscuous mode [ 59.231363][ T8139] device hsr_slave_1 entered promiscuous mode [ 59.299477][ T8139] debugfs: Directory 'hsr0' with parent '/' already present! [ 59.309007][ T8148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.337487][ T8135] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.346125][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.365596][ T8141] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 59.442702][ T8132] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.453913][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.463242][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.474322][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.482260][ T8143] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 59.520911][ T8141] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 59.563545][ T8141] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 59.615717][ T8141] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 59.666644][ T8143] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 59.713569][ T8143] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 59.771251][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.779102][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.787584][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.795289][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.805044][ T8135] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.816412][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.825845][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.834422][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.843219][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.851866][ T2726] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.858892][ T2726] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.870587][ T8143] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 59.921967][ T8132] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.950690][ T8148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.958520][ T8148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.967125][ T8148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.976113][ T8148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.984785][ T8148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.993021][ T8148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.001682][ T8148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.010041][ T8148] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.017077][ T8148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.024653][ T8148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.033708][ T8148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.042250][ T8148] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.049275][ T8148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.057022][ T8148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.065481][ T8148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.073960][ T8148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.082366][ T8148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.090948][ T8148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.099285][ T8148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.108037][ T8148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.116834][ T8148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.127974][ T8148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.135756][ T8148] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.148086][ T8139] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 60.191783][ T8139] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 60.236241][ T8139] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 60.282804][ T8139] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 60.345548][ T8135] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.357253][ T8135] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.368885][ T8130] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.391443][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.400217][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.408316][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.417399][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.426088][ T3688] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.433155][ T3688] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.440955][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.476251][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.484552][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.493216][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.502602][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.511357][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.520789][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.529159][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.537599][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.545078][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.553348][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.571652][ T8135] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.582573][ T8130] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.622574][ T8132] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 60.638823][ T8132] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.654703][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.663494][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.671940][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.680523][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.700602][ T8141] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.725885][ T8143] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.735189][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.765159][ T8141] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.817842][ T8143] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.809318][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 165.816326][ C1] (detected by 1, t=10502 jiffies, g=5993, q=224) [ 165.822815][ C1] rcu: All QSes seen, last rcu_preempt kthread activity 10503 (4294953723-4294943220), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 165.836165][ C1] syz-executor.2 R running task 24480 8135 8134 0x0000400a [ 165.844066][ C1] Call Trace: [ 165.847349][ C1] [ 165.850207][ C1] sched_show_task+0x40f/0x560 [ 165.855054][ C1] rcu_sched_clock_irq+0x1861/0x1ad0 [ 165.860332][ C1] update_process_times+0x12d/0x180 [ 165.865518][ C1] tick_sched_timer+0x263/0x420 [ 165.870353][ C1] ? tick_setup_sched_timer+0x3d0/0x3d0 [ 165.875885][ C1] __hrtimer_run_queues+0x403/0x840 [ 165.881102][ C1] hrtimer_interrupt+0x38c/0xda0 [ 165.886051][ C1] ? debug_smp_processor_id+0x9/0x20 [ 165.891326][ C1] smp_apic_timer_interrupt+0x109/0x280 [ 165.896859][ C1] apic_timer_interrupt+0xf/0x20 [ 165.901780][ C1] [ 165.904717][ C1] RIP: 0010:__memcg_kmem_uncharge+0xd/0x2e0 [ 165.910598][ C1] Code: 81 c3 08 02 00 00 48 89 df 4c 89 f6 e8 dc 7d ff ff 5b 41 5e 5d c3 0f 1f 80 00 00 00 00 55 48 89 e5 41 57 41 56 41 55 41 54 53 <50> 89 f3 49 89 fc 48 b8 00 00 00 00 00 fc ff df 4c 8d 77 38 4d 89 [ 165.930188][ C1] RSP: 0018:ffffc900025679f8 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 165.938588][ C1] RAX: ffffffff81486ea4 RBX: ffffea000238c4c0 RCX: ffff888090c0c640 [ 165.946559][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffea000238c4c0 [ 165.954544][ C1] RBP: ffffc90002567a20 R08: dffffc0000000000 R09: fffffbfff120248a [ 165.962503][ C1] R10: fffffbfff120248a R11: 0000000000000000 R12: ffff88808b233920 [ 165.970463][ C1] R13: dffffc0000000000 R14: 1ffff11011646724 R15: ffff8880a147f9e8 [ 165.978430][ C1] ? free_thread_stack+0x124/0x590 [ 165.983531][ C1] ? free_thread_stack+0x124/0x590 [ 165.988627][ C1] free_thread_stack+0x12e/0x590 [ 165.993554][ C1] put_task_stack+0xa3/0x130 [ 165.998137][ C1] finish_task_switch+0x3f1/0x550 [ 166.003154][ C1] __schedule+0x9a8/0xcc0 [ 166.007473][ C1] ? __kasan_check_write+0x14/0x20 [ 166.012579][ C1] schedule+0x181/0x210 [ 166.016818][ C1] pipe_wait+0x127/0x1e0 [ 166.021048][ C1] ? init_wait_entry+0xe0/0xe0 [ 166.025804][ C1] pipe_read+0x665/0x9e0 [ 166.030049][ C1] __vfs_read+0x59e/0x730 [ 166.034383][ C1] vfs_read+0x1dd/0x420 [ 166.038529][ C1] ksys_read+0x117/0x220 [ 166.042765][ C1] __x64_sys_read+0x7b/0x90 [ 166.047267][ C1] do_syscall_64+0xf7/0x1c0 [ 166.051761][ C1] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 166.057635][ C1] RIP: 0033:0x414190 [ 166.061519][ C1] Code: 01 f0 ff ff 0f 83 90 1b 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 83 3d dd 42 66 00 00 75 14 b8 00 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 64 1b 00 00 c3 48 83 ec 08 e8 6a fc ff ff [ 166.081111][ C1] RSP: 002b:00007fffef9ee208 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 166.089518][ C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000414190 [ 166.097477][ C1] RDX: 0000000000000038 RSI: 0000000000758040 RDI: 00000000000000f9 [ 166.105708][ C1] RBP: 0000000000715460 R08: 0000000000006000 R09: 0000000000004000 [ 166.113929][ C1] R10: 00007fffef9edba0 R11: 0000000000000246 R12: 0000000000000000 [ 166.121893][ C1] R13: 00007fffef9ee240 R14: 0000000000000003 R15: 00007fffef9ee250 [ 166.129873][ C1] rcu: rcu_preempt kthread starved for 10534 jiffies! g5993 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 166.140962][ C1] rcu: RCU grace-period kthread stack dump: [ 166.146858][ C1] rcu_preempt R running task 29032 10 2 0x80004000 [ 166.154748][ C1] Call Trace: [ 166.158037][ C1] __schedule+0x9a0/0xcc0 [ 166.162364][ C1] schedule+0x181/0x210 [ 166.166510][ C1] schedule_timeout+0x14f/0x240 [ 166.171348][ C1] ? run_local_timers+0x120/0x120 [ 166.176362][ C1] rcu_gp_kthread+0xed8/0x1770 [ 166.181120][ C1] kthread+0x332/0x350 [ 166.185183][ C1] ? rcu_report_qs_rsp+0x140/0x140 [ 166.190284][ C1] ? kthread_blkcg+0xe0/0xe0 [ 166.194861][ C1] ret_from_fork+0x24/0x30