Warning: Permanently added '10.128.10.12' (ECDSA) to the list of known hosts. syzkaller login: [ 206.699914] kauditd_printk_skb: 2 callbacks suppressed [ 206.699928] audit: type=1400 audit(1568365614.158:36): avc: denied { map } for pid=7557 comm="syz-executor425" path="/root/syz-executor425181003" dev="sda1" ino=1426 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 206.719002] IPVS: ftp: loaded support on port[0] = 21 [ 206.784283] chnl_net:caif_netlink_parms(): no params data found [ 206.816073] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.823119] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.830813] device bridge_slave_0 entered promiscuous mode [ 206.838534] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.844937] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.852141] device bridge_slave_1 entered promiscuous mode [ 206.868508] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 206.877516] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 206.893873] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 206.901669] team0: Port device team_slave_0 added [ 206.907266] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 206.914407] team0: Port device team_slave_1 added [ 206.919840] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 206.927175] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 206.978255] device hsr_slave_0 entered promiscuous mode [ 207.036341] device hsr_slave_1 entered promiscuous mode [ 207.106442] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 207.113524] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 207.127696] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.134146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.141165] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.147605] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.179643] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 207.185741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.194209] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 207.203725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 207.222704] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.230254] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.238170] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 207.249514] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 207.255701] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.264782] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 207.272570] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.278974] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.290235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 207.298231] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.304573] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.324450] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 207.334466] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 207.345379] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 207.353115] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 207.361101] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 207.368854] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 207.376796] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 207.384327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 207.391266] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 207.404684] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 207.415314] 8021q: adding VLAN 0 to HW filter on device batadv0 executing program executing program [ 312.465860] rcu: INFO: rcu_preempt self-detected stall on CPU [ 312.471983] rcu: 1-...!: (1 GPs behind) idle=002/1/0x4000000000000002 softirq=10273/10279 fqs=2 [ 312.481367] rcu: (t=10500 jiffies g=5305 q=73) [ 312.486129] rcu: rcu_preempt kthread starved for 10496 jiffies! g5305 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 312.496600] rcu: RCU grace-period kthread stack dump: [ 312.501775] rcu_preempt R running task 29624 10 2 0x80000000 [ 312.508968] Call Trace: [ 312.511644] __schedule+0x866/0x1dc0 [ 312.515357] ? pci_mmcfg_check_reserved+0x170/0x170 [ 312.520385] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 312.525580] ? lockdep_hardirqs_on+0x415/0x5d0 [ 312.530219] ? trace_hardirqs_on+0x67/0x220 [ 312.534540] schedule+0x92/0x1c0 [ 312.537900] schedule_timeout+0x4db/0xfc0 [ 312.542161] ? usleep_range+0x170/0x170 [ 312.546138] ? trace_hardirqs_on+0x67/0x220 [ 312.550516] ? kasan_check_read+0x11/0x20 [ 312.554694] ? __next_timer_interrupt+0x1a0/0x1a0 [ 312.559965] ? prepare_to_swait_exclusive+0x120/0x120 [ 312.565205] rcu_gp_kthread+0xd5c/0x2190 [ 312.569296] ? rcu_blocking_is_gp+0x90/0x90 [ 312.573641] ? trace_hardirqs_on+0x67/0x220 [ 312.577971] ? kasan_check_read+0x11/0x20 [ 312.582116] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 312.587257] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 312.592855] ? __kthread_parkme+0xfb/0x1b0 [ 312.597088] kthread+0x354/0x420 [ 312.600445] ? rcu_blocking_is_gp+0x90/0x90 [ 312.604755] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 312.610284] ret_from_fork+0x24/0x30 [ 312.614026] NMI backtrace for cpu 1 [ 312.617647] CPU: 1 PID: 7560 Comm: kworker/1:2 Not tainted 4.19.72 #0 [ 312.624213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 312.633630] Workqueue: ipv6_addrconf addrconf_dad_work [ 312.638898] Call Trace: [ 312.641482] [ 312.643649] dump_stack+0x172/0x1f0 [ 312.647271] nmi_cpu_backtrace.cold+0x63/0xa4 [ 312.651804] ? lapic_can_unplug_cpu.cold+0x45/0x45 [ 312.656730] nmi_trigger_cpumask_backtrace+0x1b0/0x1f8 [ 312.662002] arch_trigger_cpumask_backtrace+0x14/0x20 [ 312.667186] rcu_dump_cpu_stacks+0x189/0x1d5 [ 312.671640] ? wake_up_process+0x10/0x20 [ 312.675701] rcu_check_callbacks.cold+0x5e3/0xd90 [ 312.680534] ? trace_hardirqs_off+0x62/0x220 [ 312.685057] update_process_times+0x32/0x80 [ 312.689478] tick_sched_handle+0xa2/0x190 [ 312.693655] tick_sched_timer+0x47/0x130 [ 312.697739] __hrtimer_run_queues+0x33b/0xdc0 [ 312.702254] ? tick_sched_do_timer+0x1b0/0x1b0 [ 312.706834] ? hrtimer_fixup_activate+0x30/0x30 [ 312.711507] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 312.716524] ? ktime_get_update_offsets_now+0x2d3/0x440 [ 312.721906] hrtimer_interrupt+0x314/0x770 [ 312.726141] smp_apic_timer_interrupt+0x111/0x550 [ 312.730976] apic_timer_interrupt+0xf/0x20 [ 312.735205] [ 312.737520] RIP: 0010:__list_add_valid+0xe/0xa0 [ 312.742181] Code: 40 48 82 87 e8 33 fd ff ff 41 5c 5d c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 b8 00 00 00 00 00 fc ff df 55 48 89 e5 <41> 55 49 89 fd 48 8d 7a 08 41 54 49 89 d4 48 89 fa 48 83 ec 08 48 [ 312.761083] RSP: 0018:ffff88808503ede8 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 312.768783] RAX: dffffc0000000000 RBX: ffff888086334778 RCX: ffffffff858e7de6 [ 312.776052] RDX: ffff888086334810 RSI: ffff888086334810 RDI: ffff888086334778 [ 312.783331] RBP: ffff88808503ede8 R08: ffff8880850d8480 R09: 0000000000000009 [ 312.790591] R10: ffff8880850d8e68 R11: 000000006cb01b82 R12: dffffc0000000000 [ 312.797862] R13: ffff8880863344c0 R14: ffff888086334818 R15: ffff888086334810 [ 312.805214] ? hhf_dequeue+0x5b6/0xa00 [ 312.809102] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 312.814641] hhf_dequeue+0x652/0xa00 [ 312.818406] __qdisc_run+0x1e7/0x1960 [ 312.822262] __dev_queue_xmit+0x165c/0x2fe0 [ 312.826582] ? netdev_pick_tx+0x300/0x300 [ 312.830724] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 312.836327] ? br_nf_post_routing+0x780/0x12f0 [ 312.840931] ? br_forward_finish+0x235/0x400 [ 312.845337] ? find_held_lock+0x35/0x130 [ 312.849404] ? br_forward_finish+0x235/0x400 [ 312.853838] dev_queue_xmit+0x18/0x20 [ 312.857640] ? dev_queue_xmit+0x18/0x20 [ 312.861611] br_dev_queue_push_xmit+0x405/0x5d0 [ 312.866285] ? kasan_check_read+0x11/0x20 [ 312.870448] br_forward_finish+0xfa/0x400 [ 312.874600] ? br_dev_queue_push_xmit+0x5d0/0x5d0 [ 312.879581] ? br_fdb_add.cold+0x8a/0x8a [ 312.883663] ? kasan_check_read+0x11/0x20 [ 312.887813] __br_forward+0x647/0xb30 [ 312.891617] ? br_forward_finish+0x400/0x400 [ 312.896021] ? br_dev_queue_push_xmit+0x5d0/0x5d0 [ 312.900865] deliver_clone+0x61/0xc0 [ 312.904581] br_flood+0x4da/0x710 [ 312.908039] br_dev_xmit+0xeeb/0x1490 [ 312.911833] ? br_poll_controller+0x10/0x10 [ 312.916150] ? __lock_is_held+0xb6/0x140 [ 312.920211] dev_hard_start_xmit+0x1a5/0x980 [ 312.924615] ? check_preemption_disabled+0x48/0x290 [ 312.929626] __dev_queue_xmit+0x2704/0x2fe0 [ 312.934048] ? netdev_pick_tx+0x300/0x300 [ 312.938349] ? ip6_finish_output2+0xae0/0x2550 [ 312.942925] ? find_held_lock+0x35/0x130 [ 312.947000] ? ip6_finish_output2+0xb7f/0x2550 [ 312.951585] ? mark_held_locks+0xb1/0x100 [ 312.955744] dev_queue_xmit+0x18/0x20 [ 312.959624] ? dev_queue_xmit+0x18/0x20 [ 312.963635] neigh_resolve_output+0x5b7/0x980 [ 312.968129] ip6_finish_output2+0xb7f/0x2550 [ 312.972528] ? find_held_lock+0x35/0x130 [ 312.977073] ? ip6_mtu+0x2e6/0x460 [ 312.980608] ? ip6_forward_finish+0x4d0/0x4d0 [ 312.985096] ? lock_downgrade+0x810/0x810 [ 312.989239] ? kasan_check_read+0x11/0x20 [ 312.993386] ip6_finish_output+0x574/0xbe0 [ 312.997614] ? ip6_finish_output+0x574/0xbe0 [ 313.002032] ip6_output+0x235/0x7c0 [ 313.005667] ? ip6_finish_output+0xbe0/0xbe0 [ 313.010069] ? ip6_fragment+0x3770/0x3770 [ 313.014214] ndisc_send_skb+0xf3b/0x1460 [ 313.018272] ? nf_hook.constprop.0+0x560/0x560 [ 313.022916] ? skb_set_owner_w+0x24c/0x360 [ 313.027145] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 313.032155] ndisc_send_ns+0x3a9/0x850 [ 313.036032] ? mark_held_locks+0xb1/0x100 [ 313.040176] ? ndisc_netdev_event+0x470/0x470 [ 313.044661] ? lockdep_hardirqs_on+0x415/0x5d0 [ 313.049236] ? addrconf_dad_work+0xac4/0x1150 [ 313.053729] ? trace_hardirqs_on+0x67/0x220 [ 313.058065] ? addrconf_dad_work+0xac4/0x1150 [ 313.062555] addrconf_dad_work+0xb88/0x1150 [ 313.066877] ? addrconf_dad_completed+0xbb0/0xbb0 [ 313.071735] process_one_work+0x989/0x1750 [ 313.075982] ? pwq_dec_nr_in_flight+0x320/0x320 [ 313.080642] ? lock_acquire+0x16f/0x3f0 [ 313.084620] ? kasan_check_write+0x14/0x20 [ 313.088855] ? do_raw_spin_lock+0xc8/0x240 [ 313.093091] worker_thread+0x98/0xe40 [ 313.097065] ? trace_hardirqs_on+0x67/0x220 [ 313.101391] kthread+0x354/0x420 [ 313.104779] ? process_one_work+0x1750/0x1750 [ 313.109280] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 313.114823] ret_from_fork+0x24/0x30