Warning: Permanently added '10.128.0.23' (ECDSA) to the list of known hosts. 2020/01/08 11:49:47 fuzzer started 2020/01/08 11:49:49 dialing manager at 10.128.0.26:35703 2020/01/08 11:49:49 syscalls: 2824 2020/01/08 11:49:49 code coverage: enabled 2020/01/08 11:49:49 comparison tracing: enabled 2020/01/08 11:49:49 extra coverage: enabled 2020/01/08 11:49:49 setuid sandbox: enabled 2020/01/08 11:49:49 namespace sandbox: enabled 2020/01/08 11:49:49 Android sandbox: /sys/fs/selinux/policy does not exist 2020/01/08 11:49:49 fault injection: enabled 2020/01/08 11:49:49 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/01/08 11:49:49 net packet injection: enabled 2020/01/08 11:49:49 net device setup: enabled 2020/01/08 11:49:49 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/01/08 11:49:49 devlink PCI setup: PCI device 0000:00:10.0 is not available 11:49:50 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000000c0)=0x4b9, 0x4) 11:49:50 executing program 1: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) syzkaller login: [ 59.907712][ T8477] IPVS: ftp: loaded support on port[0] = 21 [ 60.018690][ T8479] IPVS: ftp: loaded support on port[0] = 21 11:49:51 executing program 2: unshare(0x6c060000) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @local}}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000000)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @local}}, 0x0, 0x5, 0x2}, 0xd8) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14, 0x3e8}, 0x100) write$binfmt_elf64(r1, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) shutdown(r1, 0x1) [ 60.128696][ T8477] chnl_net:caif_netlink_parms(): no params data found [ 60.268855][ T8477] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.290487][ T8477] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.301572][ T8477] device bridge_slave_0 entered promiscuous mode [ 60.311676][ T8477] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.318754][ T8477] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.327964][ T8477] device bridge_slave_1 entered promiscuous mode [ 60.352266][ T8479] chnl_net:caif_netlink_parms(): no params data found 11:49:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x6) setsockopt(r0, 0x10e, 0xb, &(0x7f0000f67000)="9adc01ce", 0x4) r1 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@gettaction={0x14, 0x32, 0x503}, 0x14}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 60.376678][ T8484] IPVS: ftp: loaded support on port[0] = 21 [ 60.384213][ T8477] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.420826][ T8477] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.494151][ T8477] team0: Port device team_slave_0 added [ 60.501204][ T8479] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.508353][ T8479] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.532324][ T8479] device bridge_slave_0 entered promiscuous mode [ 60.553931][ T8477] team0: Port device team_slave_1 added [ 60.561047][ T8479] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.568136][ T8479] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.578469][ T8479] device bridge_slave_1 entered promiscuous mode 11:49:51 executing program 4: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @broadcast}], 0x10) [ 60.705401][ T8477] device hsr_slave_0 entered promiscuous mode [ 60.790181][ T8477] device hsr_slave_1 entered promiscuous mode [ 60.843279][ T8479] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.870180][ T8489] IPVS: ftp: loaded support on port[0] = 21 [ 60.883703][ T8486] IPVS: ftp: loaded support on port[0] = 21 11:49:51 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0x4020565a, &(0x7f00000002c0)={0x0, 0xf0f000}) [ 60.902586][ T8484] chnl_net:caif_netlink_parms(): no params data found [ 60.913864][ T8479] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.947858][ T8479] team0: Port device team_slave_0 added [ 60.958806][ T8479] team0: Port device team_slave_1 added [ 61.092384][ T8479] device hsr_slave_0 entered promiscuous mode [ 61.130301][ T8479] device hsr_slave_1 entered promiscuous mode [ 61.169809][ T8479] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.177780][ T8479] Cannot create hsr debugfs directory [ 61.259510][ T8484] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.267138][ T8484] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.275477][ T8484] device bridge_slave_0 entered promiscuous mode [ 61.287309][ T8484] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.294575][ T8484] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.302896][ T8484] device bridge_slave_1 entered promiscuous mode [ 61.317777][ T8477] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 61.321186][ T8491] IPVS: ftp: loaded support on port[0] = 21 [ 61.373596][ T8477] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 61.423947][ T8477] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 61.477383][ T8477] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 61.538143][ T8484] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.553350][ T8484] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.644440][ T8486] chnl_net:caif_netlink_parms(): no params data found [ 61.661559][ T8484] team0: Port device team_slave_0 added [ 61.676168][ T8489] chnl_net:caif_netlink_parms(): no params data found [ 61.707296][ T8484] team0: Port device team_slave_1 added [ 61.802463][ T8484] device hsr_slave_0 entered promiscuous mode [ 61.840074][ T8484] device hsr_slave_1 entered promiscuous mode [ 61.879963][ T8484] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.888358][ T8484] Cannot create hsr debugfs directory [ 61.907498][ T8489] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.915031][ T8489] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.922965][ T8489] device bridge_slave_0 entered promiscuous mode [ 61.937511][ T8489] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.944684][ T8489] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.953222][ T8489] device bridge_slave_1 entered promiscuous mode [ 62.009813][ T8479] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 62.045893][ T8489] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.056368][ T8486] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.063828][ T8486] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.072037][ T8486] device bridge_slave_0 entered promiscuous mode [ 62.081414][ T8486] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.088489][ T8486] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.096553][ T8486] device bridge_slave_1 entered promiscuous mode [ 62.107944][ T8479] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 62.164537][ T8489] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.201984][ T8479] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 62.299523][ T8486] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.311970][ T8479] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 62.383649][ T8489] team0: Port device team_slave_0 added [ 62.394606][ T8489] team0: Port device team_slave_1 added [ 62.406804][ T8486] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.435418][ T8491] chnl_net:caif_netlink_parms(): no params data found [ 62.456654][ T8486] team0: Port device team_slave_0 added [ 62.476729][ T8484] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 62.525984][ T8484] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 62.583677][ T8486] team0: Port device team_slave_1 added [ 62.651348][ T8489] device hsr_slave_0 entered promiscuous mode [ 62.700079][ T8489] device hsr_slave_1 entered promiscuous mode [ 62.759810][ T8489] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.767404][ T8489] Cannot create hsr debugfs directory [ 62.774564][ T8484] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 62.826992][ T8477] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.893492][ T8486] device hsr_slave_0 entered promiscuous mode [ 62.940027][ T8486] device hsr_slave_1 entered promiscuous mode [ 63.009813][ T8486] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.017404][ T8486] Cannot create hsr debugfs directory [ 63.023234][ T8484] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.077541][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.093811][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.127317][ T8477] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.161940][ T2768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.171961][ T2768] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.180614][ T2768] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.188114][ T2768] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.196843][ T2768] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.216870][ T8491] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.225296][ T8491] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.233918][ T8491] device bridge_slave_0 entered promiscuous mode [ 63.262173][ T2943] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.271635][ T2943] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.280945][ T2943] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.288349][ T2943] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.296140][ T2943] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.305797][ T2943] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.315602][ T8491] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.323601][ T8491] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.332773][ T8491] device bridge_slave_1 entered promiscuous mode [ 63.373386][ T8491] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.388427][ T2955] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.398124][ T2955] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.406854][ T2955] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.441619][ T8491] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.463365][ T8491] team0: Port device team_slave_0 added [ 63.495857][ T2955] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.504607][ T2955] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.514058][ T2955] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.522580][ T2955] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.532645][ T8491] team0: Port device team_slave_1 added [ 63.544761][ T8479] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.552403][ T8489] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 63.608302][ T8477] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.625012][ T8477] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.640175][ T8489] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 63.701746][ T2768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.713009][ T2768] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.722498][ T8486] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.795606][ T8486] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.861436][ T8489] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 63.894960][ T8489] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 63.967737][ T8479] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.974731][ T8486] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.082426][ T8491] device hsr_slave_0 entered promiscuous mode [ 64.120826][ T8491] device hsr_slave_1 entered promiscuous mode [ 64.199795][ T8491] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.207452][ T8491] Cannot create hsr debugfs directory [ 64.227783][ T2768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.236602][ T2768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.245000][ T8486] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.333079][ T2955] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.341938][ T2955] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.349481][ T2955] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.358212][ T2955] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.366870][ T2955] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.373973][ T2955] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.381832][ T2955] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.390447][ T2955] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.398719][ T2955] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.405794][ T2955] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.413758][ T2955] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.433927][ T8484] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.447543][ T8477] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.456499][ T2943] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.492608][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.502384][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.511595][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.520147][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.527757][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.538039][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.583793][ T2943] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.594115][ T2943] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.603002][ T2943] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.612053][ T2943] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.620419][ T2943] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.628582][ T2943] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.648851][ T8477] device veth0_vlan entered promiscuous mode [ 64.658073][ T8484] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.675490][ T8479] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.689031][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.698875][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.707864][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.716081][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.725257][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.733660][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.750693][ T8491] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 64.813651][ T8491] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 64.875796][ T8491] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 64.911721][ T2768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.920444][ T2768] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.928706][ T2768] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.935824][ T2768] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.943576][ T2768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.952630][ T2768] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.961263][ T2768] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.968330][ T2768] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.976647][ T2768] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.988752][ T8477] device veth1_vlan entered promiscuous mode [ 64.999086][ T8491] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 65.056342][ T8489] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.080054][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.088057][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.096764][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.105382][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.114354][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.122152][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.140678][ T8479] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.154669][ T8489] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.188902][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.198770][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.211182][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.220419][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.229248][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.237275][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.245608][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.259452][ T8486] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.277991][ T8484] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 65.291272][ T8484] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.309882][ T2955] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.318366][ T2955] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.334490][ T2955] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.346389][ T2955] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.358205][ T2955] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.365374][ T2955] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.379628][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 170.386562][ C0] rcu: 0-...!: (10499 ticks this GP) idle=8ca/1/0x4000000000000002 softirq=11095/11095 fqs=0 [ 170.397070][ C0] (t=10501 jiffies g=6717 q=45) [ 170.402000][ C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g6717 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 170.413257][ C0] rcu: RCU grace-period kthread stack dump: [ 170.419132][ C0] rcu_preempt I29032 10 2 0x80004000 [ 170.425457][ C0] Call Trace: [ 170.428739][ C0] __schedule+0x9a0/0xcc0 [ 170.433095][ C0] schedule+0x181/0x210 [ 170.437244][ C0] schedule_timeout+0x14f/0x240 [ 170.442095][ C0] ? run_local_timers+0x120/0x120 [ 170.447109][ C0] rcu_gp_kthread+0xed8/0x1770 [ 170.451871][ C0] kthread+0x332/0x350 [ 170.456056][ C0] ? rcu_report_qs_rsp+0x140/0x140 [ 170.461178][ C0] ? kthread_blkcg+0xe0/0xe0 [ 170.465788][ C0] ret_from_fork+0x24/0x30 [ 170.470259][ C0] NMI backtrace for cpu 0 [ 170.474583][ C0] CPU: 0 PID: 8498 Comm: syz-executor.0 Not tainted 5.5.0-rc5-syzkaller #0 [ 170.483154][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 170.493199][ C0] Call Trace: [ 170.496471][ C0] [ 170.499320][ C0] dump_stack+0x1fb/0x318 [ 170.503644][ C0] nmi_cpu_backtrace+0xaf/0x1a0 [ 170.508487][ C0] ? nmi_trigger_cpumask_backtrace+0x16d/0x290 [ 170.514631][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 170.520690][ C0] nmi_trigger_cpumask_backtrace+0x174/0x290 [ 170.526662][ C0] arch_trigger_cpumask_backtrace+0x10/0x20 [ 170.532543][ C0] rcu_dump_cpu_stacks+0x15a/0x220 [ 170.537646][ C0] rcu_sched_clock_irq+0xe25/0x1ad0 [ 170.542836][ C0] ? trace_hardirqs_off+0x74/0x80 [ 170.547872][ C0] update_process_times+0x12d/0x180 [ 170.553072][ C0] tick_sched_timer+0x263/0x420 [ 170.557933][ C0] ? tick_setup_sched_timer+0x3d0/0x3d0 [ 170.563482][ C0] __hrtimer_run_queues+0x403/0x840 [ 170.568690][ C0] hrtimer_interrupt+0x38c/0xda0 [ 170.573639][ C0] ? debug_smp_processor_id+0x9/0x20 [ 170.578917][ C0] smp_apic_timer_interrupt+0x109/0x280 [ 170.584452][ C0] apic_timer_interrupt+0xf/0x20 [ 170.589373][ C0] [ 170.592305][ C0] RIP: 0010:free_thread_stack+0x13d/0x590 [ 170.598019][ C0] Code: 00 00 e8 86 91 61 00 e9 5d 04 00 00 e8 3c 2c 2e 00 48 89 df 31 f6 e8 02 8d 6f 00 43 80 3c 2e 00 74 08 4c 89 e7 e8 73 94 6a 00 <49> 8b 1c 24 48 83 c3 08 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 [ 170.617811][ C0] RSP: 0018:ffffc900025e7848 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 170.626232][ C0] RAX: 0000000000000001 RBX: ffffea0002611340 RCX: 0000000000000000 [ 170.634196][ C0] RDX: ffffc90001e99000 RSI: 0000000000000000 RDI: ffffea0002611340 [ 170.642164][ C0] RBP: ffffc900025e7880 R08: dffffc0000000000 R09: fffffbfff12c962d [ 170.650231][ C0] R10: fffffbfff12c962d R11: 0000000000000000 R12: ffff8880a4486f20 [ 170.658219][ C0] R13: dffffc0000000000 R14: 1ffff11014890de4 R15: ffff88808f0698b8 [ 170.666211][ C0] ? free_thread_stack+0x12e/0x590 [ 170.671315][ C0] put_task_stack+0xa3/0x130 [ 170.675898][ C0] finish_task_switch+0x3f1/0x550 [ 170.680919][ C0] __schedule+0x9a8/0xcc0 [ 170.685256][ C0] ? do_raw_spin_unlock+0x142/0x950 [ 170.690459][ C0] schedule+0x181/0x210 [ 170.694608][ C0] futex_wait_queue_me+0x2a3/0x4b0 [ 170.699728][ C0] futex_wait+0x252/0x770 [ 170.704071][ C0] do_futex+0x437/0x3d60 [ 170.708304][ C0] ? __lock_acquire+0xc75/0x1be0 [ 170.713271][ C0] ? xsk_setsockopt+0x206/0x770 [ 170.718117][ C0] ? __might_fault+0xf9/0x160 [ 170.722789][ C0] ? __might_fault+0xf9/0x160 [ 170.727459][ C0] ? check_preemption_disabled+0xb4/0x260 [ 170.733166][ C0] ? debug_smp_processor_id+0x9/0x20 [ 170.738542][ C0] __se_sys_futex+0x28c/0x360 [ 170.743215][ C0] ? prepare_exit_to_usermode+0x221/0x5b0 [ 170.748919][ C0] ? trace_irq_disable_rcuidle+0x23/0x1e0 [ 170.754630][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 170.760083][ C0] __x64_sys_futex+0xe5/0x100 [ 170.764862][ C0] do_syscall_64+0xf7/0x1c0 [ 170.769356][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 170.775237][ C0] RIP: 0033:0x45af49 [ 170.779138][ C0] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 170.798731][ C0] RSP: 002b:00007fa8c81f9cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 170.807129][ C0] RAX: ffffffffffffffda RBX: 000000000075bf28 RCX: 000000000045af49 [ 170.815087][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000075bf28 [ 170.823045][ C0] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 170.831007][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000075bf2c [ 170.838964][ C0] R13: 00007fff6b06dcbf R14: 00007fa8c81fa9c0 R15: 000000000075bf2c