[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.8' (ECDSA) to the list of known hosts. 2019/12/03 21:09:16 fuzzer started syzkaller login: [ 53.096794][ T8261] cc1 (8261) used greatest stack depth: 23896 bytes left 2019/12/03 21:09:18 dialing manager at 10.128.0.26:42111 2019/12/03 21:09:18 syscalls: 2689 2019/12/03 21:09:18 code coverage: enabled 2019/12/03 21:09:18 comparison tracing: enabled 2019/12/03 21:09:18 extra coverage: extra coverage is not supported by the kernel 2019/12/03 21:09:18 setuid sandbox: enabled 2019/12/03 21:09:18 namespace sandbox: enabled 2019/12/03 21:09:18 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/03 21:09:18 fault injection: enabled 2019/12/03 21:09:18 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/03 21:09:18 net packet injection: enabled 2019/12/03 21:09:18 net device setup: enabled 2019/12/03 21:09:18 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/12/03 21:09:18 devlink PCI setup: PCI device 0000:00:10.0 is not available 21:09:19 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-pclmul\x00'}, 0x58) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYRESDEC=0x0], 0x7) splice(r0, 0x0, r3, 0x0, 0x20000000003, 0x0) 21:09:20 executing program 1: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f00000002c0)={0x0, 0x1, "f3"}) [ 55.125750][ T8268] IPVS: ftp: loaded support on port[0] = 21 21:09:20 executing program 2: r0 = io_uring_setup(0xa4, &(0x7f0000000100)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff], 0x35b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) sysfs$2(0x2, 0x8, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000080)={0x0, &(0x7f0000000180)}, 0x106) [ 55.208942][ T8270] IPVS: ftp: loaded support on port[0] = 21 [ 55.337069][ T8268] chnl_net:caif_netlink_parms(): no params data found [ 55.375083][ T8273] IPVS: ftp: loaded support on port[0] = 21 [ 55.459611][ T8268] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.476229][ T8268] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.483929][ T8268] device bridge_slave_0 entered promiscuous mode [ 55.494474][ T8268] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.502426][ T8268] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.510510][ T8268] device bridge_slave_1 entered promiscuous mode 21:09:20 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x300, 0x0, 0x0) [ 55.550826][ T8270] chnl_net:caif_netlink_parms(): no params data found [ 55.591537][ T8268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.639233][ T8268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.710153][ T8270] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.720999][ T8270] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.729091][ T8270] device bridge_slave_0 entered promiscuous mode [ 55.763535][ T8268] team0: Port device team_slave_0 added [ 55.770039][ T8270] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.779629][ T8270] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.787858][ T8270] device bridge_slave_1 entered promiscuous mode [ 55.805734][ T8268] team0: Port device team_slave_1 added 21:09:20 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x85b0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) sendto$inet(r2, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) [ 55.813492][ T8273] chnl_net:caif_netlink_parms(): no params data found [ 55.835763][ T8277] IPVS: ftp: loaded support on port[0] = 21 [ 55.847144][ T8270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.928736][ T8268] device hsr_slave_0 entered promiscuous mode [ 55.999033][ T8268] device hsr_slave_1 entered promiscuous mode 21:09:21 executing program 5: ioprio_set$pid(0x30000000002, 0x0, 0x800004000) [ 56.082972][ T8270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.137617][ T8279] IPVS: ftp: loaded support on port[0] = 21 [ 56.161124][ T8273] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.174598][ T8273] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.182909][ T8273] device bridge_slave_0 entered promiscuous mode [ 56.221119][ T8273] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.228724][ T8273] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.236604][ T8273] device bridge_slave_1 entered promiscuous mode [ 56.244926][ T8270] team0: Port device team_slave_0 added [ 56.253076][ T8270] team0: Port device team_slave_1 added [ 56.289113][ T8281] IPVS: ftp: loaded support on port[0] = 21 [ 56.301455][ T8268] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.384633][ T8273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.399609][ T8273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.420185][ T8268] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.470052][ T8268] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 56.608901][ T8270] device hsr_slave_0 entered promiscuous mode [ 56.666480][ T8270] device hsr_slave_1 entered promiscuous mode [ 56.726368][ T8270] debugfs: Directory 'hsr0' with parent '/' already present! [ 56.737107][ T8268] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 56.796821][ T8273] team0: Port device team_slave_0 added [ 56.805629][ T8273] team0: Port device team_slave_1 added [ 56.837045][ T8277] chnl_net:caif_netlink_parms(): no params data found [ 56.938820][ T8273] device hsr_slave_0 entered promiscuous mode [ 56.977045][ T8273] device hsr_slave_1 entered promiscuous mode [ 57.016177][ T8273] debugfs: Directory 'hsr0' with parent '/' already present! [ 57.067601][ T8270] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 57.108349][ T8270] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 57.169842][ T8270] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 57.231552][ T8270] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 57.309720][ T8279] chnl_net:caif_netlink_parms(): no params data found [ 57.318883][ T8277] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.326401][ T8277] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.334023][ T8277] device bridge_slave_0 entered promiscuous mode [ 57.341968][ T8277] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.349122][ T8277] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.356929][ T8277] device bridge_slave_1 entered promiscuous mode [ 57.367570][ T8273] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 57.419538][ T8273] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 57.514965][ T8273] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 57.559469][ T8277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.601914][ T8273] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 57.656202][ T8277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.672500][ T8279] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.679924][ T8279] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.688498][ T8279] device bridge_slave_0 entered promiscuous mode [ 57.696923][ T8279] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.704017][ T8279] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.711795][ T8279] device bridge_slave_1 entered promiscuous mode [ 57.750707][ T8281] chnl_net:caif_netlink_parms(): no params data found [ 57.761622][ T8277] team0: Port device team_slave_0 added [ 57.769766][ T8277] team0: Port device team_slave_1 added [ 57.787507][ T8279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.802008][ T8279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.848041][ T8277] device hsr_slave_0 entered promiscuous mode [ 57.886465][ T8277] device hsr_slave_1 entered promiscuous mode [ 57.926375][ T8277] debugfs: Directory 'hsr0' with parent '/' already present! [ 57.962764][ T8268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.990117][ T8279] team0: Port device team_slave_0 added [ 57.997646][ T8279] team0: Port device team_slave_1 added [ 58.033875][ T8273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.042080][ T8281] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.053284][ T8281] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.061104][ T8281] device bridge_slave_0 entered promiscuous mode [ 58.080343][ T2727] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.088605][ T2727] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.138911][ T8279] device hsr_slave_0 entered promiscuous mode [ 58.177268][ T8279] device hsr_slave_1 entered promiscuous mode [ 58.216455][ T8279] debugfs: Directory 'hsr0' with parent '/' already present! [ 58.233562][ T8270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.245790][ T8281] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.253262][ T8281] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.261337][ T8281] device bridge_slave_1 entered promiscuous mode [ 58.279512][ T2727] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.287357][ T2727] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.297033][ T8273] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.312478][ T8277] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 58.373827][ T8277] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 58.429921][ T8268] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.448493][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.456599][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.464680][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.473937][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.482726][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.489936][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.499866][ T8281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.511075][ T8281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.520539][ T8277] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 58.573883][ T8270] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.591197][ T8287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.600324][ T8287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.609694][ T8287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.618411][ T8287] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.625546][ T8287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.633867][ T8287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.642593][ T8287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.651202][ T8287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.659543][ T8287] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.666641][ T8287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.684492][ T8277] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 58.737622][ T8279] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 58.778283][ T8279] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 58.838829][ T8287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.847053][ T8287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.856633][ T8287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.865125][ T8287] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.873744][ T8287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.882576][ T8287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.891096][ T8287] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.898155][ T8287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.905682][ T8287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.914309][ T8287] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.922934][ T8287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.931554][ T8287] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.941229][ T8281] team0: Port device team_slave_0 added [ 58.949841][ T8281] team0: Port device team_slave_1 added [ 58.971129][ T8279] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 59.018653][ T8284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.027449][ T8284] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.035861][ T8284] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.042952][ T8284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.050452][ T8284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.059253][ T8284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.068517][ T8284] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.077007][ T8284] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.084208][ T8284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.091799][ T8284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.100803][ T8284] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.109297][ T8284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.117713][ T8284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.126158][ T8284] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.134415][ T8284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.143085][ T8284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.151410][ T8284] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.164743][ T8284] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.172795][ T8284] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.190337][ T8279] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 59.288525][ T8281] device hsr_slave_0 entered promiscuous mode [ 59.316599][ T8281] device hsr_slave_1 entered promiscuous mode [ 59.356205][ T8281] debugfs: Directory 'hsr0' with parent '/' already present! [ 59.379993][ T8270] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 59.390775][ T8270] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.405752][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.415996][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.424964][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.433425][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.442166][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.451070][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.459827][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.468354][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.477909][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.486237][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.494485][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.503240][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.511467][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.519687][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.528280][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.536180][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.545785][ T8268] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.560549][ T8273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.639851][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.649113][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.657305][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.664738][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.678640][ T8273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.694092][ T8270] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.705265][ T8284] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.712969][ T8284] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.722588][ T8268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.732144][ T8281] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 59.801315][ T8281] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 59.859026][ T8281] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 59.888073][ T8281] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 59.948586][ T8277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.994650][ T8277] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.015813][ T2727] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.032065][ T2727] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.082132][ T8279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.096141][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.105478][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.121227][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.128351][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.142092][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.150864][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.164754][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.171958][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.188768][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.201598][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.233385][ T8279] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.273115][ T8287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.288908][ T8287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.304239][ T8287] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.320972][ T8287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.331997][ T8287] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.344456][ T8287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.377018][ T8287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.410800][ T8287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 165.116038][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 165.122835][ C1] rcu: 1-...!: (1 GPs behind) idle=4fa/1/0x4000000000000002 softirq=11475/11479 fqs=15 [ 165.132810][ C1] (t=10500 jiffies g=6541 q=569) [ 165.137829][ C1] rcu: rcu_preempt kthread starved for 10468 jiffies! g6541 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 165.148913][ C1] rcu: RCU grace-period kthread stack dump: [ 165.154896][ C1] rcu_preempt R running task 29032 10 2 0x80004000 [ 165.162806][ C1] Call Trace: [ 165.166098][ C1] __schedule+0x9a0/0xcc0 [ 165.170425][ C1] schedule+0x181/0x210 [ 165.174568][ C1] schedule_timeout+0x14f/0x240 [ 165.179405][ C1] ? run_local_timers+0x120/0x120 [ 165.184421][ C1] rcu_gp_kthread+0xed8/0x1770 [ 165.189183][ C1] kthread+0x332/0x350 [ 165.193238][ C1] ? rcu_report_qs_rsp+0x140/0x140 [ 165.198339][ C1] ? kthread_blkcg+0xe0/0xe0 [ 165.202939][ C1] ret_from_fork+0x24/0x30 [ 165.207362][ C1] NMI backtrace for cpu 1 [ 165.211686][ C1] CPU: 1 PID: 8284 Comm: kworker/1:3 Not tainted 5.4.0-syzkaller #0 [ 165.219658][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 165.229739][ C1] Workqueue: ipv6_addrconf addrconf_dad_work [ 165.235728][ C1] Call Trace: [ 165.239002][ C1] [ 165.241850][ C1] dump_stack+0x1fb/0x318 [ 165.246170][ C1] nmi_cpu_backtrace+0xaf/0x1a0 [ 165.251007][ C1] ? nmi_trigger_cpumask_backtrace+0x16d/0x290 [ 165.257149][ C1] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 165.263206][ C1] nmi_trigger_cpumask_backtrace+0x174/0x290 [ 165.269222][ C1] arch_trigger_cpumask_backtrace+0x10/0x20 [ 165.275103][ C1] rcu_dump_cpu_stacks+0x15a/0x220 [ 165.280209][ C1] rcu_sched_clock_irq+0xe25/0x1ad0 [ 165.285397][ C1] ? trace_hardirqs_off+0x74/0x80 [ 165.290950][ C1] update_process_times+0x12d/0x180 [ 165.296147][ C1] tick_sched_timer+0x263/0x420 [ 165.300995][ C1] ? tick_setup_sched_timer+0x3d0/0x3d0 [ 165.306537][ C1] __hrtimer_run_queues+0x403/0x840 [ 165.311748][ C1] hrtimer_interrupt+0x38c/0xda0 [ 165.316704][ C1] ? debug_smp_processor_id+0x9/0x20 [ 165.321982][ C1] smp_apic_timer_interrupt+0x109/0x280 [ 165.327516][ C1] apic_timer_interrupt+0xf/0x20 [ 165.332456][ C1] [ 165.335386][ C1] RIP: 0010:__memcg_kmem_uncharge+0x2e/0x2e0 [ 165.341375][ C1] Code: 41 57 41 56 41 55 41 54 53 50 89 f3 49 89 fc 48 b8 00 00 00 00 00 fc ff df 4c 8d 77 38 4d 89 f5 49 c1 ed 03 41 80 7c 05 00 00 <74> 08 4c 89 f7 e8 d8 f4 fa ff 4d 8b 3e b8 01 00 00 00 89 d9 d3 e0 [ 165.360993][ C1] RSP: 0018:ffffc900021178a8 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 165.369406][ C1] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffff888091564380 [ 165.377366][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffea0002608880 [ 165.385329][ C1] RBP: ffffc900021178d8 R08: 000000000003a768 R09: ffffed1014a096ff [ 165.393338][ C1] R10: ffffed1014a096ff R11: 0000000000000000 R12: ffffea0002608880 [ 165.401410][ C1] R13: 1ffffd40004c1117 R14: ffffea00026088b8 R15: ffff8880a504b7e8 [ 165.409406][ C1] ? free_thread_stack+0x124/0x590 [ 165.414524][ C1] free_thread_stack+0x12e/0x590 [ 165.419464][ C1] put_task_stack+0xa3/0x130 [ 165.424217][ C1] finish_task_switch+0x3f1/0x550 [ 165.429334][ C1] __schedule+0x9a8/0xcc0 [ 165.433660][ C1] ? debug_smp_processor_id+0x9/0x20 [ 165.438950][ C1] schedule+0x181/0x210 [ 165.443100][ C1] schedule_preempt_disabled+0x13/0x20 [ 165.448548][ C1] mutex_optimistic_spin+0x445/0x480 [ 165.454090][ C1] __mutex_lock_common+0x2e7/0x2e10 [ 165.459303][ C1] ? rtnl_lock+0x17/0x20 [ 165.463547][ C1] ? process_one_work+0x75d/0x10d0 [ 165.468655][ C1] mutex_lock_nested+0x1b/0x30 [ 165.473412][ C1] rtnl_lock+0x17/0x20 [ 165.477480][ C1] addrconf_dad_work+0x69/0x1c30 [ 165.482497][ C1] ? rcu_read_lock_sched_held+0x10b/0x170 [ 165.488210][ C1] process_one_work+0x7ef/0x10d0 [ 165.493164][ C1] worker_thread+0xc01/0x1630 [ 165.497849][ C1] kthread+0x332/0x350 [ 165.501904][ C1] ? rcu_lock_release+0x30/0x30 [ 165.507436][ C1] ? kthread_blkcg+0xe0/0xe0 [ 165.512014][ C1] ret_from_fork+0x24/0x30