Warning: Permanently added '10.128.0.32' (ECDSA) to the list of known hosts. 2019/12/03 00:41:17 fuzzer started 2019/12/03 00:41:19 dialing manager at 10.128.0.26:38907 2019/12/03 00:41:19 syscalls: 2697 2019/12/03 00:41:19 code coverage: enabled 2019/12/03 00:41:19 comparison tracing: enabled 2019/12/03 00:41:19 extra coverage: extra coverage is not supported by the kernel 2019/12/03 00:41:19 setuid sandbox: enabled 2019/12/03 00:41:19 namespace sandbox: enabled 2019/12/03 00:41:19 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/03 00:41:19 fault injection: enabled 2019/12/03 00:41:19 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/03 00:41:19 net packet injection: enabled 2019/12/03 00:41:19 net device setup: enabled 2019/12/03 00:41:19 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/12/03 00:41:19 devlink PCI setup: PCI device 0000:00:10.0 is not available 00:41:20 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x36cc, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000023005308000000000000000004000000100011003a25c97f8bb44913001185b0212b6b2f696d655f747970855c2dcc5d907332950d47e3c96d6500"], 0x24}, 0x1, 0x1c689, 0x0, 0x1cabe}, 0x0) 00:41:20 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f00000003c0)=[@mss], 0x1) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r1 = syz_open_pts(r0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10003, 0x80011, r2, 0x0) read(r1, &(0x7f00000000c0)=""/19, 0xff58) [ 56.030101][ T8140] IPVS: ftp: loaded support on port[0] = 21 [ 56.135881][ T8142] IPVS: ftp: loaded support on port[0] = 21 00:41:20 executing program 2: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(0x0, r3, 0x0) setreuid(r1, r3) [ 56.258707][ T8140] chnl_net:caif_netlink_parms(): no params data found [ 56.309556][ T8142] chnl_net:caif_netlink_parms(): no params data found [ 56.347764][ T8140] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.357974][ T8140] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.366444][ T8140] device bridge_slave_0 entered promiscuous mode [ 56.384908][ T8140] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.395209][ T8140] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.403451][ T8140] device bridge_slave_1 entered promiscuous mode [ 56.449658][ T8142] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.460057][ T8142] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.468400][ T8142] device bridge_slave_0 entered promiscuous mode [ 56.479502][ T8140] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.490536][ T8142] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.500008][ T8142] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.508734][ T8142] device bridge_slave_1 entered promiscuous mode [ 56.525618][ T8140] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 00:41:21 executing program 3: syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x2, 0x2) syz_open_dev$swradio(0x0, 0x1, 0x2) epoll_create1(0x80000) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x9b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff}) accept4$vsock_stream(r1, &(0x7f0000000740), 0x10, 0x800) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) io_setup(0x8, &(0x7f0000000200)=0x0) io_submit(r4, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000002c0)={0x26, 0x0, 0x4, 0x80000, {0x0, 0x0}, {0x3, 0x8, 0xd, 0x0, 0xffff, 0x3, "f2f2a35d"}, 0x0, 0x1, @offset=0x7fff, 0x4}) r6 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x6, 0x501000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu//.z1\x8c', 0x1ff) write$binfmt_script(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="2321202e2f66696c6530202e2f6367726f75702e6e65742f73797a3100202e2f6367726f75702e6370752f2e797a3100204073797374656d5e20706f72743000202728407365637572697479232b5b207573657200205d206386ff6465765e63707573657473656c662547504c0a33e5d53c6170fc22cf15c1c61873b54884d55f9f74be9305d0097e7777a3757f89897750ed5ddb939da9cbdb487b0e710eeda73058c09ef1694239daa01f5f055c2e485b0942a32f5bff951d6c0a3b212600000000000000"], 0xc6) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x80080, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000280)={'nr0\x01\x00', 0x4009}) prctl$PR_SET_MM(0x23, 0xc12f356e2b198f51, &(0x7f0000ffb000/0x3000)=nil) r8 = add_key$user(&(0x7f0000000240)='user\x00', 0x0, &(0x7f00000003c0)="f1d6275ef617a6431d89429288e0ac455d00867174541165cd16bb6d1e0c518e99686266942a368982062f14bf14b371f7c145615ce8b80270dfb3cfb2b3ba99b194f601cb40eb1d7d5a61c930794e97bbf467400a2607be65ddd8e7d0e6e8ad3dbe1a058f0bfa935f8e000cfc89ab0a680ce1995c79c96d75ffed5fa0c3ea145c05b486edff5720e527ffa7fb16edc136bc8f270eeed4ad3842ae9f912c747bdbd65923ce3ffd193d15d09649f199b4a3133e8b44b04c2f554be4fc296fca5132726b13685477328045", 0xca, 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000004c0)={r8, 0x0, 0xe}, 0x0, 0xffffffffffffffff, &(0x7f0000000500)="088237799872f22c7b66ac336315") r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000700)=0x8001, 0xfffffffffffffc5e) write$binfmt_script(r9, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], 0xbe) r10 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETVNETHDRSZ(r7, 0x400454d8, &(0x7f0000000200)=0xa7) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x8914, &(0x7f00000018c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83CZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x00\x00\x00\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8dx\xd5\x1dU*s)\x12[\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xddeF>29\v\x02\xa2b\x13R\xef\xffA,\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x81\x10:\x0e(\xdd\xfc\xc9\xc6\xb4\xf0\'f:\xbd\xfe\x11\xf8\xc8W\x81s^\xd9W\xf1\x94\xaf\xc5\x8a\xb4f\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2A') ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f0000000540)={{0x10000b, 0x4}, 'port0\x00', 0x21, 0x11020, 0x7f, 0x3, 0x7fff, 0x3, 0x6f25, 0x0, 0x2, 0xfff}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r11, 0x10e, 0x1, &(0x7f0000000000)=0xb, 0xee499dd7534c38ac) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r12, 0x10e, 0x1, &(0x7f0000000000)=0xb, 0xee499dd7534c38ac) r13 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r13, 0x0, 0x482, &(0x7f0000000300)={0x100000011, @dev, 0x0, 0x0, 'lblc\x00', 0x0, 0x0, 0xffffffff}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r13, 0x0, 0x482, &(0x7f0000000100)={0x84, @local, 0x8000, 0x0, 'sh\x00', 0x4, 0x2, 0x74}, 0x2c) write$cgroup_subtree(r7, &(0x7f0000000340)=ANY=[@ANYPTR=&(0x7f0000000980)=ANY=[@ANYPTR=&(0x7f00000007c0)=ANY=[@ANYPTR, @ANYRESOCT=r12, @ANYRES64=r11, @ANYBLOB="5564eb8b870ab7cd954cdacf18654e8109a1c94f38a67506bffdbb72cf09c68a03df9e47a25082a960aa2a36a3ba5f06f654507a58ca90d600404e88e59d3e8a7f13462209ab165d7dbacc371ddeb8d982354b324c22ae4f3453b2694ec9c6c08b23c9763c98ef062a63a85d10c73d84799aa61a", @ANYRESOCT=r12], @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYRES64=r7, @ANYRES16], @ANYRESDEC=r13, @ANYRESDEC=r6, @ANYRES16, @ANYRES64, @ANYRESOCT=r5], @ANYRESOCT], 0x1f) syz_open_dev$evdev(&(0x7f0000000780)='/dev/input/event#\x00', 0x5, 0x4000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) [ 56.550650][ T8142] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.570471][ T8140] team0: Port device team_slave_0 added [ 56.572531][ T8146] IPVS: ftp: loaded support on port[0] = 21 [ 56.582390][ T8142] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.594126][ T8140] team0: Port device team_slave_1 added [ 56.646905][ T8140] device hsr_slave_0 entered promiscuous mode [ 56.731258][ T8140] device hsr_slave_1 entered promiscuous mode [ 56.780500][ T8142] team0: Port device team_slave_0 added [ 56.816640][ T8148] IPVS: ftp: loaded support on port[0] = 21 00:41:21 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x0, 0x6, 0x1}, 0x14}}, 0x0) [ 56.825975][ T8142] team0: Port device team_slave_1 added [ 56.911200][ T8140] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.993460][ T8142] device hsr_slave_0 entered promiscuous mode 00:41:21 executing program 5: io_setup(0x200, &(0x7f0000000180)=0x0) r1 = memfd_create(&(0x7f0000000000)=':\x00', 0x0) io_submit(r0, 0x1, &(0x7f0000000140)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) io_getevents(r0, 0x0, 0x1, &(0x7f0000d83f60)=[{}], 0x0) [ 57.043229][ T8142] device hsr_slave_1 entered promiscuous mode [ 57.081351][ T8142] debugfs: Directory 'hsr0' with parent '/' already present! [ 57.097966][ T8140] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 57.142442][ T8140] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 57.212694][ T8140] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 57.294973][ T8150] IPVS: ftp: loaded support on port[0] = 21 [ 57.305858][ T8146] chnl_net:caif_netlink_parms(): no params data found [ 57.316050][ T8152] IPVS: ftp: loaded support on port[0] = 21 [ 57.427365][ T8148] chnl_net:caif_netlink_parms(): no params data found [ 57.482481][ T8142] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 57.561053][ T8146] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.568136][ T8146] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.576557][ T8146] device bridge_slave_0 entered promiscuous mode [ 57.586016][ T8146] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.593533][ T8146] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.603838][ T8146] device bridge_slave_1 entered promiscuous mode [ 57.611124][ T8142] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 57.676282][ T8142] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 57.747358][ T8140] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.769863][ T8146] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.783745][ T8150] chnl_net:caif_netlink_parms(): no params data found [ 57.792578][ T8142] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 57.840601][ T8146] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.866700][ T8146] team0: Port device team_slave_0 added [ 57.876621][ T8146] team0: Port device team_slave_1 added [ 57.883501][ T8148] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.890551][ T8148] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.898593][ T8148] device bridge_slave_0 entered promiscuous mode [ 57.906750][ T8148] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.913899][ T8148] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.922026][ T8148] device bridge_slave_1 entered promiscuous mode [ 57.993487][ T8146] device hsr_slave_0 entered promiscuous mode [ 58.041384][ T8146] device hsr_slave_1 entered promiscuous mode [ 58.081127][ T8146] debugfs: Directory 'hsr0' with parent '/' already present! [ 58.116469][ T8140] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.127237][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.135969][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.145437][ T8148] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.182694][ T8150] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.189838][ T8150] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.199929][ T8150] device bridge_slave_0 entered promiscuous mode [ 58.208382][ T8148] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.235048][ T8150] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.242922][ T8150] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.252002][ T8150] device bridge_slave_1 entered promiscuous mode [ 58.270188][ T8148] team0: Port device team_slave_0 added [ 58.303165][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.311907][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.320223][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.327432][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.335985][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.345952][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.354551][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.361602][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.369088][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.377948][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.386576][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.395103][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.404171][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.414611][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.422858][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.431510][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.439675][ T8146] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 58.492914][ T8152] chnl_net:caif_netlink_parms(): no params data found [ 58.514771][ T8148] team0: Port device team_slave_1 added [ 58.523212][ T8140] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.536188][ T8140] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.544635][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.555615][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.563502][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.571863][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.581099][ T8146] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 58.637932][ T8146] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 58.693821][ T8146] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 58.747008][ T8150] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.760523][ T8150] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.790089][ T8140] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.817618][ T8152] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.825176][ T8152] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.833255][ T8152] device bridge_slave_0 entered promiscuous mode [ 58.842861][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.850266][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.872553][ T8150] team0: Port device team_slave_0 added [ 58.912928][ T8148] device hsr_slave_0 entered promiscuous mode [ 58.961238][ T8148] device hsr_slave_1 entered promiscuous mode [ 59.011083][ T8148] debugfs: Directory 'hsr0' with parent '/' already present! [ 59.018719][ T8152] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.026025][ T8152] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.036708][ T8152] device bridge_slave_1 entered promiscuous mode [ 59.054409][ T8152] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.065539][ T8150] team0: Port device team_slave_1 added [ 59.096408][ T8152] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.120894][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 164.127761][ C1] rcu: 1-....: (1 GPs behind) idle=ff6/1/0x4000000000000002 softirq=10298/10299 fqs=2852 [ 164.137889][ C1] (t=10500 jiffies g=6081 q=124) [ 164.142905][ C1] rcu: rcu_preempt kthread starved for 4784 jiffies! g6081 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 164.153911][ C1] rcu: RCU grace-period kthread stack dump: [ 164.159787][ C1] rcu_preempt R running task 29032 10 2 0x80004000 [ 164.167695][ C1] Call Trace: [ 164.171006][ C1] __schedule+0x9a0/0xcc0 [ 164.175338][ C1] schedule+0x181/0x210 [ 164.179484][ C1] schedule_timeout+0x14f/0x240 [ 164.184324][ C1] ? run_local_timers+0x120/0x120 [ 164.189339][ C1] rcu_gp_kthread+0xed8/0x1770 [ 164.194101][ C1] kthread+0x332/0x350 [ 164.198150][ C1] ? rcu_report_qs_rsp+0x140/0x140 [ 164.203248][ C1] ? kthread_blkcg+0xe0/0xe0 [ 164.207822][ C1] ret_from_fork+0x24/0x30 [ 164.212240][ C1] NMI backtrace for cpu 1 [ 164.216555][ C1] CPU: 1 PID: 8140 Comm: syz-executor.0 Not tainted 5.4.0-syzkaller #0 [ 164.224774][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 164.234816][ C1] Call Trace: [ 164.238083][ C1] [ 164.240926][ C1] dump_stack+0x1fb/0x318 [ 164.245241][ C1] nmi_cpu_backtrace+0xaf/0x1a0 [ 164.250090][ C1] ? nmi_trigger_cpumask_backtrace+0x16d/0x290 [ 164.256230][ C1] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 164.262281][ C1] nmi_trigger_cpumask_backtrace+0x174/0x290 [ 164.268248][ C1] arch_trigger_cpumask_backtrace+0x10/0x20 [ 164.274123][ C1] rcu_dump_cpu_stacks+0x15a/0x220 [ 164.279232][ C1] rcu_sched_clock_irq+0xe25/0x1ad0 [ 164.284503][ C1] ? trace_hardirqs_off+0x74/0x80 [ 164.289514][ C1] update_process_times+0x12d/0x180 [ 164.294713][ C1] tick_sched_timer+0x263/0x420 [ 164.299550][ C1] ? tick_setup_sched_timer+0x3d0/0x3d0 [ 164.305081][ C1] __hrtimer_run_queues+0x403/0x840 [ 164.310307][ C1] hrtimer_interrupt+0x38c/0xda0 [ 164.315275][ C1] ? debug_smp_processor_id+0x9/0x20 [ 164.320567][ C1] smp_apic_timer_interrupt+0x109/0x280 [ 164.326119][ C1] apic_timer_interrupt+0xf/0x20 [ 164.331046][ C1] [ 164.333978][ C1] RIP: 0010:__memcg_kmem_uncharge+0x28/0x2e0 [ 164.340125][ C1] Code: 00 00 55 48 89 e5 41 57 41 56 41 55 41 54 53 50 89 f3 49 89 fc 48 b8 00 00 00 00 00 fc ff df 4c 8d 77 38 4d 89 f5 49 c1 ed 03 <41> 80 7c 05 00 00 74 08 4c 89 f7 e8 d8 f4 fa ff 4d 8b 3e b8 01 00 [ 164.359818][ C1] RSP: 0018:ffffc90001ec75b8 EFLAGS: 00000a02 ORIG_RAX: ffffffffffffff13 [ 164.368217][ C1] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffff88808d65e100 [ 164.376174][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffea00029c7bc0 [ 164.384137][ C1] RBP: ffffc90001ec75e8 R08: 000000000003a768 R09: ffffed101522d687 [ 164.392091][ C1] R10: ffffed101522d687 R11: 0000000000000000 R12: ffffea00029c7bc0 [ 164.400051][ C1] R13: 1ffffd4000538f7f R14: ffffea00029c7bf8 R15: ffff8880a916b428 [ 164.408028][ C1] ? free_thread_stack+0x124/0x590 [ 164.413127][ C1] free_thread_stack+0x12e/0x590 [ 164.418074][ C1] put_task_stack+0xa3/0x130 [ 164.422652][ C1] finish_task_switch+0x3f1/0x550 [ 164.427666][ C1] __schedule+0x9a8/0xcc0 [ 164.431992][ C1] preempt_schedule_irq+0xc1/0x140 [ 164.437090][ C1] retint_kernel+0x1b/0x2b [ 164.441507][ C1] RIP: 0010:qlink_free+0x91/0xb0 [ 164.446428][ C1] Code: 58 07 00 74 35 4c 89 f7 57 9d 0f 1f 44 00 00 e8 15 1b ca ff eb 19 e8 ae 18 ca ff 48 83 3d 0e 7a 58 07 00 74 17 4c 89 f7 57 9d <0f> 1f 44 00 00 5b 41 5e 41 5f 5d c3 0f 0b 0f 0b 0f 0b 0f 0b 90 66 [ 164.466017][ C1] RSP: 0018:ffffc90001ec7848 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13 [ 164.474414][ C1] RAX: ffff88808d65e994 RBX: ffff888095780000 RCX: ffffffff815c0597 [ 164.482368][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000286 [ 164.490324][ C1] RBP: ffffc90001ec7860 R08: ffff88808d65e958 R09: fffffbfff13c851f [ 164.498281][ C1] R10: fffffbfff13c851f R11: 0000000000000000 R12: ffff888095780000 [ 164.506324][ C1] R13: 00000000000000c8 R14: 0000000000000286 R15: ffff8880aa8021c0 [ 164.514295][ C1] ? mark_lock+0x107/0x1650 [ 164.518878][ C1] quarantine_reduce+0x15e/0x1d0 [ 164.523804][ C1] __kasan_kmalloc+0x46/0x1b0 [ 164.528484][ C1] ? __kasan_check_read+0x11/0x20 [ 164.533495][ C1] ? mark_lock+0x107/0x1650 [ 164.537993][ C1] ? __kasan_check_read+0x11/0x20 [ 164.543002][ C1] ? mark_lock+0x107/0x1650 [ 164.547496][ C1] ? rcu_lock_release+0x4/0x20 [ 164.552261][ C1] ? lockdep_hardirqs_on+0x3c5/0x7d0 [ 164.557531][ C1] ? kmem_cache_alloc+0x194/0x2e0 [ 164.562542][ C1] kasan_slab_alloc+0xf/0x20 [ 164.567140][ C1] kmem_cache_alloc+0x1f5/0x2e0 [ 164.571998][ C1] ? dup_mmap+0x587/0xe00 [ 164.576332][ C1] dup_mmap+0x587/0xe00 [ 164.580489][ C1] dup_mm+0x9e/0x340 [ 164.584401][ C1] copy_process+0x1e49/0x5510 [ 164.589109][ C1] _do_fork+0x13e/0x660 [ 164.593263][ C1] ? check_preemption_disabled+0xb4/0x260 [ 164.598971][ C1] ? debug_smp_processor_id+0x9/0x20 [ 164.604246][ C1] ? debug_smp_processor_id+0x1c/0x20 [ 164.609607][ C1] __x64_sys_clone+0x20b/0x250 [ 164.614369][ C1] do_syscall_64+0xf7/0x1c0 [ 164.618864][ C1] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 164.624739][ C1] RIP: 0033:0x458c4a [ 164.628620][ C1] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 164.648210][ C1] RSP: 002b:00007fff36604810 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 164.656638][ C1] RAX: ffffffffffffffda RBX: 00007fff36604810 RCX: 0000000000458c4a [ 164.664612][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 164.672577][ C1] RBP: 00007fff36604850 R08: 0000000000000001 R09: 00000000015dd940 [ 164.680537][ C1] R10: 00000000015ddc10 R11: 0000000000000246 R12: 0000000000000001 [ 164.688672][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fff366048a0