Warning: Permanently added '10.128.10.32' (ECDSA) to the list of known hosts. 2019/12/03 12:15:06 fuzzer started 2019/12/03 12:15:08 dialing manager at 10.128.0.26:45711 2019/12/03 12:15:08 syscalls: 2689 2019/12/03 12:15:08 code coverage: enabled 2019/12/03 12:15:08 comparison tracing: enabled 2019/12/03 12:15:08 extra coverage: extra coverage is not supported by the kernel 2019/12/03 12:15:08 setuid sandbox: enabled 2019/12/03 12:15:08 namespace sandbox: enabled 2019/12/03 12:15:08 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/03 12:15:08 fault injection: enabled 2019/12/03 12:15:08 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/03 12:15:08 net packet injection: enabled 2019/12/03 12:15:08 net device setup: enabled 2019/12/03 12:15:08 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/12/03 12:15:08 devlink PCI setup: PCI device 0000:00:10.0 is not available 12:15:09 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x401, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000080)={0x0, 0x0, {0x0, 0x0, 0x3007}}) 12:15:09 executing program 1: mknod(&(0x7f00000005c0)='./bus\x00', 0x5eef439bff9b86cf, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0xd7e0ce5d01a5091b, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setreuid(0x0, 0xee00) r2 = geteuid() setreuid(r2, 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='security.capability\x00', &(0x7f00000000c0)=@v2, 0x14, 0x0) execve(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) syzkaller login: [ 55.910423][ T8220] IPVS: ftp: loaded support on port[0] = 21 [ 56.057726][ T8220] chnl_net:caif_netlink_parms(): no params data found [ 56.074235][ T8223] IPVS: ftp: loaded support on port[0] = 21 [ 56.148617][ T8220] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.161219][ T8220] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.169734][ T8220] device bridge_slave_0 entered promiscuous mode [ 56.186847][ T8220] bridge0: port 2(bridge_slave_1) entered blocking state 12:15:09 executing program 2: r0 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0xa00000000000000, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x948, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"/2376]}, 0x9c0) [ 56.194652][ T8220] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.202693][ T8220] device bridge_slave_1 entered promiscuous mode [ 56.248191][ T8220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.303283][ T8220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.320909][ T8223] chnl_net:caif_netlink_parms(): no params data found [ 56.368579][ T8220] team0: Port device team_slave_0 added [ 56.389013][ T8220] team0: Port device team_slave_1 added [ 56.411241][ T8226] IPVS: ftp: loaded support on port[0] = 21 [ 56.432845][ T8223] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.439992][ T8223] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.448350][ T8223] device bridge_slave_0 entered promiscuous mode 12:15:10 executing program 3: unshare(0x20600) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0x9, 0x0, &(0x7f0000000080)) [ 56.477152][ T8223] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.485880][ T8223] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.494120][ T8223] device bridge_slave_1 entered promiscuous mode [ 56.534361][ T8220] device hsr_slave_0 entered promiscuous mode [ 56.571352][ T8220] device hsr_slave_1 entered promiscuous mode [ 56.673530][ T8223] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link 12:15:10 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RRENAMEAT(r1, &(0x7f00000000c0)={0x7}, 0x7) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0xc9) r2 = accept$alg(r0, 0x0, 0x0) read$alg(r2, &(0x7f0000000000)=""/232, 0xe8) setsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10) r4 = dup(0xffffffffffffffff) setns(r4, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x10880, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x870fd434627e2475, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, r5, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='schedstat\x00') r6 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r6) r7 = memfd_create(&(0x7f0000000440)='\xb3\x17MS\xdb\xe0\x91~\xd8\x10\xb3\xd4\x9b\xfa\xdc\x1c\xb2\xc7\xdcp<\xefB\x05J\xe4cE\xbe\xd1C\xb5J\x16\'\xfb~\xfa\xfd\xbd\xdb\xc5\'\x8dmm\x9d\x9d\x1cv\x91y\xca\xec\xc7\xa5\xfa\xdf\xdc\xa7&!^\xac\x89a\x8c4\xa6\x85~e< \xc8d\xc4\xce\x7f\xb80\xd3\x03\x97\xea\x98\xfb.x\x1a3\x17\r\x00\xc8\xd0G\x1dq\x9c\x90g7$S8Sw:(+\xd6x$\xd4\xb2L\xf8\xf0<\n-\xe6\xb1\x0e&f\xec{YP%f\x02,M@a{\xe1\xeb*\x93\t', 0x0) write$FUSE_DIRENT(r7, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r7, 0x0) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r9, &(0x7f00000017c0), 0x333, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)) getpgid(0x0) stat(&(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000500)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000001c0)=0x0) capset(&(0x7f0000000280)={0xccc0198, r10}, &(0x7f00000002c0)={0x5, 0x9, 0x9, 0x5, 0x0, 0xffffffff}) geteuid() r11 = getpid() sched_setscheduler(r11, 0x5, &(0x7f0000000380)) io_setup(0x8, &(0x7f0000000280)=0x0) r13 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) io_submit(r12, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r13, 0x0}]) r14 = socket$packet(0x11, 0x2, 0x300) getsockopt$sock_cred(r14, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000001c0)=0xc) r15 = epoll_create1(0x0) fcntl$lock(r15, 0x7, &(0x7f0000000040)) pread64(r8, 0x0, 0x0, 0xa4) [ 56.724399][ T8223] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.765114][ T8220] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.803493][ T8220] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.896603][ T8228] IPVS: ftp: loaded support on port[0] = 21 [ 56.905983][ T8220] netdevsim netdevsim0 netdevsim2: renamed from eth2 12:15:10 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xa4}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x9e}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfdee, &(0x7f000000cf3d)=""/195}, 0x48) [ 56.984556][ T8223] team0: Port device team_slave_0 added [ 56.990446][ T8220] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 57.078143][ T8223] team0: Port device team_slave_1 added [ 57.093437][ T8233] IPVS: ftp: loaded support on port[0] = 21 [ 57.123505][ T8226] chnl_net:caif_netlink_parms(): no params data found [ 57.148673][ T8231] IPVS: ftp: loaded support on port[0] = 21 [ 57.223666][ T8223] device hsr_slave_0 entered promiscuous mode [ 57.261450][ T8223] device hsr_slave_1 entered promiscuous mode [ 57.331152][ T8223] debugfs: Directory 'hsr0' with parent '/' already present! [ 57.415853][ T8226] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.423963][ T8226] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.432057][ T8226] device bridge_slave_0 entered promiscuous mode [ 57.441541][ T8226] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.448590][ T8226] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.456436][ T8226] device bridge_slave_1 entered promiscuous mode [ 57.489989][ T8228] chnl_net:caif_netlink_parms(): no params data found [ 57.544428][ T8233] chnl_net:caif_netlink_parms(): no params data found [ 57.563170][ T8223] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 57.624199][ T8226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.655795][ T8223] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 57.719383][ T8223] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 57.773508][ T8226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.791111][ T8228] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.798211][ T8228] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.806955][ T8228] device bridge_slave_0 entered promiscuous mode [ 57.815462][ T8228] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.822575][ T8228] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.830340][ T8228] device bridge_slave_1 entered promiscuous mode [ 57.843496][ T8223] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 57.907446][ T8226] team0: Port device team_slave_0 added [ 57.946285][ T8226] team0: Port device team_slave_1 added [ 57.953375][ T8233] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.960420][ T8233] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.968103][ T8233] device bridge_slave_0 entered promiscuous mode [ 57.976975][ T8228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.992673][ T8228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.005372][ T8220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.025198][ T8233] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.032402][ T8233] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.040155][ T8233] device bridge_slave_1 entered promiscuous mode [ 58.082735][ T8233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.093729][ T8233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.143961][ T8226] device hsr_slave_0 entered promiscuous mode [ 58.181445][ T8226] device hsr_slave_1 entered promiscuous mode [ 58.211095][ T8226] debugfs: Directory 'hsr0' with parent '/' already present! [ 58.218755][ T8231] chnl_net:caif_netlink_parms(): no params data found [ 58.230268][ T8228] team0: Port device team_slave_0 added [ 58.260752][ T8228] team0: Port device team_slave_1 added [ 58.270431][ T8220] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.278979][ T8233] team0: Port device team_slave_0 added [ 58.289936][ T8233] team0: Port device team_slave_1 added [ 58.304624][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.313092][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.350261][ T2723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.359159][ T2723] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.367836][ T2723] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.375059][ T2723] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.422951][ T8228] device hsr_slave_0 entered promiscuous mode [ 58.461659][ T8228] device hsr_slave_1 entered promiscuous mode [ 58.501187][ T8228] debugfs: Directory 'hsr0' with parent '/' already present! [ 58.525493][ T8231] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.532984][ T8231] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.540669][ T8231] device bridge_slave_0 entered promiscuous mode [ 58.551060][ T8234] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.563290][ T8223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.584534][ T8223] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.595442][ T8231] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.603268][ T8231] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.610841][ T8231] device bridge_slave_1 entered promiscuous mode [ 58.630485][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.638409][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.646432][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.655176][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.663649][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.670668][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.678438][ T8226] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 58.763760][ T8233] device hsr_slave_0 entered promiscuous mode [ 58.801426][ T8233] device hsr_slave_1 entered promiscuous mode [ 58.841206][ T8233] debugfs: Directory 'hsr0' with parent '/' already present! [ 58.859835][ T8226] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 58.892765][ T8226] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 58.964588][ T8231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.975438][ T8234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.000902][ T8228] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 59.033193][ T8226] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 59.084768][ T8231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.104359][ T8234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.113328][ T8234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.121948][ T8234] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.131781][ T8234] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.138793][ T8234] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.146418][ T8234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.155248][ T8234] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.163778][ T8234] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.170813][ T8234] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.178511][ T8234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.187186][ T8234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.195695][ T8234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.204355][ T8234] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.213110][ T8228] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 59.263239][ T8228] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 59.313954][ T8228] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 59.362470][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.370411][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.378245][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.386824][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.404019][ T8231] team0: Port device team_slave_0 added [ 59.415230][ T8231] team0: Port device team_slave_1 added [ 59.493898][ T8231] device hsr_slave_0 entered promiscuous mode [ 59.531498][ T8231] device hsr_slave_1 entered promiscuous mode [ 59.571140][ T8231] debugfs: Directory 'hsr0' with parent '/' already present! [ 59.583907][ T2723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.592588][ T2723] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.604005][ T2723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.614089][ T2723] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.622919][ T2723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.631947][ T2723] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.641590][ T2723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.650184][ T2723] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.658814][ T2723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.667530][ T2723] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.700552][ T8220] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.721641][ T2723] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.729741][ T8233] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 59.763479][ T8233] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 59.820398][ T8223] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.832673][ T8223] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.845663][ T8233] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 59.892887][ T8234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.901540][ T8234] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.926214][ T8226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.936685][ T8233] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 59.990526][ T3000] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.998732][ T3000] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.006502][ T3000] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.014171][ T3000] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.030321][ T8226] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.056377][ T8223] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.070460][ T8231] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 60.143276][ T3000] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.150926][ T3000] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.161396][ T8234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.169912][ T8234] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.179151][ T8234] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.186261][ T8234] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.198186][ T8231] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 60.264848][ T8220] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.274710][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.290699][ T8228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.300388][ T8231] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 60.400500][ T8243] warning: `./bus' has both setuid-root and effective capabilities. Therefore not raising all capabilities. [ 165.330957][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 165.339729][ C1] rcu: 1-...!: (10499 ticks this GP) idle=672/1/0x4000000000000002 softirq=11215/11215 fqs=149 [ 165.356546][ C1] (t=10502 jiffies g=6437 q=126) [ 165.362838][ C1] rcu: rcu_preempt kthread starved for 10205 jiffies! g6437 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 165.376425][ C1] rcu: RCU grace-period kthread stack dump: [ 165.383292][ C1] rcu_preempt R running task 28824 10 2 0x80004000 [ 165.392299][ C1] Call Trace: [ 165.396773][ C1] __schedule+0x9a0/0xcc0 [ 165.406995][ C1] schedule+0x181/0x210 [ 165.414630][ C1] schedule_timeout+0x14f/0x240 [ 165.422947][ C1] ? run_local_timers+0x120/0x120 [ 165.429496][ C1] rcu_gp_kthread+0xed8/0x1770 [ 165.435643][ C1] kthread+0x332/0x350 [ 165.440339][ C1] ? rcu_report_qs_rsp+0x140/0x140 [ 165.446175][ C1] ? kthread_blkcg+0xe0/0xe0 [ 165.454153][ C1] ret_from_fork+0x24/0x30 [ 165.463370][ C1] NMI backtrace for cpu 1 [ 165.470572][ C1] CPU: 1 PID: 262 Comm: kworker/u4:4 Not tainted 5.4.0-syzkaller #0 [ 165.483707][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 165.499712][ C1] Workqueue: events_unbound fsnotify_connector_destroy_workfn [ 165.510372][ C1] Call Trace: [ 165.514903][ C1] [ 165.518573][ C1] dump_stack+0x1fb/0x318 [ 165.524576][ C1] nmi_cpu_backtrace+0xaf/0x1a0 [ 165.530305][ C1] ? nmi_trigger_cpumask_backtrace+0x16d/0x290 [ 165.539130][ C1] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 165.547893][ C1] nmi_trigger_cpumask_backtrace+0x174/0x290 [ 165.556646][ C1] arch_trigger_cpumask_backtrace+0x10/0x20 [ 165.566218][ C1] rcu_dump_cpu_stacks+0x15a/0x220 [ 165.574902][ C1] rcu_sched_clock_irq+0xe25/0x1ad0 [ 165.582224][ C1] ? trace_hardirqs_off+0x74/0x80 [ 165.588965][ C1] update_process_times+0x12d/0x180 [ 165.595060][ C1] tick_sched_timer+0x263/0x420 [ 165.600632][ C1] ? tick_setup_sched_timer+0x3d0/0x3d0 [ 165.606722][ C1] __hrtimer_run_queues+0x403/0x840 [ 165.613057][ C1] hrtimer_interrupt+0x38c/0xda0 [ 165.619651][ C1] ? debug_smp_processor_id+0x9/0x20 [ 165.626739][ C1] smp_apic_timer_interrupt+0x109/0x280 [ 165.635308][ C1] apic_timer_interrupt+0xf/0x20 [ 165.641982][ C1] [ 165.647475][ C1] RIP: 0010:__memcg_kmem_uncharge+0x6/0x2e0 [ 165.660535][ C1] Code: ce 8c 07 00 74 12 48 81 c3 08 02 00 00 48 89 df 4c 89 f6 e8 dc 7d ff ff 5b 41 5e 5d c3 0f 1f 80 00 00 00 00 55 48 89 e5 41 57 <41> 56 41 55 41 54 53 50 89 f3 49 89 fc 48 b8 00 00 00 00 00 fc ff [ 165.696478][ C1] RSP: 0018:ffffc900014a78f0 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 165.712596][ C1] RAX: ffffffff81486ea4 RBX: ffffea00028fac40 RCX: ffff8880a8c445c0 [ 165.725294][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffea00028fac40 [ 165.737568][ C1] RBP: ffffc900014a78f8 R08: dffffc0000000000 R09: fffffbfff120248a [ 165.751954][ C1] R10: fffffbfff120248a R11: 0000000000000000 R12: ffff88808e4504a0 [ 165.776386][ C1] R13: dffffc0000000000 R14: 1ffff11011c8a094 R15: ffff8880903cd9a8 [ 165.790360][ C1] ? free_thread_stack+0x124/0x590 [ 165.802153][ C1] free_thread_stack+0x12e/0x590 [ 165.813665][ C1] put_task_stack+0xa3/0x130 [ 165.823386][ C1] finish_task_switch+0x3f1/0x550 [ 165.834925][ C1] __schedule+0x9a8/0xcc0 [ 165.843830][ C1] ? ___preempt_schedule+0x16/0x18 [ 165.853366][ C1] preempt_schedule+0xdb/0x120 [ 165.861753][ C1] ___preempt_schedule+0x16/0x18 [ 165.872422][ C1] _raw_spin_unlock_irqrestore+0xcc/0xe0 [ 165.883927][ C1] __call_srcu+0x7ab/0xb00 [ 165.893238][ C1] __synchronize_srcu+0x1cf/0x260 [ 165.903431][ C1] ? rcu_read_lock_any_held+0x1a0/0x1a0 [ 165.915238][ C1] synchronize_srcu+0x2cb/0x2f0 [ 165.924906][ C1] fsnotify_connector_destroy_workfn+0x44/0xb0 [ 165.935213][ C1] process_one_work+0x7ef/0x10d0 [ 165.941403][ C1] worker_thread+0xc01/0x1630 [ 165.948714][ C1] kthread+0x332/0x350 [ 165.954390][ C1] ? rcu_lock_release+0x30/0x30 [ 165.962055][ C1] ? kthread_blkcg+0xe0/0xe0 [ 165.969750][ C1] ret_from_fork+0x24/0x30