[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.204' (ECDSA) to the list of known hosts. 2019/12/03 23:02:38 fuzzer started 2019/12/03 23:02:40 dialing manager at 10.128.0.26:42111 2019/12/03 23:02:40 syscalls: 2689 2019/12/03 23:02:40 code coverage: enabled 2019/12/03 23:02:40 comparison tracing: enabled 2019/12/03 23:02:40 extra coverage: extra coverage is not supported by the kernel 2019/12/03 23:02:40 setuid sandbox: enabled 2019/12/03 23:02:40 namespace sandbox: enabled 2019/12/03 23:02:40 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/03 23:02:40 fault injection: enabled 2019/12/03 23:02:40 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/03 23:02:40 net packet injection: enabled 2019/12/03 23:02:40 net device setup: enabled 2019/12/03 23:02:40 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/12/03 23:02:40 devlink PCI setup: PCI device 0000:00:10.0 is not available 23:02:41 executing program 0: r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x33c, 0x4000000, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) 23:02:41 executing program 1: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000840)='/dev/btrfs-control\x00', 0x20000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$IMCTRLREQ(0xffffffffffffffff, 0x80044945, 0x0) ioctl$VIDIOC_ENUMAUDIO(0xffffffffffffffff, 0xc0345641, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) open(0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) accept$packet(r1, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/attr/current\x00', 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xfebe) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'hsr0\x00', 0x0}) bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r3, &(0x7f0000000300)="0503000189063e0000000100c52cf7c25975e697b02f08006b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f", 0xfdb8, 0x80, 0x0, 0xfffffffffffffe57) syzkaller login: [ 63.424584][ T8276] IPVS: ftp: loaded support on port[0] = 21 [ 63.554808][ T8278] IPVS: ftp: loaded support on port[0] = 21 23:02:41 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket(0x0, 0x11, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xa000000000000005) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x6, 0x0, 0xee01, 0x0, 0xee01, 0x80, 0x7}, 0x0, 0x0, 0x0, 0x20}) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000100)={@in={0x2, 0x0, @multicast2}, {0x0}, 0x0}, 0xa0) connect(0xffffffffffffffff, 0x0, 0x0) stat(0x0, &(0x7f0000000580)) lstat(0x0, 0x0) getsockname(0xffffffffffffffff, &(0x7f00000002c0)=@xdp, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newlink={0x38, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r4}]]}}}]}, 0x38}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r5, 0x400454d8, &(0x7f0000000080)) [ 63.605254][ T8276] chnl_net:caif_netlink_parms(): no params data found [ 63.728674][ T8276] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.736661][ T8276] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.744723][ T8276] device bridge_slave_0 entered promiscuous mode [ 63.761866][ T8281] IPVS: ftp: loaded support on port[0] = 21 [ 63.789803][ T8276] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.797402][ T8276] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.805293][ T8276] device bridge_slave_1 entered promiscuous mode 23:02:42 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x400000003, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e0000002b008163e45ae087002401010b0f00000000e0fc4cc91b4dd65b2f0580cb7023072a556d1c958c000000", 0x2e}], 0x1}, 0x0) [ 63.869960][ T8278] chnl_net:caif_netlink_parms(): no params data found [ 63.881106][ T8276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.920391][ T8276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.039726][ T8278] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.055744][ T8278] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.063795][ T8278] device bridge_slave_0 entered promiscuous mode [ 64.076696][ T8276] team0: Port device team_slave_0 added [ 64.084180][ T8276] team0: Port device team_slave_1 added [ 64.094733][ T8278] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.104112][ T8278] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.112360][ T8278] device bridge_slave_1 entered promiscuous mode [ 64.120941][ T8281] chnl_net:caif_netlink_parms(): no params data found 23:02:42 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00\xd7\'\x17C\xdb\xbd\x84\x81\xc9\xe9\x99\xb2\xc2-B`[\xb5#f\xf7\xe6\x82\xc9F\xf9\xe4\x87\xb4\xf6H\xe0^{\xd3g\xa9\x0f\x1e\xca*X\x16 X\x1a{\xbfs\x90Q\xf8\xcb!\x88\xc9.\x1d\x96\x7f8\xff\x0f\xd6\x1e\xaeH\x8d\xb7Fn\x06', 0x26e1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x100002, 0x20040006}) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x2}) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x7000000, 0x0, 0x938e, 0x40000002}) [ 64.199219][ T8276] device hsr_slave_0 entered promiscuous mode [ 64.256304][ T8276] device hsr_slave_1 entered promiscuous mode [ 64.303717][ T8278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.327464][ T8278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.351913][ T8285] IPVS: ftp: loaded support on port[0] = 21 [ 64.391452][ T8287] IPVS: ftp: loaded support on port[0] = 21 [ 64.399714][ T8281] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.410267][ T8281] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.421628][ T8281] device bridge_slave_0 entered promiscuous mode [ 64.437654][ T8278] team0: Port device team_slave_0 added [ 64.461800][ T8281] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.469247][ T8281] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.479853][ T8281] device bridge_slave_1 entered promiscuous mode 23:02:42 executing program 5: ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f00000000c0)=0x5) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000180)="0f20c06635000000400f22c066b8c75100000f23c00f21f8663503000d000f23f8fe043e660fc7b6000066a63e2e36660f382a3b0f01ca0f320fc76af7bad10466ed", 0x42}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x2a443, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 64.488301][ T8278] team0: Port device team_slave_1 added [ 64.507841][ T8276] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.611059][ T8278] device hsr_slave_0 entered promiscuous mode [ 64.657751][ T8278] device hsr_slave_1 entered promiscuous mode [ 64.715878][ T8278] debugfs: Directory 'hsr0' with parent '/' already present! [ 64.723725][ T8276] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.778641][ T8276] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.870404][ T8281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.905311][ T8289] IPVS: ftp: loaded support on port[0] = 21 [ 64.913583][ T8276] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.948672][ T8281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.989815][ T8278] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 65.055272][ T8281] team0: Port device team_slave_0 added [ 65.068577][ T8278] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 65.097303][ T8278] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 65.148811][ T8281] team0: Port device team_slave_1 added [ 65.154574][ T8278] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 65.269049][ T8281] device hsr_slave_0 entered promiscuous mode [ 65.315924][ T8281] device hsr_slave_1 entered promiscuous mode [ 65.365949][ T8281] debugfs: Directory 'hsr0' with parent '/' already present! [ 65.412093][ T8285] chnl_net:caif_netlink_parms(): no params data found [ 65.457330][ T8287] chnl_net:caif_netlink_parms(): no params data found [ 65.511845][ T8287] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.519574][ T8287] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.529222][ T8287] device bridge_slave_0 entered promiscuous mode [ 65.549509][ T8281] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 65.610539][ T8281] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 65.671132][ T8287] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.679047][ T8287] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.687758][ T8287] device bridge_slave_1 entered promiscuous mode [ 65.711431][ T8281] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 65.794170][ T8287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.817246][ T8281] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 65.856987][ T8287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.879127][ T8287] team0: Port device team_slave_0 added [ 65.887596][ T8287] team0: Port device team_slave_1 added [ 65.967951][ T8287] device hsr_slave_0 entered promiscuous mode [ 66.016028][ T8287] device hsr_slave_1 entered promiscuous mode [ 66.085713][ T8287] debugfs: Directory 'hsr0' with parent '/' already present! [ 66.097601][ T8289] chnl_net:caif_netlink_parms(): no params data found [ 66.106410][ T8285] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.113577][ T8285] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.122594][ T8285] device bridge_slave_0 entered promiscuous mode [ 66.133708][ T8285] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.141786][ T8285] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.149512][ T8285] device bridge_slave_1 entered promiscuous mode [ 66.172522][ T8278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.194730][ T8285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.211963][ T8285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.229363][ T8276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.267412][ T8285] team0: Port device team_slave_0 added [ 66.275117][ T8285] team0: Port device team_slave_1 added [ 66.282548][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.291363][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.303415][ T8289] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.311483][ T8289] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.319274][ T8289] device bridge_slave_0 entered promiscuous mode [ 66.346166][ T8278] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.354285][ T8289] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.361785][ T8289] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.370126][ T8289] device bridge_slave_1 entered promiscuous mode [ 66.390283][ T8276] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.401468][ T8287] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 66.497312][ T8285] device hsr_slave_0 entered promiscuous mode [ 66.526075][ T8285] device hsr_slave_1 entered promiscuous mode [ 66.565768][ T8285] debugfs: Directory 'hsr0' with parent '/' already present! [ 66.579189][ T8289] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.591015][ T3752] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.598872][ T3752] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.606753][ T3752] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.615618][ T3752] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.624385][ T3752] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.631585][ T3752] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.642405][ T3752] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.651231][ T3752] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.659858][ T3752] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.667320][ T3752] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.687313][ T8287] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 66.759448][ T8289] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.775296][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.784054][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.793164][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.801503][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.808604][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.817356][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.825953][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.834218][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.841580][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.849854][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.858450][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.868656][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.884601][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.893802][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.902438][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.910935][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.919479][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.928956][ T8287] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 66.988265][ T8287] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 67.044386][ T8276] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 67.055459][ T8276] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.067920][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.075797][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.084920][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.094426][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.103906][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.112586][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.128565][ T8289] team0: Port device team_slave_0 added [ 67.152613][ T8281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.165898][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.174325][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.183665][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.193395][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.202637][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.212970][ T8289] team0: Port device team_slave_1 added [ 67.232929][ T8278] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 67.243664][ T8278] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.255452][ T8285] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 67.287664][ T8285] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 67.337571][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.347461][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.356028][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.364394][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.373357][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.382408][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.390094][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.398774][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.424515][ T8276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.432781][ T8285] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 67.483310][ T8281] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.494210][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.501933][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.521759][ T8278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.529269][ T8285] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 67.587149][ T2895] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.594732][ T2895] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.620206][ T2895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.633558][ T2895] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.643885][ T2895] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.650954][ T2895] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.664464][ T2895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.673177][ T2895] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 172.625546][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 172.633916][ C0] (detected by 0, t=10502 jiffies, g=6417, q=222) [ 172.640421][ C0] rcu: All QSes seen, last rcu_preempt kthread activity 10503 (4294954411-4294943908), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 172.653950][ C0] syz-executor.0 R running task 27784 8296 8276 0x0000400a [ 172.661842][ C0] Call Trace: [ 172.665113][ C0] [ 172.667958][ C0] sched_show_task+0x40f/0x560 [ 172.672725][ C0] rcu_sched_clock_irq+0x1861/0x1ad0 [ 172.678007][ C0] update_process_times+0x12d/0x180 [ 172.683192][ C0] tick_sched_timer+0x263/0x420 [ 172.688030][ C0] ? tick_setup_sched_timer+0x3d0/0x3d0 [ 172.693585][ C0] __hrtimer_run_queues+0x403/0x840 [ 172.698791][ C0] hrtimer_interrupt+0x38c/0xda0 [ 172.703739][ C0] ? debug_smp_processor_id+0x9/0x20 [ 172.709152][ C0] smp_apic_timer_interrupt+0x109/0x280 [ 172.714723][ C0] apic_timer_interrupt+0xf/0x20 [ 172.719667][ C0] [ 172.722599][ C0] RIP: 0010:mod_memcg_page_state+0x3d/0x190 [ 172.728499][ C0] Code: 28 2e 00 48 83 c3 38 48 89 d8 48 c1 e8 03 49 bc 00 00 00 00 00 fc ff df 42 80 3c 20 00 74 08 48 89 df e8 b6 9f 69 00 48 8b 1b <48> 85 db 0f 84 d8 00 00 00 48 c7 c0 20 96 0a 89 48 c1 e8 03 42 80 [ 172.748108][ C0] RSP: 0018:ffffc90002cb7c40 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 172.756519][ C0] RAX: 1ffffd4000486ef7 RBX: 0000000000000000 RCX: ffff8880a7db00c0 [ 172.764489][ C0] RDX: 0000000000000000 RSI: 00000000fffffffc RDI: ffffea0002437780 [ 172.772458][ C0] RBP: ffffc90002cb7c60 R08: dffffc0000000000 R09: fffffbfff12877ed [ 172.780418][ C0] R10: fffffbfff12877ed R11: 0000000000000000 R12: dffffc0000000000 [ 172.788374][ C0] R13: dffffc0000000000 R14: 00000000fffffffc R15: ffff888083399428 [ 172.796354][ C0] free_thread_stack+0x168/0x590 [ 172.801366][ C0] put_task_stack+0xa3/0x130 [ 172.805940][ C0] finish_task_switch+0x3f1/0x550 [ 172.810953][ C0] __schedule+0x9a8/0xcc0 [ 172.815274][ C0] ? ___preempt_schedule+0x16/0x18 [ 172.820375][ C0] preempt_schedule+0xdb/0x120 [ 172.825126][ C0] ___preempt_schedule+0x16/0x18 [ 172.830059][ C0] ? do_group_exit+0x2a8/0x2b0 [ 172.834806][ C0] _raw_spin_unlock_irq+0x77/0x80 [ 172.839818][ C0] do_group_exit+0x2a8/0x2b0 [ 172.844403][ C0] __do_sys_exit_group+0x17/0x20 [ 172.849323][ C0] __se_sys_exit_group+0x14/0x20 [ 172.854245][ C0] __x64_sys_exit_group+0x3b/0x40 [ 172.859256][ C0] do_syscall_64+0xf7/0x1c0 [ 172.863757][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 172.869633][ C0] RIP: 0033:0x45a679 [ 172.873513][ C0] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 172.893104][ C0] RSP: 002b:00007fff4539a2e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 172.901583][ C0] RAX: ffffffffffffffda RBX: 000000000000001e RCX: 000000000045a679 [ 172.909558][ C0] RDX: 0000000000414211 RSI: fffffffffffffff7 RDI: 0000000000000000 [ 172.917515][ C0] RBP: 0000000000000000 R08: ffffffffffffffff R09: 00007fff4539a340 [ 172.925471][ C0] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 172.933425][ C0] R13: 00007fff4539a340 R14: 0000000000000000 R15: 00007fff4539a350 [ 172.941426][ C0] rcu: rcu_preempt kthread starved for 10533 jiffies! g6417 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 172.952504][ C0] rcu: RCU grace-period kthread stack dump: [ 172.958378][ C0] rcu_preempt R running task 29032 10 2 0x80004000 [ 172.966533][ C0] Call Trace: [ 172.969813][ C0] __schedule+0x9a0/0xcc0 [ 172.974140][ C0] schedule+0x181/0x210 [ 172.978284][ C0] schedule_timeout+0x14f/0x240 [ 172.983119][ C0] ? run_local_timers+0x120/0x120 [ 172.988135][ C0] rcu_gp_kthread+0xed8/0x1770 [ 172.992900][ C0] kthread+0x332/0x350 [ 172.996954][ C0] ? rcu_report_qs_rsp+0x140/0x140 [ 173.002076][ C0] ? kthread_blkcg+0xe0/0xe0 [ 173.006679][ C0] ret_from_fork+0x24/0x30