Warning: Permanently added '10.128.0.207' (ECDSA) to the list of known hosts. 2019/12/03 21:38:18 fuzzer started 2019/12/03 21:38:19 dialing manager at 10.128.0.26:42111 2019/12/03 21:38:20 syscalls: 2689 2019/12/03 21:38:20 code coverage: enabled 2019/12/03 21:38:20 comparison tracing: enabled 2019/12/03 21:38:20 extra coverage: extra coverage is not supported by the kernel 2019/12/03 21:38:20 setuid sandbox: enabled 2019/12/03 21:38:20 namespace sandbox: enabled 2019/12/03 21:38:20 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/03 21:38:20 fault injection: enabled 2019/12/03 21:38:20 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/03 21:38:20 net packet injection: enabled 2019/12/03 21:38:20 net device setup: enabled 2019/12/03 21:38:20 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/12/03 21:38:20 devlink PCI setup: PCI device 0000:00:10.0 is not available 21:38:20 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)) open(0x0, 0x14103e, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) getpid() sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) r1 = getpgid(0x0) r2 = memfd_create(&(0x7f0000000140)='lotrusted\x1a\x00', 0x0) r3 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) r4 = dup2(r3, r2) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000ac0)="b9b99923c9e8f601e963c01675737a7ca33c85f8d24fdb3a7518172d840fb8fb5a60276657d882db1731bf3df1a00940d4285e072aed866e5671544ff86ada5c7834d4bd2b104c1b38deb0ecb8a32ff733c47296b2e49b8ad997b89a87982b2e006ec44f38cb7c641a7544dc98a601b1a4e29ce22b51bed4bffb4007cc90e1c4dca60574fa4b7ba599fa2c7a6691b3473e077b2ba838e7622ae5fede40bfba00a9e789a9919940e0f5c4c99a8267eef3e6bfd759a81126015fba0471b58d54a8e698a2a0095859c1a013f40c4849e53cf001183802ab326d24", 0x1}], 0x92) ppoll(&(0x7f0000000200)=[{r4}], 0x1, &(0x7f0000000280), 0x0, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = inotify_init1(0x0) fcntl$setown(r6, 0x8, 0xffffffffffffffff) fcntl$getownex(r6, 0x10, &(0x7f00000000c0)={0x0, 0x0}) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r8, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000900)=ANY=[@ANYBLOB="020000000100eb0000000000020001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYBLOB="080000222d89c35ae6b17d3dcfb63f6304a8d540f9ec0f9f984deabe6731", @ANYRES32, @ANYBLOB="080005115951c076757a2164ca8343141a694359b9c301bf24d95441febf5a16ae429194cf41f9773a21df3fbefdfd920f68e5e58ca390181d9c686c6f0806797ac4b7731b7f6de976e4e0d345ac1f83f37848b5967ec0775d6b112c47c6e95551477839c728d326f78e5d0799b1c02c3418b1a48e41d54f698cc38b60a6a0375079bff305c0f0bbeddd3edfffcfdc456e464d8c1a7da7b7b2d8a43ac3491716431f09760a1563fe6d0296d3c466fe2c062668338b9185831dd35125bdd22378d3cf071a878b7a063b2d46a938629ac3291d146d87e0fe731694a7c32dbaabe14569f75cb0e55047f247d758bba0b8d668926655aad9aa6f2bd7", @ANYBLOB="74b24e1f0ef01479f571f55b37d7089c077e74b1bd50a45834473f982e6fd1fd97f815af9ca38040c073a4e24e033248357bfb5ab67092f29f0b1a66e443cc9e9ef2a93a80607607e3231fc4077092a7af7f95cd0ac29c703cc271896016d7b31ca22f3b0b56e5fec2690ec778d14906d776e06d1e11235fee66cd668482429cbe849c5b"], 0x8, 0x1) r9 = socket(0xa, 0x3, 0x8) r10 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c8, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) sendmsg$key(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r11 = gettid() waitid(0x83b895581628fca4, r11, &(0x7f0000000040), 0x2, &(0x7f0000000480)) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0100001900010000000000feffffff0000000000000000000000000000000000000002000000000000000000000001000000000ae2d9d428d9ee1500000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000084000500e000000100000000000000000000000000000000d40000000200000065af452078575ecec158c5b0ac88216c0000000004000000000000000000000000000000ac1e0001000000000000000000000000000000003c000000020000007f00000100"/244], 0x13c}}, 0x0) sendmsg$key(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000600)=ANY=[@ANYRES64], 0x8}}, 0x20004850) r13 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r13) r14 = syz_open_dev$sg(&(0x7f0000001580)='/dev/sg#\x00', 0x0, 0x5) writev(r14, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2) ioctl$SG_GET_REQUEST_TABLE(r14, 0x227d, &(0x7f0000000780)) kcmp(r1, r11, 0x1, r10, r14) ptrace$setopts(0x4206, r13, 0x0, 0x0) r15 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) r16 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) writev(r16, &(0x7f0000000040)=[{0x0}, {&(0x7f0000000340)="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", 0x213}], 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={r16, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r13, r15, 0x0, 0xffffffffffffff4b, &(0x7f0000000180)='/dev/amidi#\x00', r17}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r17}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r17}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r17}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r17}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r17}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r7, r8, 0x0, 0x1, &(0x7f0000000080)='\x00', r17}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r5, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r17}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r17}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r1, r4, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r17}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f00000000c0)='\x00', r17}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffee5, 0x0, r18}, 0xc8f22f6482070a1b) r19 = socket$inet(0x2, 0x4000000000000001, 0x0) r20 = socket$alg(0x26, 0x5, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r21 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) writev(r21, &(0x7f0000000040)=[{0x0}, {&(0x7f0000000bc0)="3e55e72cfbe59bc199a98dc111a7069644ba2c56324883e86afd872e9904602fdd2b9d5c9e472f343e1990c03f8177563fdd6230dddc195af4707e1549d5a0d62c0cfb859ee44676e1f733dfa844edf195142d104489ab00c39a34db20014bdc10c47541f4e77f4658bacce0c6d8b6bf2bf2512712e179c8824d928ec548c420677395f087b0da40f3f719889c696b03b1ab41926ae6a9776d88915c7668d33fb2a93126b0cda5f4a920ea3d89d3b1c72bc9e0b2d676c7b42037fbac22343589c453b019b53f48ed01b5c30e3c1294312d1ff02cbb75728710830e58b7400c977bcb185f5ff703e0759c4e0608a89c0303be029fc85c619fecda15d1c2b409fc1a6c9768562bca2c5124", 0x10a}], 0x2) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000680), 0x0) accept$alg(r20, 0x0, 0x0) setsockopt$sock_int(r19, 0x1, 0x0, &(0x7f00000003c0), 0x4) recvmsg(0xffffffffffffffff, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x1000000000000099, 0x0, 0x1f0, 0x7115}, 0x100) 21:38:21 executing program 1: syz_mount_image$exfat(&(0x7f0000000000)='exfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@iocharset={'iocharset', 0x3d, 'iso8859-5'}, 0x8}]}) syzkaller login: [ 58.074657][ T8192] IPVS: ftp: loaded support on port[0] = 21 21:38:21 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2) write$smack_current(r0, &(0x7f0000000200), 0xa) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000000)) [ 58.226358][ T8194] IPVS: ftp: loaded support on port[0] = 21 [ 58.279200][ T8192] chnl_net:caif_netlink_parms(): no params data found [ 58.390956][ T8198] IPVS: ftp: loaded support on port[0] = 21 21:38:21 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x6b) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0815b5055e0bcfe87b3071") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r2 = accept(r1, 0x0, 0x0) sendto$x25(r2, &(0x7f0000000100)="df49f9d49c7f4c52fd992df3fbce33e816afeaaf4017327c", 0xfffffffffffffdcb, 0x0, 0x0, 0xcb) sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) [ 58.437363][ T8192] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.455242][ T8192] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.475321][ T8192] device bridge_slave_0 entered promiscuous mode [ 58.506774][ T8192] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.524436][ T8192] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.544346][ T8192] device bridge_slave_1 entered promiscuous mode [ 58.574719][ T8194] chnl_net:caif_netlink_parms(): no params data found [ 58.593418][ T8201] IPVS: ftp: loaded support on port[0] = 21 [ 58.636668][ T8192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.657287][ T8192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.693987][ T8194] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.714734][ T8194] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.722279][ T8194] device bridge_slave_0 entered promiscuous mode 21:38:21 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x6b) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0815b5055e0bcfe87b3071") r1 = socket$inet(0x2, 0x803, 0xa0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) setsockopt$sock_timeval(r1, 0x1, 0x2, &(0x7f0000000000), 0x10) [ 58.767798][ T8194] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.776158][ T8194] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.784096][ T8194] device bridge_slave_1 entered promiscuous mode [ 58.831528][ T8192] team0: Port device team_slave_0 added [ 58.858043][ T8194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.914726][ T8192] team0: Port device team_slave_1 added [ 58.929220][ T8194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.972581][ T8204] IPVS: ftp: loaded support on port[0] = 21 [ 58.989187][ T8198] chnl_net:caif_netlink_parms(): no params data found 21:38:22 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_int(r0, 0x1, 0x3b, &(0x7f000059dffc), &(0x7f0000000100)=0x4) [ 59.047006][ T8192] device hsr_slave_0 entered promiscuous mode [ 59.106826][ T8192] device hsr_slave_1 entered promiscuous mode [ 59.153933][ T8194] team0: Port device team_slave_0 added [ 59.163829][ T8194] team0: Port device team_slave_1 added [ 59.206825][ T8194] device hsr_slave_0 entered promiscuous mode [ 59.264603][ T8194] device hsr_slave_1 entered promiscuous mode [ 59.344447][ T8194] debugfs: Directory 'hsr0' with parent '/' already present! [ 59.363223][ T8206] IPVS: ftp: loaded support on port[0] = 21 [ 59.379064][ T8198] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.387097][ T8198] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.394918][ T8198] device bridge_slave_0 entered promiscuous mode [ 59.402327][ T8198] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.409498][ T8198] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.417306][ T8198] device bridge_slave_1 entered promiscuous mode [ 59.477765][ T8198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.489047][ T8198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.557073][ T8192] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 59.629091][ T8192] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 59.677842][ T8198] team0: Port device team_slave_0 added [ 59.696280][ T8201] chnl_net:caif_netlink_parms(): no params data found [ 59.712352][ T8192] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 59.767443][ T8198] team0: Port device team_slave_1 added [ 59.773166][ T8192] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 59.825628][ T8194] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 59.867631][ T8194] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 60.027780][ T8198] device hsr_slave_0 entered promiscuous mode [ 60.065050][ T8198] device hsr_slave_1 entered promiscuous mode [ 60.104503][ T8198] debugfs: Directory 'hsr0' with parent '/' already present! [ 60.122456][ T8194] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 60.166533][ T8194] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 60.261948][ T8201] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.270468][ T8201] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.278317][ T8201] device bridge_slave_0 entered promiscuous mode [ 60.291282][ T8198] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 60.316325][ T8198] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 60.364337][ T8201] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.371415][ T8201] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.379748][ T8201] device bridge_slave_1 entered promiscuous mode [ 60.396110][ T8198] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 60.445959][ T8198] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 60.511030][ T8204] chnl_net:caif_netlink_parms(): no params data found [ 60.534115][ T8206] chnl_net:caif_netlink_parms(): no params data found [ 60.545704][ T8201] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.558128][ T8201] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.603827][ T8204] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.613330][ T8204] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.621095][ T8204] device bridge_slave_0 entered promiscuous mode [ 60.629115][ T8204] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.636266][ T8204] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.644289][ T8204] device bridge_slave_1 entered promiscuous mode [ 60.685801][ T8206] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.693242][ T8206] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.701737][ T8206] device bridge_slave_0 entered promiscuous mode [ 60.715257][ T8201] team0: Port device team_slave_0 added [ 60.729634][ T8206] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.737475][ T8206] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.748211][ T8206] device bridge_slave_1 entered promiscuous mode [ 60.756883][ T8204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.776988][ T8201] team0: Port device team_slave_1 added [ 60.797285][ T8204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.823182][ T8206] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.839740][ T8206] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.861808][ T8206] team0: Port device team_slave_0 added [ 60.876917][ T8204] team0: Port device team_slave_0 added [ 60.885473][ T8204] team0: Port device team_slave_1 added [ 60.937820][ T8204] device hsr_slave_0 entered promiscuous mode [ 60.974802][ T8204] device hsr_slave_1 entered promiscuous mode [ 61.034491][ T8204] debugfs: Directory 'hsr0' with parent '/' already present! [ 61.096623][ T8201] device hsr_slave_0 entered promiscuous mode [ 61.144598][ T8201] device hsr_slave_1 entered promiscuous mode [ 61.194491][ T8201] debugfs: Directory 'hsr0' with parent '/' already present! [ 61.203323][ T8206] team0: Port device team_slave_1 added [ 61.234960][ T8192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.286689][ T8206] device hsr_slave_0 entered promiscuous mode [ 61.334728][ T8206] device hsr_slave_1 entered promiscuous mode [ 61.364418][ T8206] debugfs: Directory 'hsr0' with parent '/' already present! [ 61.392948][ T8194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.415117][ T8192] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.421938][ T8204] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 61.458818][ T8204] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 61.522219][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.530847][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.541844][ T8198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.553211][ T8201] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 61.586183][ T8204] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 61.633845][ T8198] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.650072][ T8207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.659919][ T8207] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.668714][ T8207] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.675935][ T8207] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.684600][ T8207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.693051][ T8207] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.701643][ T8207] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.708719][ T8207] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.716389][ T8207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.723983][ T8207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.731665][ T8207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.741429][ T8207] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.749709][ T8201] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 61.796478][ T8204] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 61.848528][ T8206] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 61.899206][ T8201] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 61.956129][ T8197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.968201][ T8197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.976695][ T8197] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.985380][ T8197] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.992412][ T8197] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.000079][ T8197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.008877][ T8197] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.017275][ T8197] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.024434][ T8197] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.031878][ T8197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.040810][ T8197] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.049340][ T8197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.057815][ T8197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.066653][ T8197] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.075189][ T8197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.082755][ T8197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.090694][ T8197] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.098644][ T8197] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.116845][ T8194] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.124081][ T8206] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 62.176749][ T8206] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 62.217678][ T8206] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 62.276879][ T8201] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 62.329833][ T8192] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 62.341029][ T8192] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.352939][ T3128] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.362020][ T3128] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.370782][ T3128] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.379259][ T3128] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.387962][ T3128] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.396972][ T3128] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.405735][ T3128] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.413899][ T3128] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.422271][ T3128] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.430619][ T3128] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.438972][ T3128] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.447793][ T3128] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.456093][ T3128] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.464294][ T3128] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.471980][ T3128] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.506717][ T8198] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.533455][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.542542][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.551061][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.558139][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.567382][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.576092][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.584442][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.591486][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.599040][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.608290][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.631156][ T8192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.642742][ T8197] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.653315][ T8197] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.663877][ T8197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.678599][ T8197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.687588][ T8197] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.714559][ T8198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.729346][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.737997][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.747369][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.755742][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.764176][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.785248][ T8204] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.796733][ T8197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.805872][ T8197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.843088][ T8194] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.867327][ T8194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.908103][ T8194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.844246][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 167.851022][ C0] rcu: 0-...!: (10499 ticks this GP) idle=776/1/0x4000000000000002 softirq=12269/12269 fqs=10 [ 167.862551][ C0] (t=10501 jiffies g=6333 q=429) [ 167.867574][ C0] rcu: rcu_preempt kthread starved for 10482 jiffies! g6333 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 167.878656][ C0] rcu: RCU grace-period kthread stack dump: [ 167.884536][ C0] rcu_preempt R running task 29032 10 2 0x80004000 [ 167.892425][ C0] Call Trace: [ 167.895708][ C0] __schedule+0x9a0/0xcc0 [ 167.900124][ C0] schedule+0x181/0x210 [ 167.904272][ C0] schedule_timeout+0x14f/0x240 [ 167.909106][ C0] ? run_local_timers+0x120/0x120 [ 167.914123][ C0] rcu_gp_kthread+0xed8/0x1770 [ 167.918911][ C0] kthread+0x332/0x350 [ 167.922974][ C0] ? rcu_report_qs_rsp+0x140/0x140 [ 167.928077][ C0] ? kthread_blkcg+0xe0/0xe0 [ 167.932662][ C0] ret_from_fork+0x24/0x30 [ 167.937232][ C0] NMI backtrace for cpu 0 [ 167.941552][ C0] CPU: 0 PID: 36 Comm: kworker/u4:2 Not tainted 5.4.0-syzkaller #0 [ 167.949512][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 167.959848][ C0] Workqueue: 0x0 (bat_events) [ 167.964598][ C0] Call Trace: [ 167.967866][ C0] [ 167.970715][ C0] dump_stack+0x1fb/0x318 [ 167.975033][ C0] nmi_cpu_backtrace+0xaf/0x1a0 [ 167.979866][ C0] ? nmi_trigger_cpumask_backtrace+0x16d/0x290 [ 167.986109][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 167.992162][ C0] nmi_trigger_cpumask_backtrace+0x174/0x290 [ 167.998131][ C0] arch_trigger_cpumask_backtrace+0x10/0x20 [ 168.004008][ C0] rcu_dump_cpu_stacks+0x15a/0x220 [ 168.009112][ C0] rcu_sched_clock_irq+0xe25/0x1ad0 [ 168.014392][ C0] ? trace_hardirqs_off+0x74/0x80 [ 168.019404][ C0] update_process_times+0x12d/0x180 [ 168.024597][ C0] tick_sched_timer+0x263/0x420 [ 168.029432][ C0] ? tick_setup_sched_timer+0x3d0/0x3d0 [ 168.034965][ C0] __hrtimer_run_queues+0x403/0x840 [ 168.040340][ C0] hrtimer_interrupt+0x38c/0xda0 [ 168.045281][ C0] ? debug_smp_processor_id+0x9/0x20 [ 168.051253][ C0] smp_apic_timer_interrupt+0x109/0x280 [ 168.056967][ C0] apic_timer_interrupt+0xf/0x20 [ 168.061970][ C0] [ 168.064899][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x14/0x50 [ 168.071405][ C0] Code: 00 00 00 48 8b 3d 74 25 cd 07 48 89 de e8 64 02 3b 00 5b 5d c3 cc 48 8b 04 24 65 48 8b 0c 25 c0 1d 02 00 65 8b 15 b8 81 8b 7e c2 00 01 1f 00 75 2c 8b 91 80 13 00 00 83 fa 02 75 21 48 8b 91 [ 168.092329][ C0] RSP: 0018:ffffc90000ee7bf8 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 168.101970][ C0] RAX: ffffffff81487433 RBX: 0000000000000000 RCX: ffff8880a99582c0 [ 168.109976][ C0] RDX: 0000000000000001 RSI: 00000000fffffffc RDI: ffffea00021a7a40 [ 168.117952][ C0] RBP: ffffc90000ee7c20 R08: dffffc0000000000 R09: fffffbfff120248a [ 168.125922][ C0] R10: fffffbfff120248a R11: 0000000000000000 R12: dffffc0000000000 [ 168.133881][ C0] R13: dffffc0000000000 R14: 00000000fffffffc R15: ffff8880a8b8fa28 [ 168.141856][ C0] ? mod_memcg_page_state+0x123/0x190 [ 168.147225][ C0] ? free_thread_stack+0x124/0x590 [ 168.152319][ C0] ? mod_memcg_page_state+0x123/0x190 [ 168.157697][ C0] free_thread_stack+0x168/0x590 [ 168.162728][ C0] put_task_stack+0xa3/0x130 [ 168.167831][ C0] finish_task_switch+0x3f1/0x550 [ 168.172847][ C0] __schedule+0x9a8/0xcc0 [ 168.177272][ C0] schedule+0x181/0x210 [ 168.181418][ C0] worker_thread+0x10d6/0x1630 [ 168.186275][ C0] kthread+0x332/0x350 [ 168.190327][ C0] ? rcu_lock_release+0x30/0x30 [ 168.195424][ C0] ? kthread_blkcg+0xe0/0xe0 [ 168.200016][ C0] ret_from_fork+0x24/0x30