bisecting cause commit starting from cf08baa29613dd899954089e7cc7dba1d478b365 building syzkaller on 12365b99ce83b8a58433eaedbe412dff563ef8fb testing commit cf08baa29613dd899954089e7cc7dba1d478b365 with gcc (GCC) 8.1.0 run #0: crashed: kernel BUG at arch/x86/mm/physaddr.c:LINE! run #1: OK run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK testing release v5.0 testing commit 1c163f4c7b3f621efff9b28a47abb36f7378d783 with gcc (GCC) 8.1.0 run #0: crashed: kernel BUG at arch/x86/mm/physaddr.c:LINE! run #1: crashed: WARNING: locking bug in corrupted run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK testing release v4.20 testing commit 8fe28cb58bcb235034b64cbbb7550a8a43fd88be with gcc (GCC) 8.1.0 run #0: crashed: kernel BUG at arch/x86/mm/physaddr.c:LINE! run #1: crashed: kernel BUG at arch/x86/mm/physaddr.c:LINE! run #2: crashed: general protection fault in __bfs run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK testing release v4.19 testing commit 84df9525b0c27f3ebc2ebb1864fa62a97fdedb7d with gcc (GCC) 8.1.0 run #0: crashed: inconsistent lock state in rhashtable_walk_enter run #1: crashed: inconsistent lock state in rhashtable_walk_enter run #2: crashed: inconsistent lock state in rhashtable_walk_enter run #3: crashed: inconsistent lock state in rhashtable_walk_enter run #4: crashed: kernel BUG at arch/x86/mm/physaddr.c:LINE! run #5: crashed: kernel BUG at arch/x86/mm/physaddr.c:LINE! run #6: crashed: KASAN: slab-out-of-bounds Read in icmp_send run #7: crashed: KASAN: wild-memory-access Write in icmp_send run #8: crashed: inconsistent lock state in rhashtable_walk_enter run #9: crashed: inconsistent lock state in rhashtable_walk_enter testing release v4.18 testing commit 94710cac0ef4ee177a63b5227664b38c95bbf703 with gcc (GCC) 8.1.0 run #0: crashed: inconsistent lock state in rhashtable_walk_enter run #1: crashed: inconsistent lock state in rhashtable_walk_enter run #2: crashed: inconsistent lock state in rhashtable_walk_enter run #3: crashed: inconsistent lock state in rhashtable_walk_enter run #4: crashed: inconsistent lock state in rhashtable_walk_enter run #5: crashed: INFO: trying to register non-static key in icmp_send run #6: crashed: inconsistent lock state in rhashtable_walk_enter run #7: crashed: inconsistent lock state in rhashtable_walk_enter run #8: crashed: inconsistent lock state in rhashtable_walk_enter run #9: crashed: inconsistent lock state in rhashtable_walk_enter testing release v4.17 testing commit 29dcea88779c856c7dc92040a0c01233263101d4 with gcc (GCC) 8.1.0 all runs: crashed: inconsistent lock state in rhashtable_walk_enter testing release v4.16 testing commit 0adb32858b0bddf4ada5f364a84ed60b196dbcda with gcc (GCC) 8.1.0 all runs: OK # git bisect start v4.17 v4.16 Bisecting: 7380 revisions left to test after this (roughly 13 steps) [97b1255cb27c551d7c3c5c496d787da40772da99] mm,oom_reaper: check for MMF_OOM_SKIP before complaining testing commit 97b1255cb27c551d7c3c5c496d787da40772da99 with gcc (GCC) 8.1.0 all runs: crashed: inconsistent lock state in rhashtable_walk_enter # git bisect bad 97b1255cb27c551d7c3c5c496d787da40772da99 Bisecting: 4372 revisions left to test after this (roughly 12 steps) [bb2407a7219760926760f0448fddf00d625e5aec] Merge tag 'docs-4.17' of git://git.lwn.net/linux testing commit bb2407a7219760926760f0448fddf00d625e5aec with gcc (GCC) 8.1.0 all runs: OK # git bisect good bb2407a7219760926760f0448fddf00d625e5aec Bisecting: 2394 revisions left to test after this (roughly 11 steps) [147a89bc71e7db40f011454a40add7ff2d10f8d8] Merge tag 'kconfig-v4.17' of git://git.kernel.org/pub/scm/linux/kernel/git/masahiroy/linux-kbuild testing commit 147a89bc71e7db40f011454a40add7ff2d10f8d8 with gcc (GCC) 8.1.0 run #0: crashed: inconsistent lock state in rhashtable_walk_enter run #1: crashed: kernel BUG at arch/x86/mm/physaddr.c:LINE! run #2: crashed: general protection fault in move_linked_works run #3: crashed: inconsistent lock state in rhashtable_walk_enter run #4: crashed: inconsistent lock state in rhashtable_walk_enter run #5: crashed: inconsistent lock state in rhashtable_walk_enter run #6: crashed: inconsistent lock state in rhashtable_walk_enter run #7: crashed: inconsistent lock state in rhashtable_walk_enter run #8: crashed: inconsistent lock state in rhashtable_walk_enter run #9: crashed: inconsistent lock state in rhashtable_walk_enter # git bisect bad 147a89bc71e7db40f011454a40add7ff2d10f8d8 Bisecting: 988 revisions left to test after this (roughly 10 steps) [32c23b47dbd9765c6ec2542400f41f0d47a7d2c1] i40e: Properly check allowed advertisement capabilities testing commit 32c23b47dbd9765c6ec2542400f41f0d47a7d2c1 with gcc (GCC) 8.1.0 all runs: OK # git bisect good 32c23b47dbd9765c6ec2542400f41f0d47a7d2c1 Bisecting: 496 revisions left to test after this (roughly 9 steps) [e15f20ea33b8e5074145abe464b4b48acea505d9] Merge tag 'mac80211-next-for-davem-2018-03-29' of git://git.kernel.org/pub/scm/linux/kernel/git/jberg/mac80211-next testing commit e15f20ea33b8e5074145abe464b4b48acea505d9 with gcc (GCC) 8.1.0 run #0: crashed: KASAN: slab-out-of-bounds Read in icmp_send run #1: OK run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK # git bisect bad e15f20ea33b8e5074145abe464b4b48acea505d9 Bisecting: 215 revisions left to test after this (roughly 8 steps) [996bfed118748c128ad4b6c05c09fd2f5fdfa1b4] Merge tag 'wireless-drivers-next-for-davem-2018-03-24' of git://git.kernel.org/pub/scm/linux/kernel/git/kvalo/wireless-drivers-next testing commit 996bfed118748c128ad4b6c05c09fd2f5fdfa1b4 with gcc (GCC) 8.1.0 run #0: crashed: inconsistent lock state in rhashtable_walk_enter run #1: crashed: inconsistent lock state in rhashtable_walk_enter run #2: crashed: inconsistent lock state in rhashtable_walk_enter run #3: crashed: inconsistent lock state in rhashtable_walk_enter run #4: crashed: inconsistent lock state in rhashtable_walk_enter run #5: crashed: inconsistent lock state in rhashtable_walk_enter run #6: crashed: inconsistent lock state in rhashtable_walk_enter run #7: crashed: WARNING: bad unlock balance detected! run #8: crashed: inconsistent lock state in rhashtable_walk_enter run #9: crashed: inconsistent lock state in rhashtable_walk_enter # git bisect bad 996bfed118748c128ad4b6c05c09fd2f5fdfa1b4 Bisecting: 137 revisions left to test after this (roughly 7 steps) [b6c535b1638b32ff7817d78956b7232100570b5d] tls: Add receive path documentation testing commit b6c535b1638b32ff7817d78956b7232100570b5d with gcc (GCC) 8.1.0 all runs: OK # git bisect good b6c535b1638b32ff7817d78956b7232100570b5d Bisecting: 68 revisions left to test after this (roughly 6 steps) [0f1417f9f0ed3f367502011b187a293cea0e2435] cxgb4: support new ISSI flash parts testing commit 0f1417f9f0ed3f367502011b187a293cea0e2435 with gcc (GCC) 8.1.0 all runs: crashed: inconsistent lock state in rhashtable_walk_enter # git bisect bad 0f1417f9f0ed3f367502011b187a293cea0e2435 Bisecting: 34 revisions left to test after this (roughly 5 steps) [ed93a39871282fc0dbc2fecd0d04ea0ddad54353] ixgbe: tweak page counting for XDP_REDIRECT testing commit ed93a39871282fc0dbc2fecd0d04ea0ddad54353 with gcc (GCC) 8.1.0 run #0: crashed: inconsistent lock state in rhashtable_walk_enter run #1: crashed: inconsistent lock state in rhashtable_walk_enter run #2: crashed: inconsistent lock state in rhashtable_walk_enter run #3: crashed: inconsistent lock state in rhashtable_walk_enter run #4: crashed: inconsistent lock state in rhashtable_walk_enter run #5: crashed: inconsistent lock state in rhashtable_walk_enter run #6: crashed: general protection fault in __queue_work run #7: crashed: inconsistent lock state in rhashtable_walk_enter run #8: crashed: inconsistent lock state in rhashtable_walk_enter run #9: crashed: inconsistent lock state in rhashtable_walk_enter # git bisect bad ed93a39871282fc0dbc2fecd0d04ea0ddad54353 Bisecting: 16 revisions left to test after this (roughly 4 steps) [19415dbf3097d3eace4fc756cdf49cad0e697134] Merge branch 'tipc-introduce-128-bit-auto-configurable-node-id' testing commit 19415dbf3097d3eace4fc756cdf49cad0e697134 with gcc (GCC) 8.1.0 all runs: crashed: inconsistent lock state in rhashtable_walk_enter # git bisect bad 19415dbf3097d3eace4fc756cdf49cad0e697134 Bisecting: 8 revisions left to test after this (roughly 3 steps) [594619497f3d6d4b8d8440e6d380e8da9dcc9eeb] net/mlx5: Fix use-after-free testing commit 594619497f3d6d4b8d8440e6d380e8da9dcc9eeb with gcc (GCC) 8.1.0 all runs: OK # git bisect good 594619497f3d6d4b8d8440e6d380e8da9dcc9eeb Bisecting: 4 revisions left to test after this (roughly 2 steps) [b89afb116ca2830cc982624f93e888860868a84b] tipc: allow closest-first lookup algorithm when legacy address is configured testing commit b89afb116ca2830cc982624f93e888860868a84b with gcc (GCC) 8.1.0 all runs: OK # git bisect good b89afb116ca2830cc982624f93e888860868a84b Bisecting: 2 revisions left to test after this (roughly 1 step) [d50ccc2d3909fc1b4d40e4af16b026f05dc68707] tipc: add 128-bit node identifier testing commit d50ccc2d3909fc1b4d40e4af16b026f05dc68707 with gcc (GCC) 8.1.0 all runs: OK # git bisect good d50ccc2d3909fc1b4d40e4af16b026f05dc68707 Bisecting: 0 revisions left to test after this (roughly 1 step) [52dfae5c85a4c1078e9f1d5e8947d4a25f73dd81] tipc: obtain node identity from interface by default testing commit 52dfae5c85a4c1078e9f1d5e8947d4a25f73dd81 with gcc (GCC) 8.1.0 run #0: crashed: inconsistent lock state in rhashtable_walk_enter run #1: crashed: inconsistent lock state in rhashtable_walk_enter run #2: crashed: inconsistent lock state in rhashtable_walk_enter run #3: crashed: inconsistent lock state in rhashtable_walk_enter run #4: crashed: inconsistent lock state in rhashtable_walk_enter run #5: crashed: kernel BUG at arch/x86/mm/physaddr.c:LINE! run #6: crashed: inconsistent lock state in rhashtable_walk_enter run #7: crashed: inconsistent lock state in rhashtable_walk_enter run #8: crashed: inconsistent lock state in rhashtable_walk_enter run #9: crashed: inconsistent lock state in rhashtable_walk_enter # git bisect bad 52dfae5c85a4c1078e9f1d5e8947d4a25f73dd81 Bisecting: 0 revisions left to test after this (roughly 0 steps) [25b0b9c4e835ffaa65b61c3efe2e28acf84d0259] tipc: handle collisions of 32-bit node address hash values testing commit 25b0b9c4e835ffaa65b61c3efe2e28acf84d0259 with gcc (GCC) 8.1.0 all runs: OK # git bisect good 25b0b9c4e835ffaa65b61c3efe2e28acf84d0259 52dfae5c85a4c1078e9f1d5e8947d4a25f73dd81 is the first bad commit commit 52dfae5c85a4c1078e9f1d5e8947d4a25f73dd81 Author: Jon Maloy Date: Thu Mar 22 20:42:52 2018 +0100 tipc: obtain node identity from interface by default Selecting and explicitly configuring a TIPC node identity may be unwanted in some cases. In this commit we introduce a default setting if the identity has not been set at the moment the first bearer is enabled. We do this by using a raw copy of a unique identifier from the used interface: MAC address in the case of an L2 bearer, IPv4/IPv6 address in the case of a UDP bearer. Acked-by: Ying Xue Signed-off-by: Jon Maloy Signed-off-by: David S. Miller :040000 040000 3584acc493c68c78abb96303af9fc32c60625435 ce210cf6cc47bb029851527c9ac327750bc53c0e M net revisions tested: 22, total time: 5h0m17.989123635s (build: 2h3m26.66553073s, test: 2h50m10.417874857s) first bad commit: 52dfae5c85a4c1078e9f1d5e8947d4a25f73dd81 tipc: obtain node identity from interface by default cc: ["davem@davemloft.net" "jon.maloy@ericsson.com" "linux-kernel@vger.kernel.org" "netdev@vger.kernel.org" "tipc-discussion@lists.sourceforge.net" "ying.xue@windriver.com"] crash: inconsistent lock state in rhashtable_walk_enter IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready device hsr_slave_0 entered promiscuous mode 32-bit node address hash set to aa1414ac ================================ WARNING: inconsistent lock state 4.16.0-rc6+ #1 Not tainted -------------------------------- inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. swapper/0/0 [HC0[0]:SC1[3]:HE1:SE0] takes: (&(&ht->lock)->rlock){+.?.}, at: [<0000000022103e07>] spin_lock include/linux/spinlock.h:310 [inline] (&(&ht->lock)->rlock){+.?.}, at: [<0000000022103e07>] rhashtable_walk_enter+0xf4/0x300 lib/rhashtable.c:683 {SOFTIRQ-ON-W} state was registered at: lock_acquire+0x173/0x400 kernel/locking/lockdep.c:3920 __raw_spin_lock include/linux/spinlock_api_smp.h:142 [inline] _raw_spin_lock+0x2d/0x40 kernel/locking/spinlock.c:144 spin_lock include/linux/spinlock.h:310 [inline] rhashtable_rehash_table lib/rhashtable.c:341 [inline] rht_deferred_worker+0xce0/0x1640 lib/rhashtable.c:431 process_one_work+0x7c1/0x15b0 kernel/workqueue.c:2113 worker_thread+0xcc/0xee0 kernel/workqueue.c:2247 kthread+0x319/0x3e0 kernel/kthread.c:238 ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:406 irq event stamp: 270260 hardirqs last enabled at (270260): [<000000004c87e740>] __local_bh_enable_ip+0x160/0x240 kernel/softirq.c:187 hardirqs last disabled at (270259): [<0000000078ad66b4>] __local_bh_enable_ip+0x120/0x240 kernel/softirq.c:164 softirqs last enabled at (270200): [<00000000a90141bd>] _local_bh_enable+0x1c/0x30 kernel/softirq.c:155 softirqs last disabled at (270201): [<0000000003dfb622>] invoke_softirq kernel/softirq.c:365 [inline] softirqs last disabled at (270201): [<0000000003dfb622>] irq_exit+0x18e/0x1e0 kernel/softirq.c:405 other info that might help us debug this: Possible unsafe locking scenario: CPU0 ---- lock(&(&ht->lock)->rlock); lock(&(&ht->lock)->rlock); *** DEADLOCK *** 2 locks held by swapper/0/0: #0: ((&d->timer)){+.-.}, at: [<00000000f2e280ab>] lockdep_copy_map include/linux/lockdep.h:168 [inline] #0: ((&d->timer)){+.-.}, at: [<00000000f2e280ab>] call_timer_fn+0xd2/0x590 kernel/time/timer.c:1316 #1: (&(&d->lock)->rlock){+.-.}, at: [<00000000c7e51fc6>] spin_lock_bh include/linux/spinlock.h:315 [inline] #1: (&(&d->lock)->rlock){+.-.}, at: [<00000000c7e51fc6>] tipc_disc_timeout+0x36a/0xc70 net/tipc/discover.c:293 stack backtrace: CPU: 0 PID: 0 Comm: swapper/0 Not tainted 4.16.0-rc6+ #1 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0xed/0x131 lib/dump_stack.c:53 print_usage_bug.cold.60+0x320/0x41a kernel/locking/lockdep.c:2542 valid_state kernel/locking/lockdep.c:2555 [inline] mark_lock_irq kernel/locking/lockdep.c:2749 [inline] mark_lock+0xea1/0x1320 kernel/locking/lockdep.c:3147 mark_irqflags kernel/locking/lockdep.c:3025 [inline] __lock_acquire+0x13fd/0x4930 kernel/locking/lockdep.c:3388 lock_acquire+0x173/0x400 kernel/locking/lockdep.c:3920 __raw_spin_lock include/linux/spinlock_api_smp.h:142 [inline] _raw_spin_lock+0x2d/0x40 kernel/locking/spinlock.c:144 spin_lock include/linux/spinlock.h:310 [inline] rhashtable_walk_enter+0xf4/0x300 lib/rhashtable.c:683 tipc_sk_reinit+0x1b2/0x770 net/tipc/socket.c:2660 tipc_net_finalize+0x28/0x50 net/tipc/net.c:127 tipc_disc_timeout+0x6c7/0xc70 net/tipc/discover.c:304 call_timer_fn+0x150/0x590 kernel/time/timer.c:1326 expire_timers kernel/time/timer.c:1363 [inline] __run_timers kernel/time/timer.c:1666 [inline] run_timer_softirq+0xc8b/0x1280 kernel/time/timer.c:1692 __do_softirq+0x24d/0x985 kernel/softirq.c:285 invoke_softirq kernel/softirq.c:365 [inline] irq_exit+0x18e/0x1e0 kernel/softirq.c:405 exiting_irq arch/x86/include/asm/apic.h:541 [inline] smp_apic_timer_interrupt+0x136/0x5c0 arch/x86/kernel/apic/apic.c:1052 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:857 RIP: 0010:native_safe_halt+0x6/0x10 arch/x86/include/asm/irqflags.h:55 RSP: 0018:ffffffff87807cf8 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff12 RAX: dffffc0000000000 RBX: ffffffff87875240 RCX: 0000000000000000 RDX: 1ffffffff0f228b8 RSI: 0000000000000001 RDI: ffffffff879145c0 RBP: ffffffff87807cf8 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 R13: 0000000000000000 R14: ffffffff879145b0 R15: ffffffff88486f20 arch_safe_halt arch/x86/include/asm/paravirt.h:94 [inline] default_idle+0x4f/0x350 arch/x86/kernel/process.c:354 arch_cpu_idle+0x10/0x20 arch/x86/kernel/process.c:345 default_idle_call+0x6d/0x90 kernel/sched/idle.c:98 cpuidle_idle_call kernel/sched/idle.c:156 [inline] do_idle+0x323/0x3f0 kernel/sched/idle.c:246 cpu_startup_entry+0xc8/0xe0 kernel/sched/idle.c:351 rest_init+0xdd/0xe0 init/main.c:437 start_kernel+0x6b5/0x6ee init/main.c:717 x86_64_start_reservations+0x29/0x2b arch/x86/kernel/head64.c:378 x86_64_start_kernel+0x76/0x79 arch/x86/kernel/head64.c:359 secondary_startup_64+0xa5/0xb0 arch/x86/kernel/head_64.S:239 device hsr_slave_1 entered promiscuous mode IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready kobject: 'loop3' (00000000811aee1b): kobject_uevent_env IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready kobject: 'loop3' (00000000811aee1b): fill_kobj_path: path = '/devices/virtual/block/loop3' IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready Started in network mode Own node identity ac1414aa, cluster identity 4711 New replicast peer: 172.20.20.187 Enabled bearer , priority 10 IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready kobject: 'loop3' (00000000811aee1b): kobject_uevent_env IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready kobject: 'loop3' (00000000811aee1b): fill_kobj_path: path = '/devices/virtual/block/loop3' IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready 32-bit node address hash set to aa1414ac 8021q: adding VLAN 0 to HW filter on device bond0 IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready 8021q: adding VLAN 0 to HW filter on device batadv0 kobject: 'vlan0' (00000000354e25d1): kobject_add_internal: parent: 'mesh', set: '' IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready 8021q: adding VLAN 0 to HW filter on device batadv0 kobject: 'vlan0' (00000000a0e83b87): kobject_add_internal: parent: 'mesh', set: '' IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready 8021q: adding VLAN 0 to HW filter on device team0 IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready bridge0: port 1(bridge_slave_0) entered blocking state kobject: 'loop4' (00000000d05c74f8): kobject_uevent_env bridge0: port 1(bridge_slave_0) entered forwarding state IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready kobject: 'loop4' (00000000d05c74f8): fill_kobj_path: path = '/devices/virtual/block/loop4' IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready bridge0: port 2(bridge_slave_1) entered blocking state kobject: 'loop2' (00000000e1878a7b): kobject_uevent_env bridge0: port 2(bridge_slave_1) entered forwarding state kobject: 'loop2' (00000000e1878a7b): fill_kobj_path: path = '/devices/virtual/block/loop2' IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready Started in network mode Own node identity ac1414aa, cluster identity 4711 New replicast peer: 172.20.20.187 Enabled bearer , priority 10 IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready kobject: 'loop4' (00000000d05c74f8): kobject_uevent_env IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready kobject: 'loop4' (00000000d05c74f8): fill_kobj_path: path = '/devices/virtual/block/loop4' Enabling of bearer rejected, already enabled Started in network mode Own node identity ac1414aa, cluster identity 4711 New replicast peer: 172.20.20.187 kobject: 'loop1' (0000000027f7bb74): kobject_uevent_env Enabled bearer , priority 10 kobject: 'loop1' (0000000027f7bb74): fill_kobj_path: path = '/devices/virtual/block/loop1' IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready Enabling of bearer rejected, already enabled kobject: 'loop2' (00000000e1878a7b): kobject_uevent_env Enabling of bearer rejected, already enabled IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready kobject: 'loop2' (00000000e1878a7b): fill_kobj_path: path = '/devices/virtual/block/loop2' IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready kobject: 'loop4' (00000000d05c74f8): kobject_uevent_env kobject: 'loop4' (00000000d05c74f8): fill_kobj_path: path = '/devices/virtual/block/loop4' Enabling of bearer rejected, already enabled kobject: 'loop0' (000000002d0fa2b5): kobject_uevent_env IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready kobject: 'loop0' (000000002d0fa2b5): fill_kobj_path: path = '/devices/virtual/block/loop0' IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready kobject: 'loop3' (00000000811aee1b): kobject_uevent_env kobject: 'loop3' (00000000811aee1b): fill_kobj_path: path = '/devices/virtual/block/loop3' IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready kobject: 'loop2' (00000000e1878a7b): kobject_uevent_env IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready kobject: 'loop2' (00000000e1878a7b): fill_kobj_path: path = '/devices/virtual/block/loop2' IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready 8021q: adding VLAN 0 to HW filter on device batadv0 kobject: 'vlan0' (000000003f20db83): kobject_add_internal: parent: 'mesh', set: '' kobject: 'loop5' (000000004d94888c): kobject_uevent_env kobject: 'loop5' (000000004d94888c): fill_kobj_path: path = '/devices/virtual/block/loop5' Started in network mode Own node identity ac1414aa, cluster identity 4711 New replicast peer: 172.20.20.187 Enabled bearer , priority 10 Enabling of bearer rejected, already enabled kobject: 'loop5' (000000004d94888c): kobject_uevent_env kobject: 'loop5' (000000004d94888c): fill_kobj_path: path = '/devices/virtual/block/loop5' Enabling of bearer rejected, already enabled Enabling of bearer rejected, already enabled Enabling of bearer rejected, already enabled kobject: 'loop4' (00000000d05c74f8): kobject_uevent_env Enabling of bearer rejected, already enabled kobject: 'loop4' (00000000d05c74f8): fill_kobj_path: path = '/devices/virtual/block/loop4' Enabling of bearer rejected, already enabled kobject: 'loop0' (000000002d0fa2b5): kobject_uevent_env Enabling of bearer rejected, already enabled Enabling of bearer rejected, already enabled kobject: 'loop0' (000000002d0fa2b5): fill_kobj_path: path = '/devices/virtual/block/loop0' Enabling of bearer rejected, already enabled Enabling of bearer rejected, already enabled kobject: 'loop3' (00000000811aee1b): kobject_uevent_env Enabling of bearer rejected, already enabled kobject: 'loop3' (00000000811aee1b): fill_kobj_path: path = '/devices/virtual/block/loop3' kobject: 'loop1' (0000000027f7bb74): kobject_uevent_env Enabling of bearer rejected, already enabled kobject: 'loop1' (0000000027f7bb74): fill_kobj_path: path = '/devices/virtual/block/loop1' Enabling of bearer rejected, already enabled Enabling of bearer rejected, already enabled kobject: 'loop2' (00000000e1878a7b): kobject_uevent_env Enabling of bearer rejected, already enabled Enabling of bearer rejected, already enabled Enabling of bearer rejected, already enabled 32-bit node address hash set to aa1414ac kobject: 'loop2' (00000000e1878a7b): fill_kobj_path: path = '/devices/virtual/block/loop2' Enabling of bearer rejected, already enabled kobject: 'loop5' (000000004d94888c): kobject_uevent_env Enabling of bearer rejected, already enabled kobject: 'loop5' (000000004d94888c): fill_kobj_path: path = '/devices/virtual/block/loop5' Enabling of bearer rejected, already enabled kobject: 'loop5' (000000004d94888c): kobject_uevent_env Enabling of bearer rejected, already enabled Enabling of bearer rejected, already enabled kobject: 'loop5' (000000004d94888c): fill_kobj_path: path = '/devices/virtual/block/loop5' Enabling of bearer rejected, already enabled Enabling of bearer rejected, already enabled Enabling of bearer rejected, already enabled kobject: 'loop2' (00000000e1878a7b): kobject_uevent_env kobject: 'loop2' (00000000e1878a7b): fill_kobj_path: path = '/devices/virtual/block/loop2' Enabling of bearer rejected, already enabled kobject: 'loop1' (0000000027f7bb74): kobject_uevent_env Enabling of bearer rejected, already enabled kobject: 'loop1' (0000000027f7bb74): fill_kobj_path: path = '/devices/virtual/block/loop1' Enabling of bearer rejected, already enabled kobject: 'loop4' (00000000d05c74f8): kobject_uevent_env Enabling of bearer rejected, already enabled kobject: 'loop4' (00000000d05c74f8): fill_kobj_path: path = '/devices/virtual/block/loop4' Enabling of bearer rejected, already enabled kobject: 'loop3' (00000000811aee1b): kobject_uevent_env kobject: 'loop3' (00000000811aee1b): fill_kobj_path: path = '/devices/virtual/block/loop3' Enabling of bearer rejected, already enabled kobject: 'loop5' (000000004d94888c): kobject_uevent_env Enabling of bearer rejected, already enabled kobject: 'loop5' (000000004d94888c): fill_kobj_path: path = '/devices/virtual/block/loop5' Enabling of bearer rejected, already enabled kobject: 'loop2' (00000000e1878a7b): kobject_uevent_env Enabling of bearer rejected, already enabled kobject: 'loop2' (00000000e1878a7b): fill_kobj_path: path = '/devices/virtual/block/loop2' Enabling of bearer rejected, already enabled Enabling of bearer rejected, already enabled kobject: 'loop4' (00000000d05c74f8): kobject_uevent_env kobject: 'loop4' (00000000d05c74f8): fill_kobj_path: path = '/devices/virtual/block/loop4' Enabling of bearer rejected, already enabled Enabling of bearer rejected, already enabled kobject: 'loop1' (0000000027f7bb74): kobject_uevent_env Enabling of bearer rejected, already enabled kobject: 'loop1' (0000000027f7bb74): fill_kobj_path: path = '/devices/virtual/block/loop1' Enabling of bearer rejected, already enabled 32-bit node address hash set to aa1414ac kobject: 'loop1' (0000000027f7bb74): kobject_uevent_env Enabling of bearer rejected, already enabled kobject: 'loop1' (0000000027f7bb74): fill_kobj_path: path = '/devices/virtual/block/loop1' Enabling of bearer rejected, already enabled Enabling of bearer rejected, already enabled kobject: 'loop4' (00000000d05c74f8): kobject_uevent_env kobject: 'loop4' (00000000d05c74f8): fill_kobj_path: path = '/devices/virtual/block/loop4' 32-bit node address hash set to aa1414ac Enabling of bearer rejected, already enabled Enabling of bearer rejected, already enabled kobject: 'loop2' (00000000e1878a7b): kobject_uevent_env Enabling of bearer rejected, already enabled kobject: 'loop2' (00000000e1878a7b): fill_kobj_path: path = '/devices/virtual/block/loop2' Enabling of bearer rejected, already enabled kobject: 'loop5' (000000004d94888c): kobject_uevent_env Enabling of bearer rejected, already enabled kobject: 'loop5' (000000004d94888c): fill_kobj_path: path = '/devices/virtual/block/loop5' Enabling of bearer rejected, already enabled kobject: 'loop0' (000000002d0fa2b5): kobject_uevent_env Enabling of bearer rejected, already enabled kobject: 'loop0' (000000002d0fa2b5): fill_kobj_path: path = '/devices/virtual/block/loop0' Enabling of bearer rejected, already enabled kobject: 'loop1' (0000000027f7bb74): kobject_uevent_env kobject: 'loop1' (0000000027f7bb74): fill_kobj_path: path = '/devices/virtual/block/loop1' Enabling of bearer rejected, already enabled kobject: 'loop2' (00000000e1878a7b): kobject_uevent_env Enabling of bearer rejected, already enabled kobject: 'loop2' (00000000e1878a7b): fill_kobj_path: path = '/devices/virtual/block/loop2' kobject: 'loop0' (000000002d0fa2b5): kobject_uevent_env Enabling of bearer rejected, already enabled kobject: 'loop0' (000000002d0fa2b5): fill_kobj_path: path = '/devices/virtual/block/loop0' Enabling of bearer rejected, already enabled kobject: 'loop5' (000000004d94888c): kobject_uevent_env 32-bit node address hash set to aa1414ac Enabling of bearer rejected, already enabled Enabling of bearer rejected, already enabled kobject: 'loop5' (000000004d94888c): fill_kobj_path: path = '/devices/virtual/block/loop5' Enabling of bearer rejected, already enabled Enabling of bearer rejected, already enabled kobject: 'loop1' (0000000027f7bb74): kobject_uevent_env Enabling of bearer rejected, already enabled kobject: 'loop1' (0000000027f7bb74): fill_kobj_path: path = '/devices/virtual/block/loop1' Enabling of bearer rejected, already enabled kobject: 'loop4' (00000000d05c74f8): kobject_uevent_env kobject: 'loop4' (00000000d05c74f8): fill_kobj_path: path = '/devices/virtual/block/loop4' Enabling of bearer rejected, already enabled kobject: 'loop2' (00000000e1878a7b): kobject_uevent_env Enabling of bearer rejected, already enabled kobject: 'loop2' (00000000e1878a7b): fill_kobj_path: path = '/devices/virtual/block/loop2' Enabling of bearer rejected, already enabled Enabling of bearer rejected, already enabled Enabling of bearer rejected, already enabled kobject: 'loop0' (000000002d0fa2b5): kobject_uevent_env Enabling of bearer rejected, already enabled kobject: 'loop0' (000000002d0fa2b5): fill_kobj_path: path = '/devices/virtual/block/loop0' Enabling of bearer rejected, already enabled kobject: 'loop4' (00000000d05c74f8): kobject_uevent_env Enabling of bearer rejected, already enabled Enabling of bearer rejected, already enabled kobject: 'loop4' (00000000d05c74f8): fill_kobj_path: path = '/devices/virtual/block/loop4' Enabling of bearer rejected, already enabled kobject: 'loop5' (000000004d94888c): kobject_uevent_env Enabling of bearer rejected, already enabled Enabling of bearer rejected, already enabled kobject: 'loop5' (000000004d94888c): fill_kobj_path: path = '/devices/virtual/block/loop5' Enabling of bearer rejected, already enabled kobject: 'loop2' (00000000e1878a7b): kobject_uevent_env kobject: 'loop2' (00000000e1878a7b): fill_kobj_path: path = '/devices/virtual/block/loop2' Enabling of bearer rejected, already enabled kobject: 'loop0' (000000002d0fa2b5): kobject_uevent_env Enabling of bearer rejected, already enabled kobject: 'loop0' (000000002d0fa2b5): fill_kobj_path: path = '/devices/virtual/block/loop0' Enabling of bearer rejected, already enabled Enabling of bearer rejected, already enabled kobject: 'loop4' (00000000d05c74f8): kobject_uevent_env Enabling of bearer rejected, already enabled kobject: 'loop4' (00000000d05c74f8): fill_kobj_path: path = '/devices/virtual/block/loop4' Enabling of bearer rejected, already enabled kobject: 'loop5' (000000004d94888c): kobject_uevent_env Enabling of bearer rejected, already enabled kobject: 'loop5' (000000004d94888c): fill_kobj_path: path = '/devices/virtual/block/loop5' Enabling of bearer rejected, already enabled kobject: 'loop0' (000000002d0fa2b5): kobject_uevent_env kobject: 'loop0' (000000002d0fa2b5): fill_kobj_path: path = '/devices/virtual/block/loop0' Enabling of bearer rejected, already enabled kobject: 'loop3' (00000000811aee1b): kobject_uevent_env Enabling of bearer rejected, already enabled kobject: 'loop3' (00000000811aee1b): fill_kobj_path: path = '/devices/virtual/block/loop3' Enabling of bearer rejected, already enabled kobject: 'loop2' (00000000e1878a7b): kobject_uevent_env Enabling of bearer rejected, already enabled kobject: 'loop2' (00000000e1878a7b): fill_kobj_path: path = '/devices/virtual/block/loop2' Enabling of bearer rejected, already enabled kobject: 'loop4' (00000000d05c74f8): kobject_uevent_env kobject: 'loop4' (00000000d05c74f8): fill_kobj_path: path = '/devices/virtual/block/loop4' Enabling of bearer rejected, already enabled kobject: 'loop3' (00000000811aee1b): kobject_uevent_env Enabling of bearer rejected, already enabled kobject: 'loop3' (00000000811aee1b): fill_kobj_path: path = '/devices/virtual/block/loop3' Enabling of bearer rejected, already enabled kobject: 'loop5' (000000004d94888c): kobject_uevent_env Enabling of bearer rejected, already enabled kobject: 'loop5' (000000004d94888c): fill_kobj_path: path = '/devices/virtual/block/loop5' kobject: 'loop0' (000000002d0fa2b5): kobject_uevent_env Enabling of bearer rejected, already enabled Enabling of bearer rejected, already enabled kobject: 'loop0' (000000002d0fa2b5): fill_kobj_path: path = '/devices/virtual/block/loop0' Enabling of bearer rejected, already enabled kobject: 'loop4' (00000000d05c74f8): kobject_uevent_env Enabling of bearer rejected, already enabled kobject: 'loop4' (00000000d05c74f8): fill_kobj_path: path = '/devices/virtual/block/loop4' Enabling of bearer rejected, already enabled kobject: 'loop2' (00000000e1878a7b): kobject_uevent_env Enabling of bearer rejected, already enabled kobject: 'loop2' (00000000e1878a7b): fill_kobj_path: path = '/devices/virtual/block/loop2' Enabling of bearer rejected, already enabled Enabling of bearer rejected, already enabled Enabling of bearer rejected, already enabled kobject: 'loop3' (00000000811aee1b): kobject_uevent_env kobject: 'loop3' (00000000811aee1b): fill_kobj_path: path = '/devices/virtual/block/loop3' Enabling of bearer rejected, already enabled kobject: 'loop0' (000000002d0fa2b5): kobject_uevent_env Enabling of bearer rejected, already enabled kobject: 'loop0' (000000002d0fa2b5): fill_kobj_path: path = '/devices/virtual/block/loop0' Enabling of bearer rejected, already enabled kobject: 'loop5' (000000004d94888c): kobject_uevent_env Enabling of bearer rejected, already enabled kobject: 'loop5' (000000004d94888c): fill_kobj_path: path = '/devices/virtual/block/loop5' Enabling of bearer rejected, already enabled Enabling of bearer rejected, already enabled Enabling of bearer rejected, already enabled Enabling of bearer rejected, already enabled kobject: 'loop4' (00000000d05c74f8): kobject_uevent_env Enabling of bearer rejected, already enabled kobject: 'loop4' (00000000d05c74f8): fill_kobj_path: path = '/devices/virtual/block/loop4' Enabling of bearer rejected, already enabled kobject: 'loop2' (00000000e1878a7b): kobject_uevent_env kasan: CONFIG_KASAN_INLINE enabled kobject: 'loop2' (00000000e1878a7b): fill_kobj_path: path = '/devices/virtual/block/loop2' kasan: GPF could be caused by NULL-ptr deref or user memory access kobject: 'loop3' (00000000811aee1b): kobject_uevent_env general protection fault: 0000 [#1] PREEMPT SMP KASAN Modules linked in: kobject: 'loop3' (00000000811aee1b): fill_kobj_path: path = '/devices/virtual/block/loop3' CPU: 0 PID: 7 Comm: ksoftirqd/0 Not tainted 4.16.0-rc6+ #1 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:__ip_append_data.isra.47+0xd51/0x2360 net/ipv4/ip_output.c:883 RSP: 0018:ffff8800a9ca7210 EFLAGS: 00010203 kobject: 'loop0' (000000002d0fa2b5): kobject_uevent_env RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffff88008934911c RDX: 0000000000000007 RSI: ffff8800a9ca75ec RDI: 000000000000003c RBP: ffff8800a9ca7380 R08: ffff880089348f9c R09: ffffffff8545fa90 R10: ffff8800a9ca7620 R11: dffffc0000000000 R12: 0000000000000070 R13: ffff8800a9ca75c0 R14: ffff88008934911c R15: 0000000000000000 FS: 0000000000000000(0000) GS:ffff8800aee00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00000000004e4640 CR3: 00000000a2090000 CR4: 00000000001406f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: kobject: 'loop0' (000000002d0fa2b5): fill_kobj_path: path = '/devices/virtual/block/loop0' ip_append_data.part.48+0xbb/0x150 net/ipv4/ip_output.c:1170 ip_append_data+0x1d/0x30 net/ipv4/ip_output.c:1159 icmp_push_reply+0x18a/0x610 net/ipv4/icmp.c:375 icmp_send+0x9d6/0x1900 net/ipv4/icmp.c:741 __udp4_lib_rcv+0x1dd9/0x33a0 net/ipv4/udp.c:2122 udp_rcv+0x15/0x20 net/ipv4/udp.c:2281 ip_local_deliver_finish+0x235/0x9a0 net/ipv4/ip_input.c:215 NF_HOOK include/linux/netfilter.h:288 [inline] ip_local_deliver+0x2fa/0x450 net/ipv4/ip_input.c:256 dst_input include/net/dst.h:450 [inline] ip_rcv_finish+0x744/0x19e0 net/ipv4/ip_input.c:396 NF_HOOK include/linux/netfilter.h:288 [inline] ip_rcv+0xb51/0x1689 net/ipv4/ip_input.c:492 __netif_receive_skb_core+0x1de5/0x2f40 net/core/dev.c:4565 __netif_receive_skb+0x1f/0x1a0 net/core/dev.c:4630 process_backlog+0x1fc/0x710 net/core/dev.c:5310 napi_poll net/core/dev.c:5708 [inline] net_rx_action+0x465/0xef0 net/core/dev.c:5774 __do_softirq+0x24d/0x985 kernel/softirq.c:285 run_ksoftirqd+0x86/0xf0 kernel/softirq.c:666 smpboot_thread_fn+0x55b/0x860 kernel/smpboot.c:164 kthread+0x319/0x3e0 kernel/kthread.c:238 ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:406 Code: c7 85 d0 fe ff ff 03 00 00 00 e9 68 f6 ff ff 48 8b 85 70 ff ff ff kobject: 'loop4' (00000000d05c74f8): kobject_uevent_env 48 8d 78 3c 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 01 38 d0 7c 08 84 d2 0f 85 RIP: __ip_append_data.isra.47+0xd51/0x2360 net/ipv4/ip_output.c:883 RSP: ffff8800a9ca7210 ---[ end trace 3c65c8c84951c021 ]---