[ 46.367828][ T27] audit: type=1800 audit(1578454629.595:25): pid=8247 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 46.388399][ T27] audit: type=1800 audit(1578454629.595:26): pid=8247 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 46.422403][ T27] audit: type=1800 audit(1578454629.595:27): pid=8247 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [ 46.477306][ T27] audit: type=1800 audit(1578454629.595:28): pid=8247 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.120' (ECDSA) to the list of known hosts. 2020/01/08 03:37:22 fuzzer started 2020/01/08 03:37:24 dialing manager at 10.128.0.26:35703 2020/01/08 03:37:24 syscalls: 2824 2020/01/08 03:37:24 code coverage: enabled 2020/01/08 03:37:24 comparison tracing: enabled 2020/01/08 03:37:24 extra coverage: enabled 2020/01/08 03:37:24 setuid sandbox: enabled 2020/01/08 03:37:24 namespace sandbox: enabled 2020/01/08 03:37:24 Android sandbox: /sys/fs/selinux/policy does not exist 2020/01/08 03:37:24 fault injection: enabled 2020/01/08 03:37:24 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/01/08 03:37:24 net packet injection: enabled 2020/01/08 03:37:24 net device setup: enabled 2020/01/08 03:37:24 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/01/08 03:37:24 devlink PCI setup: PCI device 0000:00:10.0 is not available 03:37:25 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKPG(r0, 0x125f, 0x0) 03:37:25 executing program 1: futex(&(0x7f0000000440), 0x8c, 0x1, 0x0, 0x0, 0x0) syzkaller login: [ 62.361009][ T8413] IPVS: ftp: loaded support on port[0] = 21 [ 62.490187][ T8413] chnl_net:caif_netlink_parms(): no params data found [ 62.538733][ T8413] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.547122][ T8413] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.556205][ T8413] device bridge_slave_0 entered promiscuous mode [ 62.567438][ T8413] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.575987][ T8413] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.584194][ T8413] device bridge_slave_1 entered promiscuous mode [ 62.606456][ T8413] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.619777][ T8413] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 03:37:25 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10000000012, 0x4, &(0x7f00000000c0)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x7}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 62.645523][ T8413] team0: Port device team_slave_0 added [ 62.653062][ T8413] team0: Port device team_slave_1 added [ 62.659941][ T8416] IPVS: ftp: loaded support on port[0] = 21 [ 62.736481][ T8413] device hsr_slave_0 entered promiscuous mode [ 62.804172][ T8413] device hsr_slave_1 entered promiscuous mode 03:37:26 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x2f5, &(0x7f00000000c0)=[{&(0x7f0000000100)="24000000180007121dff18946f610500020000001f003e0800000100080005000400ff7e280000001100ff000000000000eff24d8238cfa50223f7efbf7600000000000000000000000b0000", 0x4c}], 0x1}, 0x0) [ 62.908749][ T8418] IPVS: ftp: loaded support on port[0] = 21 [ 63.069692][ T8413] netdevsim netdevsim0 netdevsim0: renamed from eth0 03:37:26 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x6d) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000bccb280012000c000100766574680000000018000200fd00010000000000", @ANYRES32=0x0, @ANYBLOB="e6d2759622f87074763ef8c3c6b0915ec1d32cd4fd6367e4d59c98610ebbf4ba2eb2a35308ff338832ca84b13a719c053724c5666747c7bc105c67b60d4fed4fcff4d7e852ee9b3ce469c2a538e65fc910c45b3fd3da82f607cd843cdb0f5f75ae7c95ac37a1b58263c7a00cab5aa8b3400000"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) dup3(r4, r2, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) [ 63.178957][ T8416] chnl_net:caif_netlink_parms(): no params data found [ 63.187524][ T8421] IPVS: ftp: loaded support on port[0] = 21 [ 63.196488][ T8413] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.256961][ T8413] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.328160][ T8413] netdevsim netdevsim0 netdevsim3: renamed from eth3 03:37:26 executing program 5: unshare(0x2040400) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x40045565, 0x0) [ 63.409225][ T8423] IPVS: ftp: loaded support on port[0] = 21 [ 63.495403][ T8418] chnl_net:caif_netlink_parms(): no params data found [ 63.594847][ T8416] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.601934][ T8416] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.610737][ T8416] device bridge_slave_0 entered promiscuous mode [ 63.633269][ T8426] IPVS: ftp: loaded support on port[0] = 21 [ 63.659651][ T8416] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.668772][ T8416] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.676591][ T8416] device bridge_slave_1 entered promiscuous mode [ 63.705717][ T8418] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.712808][ T8418] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.721930][ T8418] device bridge_slave_0 entered promiscuous mode [ 63.739707][ T8416] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.760328][ T8418] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.768151][ T8418] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.776725][ T8418] device bridge_slave_1 entered promiscuous mode [ 63.786497][ T8416] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.843898][ T8418] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.860752][ T8423] chnl_net:caif_netlink_parms(): no params data found [ 63.886655][ T8416] team0: Port device team_slave_0 added [ 63.893681][ T8418] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.917134][ T8413] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.925385][ T8416] team0: Port device team_slave_1 added [ 63.946453][ T8421] chnl_net:caif_netlink_parms(): no params data found [ 63.962936][ T8413] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.989924][ T3926] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.999554][ T3926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.076825][ T8416] device hsr_slave_0 entered promiscuous mode [ 64.114463][ T8416] device hsr_slave_1 entered promiscuous mode [ 64.183967][ T8416] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.191724][ T8416] Cannot create hsr debugfs directory [ 64.199783][ T8418] team0: Port device team_slave_0 added [ 64.206269][ T8423] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.213347][ T8423] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.221352][ T8423] device bridge_slave_0 entered promiscuous mode [ 64.231560][ T8423] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.238839][ T8423] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.246710][ T8423] device bridge_slave_1 entered promiscuous mode [ 64.258844][ T3926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.267359][ T3926] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.275766][ T3926] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.282875][ T3926] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.291024][ T3926] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.303905][ T8418] team0: Port device team_slave_1 added [ 64.342591][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.351744][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.360230][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.367308][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.378179][ T8423] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.427862][ T8423] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.442937][ T8421] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.451388][ T8421] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.459297][ T8421] device bridge_slave_0 entered promiscuous mode [ 64.480765][ T8426] chnl_net:caif_netlink_parms(): no params data found [ 64.555470][ T8418] device hsr_slave_0 entered promiscuous mode [ 64.584303][ T8418] device hsr_slave_1 entered promiscuous mode [ 64.634006][ T8418] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.641584][ T8418] Cannot create hsr debugfs directory [ 64.649505][ T3926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.668112][ T8421] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.675404][ T8421] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.682896][ T8421] device bridge_slave_1 entered promiscuous mode [ 64.735454][ T8423] team0: Port device team_slave_0 added [ 64.742193][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.754669][ T8421] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.770122][ T8421] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.796853][ T8423] team0: Port device team_slave_1 added [ 64.822959][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.831816][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.840657][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.849135][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.858049][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.877296][ T8421] team0: Port device team_slave_0 added [ 64.886526][ T8426] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.893723][ T8426] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.901785][ T8426] device bridge_slave_0 entered promiscuous mode [ 64.913763][ T8413] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 64.925017][ T8413] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.941338][ T8421] team0: Port device team_slave_1 added [ 64.957524][ T8426] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.964773][ T8426] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.972387][ T8426] device bridge_slave_1 entered promiscuous mode [ 64.981121][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.989946][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.998905][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.007302][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.016223][ T8416] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 65.066402][ T8416] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 65.156497][ T8421] device hsr_slave_0 entered promiscuous mode [ 65.214332][ T8421] device hsr_slave_1 entered promiscuous mode [ 65.253941][ T8421] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.261562][ T8421] Cannot create hsr debugfs directory [ 65.274911][ T3926] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.290420][ T8426] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.301135][ T8416] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 65.346262][ T8416] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 65.448584][ T8423] device hsr_slave_0 entered promiscuous mode [ 65.494184][ T8423] device hsr_slave_1 entered promiscuous mode [ 65.533960][ T8423] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.541543][ T8423] Cannot create hsr debugfs directory [ 65.568656][ T8426] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.627736][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.635440][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.655687][ T8413] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.672383][ T8426] team0: Port device team_slave_0 added [ 65.681875][ T8426] team0: Port device team_slave_1 added [ 65.705318][ T8418] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 65.805637][ T8426] device hsr_slave_0 entered promiscuous mode [ 65.874419][ T8426] device hsr_slave_1 entered promiscuous mode [ 65.903912][ T8426] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.911537][ T8426] Cannot create hsr debugfs directory [ 65.927535][ T8418] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 65.989482][ T8418] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 66.027994][ T8418] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 66.130242][ T8423] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 66.176461][ T8423] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 66.237106][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.245899][ T2707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.255489][ T8421] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 66.296478][ T8421] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 66.343189][ T8421] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 66.396584][ T8423] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 66.438569][ T8423] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 66.507052][ T8421] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 66.577434][ T8416] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.601954][ T8413] device veth0_vlan entered promiscuous mode [ 66.625834][ T8416] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.641843][ T8426] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 66.676094][ T8426] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 66.725965][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.734472][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.742559][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.750419][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.758428][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.766618][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.775772][ T8413] device veth1_vlan entered promiscuous mode [ 66.812208][ T8418] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.822683][ T8426] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 66.856621][ T8426] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 66.917176][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.925718][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.934980][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.942023][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.949568][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.958311][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.966793][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.973903][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.981452][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.990746][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.060508][ T3926] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 172.073793][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 172.080697][ C0] rcu: 0-...!: (10499 ticks this GP) idle=5be/1/0x4000000000000002 softirq=10840/10840 fqs=0 [ 172.091380][ C0] (t=10500 jiffies g=6581 q=50) [ 172.096326][ C0] rcu: rcu_preempt kthread starved for 10500 jiffies! g6581 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 172.107415][ C0] rcu: RCU grace-period kthread stack dump: [ 172.113318][ C0] rcu_preempt R running task 29104 10 2 0x80004000 [ 172.121210][ C0] Call Trace: [ 172.124496][ C0] __schedule+0x9a0/0xcc0 [ 172.128825][ C0] schedule+0x181/0x210 [ 172.132975][ C0] schedule_timeout+0x14f/0x240 [ 172.137818][ C0] ? run_local_timers+0x120/0x120 [ 172.142839][ C0] rcu_gp_kthread+0xed8/0x1770 [ 172.147601][ C0] kthread+0x332/0x350 [ 172.151656][ C0] ? rcu_report_qs_rsp+0x140/0x140 [ 172.156758][ C0] ? kthread_blkcg+0xe0/0xe0 [ 172.161360][ C0] ret_from_fork+0x24/0x30 [ 172.165786][ C0] NMI backtrace for cpu 0 [ 172.170119][ C0] CPU: 0 PID: 3926 Comm: kworker/0:4 Not tainted 5.5.0-rc5-syzkaller #0 [ 172.178432][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 172.188490][ C0] Workqueue: events linkwatch_event [ 172.193675][ C0] Call Trace: [ 172.196953][ C0] [ 172.199800][ C0] dump_stack+0x1fb/0x318 [ 172.204129][ C0] nmi_cpu_backtrace+0xaf/0x1a0 [ 172.208972][ C0] ? nmi_trigger_cpumask_backtrace+0x16d/0x290 [ 172.215118][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 172.221183][ C0] nmi_trigger_cpumask_backtrace+0x174/0x290 [ 172.227156][ C0] arch_trigger_cpumask_backtrace+0x10/0x20 [ 172.233047][ C0] rcu_dump_cpu_stacks+0x15a/0x220 [ 172.238155][ C0] rcu_sched_clock_irq+0xe25/0x1ad0 [ 172.243343][ C0] ? trace_hardirqs_off+0x74/0x80 [ 172.248359][ C0] update_process_times+0x12d/0x180 [ 172.253568][ C0] tick_sched_timer+0x263/0x420 [ 172.258414][ C0] ? tick_setup_sched_timer+0x3d0/0x3d0 [ 172.263952][ C0] __hrtimer_run_queues+0x403/0x840 [ 172.269162][ C0] hrtimer_interrupt+0x38c/0xda0 [ 172.274114][ C0] ? debug_smp_processor_id+0x9/0x20 [ 172.279391][ C0] smp_apic_timer_interrupt+0x109/0x280 [ 172.284941][ C0] apic_timer_interrupt+0xf/0x20 [ 172.289860][ C0] [ 172.292795][ C0] RIP: 0010:free_thread_stack+0x13d/0x590 [ 172.298515][ C0] Code: 00 00 e8 86 91 61 00 e9 5d 04 00 00 e8 3c 2c 2e 00 48 89 df 31 f6 e8 02 8d 6f 00 43 80 3c 2e 00 74 08 4c 89 e7 e8 73 94 6a 00 <49> 8b 1c 24 48 83 c3 08 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 [ 172.318110][ C0] RSP: 0018:ffffc9000d10f700 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 172.326509][ C0] RAX: 0000000000000001 RBX: ffffea00023c7700 RCX: 0000000000000000 [ 172.334465][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffea00023c7700 [ 172.342426][ C0] RBP: ffffc9000d10f738 R08: 000000000003a728 R09: fffffbfff124248a [ 172.350384][ C0] R10: fffffbfff124248a R11: 0000000000000000 R12: ffff8880a8c3fd20 [ 172.358431][ C0] R13: dffffc0000000000 R14: 1ffff11015187fa4 R15: ffff8880941a7878 [ 172.366419][ C0] put_task_stack+0xa3/0x130 [ 172.370996][ C0] finish_task_switch+0x3f1/0x550 [ 172.376011][ C0] __schedule+0x9a8/0xcc0 [ 172.380339][ C0] ? ___preempt_schedule+0x16/0x18 [ 172.385438][ C0] preempt_schedule+0xdb/0x120 [ 172.390195][ C0] ___preempt_schedule+0x16/0x18 [ 172.395122][ C0] ? vprintk_emit+0x2fe/0x3a0 [ 172.399789][ C0] ? vprintk_emit+0x368/0x3a0 [ 172.404460][ C0] vprintk_emit+0x36d/0x3a0 [ 172.408955][ C0] vprintk_default+0x28/0x30 [ 172.413530][ C0] vprintk_func+0x158/0x170 [ 172.418023][ C0] printk+0x62/0x8d [ 172.421821][ C0] ? addrconf_notify+0xd37/0x3c90 [ 172.426837][ C0] ? addrconf_notify+0x779/0x3c90 [ 172.431851][ C0] addrconf_notify+0x2c8d/0x3c90 [ 172.436779][ C0] ? lockdep_hardirqs_on+0x3c5/0x7d0 [ 172.442060][ C0] ? __local_bh_enable_ip+0x13a/0x240 [ 172.447423][ C0] ? clusterip_netdev_event+0x48b/0x4a0 [ 172.452954][ C0] ? trace_hardirqs_on+0x74/0x80 [ 172.457882][ C0] ? __local_bh_enable_ip+0x13a/0x240 [ 172.463255][ C0] ? clusterip_netdev_event+0x48b/0x4a0 [ 172.468785][ C0] ? tls_dev_event+0x619/0xc00 [ 172.473542][ C0] ? clusterip_netdev_event+0x48b/0x4a0 [ 172.479072][ C0] ? ip6mr_device_event+0x1ee/0x210 [ 172.484260][ C0] raw_notifier_call_chain+0xec/0x190 [ 172.489626][ C0] netdev_state_change+0x147/0x1f0 [ 172.494730][ C0] linkwatch_do_dev+0x10e/0x160 [ 172.499590][ C0] __linkwatch_run_queue+0x446/0x730 [ 172.505407][ C0] linkwatch_event+0x4c/0x60 [ 172.509989][ C0] process_one_work+0x7ef/0x10d0 [ 172.514933][ C0] worker_thread+0xc01/0x1630 [ 172.519625][ C0] kthread+0x332/0x350 [ 172.523682][ C0] ? rcu_lock_release+0x30/0x30 [ 172.528526][ C0] ? kthread_blkcg+0xe0/0xe0 [ 172.533118][ C0] ret_from_fork+0x24/0x30