[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 50.858640][ T27] audit: type=1800 audit(1578448557.776:25): pid=8334 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 50.891856][ T27] audit: type=1800 audit(1578448557.776:26): pid=8334 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 50.938604][ T27] audit: type=1800 audit(1578448557.776:27): pid=8334 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.202' (ECDSA) to the list of known hosts. 2020/01/08 01:56:09 fuzzer started 2020/01/08 01:56:11 dialing manager at 10.128.0.26:35703 2020/01/08 01:56:11 syscalls: 2824 2020/01/08 01:56:11 code coverage: enabled 2020/01/08 01:56:11 comparison tracing: enabled 2020/01/08 01:56:11 extra coverage: enabled 2020/01/08 01:56:11 setuid sandbox: enabled 2020/01/08 01:56:11 namespace sandbox: enabled 2020/01/08 01:56:11 Android sandbox: /sys/fs/selinux/policy does not exist 2020/01/08 01:56:11 fault injection: enabled 2020/01/08 01:56:11 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/01/08 01:56:11 net packet injection: enabled 2020/01/08 01:56:11 net device setup: enabled 2020/01/08 01:56:11 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/01/08 01:56:11 devlink PCI setup: PCI device 0000:00:10.0 is not available 01:56:12 executing program 0: creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000c80)='/dev/full\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 01:56:12 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4040, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0xffc00}], 0xe, 0x0) syzkaller login: [ 65.790759][ T8502] IPVS: ftp: loaded support on port[0] = 21 [ 65.963673][ T8502] chnl_net:caif_netlink_parms(): no params data found [ 65.965597][ T8505] IPVS: ftp: loaded support on port[0] = 21 01:56:13 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000500)='/dev/dsp\x00', 0x1, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000540)=0x1f) [ 66.062436][ T8502] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.083602][ T8502] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.091229][ T8502] device bridge_slave_0 entered promiscuous mode [ 66.132421][ T8502] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.141673][ T8502] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.150831][ T8502] device bridge_slave_1 entered promiscuous mode [ 66.195788][ T8505] chnl_net:caif_netlink_parms(): no params data found [ 66.208480][ T8502] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.239898][ T8502] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.305371][ T8505] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.312520][ T8505] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.332425][ T8505] device bridge_slave_0 entered promiscuous mode [ 66.343012][ T8502] team0: Port device team_slave_0 added 01:56:13 executing program 3: r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0x40bc5311, &(0x7f0000000000)={0x80, 0x0, 'client0\x00', 0x0, "7fd82d5e02ca3901", "88e7ed00007fff051eae961ef6c6992b7e6e560000f9fff77711be18a3d918e0"}) [ 66.359160][ T8508] IPVS: ftp: loaded support on port[0] = 21 [ 66.363680][ T8505] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.372179][ T8505] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.386355][ T8505] device bridge_slave_1 entered promiscuous mode [ 66.409162][ T8502] team0: Port device team_slave_1 added [ 66.526308][ T8502] device hsr_slave_0 entered promiscuous mode [ 66.565649][ T8502] device hsr_slave_1 entered promiscuous mode 01:56:13 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x9, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x79, 0x11, 0x8}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x2e0, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 66.650401][ T8505] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.668706][ T8505] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.715964][ T8510] IPVS: ftp: loaded support on port[0] = 21 [ 66.741412][ T8505] team0: Port device team_slave_0 added [ 66.778647][ T8505] team0: Port device team_slave_1 added 01:56:13 executing program 5: r0 = socket$inet(0x2, 0x3, 0x2) getsockopt(r0, 0x0, 0xd0, 0x0, 0x0) [ 66.905984][ T8505] device hsr_slave_0 entered promiscuous mode [ 66.943836][ T8505] device hsr_slave_1 entered promiscuous mode [ 67.003637][ T8505] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.011563][ T8505] Cannot create hsr debugfs directory [ 67.030396][ T8512] IPVS: ftp: loaded support on port[0] = 21 [ 67.071390][ T8514] IPVS: ftp: loaded support on port[0] = 21 [ 67.113431][ T8508] chnl_net:caif_netlink_parms(): no params data found [ 67.162005][ T8502] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.217390][ T8502] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.267543][ T8502] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 67.316404][ T8502] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 67.371709][ T8510] chnl_net:caif_netlink_parms(): no params data found [ 67.463617][ T8508] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.470701][ T8508] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.479180][ T8508] device bridge_slave_0 entered promiscuous mode [ 67.491513][ T8510] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.500049][ T8510] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.507874][ T8510] device bridge_slave_0 entered promiscuous mode [ 67.517974][ T8510] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.525681][ T8510] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.533296][ T8510] device bridge_slave_1 entered promiscuous mode [ 67.549659][ T8508] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.557042][ T8508] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.565053][ T8508] device bridge_slave_1 entered promiscuous mode [ 67.599510][ T8505] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 67.627075][ T8510] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.649658][ T8508] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.662931][ T8508] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.674687][ T8510] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.698741][ T8505] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 67.759798][ T8505] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 67.816888][ T8510] team0: Port device team_slave_0 added [ 67.839790][ T8505] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 67.889714][ T8510] team0: Port device team_slave_1 added [ 67.918704][ T8508] team0: Port device team_slave_0 added [ 67.931918][ T8508] team0: Port device team_slave_1 added [ 67.944874][ T8512] chnl_net:caif_netlink_parms(): no params data found [ 67.959471][ T8502] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.026827][ T8508] device hsr_slave_0 entered promiscuous mode [ 68.074392][ T8508] device hsr_slave_1 entered promiscuous mode [ 68.123731][ T8508] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.131320][ T8508] Cannot create hsr debugfs directory [ 68.236432][ T8510] device hsr_slave_0 entered promiscuous mode [ 68.273913][ T8510] device hsr_slave_1 entered promiscuous mode [ 68.313666][ T8510] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.321301][ T8510] Cannot create hsr debugfs directory [ 68.370761][ T2698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.379632][ T2698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.390653][ T8502] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.403412][ T8512] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.412394][ T8512] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.420759][ T8512] device bridge_slave_0 entered promiscuous mode [ 68.428213][ T8514] chnl_net:caif_netlink_parms(): no params data found [ 68.449755][ T8512] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.457246][ T8512] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.465183][ T8512] device bridge_slave_1 entered promiscuous mode [ 68.503635][ T8514] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.511327][ T8514] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.519115][ T8514] device bridge_slave_0 entered promiscuous mode [ 68.541296][ T8512] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.562225][ T8514] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.571480][ T8514] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.580009][ T8514] device bridge_slave_1 entered promiscuous mode [ 68.591493][ T2768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.600605][ T2768] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.608960][ T2768] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.616118][ T2768] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.626460][ T2768] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.638086][ T8512] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.660831][ T8512] team0: Port device team_slave_0 added [ 68.675859][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.687267][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.695939][ T2684] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.702984][ T2684] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.716544][ T8512] team0: Port device team_slave_1 added [ 68.738198][ T8514] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.767504][ T2698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.779254][ T8508] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 68.835929][ T8514] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.896234][ T8512] device hsr_slave_0 entered promiscuous mode [ 68.954298][ T8512] device hsr_slave_1 entered promiscuous mode [ 69.003662][ T8512] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.011258][ T8512] Cannot create hsr debugfs directory [ 69.026204][ T2749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.034848][ T2749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.043390][ T2749] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.052056][ T2749] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.076288][ T8508] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.116992][ T8514] team0: Port device team_slave_0 added [ 69.122842][ T8508] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.186210][ T8508] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.233733][ T2768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.242164][ T2768] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.250783][ T2768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.259257][ T2768] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.267835][ T2768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.276037][ T2768] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.297058][ T8514] team0: Port device team_slave_1 added [ 69.311734][ T8505] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.323924][ T8502] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.372468][ T8510] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.439572][ T8510] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.505322][ T8505] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.546467][ T8514] device hsr_slave_0 entered promiscuous mode [ 69.593861][ T8514] device hsr_slave_1 entered promiscuous mode [ 69.663658][ T8514] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.671265][ T8514] Cannot create hsr debugfs directory [ 69.680246][ T3096] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.688457][ T3096] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.696171][ T3096] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.703623][ T3096] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.711088][ T8510] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 69.786544][ T8510] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 69.849096][ T8502] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.869460][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.879237][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.887919][ T2684] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.895010][ T2684] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.902576][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.911806][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.920141][ T2684] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.927190][ T2684] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.934800][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.945178][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.991357][ T2768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.005451][ T8512] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 70.037903][ T8512] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 70.085977][ T8512] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 70.139276][ T8512] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 70.191242][ T2698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.200440][ T2698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.209357][ T2698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.218408][ T2698] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.227460][ T2698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.236091][ T2698] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.246013][ T2698] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.290123][ T8508] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.298445][ T2698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.308767][ T2698] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.328032][ T8502] device veth0_vlan entered promiscuous mode [ 70.340019][ T8505] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.352113][ T8505] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.367677][ T2749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.377264][ T2749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.385855][ T2749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.394275][ T2749] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.417951][ T8502] device veth1_vlan entered promiscuous mode [ 70.429028][ T2749] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.439490][ T2749] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.465737][ T8514] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 70.495500][ T8514] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 70.546229][ T2749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.554876][ T2749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.579801][ T8508] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.586721][ T8514] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 70.616630][ T8514] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 70.671982][ T8510] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.683584][ T2698] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.690998][ T2698] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.735817][ T8505] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.742848][ T2768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.751999][ T2768] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.760645][ T2768] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.767753][ T2768] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.798429][ T8510] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.805936][ T2768] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.819177][ T2768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.835143][ T2768] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 175.843495][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 175.850350][ C0] rcu: 0-...!: (10499 ticks this GP) idle=59e/1/0x4000000000000002 softirq=13914/13914 fqs=147 [ 175.861021][ C0] (t=10500 jiffies g=6697 q=77) [ 175.865949][ C0] rcu: rcu_preempt kthread starved for 10202 jiffies! g6697 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 175.877030][ C0] rcu: RCU grace-period kthread stack dump: [ 175.882904][ C0] rcu_preempt R running task 28984 10 2 0x80004000 [ 175.890791][ C0] Call Trace: [ 175.894082][ C0] __schedule+0x9a0/0xcc0 [ 175.898411][ C0] schedule+0x181/0x210 [ 175.902558][ C0] schedule_timeout+0x14f/0x240 [ 175.907399][ C0] ? run_local_timers+0x120/0x120 [ 175.912415][ C0] rcu_gp_kthread+0xed8/0x1770 [ 175.917180][ C0] kthread+0x332/0x350 [ 175.921251][ C0] ? rcu_report_qs_rsp+0x140/0x140 [ 175.926350][ C0] ? kthread_blkcg+0xe0/0xe0 [ 175.930927][ C0] ret_from_fork+0x24/0x30 [ 175.935345][ C0] NMI backtrace for cpu 0 [ 175.939663][ C0] CPU: 0 PID: 2768 Comm: kworker/0:36 Not tainted 5.5.0-rc5-syzkaller #0 [ 175.948058][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 175.958107][ C0] Workqueue: events linkwatch_event [ 175.963286][ C0] Call Trace: [ 175.966558][ C0] [ 175.969405][ C0] dump_stack+0x1fb/0x318 [ 175.973729][ C0] nmi_cpu_backtrace+0xaf/0x1a0 [ 175.978569][ C0] ? nmi_trigger_cpumask_backtrace+0x16d/0x290 [ 175.984730][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 175.990787][ C0] nmi_trigger_cpumask_backtrace+0x174/0x290 [ 175.996754][ C0] arch_trigger_cpumask_backtrace+0x10/0x20 [ 176.002633][ C0] rcu_dump_cpu_stacks+0x15a/0x220 [ 176.007740][ C0] rcu_sched_clock_irq+0xe25/0x1ad0 [ 176.012929][ C0] ? trace_hardirqs_off+0x74/0x80 [ 176.017947][ C0] update_process_times+0x12d/0x180 [ 176.023134][ C0] tick_sched_timer+0x263/0x420 [ 176.027972][ C0] ? tick_setup_sched_timer+0x3d0/0x3d0 [ 176.033505][ C0] __hrtimer_run_queues+0x403/0x840 [ 176.038707][ C0] hrtimer_interrupt+0x38c/0xda0 [ 176.043649][ C0] ? debug_smp_processor_id+0x9/0x20 [ 176.048926][ C0] smp_apic_timer_interrupt+0x109/0x280 [ 176.054462][ C0] apic_timer_interrupt+0xf/0x20 [ 176.059381][ C0] [ 176.062314][ C0] RIP: 0010:__memcg_kmem_uncharge+0x1/0x1a0 [ 176.068192][ C0] Code: eb 1b 83 3d 20 bf ac 07 00 74 12 48 81 c3 08 02 00 00 48 89 df 4c 89 f6 e8 8c 85 ff ff 5b 41 5e 5d c3 0f 1f 80 00 00 00 00 55 <48> 89 e5 41 57 41 56 41 55 41 54 53 50 89 f3 49 89 fc 48 b8 00 00 [ 176.087786][ C0] RSP: 0018:ffffc90007dff610 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 176.096182][ C0] RAX: ffffffff81489244 RBX: ffffea00024ab280 RCX: ffff88809f318340 [ 176.104142][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffea00024ab280 [ 176.112120][ C0] RBP: ffffc90007dff658 R08: 000000000003a728 R09: fffffbfff124248a [ 176.120078][ C0] R10: fffffbfff124248a R11: 0000000000000000 R12: ffff88808f2edea0 [ 176.128042][ C0] R13: dffffc0000000000 R14: 1ffff11011e5dbd4 R15: ffff88809f55b7f8 [ 176.136017][ C0] ? free_thread_stack+0x124/0x590 [ 176.141119][ C0] ? free_thread_stack+0x12e/0x590 [ 176.146219][ C0] put_task_stack+0xa3/0x130 [ 176.150800][ C0] finish_task_switch+0x3f1/0x550 [ 176.155819][ C0] __schedule+0x9a8/0xcc0 [ 176.160147][ C0] ? ___preempt_schedule+0x16/0x18 [ 176.165249][ C0] preempt_schedule+0xdb/0x120 [ 176.170006][ C0] ? ipv6_mc_up+0x248/0x2d0 [ 176.174496][ C0] ___preempt_schedule+0x16/0x18 [ 176.179441][ C0] ? mark_lock+0x107/0x1650 [ 176.183932][ C0] __local_bh_enable_ip+0x17d/0x240 [ 176.189116][ C0] ? ipv6_mc_up+0x248/0x2d0 [ 176.193609][ C0] _raw_read_unlock_bh+0x2f/0x40 [ 176.198535][ C0] ipv6_mc_up+0x248/0x2d0 [ 176.202857][ C0] ipv6_find_idev+0x156/0x1b0 [ 176.207520][ C0] addrconf_add_dev+0x5e/0x540 [ 176.212272][ C0] ? vprintk_emit+0x2dd/0x3a0 [ 176.216960][ C0] ? vprintk_default+0x28/0x30 [ 176.221717][ C0] addrconf_dev_config+0x114/0x280 [ 176.226817][ C0] addrconf_notify+0xc8d/0x3c90 [ 176.231661][ C0] ? lockdep_hardirqs_on+0x3c5/0x7d0 [ 176.236931][ C0] ? __local_bh_enable_ip+0x13a/0x240 [ 176.242306][ C0] ? clusterip_netdev_event+0x48b/0x4a0 [ 176.247840][ C0] ? trace_hardirqs_on+0x74/0x80 [ 176.252769][ C0] ? __local_bh_enable_ip+0x13a/0x240 [ 176.258146][ C0] ? clusterip_netdev_event+0x48b/0x4a0 [ 176.263679][ C0] ? tls_dev_event+0x619/0xc00 [ 176.268436][ C0] ? clusterip_netdev_event+0x48b/0x4a0 [ 176.273971][ C0] ? ip6mr_device_event+0x1ee/0x210 [ 176.279163][ C0] raw_notifier_call_chain+0xec/0x190 [ 176.284528][ C0] netdev_state_change+0x147/0x1f0 [ 176.289628][ C0] linkwatch_do_dev+0x10e/0x160 [ 176.294472][ C0] __linkwatch_run_queue+0x446/0x730 [ 176.299752][ C0] linkwatch_event+0x4c/0x60 [ 176.304329][ C0] process_one_work+0x7ef/0x10d0 [ 176.309274][ C0] worker_thread+0xc01/0x1630 [ 176.313960][ C0] kthread+0x332/0x350 [ 176.318018][ C0] ? rcu_lock_release+0x30/0x30 [ 176.322878][ C0] ? kthread_blkcg+0xe0/0xe0 [ 176.327484][ C0] ret_from_fork+0x24/0x30