Warning: Permanently added '10.128.0.41' (ECDSA) to the list of known hosts. 2019/12/04 10:05:31 fuzzer started 2019/12/04 10:05:33 dialing manager at 10.128.0.26:36481 2019/12/04 10:05:33 syscalls: 2691 2019/12/04 10:05:33 code coverage: enabled 2019/12/04 10:05:33 comparison tracing: enabled 2019/12/04 10:05:33 extra coverage: extra coverage is not supported by the kernel 2019/12/04 10:05:33 setuid sandbox: enabled 2019/12/04 10:05:33 namespace sandbox: enabled 2019/12/04 10:05:33 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/04 10:05:33 fault injection: enabled 2019/12/04 10:05:33 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/04 10:05:33 net packet injection: enabled 2019/12/04 10:05:33 net device setup: enabled 2019/12/04 10:05:33 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/12/04 10:05:33 devlink PCI setup: PCI device 0000:00:10.0 is not available 10:05:34 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c000000100001040000000000000000b9d60000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010069706970000000000c37bf752d3e01e775c5f838e239d39886648a0b4989b15c000001"], 0x3c}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000180), 0x27a4eaa51029717, 0x0) 10:05:34 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)=@file={0x0, './file0/file0\x00'}, 0x6e) syzkaller login: [ 57.871169][ T8205] IPVS: ftp: loaded support on port[0] = 21 10:05:35 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000002c00)='/dev/snd/seq\x00', 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000000)) [ 58.030015][ T8205] chnl_net:caif_netlink_parms(): no params data found [ 58.133077][ T8208] IPVS: ftp: loaded support on port[0] = 21 [ 58.166597][ T8205] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.183275][ T8205] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.203316][ T8205] device bridge_slave_0 entered promiscuous mode [ 58.216207][ T8205] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.233304][ T8205] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.241204][ T8205] device bridge_slave_1 entered promiscuous mode 10:05:35 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000340)) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200), 0x0) [ 58.281849][ T8210] IPVS: ftp: loaded support on port[0] = 21 [ 58.311938][ T8205] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.349140][ T8205] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.437454][ T8205] team0: Port device team_slave_0 added [ 58.476630][ T8205] team0: Port device team_slave_1 added 10:05:35 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f5f00fe01b2a4a28093020600f2ffff7f01020b00000a0012000200280014000000190005407fffffff0022de1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d400", 0x55}], 0x1}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) [ 58.559113][ T8208] chnl_net:caif_netlink_parms(): no params data found [ 58.657368][ T8205] device hsr_slave_0 entered promiscuous mode 10:05:35 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000000)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x60, r1, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r2}, {0x44, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x9, 0x3, 0xe}, {0x8}}, {0x8}}}]}}]}, 0x60}}, 0x0) [ 58.734820][ T8205] device hsr_slave_1 entered promiscuous mode [ 58.827069][ T8210] chnl_net:caif_netlink_parms(): no params data found [ 58.864694][ T8215] IPVS: ftp: loaded support on port[0] = 21 [ 58.922955][ T8216] IPVS: ftp: loaded support on port[0] = 21 [ 58.942956][ T8205] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 58.998663][ T8208] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.006624][ T8208] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.015345][ T8208] device bridge_slave_0 entered promiscuous mode [ 59.024557][ T8208] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.031612][ T8208] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.039777][ T8208] device bridge_slave_1 entered promiscuous mode [ 59.063059][ T8205] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 59.115185][ T8210] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.122316][ T8210] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.130806][ T8210] device bridge_slave_0 entered promiscuous mode [ 59.139369][ T8210] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.146649][ T8210] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.155002][ T8210] device bridge_slave_1 entered promiscuous mode [ 59.164210][ T8208] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.179681][ T8205] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 59.237015][ T8205] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 59.305307][ T8208] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.340800][ T8218] IPVS: ftp: loaded support on port[0] = 21 [ 59.361359][ T8208] team0: Port device team_slave_0 added [ 59.371841][ T8208] team0: Port device team_slave_1 added [ 59.386728][ T8210] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.399012][ T8210] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.475710][ T8210] team0: Port device team_slave_0 added [ 59.485065][ T8210] team0: Port device team_slave_1 added [ 59.525875][ T8208] device hsr_slave_0 entered promiscuous mode [ 59.594081][ T8208] device hsr_slave_1 entered promiscuous mode [ 59.633451][ T8208] debugfs: Directory 'hsr0' with parent '/' already present! [ 59.745237][ T8210] device hsr_slave_0 entered promiscuous mode [ 59.795145][ T8210] device hsr_slave_1 entered promiscuous mode [ 59.853402][ T8210] debugfs: Directory 'hsr0' with parent '/' already present! [ 59.888773][ T8215] chnl_net:caif_netlink_parms(): no params data found [ 59.956797][ T8218] chnl_net:caif_netlink_parms(): no params data found [ 59.972676][ T8210] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 60.035617][ T8210] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 60.089114][ T8210] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 60.162182][ T8208] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 60.196257][ T8208] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 60.267855][ T8210] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 60.328102][ T8208] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 60.369080][ T8208] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 60.429145][ T8216] chnl_net:caif_netlink_parms(): no params data found [ 60.457859][ T8218] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.465395][ T8218] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.473768][ T8218] device bridge_slave_0 entered promiscuous mode [ 60.481877][ T8218] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.489138][ T8218] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.497960][ T8218] device bridge_slave_1 entered promiscuous mode [ 60.510136][ T8215] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.517356][ T8215] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.525600][ T8215] device bridge_slave_0 entered promiscuous mode [ 60.538199][ T8215] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.545753][ T8215] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.553863][ T8215] device bridge_slave_1 entered promiscuous mode [ 60.608115][ T8218] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.629405][ T8215] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.647364][ T8216] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.655222][ T8216] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.665742][ T8216] device bridge_slave_0 entered promiscuous mode [ 60.677918][ T8218] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.702245][ T8205] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.711284][ T8215] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.726387][ T8216] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.733764][ T8216] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.747298][ T8216] device bridge_slave_1 entered promiscuous mode [ 60.765833][ T8218] team0: Port device team_slave_0 added [ 60.777327][ T8218] team0: Port device team_slave_1 added [ 60.788924][ T8205] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.820494][ T2617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.830685][ T2617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.862760][ T8215] team0: Port device team_slave_0 added [ 60.872840][ T8216] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.916585][ T8218] device hsr_slave_0 entered promiscuous mode [ 60.953750][ T8218] device hsr_slave_1 entered promiscuous mode [ 60.993814][ T8218] debugfs: Directory 'hsr0' with parent '/' already present! [ 61.003694][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.012673][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.021547][ T3055] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.028810][ T3055] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.037926][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.049705][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.058158][ T3055] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.065253][ T3055] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.075636][ T8215] team0: Port device team_slave_1 added [ 61.089379][ T8216] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.121666][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.131065][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.185147][ T8215] device hsr_slave_0 entered promiscuous mode [ 61.233636][ T8215] device hsr_slave_1 entered promiscuous mode [ 61.303428][ T8215] debugfs: Directory 'hsr0' with parent '/' already present! [ 61.320269][ T8216] team0: Port device team_slave_0 added [ 61.328934][ T8216] team0: Port device team_slave_1 added [ 61.357430][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.367213][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.376387][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.385041][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.400310][ T8205] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 61.411492][ T8205] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.427998][ T8210] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.436352][ T8218] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 61.485967][ T2617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.495223][ T2617] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.503669][ T2617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.512137][ T2617] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.521735][ T2617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.530274][ T2617] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.539205][ T2617] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.554702][ T8218] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 61.600299][ T8218] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 61.670398][ T8218] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 61.726054][ T8210] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.749433][ T8215] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 61.794883][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.802579][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.811229][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.819007][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.865926][ T8216] device hsr_slave_0 entered promiscuous mode [ 61.904039][ T8216] device hsr_slave_1 entered promiscuous mode [ 61.953607][ T8216] debugfs: Directory 'hsr0' with parent '/' already present! [ 61.965450][ T8205] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.984952][ T8215] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 62.016302][ T8215] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 62.078258][ T8208] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.087629][ T8215] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 62.116451][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.126049][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.134649][ T3055] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.141690][ T3055] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.152188][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.162004][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.170408][ T3055] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.177482][ T3055] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.185729][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.194855][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.203531][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.265395][ T8208] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.284890][ T8219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 167.293127][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 167.299967][ C1] rcu: 1-...!: (10499 ticks this GP) idle=b36/1/0x4000000000000002 softirq=10205/10205 fqs=40 [ 167.310790][ C1] (t=10501 jiffies g=6389 q=109) [ 167.315824][ C1] rcu: rcu_preempt kthread starved for 10422 jiffies! g6389 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 167.327020][ C1] rcu: RCU grace-period kthread stack dump: [ 167.332921][ C1] rcu_preempt R running task 29032 10 2 0x80004000 [ 167.342602][ C1] Call Trace: [ 167.346009][ C1] __schedule+0x9a0/0xcc0 [ 167.350343][ C1] schedule+0x181/0x210 [ 167.354593][ C1] schedule_timeout+0x14f/0x240 [ 167.359431][ C1] ? run_local_timers+0x120/0x120 [ 167.364453][ C1] rcu_gp_kthread+0xed8/0x1770 [ 167.369216][ C1] kthread+0x332/0x350 [ 167.373356][ C1] ? rcu_report_qs_rsp+0x140/0x140 [ 167.378455][ C1] ? kthread_blkcg+0xe0/0xe0 [ 167.383029][ C1] ret_from_fork+0x24/0x30 [ 167.387578][ C1] NMI backtrace for cpu 1 [ 167.391910][ C1] CPU: 1 PID: 21 Comm: kworker/u4:1 Not tainted 5.4.0-syzkaller #0 [ 167.399791][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 167.409875][ C1] Workqueue: bat_events batadv_nc_worker [ 167.415504][ C1] Call Trace: [ 167.418789][ C1] [ 167.421810][ C1] dump_stack+0x1fb/0x318 [ 167.426134][ C1] nmi_cpu_backtrace+0xaf/0x1a0 [ 167.432062][ C1] ? nmi_trigger_cpumask_backtrace+0x16d/0x290 [ 167.439628][ C1] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 167.445953][ C1] nmi_trigger_cpumask_backtrace+0x174/0x290 [ 167.452010][ C1] arch_trigger_cpumask_backtrace+0x10/0x20 [ 167.457989][ C1] rcu_dump_cpu_stacks+0x15a/0x220 [ 167.463094][ C1] rcu_sched_clock_irq+0xe25/0x1ad0 [ 167.468285][ C1] ? trace_hardirqs_off+0x74/0x80 [ 167.473301][ C1] update_process_times+0x12d/0x180 [ 167.478495][ C1] tick_sched_timer+0x263/0x420 [ 167.483331][ C1] ? tick_setup_sched_timer+0x3d0/0x3d0 [ 167.489475][ C1] __hrtimer_run_queues+0x403/0x840 [ 167.494682][ C1] hrtimer_interrupt+0x38c/0xda0 [ 167.499631][ C1] ? debug_smp_processor_id+0x9/0x20 [ 167.504908][ C1] smp_apic_timer_interrupt+0x109/0x280 [ 167.510450][ C1] apic_timer_interrupt+0xf/0x20 [ 167.515369][ C1] [ 167.518298][ C1] RIP: 0010:mod_memcg_page_state+0x123/0x190 [ 167.524262][ C1] Code: e8 f2 9a 69 00 48 83 3d 12 21 c2 07 00 74 70 e8 63 25 2e 00 4c 89 ff 57 9d 0f 1f 44 00 00 e8 24 c1 33 00 eb 43 e8 4d 25 2e 00 3c e8 b6 be 33 00 48 c7 c0 28 95 0a 89 48 c1 e8 03 42 80 3c 20 [ 167.544471][ C1] RSP: 0018:ffffc90000dd79f8 EFLAGS: 00000293 ORIG_RAX: ffffffffffffff13 [ 167.554363][ C1] RAX: ffffffff81487433 RBX: 0000000000000000 RCX: ffff8880a9ffa580 [ 167.562498][ C1] RDX: 0000000000000000 RSI: 00000000fffffffc RDI: ffffea0002597b80 [ 167.570464][ C1] RBP: ffffc90000dd7a18 R08: dffffc0000000000 R09: fffffbfff120248a [ 167.578421][ C1] R10: fffffbfff120248a R11: 0000000000000000 R12: dffffc0000000000 [ 167.586382][ C1] R13: dffffc0000000000 R14: 00000000fffffffc R15: ffff8880a87834e8 [ 167.594354][ C1] ? mod_memcg_page_state+0x123/0x190 [ 167.599717][ C1] ? mod_memcg_page_state+0x123/0x190 [ 167.605077][ C1] free_thread_stack+0x168/0x590 [ 167.610010][ C1] put_task_stack+0xa3/0x130 [ 167.615194][ C1] finish_task_switch+0x3f1/0x550 [ 167.620209][ C1] __schedule+0x9a8/0xcc0 [ 167.624543][ C1] preempt_schedule_irq+0xc1/0x140 [ 167.629916][ C1] retint_kernel+0x1b/0x2b [ 167.634838][ C1] RIP: 0010:batadv_nc_worker+0x11e/0x600 [ 167.640652][ C1] Code: 6c 01 01 75 17 e8 f2 a7 a2 f9 eb 50 e8 eb a7 a2 f9 eb 49 66 0f 1f 84 00 00 00 00 00 e8 2b be 8f f9 84 c0 74 07 e8 d2 a7 a2 f9 30 e8 cb a7 a2 f9 c6 05 d0 17 6c 01 01 48 c7 c7 ab ae bb 88 be [ 167.667188][ C1] RSP: 0018:ffffc90000dd7c78 EFLAGS: 00000293 ORIG_RAX: ffffffffffffff13 [ 167.700760][ C1] RAX: ffffffff87d3f1ae RBX: 0000000000000001 RCX: ffff8880a9ffa580 [ 167.708720][ C1] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff8880aed37e20 [ 167.716679][ C1] RBP: ffffc90000dd7cd8 R08: dffffc0000000000 R09: ffffed1015da6fc5 [ 167.724636][ C1] R10: ffffed1015da6fc5 R11: 0000000000000000 R12: dffffc0000000000 [ 167.732681][ C1] R13: ffff888095a70000 R14: ffff88809ece8b80 R15: 0000000000000323 [ 167.741974][ C1] ? batadv_nc_worker+0x11e/0x600 [ 167.747086][ C1] ? batadv_nc_worker+0x11e/0x600 [ 167.752104][ C1] process_one_work+0x7ef/0x10d0 [ 167.757224][ C1] worker_thread+0xc01/0x1630 [ 167.761998][ C1] kthread+0x332/0x350 [ 167.766102][ C1] ? rcu_lock_release+0x30/0x30 [ 167.770936][ C1] ? kthread_blkcg+0xe0/0xe0 [ 167.775774][ C1] ret_from_fork+0x24/0x30