[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c.
[   54.241140][   T23] audit: type=1800 audit(1578467764.620:25): pid=8452 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0
[   54.260120][   T23] audit: type=1800 audit(1578467764.620:26): pid=8452 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0
[   54.280766][   T23] audit: type=1800 audit(1578467764.630:27): pid=8452 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0
[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c.

Debian GNU/Linux 7 syzkaller ttyS0

Warning: Permanently added '10.128.1.27' (ECDSA) to the list of known hosts.
2020/01/08 07:16:16 fuzzer started
2020/01/08 07:16:18 dialing manager at 10.128.0.26:35703
2020/01/08 07:16:18 syscalls: 2824
2020/01/08 07:16:18 code coverage: enabled
2020/01/08 07:16:18 comparison tracing: enabled
2020/01/08 07:16:18 extra coverage: enabled
2020/01/08 07:16:18 setuid sandbox: enabled
2020/01/08 07:16:18 namespace sandbox: enabled
2020/01/08 07:16:18 Android sandbox: /sys/fs/selinux/policy does not exist
2020/01/08 07:16:18 fault injection: enabled
2020/01/08 07:16:18 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2020/01/08 07:16:18 net packet injection: enabled
2020/01/08 07:16:18 net device setup: enabled
2020/01/08 07:16:18 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2020/01/08 07:16:18 devlink PCI setup: PCI device 0000:00:10.0 is not available
07:16:20 executing program 0:
r0 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10)
listen(r0, 0x3)
r1 = socket$inet(0x2, 0x80001, 0x84)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4)
bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10)
listen(r1, 0x3)

07:16:20 executing program 1:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x97a0c, 0x0)
r0 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000640), 0x12)

syzkaller login: [   69.843715][ T8621] IPVS: ftp: loaded support on port[0] = 21
[   69.956194][ T8621] chnl_net:caif_netlink_parms(): no params data found
[   69.999292][ T8621] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.034977][ T8621] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.042932][ T8621] device bridge_slave_0 entered promiscuous mode
[   70.067590][ T8621] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.074712][ T8621] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.086594][ T8621] device bridge_slave_1 entered promiscuous mode
[   70.100869][ T8624] IPVS: ftp: loaded support on port[0] = 21
07:16:20 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1)
ioctl$USBDEVFS_CONTROL(r0, 0x80045515, 0x0)

[   70.132382][ T8621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.158554][ T8621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.218739][ T8621] team0: Port device team_slave_0 added
[   70.238659][ T8621] team0: Port device team_slave_1 added
07:16:20 executing program 3:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001380)="6653070000053c07bc3376003639405cb4ae", 0x12}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r0, 0x0, 0x0)

[   70.437727][ T8621] device hsr_slave_0 entered promiscuous mode
[   70.485125][ T8621] device hsr_slave_1 entered promiscuous mode
[   70.530909][ T8624] chnl_net:caif_netlink_parms(): no params data found
[   70.540417][ T8627] IPVS: ftp: loaded support on port[0] = 21
[   70.580592][ T8629] IPVS: ftp: loaded support on port[0] = 21
07:16:21 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="290000002000190710003fffffffda060200080000000000000000040d000200000000000000000001", 0x29}], 0x1)

[   70.671399][ T8624] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.683127][ T8624] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.693079][ T8624] device bridge_slave_0 entered promiscuous mode
[   70.737217][ T8624] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.744313][ T8624] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.754373][ T8624] device bridge_slave_1 entered promiscuous mode
[   70.813816][ T8624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.858789][ T8624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.960407][ T8621] netdevsim netdevsim0 netdevsim0: renamed from eth0
07:16:21 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071")
sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="240000000e0607051dfffd946fa2830020200a0009000100071d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
r1 = socket(0x10, 0x80002, 0xc)
sendmmsg$alg(r1, &(0x7f0000000140), 0x492492492492805, 0x0)

[   71.009334][ T8621] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   71.111598][ T8624] team0: Port device team_slave_0 added
[   71.119870][ T8624] team0: Port device team_slave_1 added
[   71.126343][ T8621] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   71.167406][ T8621] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   71.221579][ T8633] IPVS: ftp: loaded support on port[0] = 21
[   71.230420][ T8629] chnl_net:caif_netlink_parms(): no params data found
[   71.240006][ T8627] chnl_net:caif_netlink_parms(): no params data found
[   71.263364][ T8635] IPVS: ftp: loaded support on port[0] = 21
[   71.317925][ T8624] device hsr_slave_0 entered promiscuous mode
[   71.385236][ T8624] device hsr_slave_1 entered promiscuous mode
[   71.424929][ T8624] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   71.432710][ T8624] Cannot create hsr debugfs directory
[   71.543242][ T8629] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.550459][ T8629] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.558242][ T8629] device bridge_slave_0 entered promiscuous mode
[   71.571081][ T8627] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.579093][ T8627] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.586923][ T8627] device bridge_slave_0 entered promiscuous mode
[   71.602402][ T8629] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.610797][ T8629] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.618548][ T8629] device bridge_slave_1 entered promiscuous mode
[   71.630601][ T8627] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.638151][ T8627] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.645994][ T8627] device bridge_slave_1 entered promiscuous mode
[   71.719020][ T8627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.734502][ T8621] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.746072][ T8629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.757817][ T8629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.779985][ T8627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.835757][ T8627] team0: Port device team_slave_0 added
[   71.863993][ T8629] team0: Port device team_slave_0 added
[   71.876838][ T8624] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   71.928576][ T8627] team0: Port device team_slave_1 added
[   71.934361][ T8624] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   71.987442][ T8633] chnl_net:caif_netlink_parms(): no params data found
[   72.012607][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   72.021520][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   72.030588][ T8629] team0: Port device team_slave_1 added
[   72.043778][ T8624] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   72.103236][ T8635] chnl_net:caif_netlink_parms(): no params data found
[   72.115875][ T8621] 8021q: adding VLAN 0 to HW filter on device team0
[   72.137352][ T8624] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   72.237898][ T8629] device hsr_slave_0 entered promiscuous mode
[   72.275269][ T8629] device hsr_slave_1 entered promiscuous mode
[   72.314969][ T8629] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   72.322555][ T8629] Cannot create hsr debugfs directory
[   72.377524][ T8627] device hsr_slave_0 entered promiscuous mode
[   72.425118][ T8627] device hsr_slave_1 entered promiscuous mode
[   72.474977][ T8627] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   72.482569][ T8627] Cannot create hsr debugfs directory
[   72.508519][ T3181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   72.517088][ T3181] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   72.526011][ T3181] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.533295][ T3181] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.584123][ T3180] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   72.592372][ T3180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   72.602370][ T3180] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   72.610968][ T3180] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.618056][ T3180] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.634487][ T8633] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.643263][ T8633] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.651513][ T8633] device bridge_slave_0 entered promiscuous mode
[   72.663447][ T8633] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.670571][ T8633] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.678476][ T8633] device bridge_slave_1 entered promiscuous mode
[   72.694895][ T3181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   72.703472][ T3181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   72.712084][ T3181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   72.720549][ T3181] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   72.729320][ T3181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   72.737869][ T3181] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   72.746913][ T3181] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   72.768418][ T8635] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.776634][ T8635] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.784382][ T8635] device bridge_slave_0 entered promiscuous mode
[   72.803961][ T8633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.817948][ T8633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.837703][ T8635] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.845411][ T8635] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.853008][ T8635] device bridge_slave_1 entered promiscuous mode
[   72.895785][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   72.904154][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   72.913737][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   72.922434][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   72.946730][ T8621] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   72.961451][ T8633] team0: Port device team_slave_0 added
[   72.972666][ T8635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.987959][ T8635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   73.020366][ T8633] team0: Port device team_slave_1 added
[   73.032920][ T8624] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.057043][ T8635] team0: Port device team_slave_0 added
[   73.065326][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   73.072780][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   73.083714][ T8621] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.157781][ T8633] device hsr_slave_0 entered promiscuous mode
[   73.216428][ T8633] device hsr_slave_1 entered promiscuous mode
[   73.254972][ T8633] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   73.262555][ T8633] Cannot create hsr debugfs directory
[   73.269613][ T8635] team0: Port device team_slave_1 added
[   73.336719][ T8635] device hsr_slave_0 entered promiscuous mode
[   73.365258][ T8635] device hsr_slave_1 entered promiscuous mode
[   73.414970][ T8635] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   73.415003][ T8635] Cannot create hsr debugfs directory
[   73.457453][ T8627] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   73.512335][ T8624] 8021q: adding VLAN 0 to HW filter on device team0
[   73.519406][ T8629] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   73.558683][ T8629] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   73.630967][ T8629] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   73.678297][ T8627] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   73.731016][ T8627] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   73.787185][ T8627] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   73.827002][ T2675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   73.837200][ T2675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   73.852488][ T8629] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   73.917400][ T2675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   73.927781][ T2675] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   73.937258][ T2675] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.944304][ T2675] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.952125][ T2675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   73.961672][ T2675] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   73.970159][ T2675] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.977254][ T2675] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.985033][ T2675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   73.996090][ T2675] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   74.039154][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   74.051774][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   74.060849][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   74.069988][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   74.078650][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   74.095881][ T3180] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   74.116776][ T3180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   74.130519][ T3180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   74.139069][ T3180] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   74.147207][ T3180] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   74.168108][ T8621] device veth0_vlan entered promiscuous mode
[   74.200586][ T3180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   74.211419][ T3180] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   74.231878][ T8624] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   74.247994][ T8624] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   74.264473][ T8621] device veth1_vlan entered promiscuous mode
[   74.272328][ T8635] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   74.310042][ T8635] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   74.356944][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   74.365531][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   74.373781][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   74.382376][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   74.390863][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   74.399504][ T8633] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   74.457196][ T8633] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   74.499135][ T8633] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   74.538160][ T8633] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   74.605318][ T8635] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   74.677052][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   74.708946][ T8624] 8021q: adding VLAN 0 to HW filter on device batadv0
[   74.725563][ T8635] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   74.758294][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   74.766937][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   74.824019][ T2675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   74.834303][ T2675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   74.866137][ T8627] 8021q: adding VLAN 0 to HW filter on device bond0
[   74.903426][ T8624] device veth0_vlan entered promiscuous mode
[   74.913899][ T8629] 8021q: adding VLAN 0 to HW filter on device bond0
[   74.935911][ T8627] 8021q: adding VLAN 0 to HW filter on device team0
[   74.951443][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   74.964553][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   74.993984][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   75.002160][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   75.011402][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   75.019726][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  179.974751][    C0] rcu: INFO: rcu_preempt self-detected stall on CPU
[  179.981802][    C0] rcu: 	0-...!: (10499 ticks this GP) idle=806/1/0x4000000000000002 softirq=13209/13209 fqs=3 
[  179.992290][    C0] 	(t=10500 jiffies g=7097 q=114)
[  179.997310][    C0] rcu: rcu_preempt kthread starved for 10494 jiffies! g7097 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1
[  180.008494][    C0] rcu: RCU grace-period kthread stack dump:
[  180.014382][    C0] rcu_preempt     R  running task    29032    10      2 0x80004000
[  180.022514][    C0] Call Trace:
[  180.025823][    C0]  __schedule+0x9a0/0xcc0
[  180.030164][    C0]  schedule+0x181/0x210
[  180.034316][    C0]  schedule_timeout+0x14f/0x240
[  180.039159][    C0]  ? run_local_timers+0x120/0x120
[  180.044180][    C0]  rcu_gp_kthread+0xed8/0x1770
[  180.048940][    C0]  kthread+0x332/0x350
[  180.052999][    C0]  ? rcu_report_qs_rsp+0x140/0x140
[  180.058128][    C0]  ? kthread_blkcg+0xe0/0xe0
[  180.062729][    C0]  ret_from_fork+0x24/0x30
[  180.067144][    C0] NMI backtrace for cpu 0
[  180.071462][    C0] CPU: 0 PID: 30 Comm: kworker/u4:2 Not tainted 5.5.0-rc5-syzkaller #0
[  180.079680][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  180.089813][    C0] Workqueue:  0x0 (bat_events)
[  180.094563][    C0] Call Trace:
[  180.097834][    C0]  <IRQ>
[  180.100680][    C0]  dump_stack+0x1fb/0x318
[  180.105005][    C0]  nmi_cpu_backtrace+0xaf/0x1a0
[  180.109844][    C0]  ? nmi_trigger_cpumask_backtrace+0x16d/0x290
[  180.115990][    C0]  ? arch_trigger_cpumask_backtrace+0x20/0x20
[  180.122046][    C0]  nmi_trigger_cpumask_backtrace+0x174/0x290
[  180.128019][    C0]  arch_trigger_cpumask_backtrace+0x10/0x20
[  180.133897][    C0]  rcu_dump_cpu_stacks+0x15a/0x220
[  180.139114][    C0]  rcu_sched_clock_irq+0xe25/0x1ad0
[  180.144320][    C0]  ? trace_hardirqs_off+0x74/0x80
[  180.149373][    C0]  update_process_times+0x12d/0x180
[  180.154572][    C0]  tick_sched_timer+0x263/0x420
[  180.159417][    C0]  ? tick_setup_sched_timer+0x3d0/0x3d0
[  180.164954][    C0]  __hrtimer_run_queues+0x403/0x840
[  180.170156][    C0]  hrtimer_interrupt+0x38c/0xda0
[  180.175099][    C0]  ? debug_smp_processor_id+0x9/0x20
[  180.180376][    C0]  smp_apic_timer_interrupt+0x109/0x280
[  180.185912][    C0]  apic_timer_interrupt+0xf/0x20
[  180.190920][    C0]  </IRQ>
[  180.193849][    C0] RIP: 0010:mod_memcg_page_state+0x8/0x190
[  180.199652][    C0] Code: eb 0c e8 eb 27 2e 00 eb 05 e8 e4 27 2e 00 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d c3 0f 1f 44 00 00 55 48 89 e5 41 57 41 56 <41> 54 53 41 89 f6 48 89 fb e8 ba 27 2e 00 48 83 c3 38 48 89 d8 48
[  180.219244][    C0] RSP: 0018:ffffc90000e87c10 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13
[  180.227644][    C0] RAX: 1ffff11015250a61 RBX: ffff8880a9285308 RCX: 0000000000000000
[  180.235620][    C0] RDX: 0000000000000000 RSI: 00000000fffffffc RDI: ffffea0002a43180
[  180.243578][    C0] RBP: ffffc90000e87c20 R08: dffffc0000000000 R09: fffffbfff124248a
[  180.251539][    C0] R10: fffffbfff124248a R11: 0000000000000000 R12: ffff8880a92853a0
[  180.259511][    C0] R13: dffffc0000000000 R14: 1ffff11015250a74 R15: ffff8880a95135f8
[  180.267510][    C0]  free_thread_stack+0x168/0x590
[  180.273415][    C0]  put_task_stack+0xa3/0x130
[  180.278021][    C0]  finish_task_switch+0x3f1/0x550
[  180.283045][    C0]  __schedule+0x9a8/0xcc0
[  180.287378][    C0]  schedule+0x181/0x210
[  180.291533][    C0]  worker_thread+0x10d6/0x1630
[  180.296316][    C0]  kthread+0x332/0x350
[  180.300374][    C0]  ? rcu_lock_release+0x30/0x30
[  180.305213][    C0]  ? kthread_blkcg+0xe0/0xe0
[  180.309793][    C0]  ret_from_fork+0x24/0x30