[   45.424637][   T27] audit: type=1800 audit(1578466141.990:25): pid=8307 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0
[   45.463093][   T27] audit: type=1800 audit(1578466141.990:26): pid=8307 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0
[   45.507569][   T27] audit: type=1800 audit(1578466141.990:27): pid=8307 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0
[   45.555238][   T27] audit: type=1800 audit(1578466141.990:28): pid=8307 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0
[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c.

Debian GNU/Linux 7 syzkaller ttyS0

Warning: Permanently added '10.128.0.100' (ECDSA) to the list of known hosts.
2020/01/08 06:49:13 fuzzer started
2020/01/08 06:49:16 dialing manager at 10.128.0.26:35703
2020/01/08 06:49:16 syscalls: 2824
2020/01/08 06:49:16 code coverage: enabled
2020/01/08 06:49:16 comparison tracing: enabled
2020/01/08 06:49:16 extra coverage: enabled
2020/01/08 06:49:16 setuid sandbox: enabled
2020/01/08 06:49:16 namespace sandbox: enabled
2020/01/08 06:49:16 Android sandbox: /sys/fs/selinux/policy does not exist
2020/01/08 06:49:16 fault injection: enabled
2020/01/08 06:49:16 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2020/01/08 06:49:16 net packet injection: enabled
2020/01/08 06:49:16 net device setup: enabled
2020/01/08 06:49:16 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2020/01/08 06:49:16 devlink PCI setup: PCI device 0000:00:10.0 is not available
06:49:17 executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x4, 0x0, &(0x7f0000000040))

06:49:17 executing program 1:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FITRIM(r0, 0xc020662a, &(0x7f0000000040)={0xffffffff000, 0x100000000004})

syzkaller login: [   60.845583][ T8479] IPVS: ftp: loaded support on port[0] = 21
06:49:17 executing program 2:
mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1)
mount(&(0x7f0000000300)=@filename='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0)

[   61.040230][ T8479] chnl_net:caif_netlink_parms(): no params data found
[   61.050304][ T8482] IPVS: ftp: loaded support on port[0] = 21
[   61.150557][ T8479] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.172981][ T8479] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.184417][ T8479] device bridge_slave_0 entered promiscuous mode
[   61.218696][ T8479] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.233107][ T8479] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.253899][ T8479] device bridge_slave_1 entered promiscuous mode
06:49:17 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x69, 0x10, 0x54}, [@ldst={0x7, 0x0, 0x1}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xff34, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1c4, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)

[   61.351686][ T8484] IPVS: ftp: loaded support on port[0] = 21
[   61.368275][ T8479] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.398029][ T8482] chnl_net:caif_netlink_parms(): no params data found
[   61.416411][ T8479] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.480057][ T8479] team0: Port device team_slave_0 added
[   61.519588][ T8479] team0: Port device team_slave_1 added
[   61.528870][ T8482] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.543747][ T8482] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.551512][ T8482] device bridge_slave_0 entered promiscuous mode
[   61.585595][ T8487] IPVS: ftp: loaded support on port[0] = 21
[   61.609156][ T8482] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.622342][ T8482] bridge0: port 2(bridge_slave_1) entered disabled state
06:49:18 executing program 4:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00001a7fe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c)
sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x2465a, 0x7e, &(0x7f0000ab0000)={0xa, 0x0, 0x0, @loopback={0x0, 0x3}}, 0x1c)

[   61.631134][ T8482] device bridge_slave_1 entered promiscuous mode
[   61.696247][ T8479] device hsr_slave_0 entered promiscuous mode
[   61.764937][ T8479] device hsr_slave_1 entered promiscuous mode
06:49:18 executing program 5:
r0 = timerfd_create(0x0, 0x0)
read(r0, 0x0, 0x0)

[   61.893673][ T8482] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.908859][ T8482] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.954535][ T8489] IPVS: ftp: loaded support on port[0] = 21
[   62.000145][ T8484] chnl_net:caif_netlink_parms(): no params data found
[   62.017709][ T8482] team0: Port device team_slave_0 added
[   62.061644][ T8482] team0: Port device team_slave_1 added
[   62.185355][ T8482] device hsr_slave_0 entered promiscuous mode
[   62.243226][ T8482] device hsr_slave_1 entered promiscuous mode
[   62.282963][ T8482] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   62.290779][ T8482] Cannot create hsr debugfs directory
[   62.338106][ T8487] chnl_net:caif_netlink_parms(): no params data found
[   62.348336][ T8484] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.359160][ T8484] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.360449][ T8492] IPVS: ftp: loaded support on port[0] = 21
[   62.375624][ T8484] device bridge_slave_0 entered promiscuous mode
[   62.387741][ T8484] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.395910][ T8484] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.403653][ T8484] device bridge_slave_1 entered promiscuous mode
[   62.439044][ T8479] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   62.496813][ T8479] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   62.559187][ T8479] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   62.618208][ T8479] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   62.666225][ T8484] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.677165][ T8484] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.759332][ T8489] chnl_net:caif_netlink_parms(): no params data found
[   62.782084][ T8484] team0: Port device team_slave_0 added
[   62.793717][ T8484] team0: Port device team_slave_1 added
[   62.829193][ T8487] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.837404][ T8487] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.845247][ T8487] device bridge_slave_0 entered promiscuous mode
[   62.896101][ T8484] device hsr_slave_0 entered promiscuous mode
[   62.933286][ T8484] device hsr_slave_1 entered promiscuous mode
[   62.972999][ T8484] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   62.980705][ T8484] Cannot create hsr debugfs directory
[   62.994463][ T8487] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.001565][ T8487] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.011218][ T8487] device bridge_slave_1 entered promiscuous mode
[   63.034799][ T8482] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   63.089641][ T8482] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   63.158667][ T8482] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   63.209839][ T8487] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.221491][ T8487] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.242068][ T8482] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   63.303035][ T8487] team0: Port device team_slave_0 added
[   63.342477][ T8487] team0: Port device team_slave_1 added
[   63.379245][ T8489] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.387139][ T8489] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.396017][ T8489] device bridge_slave_0 entered promiscuous mode
[   63.407028][ T8492] chnl_net:caif_netlink_parms(): no params data found
[   63.475800][ T8487] device hsr_slave_0 entered promiscuous mode
[   63.524263][ T8487] device hsr_slave_1 entered promiscuous mode
[   63.552942][ T8487] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   63.560535][ T8487] Cannot create hsr debugfs directory
[   63.566446][ T8489] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.573757][ T8489] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.581330][ T8489] device bridge_slave_1 entered promiscuous mode
[   63.616847][ T8492] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.624074][ T8492] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.631829][ T8492] device bridge_slave_0 entered promiscuous mode
[   63.675948][ T8492] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.683228][ T8492] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.690759][ T8492] device bridge_slave_1 entered promiscuous mode
[   63.717071][ T8489] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.729337][ T8489] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.762182][ T8492] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.779649][ T8484] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   63.809953][ T8484] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   63.871357][ T8479] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.884283][ T8492] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.904613][ T8484] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   63.945434][ T8484] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   63.996175][ T8489] team0: Port device team_slave_0 added
[   64.022027][ T8492] team0: Port device team_slave_0 added
[   64.030276][ T8492] team0: Port device team_slave_1 added
[   64.038591][ T8489] team0: Port device team_slave_1 added
[   64.104685][ T8489] device hsr_slave_0 entered promiscuous mode
[   64.143160][ T8489] device hsr_slave_1 entered promiscuous mode
[   64.192996][ T8489] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   64.200611][ T8489] Cannot create hsr debugfs directory
[   64.228611][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   64.237190][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   64.246375][ T8479] 8021q: adding VLAN 0 to HW filter on device team0
[   64.258821][ T8487] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   64.294764][ T8487] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   64.350630][ T8487] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   64.455571][ T8492] device hsr_slave_0 entered promiscuous mode
[   64.513168][ T8492] device hsr_slave_1 entered promiscuous mode
[   64.563015][ T8492] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   64.570681][ T8492] Cannot create hsr debugfs directory
[   64.576473][ T2693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   64.586258][ T2693] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   64.595371][ T2693] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.602559][ T2693] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.610760][ T2693] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   64.623273][ T8482] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.630060][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   64.642116][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   64.650901][ T2676] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.657993][ T2676] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.672256][ T8487] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   64.765140][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   64.804850][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   64.812548][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   64.825857][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   64.835333][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   64.844163][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   64.865054][ T8482] 8021q: adding VLAN 0 to HW filter on device team0
[   64.886809][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   64.918658][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   64.930573][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   64.939403][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   64.947937][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   64.956638][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   64.965124][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   64.977165][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   64.985937][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   64.994279][ T2676] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.001304][ T2676] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.009880][ T2677] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   65.017788][ T8489] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   65.086538][ T8479] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   65.099435][ T2692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   65.108146][ T2692] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   65.117571][ T2692] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.124885][ T2692] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.132379][ T2692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   65.144329][ T8489] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   65.186534][ T8489] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   65.240343][ T8489] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   65.304962][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   65.313645][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   65.322784][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   65.331254][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   65.368237][ T8479] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.379679][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   65.390890][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   65.399419][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   65.406976][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   65.422375][ T8482] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   65.434387][ T8482] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   65.460098][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   65.470390][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   65.481416][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   65.489930][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   65.511646][ T8484] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.521400][ T8487] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.535253][ T8492] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   65.585503][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   65.608052][ T8492] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   65.639363][ T2692] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   65.647170][ T2692] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   65.659663][ T8482] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.673914][ T8487] 8021q: adding VLAN 0 to HW filter on device team0
[   65.685237][ T8484] 8021q: adding VLAN 0 to HW filter on device team0
[   65.707331][ T8492] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   65.755114][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   65.762968][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   65.774036][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   65.781649][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   65.790021][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   65.799089][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   65.813923][ T8479] device veth0_vlan entered promiscuous mode
[   65.823376][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   65.831433][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   65.843492][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   65.851941][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   65.860492][ T2686] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.867572][ T2686] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.881423][ T8492] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   65.924616][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   65.932257][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   65.943422][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   65.951340][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   65.960934][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   65.969664][ T2686] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.976764][ T2686] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.985520][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   65.994203][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   66.002545][ T2686] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.009646][ T2686] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.017179][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   66.026004][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   66.034412][ T2686] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.041443][ T2686] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.049959][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   66.059882][ T8479] device veth1_vlan entered promiscuous mode
[   66.091990][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   66.100328][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   66.109128][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   66.117810][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   66.126775][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   66.135547][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   66.144374][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   66.152571][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   66.161186][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   66.170509][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   66.192220][ T8489] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.224519][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   66.233785][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   66.242673][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   66.251675][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   66.260927][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   66.269396][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   66.277769][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   66.286286][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   66.294632][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   66.302747][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   66.329443][ T8487] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   66.345082][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   66.357856][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   66.366826][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   66.374733][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   66.386973][ T8482] device veth0_vlan entered promiscuous mode
[   66.399335][ T8489] 8021q: adding VLAN 0 to HW filter on device team0
[   66.431698][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   66.444131][ T2676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   66.495285][ T8487] 8021q: adding VLAN 0 to HW filter on device batadv0
[  171.512818][    C1] rcu: INFO: rcu_preempt self-detected stall on CPU
[  171.519749][    C1] rcu: 	1-...!: (1 GPs behind) idle=fc2/1/0x4000000000000002 softirq=11658/11665 fqs=0 
[  171.529653][    C1] 	(t=10501 jiffies g=6877 q=164)
[  171.534672][    C1] rcu: rcu_preempt kthread starved for 10502 jiffies! g6877 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
[  171.545758][    C1] rcu: RCU grace-period kthread stack dump:
[  171.551664][    C1] rcu_preempt     R  running task    29104    10      2 0x80004000
[  171.559563][    C1] Call Trace:
[  171.562851][    C1]  __schedule+0x9a0/0xcc0
[  171.567179][    C1]  schedule+0x181/0x210
[  171.571328][    C1]  schedule_timeout+0x14f/0x240
[  171.576173][    C1]  ? run_local_timers+0x120/0x120
[  171.581192][    C1]  rcu_gp_kthread+0xed8/0x1770
[  171.585956][    C1]  kthread+0x332/0x350
[  171.590128][    C1]  ? rcu_report_qs_rsp+0x140/0x140
[  171.595241][    C1]  ? kthread_blkcg+0xe0/0xe0
[  171.599840][    C1]  ret_from_fork+0x24/0x30
[  171.604271][    C1] NMI backtrace for cpu 1
[  171.608596][    C1] CPU: 1 PID: 8497 Comm: syz-executor.0 Not tainted 5.5.0-rc5-syzkaller #0
[  171.617163][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  171.627208][    C1] Call Trace:
[  171.630480][    C1]  <IRQ>
[  171.633327][    C1]  dump_stack+0x1fb/0x318
[  171.637648][    C1]  nmi_cpu_backtrace+0xaf/0x1a0
[  171.642510][    C1]  ? nmi_trigger_cpumask_backtrace+0x16d/0x290
[  171.648686][    C1]  ? arch_trigger_cpumask_backtrace+0x20/0x20
[  171.654749][    C1]  nmi_trigger_cpumask_backtrace+0x174/0x290
[  171.660726][    C1]  arch_trigger_cpumask_backtrace+0x10/0x20
[  171.668692][    C1]  rcu_dump_cpu_stacks+0x15a/0x220
[  171.673799][    C1]  rcu_sched_clock_irq+0xe25/0x1ad0
[  171.679079][    C1]  ? trace_hardirqs_off+0x74/0x80
[  171.684097][    C1]  update_process_times+0x12d/0x180
[  171.689286][    C1]  tick_sched_timer+0x263/0x420
[  171.694127][    C1]  ? tick_setup_sched_timer+0x3d0/0x3d0
[  171.699668][    C1]  __hrtimer_run_queues+0x403/0x840
[  171.704873][    C1]  hrtimer_interrupt+0x38c/0xda0
[  171.709816][    C1]  ? debug_smp_processor_id+0x9/0x20
[  171.715095][    C1]  smp_apic_timer_interrupt+0x109/0x280
[  171.720629][    C1]  apic_timer_interrupt+0xf/0x20
[  171.725551][    C1]  </IRQ>
[  171.728480][    C1] RIP: 0010:mod_memcg_page_state+0x1/0x190
[  171.734292][    C1] Code: 8b 3b e8 32 7e 60 00 eb 0c e8 eb 27 2e 00 eb 05 e8 e4 27 2e 00 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d c3 0f 1f 44 00 00 55 <48> 89 e5 41 57 41 56 41 54 53 41 89 f6 48 89 fb e8 ba 27 2e 00 48
[  171.753916][    C1] RSP: 0018:ffffc90002477838 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13
[  171.762466][    C1] RAX: 1ffff11011dd6761 RBX: ffff88808eeb3b08 RCX: 0000000000000000
[  171.770554][    C1] RDX: ffffc90001f29000 RSI: 00000000fffffffc RDI: ffffea0002549180
[  171.778523][    C1] RBP: ffffc90002477880 R08: dffffc0000000000 R09: fffffbfff12c962d
[  171.786487][    C1] R10: fffffbfff12c962d R11: 0000000000000000 R12: ffff88808eeb3ba0
[  171.794452][    C1] R13: dffffc0000000000 R14: 1ffff11011dd6774 R15: ffff8880909917f8
[  171.802441][    C1]  ? free_thread_stack+0x168/0x590
[  171.807545][    C1]  put_task_stack+0xa3/0x130
[  171.812123][    C1]  finish_task_switch+0x3f1/0x550
[  171.817143][    C1]  __schedule+0x9a8/0xcc0
[  171.821474][    C1]  ? do_raw_spin_unlock+0x142/0x950
[  171.826666][    C1]  schedule+0x181/0x210
[  171.830833][    C1]  futex_wait_queue_me+0x2a3/0x4b0
[  171.835966][    C1]  futex_wait+0x252/0x770
[  171.840386][    C1]  do_futex+0x437/0x3d60
[  171.844624][    C1]  ? __lock_acquire+0xc75/0x1be0
[  171.849570][    C1]  ? trace_hardirqs_on+0x74/0x80
[  171.854499][    C1]  ? task_work_run+0x139/0x1b0
[  171.859256][    C1]  ? __might_fault+0xf9/0x160
[  171.863928][    C1]  ? __might_fault+0xf9/0x160
[  171.868597][    C1]  ? check_preemption_disabled+0xb4/0x260
[  171.874303][    C1]  ? debug_smp_processor_id+0x9/0x20
[  171.879578][    C1]  __se_sys_futex+0x28c/0x360
[  171.884249][    C1]  ? prepare_exit_to_usermode+0x221/0x5b0
[  171.889952][    C1]  ? trace_irq_disable_rcuidle+0x23/0x1e0
[  171.895656][    C1]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  171.901103][    C1]  __x64_sys_futex+0xe5/0x100
[  171.905769][    C1]  do_syscall_64+0xf7/0x1c0
[  171.910263][    C1]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  171.916145][    C1] RIP: 0033:0x45af49
[  171.920040][    C1] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  171.939646][    C1] RSP: 002b:00007f4d6856dcf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  171.948054][    C1] RAX: ffffffffffffffda RBX: 000000000075bf28 RCX: 000000000045af49
[  171.956015][    C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000075bf28
[  171.963971][    C1] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  171.971927][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000075bf2c
[  171.979885][    C1] R13: 00007ffd757def8f R14: 00007f4d6856e9c0 R15: 000000000075bf2c