[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 33.732423] random: sshd: uninitialized urandom read (32 bytes read) [ 33.986479] kauditd_printk_skb: 9 callbacks suppressed [ 33.986488] audit: type=1400 audit(1568645789.914:35): avc: denied { map } for pid=6915 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 34.039796] random: sshd: uninitialized urandom read (32 bytes read) [ 34.576493] random: sshd: uninitialized urandom read (32 bytes read) [ 171.952743] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.62' (ECDSA) to the list of known hosts. [ 177.518712] random: sshd: uninitialized urandom read (32 bytes read) [ 177.631404] audit: type=1400 audit(1568645933.564:36): avc: denied { map } for pid=6928 comm="syz-executor523" path="/root/syz-executor523112895" dev="sda1" ino=1426 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 177.860915] IPVS: ftp: loaded support on port[0] = 21 [ 178.848192] chnl_net:caif_netlink_parms(): no params data found [ 178.876587] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.883338] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.890624] device bridge_slave_0 entered promiscuous mode [ 178.897427] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.904060] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.911157] device bridge_slave_1 entered promiscuous mode [ 178.924921] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 178.933735] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 178.949859] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 178.957208] team0: Port device team_slave_0 added [ 178.962635] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 178.969687] team0: Port device team_slave_1 added [ 178.975009] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 178.982270] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 179.032258] device hsr_slave_0 entered promiscuous mode [ 179.080427] device hsr_slave_1 entered promiscuous mode [ 179.120639] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 179.127593] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 179.139982] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.146467] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.153373] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.159716] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.185348] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 179.192322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.199856] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 179.208450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 179.228148] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.235326] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.246153] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 179.252607] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.260804] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 179.268447] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.274998] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.283653] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 179.291711] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.298035] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.311955] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 179.320773] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 179.327718] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 179.337552] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 179.346765] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 179.355905] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 179.362529] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 179.374884] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 179.384058] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 284.550127] INFO: rcu_preempt self-detected stall on CPU [ 284.556386] 1-...: (10499 ticks this GP) idle=4f2/140000000000002/0 softirq=10822/10825 fqs=6 [ 284.565217] (t=10500 jiffies g=1117 c=1116 q=176) [ 284.570326] rcu_preempt kthread starved for 10488 jiffies! g1117 c1116 f0x0 RCU_GP_WAIT_FQS(3) ->state=0x402 ->cpu=0 [ 284.581138] rcu_preempt I29824 8 2 0x80000000 [ 284.586772] Call Trace: [ 284.589486] __schedule+0x7b8/0x1cd0 [ 284.593201] ? pci_mmcfg_check_reserved+0x150/0x150 [ 284.598202] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 284.603325] schedule+0x92/0x1c0 [ 284.606679] schedule_timeout+0x43e/0xe10 [ 284.610808] ? usleep_range+0x130/0x130 [ 284.614850] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 284.620113] ? prepare_to_swait+0xcc/0x100 [ 284.624362] ? call_timer_fn+0x670/0x670 [ 284.628409] rcu_gp_kthread+0xbf4/0x1ec0 [ 284.632475] ? force_qs_rnp+0x4d0/0x4d0 [ 284.636459] kthread+0x319/0x430 [ 284.639808] ? force_qs_rnp+0x4d0/0x4d0 [ 284.643762] ? kthread_create_on_node+0xd0/0xd0 [ 284.648428] ret_from_fork+0x24/0x30 [ 284.653393] NMI backtrace for cpu 1 [ 284.657241] CPU: 1 PID: 6987 Comm: syz-executor523 Not tainted 4.14.144 #0 [ 284.664234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 284.673571] Call Trace: [ 284.676138] [ 284.678330] dump_stack+0x138/0x197 [ 284.681956] nmi_cpu_backtrace.cold+0x57/0x94 [ 284.686501] ? irq_force_complete_move.cold+0x7d/0x7d [ 284.691675] nmi_trigger_cpumask_backtrace+0x141/0x189 [ 284.696935] arch_trigger_cpumask_backtrace+0x14/0x20 [ 284.702109] rcu_dump_cpu_stacks+0x186/0x1d2 [ 284.706500] rcu_check_callbacks.cold+0x43d/0xd0a [ 284.711404] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 284.716841] update_process_times+0x31/0x70 [ 284.721203] tick_sched_handle+0x85/0x160 [ 284.725333] tick_sched_timer+0x43/0x130 [ 284.729376] __hrtimer_run_queues+0x270/0xbc0 [ 284.733867] ? tick_sched_do_timer+0xe0/0xe0 [ 284.738283] ? hrtimer_start_range_ns+0x10d0/0x10d0 [ 284.743282] hrtimer_interrupt+0x1d8/0x5d0 [ 284.747633] smp_apic_timer_interrupt+0x11c/0x5e0 [ 284.752458] apic_timer_interrupt+0x96/0xa0 [ 284.756827] RIP: 0010:__list_add_valid+0x50/0xa0 [ 284.761564] RSP: 0018:ffff8880aef07198 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff10 [ 284.769259] RAX: dffffc0000000000 RBX: ffff8880a1110678 RCX: 0000000000000000 [ 284.776520] RDX: 1ffff110142220e2 RSI: ffff8880a1110710 RDI: ffff8880a1110718 [ 284.783771] RBP: ffff8880aef071b0 R08: 0000000000000000 R09: ffff8880807aaeb8 [ 284.791020] R10: ffff8880807aae98 R11: ffff8880807aa500 R12: ffff8880a1110710 [ 284.798271] R13: ffff8880a1110678 R14: ffff8880a1110710 R15: ffff8880a1110700 [ 284.805606] hhf_dequeue+0x61b/0xa60 [ 284.809375] __qdisc_run+0x2b8/0xe00 [ 284.813111] __dev_queue_xmit+0x1571/0x25e0 [ 284.817462] ? __lock_is_held+0xb6/0x140 [ 284.821532] ? check_preemption_disabled+0x3c/0x250 [ 284.826534] ? netdev_pick_tx+0x300/0x300 [ 284.830666] ? save_trace+0x290/0x290 [ 284.834598] ? br_nf_post_routing+0x27d/0xf00 [ 284.839106] ? br_forward_finish+0x1cc/0x320 [ 284.843568] ? find_held_lock+0x35/0x130 [ 284.847621] ? br_forward_finish+0x1cc/0x320 [ 284.852026] dev_queue_xmit+0x18/0x20 [ 284.855894] ? dev_queue_xmit+0x18/0x20 [ 284.859848] br_dev_queue_push_xmit+0x367/0x530 [ 284.864516] br_forward_finish+0xbc/0x320 [ 284.868648] ? br_dev_queue_push_xmit+0x530/0x530 [ 284.873476] ? br_fdb_add.cold+0x84/0x84 [ 284.877523] __br_forward+0x560/0x9c0 [ 284.881310] ? br_forward_finish+0x320/0x320 [ 284.885699] ? br_dev_queue_push_xmit+0x530/0x530 [ 284.890544] deliver_clone+0x61/0xc0 [ 284.894255] br_flood+0x3c8/0x530 [ 284.897693] br_dev_xmit+0x9a4/0xd40 [ 284.901390] ? check_preemption_disabled+0x3c/0x250 [ 284.906391] ? br_poll_controller+0x10/0x10 [ 284.910696] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 284.916129] dev_hard_start_xmit+0x18c/0x8b0 [ 284.920519] ? assoc_array_gc+0x1130/0x11d0 [ 284.924823] __dev_queue_xmit+0x1d95/0x25e0 [ 284.929199] ? ipv6_chk_mcast_addr+0x295/0x600 [ 284.933766] ? netdev_pick_tx+0x300/0x300 [ 284.937908] ? find_held_lock+0x35/0x130 [ 284.941980] ? ip6_finish_output+0x4f4/0xb50 [ 284.946379] ? mark_held_locks+0xb1/0x100 [ 284.950512] dev_queue_xmit+0x18/0x20 [ 284.954394] ? dev_queue_xmit+0x18/0x20 [ 284.958379] ip6_finish_output2+0x10bd/0x21b0 [ 284.962856] ? find_held_lock+0x35/0x130 [ 284.966902] ? ip6_forward_finish+0x480/0x480 [ 284.971382] ? lock_downgrade+0x6e0/0x6e0 [ 284.975515] ip6_finish_output+0x4f4/0xb50 [ 284.979729] ? ip6_finish_output+0x4f4/0xb50 [ 284.984133] ip6_output+0x20f/0x6d0 [ 284.987741] ? ip6_finish_output+0xb50/0xb50 [ 284.992134] ? _raw_spin_unlock_bh+0x31/0x40 [ 284.996523] ? ip6_fragment+0x32c0/0x32c0 [ 285.000664] ? icmp6_dst_alloc+0x38e/0x580 [ 285.004882] mld_sendpack+0x8d1/0xd60 [ 285.008668] ? nf_hook.constprop.0+0x2c0/0x2c0 [ 285.013236] ? mld_ifc_timer_expire+0x3a4/0x7b0 [ 285.017892] ? trace_hardirqs_on+0xd/0x10 [ 285.022070] ? __local_bh_enable_ip+0x99/0x1a0 [ 285.026637] mld_ifc_timer_expire+0x3b6/0x7b0 [ 285.031118] call_timer_fn+0x161/0x670 [ 285.035000] ? mld_dad_timer_expire+0x180/0x180 [ 285.039651] ? __next_timer_interrupt+0x140/0x140 [ 285.044476] ? trace_hardirqs_on_caller+0x19b/0x590 [ 285.049478] run_timer_softirq+0x5b4/0x1570 [ 285.053780] ? mld_dad_timer_expire+0x180/0x180 [ 285.058436] ? add_timer+0xae0/0xae0 [ 285.062133] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 285.067566] __do_softirq+0x244/0x9a0 [ 285.071376] ? sched_clock+0x2e/0x50 [ 285.075080] irq_exit+0x160/0x1b0 [ 285.078529] smp_apic_timer_interrupt+0x146/0x5e0 [ 285.083358] apic_timer_interrupt+0x96/0xa0 [ 285.087655] [ 285.089887] RIP: 0010:_raw_spin_unlock_irqrestore+0x95/0xe0 [ 285.095580] RSP: 0018:ffff88809b537870 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff10 [ 285.103268] RAX: 1ffffffff0ee2a81 RBX: 0000000000000286 RCX: 0000000000000000 [ 285.110522] RDX: dffffc0000000000 RSI: 0000000000000001 RDI: 0000000000000286 [ 285.117774] RBP: ffff88809b537880 R08: ffff8880807aa500 R09: 0000000000000000 [ 285.125025] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff892d6a68 [ 285.132277] R13: 0000000000000000 R14: ffffffff892d6a68 R15: ffff8880a8966760 [ 285.139562] debug_check_no_obj_freed+0x2aa/0x7b7 [ 285.144386] ? trace_hardirqs_on_caller+0x400/0x590 [ 285.149413] ? free_obj_work+0x6d0/0x6d0 [ 285.153457] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 285.158988] __free_pages_ok+0x23f/0xea0 [ 285.163049] free_compound_page+0x63/0x80 [ 285.167232] free_transhuge_page+0x1fb/0x2b0 [ 285.171627] __put_compound_page+0x7a/0xc0 [ 285.175842] release_pages+0x33b/0xb90 [ 285.179714] ? __activate_page+0xb00/0xb00 [ 285.183930] ? lru_add_drain_cpu+0x14f/0x490 [ 285.188351] free_pages_and_swap_cache+0x178/0x210 [ 285.193298] tlb_flush_mmu_free+0x7e/0x150 [ 285.197517] arch_tlb_finish_mmu+0x9f/0x140 [ 285.201882] tlb_finish_mmu+0x7d/0xd0 [ 285.205667] exit_mmap+0x2a5/0x4e0 [ 285.209190] ? SyS_munmap+0x30/0x30 [ 285.212837] ? kmem_cache_free+0x244/0x2b0 [ 285.217054] ? __khugepaged_exit+0xcf/0x3d0 [ 285.221355] ? mm_update_next_owner+0x450/0x5d0 [ 285.226037] mmput+0x114/0x440 [ 285.234094] do_exit+0x71d/0x2c10 [ 285.237546] ? mm_update_next_owner+0x5d0/0x5d0 [ 285.242447] ? up_read+0x1a/0x40 [ 285.245847] ? __do_page_fault+0x358/0xb80 [ 285.250080] do_group_exit+0x111/0x330 [ 285.254144] SyS_exit_group+0x1d/0x20 [ 285.257925] ? do_group_exit+0x330/0x330 [ 285.262336] do_syscall_64+0x1e8/0x640 [ 285.266239] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 285.271067] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 285.276247] RIP: 0033:0x441358 [ 285.279417] RSP: 002b:00007fffd5720b38 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 285.287113] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000441358 [ 285.294376] RDX: 0000000000000000 RSI: 000000000000003c RDI: 0000000000000000 [ 285.302596] RBP: 00000000004c7ab0 R08: 00000000000000e7 R09: ffffffffffffffd0 [ 285.309862] R10: 00000000004a9e35 R11: 0000000000000246 R12: 0000000000000001 [ 285.317113] R13: 00000000006da5e0 R14: 0000000000000000 R15: 0000000000000000 [ 285.330020] INFO: rcu_sched detected stalls on CPUs/tasks: [ 285.335701] 1-...: (10501 ticks this GP) idle=4f2/140000000000001/0 softirq=10822/10825 fqs=6 [ 285.344531] (detected by 0, t=10579 jiffies, g=800, c=799, q=9) [ 285.350769] Sending NMI from CPU 0 to CPUs 1: [ 285.356188] NMI backtrace for cpu 1 [ 285.356192] CPU: 1 PID: 6987 Comm: syz-executor523 Not tainted 4.14.144 #0 [ 285.356195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 285.356198] task: ffff8880807aa500 task.stack: ffff88809b530000 [ 285.356200] RIP: 0010:__sanitizer_cov_trace_pc+0x28/0x60 [ 285.356203] RSP: 0018:ffff8880aef071b8 EFLAGS: 00000206 [ 285.356207] RAX: ffff8880807aa500 RBX: ffff8880a1110678 RCX: ffff8880a1110640 [ 285.356210] RDX: 0000000000000100 RSI: ffff8880a1110710 RDI: ffff8880a1110688 [ 285.356213] RBP: ffff8880aef07210 R08: 0000000000000000 R09: ffff8880807aaeb8 [ 285.356216] R10: ffff8880807aae98 R11: ffff8880807aa500 R12: dffffc0000000000 [ 285.356218] R13: ffff8880a1110480 R14: 0000000000000001 R15: ffff8880a1110700 [ 285.356221] FS: 0000000000000000(0000) GS:ffff8880aef00000(0000) knlGS:0000000000000000 [ 285.356224] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 285.356227] CR2: 00000000006dbb10 CR3: 000000000766a000 CR4: 00000000001406e0 [ 285.356229] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 285.356232] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 285.356234] Call Trace: [ 285.356235] [ 285.356237] ? hhf_dequeue+0x504/0xa60 [ 285.356239] __qdisc_run+0x2b8/0xe00 [ 285.356241] __dev_queue_xmit+0x1571/0x25e0 [ 285.356243] ? __lock_is_held+0xb6/0x140 [ 285.356245] ? check_preemption_disabled+0x3c/0x250 [ 285.356247] ? netdev_pick_tx+0x300/0x300 [ 285.356249] ? save_trace+0x290/0x290 [ 285.356251] ? br_nf_post_routing+0x27d/0xf00 [ 285.356253] ? br_forward_finish+0x1cc/0x320 [ 285.356255] ? find_held_lock+0x35/0x130 [ 285.356257] ? br_forward_finish+0x1cc/0x320 [ 285.356259] dev_queue_xmit+0x18/0x20 [ 285.356261] ? dev_queue_xmit+0x18/0x20 [ 285.356263] br_dev_queue_push_xmit+0x367/0x530 [ 285.356265] br_forward_finish+0xbc/0x320 [ 285.356267] ? br_dev_queue_push_xmit+0x530/0x530 [ 285.356268] ? br_fdb_add.cold+0x84/0x84 [ 285.356270] __br_forward+0x560/0x9c0 [ 285.356272] ? br_forward_finish+0x320/0x320 [ 285.356274] ? br_dev_queue_push_xmit+0x530/0x530 [ 285.356275] deliver_clone+0x61/0xc0 [ 285.356277] br_flood+0x3c8/0x530 [ 285.356279] br_dev_xmit+0x9a4/0xd40 [ 285.356281] ? check_preemption_disabled+0x3c/0x250 [ 285.356282] ? br_poll_controller+0x10/0x10 [ 285.356284] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 285.356286] dev_hard_start_xmit+0x18c/0x8b0 [ 285.356288] ? assoc_array_gc+0x1130/0x11d0 [ 285.356290] __dev_queue_xmit+0x1d95/0x25e0 [ 285.356292] ? ipv6_chk_mcast_addr+0x295/0x600 [ 285.356293] ? netdev_pick_tx+0x300/0x300 [ 285.356295] ? find_held_lock+0x35/0x130 [ 285.356297] ? ip6_finish_output+0x4f4/0xb50 [ 285.356299] ? mark_held_locks+0xb1/0x100 [ 285.356301] dev_queue_xmit+0x18/0x20 [ 285.356302] ? dev_queue_xmit+0x18/0x20 [ 285.356304] ip6_finish_output2+0x10bd/0x21b0 [ 285.356306] ? find_held_lock+0x35/0x130 [ 285.356308] ? ip6_forward_finish+0x480/0x480 [ 285.356310] ? lock_downgrade+0x6e0/0x6e0 [ 285.356312] ip6_finish_output+0x4f4/0xb50 [ 285.356313] ? ip6_finish_output+0x4f4/0xb50 [ 285.356315] ip6_output+0x20f/0x6d0 [ 285.356317] ? ip6_finish_output+0xb50/0xb50 [ 285.356319] ? _raw_spin_unlock_bh+0x31/0x40 [ 285.356320] ? ip6_fragment+0x32c0/0x32c0 [ 285.356322] ? icmp6_dst_alloc+0x38e/0x580 [ 285.356324] mld_sendpack+0x8d1/0xd60 [ 285.356326] ? nf_hook.constprop.0+0x2c0/0x2c0 [ 285.356327] ? mld_ifc_timer_expire+0x3a4/0x7b0 [ 285.356329] ? trace_hardirqs_on+0xd/0x10 [ 285.356331] ? __local_bh_enable_ip+0x99/0x1a0 [ 285.356333] mld_ifc_timer_expire+0x3b6/0x7b0 [ 285.356335] call_timer_fn+0x161/0x670 [ 285.356336] ? mld_dad_timer_expire+0x180/0x180 [ 285.356338] ? __next_timer_interrupt+0x140/0x140 [ 285.356340] ? trace_hardirqs_on_caller+0x19b/0x590 [ 285.356342] run_timer_softirq+0x5b4/0x1570 [ 285.356344] ? mld_dad_timer_expire+0x180/0x180 [ 285.356345] ? add_timer+0xae0/0xae0 [ 285.356348] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 285.356349] __do_softirq+0x244/0x9a0 [ 285.356351] ? sched_clock+0x2e/0x50 [ 285.356352] irq_exit+0x160/0x1b0 [ 285.356354] smp_apic_timer_interrupt+0x146/0x5e0 [ 285.356356] apic_timer_interrupt+0x96/0xa0 [ 285.356357] [ 285.356360] RIP: 0010:_raw_spin_unlock_irqrestore+0x95/0xe0 [ 285.356362] RSP: 0018:ffff88809b537870 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff10 [ 285.356373] RAX: 1ffffffff0ee2a81 RBX: 0000000000000286 RCX: 0000000000000000 [ 285.356376] RDX: dffffc0000000000 RSI: 0000000000000001 RDI: 0000000000000286 [ 285.356378] RBP: ffff88809b537880 R08: ffff8880807aa500 R09: 0000000000000000 [ 285.356381] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff892d6a68 [ 285.356383] R13: 0000000000000000 R14: ffffffff892d6a68 R15: ffff8880a8966760 [ 285.356385] debug_check_no_obj_freed+0x2aa/0x7b7 [ 285.356387] ? trace_hardirqs_on_caller+0x400/0x590 [ 285.356389] ? free_obj_work+0x6d0/0x6d0 [ 285.356391] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 285.356393] __free_pages_ok+0x23f/0xea0 [ 285.356394] free_compound_page+0x63/0x80 [ 285.356396] free_transhuge_page+0x1fb/0x2b0 [ 285.356398] __put_compound_page+0x7a/0xc0 [ 285.356400] release_pages+0x33b/0xb90 [ 285.356401] ? __activate_page+0xb00/0xb00 [ 285.356403] ? lru_add_drain_cpu+0x14f/0x490 [ 285.356405] free_pages_and_swap_cache+0x178/0x210 [ 285.356407] tlb_flush_mmu_free+0x7e/0x150 [ 285.356409] arch_tlb_finish_mmu+0x9f/0x140 [ 285.356410] tlb_finish_mmu+0x7d/0xd0 [ 285.356412] exit_mmap+0x2a5/0x4e0 [ 285.356413] ? SyS_munmap+0x30/0x30 [ 285.356415] ? kmem_cache_free+0x244/0x2b0 [ 285.356417] ? __khugepaged_exit+0xcf/0x3d0 [ 285.356419] ? mm_update_next_owner+0x450/0x5d0 [ 285.356420] mmput+0x114/0x440 [ 285.356422] do_exit+0x71d/0x2c10 [ 285.356424] ? mm_update_next_owner+0x5d0/0x5d0 [ 285.356425] ? up_read+0x1a/0x40 [ 285.356427] ? __do_page_fault+0x358/0xb80 [ 285.356429] do_group_exit+0x111/0x330 [ 285.356430] SyS_exit_group+0x1d/0x20 [ 285.356432] ? do_group_exit+0x330/0x330 [ 285.356434] do_syscall_64+0x1e8/0x640 [ 285.356436] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 285.356438] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 285.356439] RIP: 0033:0x441358 [ 285.356441] RSP: 002b:00007fffd5720b38 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 285.356445] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000441358 [ 285.356448] RDX: 0000000000000000 RSI: 000000000000003c RDI: 0000000000000000 [ 285.356450] RBP: 00000000004c7ab0 R08: 00000000000000e7 R09: ffffffffffffffd0 [ 285.356453] R10: 00000000004a9e35 R11: 0000000000000246 R12: 0000000000000001 [ 285.356455] R13: 00000000006da5e0 R14: 0000000000000000 R15: 0000000000000000 [ 285.356456] Code: ec ff ff 65 48 8b 04 25 40 ee 01 00 48 85 c0 74 1a 65 8b 15 cb 0a a5 7e 81 e2 00 01 1f 00 75 0b 8b 90 c8 12 00 00 83 fa 01 74 01 55 48 89 e5 48 8b 75 08 48 8b 88 d0 12 00 00 8b 80 cc 12 00 [ 285.356528] rcu_sched kthread starved for 10568 jiffies! g800 c799 f0x0 RCU_GP_WAIT_FQS(3) ->state=0x402 ->cpu=0 [ 286.012981] rcu_sched I29824 9 2 0x80000000 [ 286.018610] Call Trace: [ 286.021198] __schedule+0x7b8/0x1cd0 [ 286.024906] ? pci_mmcfg_check_reserved+0x150/0x150 [ 286.029910] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 286.035097] schedule+0x92/0x1c0 [ 286.038452] schedule_timeout+0x43e/0xe10 [ 286.042595] ? usleep_range+0x130/0x130 [ 286.046559] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 286.051657] ? prepare_to_swait+0xcc/0x100 [ 286.055881] ? call_timer_fn+0x670/0x670 [ 286.059943] rcu_gp_kthread+0xbf4/0x1ec0 [ 286.064016] ? force_qs_rnp+0x4d0/0x4d0 [ 286.067994] kthread+0x319/0x430 [ 286.071349] ? force_qs_rnp+0x4d0/0x4d0 [ 286.075314] ? kthread_create_on_node+0xd0/0xd0 [ 286.079976] ret_from_fork+0x24/0x30