[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.174' (ECDSA) to the list of known hosts. 2019/12/03 14:10:13 fuzzer started 2019/12/03 14:10:15 dialing manager at 10.128.0.26:45711 2019/12/03 14:10:15 syscalls: 2689 2019/12/03 14:10:15 code coverage: enabled 2019/12/03 14:10:15 comparison tracing: enabled 2019/12/03 14:10:15 extra coverage: extra coverage is not supported by the kernel 2019/12/03 14:10:15 setuid sandbox: enabled 2019/12/03 14:10:15 namespace sandbox: enabled 2019/12/03 14:10:15 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/03 14:10:15 fault injection: enabled 2019/12/03 14:10:15 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/03 14:10:15 net packet injection: enabled 2019/12/03 14:10:15 net device setup: enabled 2019/12/03 14:10:15 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/12/03 14:10:15 devlink PCI setup: PCI device 0000:00:10.0 is not available 14:10:16 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x400000000803, 0xff) close(r2) 14:10:16 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f000000d540)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0xa, [@datasec={0x8, 0x1, 0x0, 0xf, 0x3, [{0x5}], "bf1d19"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], '1'}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x4a}, 0x20) syzkaller login: [ 58.019139][ T8197] IPVS: ftp: loaded support on port[0] = 21 [ 58.138340][ T8199] IPVS: ftp: loaded support on port[0] = 21 14:10:17 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup2(r1, r0) [ 58.226297][ T8197] chnl_net:caif_netlink_parms(): no params data found [ 58.276782][ T8197] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.285745][ T8197] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.295373][ T8197] device bridge_slave_0 entered promiscuous mode [ 58.305542][ T8197] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.313928][ T8197] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.321812][ T8197] device bridge_slave_1 entered promiscuous mode [ 58.347079][ T8197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.360953][ T8197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.398807][ T8197] team0: Port device team_slave_0 added [ 58.424896][ T8197] team0: Port device team_slave_1 added [ 58.442884][ T8199] chnl_net:caif_netlink_parms(): no params data found 14:10:17 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) [ 58.495245][ T8197] device hsr_slave_0 entered promiscuous mode [ 58.553730][ T8197] device hsr_slave_1 entered promiscuous mode [ 58.655741][ T8204] IPVS: ftp: loaded support on port[0] = 21 [ 58.679384][ T8197] netdevsim netdevsim0 netdevsim0: renamed from eth0 14:10:17 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffe3d, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x1a8, 0x10, 0x233, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@sec_ctx={0x70, 0x8, {0x1e2, 0x8, 0x0, 0x0, 0x62, "d9e1062dcf7e3d6e21675fba3868d77ff9625a0c773e5bcbfe0463d8454423bb6f0df9acc5357a2c05e02727912e4de2a0fc825323d6c7a22fb97b97a313a56f4787c1aa5f20f21169d894857d55c54dcee92baee9ff09404c7d5c1586427bd5d5ba"}}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x1a8}}, 0x0) [ 58.735862][ T8197] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 58.825084][ T8199] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.832189][ T8199] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.843283][ T8206] IPVS: ftp: loaded support on port[0] = 21 [ 58.855850][ T8199] device bridge_slave_0 entered promiscuous mode [ 58.864568][ T8197] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 58.910452][ T8199] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.934413][ T8199] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.942408][ T8199] device bridge_slave_1 entered promiscuous mode 14:10:17 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x9, 0x0, 0x9, 0x0, 0x2000000, 0x517}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r3) r4 = msgget(0x1, 0x0) msgctl$IPC_SET(r4, 0x1, 0x0) msgctl$IPC_RMID(r4, 0x0) io_setup(0x1000, &(0x7f0000000140)=0x0) io_submit(r5, 0x20000000000000a3, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, 0x0}]) ppoll(&(0x7f00000000c0)=[{r3, 0x4600}], 0x1, &(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f0000000180)={0x3f}, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockopt$inet6_buf(r8, 0x29, 0xdc, &(0x7f00000001c0)=""/231, &(0x7f00000002c0)=0xe7) r9 = openat$zero(0xffffffffffffff9c, &(0x7f0000000340)='/dev/zero\x00', 0x40900, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e22, 0x5, @loopback}}}, &(0x7f0000000440)=0x84) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r9, 0x84, 0x19, &(0x7f0000000300)={r10, 0x8}, 0xffffffffffffff41) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="0000003d000000000000fb6008000000010000000c23430f71"], 0x14}, 0x1, 0x68}, 0x405c) r11 = socket(0x10, 0x800000000080002, 0x10) sendmmsg$alg(r11, &(0x7f0000000140), 0x4924924924925b9, 0x4) [ 58.964179][ T8197] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 59.022267][ T8208] IPVS: ftp: loaded support on port[0] = 21 [ 59.070940][ T8199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.084402][ T8199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.118585][ T8197] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.125887][ T8197] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.133689][ T8197] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.140743][ T8197] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.176037][ T8199] team0: Port device team_slave_0 added [ 59.193325][ T8211] IPVS: ftp: loaded support on port[0] = 21 [ 59.206861][ T8199] team0: Port device team_slave_1 added [ 59.224153][ T8202] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.232335][ T8202] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.301320][ T8197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.357309][ T8206] chnl_net:caif_netlink_parms(): no params data found [ 59.366705][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.375388][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.386986][ T8197] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.444256][ T8199] device hsr_slave_0 entered promiscuous mode [ 59.482867][ T8199] device hsr_slave_1 entered promiscuous mode [ 59.543040][ T8199] debugfs: Directory 'hsr0' with parent '/' already present! [ 59.578794][ T8204] chnl_net:caif_netlink_parms(): no params data found [ 59.618384][ T8208] chnl_net:caif_netlink_parms(): no params data found [ 59.638284][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.647837][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.656648][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.663751][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.678606][ T8206] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.685899][ T8206] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.693923][ T8206] device bridge_slave_0 entered promiscuous mode [ 59.711391][ T8208] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.721294][ T8208] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.729366][ T8208] device bridge_slave_0 entered promiscuous mode [ 59.751739][ T8204] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.759503][ T8204] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.768708][ T8204] device bridge_slave_0 entered promiscuous mode [ 59.776240][ T8206] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.784355][ T8206] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.791977][ T8206] device bridge_slave_1 entered promiscuous mode [ 59.805295][ T2722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.816973][ T2722] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.825754][ T2722] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.832852][ T2722] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.840536][ T2722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.854211][ T8208] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.861297][ T8208] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.870567][ T8208] device bridge_slave_1 entered promiscuous mode [ 59.878852][ T8199] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 59.954634][ T8204] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.961889][ T8204] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.969778][ T8204] device bridge_slave_1 entered promiscuous mode [ 59.990977][ T8204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.007118][ T8204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.027043][ T8199] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 60.066101][ T8206] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.078082][ T8206] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.113450][ T8208] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.123835][ T8199] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 60.167126][ T8202] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.191443][ T8206] team0: Port device team_slave_0 added [ 60.199143][ T8208] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.219380][ T8199] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 60.298832][ T8206] team0: Port device team_slave_1 added [ 60.306119][ T8204] team0: Port device team_slave_0 added [ 60.326548][ T8202] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.335657][ T8202] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.344507][ T8202] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.354716][ T8204] team0: Port device team_slave_1 added [ 60.364424][ T8211] chnl_net:caif_netlink_parms(): no params data found [ 60.390817][ T8208] team0: Port device team_slave_0 added [ 60.398313][ T8208] team0: Port device team_slave_1 added [ 60.425496][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.434813][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.443247][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.451507][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.495276][ T8206] device hsr_slave_0 entered promiscuous mode [ 60.533003][ T8206] device hsr_slave_1 entered promiscuous mode [ 60.562998][ T8206] debugfs: Directory 'hsr0' with parent '/' already present! [ 60.570634][ T8211] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.577915][ T8211] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.585760][ T8211] device bridge_slave_0 entered promiscuous mode [ 60.597380][ T8197] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.609161][ T8197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.645897][ T8208] device hsr_slave_0 entered promiscuous mode [ 60.702973][ T8208] device hsr_slave_1 entered promiscuous mode [ 60.752700][ T8208] debugfs: Directory 'hsr0' with parent '/' already present! [ 60.761660][ T8215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.770540][ T8215] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.779419][ T8211] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.789400][ T8211] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.797141][ T8211] device bridge_slave_1 entered promiscuous mode [ 60.845880][ T8204] device hsr_slave_0 entered promiscuous mode [ 60.892980][ T8204] device hsr_slave_1 entered promiscuous mode [ 60.962761][ T8204] debugfs: Directory 'hsr0' with parent '/' already present! [ 61.000318][ T8211] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.033743][ T8211] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.066964][ T8197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.081247][ T8208] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 61.108429][ T8208] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 61.166175][ T8208] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 61.227133][ T8202] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.234831][ T8202] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.246131][ T8204] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 61.284805][ T8204] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 61.339208][ T8204] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 61.383971][ T8206] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 61.437934][ T8206] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 61.495030][ T8208] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 61.567890][ T8211] team0: Port device team_slave_0 added [ 61.584646][ T8204] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 166.592508][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 166.599298][ C0] rcu: 0-...!: (10499 ticks this GP) idle=b5a/1/0x4000000000000002 softirq=10316/10316 fqs=39 [ 166.609867][ C0] (t=10500 jiffies g=6133 q=152) [ 166.614881][ C0] rcu: rcu_preempt kthread starved for 10417 jiffies! g6133 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 166.625963][ C0] rcu: RCU grace-period kthread stack dump: [ 166.631839][ C0] rcu_preempt R running task 29032 10 2 0x80004000 [ 166.639744][ C0] Call Trace: [ 166.643031][ C0] __schedule+0x9a0/0xcc0 [ 166.647359][ C0] schedule+0x181/0x210 [ 166.651503][ C0] schedule_timeout+0x14f/0x240 [ 166.656346][ C0] ? run_local_timers+0x120/0x120 [ 166.661362][ C0] rcu_gp_kthread+0xed8/0x1770 [ 166.666122][ C0] kthread+0x332/0x350 [ 166.670176][ C0] ? rcu_report_qs_rsp+0x140/0x140 [ 166.675275][ C0] ? kthread_blkcg+0xe0/0xe0 [ 166.679855][ C0] ret_from_fork+0x24/0x30 [ 166.684276][ C0] NMI backtrace for cpu 0 [ 166.688612][ C0] CPU: 0 PID: 7 Comm: kworker/u4:0 Not tainted 5.4.0-syzkaller #0 [ 166.696600][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 166.706674][ C0] Workqueue: events_unbound fsnotify_mark_destroy_workfn [ 166.713678][ C0] Call Trace: [ 166.716946][ C0] [ 166.719788][ C0] dump_stack+0x1fb/0x318 [ 166.724108][ C0] nmi_cpu_backtrace+0xaf/0x1a0 [ 166.728941][ C0] ? nmi_trigger_cpumask_backtrace+0x16d/0x290 [ 166.735093][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 166.741147][ C0] nmi_trigger_cpumask_backtrace+0x174/0x290 [ 166.747115][ C0] arch_trigger_cpumask_backtrace+0x10/0x20 [ 166.752991][ C0] rcu_dump_cpu_stacks+0x15a/0x220 [ 166.758099][ C0] rcu_sched_clock_irq+0xe25/0x1ad0 [ 166.763289][ C0] ? trace_hardirqs_off+0x74/0x80 [ 166.768299][ C0] update_process_times+0x12d/0x180 [ 166.773507][ C0] tick_sched_timer+0x263/0x420 [ 166.778349][ C0] ? tick_setup_sched_timer+0x3d0/0x3d0 [ 166.783884][ C0] __hrtimer_run_queues+0x403/0x840 [ 166.789082][ C0] hrtimer_interrupt+0x38c/0xda0 [ 166.794024][ C0] ? debug_smp_processor_id+0x9/0x20 [ 166.799299][ C0] smp_apic_timer_interrupt+0x109/0x280 [ 166.804863][ C0] apic_timer_interrupt+0xf/0x20 [ 166.809794][ C0] [ 166.812726][ C0] RIP: 0010:free_thread_stack+0x16d/0x590 [ 166.818456][ C0] Code: c3 08 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 25 a4 69 00 48 8b 3b be fc ff ff ff e8 28 04 00 00 43 80 3c 2e 00 <74> 08 4c 89 e7 e8 09 a4 69 00 49 8b 1c 24 48 83 c3 08 48 89 d8 48 [ 166.838052][ C0] RSP: 0018:ffffc90000cdf8d8 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 166.846447][ C0] RAX: ffffffff81487433 RBX: ffff88806c2ded88 RCX: ffff8880a9da01c0 [ 166.854409][ C0] RDX: 0000000000000000 RSI: 00000000fffffffc RDI: ffffea0001b0b800 [ 166.862906][ C0] RBP: ffffc90000cdf910 R08: 000000000003a768 R09: ffffed10135d26cf [ 166.870874][ C0] R10: ffffed10135d26cf R11: 0000000000000000 R12: ffff88806c2dee20 [ 166.878851][ C0] R13: dffffc0000000000 R14: 1ffff1100d85bdc4 R15: ffff88809ae93668 [ 166.886823][ C0] ? mod_memcg_page_state+0x123/0x190 [ 166.892186][ C0] ? free_thread_stack+0x168/0x590 [ 166.897295][ C0] put_task_stack+0xa3/0x130 [ 166.901873][ C0] finish_task_switch+0x3f1/0x550 [ 166.906889][ C0] __schedule+0x9a8/0xcc0 [ 166.911213][ C0] ? ___preempt_schedule+0x16/0x18 [ 166.916309][ C0] preempt_schedule+0xdb/0x120 [ 166.921061][ C0] ___preempt_schedule+0x16/0x18 [ 166.926009][ C0] _raw_spin_unlock_irqrestore+0xcc/0xe0 [ 166.931639][ C0] __call_srcu+0x7ab/0xb00 [ 166.936055][ C0] __synchronize_srcu+0x1cf/0x260 [ 166.941067][ C0] ? rcu_read_lock_any_held+0x1a0/0x1a0 [ 166.946612][ C0] synchronize_srcu+0x2cb/0x2f0 [ 166.951452][ C0] fsnotify_mark_destroy_workfn+0xe5/0x2a0 [ 166.957242][ C0] ? rcu_read_lock_sched_held+0x10b/0x170 [ 166.962962][ C0] process_one_work+0x7ef/0x10d0 [ 166.967901][ C0] worker_thread+0xc01/0x1630 [ 166.972589][ C0] kthread+0x332/0x350 [ 166.976657][ C0] ? rcu_lock_release+0x30/0x30 [ 166.981493][ C0] ? kthread_blkcg+0xe0/0xe0 [ 166.986071][ C0] ret_from_fork+0x24/0x30