[ 40.763498][ T23] audit: type=1800 audit(1575359742.229:27): pid=7835 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [ 40.799883][ T23] audit: type=1800 audit(1575359742.239:28): pid=7835 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 41.505156][ T23] audit: type=1800 audit(1575359743.059:29): pid=7835 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 41.524343][ T23] audit: type=1800 audit(1575359743.059:30): pid=7835 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.179' (ECDSA) to the list of known hosts. 2019/12/03 07:55:53 fuzzer started 2019/12/03 07:55:54 dialing manager at 10.128.0.26:38907 2019/12/03 07:55:54 syscalls: 2697 2019/12/03 07:55:54 code coverage: enabled 2019/12/03 07:55:54 comparison tracing: enabled 2019/12/03 07:55:54 extra coverage: extra coverage is not supported by the kernel 2019/12/03 07:55:54 setuid sandbox: enabled 2019/12/03 07:55:54 namespace sandbox: enabled 2019/12/03 07:55:54 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/03 07:55:54 fault injection: enabled 2019/12/03 07:55:54 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/03 07:55:54 net packet injection: enabled 2019/12/03 07:55:54 net device setup: enabled 2019/12/03 07:55:54 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/12/03 07:55:54 devlink PCI setup: PCI device 0000:00:10.0 is not available 07:55:55 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x50}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 07:55:55 executing program 1: r0 = epoll_create1(0x0) r1 = socket$inet(0x2, 0x803, 0x85) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000003c0)=0x7fe, 0x4) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000514ff0), 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000180)) syzkaller login: [ 54.411697][ T8002] IPVS: ftp: loaded support on port[0] = 21 07:55:56 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000200)=@filter={'filter\x00', 0xe, 0x4, 0x420, [0x0, 0x200002c0, 0x200004d0, 0x20000610], 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"]}, 0x498) [ 54.559416][ T8002] chnl_net:caif_netlink_parms(): no params data found [ 54.601762][ T8005] IPVS: ftp: loaded support on port[0] = 21 [ 54.642151][ T8002] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.651973][ T8002] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.664604][ T8002] device bridge_slave_0 entered promiscuous mode [ 54.686221][ T8002] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.694882][ T8002] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.714137][ T8002] device bridge_slave_1 entered promiscuous mode [ 54.766171][ T8002] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.819836][ T8002] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.837792][ T8007] IPVS: ftp: loaded support on port[0] = 21 [ 54.852058][ T8005] chnl_net:caif_netlink_parms(): no params data found 07:55:56 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') readv(r0, &(0x7f0000000500)=[{&(0x7f0000000940)=""/165, 0xa5}], 0x1) [ 54.898376][ T8002] team0: Port device team_slave_0 added [ 54.922239][ T8002] team0: Port device team_slave_1 added [ 54.968411][ T8005] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.976390][ T8005] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.984919][ T8005] device bridge_slave_0 entered promiscuous mode [ 55.036636][ T8002] device hsr_slave_0 entered promiscuous mode 07:55:56 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000000)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0xfffffffffffffffd, @remote}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000001040)=ANY=[@ANYBLOB="08000000000000000a00000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f1000000000000000000000000000000000000000000000000080000000a004e2100000001ff02000000000000000000000000000109000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000ffffac1e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000d2db7064ff394065aee1714ee2729bf700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000fe88000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000034edc3f24a78f1db8dafbfeffa39cbee9288cabc87e5cce3e6078a988c9d23c5ad339651b0d0477eaf2b592a11782d6c0e7adb3d329f9903cc95b4bdf0360720859174a49ca02a3ec54bd3031d8d518edb74"], 0x490) getsockopt$inet6_buf(r2, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xfffffffffffffff9) [ 55.153753][ T8002] device hsr_slave_1 entered promiscuous mode [ 55.231033][ T8005] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.243038][ T8005] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.250895][ T8005] device bridge_slave_1 entered promiscuous mode [ 55.318842][ T8011] IPVS: ftp: loaded support on port[0] = 21 [ 55.325457][ T8002] netdevsim netdevsim0 netdevsim0: renamed from eth0 07:55:56 executing program 5: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000080)={0x1, [0x0]}) unshare(0x8000400) ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f0000001080)={0x0, &(0x7f0000000080)}) [ 55.360382][ T8013] IPVS: ftp: loaded support on port[0] = 21 [ 55.376213][ T8007] chnl_net:caif_netlink_parms(): no params data found [ 55.394869][ T8002] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 55.466015][ T8005] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.480306][ T8005] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.506693][ T8002] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 55.558791][ T8002] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 55.657361][ T8016] IPVS: ftp: loaded support on port[0] = 21 [ 55.670747][ T8005] team0: Port device team_slave_0 added [ 55.688724][ T8007] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.696216][ T8007] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.704389][ T8007] device bridge_slave_0 entered promiscuous mode [ 55.716348][ T8005] team0: Port device team_slave_1 added [ 55.731577][ T8007] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.739942][ T8007] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.747622][ T8007] device bridge_slave_1 entered promiscuous mode [ 55.775347][ T8007] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.802586][ T8007] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.855384][ T8005] device hsr_slave_0 entered promiscuous mode [ 55.893393][ T8005] device hsr_slave_1 entered promiscuous mode [ 55.963125][ T8005] debugfs: Directory 'hsr0' with parent '/' already present! [ 56.016766][ T8013] chnl_net:caif_netlink_parms(): no params data found [ 56.092287][ T8007] team0: Port device team_slave_0 added [ 56.104064][ T8007] team0: Port device team_slave_1 added [ 56.137013][ T8011] chnl_net:caif_netlink_parms(): no params data found [ 56.165235][ T8005] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 56.218625][ T8005] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 56.281092][ T8005] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 56.342272][ T8013] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.349543][ T8013] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.357591][ T8013] device bridge_slave_0 entered promiscuous mode [ 56.365837][ T8013] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.372889][ T8013] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.381188][ T8013] device bridge_slave_1 entered promiscuous mode [ 56.425380][ T8007] device hsr_slave_0 entered promiscuous mode [ 56.463358][ T8007] device hsr_slave_1 entered promiscuous mode [ 56.503136][ T8007] debugfs: Directory 'hsr0' with parent '/' already present! [ 56.512484][ T8005] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 56.566224][ T8011] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.574138][ T8011] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.581797][ T8011] device bridge_slave_0 entered promiscuous mode [ 56.634377][ T8002] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.641519][ T8011] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.648861][ T8011] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.657616][ T8011] device bridge_slave_1 entered promiscuous mode [ 56.681361][ T8016] chnl_net:caif_netlink_parms(): no params data found [ 56.712229][ T8002] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.720917][ T8013] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.738934][ T8013] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.754733][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.762757][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.772288][ T8011] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.801042][ T8011] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.810299][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.820256][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.828818][ T3698] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.836038][ T3698] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.843972][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.852380][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.861282][ T3698] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.868491][ T3698] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.876302][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.885068][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.901051][ T8016] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.908234][ T8016] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.916873][ T8016] device bridge_slave_0 entered promiscuous mode [ 56.937753][ T8013] team0: Port device team_slave_0 added [ 56.956915][ T8016] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.964253][ T8016] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.971992][ T8016] device bridge_slave_1 entered promiscuous mode [ 56.986001][ T8013] team0: Port device team_slave_1 added [ 56.993874][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.004391][ T8011] team0: Port device team_slave_0 added [ 57.010404][ T8007] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 57.044583][ T8007] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 57.122138][ T8016] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.141039][ T8011] team0: Port device team_slave_1 added [ 57.153795][ T8007] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 57.184548][ T8007] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 57.265887][ T2989] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.274648][ T2989] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.282878][ T2989] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.291842][ T8016] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.335793][ T8013] device hsr_slave_0 entered promiscuous mode [ 57.393326][ T8013] device hsr_slave_1 entered promiscuous mode [ 57.443344][ T8013] debugfs: Directory 'hsr0' with parent '/' already present! [ 57.525722][ T8011] device hsr_slave_0 entered promiscuous mode [ 57.563668][ T8011] device hsr_slave_1 entered promiscuous mode [ 57.603180][ T8011] debugfs: Directory 'hsr0' with parent '/' already present! [ 57.632681][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.641387][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.654878][ T8016] team0: Port device team_slave_0 added [ 57.666853][ T8005] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.676531][ T8010] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.685776][ T8010] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.706087][ T8016] team0: Port device team_slave_1 added [ 57.725421][ T8005] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.733636][ T8013] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 57.765843][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.775817][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.784101][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.791805][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.800411][ T8002] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.821391][ T8013] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 57.877671][ T2989] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.886365][ T2989] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.895115][ T2989] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.902154][ T2989] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.910320][ T2989] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.918629][ T8013] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 57.974261][ T8011] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 58.019695][ T8011] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 58.083446][ T8010] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.092258][ T8010] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.104024][ T8010] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.111201][ T8010] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.119588][ T8010] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.128518][ T8013] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 58.265413][ T8016] device hsr_slave_0 entered promiscuous mode [ 58.313339][ T8016] device hsr_slave_1 entered promiscuous mode [ 58.353116][ T8016] debugfs: Directory 'hsr0' with parent '/' already present! [ 58.360753][ T8011] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 58.418425][ T8011] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 58.487443][ T2989] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.496022][ T2989] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.504663][ T2989] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.512137][ T2989] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.520840][ T2989] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.529199][ T2989] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.538715][ T2989] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.547340][ T2989] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.555609][ T2989] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.565049][ T2989] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.575253][ T8002] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.627658][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.639209][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.665260][ T8007] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.679536][ T8005] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.694187][ T8016] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 58.734630][ T8016] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 58.781290][ T8007] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.803637][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.811324][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.828676][ T8016] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 163.842986][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 163.849774][ C0] rcu: 0-....: (10499 ticks this GP) idle=c92/1/0x4000000000000002 softirq=10399/10399 fqs=2770 [ 163.860526][ C0] (t=10500 jiffies g=5885 q=176) [ 163.865554][ C0] rcu: rcu_preempt kthread starved for 4947 jiffies! g5885 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 163.876557][ C0] rcu: RCU grace-period kthread stack dump: [ 163.882488][ C0] rcu_preempt R running task 29032 10 2 0x80004000 [ 163.890400][ C0] Call Trace: [ 163.893693][ C0] __schedule+0x9a0/0xcc0 [ 163.898020][ C0] schedule+0x181/0x210 [ 163.902181][ C0] schedule_timeout+0x14f/0x240 [ 163.907035][ C0] ? run_local_timers+0x120/0x120 [ 163.912051][ C0] rcu_gp_kthread+0xed8/0x1770 [ 163.916813][ C0] kthread+0x332/0x350 [ 163.920881][ C0] ? rcu_report_qs_rsp+0x140/0x140 [ 163.925997][ C0] ? kthread_blkcg+0xe0/0xe0 [ 163.930589][ C0] ret_from_fork+0x24/0x30 [ 163.935020][ C0] NMI backtrace for cpu 0 [ 163.939354][ C0] CPU: 0 PID: 8002 Comm: syz-executor.0 Not tainted 5.4.0-syzkaller #0 [ 163.947592][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 163.957632][ C0] Call Trace: [ 163.960918][ C0] [ 163.963771][ C0] dump_stack+0x1fb/0x318 [ 163.968116][ C0] nmi_cpu_backtrace+0xaf/0x1a0 [ 163.972966][ C0] ? nmi_trigger_cpumask_backtrace+0x16d/0x290 [ 163.979121][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 163.985186][ C0] nmi_trigger_cpumask_backtrace+0x174/0x290 [ 163.991152][ C0] arch_trigger_cpumask_backtrace+0x10/0x20 [ 163.997043][ C0] rcu_dump_cpu_stacks+0x15a/0x220 [ 164.002164][ C0] rcu_sched_clock_irq+0xe25/0x1ad0 [ 164.007348][ C0] ? trace_hardirqs_off+0x74/0x80 [ 164.012376][ C0] update_process_times+0x12d/0x180 [ 164.017579][ C0] tick_sched_timer+0x263/0x420 [ 164.022428][ C0] ? tick_setup_sched_timer+0x3d0/0x3d0 [ 164.027993][ C0] __hrtimer_run_queues+0x403/0x840 [ 164.033206][ C0] hrtimer_interrupt+0x38c/0xda0 [ 164.038161][ C0] ? debug_smp_processor_id+0x9/0x20 [ 164.043450][ C0] smp_apic_timer_interrupt+0x109/0x280 [ 164.048998][ C0] apic_timer_interrupt+0xf/0x20 [ 164.053931][ C0] [ 164.056877][ C0] RIP: 0010:free_thread_stack+0x18b/0x590 [ 164.062600][ C0] Code: ff ff e8 28 04 00 00 43 80 3c 2e 00 74 08 4c 89 e7 e8 09 a4 69 00 49 8b 1c 24 48 83 c3 08 48 89 d8 48 c1 e8 03 42 80 3c 28 00 <74> 08 48 89 df e8 eb a3 69 00 48 8b 1b e9 82 ff ff ff e8 de 2c 2e [ 164.082203][ C0] RSP: 0018:ffffc900021d7768 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 164.090600][ C0] RAX: 1ffff11013e4e931 RBX: ffff88809f274988 RCX: ffff888093934240 [ 164.098583][ C0] RDX: 0000000000000000 RSI: 00000000fffffffc RDI: ffffea00027af1c0 [ 164.106542][ C0] RBP: ffffc900021d77a0 R08: 000000000003a768 R09: fffffbfff120248a [ 164.114497][ C0] R10: fffffbfff120248a R11: 0000000000000000 R12: ffff88809f274a20 [ 164.122469][ C0] R13: dffffc0000000000 R14: 1ffff11013e4e944 R15: ffff888093fbb7e8 [ 164.130464][ C0] ? free_thread_stack+0x168/0x590 [ 164.135560][ C0] put_task_stack+0xa3/0x130 [ 164.140154][ C0] finish_task_switch+0x3f1/0x550 [ 164.145184][ C0] __schedule+0x9a8/0xcc0 [ 164.149508][ C0] ? ___preempt_schedule+0x16/0x18 [ 164.154607][ C0] preempt_schedule+0xdb/0x120 [ 164.159362][ C0] ___preempt_schedule+0x16/0x18 [ 164.164308][ C0] _raw_spin_unlock+0x3a/0x40 [ 164.168974][ C0] copy_page_range+0x2487/0x29a0 [ 164.173945][ C0] ? __vma_link_rb+0x839/0x860 [ 164.178717][ C0] dup_mmap+0xa01/0xe00 [ 164.182885][ C0] dup_mm+0x9e/0x340 [ 164.186790][ C0] copy_process+0x1e49/0x5510 [ 164.191497][ C0] _do_fork+0x13e/0x660 [ 164.195662][ C0] ? check_preemption_disabled+0xb4/0x260 [ 164.201379][ C0] ? debug_smp_processor_id+0x9/0x20 [ 164.206654][ C0] ? debug_smp_processor_id+0x1c/0x20 [ 164.212036][ C0] __x64_sys_clone+0x20b/0x250 [ 164.216813][ C0] do_syscall_64+0xf7/0x1c0 [ 164.221305][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 164.227199][ C0] RIP: 0033:0x458c4a [ 164.231098][ C0] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 164.250703][ C0] RSP: 002b:00007ffd153d3d00 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 164.259116][ C0] RAX: ffffffffffffffda RBX: 00007ffd153d3d00 RCX: 0000000000458c4a [ 164.267091][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 164.275062][ C0] RBP: 00007ffd153d3d40 R08: 0000000000000001 R09: 00000000017b0940 [ 164.283034][ C0] R10: 00000000017b0c10 R11: 0000000000000246 R12: 0000000000000001 [ 164.291006][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffd153d3d90