[ 42.789615][ T25] audit: type=1800 audit(1575375519.861:26): pid=7997 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 42.828734][ T25] audit: type=1800 audit(1575375519.861:27): pid=7997 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [ 42.849450][ T25] audit: type=1800 audit(1575375519.861:28): pid=7997 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 43.648790][ T25] audit: type=1800 audit(1575375520.751:29): pid=7997 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.253' (ECDSA) to the list of known hosts. 2019/12/03 12:18:48 fuzzer started 2019/12/03 12:18:50 dialing manager at 10.128.0.26:45711 2019/12/03 12:18:50 syscalls: 2689 2019/12/03 12:18:50 code coverage: enabled 2019/12/03 12:18:50 comparison tracing: enabled 2019/12/03 12:18:50 extra coverage: extra coverage is not supported by the kernel 2019/12/03 12:18:50 setuid sandbox: enabled 2019/12/03 12:18:50 namespace sandbox: enabled 2019/12/03 12:18:50 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/03 12:18:50 fault injection: enabled 2019/12/03 12:18:50 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/03 12:18:50 net packet injection: enabled 2019/12/03 12:18:50 net device setup: enabled 2019/12/03 12:18:50 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/12/03 12:18:50 devlink PCI setup: PCI device 0000:00:10.0 is not available 12:18:51 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r0 = socket$kcm(0x10, 0x2, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x2fe, &(0x7f0000000000)=[{&(0x7f0000000140)="2e00000031000508d25a80648c6394fb0124fc0012000b400c000200053582c137153e37090001802f64170400bd", 0x2e}], 0x1}, 0x0) 12:18:51 executing program 1: r0 = memfd_create(&(0x7f0000000200)='eth0\x00', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xcb, 0x0, &(0x7f0000000000)) syzkaller login: [ 54.206266][ T8160] IPVS: ftp: loaded support on port[0] = 21 [ 54.374075][ T8160] chnl_net:caif_netlink_parms(): no params data found [ 54.384632][ T8163] IPVS: ftp: loaded support on port[0] = 21 [ 54.457558][ T8160] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.478669][ T8160] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.487263][ T8160] device bridge_slave_0 entered promiscuous mode [ 54.495879][ T8160] bridge0: port 2(bridge_slave_1) entered blocking state 12:18:51 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x1, 0x2) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 54.504308][ T8160] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.512504][ T8160] device bridge_slave_1 entered promiscuous mode [ 54.594317][ T8160] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.643558][ T8160] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.689779][ T8163] chnl_net:caif_netlink_parms(): no params data found [ 54.707155][ T8166] IPVS: ftp: loaded support on port[0] = 21 [ 54.716866][ T8160] team0: Port device team_slave_0 added [ 54.733519][ T8160] team0: Port device team_slave_1 added 12:18:51 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x6b) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0815b5055e0bcfe87b3071") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x24, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x10, 0x1, [@TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'eth', 0x3a, 'lo\x00'}}]}]}, 0x24}}, 0x0) [ 54.852129][ T8160] device hsr_slave_0 entered promiscuous mode [ 54.888877][ T8160] device hsr_slave_1 entered promiscuous mode [ 54.933413][ T8163] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.947216][ T8163] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.955469][ T8163] device bridge_slave_0 entered promiscuous mode [ 54.977405][ T8168] IPVS: ftp: loaded support on port[0] = 21 [ 54.979762][ T8163] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.008650][ T8163] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.016578][ T8163] device bridge_slave_1 entered promiscuous mode 12:18:52 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0x2) io_setup(0x5, &(0x7f0000000000)=0x0) bind$rxrpc(r1, &(0x7f0000000040)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x5, @dev}}, 0x24) io_submit(r2, 0x200000000000002b, &(0x7f0000000600)=[&(0x7f0000000200)={0xfffffffffffffdef, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) [ 55.035412][ T8163] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.092213][ T8163] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.164987][ T8163] team0: Port device team_slave_0 added [ 55.192974][ T8166] chnl_net:caif_netlink_parms(): no params data found [ 55.230923][ T8163] team0: Port device team_slave_1 added [ 55.247064][ T8160] netdevsim netdevsim0 netdevsim0: renamed from eth0 12:18:52 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="d6ac7d3f595131008907"], 0xa) close(r4) socket(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000002400e577a885ddb05cc582f24186cf0d", @ANYRES32=r6, @ANYBLOB="00000700ffffffff0000000008000100687462001c000200100002"], 0x3}}, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r2, 0x0, r4, 0x0, 0x80000001, 0x0) [ 55.326803][ T8166] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.336843][ T8166] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.346352][ T8166] device bridge_slave_0 entered promiscuous mode [ 55.356013][ T8160] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 55.430881][ T8160] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 55.475556][ T8166] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.482824][ T8166] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.491006][ T8166] device bridge_slave_1 entered promiscuous mode [ 55.507199][ T8160] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 55.602343][ T8166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.618851][ T8166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.633173][ T8171] IPVS: ftp: loaded support on port[0] = 21 [ 55.660335][ T8163] device hsr_slave_0 entered promiscuous mode [ 55.749072][ T8163] device hsr_slave_1 entered promiscuous mode [ 55.788768][ T8163] debugfs: Directory 'hsr0' with parent '/' already present! [ 55.798853][ T8168] chnl_net:caif_netlink_parms(): no params data found [ 55.822206][ T8174] IPVS: ftp: loaded support on port[0] = 21 [ 55.879610][ T8166] team0: Port device team_slave_0 added [ 55.888179][ T8166] team0: Port device team_slave_1 added [ 55.894414][ T8168] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.901767][ T8168] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.909696][ T8168] device bridge_slave_0 entered promiscuous mode [ 55.948803][ T8168] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.956013][ T8168] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.963769][ T8168] device bridge_slave_1 entered promiscuous mode [ 55.988104][ T8163] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 56.051417][ T8168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.065654][ T8163] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 56.114124][ T8163] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 56.162288][ T8163] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 56.233960][ T8168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.280655][ T8166] device hsr_slave_0 entered promiscuous mode [ 56.319486][ T8166] device hsr_slave_1 entered promiscuous mode [ 56.358694][ T8166] debugfs: Directory 'hsr0' with parent '/' already present! [ 56.402801][ T8168] team0: Port device team_slave_0 added [ 56.421696][ T8171] chnl_net:caif_netlink_parms(): no params data found [ 56.455616][ T8168] team0: Port device team_slave_1 added [ 56.484287][ T8160] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.561921][ T8168] device hsr_slave_0 entered promiscuous mode [ 56.608991][ T8168] device hsr_slave_1 entered promiscuous mode [ 56.678652][ T8168] debugfs: Directory 'hsr0' with parent '/' already present! [ 56.714944][ T8174] chnl_net:caif_netlink_parms(): no params data found [ 56.732947][ T3004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.741234][ T3004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.758763][ T8171] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.765850][ T8171] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.774112][ T8171] device bridge_slave_0 entered promiscuous mode [ 56.794798][ T8160] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.805971][ T8171] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.817717][ T8171] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.826672][ T8171] device bridge_slave_1 entered promiscuous mode [ 56.849540][ T8166] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 56.892145][ T8166] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 56.963169][ T8166] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 57.025124][ T8166] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 57.081321][ T8168] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 57.101854][ T8171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.112307][ T3752] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.123758][ T3752] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.132902][ T3752] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.140233][ T3752] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.148291][ T3752] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.157936][ T3752] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.166448][ T3752] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.173519][ T3752] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.181771][ T8174] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.190430][ T8174] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.198177][ T8174] device bridge_slave_0 entered promiscuous mode [ 57.214205][ T8168] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 57.250972][ T8168] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 57.291553][ T8171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.306332][ T3752] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.314605][ T3752] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.323675][ T3752] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.346607][ T8174] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.353992][ T8174] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.362308][ T8174] device bridge_slave_1 entered promiscuous mode [ 57.381835][ T8174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.391756][ T8168] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 57.439620][ T8163] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.462039][ T8174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.483098][ T8171] team0: Port device team_slave_0 added [ 57.495604][ T8163] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.504911][ T8171] team0: Port device team_slave_1 added [ 57.515660][ T3004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.524560][ T3004] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.533479][ T3004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.542227][ T3004] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.551355][ T3004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.559802][ T3004] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.568015][ T3004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.576347][ T3004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.584452][ T3004] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.603946][ T8160] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.618755][ T8160] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.630366][ T8174] team0: Port device team_slave_0 added [ 57.647389][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.655994][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.665704][ T8174] team0: Port device team_slave_1 added [ 57.740957][ T8174] device hsr_slave_0 entered promiscuous mode [ 57.789717][ T8174] device hsr_slave_1 entered promiscuous mode [ 57.838847][ T8174] debugfs: Directory 'hsr0' with parent '/' already present! [ 57.866175][ T2727] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.875518][ T2727] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.884224][ T2727] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.891459][ T2727] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.960582][ T8171] device hsr_slave_0 entered promiscuous mode [ 57.999386][ T8171] device hsr_slave_1 entered promiscuous mode [ 58.038726][ T8171] debugfs: Directory 'hsr0' with parent '/' already present! [ 58.062483][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.072122][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.081252][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.090033][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.097140][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.105246][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.113854][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.121531][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.142660][ T3752] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.153673][ T8160] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.168438][ T8166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.182057][ T8174] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 58.241225][ T8179] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.250112][ T8179] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.266986][ T8163] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 58.282376][ T8163] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.309046][ T8174] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 58.346611][ T8174] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 58.401297][ T3752] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.409802][ T3752] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.418237][ T3752] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.427111][ T3752] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.435404][ T3752] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.444380][ T3752] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.452838][ T3752] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.469589][ T8166] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.505578][ T8174] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 58.579718][ T8183] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 59.366341][ T8187] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 163.518520][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 163.525310][ C1] rcu: 1-...!: (10499 ticks this GP) idle=1ce/1/0x4000000000000002 softirq=10490/10490 fqs=44 [ 163.535898][ C1] (t=10500 jiffies g=6369 q=101) [ 163.541006][ C1] rcu: rcu_preempt kthread starved for 10412 jiffies! g6369 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 163.552088][ C1] rcu: RCU grace-period kthread stack dump: [ 163.558150][ C1] rcu_preempt R running task 29032 10 2 0x80004000 [ 163.566217][ C1] Call Trace: [ 163.569504][ C1] __schedule+0x9a0/0xcc0 [ 163.573916][ C1] schedule+0x181/0x210 [ 163.578071][ C1] schedule_timeout+0x14f/0x240 [ 163.582911][ C1] ? run_local_timers+0x120/0x120 [ 163.587924][ C1] rcu_gp_kthread+0xed8/0x1770 [ 163.592780][ C1] kthread+0x332/0x350 [ 163.596834][ C1] ? rcu_report_qs_rsp+0x140/0x140 [ 163.601953][ C1] ? kthread_blkcg+0xe0/0xe0 [ 163.606531][ C1] ret_from_fork+0x24/0x30 [ 163.610974][ C1] NMI backtrace for cpu 1 [ 163.615385][ C1] CPU: 1 PID: 8160 Comm: syz-executor.0 Not tainted 5.4.0-syzkaller #0 [ 163.623776][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 163.633818][ C1] Call Trace: [ 163.637085][ C1] [ 163.639926][ C1] dump_stack+0x1fb/0x318 [ 163.644260][ C1] nmi_cpu_backtrace+0xaf/0x1a0 [ 163.649097][ C1] ? nmi_trigger_cpumask_backtrace+0x16d/0x290 [ 163.655241][ C1] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 163.661817][ C1] nmi_trigger_cpumask_backtrace+0x174/0x290 [ 163.667946][ C1] arch_trigger_cpumask_backtrace+0x10/0x20 [ 163.674829][ C1] rcu_dump_cpu_stacks+0x15a/0x220 [ 163.679948][ C1] rcu_sched_clock_irq+0xe25/0x1ad0 [ 163.685228][ C1] ? trace_hardirqs_off+0x74/0x80 [ 163.690243][ C1] update_process_times+0x12d/0x180 [ 163.695439][ C1] tick_sched_timer+0x263/0x420 [ 163.700276][ C1] ? tick_setup_sched_timer+0x3d0/0x3d0 [ 163.705812][ C1] __hrtimer_run_queues+0x403/0x840 [ 163.711022][ C1] hrtimer_interrupt+0x38c/0xda0 [ 163.715981][ C1] ? debug_smp_processor_id+0x9/0x20 [ 163.721259][ C1] smp_apic_timer_interrupt+0x109/0x280 [ 163.726797][ C1] apic_timer_interrupt+0xf/0x20 [ 163.731724][ C1] [ 163.734739][ C1] RIP: 0010:free_thread_stack+0x14c/0x590 [ 163.740447][ C1] Code: 2e 00 48 89 df 31 f6 e8 42 af 6e 00 43 80 3c 2e 00 74 08 4c 89 e7 e8 43 a4 69 00 49 8b 1c 24 48 83 c3 08 48 89 d8 48 c1 e8 03 <42> 80 3c 28 00 74 08 48 89 df e8 25 a4 69 00 48 8b 3b be fc ff ff [ 163.760387][ C1] RSP: 0018:ffffc90002097bd0 EFLAGS: 00000a02 ORIG_RAX: ffffffffffffff13 [ 163.768785][ C1] RAX: 1ffff11011c189a1 RBX: ffff88808e0c4d08 RCX: 0000000000000000 [ 163.776741][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffea0002553b40 [ 163.784699][ C1] RBP: ffffc90002097c08 R08: dffffc0000000000 R09: fffffbfff120248a [ 163.792659][ C1] R10: fffffbfff120248a R11: 0000000000000000 R12: ffff88808e0c4da0 [ 163.800622][ C1] R13: dffffc0000000000 R14: 1ffff11011c189b4 R15: ffff888097f678a8 [ 163.808646][ C1] put_task_stack+0xa3/0x130 [ 163.813225][ C1] finish_task_switch+0x3f1/0x550 [ 163.818242][ C1] __schedule+0x9a8/0xcc0 [ 163.822570][ C1] schedule+0x181/0x210 [ 163.826714][ C1] do_nanosleep+0x1d0/0x6c0 [ 163.831238][ C1] hrtimer_nanosleep+0x3a6/0x5b0 [ 163.836265][ C1] ? trace_hrtimer_expire_exit+0x2d0/0x2d0 [ 163.842101][ C1] __x64_sys_nanosleep+0x186/0x1d0 [ 163.847231][ C1] do_syscall_64+0xf7/0x1c0 [ 163.851729][ C1] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 163.857698][ C1] RIP: 0033:0x458b20 [ 163.861635][ C1] Code: c0 5b 5d c3 66 0f 1f 44 00 00 8b 04 24 48 83 c4 18 5b 5d c3 66 0f 1f 44 00 00 83 3d 11 fe 61 00 00 75 14 b8 23 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 d4 d1 fb ff c3 48 83 ec 08 e8 ea 46 00 00 [ 163.881311][ C1] RSP: 002b:00007ffe1c432688 EFLAGS: 00000246 ORIG_RAX: 0000000000000023 [ 163.889709][ C1] RAX: ffffffffffffffda RBX: 000000000000e458 RCX: 0000000000458b20 [ 163.897775][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007ffe1c432690 [ 163.905750][ C1] RBP: 0000000000000002 R08: 0000000000000001 R09: 0000000000d41940 [ 163.913707][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 163.921666][ C1] R13: 00007ffe1c4326e0 R14: 000000000000e458 R15: 00007ffe1c4326f0