[ 45.089834][ T23] audit: type=1800 audit(1575397721.115:30): pid=8090 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.15.219' (ECDSA) to the list of known hosts. 2019/12/03 18:28:51 fuzzer started 2019/12/03 18:28:52 dialing manager at 10.128.0.26:42111 2019/12/03 18:28:52 syscalls: 2689 2019/12/03 18:28:52 code coverage: enabled 2019/12/03 18:28:52 comparison tracing: enabled 2019/12/03 18:28:52 extra coverage: extra coverage is not supported by the kernel 2019/12/03 18:28:52 setuid sandbox: enabled 2019/12/03 18:28:52 namespace sandbox: enabled 2019/12/03 18:28:52 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/03 18:28:52 fault injection: enabled 2019/12/03 18:28:52 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/03 18:28:52 net packet injection: enabled 2019/12/03 18:28:52 net device setup: enabled 2019/12/03 18:28:52 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/12/03 18:28:52 devlink PCI setup: PCI device 0000:00:10.0 is not available 18:28:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x1e, r1, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 18:28:54 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)='+', 0x1}], 0x1}, 0xc100) syz_open_procfs(0x0, &(0x7f0000001300)='netZ3\xe3\xa461_sTat') sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000001340)=@acquire={0x338, 0x17, 0x0, 0x0, 0x0, {{@in=@multicast1}, @in=@empty, {@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@empty}, {{@in=@broadcast, @in6=@loopback}}}, [@algo_comp={0x210, 0x3, {{'lzjh\x00'}, 0xe40, "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"}}]}, 0x338}}, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000480)="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", 0xffe4}], 0x1) syzkaller login: [ 58.074569][ T8256] IPVS: ftp: loaded support on port[0] = 21 18:28:54 executing program 2: io_setup(0x5f, &(0x7f00000000c0)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x806, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) io_getevents(r0, 0x0, 0x0, 0x0, 0x0) io_submit(r0, 0x8, &(0x7f0000000280)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000040), 0x20000409}]) [ 58.232485][ T8259] IPVS: ftp: loaded support on port[0] = 21 [ 58.246347][ T8256] chnl_net:caif_netlink_parms(): no params data found [ 58.334728][ T8256] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.343654][ T8256] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.352101][ T8256] device bridge_slave_0 entered promiscuous mode [ 58.395048][ T8256] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.405758][ T8256] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.422592][ T8256] device bridge_slave_1 entered promiscuous mode [ 58.451514][ T8263] IPVS: ftp: loaded support on port[0] = 21 [ 58.474830][ T8259] chnl_net:caif_netlink_parms(): no params data found [ 58.488102][ T8256] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.520295][ T8256] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.560447][ T8259] bridge0: port 1(bridge_slave_0) entered blocking state 18:28:54 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000080)={0x0, 0x0, "6c08b29e0cab0a2b89faccd9701056c7b347068ebeb9e3be"}) [ 58.567657][ T8259] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.575220][ T8259] device bridge_slave_0 entered promiscuous mode [ 58.585315][ T8256] team0: Port device team_slave_0 added [ 58.601078][ T8256] team0: Port device team_slave_1 added [ 58.609593][ T8259] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.616646][ T8259] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.637898][ T8259] device bridge_slave_1 entered promiscuous mode [ 58.697230][ T8259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.739746][ T8256] device hsr_slave_0 entered promiscuous mode 18:28:54 executing program 4: r0 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) [ 58.817544][ T8256] device hsr_slave_1 entered promiscuous mode [ 58.901072][ T8259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.946653][ T8265] IPVS: ftp: loaded support on port[0] = 21 [ 58.992227][ T8259] team0: Port device team_slave_0 added 18:28:55 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x2, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr="8117e9642dd02eddb71e7a006c474125"}}}, 0x3a) [ 59.035715][ T8256] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 59.081125][ T8256] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 59.142288][ T8259] team0: Port device team_slave_1 added [ 59.154901][ T8267] IPVS: ftp: loaded support on port[0] = 21 [ 59.155551][ T8256] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 59.213331][ T8270] IPVS: ftp: loaded support on port[0] = 21 [ 59.224686][ T8263] chnl_net:caif_netlink_parms(): no params data found [ 59.236923][ T8256] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 59.348773][ T8259] device hsr_slave_0 entered promiscuous mode [ 59.397804][ T8259] device hsr_slave_1 entered promiscuous mode [ 59.447231][ T8259] debugfs: Directory 'hsr0' with parent '/' already present! [ 59.503231][ T8263] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.512012][ T8263] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.519758][ T8263] device bridge_slave_0 entered promiscuous mode [ 59.546981][ T8263] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.555268][ T8263] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.562952][ T8263] device bridge_slave_1 entered promiscuous mode [ 59.592780][ T8259] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 59.651254][ T8259] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 59.711253][ T8259] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 59.770750][ T8263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.800704][ T8259] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 59.830055][ T8263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.843637][ T8265] chnl_net:caif_netlink_parms(): no params data found [ 59.872697][ T8263] team0: Port device team_slave_0 added [ 59.896218][ T8265] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.903903][ T8265] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.911677][ T8265] device bridge_slave_0 entered promiscuous mode [ 59.919830][ T8265] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.926977][ T8265] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.934849][ T8265] device bridge_slave_1 entered promiscuous mode [ 59.942630][ T8263] team0: Port device team_slave_1 added [ 59.998663][ T8265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.011065][ T8265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.060429][ T8263] device hsr_slave_0 entered promiscuous mode [ 60.099270][ T8263] device hsr_slave_1 entered promiscuous mode [ 60.157930][ T8263] debugfs: Directory 'hsr0' with parent '/' already present! [ 60.206000][ T8265] team0: Port device team_slave_0 added [ 60.213052][ T8265] team0: Port device team_slave_1 added [ 60.225833][ T8263] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 60.312461][ T8270] chnl_net:caif_netlink_parms(): no params data found [ 60.321403][ T8263] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 60.369489][ T8267] chnl_net:caif_netlink_parms(): no params data found [ 60.381121][ T8259] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.395264][ T8263] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 60.509043][ T8265] device hsr_slave_0 entered promiscuous mode [ 60.557525][ T8265] device hsr_slave_1 entered promiscuous mode [ 60.607213][ T8265] debugfs: Directory 'hsr0' with parent '/' already present! [ 60.631403][ T8263] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 60.713439][ T8259] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.738699][ T3037] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.746980][ T3037] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.760332][ T8256] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.774304][ T8270] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.781882][ T8270] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.789609][ T8270] device bridge_slave_0 entered promiscuous mode [ 60.796624][ T8267] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.804136][ T8267] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.811894][ T8267] device bridge_slave_0 entered promiscuous mode [ 60.821438][ T8267] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.831599][ T8267] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.840096][ T8267] device bridge_slave_1 entered promiscuous mode [ 60.857413][ T8270] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.864477][ T8270] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.877604][ T8270] device bridge_slave_1 entered promiscuous mode [ 60.892546][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.902053][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.910687][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.917862][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.925683][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.933595][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.941321][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.950766][ T8265] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 61.000752][ T8265] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 61.069710][ T8265] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 61.109096][ T8265] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 61.159755][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.168289][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.176965][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.184044][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.193913][ T8256] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.202501][ T8267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.221670][ T8270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.232377][ T8270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.254154][ T8270] team0: Port device team_slave_0 added [ 61.261984][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.271967][ T8267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.303722][ T8270] team0: Port device team_slave_1 added [ 61.318607][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.327497][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.335842][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.344570][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.353039][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.361965][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.370640][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.379210][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.387495][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.395539][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.405138][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.413458][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.420530][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.428634][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.437025][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.445365][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.452407][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.459972][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.468337][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.476606][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.485054][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.493359][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.501123][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.509359][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.521805][ T8259] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.561315][ T8267] team0: Port device team_slave_0 added [ 61.570987][ T8267] team0: Port device team_slave_1 added [ 61.619024][ T8270] device hsr_slave_0 entered promiscuous mode [ 61.667819][ T8270] device hsr_slave_1 entered promiscuous mode [ 61.727298][ T8270] debugfs: Directory 'hsr0' with parent '/' already present! [ 61.742511][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.750916][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.759927][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.767872][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.790827][ T8259] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.849268][ T8267] device hsr_slave_0 entered promiscuous mode [ 61.907615][ T8267] device hsr_slave_1 entered promiscuous mode [ 61.947212][ T8267] debugfs: Directory 'hsr0' with parent '/' already present! [ 61.980215][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.995284][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.003753][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.012328][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.023372][ T8256] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.040176][ T8267] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 62.094936][ T8270] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 62.148634][ T8263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.156715][ T8267] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 167.167081][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 167.173849][ C0] rcu: 0-....: (10499 ticks this GP) idle=f7a/1/0x4000000000000002 softirq=11923/11923 fqs=2789 [ 167.184573][ C0] (t=10501 jiffies g=6025 q=227) [ 167.189594][ C0] rcu: rcu_preempt kthread starved for 4924 jiffies! g6025 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 167.200704][ C0] rcu: RCU grace-period kthread stack dump: [ 167.206588][ C0] rcu_preempt R running task 29032 10 2 0x80004000 [ 167.214484][ C0] Call Trace: [ 167.217895][ C0] __schedule+0x9a0/0xcc0 [ 167.222252][ C0] schedule+0x181/0x210 [ 167.226525][ C0] schedule_timeout+0x14f/0x240 [ 167.231906][ C0] ? run_local_timers+0x120/0x120 [ 167.236929][ C0] rcu_gp_kthread+0xed8/0x1770 [ 167.241700][ C0] kthread+0x332/0x350 [ 167.245777][ C0] ? rcu_report_qs_rsp+0x140/0x140 [ 167.251953][ C0] ? kthread_blkcg+0xe0/0xe0 [ 167.256540][ C0] ret_from_fork+0x24/0x30 [ 167.260981][ C0] NMI backtrace for cpu 0 [ 167.265307][ C0] CPU: 0 PID: 8259 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0 [ 167.273541][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 167.283602][ C0] Call Trace: [ 167.286894][ C0] [ 167.289753][ C0] dump_stack+0x1fb/0x318 [ 167.294101][ C0] nmi_cpu_backtrace+0xaf/0x1a0 [ 167.298959][ C0] ? nmi_trigger_cpumask_backtrace+0x16d/0x290 [ 167.305124][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 167.311204][ C0] nmi_trigger_cpumask_backtrace+0x174/0x290 [ 167.317181][ C0] arch_trigger_cpumask_backtrace+0x10/0x20 [ 167.323072][ C0] rcu_dump_cpu_stacks+0x15a/0x220 [ 167.328203][ C0] rcu_sched_clock_irq+0xe25/0x1ad0 [ 167.333532][ C0] ? trace_hardirqs_off+0x74/0x80 [ 167.338589][ C0] update_process_times+0x12d/0x180 [ 167.343790][ C0] tick_sched_timer+0x263/0x420 [ 167.348653][ C0] ? tick_setup_sched_timer+0x3d0/0x3d0 [ 167.354193][ C0] __hrtimer_run_queues+0x403/0x840 [ 167.359779][ C0] hrtimer_interrupt+0x38c/0xda0 [ 167.364728][ C0] ? debug_smp_processor_id+0x9/0x20 [ 167.370021][ C0] smp_apic_timer_interrupt+0x109/0x280 [ 167.375571][ C0] apic_timer_interrupt+0xf/0x20 [ 167.380526][ C0] [ 167.383476][ C0] RIP: 0010:mod_memcg_page_state+0x2b/0x190 [ 167.389372][ C0] Code: 48 89 e5 41 57 41 56 41 54 53 41 89 f6 48 89 fb e8 da 28 2e 00 48 83 c3 38 48 89 d8 48 c1 e8 03 49 bc 00 00 00 00 00 fc ff df <42> 80 3c 20 00 74 08 48 89 df e8 b6 9f 69 00 48 8b 1b 48 85 db 0f [ 167.408997][ C0] RSP: 0018:ffffc900026f7930 EFLAGS: 00000a06 ORIG_RAX: ffffffffffffff13 [ 167.417416][ C0] RAX: 1ffffd40004f7db7 RBX: ffffea00027bedb8 RCX: ffff88809f29e1c0 [ 167.425399][ C0] RDX: 0000000000000000 RSI: 00000000fffffffc RDI: ffffea00027bed80 [ 167.433382][ C0] RBP: ffffc900026f7950 R08: 000000000003a768 R09: fffffbfff120248a [ 167.441355][ C0] R10: fffffbfff120248a R11: 0000000000000000 R12: dffffc0000000000 [ 167.449323][ C0] R13: dffffc0000000000 R14: 00000000fffffffc R15: ffff8880a88859e8 [ 167.457322][ C0] free_thread_stack+0x168/0x590 [ 167.462274][ C0] put_task_stack+0xa3/0x130 [ 167.466882][ C0] finish_task_switch+0x3f1/0x550 [ 167.471913][ C0] __schedule+0x9a8/0xcc0 [ 167.476248][ C0] ? ___preempt_schedule+0x16/0x18 [ 167.481400][ C0] preempt_schedule+0xdb/0x120 [ 167.487033][ C0] ___preempt_schedule+0x16/0x18 [ 167.491977][ C0] ? __wake_up+0xe1/0x150 [ 167.496297][ C0] _raw_spin_unlock_irqrestore+0xcc/0xe0 [ 167.501917][ C0] __wake_up+0xe1/0x150 [ 167.506071][ C0] fsnotify_add_event+0x2fc/0x390 [ 167.511085][ C0] inotify_handle_event+0x409/0x620 [ 167.516278][ C0] fsnotify+0xb9f/0x13d0 [ 167.520520][ C0] __fput+0x205/0x740 [ 167.524497][ C0] ____fput+0x15/0x20 [ 167.528489][ C0] task_work_run+0x17e/0x1b0 [ 167.533088][ C0] prepare_exit_to_usermode+0x483/0x5b0 [ 167.538637][ C0] syscall_return_slowpath+0x113/0x4a0 [ 167.544223][ C0] do_syscall_64+0x11f/0x1c0 [ 167.548815][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 167.554703][ C0] RIP: 0033:0x4141f0 [ 167.558592][ C0] Code: 01 f0 ff ff 0f 83 30 1b 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 83 3d 7d 42 66 00 00 75 14 b8 03 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff [ 167.578186][ C0] RSP: 002b:00007ffcf454d3d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 167.586591][ C0] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 00000000004141f0 [ 167.594999][ C0] RDX: 0000000000000000 RSI: 0000000000004c01 RDI: 0000000000000003 [ 167.602961][ C0] RBP: 0000000000715460 R08: 0000000000000000 R09: 000000000000000a [ 167.610921][ C0] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000000 [ 167.618882][ C0] R13: 00007ffcf454d410 R14: 0000000000000003 R15: 00007ffcf454d420