[Firmware Bug]: TSC ADJUST differs: CPU0 0 --> -476447963626. Restoring INFO: rcu_preempt detected stalls on CPUs/tasks: 0-...: (1 ticks this GP) idle=9ee/140000000000001/0 softirq=18847/18847 fqs=0 (detected by 1, t=21659 jiffies, g=2945, c=2944, q=80) Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 PID: 0 Comm: swapper/0 Not tainted 4.14.276-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 task: ffffffff88e74480 task.stack: ffffffff88e00000 RIP: 0010:unwind_next_frame+0xfc7/0x17d0 arch/x86/kernel/unwind_orc.c:474 RSP: 0018:ffff8880ba407668 EFLAGS: 00000287 RAX: 0000000000000000 RBX: 1ffff11017480ed4 RCX: ffffffff8a6d7c76 RDX: ffff8880ba407768 RSI: ffff8880ba407dd8 RDI: ffff8880ba407728 RBP: 0000000000000002 R08: 0000000000000001 R09: 0000000000000001 R10: ffff8880ba407e08 R11: 0000000000000001 R12: ffff8880ba40775d R13: ffff8880ba407760 R14: ffff8880ba407778 R15: ffff8880ba407728 FS: 0000000000000000(0000) GS:ffff8880ba400000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fc88944dff8 CR3: 0000000008e6a000 CR4: 00000000003406f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: __save_stack_trace+0x90/0x160 arch/x86/kernel/stacktrace.c:44 save_stack mm/kasan/kasan.c:447 [inline] set_track mm/kasan/kasan.c:459 [inline] kasan_kmalloc+0xeb/0x160 mm/kasan/kasan.c:551 kmem_cache_alloc+0x124/0x3c0 mm/slab.c:3552 dst_alloc+0xed/0x6d0 net/core/dst.c:107 __ip6_dst_alloc net/ipv6/route.c:357 [inline] ip6_dst_alloc+0x39/0x2d0 net/ipv6/route.c:370 icmp6_dst_alloc+0x155/0x580 net/ipv6/route.c:1768 ndisc_send_skb+0xace/0x1390 net/ipv6/ndisc.c:463 ndisc_send_rs+0x125/0x630 net/ipv6/ndisc.c:677 addrconf_rs_timer+0x2bb/0x5a0 net/ipv6/addrconf.c:3769 call_timer_fn+0x14a/0x650 kernel/time/timer.c:1280 expire_timers+0x232/0x4d0 kernel/time/timer.c:1319 __run_timers kernel/time/timer.c:1637 [inline] run_timer_softirq+0x1d5/0x5a0 kernel/time/timer.c:1650 __do_softirq+0x24d/0x9ff kernel/softirq.c:288 invoke_softirq kernel/softirq.c:368 [inline] irq_exit+0x193/0x240 kernel/softirq.c:409 exiting_irq arch/x86/include/asm/apic.h:638 [inline] smp_apic_timer_interrupt+0x141/0x5e0 arch/x86/kernel/apic/apic.c:1106 apic_timer_interrupt+0x93/0xa0 arch/x86/entry/entry_64.S:793 RIP: 0010:cpuidle_idle_call kernel/sched/idle.c:145 [inline] RIP: 0010:do_idle+0x2a8/0x3c0 kernel/sched/idle.c:246 RSP: 0018:ffffffff88e07ea8 EFLAGS: 00000282 ORIG_RAX: ffffffffffffff10 RAX: 1ffffffff11e1313 RBX: dffffc0000000000 RCX: 0000000000000000 RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffffffff88e74d04 RBP: ffffffff88f09890 R08: 0000000000000047 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: fffffbfff11ce890 R13: ffffffff88e74480 R14: 0000000000000000 R15: 0000000000000000 cpu_startup_entry+0x14/0x20 kernel/sched/idle.c:351 start_kernel+0x750/0x770 init/main.c:708 secondary_startup_64+0xa5/0xb0 arch/x86/kernel/head_64.S:240 Code: c1 0f 85 2e 04 00 00 83 e0 07 40 38 c6 41 0f 9e c0 40 84 f6 0f 95 c0 41 84 c0 0f 85 15 04 00 00 48 0f bf 71 02 4c 89 ff 4c 01 d6 94 ee ff ff 84 c0 0f 85 bf fd ff ff e9 21 f4 ff ff 4d 8b 67 rcu_preempt kthread starved for 21659 jiffies! g2945 c2944 f0x0 RCU_GP_WAIT_FQS(3) ->state=0x402 ->cpu=1 unregister_netdevice: waiting for ip6gre0 to become free. Usage count = -1 rcu_preempt R running task 30008 8 2 0x80000000 Call Trace: context_switch kernel/sched/core.c:2811 [inline] __schedule+0x88b/0x1de0 kernel/sched/core.c:3387 schedule+0x8d/0x1b0 kernel/sched/core.c:3431 schedule_timeout+0x4af/0xe90 kernel/time/timer.c:1747 rcu_gp_kthread+0xc0a/0x1e60 kernel/rcu/tree.c:2255 kthread+0x30d/0x420 kernel/kthread.c:232 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:404 systemd[1]: systemd-journald.service: Main process exited, code=killed, status=6/ABRT systemd[1]: systemd-journald.service: Unit entered failed state. systemd[1]: systemd-journald.service: Failed with result 'watchdog'. systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. systemd[1]: Stopped Flush Journal to Persistent Storage. systemd[1]: Stopping Flush Journal to Persistent Storage... systemd[1]: Stopped Journal Service. systemd[1]: Starting Journal Service... systemd[1]: Starting Load/Save RF Kill Switch Status... systemd[1]: systemd-udevd.service: Main process exited, code=killed, status=6/ABRT systemd-journald[11467]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. ---------------- Code disassembly (best guess): 0: c1 0f 85 rorl $0x85,(%rdi) 3: 2e 04 00 cs add $0x0,%al 6: 00 83 e0 07 40 38 add %al,0x384007e0(%rbx) c: c6 41 0f 9e movb $0x9e,0xf(%rcx) 10: c0 40 84 f6 rolb $0xf6,-0x7c(%rax) 14: 0f 95 c0 setne %al 17: 41 84 c0 test %al,%r8b 1a: 0f 85 15 04 00 00 jne 0x435 20: 48 0f bf 71 02 movswq 0x2(%rcx),%rsi 25: 4c 89 ff mov %r15,%rdi 28: 4c 01 d6 add %r10,%rsi * 2b: e8 94 ee ff ff callq 0xffffeec4 <-- trapping instruction 30: 84 c0 test %al,%al 32: 0f 85 bf fd ff ff jne 0xfffffdf7 38: e9 21 f4 ff ff jmpq 0xfffff45e 3d: 4d rex.WRB 3e: 8b .byte 0x8b 3f: 67 addr32