netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. rcu: INFO: rcu_preempt self-detected stall on CPU rcu: 0-...!: (10500 ticks this GP) idle=d7a/1/0x4000000000000002 softirq=509176/509176 fqs=0 rcu: (t=10500 jiffies g=491577 q=8504) rcu: rcu_preempt kthread starved for 10500 jiffies! g491577 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 rcu: RCU grace-period kthread stack dump: rcu_preempt I29520 10 2 0x80000000 Call Trace: context_switch kernel/sched/core.c:2826 [inline] __schedule+0x8a2/0x1fc0 kernel/sched/core.c:3515 schedule+0x8d/0x1b0 kernel/sched/core.c:3559 schedule_timeout+0x4c1/0xed0 kernel/time/timer.c:1806 rcu_gp_kthread+0xf94/0x2050 kernel/rcu/tree.c:2202 kthread+0x30b/0x410 kernel/kthread.c:246 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415 NMI backtrace for cpu 0 CPU: 0 PID: 26682 Comm: syz-executor.1 Not tainted 4.19.128-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1fc/0x2fe lib/dump_stack.c:118 nmi_cpu_backtrace.cold+0x63/0xa2 lib/nmi_backtrace.c:101 nmi_trigger_cpumask_backtrace+0x1a6/0x1eb lib/nmi_backtrace.c:62 trigger_single_cpu_backtrace include/linux/nmi.h:164 [inline] rcu_dump_cpu_stacks+0x170/0x1bb kernel/rcu/tree.c:1340 print_cpu_stall kernel/rcu/tree.c:1478 [inline] check_cpu_stall kernel/rcu/tree.c:1550 [inline] __rcu_pending kernel/rcu/tree.c:3293 [inline] rcu_pending kernel/rcu/tree.c:3336 [inline] rcu_check_callbacks.cold+0x634/0xddc kernel/rcu/tree.c:2682 update_process_times+0x2a/0x70 kernel/time/timer.c:1638 tick_sched_handle.isra.0+0x91/0x180 kernel/time/tick-sched.c:168 tick_sched_timer+0x44/0x130 kernel/time/tick-sched.c:1278 __run_hrtimer kernel/time/hrtimer.c:1401 [inline] __hrtimer_run_queues+0x2ec/0xd20 kernel/time/hrtimer.c:1463 hrtimer_interrupt+0x312/0x770 kernel/time/hrtimer.c:1521 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1067 [inline] smp_apic_timer_interrupt+0x10c/0x550 arch/x86/kernel/apic/apic.c:1092 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:894 RIP: 0010:zap_pte_range mm/memory.c:1339 [inline] RIP: 0010:zap_pmd_range mm/memory.c:1440 [inline] RIP: 0010:zap_pud_range mm/memory.c:1469 [inline] RIP: 0010:zap_p4d_range mm/memory.c:1490 [inline] RIP: 0010:unmap_page_range+0x1280/0x2bb0 mm/memory.c:1511 Code: d7 ff 45 84 ed 0f 84 c5 06 00 00 e8 0a 58 d7 ff 48 89 ef e8 72 1c fb ff 41 89 c5 e8 fa 57 d7 ff 31 ff 44 89 ee e8 60 59 d7 ff <45> 85 ed 0f 88 fc 0c 00 00 e8 e2 57 d7 ff 48 8b 7c 24 18 48 89 ee RSP: 0018:ffff8881e0417750 EFLAGS: 00000293 ORIG_RAX: ffffffffffffff13 RAX: 0000000000000000 RBX: 00007ff38c1e9000 RCX: ffffffff819042d0 RDX: 00000000000004e1 RSI: 0000000000000000 RDI: 0000000000000005 RBP: ffffea0002a28c40 R08: ffff8881e0406540 R09: fffff9400054518f R10: fffff9400054518e R11: ffffea0002a28c73 R12: ffff8881fb24af40 R13: 00000000000004e1 R14: dffffc0000000000 R15: ffffea0002a28c48 unmap_single_vma+0x196/0x300 mm/memory.c:1556 unmap_vmas+0xa9/0x180 mm/memory.c:1586 exit_mmap+0x2b9/0x510 mm/mmap.c:3091 __mmput kernel/fork.c:1015 [inline] mmput+0x14e/0x420 kernel/fork.c:1036 exit_mm kernel/exit.c:546 [inline] do_exit+0xac4/0x2f00 kernel/exit.c:867 do_group_exit+0x125/0x310 kernel/exit.c:983 get_signal+0x3f5/0x1f30 kernel/signal.c:2588 do_signal+0x8f/0x1620 arch/x86/kernel/signal.c:821 exit_to_usermode_loop+0x204/0x2a0 arch/x86/entry/common.c:163 prepare_exit_to_usermode arch/x86/entry/common.c:198 [inline] syscall_return_slowpath arch/x86/entry/common.c:271 [inline] do_syscall_64+0x538/0x620 arch/x86/entry/common.c:296 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x45ca69 Code: Bad RIP value. RSP: 002b:00007ff38b547cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca RAX: fffffffffffffe00 RBX: 000000000078bfa8 RCX: 000000000045ca69 RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac R13: 00007fff564d94cf R14: 00007ff38b5489c0 R15: 000000000078bfac Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 PID: 13181 Comm: syz-executor.1 Not tainted 4.19.128-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:__read_once_size include/linux/compiler.h:193 [inline] RIP: 0010:trace_lock_acquire include/trace/events/lock.h:13 [inline] RIP: 0010:lock_acquire+0x2db/0x3c0 kernel/locking/lockdep.c:3906 Code: 8c 00 00 00 48 8b 03 48 85 c0 75 9b 65 ff 0d 4c d2 b1 7e 0f 85 55 fe ff ff e8 65 41 b0 ff e9 4b fe ff ff 65 ff 05 35 d2 b1 7e <48> 8b 05 a6 ce 36 08 e8 59 ba 05 00 85 c0 74 09 80 3d 08 77 36 08 RSP: 0018:ffff8880ae707668 EFLAGS: 00000083 RAX: 0000000000000001 RBX: ffff8881c0a043c0 RCX: 0000000000000002 RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8881c0a04c44 RBP: ffffffff88b933a0 R08: 0000000000000000 R09: 0000000000000000 R10: ffff8880ae707a40 R11: ffff8880ae7239d3 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000002 R15: 0000000000000000 FS: 00007ff38b548700(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000000c003b43000 CR3: 00000000a134d000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: rcu_lock_acquire include/linux/rcupdate.h:242 [inline] rcu_read_lock include/linux/rcupdate.h:627 [inline] __perf_output_begin kernel/events/ring_buffer.c:156 [inline] perf_output_begin_forward+0xd9/0xb60 kernel/events/ring_buffer.c:262 __perf_event_output kernel/events/core.c:6587 [inline] perf_event_output_forward+0x108/0x270 kernel/events/core.c:6603 __perf_event_overflow+0x13c/0x370 kernel/events/core.c:7876 perf_swevent_hrtimer+0x26d/0x3d0 kernel/events/core.c:9232 __run_hrtimer kernel/time/hrtimer.c:1401 [inline] __hrtimer_run_queues+0x2ec/0xd20 kernel/time/hrtimer.c:1463 hrtimer_interrupt+0x312/0x770 kernel/time/hrtimer.c:1521 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1067 [inline] smp_apic_timer_interrupt+0x10c/0x550 arch/x86/kernel/apic/apic.c:1092 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:894 RIP: 0010:__sanitizer_cov_trace_const_cmp8+0x7/0x20 kernel/kcov.c:195 Code: 00 00 00 48 8b 0c 24 89 f2 89 fe bf 05 00 00 00 e9 ce fe ff ff 0f 1f 40 00 66 2e 0f 1f 84 00 00 00 00 00 48 8b 0c 24 48 89 f2 <48> 89 fe bf 07 00 00 00 e9 ac fe ff ff 66 90 66 2e 0f 1f 84 00 00 RSP: 0018:ffff8881c080f748 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 RAX: dead000000000100 RBX: 00007ff38c29b000 RCX: ffffffff8190416e RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 RBP: ffffea00024873c0 R08: ffff8881c0a043c0 R09: fffff94000490e77 R10: fffff94000490e76 R11: ffffea00024873b3 R12: ffff8881c08ce4d0 R13: ffffea00024873c0 R14: dffffc0000000000 R15: ffffea00024873c8 compound_head include/linux/page-flags.h:144 [inline] PageSwapBacked include/linux/page-flags.h:295 [inline] mm_counter_file include/linux/mm.h:1638 [inline] mm_counter include/linux/mm.h:1647 [inline] zap_pte_range mm/memory.c:1337 [inline] zap_pmd_range mm/memory.c:1440 [inline] zap_pud_range mm/memory.c:1469 [inline] zap_p4d_range mm/memory.c:1490 [inline] unmap_page_range+0x111e/0x2bb0 mm/memory.c:1511 unmap_single_vma+0x196/0x300 mm/memory.c:1556 unmap_vmas+0xa9/0x180 mm/memory.c:1586 exit_mmap+0x2b9/0x510 mm/mmap.c:3091 __mmput kernel/fork.c:1015 [inline] mmput+0x14e/0x420 kernel/fork.c:1036 exit_mm kernel/exit.c:546 [inline] do_exit+0xac4/0x2f00 kernel/exit.c:867 do_group_exit+0x125/0x310 kernel/exit.c:983 get_signal+0x3f5/0x1f30 kernel/signal.c:2588 do_signal+0x8f/0x1620 arch/x86/kernel/signal.c:821 exit_to_usermode_loop+0x204/0x2a0 arch/x86/entry/common.c:163 prepare_exit_to_usermode arch/x86/entry/common.c:198 [inline] syscall_return_slowpath arch/x86/entry/common.c:271 [inline] do_syscall_64+0x538/0x620 arch/x86/entry/common.c:296 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x45ca69 Code: 48 c7 44 24 10 00 00 00 00 48 8b 44 24 68 48 89 44 24 18 48 8b 44 24 70 48 89 44 24 20 48 8b 44 24 78 48 89 44 24 28 48 89 4c <24> 30 0f 57 c0 0f 11 44 24 38 48 c7 44 24 48 00 00 00 00 e8 0f d4 RSP: 002b:00007ff38b547cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca RAX: fffffffffffffe00 RBX: 000000000078bfa8 RCX: 000000000045ca69 RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000078bfa8 RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac R13: 00007fff564d94cf R14: 00007ff38b5489c0 R15: 000000000078bfac