binder: 7810:7819 ioctl 40046207 0 returned -16
INFO: rcu_preempt self-detected stall on CPU
1-...: (10500 ticks this GP) idle=35a/140000000000002/0 softirq=11582/11582 fqs=2
(t=10500 jiffies g=1857 c=1856 q=682)
rcu_preempt kthread starved for 10491 jiffies! g1857 c1856 f0x0 RCU_GP_WAIT_FQS(3) ->state=0x0 ->cpu=0
rcu_preempt R running task 29984 8 2 0x80000000
Call Trace:
schedule+0x8d/0x1b0 kernel/sched/core.c:3428
schedule_timeout+0x43c/0xe40 kernel/time/timer.c:1746
rcu_gp_kthread+0xb8e/0x1ce0 kernel/rcu/tree.c:2255
kthread+0x30d/0x420 kernel/kthread.c:232
ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:404
NMI backtrace for cpu 1
CPU: 1 PID: 7807 Comm: syz-executor.2 Not tainted 4.14.174-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
__dump_stack lib/dump_stack.c:17 [inline]
dump_stack+0x13e/0x194 lib/dump_stack.c:58
nmi_cpu_backtrace.cold+0x57/0x93 lib/nmi_backtrace.c:101
nmi_trigger_cpumask_backtrace+0x139/0x17e lib/nmi_backtrace.c:62
trigger_single_cpu_backtrace include/linux/nmi.h:158 [inline]
rcu_dump_cpu_stacks+0x16d/0x1b8 kernel/rcu/tree.c:1396
print_cpu_stall kernel/rcu/tree.c:1542 [inline]
check_cpu_stall kernel/rcu/tree.c:1610 [inline]
__rcu_pending kernel/rcu/tree.c:3390 [inline]
rcu_pending kernel/rcu/tree.c:3452 [inline]
rcu_check_callbacks.cold+0x490/0xdaa kernel/rcu/tree.c:2792
update_process_times+0x29/0x60 kernel/time/timer.c:1590
tick_sched_handle+0x7d/0x150 kernel/time/tick-sched.c:165
tick_sched_timer+0x3e/0x120 kernel/time/tick-sched.c:1223
__run_hrtimer kernel/time/hrtimer.c:1223 [inline]
__hrtimer_run_queues+0x25c/0xbb0 kernel/time/hrtimer.c:1287
hrtimer_interrupt+0x1e6/0x5e0 kernel/time/hrtimer.c:1321
local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1075 [inline]
smp_apic_timer_interrupt+0x117/0x5e0 arch/x86/kernel/apic/apic.c:1100
apic_timer_interrupt+0x8f/0xa0 arch/x86/entry/entry_64.S:792
RIP: 0010:__read_once_size include/linux/compiler.h:183 [inline]
RIP: 0010:queued_write_lock_slowpath+0x80/0x1d0 kernel/locking/qrwlock.c:130
RSP: 0018:ffff8880aeb07810 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff10
RAX: 00000000000000ff RBX: ffffffff8877d6b0 RCX: 000000007495e6ed
RDX: 0000000000000000 RSI: ffff88808a902e98 RDI: ffffffff8877d6b0
RBP: ffffffff8877d6b4 R08: 00000000000056cc R09: ffffffff8a086ee0
R10: ffff88808a902e98 R11: ffff88808a902500 R12: fffffbfff10efad6
R13: 0000000000000000 R14: 0000000000000001 R15: ffff888090f0adc0
queued_write_lock include/asm-generic/qrwlock.h:134 [inline]
do_raw_write_lock+0xc2/0x1d0 kernel/locking/spinlock_debug.c:203
neigh_forced_gc net/core/neighbour.c:176 [inline]
neigh_alloc net/core/neighbour.c:315 [inline]
__neigh_create+0xb27/0x1980 net/core/neighbour.c:499
ip6_finish_output2+0xa8e/0x2150 net/ipv6/ip6_output.c:117
ip6_finish_output+0x4d9/0xaf0 net/ipv6/ip6_output.c:154
NF_HOOK_COND include/linux/netfilter.h:239 [inline]
ip6_output+0x1c9/0x650 net/ipv6/ip6_output.c:171
dst_output include/net/dst.h:462 [inline]
NF_HOOK include/linux/netfilter.h:250 [inline]
ndisc_send_skb+0xb56/0x11e0 net/ipv6/ndisc.c:483
ndisc_send_rs+0x125/0x630 net/ipv6/ndisc.c:677
addrconf_rs_timer+0x289/0x5a0 net/ipv6/addrconf.c:3761
call_timer_fn+0x14a/0x650 kernel/time/timer.c:1279
expire_timers kernel/time/timer.c:1318 [inline]
__run_timers kernel/time/timer.c:1636 [inline]
__run_timers kernel/time/timer.c:1604 [inline]
run_timer_softirq+0x52a/0x1390 kernel/time/timer.c:1649
__do_softirq+0x254/0x9bf kernel/softirq.c:288
invoke_softirq kernel/softirq.c:368 [inline]
irq_exit+0x15b/0x1a0 kernel/softirq.c:409
exiting_irq arch/x86/include/asm/apic.h:648 [inline]
smp_apic_timer_interrupt+0x141/0x5e0 arch/x86/kernel/apic/apic.c:1102
apic_timer_interrupt+0x8f/0xa0 arch/x86/entry/entry_64.S:792
RIP: 0010:pgd_page_get_mm+0x28/0x40 arch/x86/mm/pgtable.c:124
RSP: 0018:ffff88804aebf818 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff10
RAX: ffff88809bd53900 RBX: ffffea000282bf80 RCX: ffffc90008831000
RDX: 1ffffd40005057f2 RSI: ffffffff81299ae9 RDI: ffffea000282bf90
RBP: ffff8880a0afee88 R08: 0000000000000001 R09: 0000000000000004
R10: ffff88808a902e20 R11: ffff88808a902500 R12: ffff88809bd526b8
R13: 00003ffffffff000 R14: ffffffff87c6ae88 R15: dffffc0000000000
sync_global_pgds+0x1f8/0x400 arch/x86/mm/init_64.c:161
__vmalloc_node_range+0x3a2/0x6c0 mm/vmalloc.c:1772
__vmalloc_node mm/vmalloc.c:1815 [inline]
__vmalloc_node_flags mm/vmalloc.c:1829 [inline]
vzalloc+0x42/0x50 mm/vmalloc.c:1868
n_tty_open+0x16/0x160 drivers/tty/n_tty.c:1914
tty_ldisc_open.isra.0+0x6b/0xb0 drivers/tty/tty_ldisc.c:481
tty_ldisc_setup+0x43/0xf0 drivers/tty/tty_ldisc.c:786
tty_init_dev drivers/tty/tty_io.c:1359 [inline]
tty_init_dev+0x1e4/0x3a0 drivers/tty/tty_io.c:1315
ptmx_open drivers/tty/pty.c:845 [inline]
ptmx_open+0xe8/0x300 drivers/tty/pty.c:811
chrdev_open+0x1fc/0x540 fs/char_dev.c:423
do_dentry_open+0x732/0xe90 fs/open.c:777
vfs_open+0x105/0x220 fs/open.c:888
do_last fs/namei.c:3428 [inline]
path_openat+0x8ca/0x3c50 fs/namei.c:3569
do_filp_open+0x18e/0x250 fs/namei.c:3603
do_sys_open+0x29d/0x3f0 fs/open.c:1081
do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292
entry_SYSCALL_64_after_hwframe+0x42/0xb7
RIP: 0033:0x45c849
RSP: 002b:00007fafe08b3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 00007fafe08b46d4 RCX: 000000000045c849
RDX: 0008000000000006 RSI: 0000000020000180 RDI: ffffffffffffff9c
RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
R13: 00000000000007b9 R14: 00000000004ca683 R15: 000000000076bf0c
INFO: rcu_sched detected stalls on CPUs/tasks:
1-...: (10501 ticks this GP) idle=35a/140000000000001/0 softirq=11582/11582 fqs=2
(detected by 0, t=10560 jiffies, g=1311, c=1310, q=0)
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 PID: 7807 Comm: syz-executor.2 Not tainted 4.14.174-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
task: ffff88808a902500 task.stack: ffff88804aeb8000
RIP: 0010:__read_once_size include/linux/compiler.h:183 [inline]
RIP: 0010:queued_write_lock_slowpath+0x80/0x1d0 kernel/locking/qrwlock.c:130
RSP: 0018:ffff8880aeb07810 EFLAGS: 00000286
RAX: 00000000000000ff RBX: ffffffff8877d6b0 RCX: 000000007495e6ed
RDX: 0000000000000000 RSI: ffff88808a902e98 RDI: ffffffff8877d6b0
RBP: ffffffff8877d6b4 R08: 00000000000056cc R09: ffffffff8a086ee0
R10: ffff88808a902e98 R11: ffff88808a902500 R12: fffffbfff10efad6
R13: 0000000000000000 R14: 0000000000000001 R15: ffff888090f0adc0
FS: 00007fafe08b4700(0000) GS:ffff8880aeb00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000000076c000 CR3: 00000000937d9000 CR4: 00000000001406e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
queued_write_lock include/asm-generic/qrwlock.h:134 [inline]
do_raw_write_lock+0xc2/0x1d0 kernel/locking/spinlock_debug.c:203
neigh_forced_gc net/core/neighbour.c:176 [inline]
neigh_alloc net/core/neighbour.c:315 [inline]
__neigh_create+0xb27/0x1980 net/core/neighbour.c:499
ip6_finish_output2+0xa8e/0x2150 net/ipv6/ip6_output.c:117
ip6_finish_output+0x4d9/0xaf0 net/ipv6/ip6_output.c:154
NF_HOOK_COND include/linux/netfilter.h:239 [inline]
ip6_output+0x1c9/0x650 net/ipv6/ip6_output.c:171
dst_output include/net/dst.h:462 [inline]
NF_HOOK include/linux/netfilter.h:250 [inline]
ndisc_send_skb+0xb56/0x11e0 net/ipv6/ndisc.c:483
ndisc_send_rs+0x125/0x630 net/ipv6/ndisc.c:677
addrconf_rs_timer+0x289/0x5a0 net/ipv6/addrconf.c:3761
call_timer_fn+0x14a/0x650 kernel/time/timer.c:1279
expire_timers kernel/time/timer.c:1318 [inline]
__run_timers kernel/time/timer.c:1636 [inline]
__run_timers kernel/time/timer.c:1604 [inline]
run_timer_softirq+0x52a/0x1390 kernel/time/timer.c:1649
__do_softirq+0x254/0x9bf kernel/softirq.c:288
invoke_softirq kernel/softirq.c:368 [inline]
irq_exit+0x15b/0x1a0 kernel/softirq.c:409
exiting_irq arch/x86/include/asm/apic.h:648 [inline]
smp_apic_timer_interrupt+0x141/0x5e0 arch/x86/kernel/apic/apic.c:1102
apic_timer_interrupt+0x8f/0xa0 arch/x86/entry/entry_64.S:792
RIP: 0010:pgd_page_get_mm+0x28/0x40 arch/x86/mm/pgtable.c:124
RSP: 0018:ffff88804aebf818 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff10
RAX: ffff88809bd53900 RBX: ffffea000282bf80 RCX: ffffc90008831000
RDX: 1ffffd40005057f2 RSI: ffffffff81299ae9 RDI: ffffea000282bf90
RBP: ffff8880a0afee88 R08: 0000000000000001 R09: 0000000000000004
R10: ffff88808a902e20 R11: ffff88808a902500 R12: ffff88809bd526b8
R13: 00003ffffffff000 R14: ffffffff87c6ae88 R15: dffffc0000000000
sync_global_pgds+0x1f8/0x400 arch/x86/mm/init_64.c:161
__vmalloc_node_range+0x3a2/0x6c0 mm/vmalloc.c:1772
__vmalloc_node mm/vmalloc.c:1815 [inline]
__vmalloc_node_flags mm/vmalloc.c:1829 [inline]
vzalloc+0x42/0x50 mm/vmalloc.c:1868
n_tty_open+0x16/0x160 drivers/tty/n_tty.c:1914
tty_ldisc_open.isra.0+0x6b/0xb0 drivers/tty/tty_ldisc.c:481
tty_ldisc_setup+0x43/0xf0 drivers/tty/tty_ldisc.c:786
tty_init_dev drivers/tty/tty_io.c:1359 [inline]
tty_init_dev+0x1e4/0x3a0 drivers/tty/tty_io.c:1315
ptmx_open drivers/tty/pty.c:845 [inline]
ptmx_open+0xe8/0x300 drivers/tty/pty.c:811
chrdev_open+0x1fc/0x540 fs/char_dev.c:423
do_dentry_open+0x732/0xe90 fs/open.c:777
vfs_open+0x105/0x220 fs/open.c:888
do_last fs/namei.c:3428 [inline]
path_openat+0x8ca/0x3c50 fs/namei.c:3569
do_filp_open+0x18e/0x250 fs/namei.c:3603
do_sys_open+0x29d/0x3f0 fs/open.c:1081
do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292
entry_SYSCALL_64_after_hwframe+0x42/0xb7
RIP: 0033:0x45c849
RSP: 002b:00007fafe08b3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 00007fafe08b46d4 RCX: 000000000045c849
RDX: 0008000000000006 RSI: 0000000020000180 RDI: ffffffffffffff9c
RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
R13: 00000000000007b9 R14: 00000000004ca683 R15: 000000000076bf0c
Code: 0f 84 d3 00 00 00 49 89 dc 49 89 dd 41 be 01 00 00 00 49 c1 ec 03 41 83 e5 07 48 b8 00 00 00 00 00 fc ff df 49 01 c4 eb 02 f3 90 <41> 0f b6 04 24 44 38 e8 7f 08 84 c0 0f 85 f6 00 00 00 0f b6 03
rcu_sched kthread starved for 10551 jiffies! g1311 c1310 f0x0 RCU_GP_WAIT_FQS(3) ->state=0x0 ->cpu=0
rcu_sched R running task 29984 9 2 0x80000000
Call Trace:
schedule+0x8d/0x1b0 kernel/sched/core.c:3428
schedule_timeout+0x43c/0xe40 kernel/time/timer.c:1746
rcu_gp_kthread+0xb8e/0x1ce0 kernel/rcu/tree.c:2255
kthread+0x30d/0x420 kernel/kthread.c:232
ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:404