Debian GNU/Linux 9 syzkaller ttyS0 syzkaller login: [ 40.737814][ T28] audit: type=1400 audit(1617528429.049:8): avc: denied { execmem } for pid=5875 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 40.772218][ T5876] IPVS: ftp: loaded support on port[0] = 21 [ 41.458474][ T5873] can: request_module (can-proto-0) failed. [ 42.872548][ T5873] can: request_module (can-proto-0) failed. [ 42.884599][ T5873] can: request_module (can-proto-0) failed. [ 42.927757][ T28] audit: type=1400 audit(1617528431.240:9): avc: denied { create } for pid=5865 comm="syz-fuzzer" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 Warning: Permanently added '10.128.0.87' (ECDSA) to the list of known hosts. 2021/04/04 09:27:18 parsed 1 programs 2021/04/04 09:27:18 executed programs: 0 [ 49.847712][ T28] audit: type=1400 audit(1617528438.165:10): avc: denied { execmem } for pid=5959 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 49.921832][ T5962] IPVS: ftp: loaded support on port[0] = 21 [ 49.927002][ T5966] IPVS: ftp: loaded support on port[0] = 21 [ 49.934826][ T5963] IPVS: ftp: loaded support on port[0] = 21 [ 50.052458][ T5969] IPVS: ftp: loaded support on port[0] = 21 [ 50.078582][ T5980] IPVS: ftp: loaded support on port[0] = 21 [ 50.135930][ T5971] IPVS: ftp: loaded support on port[0] = 21 [ 50.279764][ T5962] chnl_net:caif_netlink_parms(): no params data found [ 50.321866][ T5966] chnl_net:caif_netlink_parms(): no params data found [ 50.476745][ T5963] chnl_net:caif_netlink_parms(): no params data found [ 50.494448][ T5966] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.505160][ T5966] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.516530][ T5966] device bridge_slave_0 entered promiscuous mode [ 50.534899][ T5966] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.543353][ T5966] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.555611][ T5966] device bridge_slave_1 entered promiscuous mode [ 50.612687][ T5962] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.621964][ T5962] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.631896][ T5962] device bridge_slave_0 entered promiscuous mode [ 50.641761][ T5962] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.650468][ T5962] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.661790][ T5962] device bridge_slave_1 entered promiscuous mode [ 50.681030][ T5980] chnl_net:caif_netlink_parms(): no params data found [ 50.749331][ T5962] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.761776][ T5966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.773757][ T5969] chnl_net:caif_netlink_parms(): no params data found [ 50.814859][ T5962] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.827835][ T5966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.858776][ T5980] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.869303][ T5980] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.879135][ T5980] device bridge_slave_0 entered promiscuous mode [ 50.889728][ T5963] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.899192][ T5963] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.909456][ T5963] device bridge_slave_0 entered promiscuous mode [ 50.934850][ T5962] team0: Port device team_slave_0 added [ 50.954786][ T5969] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.963820][ T5969] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.972840][ T5969] device bridge_slave_0 entered promiscuous mode [ 50.983391][ T5980] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.993904][ T5980] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.004456][ T5980] device bridge_slave_1 entered promiscuous mode [ 51.014660][ T5971] chnl_net:caif_netlink_parms(): no params data found [ 51.028013][ T5963] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.036103][ T5963] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.046912][ T5963] device bridge_slave_1 entered promiscuous mode [ 51.056460][ T5966] team0: Port device team_slave_0 added [ 51.065644][ T5962] team0: Port device team_slave_1 added [ 51.073837][ T5969] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.082475][ T5969] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.091498][ T5969] device bridge_slave_1 entered promiscuous mode [ 51.122730][ T5966] team0: Port device team_slave_1 added [ 51.152750][ T5980] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.190959][ T5963] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.207370][ T5980] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.218910][ T5969] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.259723][ T5966] device hsr_slave_0 entered promiscuous mode [ 51.328190][ T5966] device hsr_slave_1 entered promiscuous mode [ 51.408504][ T5962] device hsr_slave_0 entered promiscuous mode [ 51.446940][ T5962] device hsr_slave_1 entered promiscuous mode [ 51.496604][ T5962] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 51.505872][ T5962] Cannot create hsr debugfs directory [ 51.514397][ T5963] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.547853][ T5969] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.598137][ T5963] team0: Port device team_slave_0 added [ 51.607398][ T5969] team0: Port device team_slave_0 added [ 51.615196][ T5969] team0: Port device team_slave_1 added [ 51.638760][ T5971] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.646111][ T5971] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.655173][ T5971] device bridge_slave_0 entered promiscuous mode [ 51.667576][ T5980] team0: Port device team_slave_0 added [ 51.674741][ T5963] team0: Port device team_slave_1 added [ 51.689217][ T5971] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.696857][ T5971] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.704693][ T5971] device bridge_slave_1 entered promiscuous mode [ 51.718085][ T5980] team0: Port device team_slave_1 added [ 51.759478][ T5971] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.818951][ T5963] device hsr_slave_0 entered promiscuous mode [ 51.856685][ T5963] device hsr_slave_1 entered promiscuous mode [ 51.906380][ T5963] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 51.914841][ T5963] Cannot create hsr debugfs directory [ 51.957853][ T5969] device hsr_slave_0 entered promiscuous mode [ 52.006612][ T5969] device hsr_slave_1 entered promiscuous mode [ 52.046294][ T5969] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.056791][ T5969] Cannot create hsr debugfs directory [ 52.064723][ T5971] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.133194][ T5971] team0: Port device team_slave_0 added [ 52.141752][ T5962] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 52.228920][ T5980] device hsr_slave_0 entered promiscuous mode [ 52.296547][ T5980] device hsr_slave_1 entered promiscuous mode [ 52.336346][ T5980] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.347576][ T5980] Cannot create hsr debugfs directory [ 52.354850][ T5971] team0: Port device team_slave_1 added [ 52.365636][ T5962] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 52.413599][ T5962] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 52.483963][ T5962] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 52.558821][ T5971] device hsr_slave_0 entered promiscuous mode [ 52.606304][ T5971] device hsr_slave_1 entered promiscuous mode [ 52.656129][ T5971] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.668443][ T5971] Cannot create hsr debugfs directory [ 52.703434][ T5966] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 52.753364][ T5966] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 52.811252][ T5966] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 52.875645][ T5966] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 52.918820][ T5963] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 52.980561][ T5963] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 53.036668][ T5963] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 53.081332][ T5963] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 53.226811][ T5969] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 53.269289][ T5962] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.280844][ T5969] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 53.339235][ T5969] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 53.407989][ T5969] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 53.488100][ T6888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.503418][ T6888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.525321][ T5966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.538900][ T5980] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 53.587555][ T5980] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 53.648366][ T5980] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 53.708680][ T5980] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 53.758633][ T5962] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.774986][ T5966] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.801304][ T6878] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.810381][ T6878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.824014][ T5963] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.868682][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.881187][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.892111][ T2619] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.899846][ T2619] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.911936][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.922591][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.932248][ T2619] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.939734][ T2619] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.948628][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.958060][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.967591][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.977584][ T2619] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.985758][ T2619] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.994509][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.003467][ T2619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.014012][ T5971] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 54.097685][ T5963] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.110428][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.120199][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.129426][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.142031][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.154573][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.163035][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.172427][ T5971] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 54.216884][ T5971] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 54.257481][ T5971] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 54.327337][ T5980] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.338585][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.365326][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.374662][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.386784][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.397195][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.405547][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.414126][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.424236][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.436499][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.445570][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.454270][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.462058][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.470868][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.479920][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.489319][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.498448][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.507443][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.516901][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.527703][ T6878] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.536429][ T6878] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.586044][ T6903] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.597462][ T6903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.607466][ T6903] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.617527][ T6903] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.627080][ T6903] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.637557][ T6903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.647475][ T6903] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.657237][ T6903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.667861][ T6903] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.679931][ T6903] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.692058][ T6903] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.702516][ T6903] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.711274][ T6903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.723807][ T5962] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.739113][ T5962] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.752864][ T5966] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.767191][ T5966] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.784558][ T5969] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.802952][ T5980] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.815872][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.824890][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.836125][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.846047][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.855178][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.863748][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.873955][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.882968][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.892044][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.902182][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.933059][ T5963] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.963014][ T5969] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.977032][ T6878] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.984880][ T6878] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.996455][ T6878] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.004907][ T6878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.013496][ T6878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.023277][ T6878] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.033478][ T6878] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.041400][ T6878] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.058996][ T5962] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.069489][ T6878] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.079133][ T6878] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.088290][ T6878] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.117192][ T5966] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.137765][ T6912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.153619][ T6912] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.173619][ T6912] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.181381][ T6912] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.200577][ T6912] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.214602][ T6912] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.225737][ T6912] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.232992][ T6912] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.253579][ T5963] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.349691][ T5980] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 55.374712][ T5980] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.468376][ T5980] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.594531][ C1] hrtimer: interrupt took 60755 ns [ 160.399679][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 160.406630][ C0] rcu: 0-...!: (1 GPs behind) idle=f3e/1/0x4000000000000000 softirq=7597/7598 fqs=11 [ 160.417262][ C0] (t=10501 jiffies g=5877 q=830) [ 160.422562][ C0] rcu: rcu_preempt kthread starved for 10480 jiffies! g5877 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 160.435236][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 160.445912][ C0] rcu: RCU grace-period kthread stack dump: [ 160.452319][ C0] task:rcu_preempt state:R running task stack:28744 pid: 13 ppid: 2 flags:0x00004000 [ 160.463386][ C0] Call Trace: [ 160.466683][ C0] __schedule+0xf86/0x2180 [ 160.471557][ C0] ? io_schedule_timeout+0x150/0x150 [ 160.477024][ C0] ? __free_object+0xf80/0xf80 [ 160.481890][ C0] schedule+0xdb/0x280 [ 160.486063][ C0] schedule_timeout+0x133/0x220 [ 160.490999][ C0] ? usleep_range+0x160/0x160 [ 160.495679][ C0] ? __next_timer_interrupt+0x160/0x160 [ 160.501226][ C0] ? prepare_to_swait_exclusive+0x330/0x330 [ 160.507236][ C0] rcu_gp_kthread+0xcf6/0x2200 [ 160.512007][ C0] ? call_rcu+0x7d0/0x7d0 [ 160.516508][ C0] ? trace_hardirqs_on+0x2b/0x150 [ 160.522566][ C0] ? __kasan_check_read+0x11/0x20 [ 160.528295][ C0] ? __kthread_parkme+0xae/0x1c0 [ 160.533734][ C0] ? call_rcu+0x7d0/0x7d0 [ 160.538077][ C0] kthread+0x37d/0x460 [ 160.542245][ C0] ? __kthread_bind_mask+0xa0/0xa0 [ 160.547532][ C0] ret_from_fork+0x1f/0x30 [ 160.551992][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 160.558666][ C0] Sending NMI from CPU 0 to CPUs 1: [ 160.564147][ C1] NMI backtrace for cpu 1 [ 160.564150][ C1] CPU: 1 PID: 6921 Comm: syz-executor.1 Not tainted 5.12.0-rc5-syzkaller #0 [ 160.564152][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 160.564154][ C1] RIP: 0010:__lock_acquire+0x310/0x53d0 [ 160.564156][ C1] Code: 03 80 3c 02 00 0f 85 81 37 00 00 48 8b 85 48 ff ff ff 48 8d b3 7c 09 00 00 45 31 f6 48 89 f2 48 89 b5 30 ff ff ff 49 89 47 18 <65> 8b 05 a1 94 ab 7e 85 c0 48 b8 00 00 00 00 00 fc ff df 41 0f 95 [ 160.564159][ C1] RSP: 0000:ffffc90003ed7930 EFLAGS: 00000046 [ 160.564163][ C1] RAX: 0000000000000000 RBX: ffff888101192340 RCX: 0000000000000001 [ 160.564164][ C1] RDX: ffff888101192cbc RSI: ffff888101192cbc RDI: ffff888101192ce8 [ 160.564166][ C1] RBP: ffffc90003ed7a48 R08: 0000000000000001 R09: 0000000000000000 [ 160.564168][ C1] R10: 0000000000000000 R11: ffff888101192b40 R12: 0000000000000109 [ 160.564169][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888101192cd8 [ 160.564171][ C1] FS: 00007f052481b700(0000) GS:ffff8881f6700000(0000) knlGS:0000000000000000 [ 160.564173][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 160.564174][ C1] CR2: 000000002498f890 CR3: 000000011cb13006 CR4: 00000000001706e0 [ 160.564176][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 160.564177][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 160.564179][ C1] Call Trace: [ 160.564180][ C1] ? stack_trace_consume_entry+0x170/0x170 [ 160.564181][ C1] ? kasan_save_stack+0x23/0x50 [ 160.564182][ C1] ? lockdep_hardirqs_on_prepare+0x450/0x450 [ 160.564184][ C1] ? __kasan_slab_free+0xb1/0xe0 [ 160.564185][ C1] ? __this_cpu_preempt_check+0x13/0x20 [ 160.564186][ C1] ? lock_is_held_type+0x100/0x140 [ 160.564187][ C1] lock_acquire+0x22a/0x8c0 [ 160.564188][ C1] ? __might_fault+0x91/0x160 [ 160.564190][ C1] ? lock_release+0x970/0x970 [ 160.564191][ C1] ? lock_is_held_type+0x100/0x140 [ 160.564192][ C1] __might_fault+0xef/0x160 [ 160.564193][ C1] ? __might_fault+0x91/0x160 [ 160.564194][ C1] copy_fpstate_to_sigframe+0x62d/0x830 [ 160.564196][ C1] ? __fpu__restore_sig+0x10d0/0x10d0 [ 160.564197][ C1] ? _raw_spin_unlock_irq+0x23/0x90 [ 160.564198][ C1] ? __this_cpu_preempt_check+0x13/0x20 [ 160.564200][ C1] ? lockdep_hardirqs_on+0x59/0x100 [ 160.564201][ C1] ? _raw_spin_unlock_irq+0x23/0x90 [ 160.564202][ C1] get_sigframe.constprop.0.isra.0+0x413/0x8d0 [ 160.564203][ C1] ? get_signal+0x14d5/0x1c70 [ 160.564204][ C1] ? x32_copy_siginfo_to_user+0x170/0x170 [ 160.564206][ C1] arch_do_signal_or_restart+0xe1a/0x2620 [ 160.564207][ C1] ? check_preemption_disabled+0x3d/0xe0 [ 160.564208][ C1] ? __bad_area_nosemaphore+0x2fd/0x3b0 [ 160.564210][ C1] ? copy_siginfo_to_user32+0xa0/0xa0 [ 160.564211][ C1] ? __bad_area_nosemaphore+0x2fd/0x3b0 [ 160.564212][ C1] ? exit_to_user_mode_prepare+0xb6/0x250 [ 160.564213][ C1] ? __this_cpu_preempt_check+0x13/0x20 [ 160.564215][ C1] ? lockdep_hardirqs_on+0x59/0x100 [ 160.564216][ C1] ? exit_to_user_mode_prepare+0xb6/0x250 [ 160.564217][ C1] exit_to_user_mode_prepare+0x1db/0x250 [ 160.564218][ C1] irqentry_exit_to_user_mode+0x9/0x30 [ 160.564220][ C1] irqentry_exit+0x6c/0xb0 [ 160.564221][ C1] exc_page_fault+0x90/0xe0 [ 160.564222][ C1] ? asm_exc_page_fault+0x8/0x30 [ 160.564223][ C1] asm_exc_page_fault+0x1e/0x30 [ 160.564225][ C1] RIP: 0033:0x40a497 [ 160.564226][ C1] Code: c7 44 24 18 00 00 00 00 8b 7c 24 20 31 d2 be 01 4c 00 00 31 c0 e8 59 7b 05 00 e9 3b fe ff ff 48 6b 44 24 10 18 48 03 44 24 28 <48> 8b 48 10 48 8b 50 08 48 8b 30 8b 7c 24 1c e8 25 b3 00 00 89 44 [ 160.564229][ C1] RSP: 002b:00007f052481afc0 EFLAGS: 00010202 [ 160.564231][ C1] RAX: 000000002498f880 RBX: 000000000052bf00 RCX: 0000000000415827 [ 160.564233][ C1] RDX: 3489d4556223a246 RSI: 0000000000000000 RDI: 00007f052481b5f0 [ 160.564235][ C1] RBP: 0000000000000007 R08: 00007f052481afc0 R09: 0000000000000007 [ 160.564236][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 00000000ffffffff [ 160.564238][ C1] R13: 00000000004fd358 R14: 00000000004b69b5 R15: 00007f052481b6bc [ 160.564964][ C0] NMI backtrace for cpu 0 [ 160.985171][ C0] CPU: 0 PID: 6914 Comm: syz-executor.3 Not tainted 5.12.0-rc5-syzkaller #0 [ 160.994260][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 161.004706][ C0] Call Trace: [ 161.008082][ C0] [ 161.011167][ C0] dump_stack+0x114/0x14e [ 161.015685][ C0] nmi_cpu_backtrace.cold+0x30/0x9c [ 161.021325][ C0] ? lapic_can_unplug_cpu+0x80/0x80 [ 161.027177][ C0] nmi_trigger_cpumask_backtrace+0x120/0x170 [ 161.033243][ C0] arch_trigger_cpumask_backtrace+0x14/0x20 [ 161.039132][ C0] rcu_dump_cpu_stacks+0x1cc/0x252 [ 161.044339][ C0] rcu_sched_clock_irq.cold+0x67c/0x11b6 [ 161.050090][ C0] ? rcutree_dead_cpu+0x20/0x20 [ 161.055095][ C0] ? __this_cpu_preempt_check+0x13/0x20 [ 161.060916][ C0] ? lock_is_held_type+0xdf/0x140 [ 161.066304][ C0] ? __this_cpu_preempt_check+0x13/0x20 [ 161.072394][ C0] ? __raise_softirq_irqoff+0x97/0x1e0 [ 161.078205][ C0] update_process_times+0x139/0x1b0 [ 161.083662][ C0] tick_sched_handle+0x77/0x140 [ 161.088514][ C0] ? get_cpu_iowait_time_us+0x330/0x330 [ 161.094257][ C0] tick_sched_timer+0x142/0x230 [ 161.099322][ C0] __hrtimer_run_queues+0x1b7/0xc30 [ 161.104617][ C0] ? hrtimer_sleeper_start_expires+0x90/0x90 [ 161.111219][ C0] ? ktime_get_update_offsets_now+0x47/0x240 [ 161.117287][ C0] ? ktime_get_update_offsets_now+0x8c/0x240 [ 161.123472][ C0] hrtimer_interrupt+0x2f3/0x950 [ 161.128768][ C0] __sysvec_apic_timer_interrupt+0x143/0x530 [ 161.135256][ C0] sysvec_apic_timer_interrupt+0x98/0xc0 [ 161.141067][ C0] [ 161.144011][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 161.150511][ C0] RIP: 0010:_raw_spin_unlock_irq+0x4f/0x90 [ 161.156802][ C0] Code: c0 40 b9 75 89 48 ba 00 00 00 00 00 fc ff df 48 c1 e8 03 80 3c 10 00 75 35 48 83 3d 6a ae d2 01 00 74 22 fb 66 0f 1f 44 00 00 01 00 00 00 e8 d7 4e a8 f9 65 8b 05 90 f3 5e 78 85 c0 74 08 4c [ 161.176921][ C0] RSP: 0000:ffffc90003e77c80 EFLAGS: 00000282 [ 161.183174][ C0] RAX: 1ffffffff12eb728 RBX: dffffc0000000000 RCX: 1ffffffff14fdd61 [ 161.191941][ C0] RDX: dffffc0000000000 RSI: ffffffff880b2320 RDI: ffffffff8850c620 [ 161.200180][ C0] RBP: ffffc90003e77c88 R08: 0000000000000001 R09: 0000000000000001 [ 161.208614][ C0] R10: ffffed1021612978 R11: ffff88811bee8980 R12: ffff88810b094bc0 [ 161.216861][ C0] R13: 000000000000000b R14: ffff88810b094bc0 R15: ffff88810b094d01 [ 161.227048][ C0] get_signal+0x14d5/0x1c70 [ 161.231957][ C0] ? _raw_spin_unlock_irqrestore+0x31/0x8b [ 161.238105][ C0] arch_do_signal_or_restart+0x2b3/0x2620 [ 161.244055][ C0] ? check_preemption_disabled+0x3d/0xe0 [ 161.250048][ C0] ? __bad_area_nosemaphore+0x2fd/0x3b0 [ 161.255603][ C0] ? __this_cpu_preempt_check+0x13/0x20 [ 161.261318][ C0] ? lockdep_hardirqs_off+0xa1/0xe0 [ 161.266689][ C0] ? copy_siginfo_to_user32+0xa0/0xa0 [ 161.272585][ C0] ? __bad_area_nosemaphore+0x2fd/0x3b0 [ 161.278311][ C0] ? exit_to_user_mode_prepare+0xb6/0x250 [ 161.284028][ C0] ? __this_cpu_preempt_check+0x13/0x20 [ 161.289831][ C0] ? lockdep_hardirqs_on+0x59/0x100 [ 161.295473][ C0] ? exit_to_user_mode_prepare+0xb6/0x250 [ 161.301216][ C0] exit_to_user_mode_prepare+0x1db/0x250 [ 161.307186][ C0] irqentry_exit_to_user_mode+0x9/0x30 [ 161.312923][ C0] irqentry_exit+0x6c/0xb0 [ 161.317511][ C0] exc_page_fault+0x90/0xe0 [ 161.322701][ C0] ? asm_exc_page_fault+0x8/0x30 [ 161.328263][ C0] asm_exc_page_fault+0x1e/0x30 [ 161.333392][ C0] RIP: 0033:0x40a497 [ 161.337301][ C0] Code: c7 44 24 18 00 00 00 00 8b 7c 24 20 31 d2 be 01 4c 00 00 31 c0 e8 59 7b 05 00 e9 3b fe ff ff 48 6b 44 24 10 18 48 03 44 24 28 <48> 8b 48 10 48 8b 50 08 48 8b 30 8b 7c 24 1c e8 25 b3 00 00 89 44 [ 161.357688][ C0] RSP: 002b:00007f96ea75dfc0 EFLAGS: 00010206 [ 161.364144][ C0] RAX: 000000002496b628 RBX: 000000000052bf00 RCX: 0000000000415827 [ 161.372467][ C0] RDX: c4a808f62c5fa5ba RSI: 0000000000000000 RDI: 00007f96ea75e5f0 [ 161.381641][ C0] RBP: 0000000000000007 R08: 00007f96ea75dfc0 R09: 0000000000000007 [ 161.390680][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 00000000ffffffff [ 161.398877][ C0] R13: 00000000004fd358 R14: 00000000004b69b5 R15: 00007f96ea75e6bc [ 161.407229][ C0] sched: RT throttling activated