[ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.25' (ECDSA) to the list of known hosts. syzkaller login: [ 523.529119][ T6958] IPVS: ftp: loaded support on port[0] = 21 [ 523.617845][ T6958] chnl_net:caif_netlink_parms(): no params data found [ 523.665956][ T6958] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.673252][ T6958] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.681091][ T6958] device bridge_slave_0 entered promiscuous mode [ 523.691722][ T6958] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.699891][ T6958] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.708053][ T6958] device bridge_slave_1 entered promiscuous mode [ 523.727659][ T6958] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 523.738480][ T6958] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 523.760004][ T6958] team0: Port device team_slave_0 added [ 523.768091][ T6958] team0: Port device team_slave_1 added [ 523.785483][ T6958] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 523.792520][ T6958] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 523.823358][ T6958] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 523.836199][ T6958] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 523.843683][ T6958] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 523.870099][ T6958] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 523.955632][ T6958] device hsr_slave_0 entered promiscuous mode [ 524.004226][ T6958] device hsr_slave_1 entered promiscuous mode [ 524.146272][ T6958] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 524.196019][ T6958] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 524.235872][ T6958] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 524.285850][ T6958] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 524.338925][ T6958] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.346096][ T6958] bridge0: port 2(bridge_slave_1) entered forwarding state [ 524.353983][ T6958] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.361052][ T6958] bridge0: port 1(bridge_slave_0) entered forwarding state [ 524.402722][ T6958] 8021q: adding VLAN 0 to HW filter on device bond0 [ 524.418123][ T2622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 524.429157][ T2622] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.437590][ T2622] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.446120][ T2622] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 524.459340][ T6958] 8021q: adding VLAN 0 to HW filter on device team0 [ 524.471380][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 524.480876][ T3567] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.488185][ T3567] bridge0: port 1(bridge_slave_0) entered forwarding state [ 524.501980][ T7169] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 524.510872][ T7169] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.518015][ T7169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 524.536650][ T2622] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 524.545680][ T2622] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 524.557774][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 524.569201][ T2622] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 524.580902][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 524.593576][ T6958] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 524.612352][ T2622] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 524.620079][ T2622] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 524.634457][ T6958] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 524.652458][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 524.663090][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 524.683702][ T7088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 524.692280][ T7088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 524.702310][ T6958] device veth0_vlan entered promiscuous mode [ 524.711134][ T7088] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 524.720017][ T7088] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 524.736488][ T6958] device veth1_vlan entered promiscuous mode [ 524.758392][ T2622] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 524.766613][ T2622] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 524.774989][ T2622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 524.783637][ T2622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 524.794447][ T6958] device veth0_macvtap entered promiscuous mode [ 524.806085][ T6958] device veth1_macvtap entered promiscuous mode [ 524.822550][ T6958] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 524.830520][ T7088] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 524.840103][ T7088] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 524.848561][ T7088] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 524.858160][ T7088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 524.870526][ T6958] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 524.878211][ T2622] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 524.887886][ T2622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready executing program [ 525.068468][ C1] hrtimer: interrupt took 6305559 ns [ 747.056294][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 747.063180][ C1] rcu: 1-...!: (1 GPs behind) idle=91e/1/0x4000000000000000 softirq=10105/10107 fqs=1 [ 747.073190][ C1] (t=18319 jiffies g=8905 q=457) [ 747.074486][ T1152] INFO: task kworker/1:28:2622 blocked for more than 183 seconds. [ 747.078210][ C1] NMI backtrace for cpu 1 [ 747.078300][ C1] CPU: 1 PID: 4008 Comm: systemd-journal Not tainted 5.8.0-rc6-syzkaller #0 [ 747.099146][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 747.109172][ C1] Call Trace: [ 747.112436][ C1] [ 747.115288][ C1] dump_stack+0x18f/0x20d [ 747.119593][ C1] nmi_cpu_backtrace.cold+0x70/0xb1 [ 747.124785][ C1] ? lapic_can_unplug_cpu.cold+0x38/0x38 [ 747.130406][ C1] nmi_trigger_cpumask_backtrace+0x1b3/0x223 [ 747.136381][ C1] rcu_dump_cpu_stacks+0x194/0x1cf [ 747.141468][ C1] rcu_sched_clock_irq.cold+0x5b3/0xccc [ 747.147089][ C1] ? lock_is_held_type+0xb0/0xe0 [ 747.152022][ C1] ? rcutree_dead_cpu+0x10/0x10 [ 747.156862][ C1] ? lockdep_hardirqs_off+0x66/0xa0 [ 747.162032][ C1] ? trace_hardirqs_off+0x27/0x210 [ 747.167122][ C1] update_process_times+0x25/0x60 [ 747.172175][ C1] tick_sched_handle+0x9b/0x180 [ 747.177004][ C1] tick_sched_timer+0x108/0x290 [ 747.181840][ C1] __hrtimer_run_queues+0x1d5/0xfc0 [ 747.187234][ C1] ? can_stop_idle_tick+0x290/0x290 [ 747.192540][ C1] ? hrtimer_sleeper_start_expires+0x80/0x80 [ 747.198521][ C1] ? ktime_get_update_offsets_now+0x1c4/0x250 [ 747.204634][ C1] hrtimer_interrupt+0x32a/0x930 [ 747.209564][ C1] __sysvec_apic_timer_interrupt+0x142/0x5e0 [ 747.215674][ C1] asm_call_on_stack+0xf/0x20 [ 747.220429][ C1] [ 747.223365][ C1] sysvec_apic_timer_interrupt+0xe0/0x120 [ 747.229076][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 747.235039][ C1] RIP: 0010:format_decode+0x0/0xad0 [ 747.240214][ C1] Code: c7 c7 10 05 af 8a be 10 00 00 00 e8 5a c3 46 00 48 c7 c7 20 78 0d 8a e9 6e f2 e2 fd 0f 1f 40 00 66 2e 0f 1f 84 00 00 00 00 00 <41> 57 41 56 41 55 41 54 55 48 89 f5 53 48 bb 00 00 00 00 00 fc ff [ 747.262059][ C1] RSP: 0018:ffffc90001077a10 EFLAGS: 00000293 [ 747.268102][ C1] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffffffff83b0a497 [ 747.276050][ C1] RDX: ffff888093224040 RSI: ffffc90001077a80 RDI: ffffffff884e6293 [ 747.283994][ C1] RBP: ffffffff884e6293 R08: 0000000000000001 R09: ffff8880952a63d1 [ 747.291966][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880952a63d2 [ 747.299922][ C1] R13: ffffffff884e6293 R14: 0000000000000025 R15: ffffc90001077b30 [ 747.307997][ C1] ? vsnprintf+0x257/0x14f0 [ 747.312492][ C1] vsnprintf+0x155/0x14f0 [ 747.316799][ C1] ? pointer+0x970/0x970 [ 747.321035][ C1] seq_printf+0x195/0x240 [ 747.325340][ C1] ? seq_file_path+0x30/0x30 [ 747.329907][ C1] ? seq_puts+0xb4/0x130 [ 747.334131][ C1] proc_pid_status+0x1c6d/0x24b0 [ 747.339320][ C1] ? render_sigset_t+0x180/0x180 [ 747.344233][ C1] ? get_pid_task+0x116/0x200 [ 747.348886][ C1] ? lock_downgrade+0x820/0x820 [ 747.353726][ C1] ? lock_is_held_type+0xb0/0xe0 [ 747.358640][ C1] proc_single_show+0x116/0x1e0 [ 747.363462][ C1] seq_read+0x432/0x1070 [ 747.367682][ C1] ? seq_hex_dump+0x440/0x440 [ 747.372332][ C1] vfs_read+0x1df/0x520 [ 747.376479][ C1] ksys_read+0x12d/0x250 [ 747.380711][ C1] ? vfs_write+0x6b0/0x6b0 [ 747.385104][ C1] do_syscall_64+0x60/0xe0 [ 747.389607][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 747.395475][ C1] RIP: 0033:0x7f0fc43d9910 [ 747.399882][ C1] Code: Bad RIP value. [ 747.403922][ C1] RSP: 002b:00007ffdcb193978 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 747.412320][ C1] RAX: ffffffffffffffda RBX: 000055b1476b96f0 RCX: 00007f0fc43d9910 [ 747.420279][ C1] RDX: 0000000000000800 RSI: 000055b1476b8b00 RDI: 0000000000000013 [ 747.429390][ C1] RBP: 00007f0fc4694440 R08: 00007f0fc4697fc8 R09: 0000000000000410 [ 747.437344][ C1] R10: 000055b1476b96f0 R11: 0000000000000246 R12: 0000000000000800 [ 747.445309][ C1] R13: 0000000000000d68 R14: 000055b1476b8b00 R15: 00007f0fc4693900 [ 747.479443][ T1152] Not tainted 5.8.0-rc6-syzkaller #0 [ 747.485567][ T1152] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 747.495525][ T1152] kworker/1:28 D26904 2622 2 0x00004000 [ 747.502108][ T1152] Workqueue: events free_ipc [ 747.506690][ T1152] Call Trace: [ 747.509983][ T1152] __schedule+0x91f/0x2250 [ 747.514688][ T1152] ? io_schedule_timeout+0x140/0x140 [ 747.519975][ T1152] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 747.526220][ T1152] ? trace_hardirqs_on+0x5f/0x220 [ 747.531454][ T1152] ? lockdep_hardirqs_on+0x6a/0xe0 [ 747.536656][ T1152] schedule+0xd0/0x2a0 [ 747.540964][ T1152] schedule_timeout+0x1d8/0x250 [ 747.545815][ T1152] ? usleep_range+0x170/0x170 [ 747.550491][ T1152] ? mark_held_locks+0x9f/0xe0 [ 747.555688][ T1152] ? _raw_spin_unlock_irq+0x1f/0x80 [ 747.561127][ T1152] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 747.567106][ T1152] ? trace_hardirqs_on+0x5f/0x220 [ 747.572409][ T1152] wait_for_completion+0x163/0x260 [ 747.577552][ T1152] ? wait_for_completion_interruptible+0x2e0/0x2e0 [ 747.584375][ T1152] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 747.590361][ T1152] ? lockdep_hardirqs_on+0x6a/0xe0 [ 747.595717][ T1152] __wait_rcu_gp+0x217/0x2d0 [ 747.600308][ T1152] ? lock_is_held_type+0xb0/0xe0 [ 747.605496][ T1152] synchronize_rcu+0x10a/0x180 [ 747.610261][ T1152] ? synchronize_rcu_expedited+0x5f0/0x5f0 [ 747.616302][ T1152] ? rcu_qs+0x110/0x110 [ 747.620461][ T1152] ? process_one_work+0x85f/0x1670 [ 747.625850][ T1152] ? rcu_tasks_pregp_step+0x10/0x10 [ 747.631280][ T1152] ? _raw_spin_unlock_irq+0x1f/0x80 [ 747.636479][ T1152] ? _raw_spin_unlock_irq+0x1f/0x80 [ 747.641946][ T1152] kern_unmount+0x67/0xe0 [ 747.646277][ T1152] free_ipc+0xbe/0x1b0 [ 747.650346][ T1152] process_one_work+0x94c/0x1670 [ 747.655648][ T1152] ? lock_release+0x8d0/0x8d0 [ 747.660334][ T1152] ? pwq_dec_nr_in_flight+0x2d0/0x2d0 [ 747.665954][ T1152] ? rwlock_bug.part.0+0x90/0x90 [ 747.671112][ T1152] ? lockdep_hardirqs_off+0x66/0xa0 [ 747.676316][ T1152] worker_thread+0x64c/0x1120 [ 747.681264][ T1152] ? process_one_work+0x1670/0x1670 [ 747.686467][ T1152] kthread+0x3b5/0x4a0 [ 747.690539][ T1152] ? __kthread_bind_mask+0xc0/0xc0 [ 747.696153][ T1152] ? __kthread_bind_mask+0xc0/0xc0 [ 747.701583][ T1152] ret_from_fork+0x1f/0x30 [ 747.706065][ T1152] INFO: task syz-executor576:6958 blocked for more than 183 seconds. [ 747.714407][ T1152] Not tainted 5.8.0-rc6-syzkaller #0 [ 747.720208][ T1152] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 747.729196][ T1152] syz-executor576 D23664 6958 6957 0x80004002 [ 747.735892][ T1152] Call Trace: [ 747.739196][ T1152] __schedule+0x91f/0x2250 [ 747.743903][ T1152] ? io_schedule_timeout+0x140/0x140 [ 747.749202][ T1152] schedule+0xd0/0x2a0 [ 747.753534][ T1152] schedule_timeout+0x1d8/0x250 [ 747.758384][ T1152] ? usleep_range+0x170/0x170 [ 747.763312][ T1152] ? mark_held_locks+0x9f/0xe0 [ 747.768078][ T1152] ? _raw_spin_unlock_irq+0x1f/0x80 [ 747.773513][ T1152] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 747.779576][ T1152] ? trace_hardirqs_on+0x5f/0x220 [ 747.784849][ T1152] wait_for_completion+0x163/0x260 [ 747.789989][ T1152] ? wait_for_completion_interruptible+0x2e0/0x2e0 [ 747.796757][ T1152] ? lock_is_held_type+0xb0/0xe0 [ 747.801927][ T1152] rcu_barrier+0x2d1/0x4a0 [ 747.806349][ T1152] ? __tun_detach+0x1310/0x1310 [ 747.811509][ T1152] netdev_run_todo+0x100/0xac0 [ 747.816309][ T1152] ? sk_destruct+0xbd/0xe0 [ 747.820990][ T1152] ? __sk_free+0xef/0x3d0 [ 747.825326][ T1152] ? default_device_exit_batch+0x3d0/0x3d0 [ 747.831380][ T1152] ? lock_is_held_type+0xb0/0xe0 [ 747.836358][ T1152] ? __tun_detach+0x1310/0x1310 [ 747.841453][ T1152] tun_chr_close+0xf5/0x180 [ 747.845957][ T1152] __fput+0x33c/0x880 [ 747.849942][ T1152] task_work_run+0xdd/0x190 [ 747.854693][ T1152] do_exit+0xb72/0x2a40 [ 747.858853][ T1152] ? mm_update_next_owner+0x7a0/0x7a0 [ 747.864488][ T1152] ? lock_is_held_type+0xb0/0xe0 [ 747.869516][ T1152] do_group_exit+0x125/0x310 [ 747.874337][ T1152] __x64_sys_exit_group+0x3a/0x50 [ 747.879361][ T1152] do_syscall_64+0x60/0xe0 [ 747.884020][ T1152] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 747.889908][ T1152] RIP: 0033:0x442958 [ 747.894099][ T1152] Code: Bad RIP value. [ 747.898163][ T1152] RSP: 002b:00007ffd3909b368 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 747.906811][ T1152] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000442958 [ 747.915019][ T1152] RDX: 0000000000000001 RSI: 000000000000003c RDI: 0000000000000001 [ 747.923221][ T1152] RBP: 00000000004c9090 R08: 00000000000000e7 R09: ffffffffffffffd0 [ 747.931509][ T1152] R10: 00000000bb1414ac R11: 0000000000000246 R12: 0000000000000001 [ 747.939477][ T1152] R13: 00000000006dba60 R14: 0000000000000000 R15: 0000000000000000 [ 747.947982][ T1152] [ 747.947982][ T1152] Showing all locks held in the system: [ 747.956032][ T1152] 1 lock held by khungtaskd/1152: [ 747.961972][ T1152] #0: ffffffff89bc11c0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 747.972456][ T1152] 1 lock held by khugepaged/1159: [ 747.977471][ T1152] #0: ffffffff89c44fe8 (lock#4){+.+.}-{3:3}, at: lru_add_drain_all+0x59/0x590 [ 747.986694][ T1152] 4 locks held by kworker/u4:4/2504: [ 747.992173][ T1152] #0: ffff88821adf6138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x82b/0x1670 [ 748.002990][ T1152] #1: ffffc90007b47da8 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x85f/0x1670 [ 748.015024][ T1152] #2: ffff8880987340e0 (&type->s_umount_key#38){++++}-{3:3}, at: trylock_super+0x1d/0x100 [ 748.025235][ T1152] #3: ffff888098736a38 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: do_writepages+0xec/0x290 [ 748.035619][ T1152] 2 locks held by kworker/1:28/2622: [ 748.041097][ T1152] #0: ffff8880aa026d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x82b/0x1670 [ 748.051654][ T1152] #1: ffffc90008107da8 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x85f/0x1670 [ 748.061540][ T1152] 1 lock held by systemd-journal/4008: [ 748.066991][ T1152] 1 lock held by in:imklog/6643: [ 748.072138][ T1152] #0: ffff8880a6b21b70 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe9/0x100 [ 748.081491][ T1152] 1 lock held by syz-executor576/6958: [ 748.086940][ T1152] #0: ffffffff89bc5728 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x44/0x4a0 [ 748.097080][ T1152] 1 lock held by run-parts/7176: [ 748.102222][ T1152] #0: ffff888087748448 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: iterate_dir+0xd2/0x5d0 [ 748.112496][ T1152] [ 748.114822][ T1152] ============================================= [ 748.114822][ T1152] [ 748.123573][ T1152] NMI backtrace for cpu 0 [ 748.127900][ T1152] CPU: 0 PID: 1152 Comm: khungtaskd Not tainted 5.8.0-rc6-syzkaller #0 [ 748.136144][ T1152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 748.146187][ T1152] Call Trace: [ 748.149475][ T1152] dump_stack+0x18f/0x20d [ 748.153799][ T1152] nmi_cpu_backtrace.cold+0x70/0xb1 [ 748.158994][ T1152] ? lapic_can_unplug_cpu.cold+0x38/0x38 [ 748.164715][ T1152] nmi_trigger_cpumask_backtrace+0x1b3/0x223 [ 748.170699][ T1152] watchdog+0xd7d/0x1000 [ 748.174961][ T1152] ? reset_hung_task_detector+0x30/0x30 [ 748.180589][ T1152] kthread+0x3b5/0x4a0 [ 748.184649][ T1152] ? __kthread_bind_mask+0xc0/0xc0 [ 748.189751][ T1152] ? __kthread_bind_mask+0xc0/0xc0 [ 748.194859][ T1152] ret_from_fork+0x1f/0x30 [ 748.199346][ T1152] Sending NMI from CPU 0 to CPUs 1: [ 748.205692][ T1152] NMI backtrace for cpu 1 [ 748.205700][ T1152] CPU: 1 PID: 4008 Comm: systemd-journal Not tainted 5.8.0-rc6-syzkaller #0 [ 748.205709][ T1152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 748.205715][ T1152] RIP: 0010:check_preemption_disabled+0x2a/0x130 [ 748.205730][ T1152] Code: 41 56 41 55 49 89 f5 41 54 55 48 89 fd 53 0f 1f 44 00 00 65 44 8b 25 75 bc 1b 78 65 8b 1d ce 27 1c 78 81 e3 ff ff ff 7f 31 ff <89> de 0f 1f 44 00 00 85 db 74 11 0f 1f 44 00 00 44 89 e0 5b 5d 41 [ 748.205736][ T1152] RSP: 0018:ffffc90000da8d90 EFLAGS: 00000046 [ 748.205746][ T1152] RAX: 0000000000000001 RBX: 0000000000010002 RCX: ffffffff8164138c [ 748.205753][ T1152] RDX: ffff888093224040 RSI: ffffffff889390e0 RDI: 0000000000000000 [ 748.205760][ T1152] RBP: ffffffff88939120 R08: 0000000000000000 R09: ffffffff8aaed24f [ 748.205767][ T1152] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000001 [ 748.205773][ T1152] R13: ffffffff889390e0 R14: ffff888092abc340 R15: dffffc0000000000 [ 748.205781][ T1152] FS: 00007f0fc511d8c0(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 748.205788][ T1152] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 748.205794][ T1152] CR2: 00007f0fc24be280 CR3: 000000009370b000 CR4: 00000000001406e0 [ 748.205801][ T1152] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 748.205808][ T1152] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 748.205812][ T1152] Call Trace: [ 748.205815][ T1152] [ 748.205819][ T1152] rcu_is_watching+0x11/0xb0 [ 748.205824][ T1152] rcu_read_lock_sched_held+0x1c/0xb0 [ 748.205829][ T1152] __hrtimer_run_queues+0xd13/0xfc0 [ 748.205835][ T1152] ? hrtimer_sleeper_start_expires+0x80/0x80 [ 748.205840][ T1152] ? ktime_get_update_offsets_now+0x1c4/0x250 [ 748.205845][ T1152] hrtimer_interrupt+0x32a/0x930 [ 748.205851][ T1152] __sysvec_apic_timer_interrupt+0x142/0x5e0 [ 748.205855][ T1152] asm_call_on_stack+0xf/0x20 [ 748.205858][ T1152] [ 748.205864][ T1152] sysvec_apic_timer_interrupt+0xe0/0x120 [ 748.205869][ T1152] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 748.205874][ T1152] RIP: 0010:format_decode+0x0/0xad0 [ 748.205890][ T1152] Code: c7 c7 10 05 af 8a be 10 00 00 00 e8 5a c3 46 00 48 c7 c7 20 78 0d 8a e9 6e f2 e2 fd 0f 1f 40 00 66 2e 0f 1f 84 00 00 00 00 00 <41> 57 41 56 41 55 41 54 55 48 89 f5 53 48 bb 00 00 00 00 00 fc ff [ 748.205895][ T1152] RSP: 0018:ffffc90001077a10 EFLAGS: 00000293 [ 748.205905][ T1152] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffffffff83b0a497 [ 748.205912][ T1152] RDX: ffff888093224040 RSI: ffffc90001077a80 RDI: ffffffff884e6293 [ 748.205919][ T1152] RBP: ffffffff884e6293 R08: 0000000000000001 R09: ffff8880952a63d1 [ 748.205926][ T1152] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880952a63d2 [ 748.205933][ T1152] R13: ffffffff884e6293 R14: 0000000000000025 R15: ffffc90001077b30 [ 748.205937][ T1152] ? vsnprintf+0x257/0x14f0 [ 748.205942][ T1152] vsnprintf+0x155/0x14f0 [ 748.205946][ T1152] ? pointer+0x970/0x970 [ 748.205950][ T1152] seq_printf+0x195/0x240 [ 748.205955][ T1152] ? seq_file_path+0x30/0x30 [ 748.205959][ T1152] ? seq_puts+0xb4/0x130 [ 748.205964][ T1152] proc_pid_status+0x1c6d/0x24b0 [ 748.205968][ T1152] ? render_sigset_t+0x180/0x180 [ 748.205973][ T1152] ? get_pid_task+0x116/0x200 [ 748.205978][ T1152] ? lock_downgrade+0x820/0x820 [ 748.205982][ T1152] ? lock_is_held_type+0xb0/0xe0 [ 748.205987][ T1152] proc_single_show+0x116/0x1e0 [ 748.205991][ T1152] seq_read+0x432/0x1070 [ 748.205996][ T1152] ? seq_hex_dump+0x440/0x440 [ 748.206000][ T1152] vfs_read+0x1df/0x520 [ 748.206004][ T1152] ksys_read+0x12d/0x250 [ 748.206008][ T1152] ? vfs_write+0x6b0/0x6b0 [ 748.206013][ T1152] do_syscall_64+0x60/0xe0 [ 748.206018][ T1152] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 748.206023][ T1152] RIP: 0033:0x7f0fc43d9910 [ 748.206027][ T1152] Code: Bad RIP value. [ 748.206032][ T1152] RSP: 002b:00007ffdcb193978 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 748.206044][ T1152] RAX: ffffffffffffffda RBX: 000055b1476b96f0 RCX: 00007f0fc43d9910 [ 748.206051][ T1152] RDX: 0000000000000800 RSI: 000055b1476b8b00 RDI: 0000000000000013 [ 748.206058][ T1152] RBP: 00007f0fc4694440 R08: 00007f0fc4697fc8 R09: 0000000000000410 [ 748.206065][ T1152] R10: 000055b1476b96f0 R11: 0000000000000246 R12: 0000000000000800 [ 748.206072][ T1152] R13: 0000000000000d68 R14: 000055b1476b8b00 R15: 00007f0fc4693900 [ 748.208721][ T1152] Kernel panic - not syncing: hung_task: blocked tasks [ 748.628790][ T1152] CPU: 0 PID: 1152 Comm: khungtaskd Not tainted 5.8.0-rc6-syzkaller #0 [ 748.637013][ T1152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 748.647058][ T1152] Call Trace: [ 748.650348][ T1152] dump_stack+0x18f/0x20d [ 748.654677][ T1152] panic+0x2e3/0x75c [ 748.658567][ T1152] ? __warn_printk+0xf3/0xf3 [ 748.663157][ T1152] ? lapic_can_unplug_cpu.cold+0x38/0x38 [ 748.668783][ T1152] ? preempt_schedule_thunk+0x16/0x18 [ 748.674150][ T1152] ? watchdog.cold+0x5/0x16b [ 748.678729][ T1152] ? watchdog+0xa82/0x1000 [ 748.683140][ T1152] watchdog.cold+0x16/0x16b [ 748.687640][ T1152] ? reset_hung_task_detector+0x30/0x30 [ 748.693177][ T1152] kthread+0x3b5/0x4a0 [ 748.697238][ T1152] ? __kthread_bind_mask+0xc0/0xc0 [ 748.702342][ T1152] ? __kthread_bind_mask+0xc0/0xc0 [ 748.707451][ T1152] ret_from_fork+0x1f/0x30 [ 749.816418][ T1152] Shutting down cpus with NMI [ 749.822625][ T1152] Kernel Offset: disabled [ 749.827064][ T1152] Rebooting in 86400 seconds..